5c163c11c2901ed5f62be010f5b07274be75da9f4328413c2b0288c5de2e8404727d5f27e1a2e1d1ad5048cb1ddcb3c7a30000ebb1bda09260b45a91fa2bcffc43aa933d26fd4da88961f20c92db77949f22fbe6a00a4c39d0198d49f8a32a66b689725f84a60ec9eeb5ca1bad240adcb6a2bc5fcf2a56cd39beb0e03cdfcecce55c947fbe4d5115286032248f69a42d8b86e828472ffca0907f8a61759237", 0xc0, 0x80000000}, {&(0x7f0000000280)="3ab9e1ded7c96deacbb1802ba753294f24fc12d16cef93363554d68651fbb354", 0x20, 0x9}], 0x42, &(0x7f0000000a40)={[{@mode={'mode', 0x3d, 0x5}}, {@huge_never={'huge=never', 0x3d, 'cgroup2\x00'}}, {@huge_within_size={'huge=within_size', 0x3d, 'cgroup2\x00'}}, {@mode={'mode', 0x3d, 0x48}}], [{@obj_user={'obj_user', 0x3d, ']'}}, {@uid_eq={'uid', 0x3d, r1}}, {@context={'context', 0x3d, 'user_u'}}]}) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000100)=""/106, 0x6a) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x1) lseek(r4, 0x0, 0x0) getdents64(r4, &(0x7f0000000400)=""/255, 0xff) 07:46:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500027a8100fd078b050200080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:46:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, 0xffffffffffffffff, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f00000001c0)) [ 2231.637061][ T6656] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2231.650366][ T6659] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2231.665791][T29417] usbhid 1-1:0.0: can't add hid device: -71 [ 2231.671766][T29417] usbhid: probe of 1-1:0.0 failed with error -71 07:46:15 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000100)=""/106, 0x6a) lseek(r2, 0x1, 0x3) getdents64(r2, &(0x7f0000000400)=""/255, 0xff) 07:46:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, 0xffffffffffffffff, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f00000001c0)) [ 2231.701145][T29417] usb 1-1: USB disconnect, device number 100 [ 2231.710203][ T6669] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2231.727457][ T6675] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2232.073651][T29417] usb 1-1: new high-speed USB device number 101 using dummy_hcd 07:46:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, 0xffffffffffffffff, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f00000001c0)) 07:46:16 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008102fd078b050200080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2232.353687][T29417] usb 1-1: device descriptor read/64, error 18 [ 2232.392067][ T6681] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:46:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, 0x0, 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f00000001c0)) [ 2232.407398][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2232.773698][T29417] usb 1-1: device descriptor read/64, error 18 [ 2233.043673][T29417] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 2233.313665][T29417] usb 1-1: device descriptor read/64, error 18 [ 2233.703701][T29417] usb 1-1: device descriptor read/64, error 18 [ 2233.823725][T29417] usb usb1-port1: attempt power cycle 07:46:18 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005000000050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) dup2(r4, r3) r5 = dup2(r2, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$P9_RLOPEN(r5, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x10, 0x2, 0x4}, 0xfffffff9}}, 0x18) ioctl$CHAR_RAW_BSZGET(r5, 0x80081270, &(0x7f0000000040)) [ 2234.533672][T29417] usb 1-1: new high-speed USB device number 103 using dummy_hcd 07:46:18 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x220000, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) utimensat(r0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000300)={{r1, r2/1000+60000}, {0x77359400}}, 0x100) lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x22) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000100)=""/106, 0x6a) lseek(r5, 0x0, 0x0) getdents64(r5, &(0x7f0000000400)=""/255, 0xff) 07:46:18 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec351d9f42cfe4829e0"}}, &(0x7f0000000080)=0x0) timer_gettime(r5, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) 07:46:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, &(0x7f00000001c0)) 07:46:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008103fd078b050200080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:46:18 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x200000000011, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x200000000011, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000400)={@remote, @multicast2, 0x0}, &(0x7f0000000440)=0xc) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="ada8d3dcd68f018a759f225e82cc951ca202db6342f4c9be86d549a33d405be55a3db3c5a0c992b63d277e66108a8bbc62a7412e7092d75ec3b5868d7909a380313a2861ee6782a297929467627352fcd56fe4dfbad4c7f0543f54e8bff8344da1daa6489baa08b190b614ccd94880936747116445171a81dc9cd92ee2b18935cad70d05bb9d055088f8316bb65a3f27f8a79da0321a943d0fe8355463400e3b14727910ffa3e2fa90b2989dd30e2247d145a744edf1a07e4583b51204dd895333a040b8927c0dd2ce9741cfcc712d2d91c0987c63fbced72e85a829fb33a9e1", @ANYBLOB="000427bd7000fcdbdf2517000000440001801400020067656e65766531000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYBLOB="1400020076657468315f766c616e00000000000034000180080001", @ANYRES32=r5, @ANYBLOB="140002006970366772657461703000000000000014000200766574683100"/40], 0xb4}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000040) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000000c0)={@private1, r5}, 0x14) r6 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000100)=""/106, 0x6a) lseek(r6, 0x0, 0x0) getdents64(r6, &(0x7f0000000400)=""/255, 0xff) 07:46:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, &(0x7f00000001c0)) 07:46:18 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f0000000500)={'syz1', "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"}, 0x1004) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000040)) r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000100)=""/106, 0x6a) lseek(r5, 0x0, 0x0) getdents64(r5, &(0x7f0000000400)=""/255, 0xff) [ 2234.603404][ T6697] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:46:18 executing program 4 (fault-call:10 fault-nth:0): mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x0) 07:46:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, &(0x7f00000001c0)) 07:46:18 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000100)=""/106, 0x6a) lseek(r2, 0x0, 0x0) getdents64(r2, &(0x7f0000000400)=""/255, 0xff) r3 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x12, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x0, &(0x7f0000000240), 0x0, 0x4) syz_io_uring_complete(r4) r5 = syz_io_uring_complete(r4) ioctl$TCSETXW(r5, 0x5435, &(0x7f0000000040)={0xf233, 0x8, [0x8001, 0xfff9, 0x9, 0x7, 0x3], 0x200}) 07:46:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008104fd078b050200080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2234.647231][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2234.657031][T29417] usb 1-1: device descriptor read/8, error -71 [ 2234.719433][ T6720] FAULT_INJECTION: forcing a failure. [ 2234.719433][ T6720] name failslab, interval 1, probability 0, space 0, times 0 [ 2234.733553][ T6720] CPU: 0 PID: 6720 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2234.743628][ T6720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2234.753716][ T6720] Call Trace: [ 2234.757006][ T6720] dump_stack+0x14a/0x1ce [ 2234.761337][ T6720] ? devkmsg_release+0x11c/0x11c [ 2234.766284][ T6720] ? show_regs_print_info+0x12/0x12 [ 2234.771488][ T6720] should_fail+0x6fb/0x860 [ 2234.775913][ T6720] ? setup_fault_attr+0x3d0/0x3d0 [ 2234.780954][ T6720] ? __kernel_write+0x340/0x340 [ 2234.785931][ T6720] ? getname_flags+0xb8/0x610 [ 2234.790595][ T6720] should_failslab+0x5/0x20 [ 2234.795146][ T6720] kmem_cache_alloc+0x36/0x260 [ 2234.799911][ T6720] ? __fsnotify_parent+0x310/0x310 [ 2234.805067][ T6720] getname_flags+0xb8/0x610 [ 2234.809552][ T6720] user_path_at_empty+0x28/0x50 [ 2234.814414][ T6720] path_setxattr+0xb0/0x240 [ 2234.818916][ T6720] ? fput_many+0x42/0x1a0 [ 2234.823270][ T6720] ? simple_xattr_list_add+0xf0/0xf0 [ 2234.828536][ T6720] ? __ia32_sys_read+0x80/0x80 [ 2234.833279][ T6720] __x64_sys_setxattr+0xb7/0xd0 [ 2234.838118][ T6720] do_syscall_64+0xcb/0x150 [ 2234.842627][ T6720] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2234.848537][ T6720] RIP: 0033:0x45d239 [ 2234.852490][ T6720] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2234.872069][ T6720] RSP: 002b:00007f9391efac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 2234.880473][ T6720] RAX: ffffffffffffffda RBX: 0000000000031500 RCX: 000000000045d239 [ 2234.888447][ T6720] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000140 [ 2234.896413][ T6720] RBP: 00007f9391efaca0 R08: 0000000000000000 R09: 0000000000000000 [ 2234.904386][ T6720] R10: 000000000000002b R11: 0000000000000246 R12: 0000000000000000 [ 2234.912346][ T6720] R13: 00007fff189c822f R14: 00007f9391efb9c0 R15: 000000000118cf4c [ 2235.023676][T29417] usb 1-1: device descriptor read/8, error -71 [ 2235.523644][T29417] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 2235.733760][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2235.744635][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2235.754422][T29417] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2235.763467][T29417] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2235.772293][T29417] usb 1-1: config 0 descriptor?? [ 2236.103682][T29417] usbhid 1-1:0.0: can't add hid device: -71 [ 2236.109668][T29417] usbhid: probe of 1-1:0.0 failed with error -71 [ 2236.117563][T29417] usb 1-1: USB disconnect, device number 104 [ 2236.573641][T29417] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 2236.933732][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2236.944631][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2236.955065][T29417] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2236.964460][T29417] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2236.973295][T29417] usb 1-1: config 0 descriptor?? [ 2237.654872][ T6705] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=525 sclass=netlink_route_socket pid=6705 comm=syz-executor.0 [ 2237.693697][T29417] usb 1-1: string descriptor 0 read error: -71 [ 2237.713774][T29417] uclogic 0003:5543:006E.055A: failed retrieving string descriptor #200: -71 [ 2237.722601][T29417] uclogic 0003:5543:006E.055A: failed retrieving pen parameters: -71 [ 2237.730728][T29417] uclogic 0003:5543:006E.055A: failed probing pen v2 parameters: -71 [ 2237.738847][T29417] uclogic 0003:5543:006E.055A: failed probing parameters: -71 [ 2237.746393][T29417] uclogic: probe of 0003:5543:006E.055A failed with error -71 [ 2237.755123][T29417] usb 1-1: USB disconnect, device number 105 [ 2238.433629][ T628] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 2238.793719][ T628] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2238.804663][ T628] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2238.814473][ T628] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2238.823510][ T628] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2238.832448][ T628] usb 1-1: config 0 descriptor?? 07:46:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008105fd078b050200080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:46:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)) 07:46:22 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0)='freezer.state\x00', 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000100)=""/106, 0x6a) lseek(r2, 0x0, 0x0) getdents64(r2, &(0x7f0000000400)=""/255, 0xff) 07:46:22 executing program 4 (fault-call:10 fault-nth:1): mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x0) 07:46:22 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec351d9f42cfe4829e0"}}, &(0x7f0000000080)=0x0) timer_gettime(r5, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) 07:46:22 executing program 0: r0 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$HIDIOCGSTRING(r4, 0x81044804, &(0x7f0000000840)={0x1000, "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"}) 07:46:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)) [ 2238.995596][ T6753] __nla_validate_parse: 2 callbacks suppressed [ 2238.995866][ T6753] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:46:22 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIOCLEX(r0, 0x5451) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000140)=""/99, 0x49) lseek(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) close(r5) getdents64(r2, &(0x7f0000000400)=""/255, 0xff) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000040)={0x2, 0x9, 0x44, 0x9}) 07:46:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)) [ 2239.060956][ T6749] FAULT_INJECTION: forcing a failure. [ 2239.060956][ T6749] name failslab, interval 1, probability 0, space 0, times 0 [ 2239.063705][ T628] usbhid 1-1:0.0: can't add hid device: -71 [ 2239.104350][ T6749] CPU: 1 PID: 6749 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2239.108875][ T628] usbhid: probe of 1-1:0.0 failed with error -71 [ 2239.114475][ T6749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2239.114479][ T6749] Call Trace: [ 2239.114499][ T6749] dump_stack+0x14a/0x1ce [ 2239.114509][ T6749] ? devkmsg_release+0x11c/0x11c [ 2239.114519][ T6749] ? avc_has_perm_noaudit+0x30c/0x400 [ 2239.114527][ T6749] ? show_regs_print_info+0x12/0x12 [ 2239.114538][ T6749] ? __rcu_read_lock+0x50/0x50 [ 2239.114548][ T6749] ? proc_pident_instantiate+0x71/0x2f0 [ 2239.114558][ T6749] should_fail+0x6fb/0x860 [ 2239.114567][ T6749] ? setup_fault_attr+0x3d0/0x3d0 [ 2239.114576][ T6749] ? avc_has_perm_noaudit+0x30c/0x400 [ 2239.114586][ T6749] ? avc_denied+0x1c0/0x1c0 [ 2239.114597][ T6749] ? __d_alloc+0x2a/0x6b0 [ 2239.114605][ T6749] should_failslab+0x5/0x20 [ 2239.114615][ T6749] kmem_cache_alloc+0x36/0x260 [ 2239.114625][ T6749] __d_alloc+0x2a/0x6b0 [ 2239.114635][ T6749] ? __rcu_read_lock+0x50/0x50 [ 2239.114644][ T6749] ? avc_has_perm_noaudit+0x30c/0x400 [ 2239.114660][ T6749] d_alloc_parallel+0xf3/0x1440 [ 2239.144837][ T628] usb 1-1: USB disconnect, device number 106 [ 2239.148912][ T6749] ? lockref_get_not_dead+0x1d6/0x340 [ 2239.148923][ T6749] ? __rcu_read_lock+0x50/0x50 [ 2239.148940][ T6749] ? __d_lookup_rcu+0x609/0x650 [ 2239.237287][ T6749] ? __legitimize_mnt+0x77/0x1d0 [ 2239.242496][ T6749] ? d_hash_and_lookup+0x1e0/0x1e0 [ 2239.247606][ T6749] ? unlazy_walk+0x385/0x610 07:46:22 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000100)=""/106, 0x6a) getdents64(r2, &(0x7f0000000400)=""/255, 0xff) [ 2239.252200][ T6749] ? lookup_fast+0x52f/0xfd0 [ 2239.256808][ T6749] __lookup_slow+0x169/0x490 [ 2239.261399][ T6749] ? lookup_one_len2+0x2d0/0x2d0 [ 2239.266340][ T6749] walk_component+0x3ee/0x970 [ 2239.271022][ T6749] ? follow_managed+0x950/0x950 [ 2239.275869][ T6749] ? path_init+0x1220/0x1220 [ 2239.280458][ T6749] ? path_init+0xab7/0x1220 [ 2239.284959][ T6749] path_lookupat+0x211/0xa60 [ 2239.289541][ T6749] ? filename_lookup+0x6e0/0x6e0 [ 2239.294472][ T6749] filename_lookup+0x254/0x6e0 [ 2239.299239][ T6749] ? hashlen_string+0x120/0x120 [ 2239.304086][ T6749] ? getname_flags+0x20d/0x610 [ 2239.308855][ T6749] path_setxattr+0xb0/0x240 [ 2239.313351][ T6749] ? fput_many+0x42/0x1a0 [ 2239.317711][ T6749] ? simple_xattr_list_add+0xf0/0xf0 [ 2239.322991][ T6749] ? __ia32_sys_read+0x80/0x80 [ 2239.327748][ T6749] __x64_sys_setxattr+0xb7/0xd0 [ 2239.332593][ T6749] do_syscall_64+0xcb/0x150 [ 2239.337090][ T6749] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2239.342971][ T6749] RIP: 0033:0x45d239 [ 2239.346858][ T6749] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2239.366454][ T6749] RSP: 002b:00007f9391efac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 2239.374859][ T6749] RAX: ffffffffffffffda RBX: 0000000000031500 RCX: 000000000045d239 [ 2239.382827][ T6749] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000140 [ 2239.390794][ T6749] RBP: 00007f9391efaca0 R08: 0000000000000000 R09: 0000000000000000 07:46:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, 0x0) 07:46:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008106fd078b050200080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2239.398759][ T6749] R10: 000000000000002b R11: 0000000000000246 R12: 0000000000000001 [ 2239.406725][ T6749] R13: 00007fff189c822f R14: 00007f9391efb9c0 R15: 000000000118cf4c 07:46:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, 0x0) [ 2239.454192][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2239.487696][ T6779] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:46:23 executing program 4 (fault-call:10 fault-nth:2): mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x0) 07:46:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, 0x0) 07:46:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008107fd078b050200080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2239.560706][ T6789] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2239.586620][ T6788] FAULT_INJECTION: forcing a failure. [ 2239.586620][ T6788] name failslab, interval 1, probability 0, space 0, times 0 [ 2239.613756][ T6788] CPU: 1 PID: 6788 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2239.623845][ T6788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2239.633905][ T6788] Call Trace: [ 2239.637204][ T6788] dump_stack+0x14a/0x1ce [ 2239.641664][ T6788] ? devkmsg_release+0x11c/0x11c [ 2239.646617][ T6788] ? show_regs_print_info+0x12/0x12 [ 2239.651822][ T6788] ? arch_stack_walk+0xb8/0x120 [ 2239.656670][ T6788] ? memset+0x1f/0x40 [ 2239.660651][ T6788] should_fail+0x6fb/0x860 [ 2239.665069][ T6788] ? setup_fault_attr+0x3d0/0x3d0 [ 2239.670095][ T6788] ? arch_stack_walk+0xb8/0x120 [ 2239.674947][ T6788] ? __rcu_read_lock+0x50/0x50 [ 2239.679714][ T6788] ? unwind_get_return_address_ptr+0x130/0x130 [ 2239.685870][ T6788] ? __d_alloc+0x2a/0x6b0 [ 2239.690198][ T6788] should_failslab+0x5/0x20 [ 2239.694694][ T6788] kmem_cache_alloc+0x36/0x260 [ 2239.699452][ T6788] __d_alloc+0x2a/0x6b0 [ 2239.703604][ T6788] d_alloc_parallel+0xf3/0x1440 [ 2239.708454][ T6788] ? avc_has_perm_noaudit+0x37d/0x400 [ 2239.713819][ T6788] ? avc_has_perm_noaudit+0x30c/0x400 [ 2239.719182][ T6788] ? avc_denied+0x1c0/0x1c0 [ 2239.723687][ T6788] ? d_hash_and_lookup+0x1e0/0x1e0 [ 2239.728801][ T6788] ? arch_stack_walk+0xd8/0x120 [ 2239.733654][ T6788] ? selinux_inode_permission+0x389/0x6c0 [ 2239.739375][ T6788] ? selinux_inode_permission+0x464/0x6c0 [ 2239.745097][ T6788] ? __rcu_read_lock+0x50/0x50 [ 2239.749860][ T6788] __lookup_slow+0x169/0x490 [ 2239.754448][ T6788] ? lookup_one_len2+0x2d0/0x2d0 [ 2239.759385][ T6788] lookup_one_len_unlocked+0x140/0x260 07:46:23 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec351d9f42cfe4829e0"}}, &(0x7f0000000080)=0x0) timer_gettime(r5, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) [ 2239.764838][ T6788] ? lookup_one_len+0x30/0x30 [ 2239.769516][ T6788] ? kmem_cache_alloc+0x1d5/0x260 [ 2239.774537][ T6788] ? __lookup_slow+0x169/0x490 [ 2239.779331][ T6788] ? walk_component+0x3ee/0x970 [ 2239.784186][ T6788] ? filename_lookup+0x254/0x6e0 [ 2239.789127][ T6788] ? path_setxattr+0xb0/0x240 [ 2239.793801][ T6788] ? __x64_sys_setxattr+0xb7/0xd0 [ 2239.798857][ T6788] ? do_syscall_64+0xcb/0x150 [ 2239.803551][ T6788] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2239.809626][ T6788] ovl_lookup_single+0x60/0x830 [ 2239.814480][ T6788] ovl_lookup_layer+0x422/0x510 [ 2239.819349][ T6788] ? ovl_lookup+0x1fd0/0x1fd0 [ 2239.824023][ T6788] ovl_lookup+0x4ec/0x1fd0 [ 2239.828433][ T6788] ? __rcu_read_lock+0x50/0x50 [ 2239.833196][ T6788] ? d_alloc_parallel+0x12e2/0x1440 [ 2239.838396][ T6788] ? ovl_path_next+0x270/0x270 [ 2239.843155][ T6788] ? lockref_get_not_dead+0x1d6/0x340 [ 2239.848527][ T6788] ? d_hash_and_lookup+0x1e0/0x1e0 [ 2239.853629][ T6788] ? unlazy_walk+0x385/0x610 [ 2239.858236][ T6788] ? lookup_fast+0x52f/0xfd0 [ 2239.862847][ T6788] __lookup_slow+0x312/0x490 [ 2239.867437][ T6788] ? lookup_one_len2+0x2d0/0x2d0 [ 2239.872384][ T6788] walk_component+0x3ee/0x970 [ 2239.877064][ T6788] ? follow_managed+0x950/0x950 [ 2239.881923][ T6788] ? path_init+0x1220/0x1220 [ 2239.886513][ T6788] ? path_init+0xab7/0x1220 [ 2239.891023][ T6788] path_lookupat+0x211/0xa60 [ 2239.895623][ T6788] ? filename_lookup+0x6e0/0x6e0 [ 2239.900589][ T6788] filename_lookup+0x254/0x6e0 [ 2239.905360][ T6788] ? hashlen_string+0x120/0x120 [ 2239.910237][ T6788] ? getname_flags+0x20d/0x610 [ 2239.915044][ T6788] path_setxattr+0xb0/0x240 [ 2239.919575][ T6788] ? fput_many+0x42/0x1a0 [ 2239.923906][ T6788] ? simple_xattr_list_add+0xf0/0xf0 [ 2239.929201][ T6788] ? __ia32_sys_read+0x80/0x80 [ 2239.933972][ T6788] __x64_sys_setxattr+0xb7/0xd0 [ 2239.938865][ T6788] do_syscall_64+0xcb/0x150 [ 2239.943402][ T6788] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2239.949322][ T6788] RIP: 0033:0x45d239 [ 2239.953224][ T6788] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2239.972829][ T6788] RSP: 002b:00007f9391efac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 2239.981239][ T6788] RAX: ffffffffffffffda RBX: 0000000000031500 RCX: 000000000045d239 [ 2239.989233][ T6788] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000140 [ 2239.997199][ T6788] RBP: 00007f9391efaca0 R08: 0000000000000000 R09: 0000000000000000 [ 2240.005163][ T6788] R10: 000000000000002b R11: 0000000000000246 R12: 0000000000000002 [ 2240.013157][ T6788] R13: 00007fff189c822f R14: 00007f9391efb9c0 R15: 000000000118cf4c [ 2240.083657][T29417] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 2240.363623][T29417] usb 1-1: device descriptor read/64, error 18 [ 2240.753670][T29417] usb 1-1: device descriptor read/64, error 18 [ 2241.023722][T29417] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 2241.313686][T29417] usb 1-1: device descriptor read/64, error 18 [ 2241.703642][T29417] usb 1-1: device descriptor read/64, error 18 [ 2241.823715][T29417] usb usb1-port1: attempt power cycle 07:46:25 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000100)=""/106, 0x6a) lseek(r2, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0xffffffd8) getpeername(r3, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000040)=0x80) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r5, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8805}, 0x41) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) getdents64(r2, &(0x7f0000000400)=""/255, 0xff) 07:46:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)) 07:46:25 executing program 4 (fault-call:10 fault-nth:3): mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x0) 07:46:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008108fd078b050200080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:46:25 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec351d9f42cfe4829e0"}}, &(0x7f0000000080)=0x0) timer_gettime(r5, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) 07:46:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xe) pipe(&(0x7f0000000300)={0xffffffffffffffff}) mknodat(r1, &(0x7f0000000340)='./file0\x00', 0x400, 0x8) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000400)={@remote, @multicast2, 0x0}, &(0x7f0000000440)=0xc) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="ada8d3dcd68f018a759f225e82cc951ca202db6342f4c9be86d549a33d405be55a3db3c5a0c992b63d277e66108a8bbc62a7412e7092d75ec3b5868d7909a380313a2861ee6782a297929467627352fcd56fe4dfbad4c7f0543f54e8bff8344da1daa6489baa08b190b614ccd94880936747116445171a81dc9cd92ee2b18935cad70d05bb9d055088f8316bb65a3f27f8a79da0321a943d0fe8355463400e3b14727910ffa3e2fa90b2989dd30e2247d145a744edf1a07e4583b51204dd895333a040b8927c0dd2ce9741cfcc712d2d91c0987c63fbced72e85a829fb33a9e1", @ANYBLOB="000427bd7000fcdbdf2517000000440001801400020067656e65766531000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYBLOB="1400020076657468315f766c616e00000000000034000180080001", @ANYRES32=r2, @ANYBLOB="140002006970366772657461703000000000000014000200766574683100"/40], 0xb4}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000040) pipe(&(0x7f0000000300)={0xffffffffffffffff}) mknodat(r3, &(0x7f0000000340)='./file0\x00', 0x400, 0x8) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000400)={@remote, @multicast2, 0x0}, &(0x7f0000000440)=0xc) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="ada8d3dcd68f018a759f225e82cc951ca202db6342f4c9be86d549a33d405be55a3db3c5a0c992b63d277e66108a8bbc62a7412e7092d75ec3b5868d7909a380313a2861ee6782a297929467627352fcd56fe4dfbad4c7f0543f54e8bff8344da1daa6489baa08b190b614ccd94880936747116445171a81dc9cd92ee2b18935cad70d05bb9d055088f8316bb65a3f27f8a79da0321a943d0fe8355463400e3b14727910ffa3e2fa90b2989dd30e2247d145a744edf1a07e4583b51204dd895333a040b8927c0dd2ce9741cfcc712d2d91c0987c63fbced72e85a829fb33a9e1", @ANYBLOB="000427bd7000fcdbdf2517000000440001801400020067656e65766531000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYBLOB="1400020076657468315f766c616e00000000000034000180080001", @ANYRES32=r4, @ANYBLOB="140002006970366772657461703000000000000014000200766574683100"/40], 0xb4}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000040) sendmmsg$inet(r0, &(0x7f0000005dc0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="63b98b1b2bcbe3482e9dd74aa2a9d5f339a91b845bf4a4aacd9d245023d631ee3ae7708136e2c16518acd6b739bdfd3a62fd82b8259957d1fed58b3f259ae8654bc306af1abc9458de9da5db94ec9deb67ee28354e7b56d8714609eff19643edf128", 0x62}], 0x1, &(0x7f0000000180)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x18}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000200)="ee8cefef90ad8426a8eb0ad72dea32c0450e868b96297851d752cc44ba4de32a442a6672cf7a5c9eacc9a826c7b9091f58b437e956290db11da3f269e878acb133cb3b79e9afbe26112051a4b02abb3c233d34199b9dad8f711c48364a088bad1b0127c7d700f6ca5a348ba1af8f5af9d721571c2c2548680c1a8faae1ed6edf36756add8968b1211b83e1ceaa2a", 0x8e}, {&(0x7f00000002c0)="f52031e0ccd27845d7892e02facd1f2296ec3aae743ad2dbb5c060680bbc272178ff23450976303865527aeb6940afedbf3875edd8339f7341930076fedc7f40ba9123123abde9104ea30d09cecdb066b9bab7435b832fc256ad10fd79fdbd37224cb39fc1abc87d5c220d29020c381c36ee67dd68603567000d9759da5825b78158d82a9f5710e82513df4acd525f25d23b5a3be7914321be7561dced8c662d91893189dce977825a14c0a0f539d646850e", 0xb2}, {&(0x7f0000000380)="c8e312835ddb8c9dce495799a9c505066403f6c8952893969af278e82a41a6bfc50ad493f7e1c460417a57c08aa3c5812d973b39a6550cbb816bd18d4254d15ff73e8f6704736c0a5f6c43d2d08c030bb9f56d0f5e3db9d3a4c4a767d0424d93472331422ac0be37fe1ccc99c84784682c9c9dadb0f5f4c660f1055ed7f8c56e9ed0931302e3eda7c391f781453a9cab7c2f0c9e5f2792ebdcf9996b8061d1fc9d20a39c6aced8ec17fc4d3d045c61194fbcd9ddda0805a123ca5a5c72708ad0afe6b0eddd58efea6825e5f2ee2825dba3c233eab83230b0ab57fb42c17e721305a3d4eed42d9cdf2531fdcaaecf47d8d2", 0xf1}, {&(0x7f0000000480)="f3c4dd33c6feac37817ac8cccadb9f22d7a4999edfab2df0a909a6d634c838f61ea3c1fd2bbdd647883a72892d0cee019fc312c657e001ff73c06a1e109c5da0d8b12fa78a86a4bd325a", 0x4a}, {&(0x7f0000000500)="da61e45f6e0e16dbd91f0876987ede1114e182d1edec19bc93387e4bba3bc132", 0x20}, {&(0x7f0000000840)="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", 0x1000}], 0x6, &(0x7f00000005c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xe12c}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x76}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4}, @end]}}}], 0x90}}, {{&(0x7f0000000680)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000006c0)="e3fd45680b58c2c5e7d800bf203859ede3f626de923590ebd49fe71ed939b8", 0x1f}, {&(0x7f0000000700)="ebeea6b349dc7491cb8ac74b99fb6dcc2a20f9a37ee74bff3cdb83812f173158ba8d3ddba1e6b18de17cf11d3f0a68228fc76aa93f58d903d7d5c98e4f02690a36ee1ea20542371db7c022270a75e78aeeb811224d7a7e0e65f41b62b306936b83ea524f8976e0d91a185fc2a7e4119e14f1fecfee3143c67311787c3e6cd5b1e1a7c81a80cc763cbab0b0c194b2d3bd3f9d8e3e47605d52c8145011ea8ca0", 0x9f}], 0x2}}, {{&(0x7f0000001840)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000001880)="4d4b8133187b231c7418fae963f6c728e195535762470ef284991ad1f5136c0ce8b60cabbb90c2769bf0ac944b84c1ba8b5983f1a62443b438d95d113b7002de28796c6c3dee7f51ca804525ae13830d456e76afd19bf8d01943f29cda20c34bdf29b35427696e10cc283512b2e68a4c8640dc6d9203364d2fe18c595433783f9eaa47d09e047c3d2833316d", 0x8c}, {&(0x7f0000001940)="1f7a1cd828a70e1ca926fde1d276694d17a0d62edaedab97761597418d87b47359c441796ad2452ddfe3189bcec4481a9c25f678e3f842ab17ed", 0x3a}, {&(0x7f0000001980)="c1d404ab3b8794087a5774cacbab63e25b7f5f70b939f7abe44dcece716646030f0f27cd5917b16a80f15e07d156c3778352c09062a57e363dc9c7b8557f26d1754c8b7da1efd4a12a4ef3c1afec217ead6d8b22a3bd0763cfcca7851d20440d35fe622d67f579f829a6719793edbe1b07529cda2ba31104fe6ee4acc233f2c63edb086523814403710b5c8747c8a7a6ea2b383a65ef0b501bac2f71213acefa4e8e79fb626e21ae929014e6cc60d0843a05e941fc87a2e84aca10a58e21006f579a9c849861702ea89fc39d76812115", 0xd0}, {&(0x7f0000001a80)="cc540b08adc88f2df6e3de55f5716257f4cbeab3a26cb8365ec1ae92af59b2d46dfc4228c4690e20b0601230cc277fd55778c6dc2a70d9be9d342ca7a7", 0x3d}, {&(0x7f0000001ac0)="6e547bdf6d0b512c3d581badcded926d7e12be7c2fc99c0ef1f57cdc2d8dfec839f0a7913078e5e57a6a855d56e3073d13e0eb1c5f0f57e1277bfd64376f893e8a4c902018689e5f6c3dee58f62f8f14543d238a7d9f8a7c5747b1d317cb759bf16caf55d74af2bbc2a87e7a5e0109b8bf56365d2d2c1dc32b823872279d6a6855b1a4b45d7f9527d0a042b10b9cb15419d0b8466d972a9eb40a3b", 0x9b}, {&(0x7f0000001b80)="ba9a61b16e19dd3f5507afd679f4", 0xe}, {&(0x7f0000001bc0)="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", 0xfb}, {&(0x7f0000001cc0)="c270e802572b674383b1ed9a9d9594fc6ea5d6ea18ac8378b7f139417c71b27118e8c09c4642083fb979af3856c56291fb6022bb72471bd6867831818108d0c9be", 0x41}], 0x8, &(0x7f0000001dc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2d}}], 0x18}}, {{&(0x7f0000001e00)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000005380)=[{&(0x7f0000001e40)="1f9c2457d572ee3f1af28a8d69f37bfe1243fac42092da6b16a91edf31902f5e868e2e74f907e3052210bfd3d11be66316b76e55cfa32f7b73965625dcc3d27ca075541c28e6833fee6058a3fb6c60bf77a7e289f4f14da4ed9c1ac246c46ebe45e30d128c0963990bd95f4e6a9abb42e2f02b339c9a4d91bbae23651275c3d905eed47a0681347bf2d81b50150fe07972b2b23499669fae7e0cdf94c614b8f0ee8c7c111b6154bba0b797f76ea86614b65e6155b1ac02b2363e73961917f4950526642c", 0xc4}, {&(0x7f0000001f40)="b0957a1cbb79ef994fdc803e7140faa087d4e149507a08d0fe434f79f274b9b5b200252c3cbc8dccde8459f0e27ebf1c6c2672cf970e577384f609f3bf7a5d98cf870522c5d7a4cf3b1e9861225ca3200b670b81a84910c3a3e669c6358fdb6c232c76f058b5acc0459434c54cf338e3efe0ea1346cb92607b4615131b2e7e5ff71bcfe6e8114848d21c5fe956dcbe61b22d05482a09943666ede8bc6db79878c9cce8ef54fc33e8a4f9eff1625325733efa1dfce88573fe9e433a7ca69daefec3378078b66a669762d6a951ded4d596d63661a7df0ae235eced", 0xda}, {&(0x7f0000002040)="1432010f8be737f63597c82e80ed5a0946ebd0202af8a55585238c8e06f9536a72ca82cc5b30cc8c020f15a5579f42c9028d11d1a46b93c76483d80d77c48a83f887da4cfb2bb806123b674926174750ca90cfeff2b0e1018b05cf8f4f6d5b470ee502a01e140c6c2ca253e12accf40c6bfed54fc0c1469f378915e724de34a76564e2da851744d76daca2be030925397daab2f39b5df7716186757ed3c5436a8b21094e0fa07f759d478daafa6b10f66bf178e5d062bb587b6d0d686f41b7bfc8cafe7b", 0xc4}, {&(0x7f0000002140)="b11d859249a9e7addd0091048f72ebc820e42c926f322864ea6a362a954fbaf1ce036bd61555b1904b4acc2972598da5547a3de238d82ac579c4581584378e04a24b6aa2ad93d03020b561d6efaba5a97dbba3560d118effe613a984dbf98a470ff040656e7e322df004c05c3e7b7f96de02c6e81a942c1a484b370803a9bfbca8d744fc4abf2af823e997365858dabf7f1aca", 0x93}, {&(0x7f0000002200)="a22962b11f4c6fa789a74faaf21a86edb1c20df4109738df92aa2684203858088ef9158245ae6bc9dd7dc08fd1d8f268625075a205ecb7bbcf68bfe03eaae50e7dfc99f2325db218c79ab4ff2d65fad7c4a8c229a88e30c0df388ecc10cb83b4ee2a8a5403c000ebf22892fc4aa92b00d0641362e9d66586265fddc2e02879b2701d3db96db5300562447ecca47227a3f87458224d250a806200bc6064e71d2a68cdbfcaa9c345423f76b79dc20fff98c181a238250a428a7fb90e3782d18f96503de8b82d2ba3d79afaa6b1a4484ffd02f0530c86e77ff9f672cd83efdea9a9fbd8ca9e028394bef33600459928bfc3e50bee1ee10d3e65519fc68b0c31eaf1ebee0c55eba7c24090d1f416e2f9ac4330ac6f4d823f76684cdf2c7336802180401b35d777dcf369ab1eac3599c690f84a58fba3941653d65da5e24467de4fb6f2e548fc7c52e7e274d57afa4788d1fd55cdc62ac1224f63f9c825bacebcb567330cb6a82c48ac44cd4c653120f2f54fa9fa9589295381c23292601b1232cd0a3578c97745c35b7dcafecd89659f2c82d7a99ae76b60508efdd4a505422345ede76200792c9b35abffd89d04ed0fe1883b5f38b0438f93a8fd97f124aa2a7e414f80496d36a1b0fa1e31d693cacb7a76432d3e79bcbc9e8ea0bbded344137b7761ed5b89371b3639ebc476385a04345b39462397c875dd226448b13e28d200e9895fcf46346545cd6af4eb312ebac4ba220ba36e2cda5267ea0d8d986df00a3a4317bf19d25e3801af5ccf6dd9a5fe53ad311ff534b55873ff8920721eb45bbd1293a333ab97c01293067c2740b19e7aae16cfe033d5abc2a2f3f045269d5e7426b87fe57631c9d90a497317d455a966294000c74065273eeef3d0866a78fa8448bf7ddb38941d5f3ff22131f3059b2f5aaa1acf64fc7f2be58ade0c344aaea97e719bcd451e781828b1d3d36a3cfa0a95a98ca8075d5c14e48ea5aed071c4cfb3c6b33c71447a86d08f943ccdd62b4fa562e233439c27d75afcf4b7bc437eea9381e6ab2fecc200d31e8783456bb773ecb910a8af429b9939a825db20772f9d28f911cc5b0eb71c981be5744d276ac26a2b98f55177f0c486782c6d03bd5014f80ac3d199cfb2ed6190bf31e0bcee0d2b9623460051572e747de0bf4c824ff92c78d02279c8744baa00cfba9bdd7840c800b28440eafd12b25a9188582ba38968bb6cba87f5153b93970ad33ed3e18f2196060124ed9916b837bda998f5d5ea825e1878a433cfd25c9b286a4dfa7145dc446211f28b6b7a042136881043bb8d15a3a796214bdff3005f84269506480477459b5def958172e14d6ba28f1fa32e164b51b9f1b3a129604abfc5a1c5c06dca494fdd8ff306ac1830aaa76e9ae060c76eda28f69f19f2d528855957e8c655942e69520c7f7abfd57823caa68b589ed6ed333c44e5ed9b71d7ac12ea01006bfd61a9555befb6b4b4893f909ecc68b942b498ce9601710ef65d0cf6387d34944236847f8d385e53a8406403455c3450fa86205a62378b42f2eab63ac380dd89404f0f989756ead9935b3ef78c9cc701a09846e6ea86b767069d8bbf431ce6c5940b299895da5dff49203077c4490e25a6e1afd9605dee497388a4964f9749821ca1544c2efca7cf5b7d0e461ea8b883d87f770da9b39efe808048773aaebd6aa4e484db6bcd0e82e7f1a5abc4f37b6ebcf62a128fb96e8cbc546540f73986cd6e1713911e18f1901d31d0293e9b4a092d47258772ac52459e3a619eac0aca3b0be13d3e2475cbff7db435baa3059244c730fbae718497a270a84b8e06a196ee4763963a99a0f9d22916867c84aed0b431b19d1b99d575874349c50d67ca1c0e1b25e7dc6bbed8cb0aea15c83ab768c81528e2b36b4f38317130c3aa6ffccf210a0b2fd09cfed1c5ea17c6d6b2f31e0682521c6aa74e7382f479cf8c1ff65f322d388e975eda4a3edf330a8f7d9331ded057dcc36748c8bf9009521134b25639bbc927b02bb78b63c65347f0189e9076faecc4cd14a24751d02b38aa2497e980838b04b8f8a6c550581209a1a3dd382525109f0bd08108a219f1c5e37fa5839c05c3f84f0028d027c379fefd36cc24082b878fb7c5edea4e2c469b1e24afe1274e8f581713de275667d5c271e26898dfdeb3785f890469cb5e01dbcac0eb09098a638deb43f2f779f0dc4adbaea9cfac39981c87ed3bca5a1de9db2742451c9bfd808e2d0e9f818eb7eef134a8472be37cf54dde7c85b1aef490436cb0010cfcf67e7bee33e60f0da995fa6a35c79aa50e3d4773b58a99429c972ab0d7b35f1b672ba777595d02280c340a6e5988b0a1e6c6072599cfe9419cec2a430cb128731555d76afbc69b71fff50c976d690351c0dc2489e8b6fa7e4d7c8e0b71f627d1c60a845b24ff7cdbad0e22c447eb998919ca72ee3eaf0dccede4d24cbd89a3cc314fa834e62d8052c24a69892c8dca297db49c58acef7243af680f4d94804f40a97fd3beb46cbc46cc3b8dbac6dc32b9a6c69d02cab1dda7d6b04dfd209fd23cc3628ee42c988651bd03ad9fbe3c5ac6ffb4751ca5b27fb3cd561c421434763ec44d2a3a9fdfcce88bed131ac38c4f49e2220801d960e520c8198d9e3e728237c5ba33725447842e63294be7724246d42cf22cec73cb897fb6f524010bccb5e108a477e114ae5dc3582313af5fa86790cc0546414dcfe44671d24271397596cbc7cea372e3729bf32bb1b464fa75793d9cf70843ba34f70da1c39f7b943c8a0d5cefacc087b97be596145240ff90fca923e2742caa978170557c9b41bba61dc6c1a762d0c889eeedfff8734fe0ef6874240e13107daeec115b155b9e3c83c786f3a565c71038523897f65928eb25f64a2c6e4de861fbbe8c7104e6b152af5db645ab7e95a88f0235b9e051f0db58c5f84c636e5f65353aa04382e72c4441d86089f804764575d9432dcb54530e393ca2c55404ef288a2ef92e270c37c9a4b39dd83b3a1bdf00b64df68b8b6f06d65261ea3e1abd76bd13e3303ef30cd37c4cd037bade70df6a44795c01d0d2abdb78ef7a252c651ddf097aad344a55f47b4364115b3255e0ce5d9c356306eab9645912c115ac1ff895218f846f1e6566077170bb17e63b29c942a0a39c2ed5432ee2994aa463614b21fb187cc1c42af35eab64d5cb59ce8aadc08da55febf5c96b48038dc8ccfca0b1cb8bd9293c800108627dc9fc780fd6181fec0667adc8073fd48763172f4d7d0ab7a0b52502cb1e13f7bc54b1ca71e7ddd76c9b94c92e9ceb397780b799bd45b65cef1a8c2c0f797f25f748f598548ce687fdeaac0c14b90f6a56152550b165b7b889ac3d19e8d35e79e6229912b85ce4d1fa35bbe1d214fb5e5a63763d04cdbca88dfd4389ab0fd91316c479224655fd0ed0e7deddb1482d424b85add783235f1e12cf7943e50721193d3da45fcb44e9c79468c04e0ee243c52687195c0cb5c6ef26b5c201455d3c9b1ecdf58700677cc484b9cf5691a8acdc9d62e8045906b349f996c79d39a1f910eb3ec2857810a8e5543b8f7024d25aee77691c0ca69d6ff3315fe7d1246a603710d2303bb06e3ba5f63c8e8e37f57a45fe75d23f3344ce26c1b0a5e34105924d31770fd8b706f9f04eb40866015b1bbc1b9fc9de7409694e2ce937d684d5b9b2fa1ee387624733a35be88edb0dfee2f34a055b06150379f8e312464a489781955efb7aec60eab8f04f7f0565040ecaa8a6546f8273b41b7142fe1b6d348271b2a305e20be694cff2626d4f346404d4d15f7932d8887c8f9d5153ce0a22f2218ecc4489231cf8fca24cdd23cc521e43c4df924194875573e3f6bb74f717b395e09e61c1353c0d6b13e5b24132071caf9e865de7b2fdbe7a60f5c3acdb290ef47c13584059e3c44b2ca6fa669a48141ae88a106a27a3571922928886e5649f16bf00d29b71ed75fb0b299566d28b89c373f8257f50344690cb29655bf4f43f66ea01155b0d69fc866fc95dde7a2770e82b98d5db7024d801116c0f7932595f067f92e6f8976821c9f7f38cd42ca0f01dbd3fc3ebdf271312be7d85250edc15605fbd467e6bdd2e2366fe4abf0e52886c08f8762bc76a6ba158a57581d184180587fd581ee16a518c870dd7c849091fbbe9325b9fa0519cf0bf0dee9a5faee32acb19551187656f038c88fe5fe2c4315d77a3f1943a89d4b1854e89f60ca0b0982ae678a4faf16c276d18b19d460b1312f044149fc602f8b5f911283bed41e02fc66200802e08fbcd4b47d3a05e2357514001c02fc37c42e25dfc1f3d4ba16a2e57262f70366c8d1fad8a52d794c7a8643c47192ea827b46422c1ec96ac2fc824e240eeac80b7b10b1484f9bced9ca01b044dea19b5141c46800590fb171b2080d46a5a5a5381ccbe564cfc809d04b44e7ee8aff39f35d715fb56db5ef89600282e9070ff9c4e63b909fb0b135d04575b5fd58f86b1afab54e416a32e0114e4d59d80084fe2ce635bf00daddb822c9fd52026c63693ead39fb97044ad4d1ec3d1b60716e201e785404ca79bcaa75e90d774d1755c268ade67e79fce49a87a45c7bc731ddef42541c4010554eefb1b6b593f7f55fb18af0dde696c331ed1c87dc5b6f52720855bd2eb1766615d9ff116b28f3f94d809aa98981e9e16ddc25144e51d848be44cbc79e52e3b20ec9069e52e0de967c4f88cdf701569fe4aef475d89039d094f6ab592c84ad4021e9dc8df66ab3f28a1aa3e321100d731d4e6fb911d2f5d8d44fd796049ec7a6b2a442c36090be4d581fdab9aef50dfd2e2e53d1a744e508420e11530e23f90bdadea825a7321530fc033e3de2fe36e5700089c6b425d74319defae361a1d42f41e5571fc106d725b7973bbcf74c70086df35e2331f67071f5e9fb5b3ca924645714d3d3c80117af3f50a15f944bdd2cdaaa7bcbfef94bb4fe03955ae4565315fdd9b30e64ec0329ee54860c79a6a768725731321f257979e3765693b95eb40347d28f18466f81194c771214c91f80601c00b831ce2cce5511c3e78ae24211dfef8a2f4afbc880f19c66d206dff34b8322d8d40020f15858e62b664b34c88c7074556035a4dcd173ccf52636a8cd9730fef607ef8a5c8abc056a9a50b7d58d3788ff83d4cd21fef8c51c1405cbd460bb7b6ccae5a8d2f3b550bed8acb4879a3b667a98da256bc687f2c47957a52a42b2669ddb2a73db30f008f78e4eef3b3dc2b449da8b8708f478ee6b20cf4b61fae3e0c3a76f2d07bc8cdaffa3f7926c1c48023e4e930b10816fbbe9376cbaf216ea43e084d656a10817990436ece023fc9e52aafff181ec523410090e5a9925b096060f17f0683cec88281b3abbbb7a717520a5213e942181dce31213808f50530ee819cebc23a6e0ef496aff661983994d1a81f9b5a90b3424178a61de095c4f066a673e8bb6b2fa6ed0eebafe56f0589a72d48f89a418f6b80a712c3421db9bce6d90ed4c91043f537c22b244e82f33bd0aee1763188e55d84c901413e2a1c6eb13be03c236957aad4d80d3b258bf866f84720b1dd677797004d98ccfbe0b278eea5af0616a5f4c5b7eae1da5ec426a649c432bd18527ddbb0aaceaaf6efcae4b011402ec6e7cd1d8c8b601256e0308bd98238707ffdb55049cb5b952eca0593a66660ff5e7e028d37dcd4c4580a3fde1c8fc062c087be1f42ad73219db17197c9edc71a417592f6c031aec700c6d54f28b6d2ee9074f52a41f53c832083b72df787ec85325049387c6de7d5039b3b4ba13bbfd96bd3b562", 0x1000}, {&(0x7f0000003200)="a83a1f6b063e7865de8bee4c02237bcd556246c723ce01d759367b9ece8b366eb2494fe58dae1a4169eaf1d92da2e6114e582e5eed3a0eca923bc221d7bca9e477b64789f4fcdb31fd58fd6d3679c242af6660471a67542f8ff9ab79707142f97b3b5a432a93858822c0f3ed06fab6b24b1984a7b9be44a90954e4bc31950a4e4c6637373696a9432b63e1fe3d325950da284fc34374a94f8c01e5d7596e4dccbdcf9cece842a53193feaf", 0xab}, {&(0x7f00000032c0)="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", 0x1000}, {&(0x7f00000042c0)="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", 0x1000}, {&(0x7f00000052c0)="1529c993703cccda95dfdd400992ca82268464fa1a589628f718a7eb11d94c1935bd09a0a8f68d256d9a814c0c1339fb8c006244ff5045f80efa1df506e7633729dd40f87e2ce4788bfa116d153b2fe1b1f188454b97f925ddd82eb1aed499dbf463bd55a7b83033f0628d37add9893533c1c7f3960c976e3932731ad53b429aaa8ba8660a598ee2d5be3cb0a93c30bea3fdd4eb61e8547333f079ed2ca189d9f1f99599", 0xa4}], 0x9, &(0x7f0000005440)}}, {{&(0x7f0000005480)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000056c0)=[{&(0x7f00000054c0)="2e0c8a2e73d6497d08163eb313ff57b141e7bd5da9d25cd215460f", 0x1b}, {&(0x7f0000005500)="772f60dcdae121", 0x7}, {&(0x7f0000005540)="2cad1e757f1ddb4d46cf205889f3122d9c3ac1e11712b5a7f093503e0839b16f4a9bd9100812fcf81ed79c8c595dc05697e898626c54c7bfe5b17503cc68ee147d258ad29dfd077c39b8e2fd84", 0x4d}, {&(0x7f00000055c0)="76520e3d5ff27fc9baeef7adfc68c970995cae3fa8815ce92163e0d4a6994f73ab80c485d4bcdead9e3a9cdb067e328c19c936eb88c5fd0e9e03c28fab84cd30e753f559da673fef79ba52e330536363064b04714250beac02cb98aa74347d4ff5889ba50137947507a0f0ced3b3f69f502bf0d1b6d2f62c41ec70f5c6ea68889e1da2bf88c4c76a62f3a2d7b7f817ecf661b6d8d4de758f8c92414bf1bafe15640c49818406bb7de108f5fb0e1c576ae62ca75f30b214", 0xb7}, {&(0x7f0000005680)="45a9e3bae8f3ccc62f2535c0bd65f05df0ab9b1b00", 0x15}], 0x5}}, {{&(0x7f0000005740)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000005b00)=[{&(0x7f0000005780)="38bb0332cc34f43d426ddfe81f2b334a1f49c0a9c40d17c45b858da9e4ae7499fd61f53a391d3292933f4b27c05fbace68227ee2a47665a21b5a25e5", 0x3c}, {&(0x7f00000057c0)="75b43a8e13f2d203f8c608c9f7b05d175e796f264f95ed4f672c1b7a78cf7bb94787c5569cefba4f83df56a5c6fbda379696a67c0088b2627b0f367d9f27ec647c5f779d01d805d387500ff2fad993c76a3b65b22cb279e6fab6c15a7f2cebe041c932cf32dce15afc1d8d2566c9492478983d217911057cde6c7f9a96e40565eea5f0752c94779fc7748127facc73be0c8f3a58ffb6d529eb11140bc4deb437bec6949ba5d0a4331b13fd139d", 0xad}, {&(0x7f0000005880)="d0e68a7da6b728bacfaa57275e13ea62ccbf04a6d229c282058a204f3cdd495875ba", 0x22}, {&(0x7f00000058c0)="e5e0334cee83559d45c9fe901d348fcf72ea148ff3bb62688a056f58e62a0f13b0b83b0ddfda0e6b804952cdfc045d3fc3bb881a490ced7524ae475ee4ffd66723", 0x41}, {&(0x7f0000005940)}, {&(0x7f0000005980)="66830abbd7b41158bfb10142172712cdef7c9be4a75b04ebe06e8db757ff190e87c47fe8274e0df98b3de8a5e245ca24744c24542dedf9d34c4180862f707272d2cf802d16dee6e576b28635c5a754fbf65b326913cde2fb051d64a6580abb90e8f675cdf1a97f9016d2ec6cbccee63aec791458c852ac3c7a9dd6c85e74774dc0a540a83c5b84c2f4a5b80dbe6118b5fc93b1682e5e17bf8b768776294755e98393101f8a5884a81f6540ec82390c4ac936cae379b8b6655caafea1f79517b39087ce03578b1e4c1bc26ae6efcad08c4b9854e655fa0461362fa29c294d1ed1", 0xe0}, {&(0x7f0000005a80)="c0584cb3f03f39e679f872cf37ff171b64537635608ade4f2a7a5dfabac3f750ea7f19e831a29b1837266dd1cdff91b754db2074bb1cccc9c59d9cb5bbb19ef034e209503e25fea0204b964b40cfe67e4e504accef9d01a38ac13d6aafca82f99909687c0dc61e45794c383a6923", 0x6e}], 0x7, &(0x7f0000005b80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast2, @private=0xa010102}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@generic={0x82, 0x10, "141afa13e37e170c67adc4e18e18"}, @generic={0x83, 0x12, "3eca7fdea468645cd3bb58af5ebe4be9"}]}}}], 0x58}}, {{&(0x7f0000005c00)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000005d40)=[{&(0x7f0000005c40)="f753dcda33d163135134d2c8553a722c270a4903f1504c6f3192cd4e86a8a4bd0c2af432d8feaa29101c26b351e4bb1c4094c9965907f7092e29fe92d1cbec12585af6dd664aec", 0x47}, {&(0x7f0000005cc0)="d47f0fd1490514a010f70febfdeddb067ea19de4533aa3e936d48b1c4c22f3f882d4b753d9eefe6221b4b544a65ea6a91edb53e4f930c34f24e4ea5a86afaa183fe8300950171a2460c442fa3625c1054f7055dc0547c4bd7061", 0x5a}], 0x2, &(0x7f0000005d80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast1, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x38}}], 0x8, 0x8800) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r5) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005000000050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) 07:46:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)) [ 2242.016162][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2242.030816][ T6815] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2242.053408][ T6805] FAULT_INJECTION: forcing a failure. [ 2242.053408][ T6805] name failslab, interval 1, probability 0, space 0, times 0 07:46:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)) 07:46:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)) [ 2242.071099][ T6805] CPU: 1 PID: 6805 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2242.081171][ T6805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2242.091221][ T6805] Call Trace: [ 2242.094513][ T6805] dump_stack+0x14a/0x1ce [ 2242.098837][ T6805] ? devkmsg_release+0x11c/0x11c [ 2242.103774][ T6805] ? show_regs_print_info+0x12/0x12 [ 2242.108971][ T6805] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2242.115032][ T6805] should_fail+0x6fb/0x860 07:46:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)) 07:46:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)) [ 2242.119446][ T6805] ? setup_fault_attr+0x3d0/0x3d0 [ 2242.124471][ T6805] ? kcalloc+0x2b/0x50 [ 2242.128539][ T6805] should_failslab+0x5/0x20 [ 2242.133038][ T6805] __kmalloc+0x5f/0x2d0 [ 2242.137191][ T6805] kcalloc+0x2b/0x50 [ 2242.141079][ T6805] ovl_lookup+0x7b2/0x1fd0 [ 2242.145493][ T6805] ? __rcu_read_lock+0x50/0x50 [ 2242.150254][ T6805] ? ovl_path_next+0x270/0x270 [ 2242.155006][ T6805] ? lockref_get_not_dead+0x1d6/0x340 [ 2242.160373][ T6805] ? d_hash_and_lookup+0x1e0/0x1e0 [ 2242.165481][ T6805] ? unlazy_walk+0x385/0x610 07:46:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)) [ 2242.170075][ T6805] ? lookup_fast+0x52f/0xfd0 [ 2242.174659][ T6805] __lookup_slow+0x312/0x490 [ 2242.179247][ T6805] ? lookup_one_len2+0x2d0/0x2d0 [ 2242.184188][ T6805] walk_component+0x3ee/0x970 [ 2242.188864][ T6805] ? follow_managed+0x950/0x950 [ 2242.193713][ T6805] ? path_init+0x1220/0x1220 [ 2242.198302][ T6805] ? path_init+0xab7/0x1220 [ 2242.202818][ T6805] path_lookupat+0x211/0xa60 [ 2242.207417][ T6805] ? filename_lookup+0x6e0/0x6e0 [ 2242.212367][ T6805] filename_lookup+0x254/0x6e0 [ 2242.217141][ T6805] ? hashlen_string+0x120/0x120 [ 2242.221996][ T6805] ? getname_flags+0x20d/0x610 [ 2242.226762][ T6805] path_setxattr+0xb0/0x240 [ 2242.231263][ T6805] ? fput_many+0x42/0x1a0 [ 2242.235604][ T6805] ? simple_xattr_list_add+0xf0/0xf0 [ 2242.240902][ T6805] ? __ia32_sys_read+0x80/0x80 [ 2242.245648][ T6805] __x64_sys_setxattr+0xb7/0xd0 [ 2242.250493][ T6805] do_syscall_64+0xcb/0x150 [ 2242.255776][ T6805] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2242.261654][ T6805] RIP: 0033:0x45d239 [ 2242.265568][ T6805] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2242.285168][ T6805] RSP: 002b:00007f9391efac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 2242.293556][ T6805] RAX: ffffffffffffffda RBX: 0000000000031500 RCX: 000000000045d239 [ 2242.301520][ T6805] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000140 [ 2242.309474][ T6805] RBP: 00007f9391efaca0 R08: 0000000000000000 R09: 0000000000000000 [ 2242.317416][ T6805] R10: 000000000000002b R11: 0000000000000246 R12: 0000000000000003 [ 2242.325379][ T6805] R13: 00007fff189c822f R14: 00007f9391efb9c0 R15: 000000000118cf4c [ 2242.703640][T29417] usb 1-1: new high-speed USB device number 109 using dummy_hcd 07:46:26 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0xffffffd8) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) r3 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000100)=""/106, 0x6a) lseek(r3, 0x0, 0x0) getdents64(r3, &(0x7f0000000400)=""/255, 0xff) 07:46:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)) 07:46:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008109fd078b050200080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:46:26 executing program 4 (fault-call:10 fault-nth:4): mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x0) 07:46:26 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec351d9f42cfe4829e0"}}, &(0x7f0000000080)=0x0) timer_gettime(r5, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) [ 2242.829343][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2242.850302][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2242.867035][ T6846] FAULT_INJECTION: forcing a failure. [ 2242.867035][ T6846] name failslab, interval 1, probability 0, space 0, times 0 [ 2242.887488][ T6846] CPU: 1 PID: 6846 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2242.897538][ T6846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2242.907596][ T6846] Call Trace: [ 2242.910860][ T6846] dump_stack+0x14a/0x1ce [ 2242.915164][ T6846] ? devkmsg_release+0x11c/0x11c [ 2242.920094][ T6846] ? show_regs_print_info+0x12/0x12 [ 2242.925283][ T6846] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2242.931329][ T6846] should_fail+0x6fb/0x860 [ 2242.935735][ T6846] ? setup_fault_attr+0x3d0/0x3d0 [ 2242.940731][ T6846] ? kcalloc+0x2b/0x50 [ 2242.944779][ T6846] should_failslab+0x5/0x20 [ 2242.949267][ T6846] __kmalloc+0x5f/0x2d0 [ 2242.953404][ T6846] kcalloc+0x2b/0x50 [ 2242.957290][ T6846] ovl_lookup+0x7b2/0x1fd0 [ 2242.961728][ T6846] ? __rcu_read_lock+0x50/0x50 [ 2242.966467][ T6846] ? ovl_path_next+0x270/0x270 [ 2242.971241][ T6846] ? lockref_get_not_dead+0x1d6/0x340 [ 2242.976593][ T6846] ? d_hash_and_lookup+0x1e0/0x1e0 [ 2242.981692][ T6846] ? unlazy_walk+0x385/0x610 [ 2242.986251][ T6846] ? lookup_fast+0x52f/0xfd0 [ 2242.990812][ T6846] __lookup_slow+0x312/0x490 [ 2242.995392][ T6846] ? lookup_one_len2+0x2d0/0x2d0 [ 2243.000364][ T6846] walk_component+0x3ee/0x970 [ 2243.005021][ T6846] ? follow_managed+0x950/0x950 [ 2243.009850][ T6846] ? path_init+0x1220/0x1220 [ 2243.014417][ T6846] ? path_init+0xab7/0x1220 [ 2243.018909][ T6846] path_lookupat+0x211/0xa60 [ 2243.023489][ T6846] ? filename_lookup+0x6e0/0x6e0 [ 2243.028424][ T6846] filename_lookup+0x254/0x6e0 [ 2243.033178][ T6846] ? hashlen_string+0x120/0x120 [ 2243.038010][ T6846] ? getname_flags+0x20d/0x610 [ 2243.042763][ T6846] path_setxattr+0xb0/0x240 [ 2243.047257][ T6846] ? fput_many+0x42/0x1a0 [ 2243.051614][ T6846] ? simple_xattr_list_add+0xf0/0xf0 [ 2243.056887][ T6846] ? __ia32_sys_read+0x80/0x80 [ 2243.061647][ T6846] __x64_sys_setxattr+0xb7/0xd0 [ 2243.066504][ T6846] do_syscall_64+0xcb/0x150 [ 2243.070984][ T6846] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2243.076881][ T6846] RIP: 0033:0x45d239 [ 2243.080765][ T6846] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2243.100433][ T6846] RSP: 002b:00007f9391efac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 2243.108817][ T6846] RAX: ffffffffffffffda RBX: 0000000000031500 RCX: 000000000045d239 [ 2243.116764][ T6846] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000140 [ 2243.124730][ T6846] RBP: 00007f9391efaca0 R08: 0000000000000000 R09: 0000000000000000 [ 2243.132678][ T6846] R10: 000000000000002b R11: 0000000000000246 R12: 0000000000000004 [ 2243.140647][ T6846] R13: 00007fff189c822f R14: 00007f9391efb9c0 R15: 000000000118cf4c [ 2243.163831][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2243.175317][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2243.186760][T29417] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2243.195836][T29417] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2243.204548][T29417] usb 1-1: config 0 descriptor?? [ 2243.543794][T29417] usbhid 1-1:0.0: can't add hid device: -71 [ 2243.549955][T29417] usbhid: probe of 1-1:0.0 failed with error -71 [ 2243.558749][T29417] usb 1-1: USB disconnect, device number 109 [ 2244.013662][T29417] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 2244.373744][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2244.384719][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2244.395161][T29417] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2244.404559][T29417] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2244.413187][T29417] usb 1-1: config 0 descriptor?? 07:46:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000200810afd078b050200080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:46:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)) 07:46:29 executing program 4 (fault-call:10 fault-nth:5): mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x0) 07:46:29 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec351d9f42cfe4829e0"}}, &(0x7f0000000080)=0x0) timer_gettime(r5, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) 07:46:29 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000000c0)=0x81) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000180)={0x7, 0x8, 0x4}) r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x1f}, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getdents64(r8, &(0x7f0000000100)=""/106, 0x6a) lseek(r5, 0x5, 0x3) getdents64(r5, &(0x7f0000000400)=""/255, 0xff) 07:46:29 executing program 0: r0 = syz_usb_connect$hid(0x6, 0xfffffffffffffe43, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0xffffffff, 0xffffffff, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xfc, [{{0x9, 0x4, 0x0, 0x40, 0x1, 0x3, 0x1, 0x0, 0xbd, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000002c0)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000300)="985617679d4f44c765994e8fd7c8fea7a12e3c80d3848dc25e50a5efddb932c24f7f9ba0875937f581081bd445873409a7425a899e9b7fe114702325e49c8b2f6d71b15ce2b13adb69d76dde23767cf3c0b9b0e843d3ddc5c897ad902f38b31607c365b915ef36cd0db779a93e25537d35738f23a4c23bc052cdf9b735ed1aea6baa3e16bf3520", 0x87}, {&(0x7f00000003c0)="53498bac3aaaf4e48802a37300bcd78428cd3cbdcee9217817dd8e7b5fc1d2e7f0ab1c1f5c1f810d53a3d4b7eab2317b4c221e3809192a564b4fbc45f39be7c38f6a", 0x42}, {&(0x7f0000000440)="a6c927c63a3dbf9828d7d2aa3d9ce3996bd233832fc3f08dc1c804b6aba1ca88c50a3c889704a6ad49445f5902f2ae96dc1e532b6a93242cc36c0f0d3314ac7d19b7abf59ea88397e6d8e6e5eb5afd5cd314f5e07e3e5fab", 0x58}, {&(0x7f00000004c0)="0241d5f862f3cba7bee1e72b329320a65b62f775e35f8283aea1e5ba5dc4b07ada434b9f26d4667fc35b436fac561a4119fe251a82ca8551ec0ebbea1d460cd95ac698e8380bcb238a5135031a2db9d20a30a96fd45102520583cdaeaf374948cff28292183fd50984269d6621dd1496c5983b7e8bd8e3f532f912be783ef3874760a8c045a6cc7eeb3ade9055ec1e75a14d0075642f67245cdedac0d8f46ca077e53785c0efb43e15fd175342814e362efbeb62366a2c2d79ae53c39fd88f0553b1f196a1395426daa69d19d23294616f1c4a6176f51f0e76", 0xd9}, {&(0x7f00000005c0)="988d7fc49b7387657f8f458131741c8bc16910af96442f81567474dfc7b3d3fb7ff8033601f3469eae95031ce28ede8bf8e426fd7cdb6220b3b1210922817ab70c722e60c090c77c667f9e3c1ebacc2a0ed9109ccd7a989126bf2a7de661aa873611ef68d0f1c724c124f9c2d1bf9348ac7b96b1c9387fcaab888b66c312ab6df89b35d5a74fb8de797c945ddba41e4c8fc4a86c6eb38e0ec286b0876566d8d8418bb48275e80fb7714c9194de75ccef8340d5a11877995bd74c693137002a155e63a3981ee07353f29aa2f74800a015802bc16658add252702c9af255d433371ab3c4a280baa7260d2b4fb52f1c225480765db7", 0xf4}, {&(0x7f00000006c0)="bf7fc2b26c046821fcdba41a850d8b3ca781f70272b24be8a8a6c908cbe7b9ab917fa9e591d1eeb91027a92c9f1a731a87281f9c3a1904736c2357cbae739ed7df0a80c8864ba57f6c4dc1e8dca81da6ebe5beeda9a12727280151d18862b33f5d5985d3c9a7b1dff8ed7ae81dd0", 0x6e}, {&(0x7f0000000740)="aadd6a1f1b8ee5426d0ff8d5532bef23f8d519d94010", 0x16}], 0x7, &(0x7f0000000840)="5599f29e30e1bd76304948ab3ddd00194191379fc49b3efcff42fec1", 0x1c, 0x4004000}, 0x10) syz_usb_disconnect(r0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x10001, 0x208100) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00ef050000fb7ef7ff"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x40, 0xf, 0x21, {0x21, 0x31, "ecbd4d258245f1f2df9d38004e70101a043d36b0c338da8387d8e25d722201"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000280)={0x1c, &(0x7f0000000180)={0x40, 0x1d768c58e0acc1b6, 0x4e, "4f8a36eb2109b96ffc98146688e69a14bfb1c797fd8db24e6b6b80856012856351e81986e03f672e8006b3f9bda0e854a6226e56e1a4d3986b669fc0ab6c59033aa826eff2df35803b1a8572d0f8"}, &(0x7f0000000200)={0x0, 0xa, 0x90, 0x81}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xfc}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) accept4$packet(r1, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000a40)=0x14, 0x800) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f00000008c0)={@dev, 0x0}, &(0x7f0000000900)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000009c0)={'ip6_vti0\x00', &(0x7f0000000940)={'ip6gre0\x00', r9, 0x29, 0xc0, 0x20, 0x4, 0x0, @remote, @remote, 0x1, 0xf828, 0x20000, 0x73cb9f97}}) 07:46:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, 0xffffffffffffffff, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)) 07:46:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000200810bfd078b050200080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2246.112606][ T6869] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2246.130195][ T6875] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2246.142862][ T6876] FAULT_INJECTION: forcing a failure. [ 2246.142862][ T6876] name failslab, interval 1, probability 0, space 0, times 0 [ 2246.158234][T29417] usb 1-1: string descriptor 0 read error: -71 [ 2246.167954][ T6880] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2246.182289][ T6876] CPU: 1 PID: 6876 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2246.185296][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2246.192351][ T6876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 07:46:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000200810cfd078b050200080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:46:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000200810dfd078b050200080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2246.192354][ T6876] Call Trace: [ 2246.192373][ T6876] dump_stack+0x14a/0x1ce [ 2246.192391][ T6876] ? devkmsg_release+0x11c/0x11c [ 2246.219749][ T6887] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2246.224073][ T6876] ? __lookup_slow+0x312/0x490 [ 2246.224085][ T6876] ? show_regs_print_info+0x12/0x12 [ 2246.224092][ T6876] ? find_inode+0x40d/0x4c0 [ 2246.224100][ T6876] ? do_syscall_64+0xcb/0x150 [ 2246.224110][ T6876] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2246.224123][ T6876] should_fail+0x6fb/0x860 07:46:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000200810efd078b050200080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2246.236031][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2246.238051][ T6876] ? setup_fault_attr+0x3d0/0x3d0 [ 2246.238062][ T6876] ? _raw_spin_lock+0xa1/0x170 [ 2246.238070][ T6876] ? _raw_spin_trylock_bh+0x190/0x190 [ 2246.238086][ T6876] ? ovl_lookup_inode+0x120/0x120 [ 2246.263252][ T6891] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2246.272159][ T6876] ? ovl_alloc_inode+0x1b/0x90 [ 2246.272168][ T6876] should_failslab+0x5/0x20 07:46:29 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0xffffffd8) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000100)=""/106, 0x6a) lseek(r3, 0x0, 0x0) getdents64(r3, &(0x7f0000000400)=""/255, 0xff) 07:46:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008110fd078b050200080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:46:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008111fd078b050200080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2246.272178][ T6876] kmem_cache_alloc+0x36/0x260 [ 2246.272186][ T6876] ? ovl_free_fs+0x640/0x640 [ 2246.272194][ T6876] ? ovl_lookup_inode+0x120/0x120 [ 2246.272201][ T6876] ovl_alloc_inode+0x1b/0x90 [ 2246.272208][ T6876] ? ovl_free_fs+0x640/0x640 [ 2246.272222][ T6876] iget5_locked+0xa2/0x3e0 [ 2246.279840][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2246.281963][ T6876] ? ovl_get_trap_inode+0x190/0x190 [ 2246.281973][ T6876] ovl_get_inode+0x398/0xef0 [ 2246.281983][ T6876] ovl_lookup+0x1898/0x1fd0 [ 2246.281997][ T6876] ? ovl_path_next+0x270/0x270 [ 2246.319561][ T6894] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2246.320043][ T6876] ? d_hash_and_lookup+0x1e0/0x1e0 [ 2246.320052][ T6876] ? __d_lookup+0x4c4/0x520 [ 2246.320066][ T6876] ? lookup_fast+0x50f/0xfd0 [ 2246.326541][ T6895] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2246.329654][ T6876] __lookup_slow+0x312/0x490 [ 2246.329664][ T6876] ? lookup_one_len2+0x2d0/0x2d0 [ 2246.329681][ T6876] walk_component+0x3ee/0x970 [ 2246.413480][ T6876] ? follow_managed+0x950/0x950 [ 2246.418313][ T6876] ? path_init+0x1220/0x1220 [ 2246.422872][ T6876] ? path_init+0xcb2/0x1220 [ 2246.427344][ T6876] path_lookupat+0x211/0xa60 [ 2246.431971][ T6876] ? filename_lookup+0x6e0/0x6e0 [ 2246.436891][ T6876] filename_lookup+0x596/0x6e0 [ 2246.441660][ T6876] ? hashlen_string+0x120/0x120 [ 2246.446484][ T6876] ? getname_flags+0x20d/0x610 [ 2246.451260][ T6876] path_setxattr+0xb0/0x240 [ 2246.455739][ T6876] ? fput_many+0x42/0x1a0 [ 2246.460040][ T6876] ? simple_xattr_list_add+0xf0/0xf0 [ 2246.465305][ T6876] ? __ia32_sys_read+0x80/0x80 [ 2246.470038][ T6876] __x64_sys_setxattr+0xb7/0xd0 [ 2246.474858][ T6876] do_syscall_64+0xcb/0x150 [ 2246.479332][ T6876] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2246.485204][ T6876] RIP: 0033:0x45d239 [ 2246.489070][ T6876] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2246.508747][ T6876] RSP: 002b:00007f9391efac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 2246.517307][ T6876] RAX: ffffffffffffffda RBX: 0000000000031500 RCX: 000000000045d239 [ 2246.525261][ T6876] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000140 [ 2246.533208][ T6876] RBP: 00007f9391efaca0 R08: 0000000000000000 R09: 0000000000000000 [ 2246.541165][ T6876] R10: 000000000000002b R11: 0000000000000246 R12: 0000000000000005 [ 2246.549121][ T6876] R13: 00007fff189c822f R14: 00007f9391efb9c0 R15: 000000000118cf4c 07:46:30 executing program 4 (fault-call:10 fault-nth:6): mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x0) [ 2246.559838][T29417] uclogic 0003:5543:006E.055B: failed retrieving string descriptor #200: -71 [ 2246.569326][ T6876] overlayfs: failed to get inode (-12) [ 2246.575063][T29417] uclogic 0003:5543:006E.055B: failed retrieving pen parameters: -71 [ 2246.584831][T29417] uclogic 0003:5543:006E.055B: failed probing pen v2 parameters: -71 [ 2246.599096][T29417] uclogic 0003:5543:006E.055B: failed probing parameters: -71 [ 2246.606687][T29417] uclogic: probe of 0003:5543:006E.055B failed with error -71 [ 2246.617759][T29417] usb 1-1: USB disconnect, device number 110 [ 2246.641540][ T6907] FAULT_INJECTION: forcing a failure. [ 2246.641540][ T6907] name failslab, interval 1, probability 0, space 0, times 0 [ 2246.654298][ T6907] CPU: 1 PID: 6907 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2246.664336][ T6907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2246.674367][ T6907] Call Trace: [ 2246.677638][ T6907] dump_stack+0x14a/0x1ce [ 2246.681958][ T6907] ? devkmsg_release+0x11c/0x11c [ 2246.686870][ T6907] ? show_regs_print_info+0x12/0x12 [ 2246.692069][ T6907] should_fail+0x6fb/0x860 [ 2246.696462][ T6907] ? setup_fault_attr+0x3d0/0x3d0 [ 2246.701461][ T6907] ? security_inode_alloc+0x32/0x1f0 [ 2246.706715][ T6907] should_failslab+0x5/0x20 [ 2246.711194][ T6907] kmem_cache_alloc+0x36/0x260 [ 2246.715944][ T6907] security_inode_alloc+0x32/0x1f0 [ 2246.721038][ T6907] inode_init_always+0x37c/0x800 [ 2246.725947][ T6907] ? ovl_lookup_inode+0x120/0x120 [ 2246.730940][ T6907] iget5_locked+0xb9/0x3e0 [ 2246.735327][ T6907] ? ovl_get_trap_inode+0x190/0x190 [ 2246.740501][ T6907] ovl_get_inode+0x398/0xef0 [ 2246.745080][ T6907] ovl_lookup+0x1898/0x1fd0 [ 2246.749581][ T6907] ? ovl_path_next+0x270/0x270 [ 2246.754344][ T6907] ? lockref_get_not_dead+0x1d6/0x340 [ 2246.759700][ T6907] ? d_hash_and_lookup+0x1e0/0x1e0 [ 2246.764781][ T6907] ? lookup_fast+0x52f/0xfd0 [ 2246.769364][ T6907] __lookup_slow+0x312/0x490 [ 2246.773953][ T6907] ? lookup_one_len2+0x2d0/0x2d0 [ 2246.778862][ T6907] walk_component+0x3ee/0x970 [ 2246.783523][ T6907] ? follow_managed+0x950/0x950 [ 2246.788342][ T6907] ? path_init+0x1220/0x1220 [ 2246.792899][ T6907] ? path_init+0xab7/0x1220 [ 2246.797388][ T6907] path_lookupat+0x211/0xa60 [ 2246.801947][ T6907] ? filename_lookup+0x6e0/0x6e0 [ 2246.806858][ T6907] filename_lookup+0x254/0x6e0 [ 2246.811594][ T6907] ? hashlen_string+0x120/0x120 [ 2246.816417][ T6907] ? getname_flags+0x20d/0x610 [ 2246.821160][ T6907] path_setxattr+0xb0/0x240 [ 2246.825673][ T6907] ? fput_many+0x42/0x1a0 [ 2246.829988][ T6907] ? simple_xattr_list_add+0xf0/0xf0 [ 2246.835245][ T6907] ? __ia32_sys_read+0x80/0x80 [ 2246.839985][ T6907] __x64_sys_setxattr+0xb7/0xd0 [ 2246.844826][ T6907] do_syscall_64+0xcb/0x150 [ 2246.849307][ T6907] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2246.855167][ T6907] RIP: 0033:0x45d239 07:46:30 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec351d9f42cfe4829e0"}}, &(0x7f0000000080)=0x0) timer_gettime(r5, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) 07:46:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008112fd078b050200080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2246.859059][ T6907] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2246.878643][ T6907] RSP: 002b:00007f9391efac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 2246.887160][ T6907] RAX: ffffffffffffffda RBX: 0000000000031500 RCX: 000000000045d239 [ 2246.895110][ T6907] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000140 [ 2246.903067][ T6907] RBP: 00007f9391efaca0 R08: 0000000000000000 R09: 0000000000000000 [ 2246.911022][ T6907] R10: 000000000000002b R11: 0000000000000246 R12: 0000000000000006 [ 2246.918988][ T6907] R13: 00007fff189c822f R14: 00007f9391efb9c0 R15: 000000000118cf4c [ 2246.929903][ T6907] overlayfs: failed to get inode (-12) [ 2247.223628][T29417] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 2247.503615][T29417] usb 1-1: device descriptor read/64, error 18 [ 2247.913659][T29417] usb 1-1: device descriptor read/64, error 18 [ 2248.183682][T29417] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 2248.453652][T29417] usb 1-1: device descriptor read/64, error 18 [ 2248.843714][T29417] usb 1-1: device descriptor read/64, error 18 [ 2248.963716][T29417] usb usb1-port1: attempt power cycle 07:46:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008125fd078b050200080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:46:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, 0xffffffffffffffff, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)) 07:46:32 executing program 4 (fault-call:10 fault-nth:7): mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x0) 07:46:32 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0xffffffd8) inotify_init1(0x800) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @loopback}, 0x10) r2 = dup(0xffffffffffffffff) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80000) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000300)='@[\'\x1e\x00', &(0x7f0000000180)='./file0\x00', r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400201) r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000100)=""/106, 0x6a) getpeername$unix(r2, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e) lseek(r4, 0x0, 0x0) getdents64(r4, &(0x7f0000000400)=""/255, 0xff) 07:46:32 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) dup2(r2, r1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0xffffffd8) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYBLOB="db9ad989a7bdc88be91e989ea240a4fa45e71cb3273064cab71602e1c7aca57f11df4ab708", @ANYRESDEC=r3, @ANYBLOB="70c97e0a7174fdb089b20f8b275e9b62ae79ba08a442f251cb2394aaa2515d6ccfce19127a8888da014b2f3a98ce0e3dcc75b6756e6445373e984fdfa4adc6239b43db5cf6b011bee98f5bc073de331f3f3c771a6fe9724913cf2ecb8b539d12648f555e9c2f0340a23eeda89c18ff4769d10b5b462e272f9b3e278d35d8d873f4c9791148e806417d28ffaf92"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005000000050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) 07:46:32 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c7", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec351d9f42cfe4829e0"}}, &(0x7f0000000080)=0x0) timer_gettime(r5, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) 07:46:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, 0xffffffffffffffff, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)) 07:46:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)) 07:46:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008128fd078b050200080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:46:32 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r0, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f00000001c0)) 07:46:32 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r0, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f00000001c0)) 07:46:32 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r0, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f00000001c0)) [ 2249.205080][ T6923] FAULT_INJECTION: forcing a failure. [ 2249.205080][ T6923] name failslab, interval 1, probability 0, space 0, times 0 [ 2249.219245][ T6923] CPU: 1 PID: 6923 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2249.229316][ T6923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2249.239373][ T6923] Call Trace: [ 2249.242667][ T6923] dump_stack+0x14a/0x1ce [ 2249.246992][ T6923] ? devkmsg_release+0x11c/0x11c 07:46:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008148fd078b050200080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:46:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)) [ 2249.251920][ T6923] ? ovl_get_inode+0x398/0xef0 [ 2249.256679][ T6923] ? show_regs_print_info+0x12/0x12 [ 2249.261886][ T6923] ? path_lookupat+0x211/0xa60 [ 2249.266647][ T6923] ? path_setxattr+0xb0/0x240 [ 2249.271329][ T6923] should_fail+0x6fb/0x860 [ 2249.275781][ T6923] ? setup_fault_attr+0x3d0/0x3d0 [ 2249.280835][ T6923] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2249.286909][ T6923] ? inode_doinit_use_xattr+0x58/0x3f0 [ 2249.292374][ T6923] should_failslab+0x5/0x20 [ 2249.296882][ T6923] kmem_cache_alloc_trace+0x39/0x280 [ 2249.302165][ T6923] ? blk_crypto_keyslot_evict+0x160/0x160 [ 2249.307889][ T6923] inode_doinit_use_xattr+0x58/0x3f0 [ 2249.313179][ T6923] inode_doinit_with_dentry+0x8da/0x10e0 [ 2249.318821][ T6923] ? sb_finish_set_opts+0x7e0/0x7e0 [ 2249.324061][ T6923] ? slab_free_freelist_hook+0xd0/0x150 [ 2249.329649][ T6923] security_d_instantiate+0x90/0xf0 [ 2249.334853][ T6923] d_splice_alias+0x71/0x590 [ 2249.339445][ T6923] ? dput+0x4d9/0x5e0 [ 2249.343422][ T6923] ovl_lookup+0x1bc5/0x1fd0 [ 2249.347926][ T6923] ? ovl_path_next+0x270/0x270 [ 2249.352673][ T6923] ? lockref_get_not_dead+0x1d6/0x340 [ 2249.358022][ T6923] ? d_hash_and_lookup+0x1e0/0x1e0 [ 2249.363114][ T6923] ? lookup_fast+0x52f/0xfd0 [ 2249.367693][ T6923] __lookup_slow+0x312/0x490 [ 2249.372352][ T6923] ? lookup_one_len2+0x2d0/0x2d0 [ 2249.377273][ T6923] walk_component+0x3ee/0x970 [ 2249.381969][ T6923] ? follow_managed+0x950/0x950 [ 2249.386828][ T6923] ? path_init+0x1220/0x1220 [ 2249.391391][ T6923] ? path_init+0xab7/0x1220 [ 2249.395870][ T6923] path_lookupat+0x211/0xa60 [ 2249.400433][ T6923] ? filename_lookup+0x6e0/0x6e0 [ 2249.405359][ T6923] filename_lookup+0x254/0x6e0 [ 2249.410101][ T6923] ? hashlen_string+0x120/0x120 [ 2249.414935][ T6923] ? getname_flags+0x20d/0x610 [ 2249.419689][ T6923] path_setxattr+0xb0/0x240 [ 2249.424193][ T6923] ? fput_many+0x42/0x1a0 [ 2249.428516][ T6923] ? simple_xattr_list_add+0xf0/0xf0 [ 2249.433793][ T6923] ? __ia32_sys_read+0x80/0x80 [ 2249.438548][ T6923] __x64_sys_setxattr+0xb7/0xd0 [ 2249.443373][ T6923] do_syscall_64+0xcb/0x150 [ 2249.447859][ T6923] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2249.453750][ T6923] RIP: 0033:0x45d239 [ 2249.457636][ T6923] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2249.477236][ T6923] RSP: 002b:00007f9391efac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 2249.485650][ T6923] RAX: ffffffffffffffda RBX: 0000000000031500 RCX: 000000000045d239 [ 2249.493620][ T6923] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000140 07:46:33 executing program 4 (fault-call:10 fault-nth:8): mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x0) [ 2249.501600][ T6923] RBP: 00007f9391efaca0 R08: 0000000000000000 R09: 0000000000000000 [ 2249.509559][ T6923] R10: 000000000000002b R11: 0000000000000246 R12: 0000000000000007 [ 2249.517509][ T6923] R13: 00007fff189c822f R14: 00007f9391efb9c0 R15: 000000000118cf4c [ 2249.527526][ T6923] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=359803 [ 2249.573955][ T6962] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=359869 [ 2249.583561][ T6962] FAULT_INJECTION: forcing a failure. [ 2249.583561][ T6962] name failslab, interval 1, probability 0, space 0, times 0 [ 2249.597279][ T6962] CPU: 0 PID: 6962 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2249.607338][ T6962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2249.617383][ T6962] Call Trace: [ 2249.620656][ T6962] dump_stack+0x14a/0x1ce [ 2249.624964][ T6962] ? devkmsg_release+0x11c/0x11c [ 2249.629896][ T6962] ? show_regs_print_info+0x12/0x12 [ 2249.635089][ T6962] should_fail+0x6fb/0x860 [ 2249.639510][ T6962] ? setup_fault_attr+0x3d0/0x3d0 [ 2249.644516][ T6962] ? check_stack_object+0x5a/0x90 [ 2249.649530][ T6962] ? kvmalloc_node+0xc2/0x120 [ 2249.654195][ T6962] should_failslab+0x5/0x20 [ 2249.658683][ T6962] __kmalloc+0x5f/0x2d0 [ 2249.662851][ T6962] kvmalloc_node+0xc2/0x120 [ 2249.667360][ T6962] setxattr+0x1ff/0x420 [ 2249.671500][ T6962] ? path_setxattr+0x240/0x240 [ 2249.676259][ T6962] ? getname_flags+0x20d/0x610 [ 2249.681977][ T6962] ? __sb_start_write+0xa5/0x150 [ 2249.686897][ T6962] path_setxattr+0x164/0x240 [ 2249.691490][ T6962] ? fput_many+0x42/0x1a0 [ 2249.695802][ T6962] ? simple_xattr_list_add+0xf0/0xf0 [ 2249.701070][ T6962] ? __ia32_sys_read+0x80/0x80 [ 2249.706517][ T6962] __x64_sys_setxattr+0xb7/0xd0 [ 2249.711346][ T6962] do_syscall_64+0xcb/0x150 [ 2249.715842][ T6962] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2249.721736][ T6962] RIP: 0033:0x45d239 [ 2249.725624][ T6962] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2249.745204][ T6962] RSP: 002b:00007f9391efac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 2249.753599][ T6962] RAX: ffffffffffffffda RBX: 0000000000031500 RCX: 000000000045d239 [ 2249.761566][ T6962] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000140 [ 2249.769526][ T6962] RBP: 00007f9391efaca0 R08: 0000000000000000 R09: 0000000000000000 [ 2249.777495][ T6962] R10: 000000000000002b R11: 0000000000000246 R12: 0000000000000008 [ 2249.785451][ T6962] R13: 00007fff189c822f R14: 00007f9391efb9c0 R15: 000000000118cf4c 07:46:33 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000040)) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000100)=""/106, 0x6a) lseek(r2, 0x0, 0x0) getdents64(r2, &(0x7f0000000400)=""/255, 0xff) [ 2250.083666][T29417] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 2250.293743][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2250.304712][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2250.314675][T29417] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2250.323740][T29417] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2250.332535][T29417] usb 1-1: config 0 descriptor?? [ 2250.663719][T29417] usbhid 1-1:0.0: can't add hid device: -71 [ 2250.669711][T29417] usbhid: probe of 1-1:0.0 failed with error -71 [ 2250.678277][T29417] usb 1-1: USB disconnect, device number 113 [ 2251.133665][T29417] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 2251.403666][T29417] usb 1-1: device descriptor read/64, error 18 [ 2251.793670][T29417] usb 1-1: device descriptor read/64, error 18 [ 2252.063679][T29417] usb 1-1: new high-speed USB device number 115 using dummy_hcd 07:46:35 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005000000050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0x0, 0x200043f8, 0x0, 0x0) r3 = signalfd(r2, &(0x7f0000000040)={[0x1]}, 0x8) timerfd_gettime(r3, &(0x7f00000000c0)) 07:46:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)) 07:46:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000200814cfd078b050200080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:46:35 executing program 4 (fault-call:10 fault-nth:9): mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x0) 07:46:35 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c7", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec351d9f42cfe4829e0"}}, &(0x7f0000000080)=0x0) timer_gettime(r5, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) 07:46:35 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000100)=""/106, 0x6a) lseek(r2, 0x0, 0x0) getdents64(r2, &(0x7f0000000400)=""/255, 0xff) 07:46:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)) 07:46:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008160fd078b050200080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2252.171997][ T6978] __nla_validate_parse: 10 callbacks suppressed [ 2252.172004][ T6978] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2252.190638][ T6987] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:46:35 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0xffffffd8) recvmmsg(r3, &(0x7f0000001cc0)=[{{&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000200)=""/67, 0x43}, {&(0x7f0000000500)=""/235, 0xeb}, {&(0x7f0000000300)=""/71, 0x47}, {&(0x7f0000000600)=""/231, 0xe7}], 0x4, &(0x7f0000000700)=""/68, 0x44}, 0x8001}, {{&(0x7f0000000780)=@rc={0x1f, @none}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000800)=""/224, 0xe0}], 0x1, &(0x7f0000000900)=""/246, 0xf6}, 0x2}, {{&(0x7f0000000a00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000a80)=""/4096, 0x1000}], 0x1, &(0x7f00000003c0)}, 0x58}, {{&(0x7f0000001a80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001b00)=""/71, 0x47}, {&(0x7f0000001b80)=""/50, 0x32}], 0x2, &(0x7f0000001c00)=""/137, 0x89}, 0x3cb}], 0x4, 0x40, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000001dc0)=0x80, 0x4) getdents64(r2, &(0x7f0000000100)=""/106, 0x6a) lseek(r2, 0x0, 0x0) getdents64(r2, &(0x7f0000000400)=""/255, 0xff) [ 2252.220971][ T6982] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=360650 [ 2252.226804][ T6992] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2252.242865][ T6982] FAULT_INJECTION: forcing a failure. [ 2252.242865][ T6982] name failslab, interval 1, probability 0, space 0, times 0 [ 2252.257047][ T6997] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:46:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)) 07:46:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008168fd078b050200080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2252.262016][ T6982] CPU: 1 PID: 6982 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2252.276301][ T6982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2252.286354][ T6982] Call Trace: [ 2252.289642][ T6982] dump_stack+0x14a/0x1ce [ 2252.293971][ T6982] ? devkmsg_release+0x11c/0x11c [ 2252.298913][ T6982] ? show_regs_print_info+0x12/0x12 [ 2252.301813][ T7003] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2252.304128][ T6982] ? unwind_get_return_address_ptr+0x130/0x130 07:46:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000200816cfd078b050200080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2252.304139][ T6982] ? d_splice_alias+0x137/0x590 [ 2252.304148][ T6982] should_fail+0x6fb/0x860 [ 2252.304156][ T6982] ? setup_fault_attr+0x3d0/0x3d0 [ 2252.304180][ T6982] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2252.316146][ T7006] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2252.319499][ T6982] ? inode_doinit_use_xattr+0x58/0x3f0 [ 2252.319508][ T6982] should_failslab+0x5/0x20 [ 2252.319519][ T6982] kmem_cache_alloc_trace+0x39/0x280 [ 2252.319536][ T6982] ? blk_crypto_keyslot_evict+0x160/0x160 [ 2252.344469][ T7008] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2252.349112][ T6982] inode_doinit_use_xattr+0x58/0x3f0 [ 2252.349124][ T6982] inode_doinit_with_dentry+0x8da/0x10e0 [ 2252.349133][ T6982] ? sb_finish_set_opts+0x7e0/0x7e0 [ 2252.349149][ T6982] selinux_inode_setxattr+0x660/0x1060 [ 2252.357293][ T7009] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2252.359092][ T6982] ? selinux_inode_getattr+0x3e0/0x3e0 [ 2252.359102][ T6982] ? __kasan_kmalloc+0x189/0x1c0 [ 2252.359118][ T6982] ? kmem_cache_free+0xac/0x600 [ 2252.425325][ T6982] ? __kasan_kmalloc+0x12c/0x1c0 [ 2252.430261][ T6982] ? __kmalloc+0xf7/0x2d0 [ 2252.434569][ T6982] ? kvmalloc_node+0xc2/0x120 [ 2252.439244][ T6982] ? setxattr+0x1ff/0x420 [ 2252.443568][ T6982] ? path_setxattr+0x164/0x240 [ 2252.448320][ T6982] ? __x64_sys_setxattr+0xb7/0xd0 [ 2252.453347][ T6982] ? do_syscall_64+0xcb/0x150 [ 2252.458017][ T6982] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2252.464082][ T6982] security_inode_setxattr+0xcf/0x190 [ 2252.470252][ T6982] __vfs_setxattr_locked+0x96/0x240 [ 2252.475457][ T6982] vfs_setxattr+0x11e/0x2d0 [ 2252.479971][ T6982] ? xattr_permission+0x350/0x350 [ 2252.484988][ T6982] ? __kmalloc+0xf7/0x2d0 [ 2252.489300][ T6982] ? __virt_addr_valid+0x1fd/0x290 [ 2252.494390][ T6982] setxattr+0x1e5/0x420 [ 2252.498547][ T6982] ? path_setxattr+0x240/0x240 [ 2252.503316][ T6982] ? getname_flags+0x20d/0x610 [ 2252.508068][ T6982] ? __sb_start_write+0xa5/0x150 [ 2252.513012][ T6982] path_setxattr+0x164/0x240 [ 2252.517583][ T6982] ? fput_many+0x42/0x1a0 [ 2252.521894][ T6982] ? simple_xattr_list_add+0xf0/0xf0 [ 2252.527162][ T6982] ? __ia32_sys_read+0x80/0x80 [ 2252.531906][ T6982] __x64_sys_setxattr+0xb7/0xd0 [ 2252.536737][ T6982] do_syscall_64+0xcb/0x150 [ 2252.541246][ T6982] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2252.547120][ T6982] RIP: 0033:0x45d239 [ 2252.551001][ T6982] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2252.570593][ T6982] RSP: 002b:00007f9391efac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 2252.579003][ T6982] RAX: ffffffffffffffda RBX: 0000000000031500 RCX: 000000000045d239 [ 2252.586971][ T6982] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000140 [ 2252.594924][ T6982] RBP: 00007f9391efaca0 R08: 0000000000000000 R09: 0000000000000000 [ 2252.602894][ T6982] R10: 000000000000002b R11: 0000000000000246 R12: 0000000000000009 [ 2252.610863][ T6982] R13: 00007fff189c822f R14: 00007f9391efb9c0 R15: 000000000118cf4c [ 2252.683656][T29417] usb 1-1: device descriptor read/64, error -71 [ 2253.163750][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2253.174650][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2253.185271][T29417] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2253.194657][T29417] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2253.203373][T29417] usb 1-1: config 0 descriptor?? [ 2253.543694][T29417] usbhid 1-1:0.0: can't add hid device: -71 [ 2253.549683][T29417] usbhid: probe of 1-1:0.0 failed with error -71 [ 2253.558078][T29417] usb 1-1: USB disconnect, device number 115 [ 2254.013688][T29417] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 2254.373732][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2254.384642][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2254.395071][T29417] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2254.404548][T29417] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2254.413268][T29417] usb 1-1: config 0 descriptor?? [ 2255.133753][T29417] usb 1-1: string descriptor 0 read error: -71 [ 2255.153677][T29417] uclogic 0003:5543:006E.055C: failed retrieving string descriptor #200: -71 [ 2255.162509][T29417] uclogic 0003:5543:006E.055C: failed retrieving pen parameters: -71 [ 2255.170610][T29417] uclogic 0003:5543:006E.055C: failed probing pen v2 parameters: -71 [ 2255.178763][T29417] uclogic 0003:5543:006E.055C: failed probing parameters: -71 [ 2255.186318][T29417] uclogic: probe of 0003:5543:006E.055C failed with error -71 [ 2255.195048][T29417] usb 1-1: USB disconnect, device number 116 [ 2255.863649][T29417] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 2256.223780][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2256.234676][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2256.245155][T29417] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2256.254633][T29417] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2256.263307][T29417] usb 1-1: config 0 descriptor?? 07:46:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)) 07:46:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008174fd078b050200080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:46:40 executing program 4 (fault-call:10 fault-nth:10): mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x0) 07:46:40 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c7", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec351d9f42cfe4829e0"}}, &(0x7f0000000080)=0x0) timer_gettime(r5, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) 07:46:40 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f0000000040)={0x40, &(0x7f0000000180)="7c378e46f715826c599d26b0396bf24cdb18369130192eff7b7ff7e4926c83f8f6a9f125c4ce8ca5ccefe70e84834276857f3630d033f2afe610783b1e47ed202e1ce9637a3dd35911cdde97ee369387f6b67706f9a6fb7e004464b0a1c04d1f085246a9fb13f72a96edbd3a90f3072b9061d06fbfafd94f738c02c6287c2369a2843d41c4c686df5431b5d084a4eae43db2d8a3d0b0cedc24059173ad8e36afd9bd7611"}) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, r7, 0x1}, 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x50, r7, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @dev={[], 0x12}}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x25}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40004) getdents64(r5, &(0x7f0000000100)=""/106, 0x6a) lseek(r5, 0x0, 0x0) getdents64(r5, &(0x7f0000000400)=""/255, 0xff) 07:46:40 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x6, 0x24, &(0x7f0000000380)=ANY=[], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) dup2(r3, r2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000540)={0x1be, 0x9, &(0x7f0000000140)}) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @loopback}, 0x10) sendto$inet(r7, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0xffffffd8) splice(r3, &(0x7f00000000c0)=0x1ff, r7, &(0x7f0000000100)=0x8, 0x6, 0x8) syz_usb_control_io$hid(r1, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='\x00') syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005000000050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) 07:46:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)) [ 2256.416634][ T7036] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2256.438850][ T7037] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=360716 [ 2256.451129][ T7044] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:46:40 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000100)=""/106, 0x6a) lseek(r2, 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/262, 0x106) 07:46:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, 0x0, 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)) 07:46:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f6105000200817afd078b050200080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2256.464626][ T7037] FAULT_INJECTION: forcing a failure. [ 2256.464626][ T7037] name failslab, interval 1, probability 0, space 0, times 0 [ 2256.483729][T29417] usbhid 1-1:0.0: can't add hid device: -71 [ 2256.489907][T29417] usbhid: probe of 1-1:0.0 failed with error -71 [ 2256.507832][T29417] usb 1-1: USB disconnect, device number 117 07:46:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, 0x0, 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)) [ 2256.514081][ T7037] CPU: 1 PID: 7037 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2256.524146][ T7037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2256.534198][ T7037] Call Trace: [ 2256.537498][ T7037] dump_stack+0x14a/0x1ce [ 2256.541823][ T7037] ? devkmsg_release+0x11c/0x11c [ 2256.546789][ T7037] ? show_regs_print_info+0x12/0x12 [ 2256.551985][ T7037] ? unwind_get_return_address_ptr+0x130/0x130 [ 2256.558140][ T7037] ? d_splice_alias+0x137/0x590 [ 2256.562987][ T7037] should_fail+0x6fb/0x860 07:46:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, 0x0, 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)) 07:46:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)) 07:46:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd048b050200080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2256.567409][ T7037] ? setup_fault_attr+0x3d0/0x3d0 [ 2256.572485][ T7037] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2256.578549][ T7037] ? inode_doinit_use_xattr+0x58/0x3f0 [ 2256.584007][ T7037] should_failslab+0x5/0x20 [ 2256.588506][ T7037] kmem_cache_alloc_trace+0x39/0x280 [ 2256.593786][ T7037] ? blk_crypto_keyslot_evict+0x160/0x160 [ 2256.599513][ T7037] inode_doinit_use_xattr+0x58/0x3f0 [ 2256.604809][ T7037] inode_doinit_with_dentry+0x8da/0x10e0 [ 2256.610442][ T7037] ? sb_finish_set_opts+0x7e0/0x7e0 [ 2256.615645][ T7037] selinux_inode_setxattr+0x660/0x1060 [ 2256.621806][ T7037] ? selinux_inode_getattr+0x3e0/0x3e0 [ 2256.627292][ T7037] ? __kasan_kmalloc+0x189/0x1c0 [ 2256.632222][ T7037] ? kmem_cache_free+0xac/0x600 [ 2256.637071][ T7037] ? __kasan_kmalloc+0x12c/0x1c0 [ 2256.642001][ T7037] ? __kmalloc+0xf7/0x2d0 [ 2256.646336][ T7037] ? kvmalloc_node+0xc2/0x120 [ 2256.651004][ T7037] ? setxattr+0x1ff/0x420 [ 2256.655329][ T7037] ? path_setxattr+0x164/0x240 [ 2256.660090][ T7037] ? __x64_sys_setxattr+0xb7/0xd0 [ 2256.665710][ T7037] ? do_syscall_64+0xcb/0x150 [ 2256.670359][ T7037] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2256.676433][ T7037] security_inode_setxattr+0xcf/0x190 [ 2256.681790][ T7037] __vfs_setxattr_locked+0x96/0x240 [ 2256.686996][ T7037] vfs_setxattr+0x11e/0x2d0 [ 2256.691486][ T7037] ? xattr_permission+0x350/0x350 [ 2256.696485][ T7037] ? __kmalloc+0xf7/0x2d0 [ 2256.700788][ T7037] ? __virt_addr_valid+0x1fd/0x290 [ 2256.705895][ T7037] setxattr+0x1e5/0x420 [ 2256.710034][ T7037] ? path_setxattr+0x240/0x240 [ 2256.714790][ T7037] ? getname_flags+0x20d/0x610 [ 2256.719525][ T7037] ? __sb_start_write+0xa5/0x150 [ 2256.724438][ T7037] path_setxattr+0x164/0x240 [ 2256.729017][ T7037] ? fput_many+0x42/0x1a0 [ 2256.733319][ T7037] ? simple_xattr_list_add+0xf0/0xf0 [ 2256.738579][ T7037] ? __ia32_sys_read+0x80/0x80 [ 2256.743315][ T7037] __x64_sys_setxattr+0xb7/0xd0 [ 2256.748173][ T7037] do_syscall_64+0xcb/0x150 [ 2256.752655][ T7037] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2256.758516][ T7037] RIP: 0033:0x45d239 [ 2256.762381][ T7037] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2256.784565][ T7037] RSP: 002b:00007f9391efac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 2256.792949][ T7037] RAX: ffffffffffffffda RBX: 0000000000031500 RCX: 000000000045d239 [ 2256.800895][ T7037] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000140 [ 2256.808843][ T7037] RBP: 00007f9391efaca0 R08: 0000000000000000 R09: 0000000000000000 07:46:40 executing program 4 (fault-call:10 fault-nth:11): mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x0) [ 2256.816804][ T7037] R10: 000000000000002b R11: 0000000000000246 R12: 000000000000000a [ 2256.824751][ T7037] R13: 00007fff189c822f R14: 00007f9391efb9c0 R15: 000000000118cf4c [ 2256.892523][ T7078] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=360228 [ 2256.902262][ T7078] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=360228 [ 2256.912642][ T7078] FAULT_INJECTION: forcing a failure. [ 2256.912642][ T7078] name failslab, interval 1, probability 0, space 0, times 0 [ 2256.925364][ T7078] CPU: 0 PID: 7078 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2256.935441][ T7078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2256.945519][ T7078] Call Trace: [ 2256.948795][ T7078] dump_stack+0x14a/0x1ce [ 2256.953101][ T7078] ? devkmsg_release+0x11c/0x11c [ 2256.958019][ T7078] ? stack_trace_save+0x123/0x1f0 [ 2256.963035][ T7078] ? show_regs_print_info+0x12/0x12 [ 2256.968222][ T7078] ? stack_trace_snprint+0x150/0x150 [ 2256.973486][ T7078] ? sched_clock_cpu+0x18/0x380 [ 2256.978336][ T7078] should_fail+0x6fb/0x860 [ 2256.982731][ T7078] ? setup_fault_attr+0x3d0/0x3d0 [ 2256.987744][ T7078] ? __kasan_kmalloc+0x189/0x1c0 [ 2256.992665][ T7078] ? ebitmap_cmp+0x1c8/0x230 [ 2256.997241][ T7078] ? mls_compute_context_len+0x81b/0x850 [ 2257.002865][ T7078] ? context_struct_to_string+0x3e4/0x820 [ 2257.008575][ T7078] should_failslab+0x5/0x20 [ 2257.013072][ T7078] __kmalloc+0x5f/0x2d0 [ 2257.017220][ T7078] context_struct_to_string+0x3e4/0x820 [ 2257.022759][ T7078] ? security_bounded_transition+0x560/0x560 [ 2257.028742][ T7078] context_add_hash+0x145/0x280 [ 2257.033606][ T7078] ? mls_context_isvalid+0x98/0x380 [ 2257.038811][ T7078] ? security_sid_to_context_inval+0x40/0x40 [ 2257.044772][ T7078] ? string_to_context_struct+0x486/0x640 [ 2257.051439][ T7078] security_context_to_sid_core+0x406/0x710 [ 2257.057323][ T7078] ? security_context_to_sid+0x50/0x50 [ 2257.062775][ T7078] ? avc_has_perm_noaudit+0x400/0x400 [ 2257.068141][ T7078] security_context_to_sid+0x35/0x50 [ 2257.073413][ T7078] selinux_inode_setxattr+0x742/0x1060 [ 2257.078847][ T7078] ? selinux_inode_getattr+0x3e0/0x3e0 [ 2257.084277][ T7078] ? __kasan_kmalloc+0x189/0x1c0 [ 2257.089196][ T7078] ? kmem_cache_free+0xac/0x600 [ 2257.094035][ T7078] ? __kasan_kmalloc+0x12c/0x1c0 [ 2257.098950][ T7078] ? __kmalloc+0xf7/0x2d0 [ 2257.103267][ T7078] ? kvmalloc_node+0xc2/0x120 [ 2257.107918][ T7078] ? setxattr+0x1ff/0x420 [ 2257.112221][ T7078] ? path_setxattr+0x164/0x240 [ 2257.116959][ T7078] ? __x64_sys_setxattr+0xb7/0xd0 [ 2257.121958][ T7078] ? do_syscall_64+0xcb/0x150 [ 2257.126610][ T7078] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2257.132705][ T7078] security_inode_setxattr+0xcf/0x190 [ 2257.138111][ T7078] __vfs_setxattr_locked+0x96/0x240 [ 2257.143311][ T7078] vfs_setxattr+0x11e/0x2d0 [ 2257.147794][ T7078] ? xattr_permission+0x350/0x350 [ 2257.153492][ T7078] ? __kmalloc+0xf7/0x2d0 [ 2257.157816][ T7078] ? __virt_addr_valid+0x1fd/0x290 [ 2257.162913][ T7078] setxattr+0x1e5/0x420 [ 2257.167068][ T7078] ? path_setxattr+0x240/0x240 [ 2257.171822][ T7078] ? getname_flags+0x20d/0x610 [ 2257.176565][ T7078] ? __sb_start_write+0xa5/0x150 [ 2257.181497][ T7078] path_setxattr+0x164/0x240 [ 2257.186340][ T7078] ? fput_many+0x42/0x1a0 07:46:40 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", 0x0}}, &(0x7f0000000080)=0x0) timer_gettime(r5, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) 07:46:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)) [ 2257.190662][ T7078] ? simple_xattr_list_add+0xf0/0xf0 [ 2257.193655][T29417] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 2257.195928][ T7078] ? __ia32_sys_read+0x80/0x80 [ 2257.195938][ T7078] __x64_sys_setxattr+0xb7/0xd0 [ 2257.195954][ T7078] do_syscall_64+0xcb/0x150 [ 2257.217625][ T7078] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2257.223550][ T7078] RIP: 0033:0x45d239 [ 2257.227459][ T7078] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2257.247056][ T7078] RSP: 002b:00007f9391efac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 2257.255473][ T7078] RAX: ffffffffffffffda RBX: 0000000000031500 RCX: 000000000045d239 [ 2257.263445][ T7078] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000140 [ 2257.271420][ T7078] RBP: 00007f9391efaca0 R08: 0000000000000000 R09: 0000000000000000 [ 2257.279368][ T7078] R10: 000000000000002b R11: 0000000000000246 R12: 000000000000000b [ 2257.287337][ T7078] R13: 00007fff189c822f R14: 00007f9391efb9c0 R15: 000000000118cf4c [ 2257.563762][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2257.574675][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2257.585193][T29417] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2257.594621][T29417] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2257.603322][T29417] usb 1-1: config 0 descriptor?? [ 2257.943693][T29417] usbhid 1-1:0.0: can't add hid device: -71 [ 2257.949703][T29417] usbhid: probe of 1-1:0.0 failed with error -71 [ 2257.958271][T29417] usb 1-1: USB disconnect, device number 118 [ 2258.813685][ T641] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 2259.173744][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2259.184625][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2259.195350][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2259.204422][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2259.213093][ T641] usb 1-1: config 0 descriptor?? 07:46:43 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) dup2(r3, r2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x4d8, 0xc002, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r4) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 07:46:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b060200080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:46:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)) 07:46:43 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f0000000300)=0xe8) r1 = getegid() r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r3) setregid(r1, r3) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000340)=0xc) setuid(r4) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x800000, &(0x7f0000000700)=ANY=[@ANYBLOB="6664b5ad51fd52b48140063d", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',allow_other,default_permissions,allow_other,allow_other,blksize=0x0000000000000600,max_read=0x0000000000000003,max_read=0x0000000000000005,allow_other,max_read=0x0000000000000006,fowner=', @ANYRESDEC=r4, @ANYBLOB=',obj_user=,\x00']) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000100)=""/106, 0x6a) lseek(r5, 0x0, 0x3) getdents64(r5, &(0x7f0000000400)=""/255, 0xff) 07:46:43 executing program 4 (fault-call:10 fault-nth:12): mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x0) 07:46:43 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", 0x0}}, &(0x7f0000000080)=0x0) timer_gettime(r5, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) 07:46:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)) [ 2259.455763][ T7097] __nla_validate_parse: 4 callbacks suppressed [ 2259.455770][ T7097] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2259.457472][ T7102] fuse: Unknown parameter 'fdµ­QýR´@' [ 2259.494890][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:46:43 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='qnx4\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000100)=""/106, 0x6a) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) lseek(r2, 0x0, 0x0) getdents64(r2, &(0x7f0000000400)=""/255, 0xff) [ 2259.500894][ T7114] fuse: Unknown parameter 'fdµ­QýR´@' [ 2259.509731][ T7104] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=360300 [ 2259.523723][ T641] usbhid 1-1:0.0: can't add hid device: -71 [ 2259.528763][ T7104] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=360300 [ 2259.531509][ T641] usbhid: probe of 1-1:0.0 failed with error -71 [ 2259.542197][ T7104] FAULT_INJECTION: forcing a failure. 07:46:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)) 07:46:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b090200080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2259.542197][ T7104] name failslab, interval 1, probability 0, space 0, times 0 [ 2259.570476][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2259.573059][ T7104] CPU: 1 PID: 7104 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2259.581874][ T641] usb 1-1: USB disconnect, device number 119 [ 2259.589783][ T7104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2259.589787][ T7104] Call Trace: [ 2259.589807][ T7104] dump_stack+0x14a/0x1ce [ 2259.589815][ T7104] ? devkmsg_release+0x11c/0x11c [ 2259.589823][ T7104] ? show_regs_print_info+0x12/0x12 [ 2259.589830][ T7104] ? xas_load+0x468/0x4c0 [ 2259.589838][ T7104] should_fail+0x6fb/0x860 [ 2259.589846][ T7104] ? setup_fault_attr+0x3d0/0x3d0 [ 2259.589864][ T7104] ? write_boundary_block+0x150/0x150 [ 2259.597480][ T7123] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:46:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b0a0200080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:46:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)) [ 2259.605881][ T7104] ? unwind_next_frame+0x1c90/0x2330 [ 2259.605891][ T7104] ? iput+0x2d3/0x750 [ 2259.605900][ T7104] ? kzalloc+0x1b/0x30 [ 2259.605908][ T7104] should_failslab+0x5/0x20 [ 2259.605917][ T7104] __kmalloc+0x5f/0x2d0 [ 2259.605926][ T7104] ? ext4_xattr_set_entry+0x1e4b/0x3b60 [ 2259.605940][ T7104] kzalloc+0x1b/0x30 [ 2259.646493][ T7128] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2259.652820][ T7104] ext4_xattr_block_set+0x2c6/0x40b0 [ 2259.652832][ T7104] ? ext4_xattr_block_find+0x550/0x550 [ 2259.652848][ T7104] ? __ext4_journal_get_write_access+0x86/0x2e0 [ 2259.674999][ T7130] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2259.681261][ T7104] ? ext4_xattr_ibody_find+0x80b/0x990 [ 2259.681270][ T7104] ? ext4_xattr_block_find+0xee/0x550 [ 2259.681285][ T7104] ext4_xattr_set_handle+0xf0b/0x1ed0 [ 2259.736694][ T7104] ? ext4_xattr_set_entry+0x3b60/0x3b60 [ 2259.742241][ T7104] ? memset+0x1f/0x40 [ 2259.746301][ T7104] ? dquot_initialize+0x20/0x20 [ 2259.751136][ T7104] ? selinux_inode_setxattr+0x63a/0x1060 [ 2259.756745][ T7104] ? __ext4_journal_start_sb+0x3ad/0x420 [ 2259.762361][ T7104] ext4_xattr_set+0x229/0x330 [ 2259.767011][ T7104] ? selinux_perf_event_write+0x100/0x100 [ 2259.772723][ T7104] ? ext4_xattr_set_credits+0x290/0x290 [ 2259.778245][ T7104] ? avc_has_perm+0x176/0x280 [ 2259.782914][ T7104] ? ext4_xattr_trusted_get+0x40/0x40 [ 2259.788265][ T7104] __vfs_setxattr+0x3be/0x400 [ 2259.792916][ T7104] __vfs_setxattr_noperm+0x12a/0x3e0 [ 2259.798180][ T7104] vfs_setxattr+0x11e/0x2d0 [ 2259.802688][ T7104] ? xattr_permission+0x350/0x350 [ 2259.807685][ T7104] ovl_set_impure+0x123/0x200 [ 2259.812334][ T7104] ovl_copy_up_flags+0xf4f/0x2a30 [ 2259.817768][ T7104] ? __x64_sys_setxattr+0xb7/0xd0 [ 2259.822766][ T7104] ? do_syscall_64+0xcb/0x150 [ 2259.827951][ T7104] ? __kasan_slab_free+0x181/0x230 [ 2259.833049][ T7104] ? security_context_to_sid_core+0x568/0x710 [ 2259.839116][ T7104] ? ovl_set_origin+0xf0/0xf0 [ 2259.843768][ T7104] ? __rcu_read_lock+0x50/0x50 [ 2259.848508][ T7104] ? avc_has_perm_noaudit+0x37d/0x400 [ 2259.853853][ T7104] ? avc_has_perm_noaudit+0x30c/0x400 [ 2259.859196][ T7104] ? kfree+0x12b/0x600 [ 2259.863235][ T7104] ? avc_denied+0x1c0/0x1c0 [ 2259.867710][ T7104] ? security_compute_validatetrans+0x5d9/0x9b0 [ 2259.873930][ T7104] ? avc_has_perm+0xd5/0x280 [ 2259.878532][ T7104] ? avc_has_perm+0x176/0x280 [ 2259.883182][ T7104] ? avc_has_perm_noaudit+0x400/0x400 [ 2259.888546][ T7104] ? __kasan_kmalloc+0x12c/0x1c0 [ 2259.893457][ T7104] ? __kmalloc+0xf7/0x2d0 [ 2259.897770][ T7104] ? kvmalloc_node+0xc2/0x120 [ 2259.902452][ T7104] ? __sb_start_write+0xa5/0x150 [ 2259.907372][ T7104] ? mnt_want_write+0x274/0x2f0 [ 2259.912297][ T7104] ovl_xattr_set+0xc9/0x400 [ 2259.916798][ T7104] ? ovl_other_xattr_get+0x50/0x50 [ 2259.921896][ T7104] __vfs_setxattr+0x3be/0x400 [ 2259.926546][ T7104] __vfs_setxattr_noperm+0x12a/0x3e0 [ 2259.931808][ T7104] vfs_setxattr+0x11e/0x2d0 [ 2259.936286][ T7104] ? xattr_permission+0x350/0x350 [ 2259.941284][ T7104] ? __kmalloc+0xf7/0x2d0 [ 2259.945593][ T7104] ? __virt_addr_valid+0x1fd/0x290 [ 2259.950681][ T7104] setxattr+0x1e5/0x420 [ 2259.954831][ T7104] ? path_setxattr+0x240/0x240 [ 2259.959585][ T7104] ? getname_flags+0x20d/0x610 [ 2259.964344][ T7104] ? __sb_start_write+0xa5/0x150 [ 2259.969267][ T7104] path_setxattr+0x164/0x240 [ 2259.973842][ T7104] ? fput_many+0x42/0x1a0 [ 2259.978165][ T7104] ? simple_xattr_list_add+0xf0/0xf0 [ 2259.983436][ T7104] ? __ia32_sys_read+0x80/0x80 [ 2259.988190][ T7104] __x64_sys_setxattr+0xb7/0xd0 [ 2259.993016][ T7104] do_syscall_64+0xcb/0x150 [ 2259.997513][ T7104] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2260.003381][ T7104] RIP: 0033:0x45d239 [ 2260.007259][ T7104] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2260.026853][ T7104] RSP: 002b:00007f9391efac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 2260.035244][ T7104] RAX: ffffffffffffffda RBX: 0000000000031500 RCX: 000000000045d239 [ 2260.043229][ T7104] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000140 [ 2260.051218][ T7104] RBP: 00007f9391efaca0 R08: 0000000000000000 R09: 0000000000000000 [ 2260.059162][ T7104] R10: 000000000000002b R11: 0000000000000246 R12: 000000000000000c [ 2260.067114][ T7104] R13: 00007fff189c822f R14: 00007f9391efb9c0 R15: 000000000118cf4c [ 2260.383712][ T641] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 2260.753745][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2260.764653][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2260.774709][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2260.783804][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2260.792467][ T641] usb 1-1: config 0 descriptor?? [ 2261.143716][ T641] usbhid 1-1:0.0: can't add hid device: -71 [ 2261.149661][ T641] usbhid: probe of 1-1:0.0 failed with error -71 [ 2261.158127][ T641] usb 1-1: USB disconnect, device number 120 [ 2261.623638][ T641] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 2261.983738][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2261.994720][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2262.005262][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2262.014688][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2262.023399][ T641] usb 1-1: config 0 descriptor?? [ 2262.474541][ T7106] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2262.482236][ T7106] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2262.953704][ T641] usbhid 1-1:0.0: can't add hid device: -71 [ 2262.959670][ T641] usbhid: probe of 1-1:0.0 failed with error -71 [ 2262.967453][ T641] usb 1-1: USB disconnect, device number 121 [ 2263.663676][ T641] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 2264.023746][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2264.035365][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2264.045167][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2264.054239][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2264.062953][ T641] usb 1-1: config 0 descriptor?? 07:46:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b0b0200080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:46:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, 0xffffffffffffffff, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)) 07:46:47 executing program 4 (fault-call:10 fault-nth:13): mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x0) 07:46:47 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x187043, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getdents64(r8, &(0x7f0000000100)=""/106, 0x2d) lseek(r2, 0x0, 0x0) getdents64(r2, &(0x7f0000000400)=""/255, 0xff) 07:46:47 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", 0x0}}, &(0x7f0000000080)=0x0) timer_gettime(r5, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) 07:46:47 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) dup2(r2, r1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYRES64=r2, @ANYRESDEC=r1, @ANYRESDEC], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$CHAR_RAW_BSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000040)=0x1) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005000000050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = dup2(r8, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r9, 0x8982, &(0x7f00000000c0)={0x0, '\x00', {0x2}, 0xff}) 07:46:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, 0xffffffffffffffff, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)) [ 2264.218717][ T7159] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2264.252811][ T7161] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=360406 07:46:47 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) prctl$PR_GET_SECCOMP(0x15) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='bdev\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = fsmount(r3, 0x1, 0x81) ioctl$UI_BEGIN_FF_ERASE(r4, 0xc00c55ca, &(0x7f0000000040)={0x8, 0x3, 0x3}) r5 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = open$dir(&(0x7f0000000000)='./file0\x00', 0x200000, 0x121) getdents64(r6, &(0x7f0000000100)=""/106, 0x6a) lseek(r6, 0x0, 0x0) getdents64(r6, &(0x7f0000000400)=""/255, 0xff) 07:46:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b250200080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:46:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, 0xffffffffffffffff, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)) [ 2264.270920][ T7161] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=360406 [ 2264.284849][ T641] usbhid 1-1:0.0: can't add hid device: -71 [ 2264.295324][ T7161] FAULT_INJECTION: forcing a failure. [ 2264.295324][ T7161] name failslab, interval 1, probability 0, space 0, times 0 [ 2264.303928][ T641] usbhid: probe of 1-1:0.0 failed with error -71 07:46:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050800080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2264.320681][ T7176] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2264.327726][ T7161] CPU: 1 PID: 7161 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2264.335686][ T641] usb 1-1: USB disconnect, device number 122 [ 2264.339959][ T7161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2264.339964][ T7161] Call Trace: [ 2264.339986][ T7161] dump_stack+0x14a/0x1ce [ 2264.339997][ T7161] ? devkmsg_release+0x11c/0x11c 07:46:48 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r0, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f00000001c0)) [ 2264.340013][ T7161] ? show_regs_print_info+0x12/0x12 [ 2264.348843][ T7180] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2264.356046][ T7161] ? ext4_evict_inode+0x1a70/0x1a70 [ 2264.356057][ T7161] ? _raw_spin_unlock+0x5/0x20 [ 2264.356066][ T7161] ? __dquot_alloc_space+0x2a1/0xce0 [ 2264.356074][ T7161] should_fail+0x6fb/0x860 [ 2264.356082][ T7161] ? setup_fault_attr+0x3d0/0x3d0 07:46:48 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r0, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f00000001c0)) [ 2264.356089][ T7161] ? __ext4_journal_start_sb+0x3ad/0x420 [ 2264.356096][ T7161] ? __ext4_journal_stop+0x2f/0x190 [ 2264.356103][ T7161] ? __ext4_expand_extra_isize+0x3b0/0x3b0 [ 2264.356111][ T7161] ? ext4_mb_new_blocks+0x423/0x28a0 [ 2264.356127][ T7161] should_failslab+0x5/0x20 [ 2264.443239][ T7161] kmem_cache_alloc+0x36/0x260 [ 2264.448013][ T7161] ext4_mb_new_blocks+0x423/0x28a0 [ 2264.453132][ T7161] ? vfs_setxattr+0x11e/0x2d0 [ 2264.455280][ T7190] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2264.457810][ T7161] ? ext4_mb_pa_callback+0xc0/0xc0 07:46:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200030008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2264.457821][ T7161] ext4_new_meta_blocks+0x178/0x3f0 [ 2264.457830][ T7161] ? ext4_should_retry_alloc+0x1b0/0x1b0 [ 2264.457847][ T7161] ? __entry_find+0x353/0x390 [ 2264.469463][ T7191] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2264.472169][ T7161] ? dquot_initialize_needed+0x126/0x310 [ 2264.472181][ T7161] ext4_xattr_block_set+0x2107/0x40b0 [ 2264.472192][ T7161] ? ext4_xattr_block_find+0x550/0x550 [ 2264.472208][ T7161] ? __ext4_journal_get_write_access+0x86/0x2e0 [ 2264.499428][ T7194] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2264.503294][ T7161] ? ext4_xattr_ibody_find+0x80b/0x990 [ 2264.503303][ T7161] ? ext4_xattr_block_find+0xee/0x550 [ 2264.503312][ T7161] ext4_xattr_set_handle+0xf0b/0x1ed0 [ 2264.503324][ T7161] ? ext4_xattr_set_entry+0x3b60/0x3b60 [ 2264.503340][ T7161] ? memset+0x1f/0x40 [ 2264.511505][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2264.514156][ T7161] ? dquot_initialize+0x20/0x20 [ 2264.514167][ T7161] ? selinux_inode_setxattr+0x63a/0x1060 [ 2264.514177][ T7161] ? __ext4_journal_start_sb+0x3ad/0x420 [ 2264.514186][ T7161] ext4_xattr_set+0x229/0x330 [ 2264.514196][ T7161] ? selinux_perf_event_write+0x100/0x100 [ 2264.514204][ T7161] ? ext4_xattr_set_credits+0x290/0x290 [ 2264.514212][ T7161] ? avc_has_perm+0x176/0x280 [ 2264.514219][ T7161] ? ext4_xattr_trusted_get+0x40/0x40 [ 2264.514225][ T7161] __vfs_setxattr+0x3be/0x400 [ 2264.514241][ T7161] __vfs_setxattr_noperm+0x12a/0x3e0 [ 2264.616317][ T7161] vfs_setxattr+0x11e/0x2d0 [ 2264.620817][ T7161] ? xattr_permission+0x350/0x350 [ 2264.625824][ T7161] ovl_set_impure+0x123/0x200 [ 2264.630505][ T7161] ovl_copy_up_flags+0xf4f/0x2a30 [ 2264.635531][ T7161] ? __x64_sys_setxattr+0xb7/0xd0 [ 2264.640563][ T7161] ? do_syscall_64+0xcb/0x150 [ 2264.645225][ T7161] ? __kasan_slab_free+0x181/0x230 [ 2264.650315][ T7161] ? security_context_to_sid_core+0x568/0x710 [ 2264.656360][ T7161] ? ovl_set_origin+0xf0/0xf0 [ 2264.661013][ T7161] ? __rcu_read_lock+0x50/0x50 [ 2264.665768][ T7161] ? avc_has_perm_noaudit+0x37d/0x400 [ 2264.671141][ T7161] ? avc_has_perm_noaudit+0x30c/0x400 [ 2264.676494][ T7161] ? kfree+0x12b/0x600 [ 2264.680540][ T7161] ? avc_denied+0x1c0/0x1c0 [ 2264.685033][ T7161] ? security_compute_validatetrans+0x5d9/0x9b0 [ 2264.691248][ T7161] ? avc_has_perm+0xd5/0x280 [ 2264.695834][ T7161] ? avc_has_perm+0x176/0x280 [ 2264.700521][ T7161] ? avc_has_perm_noaudit+0x400/0x400 [ 2264.705876][ T7161] ? __kasan_kmalloc+0x12c/0x1c0 [ 2264.710791][ T7161] ? __kmalloc+0xf7/0x2d0 [ 2264.715102][ T7161] ? kvmalloc_node+0xc2/0x120 [ 2264.719758][ T7161] ? __sb_start_write+0xa5/0x150 [ 2264.723671][ T641] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 2264.724940][ T7161] ? mnt_want_write+0x274/0x2f0 [ 2264.724956][ T7161] ovl_xattr_set+0xc9/0x400 [ 2264.741897][ T7161] ? ovl_other_xattr_get+0x50/0x50 [ 2264.746989][ T7161] __vfs_setxattr+0x3be/0x400 [ 2264.751645][ T7161] __vfs_setxattr_noperm+0x12a/0x3e0 [ 2264.756912][ T7161] vfs_setxattr+0x11e/0x2d0 [ 2264.761411][ T7161] ? xattr_permission+0x350/0x350 [ 2264.766417][ T7161] ? __kmalloc+0xf7/0x2d0 [ 2264.770745][ T7161] ? __virt_addr_valid+0x1fd/0x290 [ 2264.775850][ T7161] setxattr+0x1e5/0x420 [ 2264.780007][ T7161] ? path_setxattr+0x240/0x240 [ 2264.784756][ T7161] ? getname_flags+0x20d/0x610 [ 2264.789510][ T7161] ? __sb_start_write+0xa5/0x150 [ 2264.794426][ T7161] path_setxattr+0x164/0x240 [ 2264.798986][ T7161] ? fput_many+0x42/0x1a0 [ 2264.803285][ T7161] ? simple_xattr_list_add+0xf0/0xf0 [ 2264.808545][ T7161] ? __ia32_sys_read+0x80/0x80 [ 2264.813290][ T7161] __x64_sys_setxattr+0xb7/0xd0 [ 2264.818139][ T7161] do_syscall_64+0xcb/0x150 [ 2264.822615][ T7161] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2264.828507][ T7161] RIP: 0033:0x45d239 [ 2264.832378][ T7161] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2264.851960][ T7161] RSP: 002b:00007f9391efac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 2264.860697][ T7161] RAX: ffffffffffffffda RBX: 0000000000031500 RCX: 000000000045d239 07:46:48 executing program 4 (fault-call:10 fault-nth:14): mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x0) 07:46:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050202080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2264.868656][ T7161] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000140 [ 2264.877036][ T7161] RBP: 00007f9391efaca0 R08: 0000000000000000 R09: 0000000000000000 [ 2264.884998][ T7161] R10: 000000000000002b R11: 0000000000000246 R12: 000000000000000d [ 2264.892949][ T7161] R13: 00007fff189c822f R14: 00007f9391efb9c0 R15: 000000000118cf4c [ 2264.919849][ T7198] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2264.930955][ T7199] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2264.961892][ T7201] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=361554 [ 2264.972155][ T7201] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=361554 [ 2264.982391][ T7201] FAULT_INJECTION: forcing a failure. [ 2264.982391][ T7201] name failslab, interval 1, probability 0, space 0, times 0 [ 2264.995423][ T7201] CPU: 0 PID: 7201 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2265.005478][ T7201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2265.015524][ T7201] Call Trace: [ 2265.018830][ T7201] dump_stack+0x14a/0x1ce 07:46:48 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)}}, &(0x7f0000000080)=0x0) timer_gettime(r5, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) [ 2265.023133][ T7201] ? devkmsg_release+0x11c/0x11c [ 2265.028042][ T7201] ? show_regs_print_info+0x12/0x12 [ 2265.033221][ T7201] ? mark_page_accessed+0x282/0x5b0 [ 2265.038397][ T7201] should_fail+0x6fb/0x860 [ 2265.043322][ T7201] ? setup_fault_attr+0x3d0/0x3d0 [ 2265.048334][ T7201] ? write_boundary_block+0x150/0x150 [ 2265.053683][ T7201] ? mb_cache_entry_create+0x162/0x810 [ 2265.059115][ T7201] should_failslab+0x5/0x20 [ 2265.063626][ T7201] kmem_cache_alloc+0x36/0x260 [ 2265.068391][ T7201] ? wake_up_bit+0x9a/0x1c0 [ 2265.072876][ T7201] mb_cache_entry_create+0x162/0x810 [ 2265.078159][ T7201] ? ext4_xattr_block_set+0x2db0/0x40b0 [ 2265.083704][ T7201] ext4_xattr_block_set+0x31b9/0x40b0 [ 2265.089075][ T7201] ? ext4_xattr_block_find+0x550/0x550 [ 2265.094529][ T7201] ? __ext4_journal_get_write_access+0x86/0x2e0 [ 2265.100766][ T7201] ? ext4_xattr_ibody_find+0x80b/0x990 [ 2265.106265][ T7201] ? ext4_xattr_block_find+0xee/0x550 [ 2265.111624][ T7201] ext4_xattr_set_handle+0xf0b/0x1ed0 [ 2265.116991][ T7201] ? ext4_xattr_set_entry+0x3b60/0x3b60 [ 2265.122542][ T7201] ? memset+0x1f/0x40 [ 2265.126566][ T7201] ? dquot_initialize+0x20/0x20 [ 2265.131451][ T7201] ? selinux_inode_setxattr+0x63a/0x1060 [ 2265.137105][ T7201] ? __ext4_journal_start_sb+0x3ad/0x420 [ 2265.142723][ T7201] ext4_xattr_set+0x229/0x330 [ 2265.147390][ T7201] ? selinux_perf_event_write+0x100/0x100 [ 2265.153099][ T7201] ? ext4_xattr_set_credits+0x290/0x290 [ 2265.158622][ T7201] ? avc_has_perm+0x176/0x280 [ 2265.163286][ T7201] ? ext4_xattr_trusted_get+0x40/0x40 [ 2265.168654][ T7201] __vfs_setxattr+0x3be/0x400 [ 2265.173318][ T7201] __vfs_setxattr_noperm+0x12a/0x3e0 [ 2265.178605][ T7201] vfs_setxattr+0x11e/0x2d0 [ 2265.183110][ T7201] ? xattr_permission+0x350/0x350 [ 2265.188132][ T7201] ovl_set_impure+0x123/0x200 [ 2265.192785][ T7201] ovl_copy_up_flags+0xf4f/0x2a30 [ 2265.197791][ T7201] ? __x64_sys_setxattr+0xb7/0xd0 [ 2265.202784][ T7201] ? do_syscall_64+0xcb/0x150 [ 2265.207442][ T7201] ? __kasan_slab_free+0x181/0x230 [ 2265.212562][ T7201] ? security_context_to_sid_core+0x568/0x710 [ 2265.218617][ T7201] ? ovl_set_origin+0xf0/0xf0 [ 2265.223273][ T7201] ? __rcu_read_lock+0x50/0x50 [ 2265.228009][ T7201] ? avc_has_perm_noaudit+0x37d/0x400 [ 2265.233354][ T7201] ? avc_has_perm_noaudit+0x30c/0x400 [ 2265.238709][ T7201] ? kfree+0x12b/0x600 [ 2265.242805][ T7201] ? avc_denied+0x1c0/0x1c0 [ 2265.247297][ T7201] ? security_compute_validatetrans+0x5d9/0x9b0 [ 2265.253541][ T7201] ? avc_has_perm+0xd5/0x280 [ 2265.258123][ T7201] ? avc_has_perm+0x176/0x280 [ 2265.262815][ T7201] ? avc_has_perm_noaudit+0x400/0x400 [ 2265.268172][ T7201] ? __kasan_kmalloc+0x12c/0x1c0 [ 2265.273085][ T7201] ? __kmalloc+0xf7/0x2d0 [ 2265.277391][ T7201] ? kvmalloc_node+0xc2/0x120 [ 2265.282047][ T7201] ? __sb_start_write+0xa5/0x150 [ 2265.286966][ T7201] ? mnt_want_write+0x274/0x2f0 [ 2265.291811][ T7201] ovl_xattr_set+0xc9/0x400 [ 2265.296311][ T7201] ? ovl_other_xattr_get+0x50/0x50 [ 2265.301420][ T7201] __vfs_setxattr+0x3be/0x400 [ 2265.306136][ T7201] __vfs_setxattr_noperm+0x12a/0x3e0 [ 2265.311422][ T7201] vfs_setxattr+0x11e/0x2d0 [ 2265.316432][ T7201] ? xattr_permission+0x350/0x350 [ 2265.321442][ T7201] ? __kmalloc+0xf7/0x2d0 [ 2265.325765][ T7201] ? __virt_addr_valid+0x1fd/0x290 [ 2265.330872][ T7201] setxattr+0x1e5/0x420 [ 2265.335002][ T7201] ? path_setxattr+0x240/0x240 [ 2265.339766][ T7201] ? getname_flags+0x20d/0x610 [ 2265.344544][ T7201] ? __sb_start_write+0xa5/0x150 [ 2265.349485][ T7201] path_setxattr+0x164/0x240 [ 2265.354047][ T7201] ? fput_many+0x42/0x1a0 [ 2265.358368][ T7201] ? simple_xattr_list_add+0xf0/0xf0 [ 2265.363650][ T7201] ? __ia32_sys_read+0x80/0x80 [ 2265.368391][ T7201] __x64_sys_setxattr+0xb7/0xd0 [ 2265.373236][ T7201] do_syscall_64+0xcb/0x150 [ 2265.377751][ T7201] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2265.383983][ T7201] RIP: 0033:0x45d239 [ 2265.387852][ T7201] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2265.407457][ T7201] RSP: 002b:00007f9391efac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 2265.415864][ T7201] RAX: ffffffffffffffda RBX: 0000000000031500 RCX: 000000000045d239 [ 2265.423842][ T7201] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000140 [ 2265.431821][ T7201] RBP: 00007f9391efaca0 R08: 0000000000000000 R09: 0000000000000000 [ 2265.439780][ T7201] R10: 000000000000002b R11: 0000000000000246 R12: 000000000000000e [ 2265.447739][ T7201] R13: 00007fff189c822f R14: 00007f9391efb9c0 R15: 000000000118cf4c [ 2265.543743][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2265.554771][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2265.565265][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2265.574665][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2265.583342][ T641] usb 1-1: config 0 descriptor?? [ 2265.826195][ T7167] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2266.133711][ T641] usbhid 1-1:0.0: can't add hid device: -71 [ 2266.139685][ T641] usbhid: probe of 1-1:0.0 failed with error -71 [ 2266.148257][ T641] usb 1-1: USB disconnect, device number 123 [ 2266.813676][T29417] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 2267.173758][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2267.185080][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2267.195545][T29417] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2267.204943][T29417] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2267.214754][T29417] usb 1-1: config 0 descriptor?? 07:46:51 executing program 0: r0 = syz_usb_connect$hid(0x4, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="0400000000fffeff0a000000000100000001090224000100000000090400000103010000092101000001c1ff0009058103000000000009050203df010980d7e1cee9881dc31ef65fd4c61ed24d842332320346ab88a3c341f59baa6a9a3fdf286db52486031918dc8e909bacd32cd0b7734b19a53edd5159e21cc778696d"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005000000050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) 07:46:51 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0xb8) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) truncate(&(0x7f0000000040)='./file0/file0\x00', 0x2) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000100)=""/106, 0x6a) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040041}, 0x4000) lseek(r2, 0x0, 0x0) getdents64(r2, &(0x7f0000000400)=""/255, 0xff) 07:46:51 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r0, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f00000001c0)) 07:46:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050203080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:46:51 executing program 4 (fault-call:10 fault-nth:15): mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x0) 07:46:51 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)}}, &(0x7f0000000080)=0x0) timer_gettime(r5, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) 07:46:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, 0x0) [ 2267.493847][ T7217] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=361039 [ 2267.504848][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2267.514465][ T7217] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=361039 [ 2267.520834][ T7236] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2267.534702][T29417] usbhid 1-1:0.0: can't add hid device: -71 [ 2267.534920][ T7217] FAULT_INJECTION: forcing a failure. [ 2267.534920][ T7217] name failslab, interval 1, probability 0, space 0, times 0 [ 2267.540743][T29417] usbhid: probe of 1-1:0.0 failed with error -71 [ 2267.556282][ T7217] CPU: 0 PID: 7217 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2267.569640][ T7217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2267.570042][T29417] usb 1-1: USB disconnect, device number 124 07:46:51 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000100)=""/106, 0x6a) lseek(r2, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000006, 0x4010, r1, 0x19df6000) getdents64(r2, &(0x7f0000000400)=""/241, 0xf1) [ 2267.579717][ T7217] Call Trace: [ 2267.579740][ T7217] dump_stack+0x14a/0x1ce [ 2267.579748][ T7217] ? devkmsg_release+0x11c/0x11c [ 2267.579755][ T7217] ? show_regs_print_info+0x12/0x12 [ 2267.579762][ T7217] ? __fsnotify_parent+0x310/0x310 [ 2267.579770][ T7217] should_fail+0x6fb/0x860 [ 2267.579778][ T7217] ? setup_fault_attr+0x3d0/0x3d0 [ 2267.579789][ T7217] ? prepare_creds+0x20/0x380 [ 2267.579798][ T7217] should_failslab+0x5/0x20 [ 2267.579808][ T7217] kmem_cache_alloc+0x36/0x260 [ 2267.579815][ T7217] ? down_write+0xd8/0x150 [ 2267.579822][ T7217] prepare_creds+0x20/0x380 [ 2267.579831][ T7217] selinux_inode_copy_up+0x4a/0x180 [ 2267.579840][ T7217] security_inode_copy_up+0x53/0xb0 [ 2267.579856][ T7217] ovl_copy_up_flags+0x1473/0x2a30 [ 2267.665287][ T7217] ? __x64_sys_setxattr+0xb7/0xd0 [ 2267.670281][ T7217] ? do_syscall_64+0xcb/0x150 [ 2267.674930][ T7217] ? ovl_set_origin+0xf0/0xf0 [ 2267.679593][ T7217] ? __rcu_read_lock+0x50/0x50 [ 2267.688341][ T7217] ? avc_has_perm_noaudit+0x37d/0x400 [ 2267.693685][ T7217] ? avc_has_perm_noaudit+0x30c/0x400 [ 2267.699049][ T7217] ? kfree+0x12b/0x600 [ 2267.703088][ T7217] ? avc_denied+0x1c0/0x1c0 [ 2267.707562][ T7217] ? security_compute_validatetrans+0x5d9/0x9b0 [ 2267.713786][ T7217] ? avc_has_perm+0xd5/0x280 [ 2267.718365][ T7217] ? avc_has_perm+0x176/0x280 [ 2267.723025][ T7217] ? avc_has_perm_noaudit+0x400/0x400 [ 2267.728388][ T7217] ? __kasan_kmalloc+0x12c/0x1c0 [ 2267.733310][ T7217] ? __kmalloc+0xf7/0x2d0 [ 2267.737627][ T7217] ? kvmalloc_node+0xc2/0x120 [ 2267.742273][ T7217] ? __sb_start_write+0xa5/0x150 [ 2267.747180][ T7217] ? mnt_want_write+0x274/0x2f0 [ 2267.752000][ T7217] ovl_xattr_set+0xc9/0x400 [ 2267.756493][ T7217] ? ovl_other_xattr_get+0x50/0x50 [ 2267.761592][ T7217] __vfs_setxattr+0x3be/0x400 [ 2267.766238][ T7217] __vfs_setxattr_noperm+0x12a/0x3e0 [ 2267.771538][ T7217] vfs_setxattr+0x11e/0x2d0 [ 2267.776013][ T7217] ? xattr_permission+0x350/0x350 [ 2267.781008][ T7217] ? __kmalloc+0xf7/0x2d0 [ 2267.785309][ T7217] ? __virt_addr_valid+0x1fd/0x290 [ 2267.790413][ T7217] setxattr+0x1e5/0x420 [ 2267.794540][ T7217] ? path_setxattr+0x240/0x240 [ 2267.799275][ T7217] ? getname_flags+0x20d/0x610 [ 2267.804006][ T7217] ? __sb_start_write+0xa5/0x150 [ 2267.808913][ T7217] path_setxattr+0x164/0x240 [ 2267.815064][ T7217] ? fput_many+0x42/0x1a0 [ 2267.819377][ T7217] ? simple_xattr_list_add+0xf0/0xf0 [ 2267.824630][ T7217] __x64_sys_setxattr+0xb7/0xd0 [ 2267.829478][ T7217] do_syscall_64+0xcb/0x150 [ 2267.833970][ T7217] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2267.839845][ T7217] RIP: 0033:0x45d239 [ 2267.843710][ T7217] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2267.863281][ T7217] RSP: 002b:00007f9391efac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 2267.872545][ T7217] RAX: ffffffffffffffda RBX: 0000000000031500 RCX: 000000000045d239 [ 2267.880633][ T7217] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000140 [ 2267.888605][ T7217] RBP: 00007f9391efaca0 R08: 0000000000000000 R09: 0000000000000000 07:46:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050204080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:46:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, 0x0) 07:46:51 executing program 4 (fault-call:10 fault-nth:16): mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x0) [ 2267.896554][ T7217] R10: 000000000000002b R11: 0000000000000246 R12: 000000000000000f [ 2267.904502][ T7217] R13: 00007fff189c822f R14: 00007f9391efb9c0 R15: 000000000118cf4c 07:46:51 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000100)=""/106, 0x6a) lseek(r2, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0xfff, 0x4, &(0x7f0000000300)=[{&(0x7f0000000180)="9a417b9c8267ff6717041840723b2a477dacec2d2ef91a869f8ee34cba6625babe111c25a3e5e6d7b947670430f1ff00e0aa1485ff021facb21939861c44343b48a87c944c8333949b8dda79f5cda0eec43864b7757822ecc7a1d9c947642f078252e997fcd09cfa07dc28075af491fa550bdbd775806611752bc08fb8b45ccec261261ee7e3423f0757ad9b6959abca32442c34e5672f4f98e0865708a2aca3bd99ab278a923b126f43e9d02d97e62c7c6d614f51eb347fe5765d258ccf734321e4596d67be8335c228d114175021571fcb1ce50ae15db177397415dec59295c928ad38db", 0xe5, 0x2}, {&(0x7f0000000500)="0c8d35b488067fa45ea77bd6389c65a68fe7fb60f90838f47af0cd2d0bf33885149a6263f1638003395f0c23b690818ae0dcb7a31cd8e1520d37078bfc987c107c16034eb214d8feb09ab38d39dc6b3031c042ddfa76a640724884f75c13646371b9e268d87f0ac739309511c9430d1057f070b72de0e95816620fc9c5108709a575621e6866d00795234d2930ed385d6603974b81be994ae0472ee6980abf8744dda5e98cd5469f469b47dac5bbcaafe38b82c0e5bc3591e8cf6b09f9d8a50215dd8a2a79", 0xc5, 0x10}, {&(0x7f0000000280)="6361b6fdd694754247fe33d56dfb466303b057971e69fd79f391e656c04b7b873f7b6fcbb278f402d9adb9f2133b3886", 0x30, 0x6}, {&(0x7f0000000600)="1cc29f3c66e35891ee9b51dba70824f941e6db91b2738e205801a4e9f2ec3a32366a52a2e6a42f5da00e73d4ad08711ade9b54267486922f4c7dde90042dcb4c2934bfc7a2d9fdc1bdcee53c46558cc5a3a2a04419f83bee58f2dc59bc3fdf5fda8c8a847d4bde529303b16bac9e7daa541b8d2e3998ad16e183804b8137ed641a0d185230e8ae58a85d4170cb2f202f858c73ec7bfb067198f1684e650378", 0x9f}], 0x4, &(0x7f00000006c0)={[{@huge_never={'huge=never', 0x3d, ']&\'}+.//{]\\&[[-'}}, {@huge_within_size={'huge=within_size', 0x3d, 'cgroup2\x00'}}, {@size={'size', 0x3d, [0x6b, 0x38, 0x30, 0x6b]}}], [{@subj_type={'subj_type', 0x3d, '#'}}]}) getdents64(r2, &(0x7f0000000400)=""/255, 0xff) [ 2267.950041][ T7249] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2268.006209][ T7258] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=361658 [ 2268.016096][ T7258] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=361658 [ 2268.026000][ T7258] FAULT_INJECTION: forcing a failure. [ 2268.026000][ T7258] name failslab, interval 1, probability 0, space 0, times 0 [ 2268.038846][ T7258] CPU: 0 PID: 7258 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2268.048923][ T7258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2268.058956][ T7258] Call Trace: [ 2268.062227][ T7258] dump_stack+0x14a/0x1ce [ 2268.066549][ T7258] ? devkmsg_release+0x11c/0x11c [ 2268.071484][ T7258] ? show_regs_print_info+0x12/0x12 [ 2268.076677][ T7258] should_fail+0x6fb/0x860 [ 2268.081066][ T7258] ? setup_fault_attr+0x3d0/0x3d0 [ 2268.086060][ T7258] ? kzalloc+0x22/0x40 [ 2268.090117][ T7258] should_failslab+0x5/0x20 [ 2268.094591][ T7258] __kmalloc+0x5f/0x2d0 [ 2268.098729][ T7258] kzalloc+0x22/0x40 [ 2268.102610][ T7258] security_prepare_creds+0x46/0x220 [ 2268.107890][ T7258] prepare_creds+0x290/0x380 [ 2268.112468][ T7258] selinux_inode_copy_up+0x4a/0x180 [ 2268.117646][ T7258] security_inode_copy_up+0x53/0xb0 [ 2268.122853][ T7258] ovl_copy_up_flags+0x1473/0x2a30 [ 2268.127945][ T7258] ? __x64_sys_setxattr+0xb7/0xd0 [ 2268.132962][ T7258] ? do_syscall_64+0xcb/0x150 [ 2268.137612][ T7258] ? ovl_set_origin+0xf0/0xf0 [ 2268.142262][ T7258] ? __rcu_read_lock+0x50/0x50 [ 2268.147029][ T7258] ? avc_has_perm_noaudit+0x37d/0x400 [ 2268.152398][ T7258] ? avc_has_perm_noaudit+0x30c/0x400 [ 2268.157755][ T7258] ? kfree+0x12b/0x600 [ 2268.161796][ T7258] ? avc_denied+0x1c0/0x1c0 [ 2268.166269][ T7258] ? security_compute_validatetrans+0x5d9/0x9b0 [ 2268.172478][ T7258] ? avc_has_perm+0xd5/0x280 [ 2268.177053][ T7258] ? avc_has_perm+0x176/0x280 [ 2268.181721][ T7258] ? avc_has_perm_noaudit+0x400/0x400 [ 2268.187067][ T7258] ? __kasan_kmalloc+0x12c/0x1c0 [ 2268.191974][ T7258] ? __kmalloc+0xf7/0x2d0 [ 2268.196274][ T7258] ? kvmalloc_node+0xc2/0x120 [ 2268.200922][ T7258] ? __sb_start_write+0xa5/0x150 [ 2268.205845][ T7258] ? mnt_want_write+0x274/0x2f0 [ 2268.210685][ T7258] ovl_xattr_set+0xc9/0x400 [ 2268.215186][ T7258] ? ovl_other_xattr_get+0x50/0x50 [ 2268.220281][ T7258] __vfs_setxattr+0x3be/0x400 [ 2268.224969][ T7258] __vfs_setxattr_noperm+0x12a/0x3e0 [ 2268.230936][ T7258] vfs_setxattr+0x11e/0x2d0 [ 2268.235437][ T7258] ? xattr_permission+0x350/0x350 [ 2268.240551][ T7258] ? __kmalloc+0xf7/0x2d0 [ 2268.244918][ T7258] ? __virt_addr_valid+0x1fd/0x290 [ 2268.250033][ T7258] setxattr+0x1e5/0x420 [ 2268.254226][ T7258] ? path_setxattr+0x240/0x240 [ 2268.258986][ T7258] ? getname_flags+0x20d/0x610 [ 2268.263749][ T7258] ? __sb_start_write+0xa5/0x150 [ 2268.268670][ T7258] path_setxattr+0x164/0x240 [ 2268.273294][ T7258] ? fput_many+0x42/0x1a0 [ 2268.277619][ T7258] ? simple_xattr_list_add+0xf0/0xf0 [ 2268.282920][ T7258] ? __ia32_sys_read+0x80/0x80 [ 2268.287660][ T7258] __x64_sys_setxattr+0xb7/0xd0 [ 2268.292501][ T7258] do_syscall_64+0xcb/0x150 [ 2268.296997][ T7258] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2268.302878][ T7258] RIP: 0033:0x45d239 [ 2268.306747][ T7258] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2268.326352][ T7258] RSP: 002b:00007f9391efac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 2268.334748][ T7258] RAX: ffffffffffffffda RBX: 0000000000031500 RCX: 000000000045d239 [ 2268.342693][ T7258] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000140 [ 2268.350643][ T7258] RBP: 00007f9391efaca0 R08: 0000000000000000 R09: 0000000000000000 [ 2268.358608][ T7258] R10: 000000000000002b R11: 0000000000000246 R12: 0000000000000010 [ 2268.366559][ T7258] R13: 00007fff189c822f R14: 00007f9391efb9c0 R15: 000000000118cf4c [ 2268.643644][T29417] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 2268.913650][T29417] usb 1-1: device descriptor read/64, error 18 [ 2269.303667][T29417] usb 1-1: device descriptor read/64, error 18 [ 2269.573686][T29417] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 2269.843669][T29417] usb 1-1: device descriptor read/64, error 18 [ 2270.233693][T29417] usb 1-1: device descriptor read/64, error 18 [ 2270.353748][T29417] usb usb1-port1: attempt power cycle 07:46:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050205080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:46:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, 0x0) 07:46:54 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000100)=""/106, 0x6a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000000c0)=0x7) lseek(r2, 0x0, 0x0) getdents64(r2, &(0x7f0000000400)=""/255, 0xff) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB='syztnl0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0007001000000009000000024d260074006800008004907881bd0101ac1e0001442cf823fffffffffffffffb0a0101000000000257ffffff00000001ac1e0001ffffffc0ffffffff0000001e4414db33ffffffff00000005e0000002000000080101441c06000000000000000000fffff800000003ff00000000000007ff000007980c3b4e6ed27c503725e207f24f673d0442e954d5dfea7067aeb25930e421cba3d4ebb16972d64b19d99482b0d34982d082f5e94dd8479beca8ec43814971361a0cda1cbd4acdc54daa59b14dcda1bd2a038784da0650288120058302e2921cbcafb641f66b5c559707e6"]}) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_EPOCH_READ(r8, 0x8008700d, &(0x7f0000000040)) 07:46:54 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)}}, &(0x7f0000000080)=0x0) timer_gettime(r5, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) 07:46:54 executing program 4 (fault-call:10 fault-nth:17): mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x0) 07:46:54 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005000000050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup2(r3, r2) socketpair(0x1f, 0x4, 0xfffffffb, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000100)={0x39c1, 0x6, 0xb61, 0x9, 0x1000}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) open_tree(r4, &(0x7f0000000040)='./file0\x00', 0x1000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth0_to_bond\x00', 0x1}, 0x18) 07:46:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050206080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2270.502041][ T7271] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2270.515121][ T7263] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=361681 [ 2270.521383][ T7275] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2270.530255][ T7263] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=361681 07:46:54 executing program 1 (fault-call:4 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)) [ 2270.549207][ T7263] FAULT_INJECTION: forcing a failure. [ 2270.549207][ T7263] name failslab, interval 1, probability 0, space 0, times 0 [ 2270.567297][ T7279] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2270.567611][ T7263] CPU: 1 PID: 7263 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2270.580818][ T7284] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2270.586551][ T7263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2270.586555][ T7263] Call Trace: [ 2270.586575][ T7263] dump_stack+0x14a/0x1ce [ 2270.586584][ T7263] ? devkmsg_release+0x11c/0x11c [ 2270.586592][ T7263] ? show_regs_print_info+0x12/0x12 [ 2270.586600][ T7263] ? __rcu_read_lock+0x50/0x50 [ 2270.586609][ T7263] ? unwind_get_return_address_ptr+0x130/0x130 [ 2270.586618][ T7263] should_fail+0x6fb/0x860 [ 2270.586639][ T7263] ? setup_fault_attr+0x3d0/0x3d0 [ 2270.643878][ T7263] ? stack_trace_save+0x1f0/0x1f0 [ 2270.648881][ T7263] ? __kernel_text_address+0x93/0x110 [ 2270.654225][ T7263] ? __rcu_read_lock+0x50/0x50 [ 2270.658995][ T7263] ? unwind_get_return_address+0x48/0x90 [ 2270.666162][ T7263] ? __d_alloc+0x2a/0x6b0 [ 2270.671262][ T7263] should_failslab+0x5/0x20 [ 2270.676107][ T7263] kmem_cache_alloc+0x36/0x260 [ 2270.688419][ T7263] __d_alloc+0x2a/0x6b0 [ 2270.692565][ T7263] d_alloc_parallel+0xf3/0x1440 [ 2270.697400][ T7263] ? avc_has_perm_noaudit+0x37d/0x400 [ 2270.702769][ T7263] ? avc_has_perm_noaudit+0x30c/0x400 [ 2270.708143][ T7263] ? avc_denied+0x1c0/0x1c0 [ 2270.712809][ T7263] ? d_hash_and_lookup+0x1e0/0x1e0 [ 2270.717956][ T7263] ? __vfs_setxattr+0x3be/0x400 [ 2270.722783][ T7263] ? __vfs_setxattr_noperm+0x12a/0x3e0 [ 2270.728235][ T7263] ? vfs_setxattr+0x11e/0x2d0 [ 2270.732892][ T7263] ? selinux_inode_permission+0x389/0x6c0 [ 2270.739284][ T7263] ? selinux_inode_permission+0x464/0x6c0 [ 2270.744994][ T7263] ? __rcu_read_lock+0x50/0x50 [ 2270.749732][ T7263] __lookup_slow+0x169/0x490 [ 2270.754301][ T7263] ? lookup_one_len2+0x2d0/0x2d0 [ 2270.759209][ T7263] lookup_one_len2+0x18b/0x2d0 [ 2270.763949][ T7263] ? lookup_one_len_common+0x460/0x460 [ 2270.769399][ T7263] ? selinux_cred_prepare+0x72/0x80 [ 2270.774566][ T7263] ? memcpy+0x38/0x50 [ 2270.778524][ T7263] ovl_lookup_temp+0xd3/0x180 [ 2270.783202][ T7263] ? ovl_create_temp+0x50/0x50 [ 2270.787938][ T7263] ? prepare_creds+0x2a4/0x380 [ 2270.792698][ T7263] ? selinux_inode_copy_up+0xe0/0x180 [ 2270.798045][ T7263] ovl_create_temp+0x3c/0x50 [ 2270.803317][ T7263] ovl_copy_up_flags+0x17ec/0x2a30 [ 2270.808414][ T7263] ? __x64_sys_setxattr+0xb7/0xd0 [ 2270.813427][ T7263] ? do_syscall_64+0xcb/0x150 [ 2270.818083][ T7263] ? ovl_set_origin+0xf0/0xf0 [ 2270.826563][ T7263] ? __rcu_read_lock+0x50/0x50 [ 2270.831301][ T7263] ? avc_has_perm_noaudit+0x37d/0x400 [ 2270.836658][ T7263] ? avc_has_perm_noaudit+0x30c/0x400 [ 2270.842073][ T7263] ? kfree+0x12b/0x600 [ 2270.846155][ T7263] ? avc_denied+0x1c0/0x1c0 [ 2270.850644][ T7263] ? security_compute_validatetrans+0x5d9/0x9b0 [ 2270.856871][ T7263] ? avc_has_perm+0xd5/0x280 [ 2270.861455][ T7263] ? avc_has_perm+0x176/0x280 [ 2270.868198][ T7263] ? avc_has_perm_noaudit+0x400/0x400 [ 2270.873554][ T7263] ? __kasan_kmalloc+0x12c/0x1c0 [ 2270.878464][ T7263] ? __kmalloc+0xf7/0x2d0 [ 2270.882764][ T7263] ? kvmalloc_node+0xc2/0x120 [ 2270.887438][ T7263] ? __sb_start_write+0xa5/0x150 [ 2270.892360][ T7263] ? mnt_want_write+0x274/0x2f0 [ 2270.897196][ T7263] ovl_xattr_set+0xc9/0x400 [ 2270.901670][ T7263] ? ovl_other_xattr_get+0x50/0x50 [ 2270.906762][ T7263] __vfs_setxattr+0x3be/0x400 [ 2270.911425][ T7263] __vfs_setxattr_noperm+0x12a/0x3e0 [ 2270.916732][ T7263] vfs_setxattr+0x11e/0x2d0 [ 2270.921229][ T7263] ? xattr_permission+0x350/0x350 [ 2270.926228][ T7263] ? __kmalloc+0xf7/0x2d0 [ 2270.930550][ T7263] ? __virt_addr_valid+0x1fd/0x290 [ 2270.935637][ T7263] setxattr+0x1e5/0x420 [ 2270.939784][ T7263] ? path_setxattr+0x240/0x240 [ 2270.944524][ T7263] ? getname_flags+0x20d/0x610 [ 2270.949261][ T7263] ? __sb_start_write+0xa5/0x150 [ 2270.954169][ T7263] path_setxattr+0x164/0x240 [ 2270.958758][ T7263] ? fput_many+0x42/0x1a0 [ 2270.963062][ T7263] ? simple_xattr_list_add+0xf0/0xf0 [ 2270.968338][ T7263] ? __ia32_sys_read+0x80/0x80 [ 2270.973078][ T7263] __x64_sys_setxattr+0xb7/0xd0 [ 2270.977908][ T7263] do_syscall_64+0xcb/0x150 [ 2270.982403][ T7263] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2270.988287][ T7263] RIP: 0033:0x45d239 [ 2270.992170][ T7263] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2271.013600][ T7263] RSP: 002b:00007f9391efac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 2271.021997][ T7263] RAX: ffffffffffffffda RBX: 0000000000031500 RCX: 000000000045d239 [ 2271.029948][ T7263] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000140 [ 2271.037913][ T7263] RBP: 00007f9391efaca0 R08: 0000000000000000 R09: 0000000000000000 [ 2271.045859][ T7263] R10: 000000000000002b R11: 0000000000000246 R12: 0000000000000011 07:46:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050207080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:46:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)) 07:46:54 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x200000, &(0x7f00000003c0)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) pread64(0xffffffffffffffff, &(0x7f0000000480)=""/167, 0xa7, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000300)=0x100, 0x4) getdents64(r2, &(0x7f0000000100)=""/106, 0x6a) lseek(r2, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000180)=""/270, 0x10e) [ 2271.053805][ T7263] R13: 00007fff189c822f R14: 00007f9391efb9c0 R15: 000000000118cf4c 07:46:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x300, 0x0, 0x0, &(0x7f00000001c0)) 07:46:54 executing program 4 (fault-call:10 fault-nth:18): mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x0) 07:46:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050208080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2271.095472][ T7289] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2271.112056][ T7292] overlayfs: missing 'lowerdir' [ 2271.120880][ T7294] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:46:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)) [ 2271.148734][ T7298] overlayfs: missing 'lowerdir' [ 2271.160009][ T7299] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2271.175700][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2271.214255][ T7305] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=361747 [ 2271.223749][ T7305] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=361747 [ 2271.233337][ T7305] FAULT_INJECTION: forcing a failure. [ 2271.233337][ T7305] name failslab, interval 1, probability 0, space 0, times 0 [ 2271.247179][ T7305] CPU: 0 PID: 7305 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 07:46:54 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c2"}}, &(0x7f0000000080)=0x0) timer_gettime(r5, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) 07:46:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050209080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2271.257241][ T7305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2271.267284][ T7305] Call Trace: [ 2271.270560][ T7305] dump_stack+0x14a/0x1ce [ 2271.275370][ T7305] ? devkmsg_release+0x11c/0x11c [ 2271.280303][ T7305] ? show_regs_print_info+0x12/0x12 [ 2271.285492][ T7305] ? _raw_spin_lock_irqsave+0xfc/0x1e0 [ 2271.290929][ T7305] ? _raw_spin_lock+0x170/0x170 [ 2271.295757][ T7305] ? setxattr+0x1e5/0x420 [ 2271.300064][ T7305] should_fail+0x6fb/0x860 [ 2271.305422][ T7305] ? setup_fault_attr+0x3d0/0x3d0 [ 2271.310446][ T7305] ? __wake_up+0x153/0x210 [ 2271.313668][ T7311] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2271.314876][ T7305] ? ext4_alloc_inode+0x1b/0x620 [ 2271.314886][ T7305] should_failslab+0x5/0x20 [ 2271.314903][ T7305] kmem_cache_alloc+0x36/0x260 [ 2271.328933][ T7312] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2271.328997][ T7305] ? set_qf_name+0x350/0x350 [ 2271.351968][ T7305] ext4_alloc_inode+0x1b/0x620 [ 2271.356711][ T7305] ? set_qf_name+0x350/0x350 [ 2271.361278][ T7305] new_inode_pseudo+0x64/0x240 [ 2271.366043][ T7305] new_inode+0x25/0x1d0 [ 2271.370183][ T7305] __ext4_new_inode+0x639/0x5cc0 [ 2271.375120][ T7305] ? ext4_read_inode_bitmap+0x1950/0x1950 [ 2271.380826][ T7305] ? memset+0x1f/0x40 [ 2271.384809][ T7305] ? __dquot_initialize+0x227/0xd70 [ 2271.389993][ T7305] ? avc_has_perm+0x176/0x280 [ 2271.394690][ T7305] ? avc_denied+0x1c0/0x1c0 [ 2271.399171][ T7305] ext4_mkdir+0x41e/0x1530 [ 2271.403587][ T7305] ? selinux_inode_follow_link+0x3c0/0x3c0 [ 2271.409380][ T7305] ? ext4_symlink+0x1040/0x1040 [ 2271.414221][ T7305] ? generic_permission+0x190/0x4a0 [ 2271.419401][ T7305] ? security_inode_mkdir+0xed/0x130 [ 2271.425398][ T7305] vfs_mkdir2+0x448/0x620 [ 2271.430407][ T7305] ovl_create_real+0x148/0x330 [ 2271.435140][ T7305] ovl_copy_up_flags+0x17ec/0x2a30 [ 2271.440228][ T7305] ? __x64_sys_setxattr+0xb7/0xd0 [ 2271.445234][ T7305] ? do_syscall_64+0xcb/0x150 [ 2271.450586][ T7305] ? ovl_set_origin+0xf0/0xf0 [ 2271.455271][ T7305] ? __rcu_read_lock+0x50/0x50 [ 2271.460021][ T7305] ? avc_has_perm_noaudit+0x37d/0x400 [ 2271.465370][ T7305] ? avc_has_perm_noaudit+0x30c/0x400 [ 2271.470727][ T7305] ? kfree+0x12b/0x600 [ 2271.474795][ T7305] ? avc_denied+0x1c0/0x1c0 [ 2271.479281][ T7305] ? security_compute_validatetrans+0x5d9/0x9b0 [ 2271.486207][ T7305] ? avc_has_perm+0xd5/0x280 [ 2271.490790][ T7305] ? avc_has_perm+0x176/0x280 [ 2271.495455][ T7305] ? avc_has_perm_noaudit+0x400/0x400 [ 2271.500821][ T7305] ? __kasan_kmalloc+0x12c/0x1c0 [ 2271.505743][ T7305] ? __kmalloc+0xf7/0x2d0 [ 2271.510071][ T7305] ? kvmalloc_node+0xc2/0x120 [ 2271.514730][ T7305] ? __sb_start_write+0xa5/0x150 [ 2271.519705][ T7305] ? mnt_want_write+0x274/0x2f0 [ 2271.524531][ T7305] ovl_xattr_set+0xc9/0x400 [ 2271.529009][ T7305] ? ovl_other_xattr_get+0x50/0x50 [ 2271.534098][ T7305] __vfs_setxattr+0x3be/0x400 [ 2271.538754][ T7305] __vfs_setxattr_noperm+0x12a/0x3e0 [ 2271.544008][ T7305] vfs_setxattr+0x11e/0x2d0 [ 2271.548481][ T7305] ? xattr_permission+0x350/0x350 [ 2271.554100][ T7305] ? __kmalloc+0xf7/0x2d0 [ 2271.559381][ T7305] ? __virt_addr_valid+0x1fd/0x290 [ 2271.564480][ T7305] setxattr+0x1e5/0x420 [ 2271.568606][ T7305] ? path_setxattr+0x240/0x240 [ 2271.573347][ T7305] ? getname_flags+0x20d/0x610 [ 2271.578096][ T7305] ? __sb_start_write+0xa5/0x150 [ 2271.583020][ T7305] path_setxattr+0x164/0x240 [ 2271.587580][ T7305] ? fput_many+0x42/0x1a0 [ 2271.591880][ T7305] ? simple_xattr_list_add+0xf0/0xf0 [ 2271.597136][ T7305] ? __ia32_sys_read+0x80/0x80 [ 2271.601874][ T7305] __x64_sys_setxattr+0xb7/0xd0 [ 2271.606695][ T7305] do_syscall_64+0xcb/0x150 [ 2271.611175][ T7305] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2271.617048][ T7305] RIP: 0033:0x45d239 [ 2271.620933][ T7305] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2271.641556][ T7305] RSP: 002b:00007f9391efac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 2271.649958][ T7305] RAX: ffffffffffffffda RBX: 0000000000031500 RCX: 000000000045d239 [ 2271.657905][ T7305] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000140 [ 2271.665941][ T7305] RBP: 00007f9391efaca0 R08: 0000000000000000 R09: 0000000000000000 [ 2271.674111][ T7305] R10: 000000000000002b R11: 0000000000000246 R12: 0000000000000012 [ 2271.682074][ T7305] R13: 00007fff189c822f R14: 00007f9391efb9c0 R15: 000000000118cf4c [ 2271.983657][T29417] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 2272.193727][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2272.204662][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2272.214453][T29417] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2272.223460][T29417] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2272.232268][T29417] usb 1-1: config 0 descriptor?? [ 2272.573732][T29417] usbhid 1-1:0.0: can't add hid device: -71 [ 2272.579672][T29417] usbhid: probe of 1-1:0.0 failed with error -71 [ 2272.587792][T29417] usb 1-1: USB disconnect, device number 127 [ 2273.043675][T29417] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 2273.403756][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2273.414695][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2273.424510][T29417] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2273.433546][T29417] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2273.442637][T29417] usb 1-1: config 0 descriptor?? 07:46:57 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000100)=""/106, 0x6a) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x200000000011, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) lseek(r3, 0x0, 0x3) getdents64(r2, &(0x7f0000000400)=""/255, 0xff) 07:46:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x2, 0x0, &(0x7f00000001c0)) 07:46:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b05020a080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:46:57 executing program 4 (fault-call:10 fault-nth:19): mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x0) 07:46:57 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$BLKALIGNOFF(r7, 0x127a, &(0x7f00000000c0)) readlinkat(r4, &(0x7f0000000040)='./file0\x00', &(0x7f0000000840)=""/4096, 0x1000) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005000000050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @loopback}, 0x10) sendto$inet(r8, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0xffffffd8) setsockopt$inet_udp_int(r8, 0x11, 0x66, &(0x7f0000000100)=0x100, 0x4) 07:46:57 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c2"}}, &(0x7f0000000080)=0x0) timer_gettime(r5, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) 07:46:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3, 0x0, &(0x7f00000001c0)) 07:46:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b05020b080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:46:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x4, 0x0, &(0x7f00000001c0)) 07:46:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b05020c080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:46:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x5, 0x0, &(0x7f00000001c0)) [ 2273.748772][ T7337] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=361831 [ 2273.770620][ T7337] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=361831 [ 2273.783780][T29417] usbhid 1-1:0.0: can't add hid device: -71 [ 2273.790297][T29417] usbhid: probe of 1-1:0.0 failed with error -71 07:46:57 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = accept$inet6(r1, 0x0, &(0x7f0000000040)) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000180)) r3 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000100)=""/106, 0x6a) lseek(r3, 0x0, 0x0) mount(&(0x7f00000001c0)=@nullb='/dev/nullb0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='jfs\x00', 0x0, &(0x7f0000000280)='fuseblk\x00') getdents64(r3, &(0x7f0000000400)=""/255, 0xff) 07:46:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b05020d080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2273.807708][ T7337] FAULT_INJECTION: forcing a failure. [ 2273.807708][ T7337] name failslab, interval 1, probability 0, space 0, times 0 [ 2273.811871][T29417] usb 1-1: USB disconnect, device number 2 [ 2273.839321][ T7337] CPU: 0 PID: 7337 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 07:46:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b05020e080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:46:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050210080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2273.849439][ T7337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2273.859495][ T7337] Call Trace: [ 2273.862779][ T7337] dump_stack+0x14a/0x1ce [ 2273.867098][ T7337] ? devkmsg_release+0x11c/0x11c [ 2273.872030][ T7337] ? show_regs_print_info+0x12/0x12 [ 2273.877225][ T7337] should_fail+0x6fb/0x860 [ 2273.881641][ T7337] ? setup_fault_attr+0x3d0/0x3d0 [ 2273.886664][ T7337] ? make_kgid+0x228/0x3a0 [ 2273.891089][ T7337] ? security_inode_alloc+0x32/0x1f0 [ 2273.896373][ T7337] should_failslab+0x5/0x20 [ 2273.900893][ T7337] kmem_cache_alloc+0x36/0x260 [ 2273.905654][ T7337] ? ext4_alloc_inode+0x1b/0x620 [ 2273.910606][ T7337] security_inode_alloc+0x32/0x1f0 [ 2273.915837][ T7337] inode_init_always+0x37c/0x800 [ 2273.920782][ T7337] ? set_qf_name+0x350/0x350 [ 2273.925375][ T7337] new_inode_pseudo+0x7b/0x240 [ 2273.930139][ T7337] new_inode+0x25/0x1d0 [ 2273.934298][ T7337] __ext4_new_inode+0x639/0x5cc0 [ 2273.939234][ T7337] ? ext4_read_inode_bitmap+0x1950/0x1950 [ 2273.944934][ T7337] ? memset+0x1f/0x40 [ 2273.948901][ T7337] ? __dquot_initialize+0x227/0xd70 [ 2273.954123][ T7337] ? avc_has_perm+0x176/0x280 [ 2273.958778][ T7337] ? avc_denied+0x1c0/0x1c0 [ 2273.963265][ T7337] ext4_mkdir+0x41e/0x1530 [ 2273.967672][ T7337] ? selinux_inode_follow_link+0x3c0/0x3c0 [ 2273.973451][ T7337] ? ext4_symlink+0x1040/0x1040 [ 2273.978279][ T7337] ? generic_permission+0x190/0x4a0 [ 2273.983475][ T7337] ? security_inode_mkdir+0xed/0x130 [ 2273.988738][ T7337] vfs_mkdir2+0x448/0x620 [ 2273.993049][ T7337] ovl_create_real+0x148/0x330 [ 2273.997792][ T7337] ovl_copy_up_flags+0x17ec/0x2a30 [ 2274.002965][ T7337] ? __x64_sys_setxattr+0xb7/0xd0 [ 2274.007969][ T7337] ? ovl_set_origin+0xf0/0xf0 [ 2274.012622][ T7337] ? __rcu_read_lock+0x50/0x50 [ 2274.017357][ T7337] ? avc_has_perm_noaudit+0x37d/0x400 [ 2274.022703][ T7337] ? avc_has_perm_noaudit+0x30c/0x400 [ 2274.028073][ T7337] ? kfree+0x12b/0x600 [ 2274.032115][ T7337] ? avc_denied+0x1c0/0x1c0 [ 2274.036588][ T7337] ? security_compute_validatetrans+0x5d9/0x9b0 [ 2274.042816][ T7337] ? avc_has_perm+0xd5/0x280 [ 2274.047380][ T7337] ? avc_has_perm+0x176/0x280 [ 2274.052207][ T7337] ? avc_has_perm_noaudit+0x400/0x400 [ 2274.057568][ T7337] ? __kasan_kmalloc+0x12c/0x1c0 [ 2274.062601][ T7337] ? __kmalloc+0xf7/0x2d0 [ 2274.066908][ T7337] ? kvmalloc_node+0xc2/0x120 [ 2274.071612][ T7337] ? __sb_start_write+0xa5/0x150 [ 2274.076560][ T7337] ? mnt_want_write+0x274/0x2f0 [ 2274.081414][ T7337] ovl_xattr_set+0xc9/0x400 [ 2274.085894][ T7337] ? ovl_other_xattr_get+0x50/0x50 [ 2274.090982][ T7337] __vfs_setxattr+0x3be/0x400 [ 2274.095644][ T7337] __vfs_setxattr_noperm+0x12a/0x3e0 [ 2274.100911][ T7337] vfs_setxattr+0x11e/0x2d0 [ 2274.105389][ T7337] ? xattr_permission+0x350/0x350 [ 2274.110386][ T7337] ? __kmalloc+0xf7/0x2d0 [ 2274.114698][ T7337] ? __virt_addr_valid+0x1fd/0x290 [ 2274.119797][ T7337] setxattr+0x1e5/0x420 [ 2274.123971][ T7337] ? path_setxattr+0x240/0x240 [ 2274.128716][ T7337] ? getname_flags+0x20d/0x610 [ 2274.133493][ T7337] ? __sb_start_write+0xa5/0x150 [ 2274.138421][ T7337] path_setxattr+0x164/0x240 [ 2274.143011][ T7337] ? fput_many+0x42/0x1a0 [ 2274.147336][ T7337] ? simple_xattr_list_add+0xf0/0xf0 [ 2274.152616][ T7337] ? __ia32_sys_read+0x80/0x80 [ 2274.157355][ T7337] __x64_sys_setxattr+0xb7/0xd0 [ 2274.162196][ T7337] do_syscall_64+0xcb/0x150 [ 2274.166673][ T7337] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2274.172543][ T7337] RIP: 0033:0x45d239 [ 2274.176410][ T7337] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2274.195989][ T7337] RSP: 002b:00007f9391efac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc 07:46:57 executing program 4 (fault-call:10 fault-nth:20): mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x0) [ 2274.204402][ T7337] RAX: ffffffffffffffda RBX: 0000000000031500 RCX: 000000000045d239 [ 2274.212351][ T7337] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000140 [ 2274.222412][ T7337] RBP: 00007f9391efaca0 R08: 0000000000000000 R09: 0000000000000000 [ 2274.230376][ T7337] R10: 000000000000002b R11: 0000000000000246 R12: 0000000000000013 [ 2274.238341][ T7337] R13: 00007fff189c822f R14: 00007f9391efb9c0 R15: 000000000118cf4c [ 2274.301820][ T7381] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=361868 [ 2274.311927][ T7381] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=361868 [ 2274.322185][ T7381] FAULT_INJECTION: forcing a failure. [ 2274.322185][ T7381] name failslab, interval 1, probability 0, space 0, times 0 [ 2274.334802][ T7381] CPU: 0 PID: 7381 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2274.344841][ T7381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2274.354885][ T7381] Call Trace: [ 2274.358153][ T7381] dump_stack+0x14a/0x1ce [ 2274.362471][ T7381] ? devkmsg_release+0x11c/0x11c [ 2274.367436][ T7381] ? show_regs_print_info+0x12/0x12 [ 2274.372637][ T7381] ? stack_trace_save+0x1f0/0x1f0 [ 2274.377638][ T7381] ? __kernel_text_address+0x93/0x110 [ 2274.382987][ T7381] ? unwind_get_return_address+0x48/0x90 [ 2274.388602][ T7381] should_fail+0x6fb/0x860 [ 2274.393000][ T7381] ? setup_fault_attr+0x3d0/0x3d0 [ 2274.398005][ T7381] ? ebitmap_cmp+0x1c8/0x230 [ 2274.402576][ T7381] ? mls_compute_context_len+0x81b/0x850 [ 2274.408183][ T7381] ? context_struct_to_string+0x3e4/0x820 [ 2274.413968][ T7381] should_failslab+0x5/0x20 [ 2274.418459][ T7381] __kmalloc+0x5f/0x2d0 [ 2274.422601][ T7381] context_struct_to_string+0x3e4/0x820 [ 2274.428163][ T7381] ? security_bounded_transition+0x560/0x560 [ 2274.434151][ T7381] ? find_get_entry+0x5ea/0x680 [ 2274.439024][ T7381] ? ext4_mkdir+0x41e/0x1530 [ 2274.443626][ T7381] ? sidtab_search_force+0x139/0x330 [ 2274.448903][ T7381] security_sid_to_context_core+0x270/0x3a0 [ 2274.454782][ T7381] selinux_inode_init_security+0x709/0xb00 [ 2274.460582][ T7381] ? selinux_inode_free_security+0x1d0/0x1d0 [ 2274.466536][ T7381] ? crc16+0x1e6/0x230 [ 2274.470586][ T7381] security_inode_init_security+0x16f/0x3c0 [ 2274.476505][ T7381] ? ext4_init_security+0x40/0x40 [ 2274.481561][ T7381] ? security_dentry_create_files_as+0xe0/0xe0 [ 2274.487744][ T7381] ? _raw_spin_unlock+0x5/0x20 [ 2274.492500][ T7381] __ext4_new_inode+0x46ea/0x5cc0 [ 2274.497505][ T7381] ? ext4_read_inode_bitmap+0x1950/0x1950 [ 2274.503494][ T7381] ? memset+0x1f/0x40 [ 2274.507475][ T7381] ? __dquot_initialize+0x227/0xd70 [ 2274.512649][ T7381] ? avc_has_perm+0x176/0x280 [ 2274.517311][ T7381] ? avc_denied+0x1c0/0x1c0 [ 2274.521803][ T7381] ext4_mkdir+0x41e/0x1530 [ 2274.526194][ T7381] ? selinux_inode_follow_link+0x3c0/0x3c0 [ 2274.532009][ T7381] ? ext4_symlink+0x1040/0x1040 [ 2274.536859][ T7381] ? generic_permission+0x190/0x4a0 [ 2274.542029][ T7381] ? security_inode_mkdir+0xed/0x130 [ 2274.547288][ T7381] vfs_mkdir2+0x448/0x620 [ 2274.551592][ T7381] ovl_create_real+0x148/0x330 [ 2274.556328][ T7381] ovl_copy_up_flags+0x17ec/0x2a30 [ 2274.561410][ T7381] ? __x64_sys_setxattr+0xb7/0xd0 [ 2274.566413][ T7381] ? do_syscall_64+0xcb/0x150 [ 2274.571085][ T7381] ? ovl_set_origin+0xf0/0xf0 [ 2274.575758][ T7381] ? __rcu_read_lock+0x50/0x50 [ 2274.580520][ T7381] ? avc_has_perm_noaudit+0x37d/0x400 [ 2274.585875][ T7381] ? avc_has_perm_noaudit+0x30c/0x400 [ 2274.591576][ T7381] ? kfree+0x12b/0x600 [ 2274.595630][ T7381] ? avc_denied+0x1c0/0x1c0 [ 2274.600120][ T7381] ? security_compute_validatetrans+0x5d9/0x9b0 [ 2274.606336][ T7381] ? avc_has_perm+0xd5/0x280 [ 2274.610903][ T7381] ? avc_has_perm+0x176/0x280 [ 2274.615647][ T7381] ? avc_has_perm_noaudit+0x400/0x400 [ 2274.621026][ T7381] ? __kasan_kmalloc+0x12c/0x1c0 [ 2274.625959][ T7381] ? __kmalloc+0xf7/0x2d0 [ 2274.630274][ T7381] ? kvmalloc_node+0xc2/0x120 [ 2274.634930][ T7381] ? __sb_start_write+0xa5/0x150 [ 2274.639867][ T7381] ? mnt_want_write+0x274/0x2f0 [ 2274.644695][ T7381] ovl_xattr_set+0xc9/0x400 [ 2274.649203][ T7381] ? ovl_other_xattr_get+0x50/0x50 [ 2274.654296][ T7381] __vfs_setxattr+0x3be/0x400 [ 2274.658977][ T7381] __vfs_setxattr_noperm+0x12a/0x3e0 [ 2274.664257][ T7381] vfs_setxattr+0x11e/0x2d0 [ 2274.668785][ T7381] ? xattr_permission+0x350/0x350 [ 2274.673785][ T7381] ? __kmalloc+0xf7/0x2d0 [ 2274.678155][ T7381] ? __virt_addr_valid+0x1fd/0x290 [ 2274.689088][ T7381] setxattr+0x1e5/0x420 [ 2274.693235][ T7381] ? path_setxattr+0x240/0x240 [ 2274.697978][ T7381] ? getname_flags+0x20d/0x610 [ 2274.702718][ T7381] ? __sb_start_write+0xa5/0x150 [ 2274.707643][ T7381] path_setxattr+0x164/0x240 [ 2274.712254][ T7381] ? fput_many+0x42/0x1a0 [ 2274.720603][ T7381] ? simple_xattr_list_add+0xf0/0xf0 [ 2274.725883][ T7381] ? __ia32_sys_read+0x80/0x80 [ 2274.730622][ T7381] __x64_sys_setxattr+0xb7/0xd0 [ 2274.735447][ T7381] do_syscall_64+0xcb/0x150 [ 2274.739969][ T7381] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2274.745835][ T7381] RIP: 0033:0x45d239 [ 2274.749715][ T7381] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2274.769310][ T7381] RSP: 002b:00007f9391efac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 2274.777694][ T7381] RAX: ffffffffffffffda RBX: 0000000000031500 RCX: 000000000045d239 [ 2274.785658][ T7381] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000140 [ 2274.793630][ T7381] RBP: 00007f9391efaca0 R08: 0000000000000000 R09: 0000000000000000 [ 2274.801603][ T7381] R10: 000000000000002b R11: 0000000000000246 R12: 0000000000000014 [ 2274.809556][ T7381] R13: 00007fff189c822f R14: 00007f9391efb9c0 R15: 000000000118cf4c [ 2275.023669][T29417] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 2275.383727][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2275.394623][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2275.404420][T29417] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2275.413450][T29417] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2275.422274][T29417] usb 1-1: config 0 descriptor?? [ 2275.763758][T29417] usbhid 1-1:0.0: can't add hid device: -71 [ 2275.769740][T29417] usbhid: probe of 1-1:0.0 failed with error -71 [ 2275.778212][T29417] usb 1-1: USB disconnect, device number 3 [ 2276.243647][T29417] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 2276.603744][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2276.614640][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2276.625200][T29417] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2276.634651][T29417] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2276.643344][T29417] usb 1-1: config 0 descriptor?? 07:47:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x6, 0x0, &(0x7f00000001c0)) 07:47:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050211080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:47:00 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000300)={0xffffffffffffffff}) mknodat(r2, &(0x7f0000000340)='./file0\x00', 0x400, 0x8) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000400)={@remote, @multicast2, 0x0}, &(0x7f0000000440)=0xc) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="ada8d3dcd68f018a759f225e82cc951ca202db6342f4c9be86d549a33d405be55a3db3c5a0c992b63d277e66108a8bbc62a7412e7092d75ec3b5868d7909a380313a2861ee6782a297929467627352fcd56fe4dfbad4c7f0543f54e8bff8344da1daa6489baa08b190b614ccd94880936747116445171a81dc9cd92ee2b18935cad70d05bb9d055088f8316bb65a3f27f8a79da0321a943d0fe8355463400e3b14727910ffa3e2fa90b2989dd30e2247d145a744edf1a07e4583b51204dd895333a040b8927c0dd2ce9741cfcc712d2d91c0987c63fbced72e85a829fb33a9e1", @ANYBLOB="000427bd7000fcdbdf2517000000440001801400020067656e65766531000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYBLOB="1400020076657468315f766c616e00000000000034000180080001", @ANYRES32=r3, @ANYBLOB="140002006970366772657461703000000000000014000200766574683100"/40], 0xb4}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000040) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x0, r3, 0x3}, 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x58, 0x15, 0x24, 0x70bd2b, 0x25dfdbff, {0x2, 0x20, 0xc0, 0xc8}, [@IFA_CACHEINFO={0x14, 0x6, {0x1, 0x5, 0xfffffff7, 0xffffffff}}, @IFA_LOCAL={0x8, 0x2, @remote}, @IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_ADDRESS={0x8, 0x1, @remote}, @IFA_CACHEINFO={0x14, 0x6, {0xbe, 0xe0bf, 0xfff, 0x1e569b25}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r7 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000100)=""/106, 0x6a) lseek(r7, 0x0, 0x0) getdents64(r7, &(0x7f0000000400)=""/255, 0xff) 07:47:00 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c2"}}, &(0x7f0000000080)=0x0) timer_gettime(r5, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) 07:47:00 executing program 4 (fault-call:10 fault-nth:21): mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x0) 07:47:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x7, 0x0, &(0x7f00000001c0)) 07:47:00 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103000000000033cece0090f1e75582722b0e8e9efba57e37edde104a69f3995a9807c14ed5b6e7032e2a4169bae7d71d0b088c2234e661d12314534481d0e763505e7731d9b5901b7698568f356ae26e98b318aa7998f288c010a825f81e"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005000000050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) iopl(0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup2(r3, r2) ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x68, r5, 0x201, 0x0, 0x0, {{}, {0x0, 0x4108}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x8, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x30000049) 07:47:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x8, 0x0, &(0x7f00000001c0)) [ 2276.894458][ T7398] __nla_validate_parse: 12 callbacks suppressed [ 2276.894464][ T7398] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:47:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x9, 0x0, &(0x7f00000001c0)) 07:47:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050212080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2276.950850][ T7397] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=361427 [ 2276.963773][T29417] usbhid 1-1:0.0: can't add hid device: -71 [ 2276.968404][ T7397] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=361427 [ 2276.979757][T29417] usbhid: probe of 1-1:0.0 failed with error -71 [ 2276.995870][ T7397] FAULT_INJECTION: forcing a failure. [ 2276.995870][ T7397] name failslab, interval 1, probability 0, space 0, times 0 [ 2276.999425][T29417] usb 1-1: USB disconnect, device number 4 [ 2277.011106][ T7397] CPU: 0 PID: 7397 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2277.024239][ T7420] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2277.024945][ T7397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2277.024948][ T7397] Call Trace: 07:47:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050225080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2277.024966][ T7397] dump_stack+0x14a/0x1ce [ 2277.024982][ T7397] ? devkmsg_release+0x11c/0x11c [ 2277.036227][ T7421] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2277.044228][ T7397] ? show_regs_print_info+0x12/0x12 [ 2277.044239][ T7397] ? mark_page_accessed+0x282/0x5b0 [ 2277.044247][ T7397] should_fail+0x6fb/0x860 [ 2277.044256][ T7397] ? setup_fault_attr+0x3d0/0x3d0 [ 2277.044266][ T7397] ? write_boundary_block+0x150/0x150 [ 2277.044273][ T7397] ? kcalloc+0x2b/0x50 [ 2277.044281][ T7397] should_failslab+0x5/0x20 07:47:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050228080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:47:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050248080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2277.044289][ T7397] __kmalloc+0x5f/0x2d0 [ 2277.044298][ T7397] ? __rcu_read_lock+0x50/0x50 [ 2277.044315][ T7397] kcalloc+0x2b/0x50 [ 2277.067221][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2277.072574][ T7397] ext4_find_extent+0x2bb/0xce0 [ 2277.072585][ T7397] ext4_ext_map_blocks+0x3b7/0x46a0 [ 2277.072593][ T7397] ? __ext4_journal_get_create_access+0x2e0/0x2e0 [ 2277.072600][ T7397] ? __ext4_get_inode_loc+0x4b0/0x1080 [ 2277.072610][ T7397] ? ext4_ext_release+0x10/0x10 07:47:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0xa, 0x0, &(0x7f00000001c0)) [ 2277.072627][ T7397] ? _raw_spin_lock+0x170/0x170 [ 2277.080553][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2277.082226][ T7397] ? __down_read+0xf1/0x210 [ 2277.082237][ T7397] ? _raw_read_unlock+0xe/0x30 [ 2277.082246][ T7397] ? ext4_es_lookup_extent+0x415/0x900 [ 2277.082263][ T7397] ext4_map_blocks+0x4a0/0x1e60 [ 2277.108860][ T7427] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2277.110250][ T7397] ? _raw_spin_unlock+0x5/0x20 [ 2277.110263][ T7397] ? ext4_issue_zeroout+0x160/0x160 [ 2277.110279][ T7397] ext4_getblk+0x111/0x560 [ 2277.116402][ T7428] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2277.123351][ T7397] ? ext4_get_block_trans+0x5a0/0x5a0 [ 2277.123361][ T7397] ? memset+0x1f/0x40 [ 2277.123369][ T7397] ext4_bread+0x8e/0x390 [ 2277.123377][ T7397] ? ext4_getblk+0x560/0x560 [ 2277.123387][ T7397] ext4_append+0x153/0x2d0 [ 2277.123402][ T7397] ext4_mkdir+0x7f8/0x1530 [ 2277.186552][ T7434] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2277.192948][ T7397] ? selinux_inode_follow_link+0x3c0/0x3c0 [ 2277.192959][ T7397] ? ext4_symlink+0x1040/0x1040 [ 2277.192969][ T7397] ? generic_permission+0x190/0x4a0 [ 2277.192986][ T7397] ? security_inode_mkdir+0xed/0x130 [ 2277.200421][ T7435] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2277.203008][ T7397] vfs_mkdir2+0x448/0x620 [ 2277.203021][ T7397] ovl_create_real+0x148/0x330 [ 2277.203029][ T7397] ovl_copy_up_flags+0x17ec/0x2a30 [ 2277.203046][ T7397] ? __x64_sys_setxattr+0xb7/0xd0 [ 2277.301971][ T7397] ? do_syscall_64+0xcb/0x150 [ 2277.306640][ T7397] ? ovl_set_origin+0xf0/0xf0 [ 2277.311324][ T7397] ? __rcu_read_lock+0x50/0x50 [ 2277.316107][ T7397] ? avc_has_perm_noaudit+0x37d/0x400 [ 2277.321469][ T7397] ? avc_has_perm_noaudit+0x30c/0x400 [ 2277.326834][ T7397] ? kfree+0x12b/0x600 [ 2277.330906][ T7397] ? avc_denied+0x1c0/0x1c0 [ 2277.335400][ T7397] ? security_compute_validatetrans+0x5d9/0x9b0 [ 2277.341644][ T7397] ? avc_has_perm+0xd5/0x280 [ 2277.346211][ T7397] ? avc_has_perm+0x176/0x280 [ 2277.350877][ T7397] ? avc_has_perm_noaudit+0x400/0x400 [ 2277.356234][ T7397] ? __kasan_kmalloc+0x12c/0x1c0 [ 2277.361159][ T7397] ? __kmalloc+0xf7/0x2d0 [ 2277.363633][T29417] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 2277.365467][ T7397] ? kvmalloc_node+0xc2/0x120 [ 2277.365476][ T7397] ? __sb_start_write+0xa5/0x150 [ 2277.365490][ T7397] ? mnt_want_write+0x274/0x2f0 [ 2277.387382][ T7397] ovl_xattr_set+0xc9/0x400 [ 2277.391879][ T7397] ? ovl_other_xattr_get+0x50/0x50 [ 2277.397065][ T7397] __vfs_setxattr+0x3be/0x400 [ 2277.401745][ T7397] __vfs_setxattr_noperm+0x12a/0x3e0 [ 2277.407015][ T7397] vfs_setxattr+0x11e/0x2d0 [ 2277.411506][ T7397] ? xattr_permission+0x350/0x350 [ 2277.416505][ T7397] ? __kmalloc+0xf7/0x2d0 [ 2277.420816][ T7397] ? __virt_addr_valid+0x1fd/0x290 [ 2277.425918][ T7397] setxattr+0x1e5/0x420 [ 2277.430085][ T7397] ? path_setxattr+0x240/0x240 [ 2277.434823][ T7397] ? getname_flags+0x20d/0x610 [ 2277.439557][ T7397] ? __sb_start_write+0xa5/0x150 [ 2277.445892][ T7397] path_setxattr+0x164/0x240 [ 2277.450488][ T7397] ? fput_many+0x42/0x1a0 [ 2277.454992][ T7397] ? simple_xattr_list_add+0xf0/0xf0 [ 2277.460289][ T7397] ? __ia32_sys_read+0x80/0x80 [ 2277.465033][ T7397] __x64_sys_setxattr+0xb7/0xd0 [ 2277.469867][ T7397] do_syscall_64+0xcb/0x150 [ 2277.474341][ T7397] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2277.480221][ T7397] RIP: 0033:0x45d239 [ 2277.484086][ T7397] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2277.503665][ T7397] RSP: 002b:00007f9391efac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 2277.512073][ T7397] RAX: ffffffffffffffda RBX: 0000000000031500 RCX: 000000000045d239 [ 2277.520023][ T7397] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000140 [ 2277.527988][ T7397] RBP: 00007f9391efaca0 R08: 0000000000000000 R09: 0000000000000000 [ 2277.535962][ T7397] R10: 000000000000002b R11: 0000000000000246 R12: 0000000000000015 [ 2277.543911][ T7397] R13: 00007fff189c822f R14: 00007f9391efb9c0 R15: 000000000118cf4c 07:47:01 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0xffffffd8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup2(r2, r1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000100)=""/106, 0x6a) lseek(r5, 0x0, 0x0) getdents64(r5, &(0x7f0000000400)=""/255, 0xff) 07:47:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0xb, 0x0, &(0x7f00000001c0)) 07:47:01 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b05024c080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:47:01 executing program 4 (fault-call:10 fault-nth:22): mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x0) [ 2277.723957][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2277.734920][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2277.746049][T29417] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2277.755597][T29417] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2277.775022][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2277.776723][T29417] usb 1-1: config 0 descriptor?? [ 2277.821181][ T7444] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=362562 [ 2277.831384][ T7444] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=362562 [ 2277.842540][ T7444] FAULT_INJECTION: forcing a failure. [ 2277.842540][ T7444] name failslab, interval 1, probability 0, space 0, times 0 [ 2277.855241][ T7444] CPU: 1 PID: 7444 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2277.865291][ T7444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2277.875375][ T7444] Call Trace: [ 2277.878697][ T7444] dump_stack+0x14a/0x1ce [ 2277.883044][ T7444] ? devkmsg_release+0x11c/0x11c [ 2277.887994][ T7444] ? show_regs_print_info+0x12/0x12 [ 2277.893209][ T7444] ? memset+0x1f/0x40 [ 2277.897168][ T7444] ? __es_remove_extent+0xc0b/0x2280 [ 2277.902453][ T7444] should_fail+0x6fb/0x860 [ 2277.906849][ T7444] ? setup_fault_attr+0x3d0/0x3d0 [ 2277.911850][ T7444] ? __kasan_kmalloc+0x12c/0x1c0 [ 2277.916762][ T7444] ? __kmalloc+0xf7/0x2d0 [ 2277.921065][ T7444] ? kcalloc+0x2b/0x50 [ 2277.925133][ T7444] ? ext4_find_extent+0x2bb/0xce0 [ 2277.930150][ T7444] ? ext4_map_blocks+0x4a0/0x1e60 [ 2277.935160][ T7444] ? ext4_bread+0x8e/0x390 [ 2277.939587][ T7444] ? ext4_append+0x153/0x2d0 [ 2277.944180][ T7444] ? ext4_mkdir+0x7f8/0x1530 [ 2277.948748][ T7444] ? __es_insert_extent+0x7a4/0x1770 [ 2277.954018][ T7444] should_failslab+0x5/0x20 [ 2277.958498][ T7444] kmem_cache_alloc+0x36/0x260 [ 2277.963240][ T7444] __es_insert_extent+0x7a4/0x1770 [ 2277.968357][ T7444] ? _raw_write_lock+0xa1/0x170 [ 2277.973231][ T7444] ext4_es_insert_extent+0x43b/0x3100 [ 2277.978585][ T7444] ? kcalloc+0x2b/0x50 [ 2277.982636][ T7444] ? ext4_es_scan_clu+0x2c0/0x2c0 [ 2277.987690][ T7444] ? ext4_ext_convert_to_initialized+0x1e50/0x1e50 [ 2277.994175][ T7444] ? ext4_ext_convert_to_initialized+0x1e50/0x1e50 [ 2278.000682][ T7444] ? ext4_es_find_extent_range+0x1a7/0x300 [ 2278.006472][ T7444] ext4_ext_map_blocks+0x1836/0x46a0 [ 2278.011755][ T7444] ? __ext4_journal_get_create_access+0x2e0/0x2e0 [ 2278.018148][ T7444] ? __ext4_get_inode_loc+0x4b0/0x1080 [ 2278.023596][ T7444] ? ext4_ext_release+0x10/0x10 [ 2278.028459][ T7444] ? __down_read+0xf1/0x210 [ 2278.033055][ T7444] ? _raw_read_unlock+0xe/0x30 [ 2278.037817][ T7444] ? ext4_es_lookup_extent+0x415/0x900 [ 2278.043288][ T7444] ext4_map_blocks+0x4a0/0x1e60 [ 2278.048134][ T7444] ? _raw_spin_unlock+0x5/0x20 [ 2278.052883][ T7444] ? ext4_issue_zeroout+0x160/0x160 [ 2278.058126][ T7444] ext4_getblk+0x111/0x560 [ 2278.062536][ T7444] ? ext4_get_block_trans+0x5a0/0x5a0 [ 2278.067897][ T7444] ? memset+0x1f/0x40 [ 2278.072019][ T7444] ext4_bread+0x8e/0x390 [ 2278.076259][ T7444] ? ext4_getblk+0x560/0x560 [ 2278.080861][ T7444] ext4_append+0x153/0x2d0 [ 2278.085309][ T7444] ext4_mkdir+0x7f8/0x1530 [ 2278.089727][ T7444] ? selinux_inode_follow_link+0x3c0/0x3c0 [ 2278.095516][ T7444] ? ext4_symlink+0x1040/0x1040 [ 2278.100368][ T7444] ? generic_permission+0x190/0x4a0 [ 2278.105561][ T7444] ? security_inode_mkdir+0xed/0x130 [ 2278.110840][ T7444] vfs_mkdir2+0x448/0x620 [ 2278.115144][ T7444] ovl_create_real+0x148/0x330 [ 2278.119882][ T7444] ovl_copy_up_flags+0x17ec/0x2a30 [ 2278.124980][ T7444] ? __x64_sys_setxattr+0xb7/0xd0 [ 2278.129987][ T7444] ? do_syscall_64+0xcb/0x150 [ 2278.134653][ T7444] ? ovl_set_origin+0xf0/0xf0 [ 2278.139305][ T7444] ? __rcu_read_lock+0x50/0x50 [ 2278.144050][ T7444] ? avc_has_perm_noaudit+0x37d/0x400 [ 2278.149397][ T7444] ? avc_has_perm_noaudit+0x30c/0x400 [ 2278.154743][ T7444] ? kfree+0x12b/0x600 [ 2278.158797][ T7444] ? avc_denied+0x1c0/0x1c0 [ 2278.163279][ T7444] ? security_compute_validatetrans+0x5d9/0x9b0 [ 2278.169507][ T7444] ? avc_has_perm+0xd5/0x280 [ 2278.174077][ T7444] ? avc_has_perm+0x176/0x280 [ 2278.178733][ T7444] ? avc_has_perm_noaudit+0x400/0x400 [ 2278.184108][ T7444] ? __kasan_kmalloc+0x12c/0x1c0 [ 2278.189040][ T7444] ? __kmalloc+0xf7/0x2d0 [ 2278.193350][ T7444] ? kvmalloc_node+0xc2/0x120 [ 2278.198038][ T7444] ? __sb_start_write+0xa5/0x150 [ 2278.202969][ T7444] ? mnt_want_write+0x274/0x2f0 [ 2278.207806][ T7444] ovl_xattr_set+0xc9/0x400 [ 2278.212288][ T7444] ? ovl_other_xattr_get+0x50/0x50 [ 2278.217383][ T7444] __vfs_setxattr+0x3be/0x400 [ 2278.222052][ T7444] __vfs_setxattr_noperm+0x12a/0x3e0 [ 2278.227327][ T7444] vfs_setxattr+0x11e/0x2d0 [ 2278.231866][ T7444] ? xattr_permission+0x350/0x350 [ 2278.236878][ T7444] ? __kmalloc+0xf7/0x2d0 [ 2278.241179][ T7444] ? __virt_addr_valid+0x1fd/0x290 [ 2278.246262][ T7444] setxattr+0x1e5/0x420 [ 2278.250390][ T7444] ? path_setxattr+0x240/0x240 [ 2278.255127][ T7444] ? getname_flags+0x20d/0x610 [ 2278.259863][ T7444] ? __sb_start_write+0xa5/0x150 [ 2278.264779][ T7444] path_setxattr+0x164/0x240 [ 2278.269353][ T7444] ? fput_many+0x42/0x1a0 [ 2278.273665][ T7444] ? simple_xattr_list_add+0xf0/0xf0 [ 2278.278926][ T7444] ? __ia32_sys_read+0x80/0x80 [ 2278.283668][ T7444] __x64_sys_setxattr+0xb7/0xd0 [ 2278.288542][ T7444] do_syscall_64+0xcb/0x150 [ 2278.293036][ T7444] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2278.298936][ T7444] RIP: 0033:0x45d239 [ 2278.302837][ T7444] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2278.322462][ T7444] RSP: 002b:00007f9391efac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 2278.330858][ T7444] RAX: ffffffffffffffda RBX: 0000000000031500 RCX: 000000000045d239 [ 2278.338827][ T7444] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000140 [ 2278.346797][ T7444] RBP: 00007f9391efaca0 R08: 0000000000000000 R09: 0000000000000000 [ 2278.354752][ T7444] R10: 000000000000002b R11: 0000000000000246 R12: 0000000000000016 [ 2278.362714][ T7444] R13: 00007fff189c822f R14: 00007f9391efb9c0 R15: 000000000118cf4c [ 2278.463693][T29417] usbhid 1-1:0.0: can't add hid device: -71 [ 2278.469721][T29417] usbhid: probe of 1-1:0.0 failed with error -71 [ 2278.478262][T29417] usb 1-1: USB disconnect, device number 5 [ 2278.933746][T29417] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 2279.293759][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2279.304648][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2279.315154][T29417] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2279.324757][T29417] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2279.333569][T29417] usb 1-1: config 0 descriptor?? [ 2279.883714][T29417] usbhid 1-1:0.0: can't add hid device: -71 [ 2279.889722][T29417] usbhid: probe of 1-1:0.0 failed with error -71 [ 2279.898285][T29417] usb 1-1: USB disconnect, device number 6 [ 2280.763692][T29417] usb 1-1: new high-speed USB device number 7 using dummy_hcd 07:47:04 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000800109022400010000000009040000010301000009210000beee220500090581030000778796"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005000000050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 2281.123745][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2281.134625][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2281.145036][T29417] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2281.154435][T29417] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2281.164794][T29417] usb 1-1: config 0 descriptor?? 07:47:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0xc, 0x0, &(0x7f00000001c0)) 07:47:04 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81"}}, &(0x7f0000000080)=0x0) timer_gettime(r5, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) 07:47:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050260080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:47:04 executing program 4 (fault-call:10 fault-nth:23): mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x0) 07:47:04 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000040)) r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000100)=""/106, 0x6a) lseek(r5, 0x0, 0x0) getdents64(r5, &(0x7f0000000400)=""/255, 0xff) 07:47:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050268080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:47:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0xd, 0x0, &(0x7f00000001c0)) [ 2281.210136][T29417] usb 1-1: can't set config #0, error -71 [ 2281.223438][T29417] usb 1-1: USB disconnect, device number 7 07:47:04 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x8202, 0x0) getdents64(r2, &(0x7f0000000100)=""/106, 0x6a) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x200000000011, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) lseek(r2, 0x406, 0x1) getdents64(r2, &(0x7f0000000400)=""/255, 0xff) 07:47:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b05026c080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:47:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0xe, 0x0, &(0x7f00000001c0)) [ 2281.268737][ T7471] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=362104 [ 2281.302620][ T7471] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=362104 07:47:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050274080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2281.318684][ T7471] FAULT_INJECTION: forcing a failure. [ 2281.318684][ T7471] name failslab, interval 1, probability 0, space 0, times 0 [ 2281.347429][ T7497] sock: process `syz-executor.1' is using obsolete getsockopt SO_BSDCOMPAT [ 2281.350323][ T7471] CPU: 0 PID: 7471 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2281.366097][ T7471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2281.376147][ T7471] Call Trace: [ 2281.379438][ T7471] dump_stack+0x14a/0x1ce [ 2281.383905][ T7471] ? devkmsg_release+0x11c/0x11c [ 2281.388845][ T7471] ? show_regs_print_info+0x12/0x12 [ 2281.394022][ T7471] should_fail+0x6fb/0x860 [ 2281.398405][ T7471] ? setup_fault_attr+0x3d0/0x3d0 [ 2281.403450][ T7471] ? kcalloc+0x2b/0x50 [ 2281.407488][ T7471] should_failslab+0x5/0x20 [ 2281.411963][ T7471] __kmalloc+0x5f/0x2d0 [ 2281.416086][ T7471] ? slab_free_freelist_hook+0xd0/0x150 [ 2281.421631][ T7471] kcalloc+0x2b/0x50 [ 2281.425494][ T7471] ext4_find_extent+0x2bb/0xce0 [ 2281.430314][ T7471] ? ext4_ext_convert_to_initialized+0x1e50/0x1e50 [ 2281.436780][ T7471] ext4_ext_map_blocks+0x3b7/0x46a0 [ 2281.441971][ T7471] ? __ext4_journal_get_create_access+0x2e0/0x2e0 [ 2281.448367][ T7471] ? ext4_ext_release+0x10/0x10 [ 2281.453190][ T7471] ? ext4_es_lookup_extent+0x415/0x900 [ 2281.458653][ T7471] ext4_map_blocks+0x975/0x1e60 [ 2281.463478][ T7471] ? _raw_spin_unlock+0x5/0x20 [ 2281.468255][ T7471] ? ext4_issue_zeroout+0x160/0x160 [ 2281.473422][ T7471] ext4_getblk+0x111/0x560 [ 2281.477806][ T7471] ? ext4_get_block_trans+0x5a0/0x5a0 [ 2281.483160][ T7471] ? memset+0x1f/0x40 [ 2281.487133][ T7471] ext4_bread+0x8e/0x390 [ 2281.491359][ T7471] ? ext4_getblk+0x560/0x560 [ 2281.496006][ T7471] ext4_append+0x153/0x2d0 [ 2281.500396][ T7471] ext4_mkdir+0x7f8/0x1530 [ 2281.504789][ T7471] ? selinux_inode_follow_link+0x3c0/0x3c0 [ 2281.510564][ T7471] ? ext4_symlink+0x1040/0x1040 [ 2281.515408][ T7471] ? generic_permission+0x190/0x4a0 [ 2281.520679][ T7471] ? security_inode_mkdir+0xed/0x130 [ 2281.526035][ T7471] vfs_mkdir2+0x448/0x620 [ 2281.530350][ T7471] ovl_create_real+0x148/0x330 [ 2281.535082][ T7471] ovl_copy_up_flags+0x17ec/0x2a30 [ 2281.540163][ T7471] ? __x64_sys_setxattr+0xb7/0xd0 [ 2281.545170][ T7471] ? do_syscall_64+0xcb/0x150 [ 2281.549831][ T7471] ? ovl_set_origin+0xf0/0xf0 [ 2281.554493][ T7471] ? __rcu_read_lock+0x50/0x50 [ 2281.559250][ T7471] ? avc_has_perm_noaudit+0x37d/0x400 [ 2281.564595][ T7471] ? avc_has_perm_noaudit+0x30c/0x400 [ 2281.569940][ T7471] ? kfree+0x12b/0x600 [ 2281.574000][ T7471] ? avc_denied+0x1c0/0x1c0 [ 2281.578579][ T7471] ? security_compute_validatetrans+0x5d9/0x9b0 [ 2281.584808][ T7471] ? avc_has_perm+0xd5/0x280 [ 2281.589372][ T7471] ? avc_has_perm+0x176/0x280 [ 2281.593656][T29417] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 2281.594049][ T7471] ? avc_has_perm_noaudit+0x400/0x400 [ 2281.606826][ T7471] ? __kasan_kmalloc+0x12c/0x1c0 [ 2281.611761][ T7471] ? __kmalloc+0xf7/0x2d0 [ 2281.616116][ T7471] ? kvmalloc_node+0xc2/0x120 [ 2281.620766][ T7471] ? __sb_start_write+0xa5/0x150 [ 2281.625680][ T7471] ? mnt_want_write+0x274/0x2f0 [ 2281.630518][ T7471] ovl_xattr_set+0xc9/0x400 [ 2281.634998][ T7471] ? ovl_other_xattr_get+0x50/0x50 [ 2281.640080][ T7471] __vfs_setxattr+0x3be/0x400 [ 2281.644739][ T7471] __vfs_setxattr_noperm+0x12a/0x3e0 [ 2281.649998][ T7471] vfs_setxattr+0x11e/0x2d0 [ 2281.654469][ T7471] ? xattr_permission+0x350/0x350 [ 2281.659462][ T7471] ? __kmalloc+0xf7/0x2d0 [ 2281.663766][ T7471] ? __virt_addr_valid+0x1fd/0x290 [ 2281.668848][ T7471] setxattr+0x1e5/0x420 [ 2281.672972][ T7471] ? path_setxattr+0x240/0x240 [ 2281.677723][ T7471] ? getname_flags+0x20d/0x610 [ 2281.682459][ T7471] ? __sb_start_write+0xa5/0x150 [ 2281.687382][ T7471] path_setxattr+0x164/0x240 [ 2281.691943][ T7471] ? fput_many+0x42/0x1a0 [ 2281.696245][ T7471] ? simple_xattr_list_add+0xf0/0xf0 [ 2281.701499][ T7471] ? __ia32_sys_read+0x80/0x80 [ 2281.706279][ T7471] __x64_sys_setxattr+0xb7/0xd0 [ 2281.711099][ T7471] do_syscall_64+0xcb/0x150 [ 2281.715588][ T7471] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2281.721569][ T7471] RIP: 0033:0x45d239 [ 2281.725442][ T7471] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2281.745028][ T7471] RSP: 002b:00007f9391efac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 2281.753404][ T7471] RAX: ffffffffffffffda RBX: 0000000000031500 RCX: 000000000045d239 [ 2281.761362][ T7471] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000140 [ 2281.769312][ T7471] RBP: 00007f9391efaca0 R08: 0000000000000000 R09: 0000000000000000 [ 2281.777255][ T7471] R10: 000000000000002b R11: 0000000000000246 R12: 0000000000000017 [ 2281.785210][ T7471] R13: 00007fff189c822f R14: 00007f9391efb9c0 R15: 000000000118cf4c [ 2281.953700][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 119, changing to 10 [ 2281.964864][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2282.073730][T29417] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2282.082794][T29417] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=128 [ 2282.091514][T29417] usb 1-1: SerialNumber: syz [ 2282.097080][T29417] usb 1-1: config 0 descriptor?? [ 2282.493702][T29417] usbhid 1-1:0.0: can't add hid device: -71 [ 2282.499695][T29417] usbhid: probe of 1-1:0.0 failed with error -71 [ 2282.508002][T29417] usb 1-1: USB disconnect, device number 8 [ 2282.913665][T29417] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 2283.273734][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 119, changing to 10 [ 2283.284905][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2283.373811][T29417] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2283.382851][T29417] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=128 [ 2283.391053][T29417] usb 1-1: SerialNumber: syz [ 2283.396374][T29417] usb 1-1: config 0 descriptor?? [ 2284.033765][T29417] usbhid 1-1:0.0: can't add hid device: -71 [ 2284.039740][T29417] usbhid: probe of 1-1:0.0 failed with error -71 [ 2284.047510][T29417] usb 1-1: USB disconnect, device number 9 [ 2284.663682][ T641] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 2285.023754][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 119, changing to 10 [ 2285.035098][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2285.123742][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2285.132772][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=128 [ 2285.141627][ T641] usb 1-1: SerialNumber: syz [ 2285.147191][ T641] usb 1-1: config 0 descriptor?? 07:47:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0xf, 0x0, &(0x7f00000001c0)) 07:47:08 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) getdents64(r1, &(0x7f0000000100)=""/106, 0x6a) lseek(r1, 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/255, 0xff) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r6 = syz_open_procfs(r5, &(0x7f0000000040)='comm\x00') mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x7) 07:47:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b05027a080008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:47:08 executing program 4 (fault-call:10 fault-nth:24): mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x0) 07:47:08 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81"}}, &(0x7f0000000080)=0x0) timer_gettime(r5, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) 07:47:08 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TIOCSERGETLSR(r6, 0x5459, &(0x7f0000000000)) setpgid(r2, r3) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 07:47:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x10, 0x0, &(0x7f00000001c0)) [ 2285.327607][ T7526] __nla_validate_parse: 9 callbacks suppressed [ 2285.327613][ T7526] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2285.350800][ T7531] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:47:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b0502000a0008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:47:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x11, 0x0, &(0x7f00000001c0)) 07:47:09 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='pipefs\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000100)=""/106, 0x6a) lseek(r2, 0x0, 0x0) getdents64(r2, &(0x7f0000000400)=""/255, 0xff) [ 2285.372666][ T7524] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=362250 [ 2285.387454][ T7524] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=362250 [ 2285.407213][ T7541] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2285.411265][ T7524] FAULT_INJECTION: forcing a failure. [ 2285.411265][ T7524] name failslab, interval 1, probability 0, space 0, times 0 [ 2285.423720][ T641] usbhid 1-1:0.0: can't add hid device: -71 [ 2285.437341][ T7524] CPU: 1 PID: 7524 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2285.442191][ T641] usbhid: probe of 1-1:0.0 failed with error -71 [ 2285.448444][ T7524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2285.448447][ T7524] Call Trace: [ 2285.448467][ T7524] dump_stack+0x14a/0x1ce [ 2285.448476][ T7524] ? devkmsg_release+0x11c/0x11c [ 2285.448483][ T7524] ? show_regs_print_info+0x12/0x12 [ 2285.448493][ T7524] ? ext4_evict_inode+0x1a70/0x1a70 [ 2285.448501][ T7524] ? _raw_spin_unlock+0x5/0x20 [ 2285.448509][ T7524] ? __dquot_alloc_space+0x2a1/0xce0 [ 2285.448526][ T7524] ? ext4_append+0x153/0x2d0 [ 2285.459347][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2285.464968][ T7524] should_fail+0x6fb/0x860 [ 2285.464979][ T7524] ? setup_fault_attr+0x3d0/0x3d0 [ 2285.464989][ T7524] ? inode_io_list_move_locked+0x2bb/0x300 [ 2285.464997][ T7524] ? ext4_mb_new_blocks+0x423/0x28a0 [ 2285.465004][ T7524] should_failslab+0x5/0x20 [ 2285.465013][ T7524] kmem_cache_alloc+0x36/0x260 [ 2285.465028][ T7524] ext4_mb_new_blocks+0x423/0x28a0 [ 2285.477305][ T641] usb 1-1: USB disconnect, device number 10 [ 2285.477532][ T7524] ? __kmalloc+0xf7/0x2d0 [ 2285.495488][ T7553] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2285.498050][ T7524] ? kcalloc+0x2b/0x50 [ 2285.498061][ T7524] ? ext4_mb_pa_callback+0xc0/0xc0 07:47:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200290008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:47:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x12, 0x0, &(0x7f00000001c0)) 07:47:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200400008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:47:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b0502a4cf0008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:47:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x13, 0x0, &(0x7f00000001c0)) [ 2285.498075][ T7524] ? ext4_find_extent+0xa52/0xce0 [ 2285.505627][ T7554] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2285.511842][ T7524] ? ext4_inode_to_goal_block+0x263/0x370 [ 2285.511851][ T7524] ext4_ext_map_blocks+0x2e4e/0x46a0 [ 2285.511865][ T7524] ? __ext4_journal_get_create_access+0x2e0/0x2e0 [ 2285.547690][ T7557] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2285.552490][ T7524] ? ext4_ext_release+0x10/0x10 [ 2285.552502][ T7524] ? ext4_es_lookup_extent+0x415/0x900 [ 2285.552517][ T7524] ext4_map_blocks+0x975/0x1e60 [ 2285.559408][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2285.566033][ T7524] ? _raw_spin_unlock+0x5/0x20 [ 2285.566045][ T7524] ? ext4_issue_zeroout+0x160/0x160 [ 2285.566054][ T7524] ext4_getblk+0x111/0x560 [ 2285.566063][ T7524] ? ext4_get_block_trans+0x5a0/0x5a0 [ 2285.566070][ T7524] ? memset+0x1f/0x40 [ 2285.566077][ T7524] ext4_bread+0x8e/0x390 [ 2285.566085][ T7524] ? ext4_getblk+0x560/0x560 [ 2285.566101][ T7524] ext4_append+0x153/0x2d0 [ 2285.587678][ T7560] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2285.589490][ T7524] ext4_mkdir+0x7f8/0x1530 [ 2285.589511][ T7524] ? selinux_inode_follow_link+0x3c0/0x3c0 [ 2285.648987][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2285.650499][ T7524] ? ext4_symlink+0x1040/0x1040 [ 2285.650510][ T7524] ? generic_permission+0x190/0x4a0 [ 2285.650526][ T7524] ? security_inode_mkdir+0xed/0x130 [ 2285.724203][ T7524] vfs_mkdir2+0x448/0x620 [ 2285.728537][ T7524] ovl_create_real+0x148/0x330 [ 2285.733292][ T7524] ovl_copy_up_flags+0x17ec/0x2a30 [ 2285.738376][ T7524] ? __x64_sys_setxattr+0xb7/0xd0 [ 2285.743390][ T7524] ? do_syscall_64+0xcb/0x150 [ 2285.748044][ T7524] ? ovl_set_origin+0xf0/0xf0 [ 2285.752707][ T7524] ? __rcu_read_lock+0x50/0x50 [ 2285.757552][ T7524] ? avc_has_perm_noaudit+0x37d/0x400 [ 2285.762896][ T7524] ? avc_has_perm_noaudit+0x30c/0x400 [ 2285.768246][ T7524] ? kfree+0x12b/0x600 [ 2285.772289][ T7524] ? avc_denied+0x1c0/0x1c0 [ 2285.776762][ T7524] ? security_compute_validatetrans+0x5d9/0x9b0 [ 2285.782972][ T7524] ? avc_has_perm+0xd5/0x280 [ 2285.787531][ T7524] ? avc_has_perm+0x176/0x280 [ 2285.793240][ T7524] ? avc_has_perm_noaudit+0x400/0x400 [ 2285.798585][ T7524] ? __kasan_kmalloc+0x12c/0x1c0 [ 2285.803512][ T7524] ? __kmalloc+0xf7/0x2d0 [ 2285.807810][ T7524] ? kvmalloc_node+0xc2/0x120 [ 2285.812455][ T7524] ? __sb_start_write+0xa5/0x150 [ 2285.817361][ T7524] ? mnt_want_write+0x274/0x2f0 [ 2285.822180][ T7524] ovl_xattr_set+0xc9/0x400 [ 2285.826653][ T7524] ? ovl_other_xattr_get+0x50/0x50 [ 2285.831737][ T7524] __vfs_setxattr+0x3be/0x400 [ 2285.836382][ T7524] __vfs_setxattr_noperm+0x12a/0x3e0 [ 2285.841637][ T7524] vfs_setxattr+0x11e/0x2d0 [ 2285.846125][ T7524] ? xattr_permission+0x350/0x350 [ 2285.851117][ T7524] ? __kmalloc+0xf7/0x2d0 [ 2285.855422][ T7524] ? __virt_addr_valid+0x1fd/0x290 [ 2285.860528][ T7524] setxattr+0x1e5/0x420 [ 2285.864658][ T7524] ? path_setxattr+0x240/0x240 [ 2285.869397][ T7524] ? getname_flags+0x20d/0x610 [ 2285.874137][ T7524] ? __sb_start_write+0xa5/0x150 [ 2285.879045][ T7524] path_setxattr+0x164/0x240 [ 2285.883611][ T7524] ? fput_many+0x42/0x1a0 [ 2285.887928][ T7524] ? simple_xattr_list_add+0xf0/0xf0 [ 2285.893229][ T7524] ? __ia32_sys_read+0x80/0x80 [ 2285.898688][ T7524] __x64_sys_setxattr+0xb7/0xd0 [ 2285.903521][ T7524] do_syscall_64+0xcb/0x150 [ 2285.908002][ T7524] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2285.913873][ T7524] RIP: 0033:0x45d239 07:47:09 executing program 4 (fault-call:10 fault-nth:25): mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x0) [ 2285.917754][ T7524] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2285.923669][ T641] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 2285.937343][ T7524] RSP: 002b:00007f9391efac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 2285.937353][ T7524] RAX: ffffffffffffffda RBX: 0000000000031500 RCX: 000000000045d239 [ 2285.937357][ T7524] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000140 [ 2285.937361][ T7524] RBP: 00007f9391efaca0 R08: 0000000000000000 R09: 0000000000000000 [ 2285.937365][ T7524] R10: 000000000000002b R11: 0000000000000246 R12: 0000000000000018 [ 2285.937370][ T7524] R13: 00007fff189c822f R14: 00007f9391efb9c0 R15: 000000000118cf4c [ 2286.018574][ T7571] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=362364 [ 2286.028229][ T7571] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=362364 [ 2286.038551][ T7571] FAULT_INJECTION: forcing a failure. [ 2286.038551][ T7571] name failslab, interval 1, probability 0, space 0, times 0 [ 2286.051224][ T7571] CPU: 0 PID: 7571 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2286.061297][ T7571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2286.071340][ T7571] Call Trace: [ 2286.074653][ T7571] dump_stack+0x14a/0x1ce 07:47:09 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81"}}, &(0x7f0000000080)=0x0) timer_gettime(r5, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) [ 2286.078964][ T7571] ? devkmsg_release+0x11c/0x11c [ 2286.083913][ T7571] ? show_regs_print_info+0x12/0x12 [ 2286.089102][ T7571] ? memset+0x1f/0x40 [ 2286.093080][ T7571] ? __es_remove_extent+0xea8/0x2280 [ 2286.098368][ T7571] should_fail+0x6fb/0x860 [ 2286.102775][ T7571] ? setup_fault_attr+0x3d0/0x3d0 [ 2286.107811][ T7571] ? __es_insert_extent+0x7a4/0x1770 [ 2286.113078][ T7571] should_failslab+0x5/0x20 [ 2286.117563][ T7571] kmem_cache_alloc+0x36/0x260 [ 2286.122332][ T7571] __es_insert_extent+0x7a4/0x1770 [ 2286.127457][ T7571] ext4_es_insert_extent+0x43b/0x3100 [ 2286.132834][ T7571] ? ext4_es_scan_clu+0x2c0/0x2c0 [ 2286.137916][ T7571] ? ext4_es_lookup_extent+0x415/0x900 [ 2286.143391][ T7571] ext4_map_blocks+0xe49/0x1e60 [ 2286.148281][ T7571] ? _raw_spin_unlock+0x5/0x20 [ 2286.153061][ T7571] ? ext4_issue_zeroout+0x160/0x160 [ 2286.158246][ T7571] ext4_getblk+0x111/0x560 [ 2286.162655][ T7571] ? ext4_get_block_trans+0x5a0/0x5a0 [ 2286.168009][ T7571] ? memset+0x1f/0x40 [ 2286.171973][ T7571] ext4_bread+0x8e/0x390 [ 2286.176269][ T7571] ? ext4_getblk+0x560/0x560 [ 2286.180843][ T7571] ext4_append+0x153/0x2d0 [ 2286.185263][ T7571] ext4_mkdir+0x7f8/0x1530 [ 2286.189675][ T7571] ? selinux_inode_follow_link+0x3c0/0x3c0 [ 2286.195461][ T7571] ? ext4_symlink+0x1040/0x1040 [ 2286.200283][ T7571] ? generic_permission+0x190/0x4a0 [ 2286.205454][ T7571] ? security_inode_mkdir+0xed/0x130 [ 2286.210715][ T7571] vfs_mkdir2+0x448/0x620 [ 2286.215050][ T7571] ovl_create_real+0x148/0x330 [ 2286.219798][ T7571] ovl_copy_up_flags+0x17ec/0x2a30 [ 2286.224887][ T7571] ? __x64_sys_setxattr+0xb7/0xd0 [ 2286.229895][ T7571] ? do_syscall_64+0xcb/0x150 [ 2286.234551][ T7571] ? ovl_set_origin+0xf0/0xf0 [ 2286.239209][ T7571] ? __rcu_read_lock+0x50/0x50 [ 2286.243960][ T7571] ? avc_has_perm_noaudit+0x37d/0x400 [ 2286.249310][ T7571] ? avc_has_perm_noaudit+0x30c/0x400 [ 2286.254652][ T7571] ? kfree+0x12b/0x600 [ 2286.258698][ T7571] ? avc_denied+0x1c0/0x1c0 [ 2286.263172][ T7571] ? security_compute_validatetrans+0x5d9/0x9b0 [ 2286.269401][ T7571] ? avc_has_perm+0xd5/0x280 [ 2286.273962][ T7571] ? avc_has_perm+0x176/0x280 [ 2286.279045][ T7571] ? avc_has_perm_noaudit+0x400/0x400 [ 2286.284406][ T7571] ? __kasan_kmalloc+0x12c/0x1c0 [ 2286.289334][ T7571] ? __kmalloc+0xf7/0x2d0 [ 2286.293634][ T7571] ? kvmalloc_node+0xc2/0x120 [ 2286.298290][ T7571] ? __sb_start_write+0xa5/0x150 [ 2286.303223][ T7571] ? mnt_want_write+0x274/0x2f0 [ 2286.308045][ T7571] ovl_xattr_set+0xc9/0x400 [ 2286.312526][ T7571] ? ovl_other_xattr_get+0x50/0x50 [ 2286.317660][ T7571] __vfs_setxattr+0x3be/0x400 [ 2286.322346][ T7571] __vfs_setxattr_noperm+0x12a/0x3e0 [ 2286.327633][ T7571] vfs_setxattr+0x11e/0x2d0 [ 2286.332128][ T7571] ? xattr_permission+0x350/0x350 [ 2286.337130][ T7571] ? __kmalloc+0xf7/0x2d0 [ 2286.341466][ T7571] ? __virt_addr_valid+0x1fd/0x290 [ 2286.346574][ T7571] setxattr+0x1e5/0x420 [ 2286.350721][ T7571] ? path_setxattr+0x240/0x240 [ 2286.355462][ T7571] ? getname_flags+0x20d/0x610 [ 2286.360208][ T7571] ? __sb_start_write+0xa5/0x150 [ 2286.365146][ T7571] path_setxattr+0x164/0x240 [ 2286.369713][ T7571] ? fput_many+0x42/0x1a0 [ 2286.374043][ T7571] ? simple_xattr_list_add+0xf0/0xf0 [ 2286.379326][ T7571] ? __ia32_sys_read+0x80/0x80 [ 2286.384065][ T7571] __x64_sys_setxattr+0xb7/0xd0 [ 2286.388918][ T7571] do_syscall_64+0xcb/0x150 [ 2286.393420][ T7571] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2286.399296][ T7571] RIP: 0033:0x45d239 [ 2286.403177][ T7571] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2286.422794][ T7571] RSP: 002b:00007f9391efac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 2286.431210][ T7571] RAX: ffffffffffffffda RBX: 0000000000031500 RCX: 000000000045d239 [ 2286.439181][ T7571] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000140 [ 2286.447159][ T7571] RBP: 00007f9391efaca0 R08: 0000000000000000 R09: 0000000000000000 [ 2286.455110][ T7571] R10: 000000000000002b R11: 0000000000000246 R12: 0000000000000019 [ 2286.463073][ T7571] R13: 00007fff189c822f R14: 00007f9391efb9c0 R15: 000000000118cf4c [ 2286.703795][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2286.714685][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2286.724471][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2286.733505][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2286.742331][ T641] usb 1-1: config 0 descriptor?? [ 2287.093718][ T641] usbhid 1-1:0.0: can't add hid device: -71 [ 2287.099924][ T641] usbhid: probe of 1-1:0.0 failed with error -71 [ 2287.107945][ T641] usb 1-1: USB disconnect, device number 11 [ 2287.583701][ T641] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 2287.943750][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2287.954627][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2287.965063][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2287.974513][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2287.983161][ T641] usb 1-1: config 0 descriptor?? [ 2288.713719][ T641] usbhid 1-1:0.0: can't add hid device: -71 [ 2288.719688][ T641] usbhid: probe of 1-1:0.0 failed with error -71 [ 2288.727662][ T641] usb 1-1: USB disconnect, device number 12 [ 2289.423673][T29417] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 2289.783761][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2289.794638][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2289.804451][T29417] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2289.813479][T29417] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2289.822441][T29417] usb 1-1: config 0 descriptor?? 07:47:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200030008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:47:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x14, 0x0, &(0x7f00000001c0)) 07:47:13 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000100)=""/106, 0x6a) lseek(r2, 0x0, 0x0) getdents64(r2, &(0x7f0000000400)=""/255, 0xff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) dup2(r4, r3) fadvise64(r3, 0x7, 0x7, 0x1) 07:47:13 executing program 4 (fault-call:10 fault-nth:26): mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x0) 07:47:13 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb1"}}, &(0x7f0000000080)=0x0) timer_gettime(r5, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) 07:47:13 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) r4 = add_key$keyring(&(0x7f0000004440)='keyring\x00', &(0x7f0000004480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$describe(0x1d, r4, &(0x7f0000000280)=""/29, 0x1d) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r4) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f0000000040)) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005000000050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) 07:47:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x15, 0x0, &(0x7f00000001c0)) 07:47:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200040008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:47:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x19, 0x0, &(0x7f00000001c0)) 07:47:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b0502000a0008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:47:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1a, 0x0, &(0x7f00000001c0)) [ 2290.034618][ T7597] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=362439 [ 2290.044059][T29417] usbhid 1-1:0.0: can't add hid device: -71 [ 2290.044122][T29417] usbhid: probe of 1-1:0.0 failed with error -71 [ 2290.045742][T29417] usb 1-1: USB disconnect, device number 13 [ 2290.055383][ T7597] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=362439 [ 2290.093102][ T7597] FAULT_INJECTION: forcing a failure. [ 2290.093102][ T7597] name failslab, interval 1, probability 0, space 0, times 0 [ 2290.108312][ T7597] CPU: 0 PID: 7597 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2290.118401][ T7597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2290.128455][ T7597] Call Trace: [ 2290.131754][ T7597] dump_stack+0x14a/0x1ce [ 2290.136079][ T7597] ? devkmsg_release+0x11c/0x11c [ 2290.141016][ T7597] ? show_regs_print_info+0x12/0x12 [ 2290.146219][ T7597] should_fail+0x6fb/0x860 [ 2290.150732][ T7597] ? setup_fault_attr+0x3d0/0x3d0 [ 2290.155760][ T7597] ? write_boundary_block+0x150/0x150 [ 2290.161131][ T7597] ? iput+0x2d3/0x750 [ 2290.165119][ T7597] ? __rcu_read_lock+0x50/0x50 [ 2290.169884][ T7597] ? kzalloc+0x1b/0x30 [ 2290.173955][ T7597] should_failslab+0x5/0x20 [ 2290.178454][ T7597] __kmalloc+0x5f/0x2d0 [ 2290.182613][ T7597] ? ext4_xattr_set_entry+0x1e4b/0x3b60 [ 2290.188156][ T7597] kzalloc+0x1b/0x30 [ 2290.192050][ T7597] ext4_xattr_block_set+0x2c6/0x40b0 [ 2290.197343][ T7597] ? ext4_xattr_block_find+0x550/0x550 [ 2290.203012][ T7597] ? __ext4_journal_get_write_access+0x86/0x2e0 [ 2290.209284][ T7597] ? ext4_xattr_ibody_find+0x80b/0x990 [ 2290.214747][ T7597] ? ext4_xattr_block_find+0xee/0x550 [ 2290.220128][ T7597] ext4_xattr_set_handle+0xf0b/0x1ed0 [ 2290.225508][ T7597] ? ext4_xattr_set_entry+0x3b60/0x3b60 [ 2290.231062][ T7597] ? memset+0x1f/0x40 [ 2290.235049][ T7597] ? dquot_initialize+0x20/0x20 [ 2290.239905][ T7597] ? selinux_inode_setxattr+0x63a/0x1060 [ 2290.245550][ T7597] ? __ext4_journal_start_sb+0x3ad/0x420 [ 2290.251184][ T7597] ext4_xattr_set+0x229/0x330 [ 2290.255868][ T7597] ? selinux_perf_event_write+0x100/0x100 [ 2290.261592][ T7597] ? ext4_xattr_set_credits+0x290/0x290 [ 2290.267133][ T7597] ? __ext4_get_inode_loc+0x4b0/0x1080 [ 2290.272591][ T7597] ? ext4_xattr_trusted_get+0x40/0x40 [ 2290.277966][ T7597] __vfs_setxattr+0x3be/0x400 [ 2290.282646][ T7597] __vfs_setxattr_noperm+0x12a/0x3e0 [ 2290.287940][ T7597] vfs_setxattr+0x11e/0x2d0 [ 2290.292449][ T7597] ? xattr_permission+0x350/0x350 [ 2290.297475][ T7597] ? inode_doinit_with_dentry+0x117/0x10e0 [ 2290.303303][ T7597] ? memset+0x1f/0x40 [ 2290.307290][ T7597] ovl_check_setxattr+0xbb/0x140 [ 2290.312254][ T7597] ovl_copy_up_inode+0x454/0xa80 [ 2290.317192][ T7597] ? ovl_ccup_get+0x30/0x30 [ 2290.321691][ T7597] ? memset+0x1f/0x40 [ 2290.325710][ T7597] ? fsnotify+0x1399/0x1460 [ 2290.330255][ T7597] ? __fsnotify_parent+0x310/0x310 [ 2290.335378][ T7597] ? call_rcu+0x10/0x10 [ 2290.339540][ T7597] ovl_copy_up_flags+0x1ad6/0x2a30 [ 2290.344655][ T7597] ? __x64_sys_setxattr+0xb7/0xd0 [ 2290.349687][ T7597] ? do_syscall_64+0xcb/0x150 [ 2290.354385][ T7597] ? ovl_set_origin+0xf0/0xf0 [ 2290.359066][ T7597] ? __rcu_read_lock+0x50/0x50 [ 2290.363844][ T7597] ? avc_has_perm_noaudit+0x37d/0x400 [ 2290.369223][ T7597] ? avc_has_perm_noaudit+0x30c/0x400 [ 2290.374614][ T7597] ? kfree+0x12b/0x600 [ 2290.378686][ T7597] ? avc_denied+0x1c0/0x1c0 [ 2290.383194][ T7597] ? security_compute_validatetrans+0x5d9/0x9b0 [ 2290.389438][ T7597] ? avc_has_perm+0xd5/0x280 [ 2290.394150][ T7597] ? avc_has_perm+0x176/0x280 [ 2290.398834][ T7597] ? avc_has_perm_noaudit+0x400/0x400 [ 2290.404214][ T7597] ? __kasan_kmalloc+0x12c/0x1c0 [ 2290.409152][ T7597] ? __kmalloc+0xf7/0x2d0 [ 2290.413480][ T7597] ? kvmalloc_node+0xc2/0x120 [ 2290.418243][ T7597] ? __sb_start_write+0xa5/0x150 [ 2290.423180][ T7597] ? mnt_want_write+0x274/0x2f0 [ 2290.423644][T29417] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 2290.428027][ T7597] ovl_xattr_set+0xc9/0x400 [ 2290.428039][ T7597] ? ovl_other_xattr_get+0x50/0x50 [ 2290.428054][ T7597] __vfs_setxattr+0x3be/0x400 [ 2290.449842][ T7597] __vfs_setxattr_noperm+0x12a/0x3e0 [ 2290.455132][ T7597] vfs_setxattr+0x11e/0x2d0 [ 2290.459637][ T7597] ? xattr_permission+0x350/0x350 [ 2290.464669][ T7597] ? __kmalloc+0xf7/0x2d0 [ 2290.469003][ T7597] ? __virt_addr_valid+0x1fd/0x290 [ 2290.474120][ T7597] setxattr+0x1e5/0x420 [ 2290.478298][ T7597] ? path_setxattr+0x240/0x240 [ 2290.483063][ T7597] ? getname_flags+0x20d/0x610 [ 2290.487845][ T7597] ? __sb_start_write+0xa5/0x150 [ 2290.492794][ T7597] path_setxattr+0x164/0x240 [ 2290.497380][ T7597] ? fput_many+0x42/0x1a0 [ 2290.501716][ T7597] ? simple_xattr_list_add+0xf0/0xf0 [ 2290.506997][ T7597] ? __ia32_sys_read+0x80/0x80 [ 2290.511752][ T7597] __x64_sys_setxattr+0xb7/0xd0 [ 2290.516595][ T7597] do_syscall_64+0xcb/0x150 [ 2290.521092][ T7597] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2290.526976][ T7597] RIP: 0033:0x45d239 [ 2290.530858][ T7597] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2290.550458][ T7597] RSP: 002b:00007f9391efac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 2290.558891][ T7597] RAX: ffffffffffffffda RBX: 0000000000031500 RCX: 000000000045d239 [ 2290.566861][ T7597] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000140 [ 2290.574829][ T7597] RBP: 00007f9391efaca0 R08: 0000000000000000 R09: 0000000000000000 [ 2290.582789][ T7597] R10: 000000000000002b R11: 0000000000000246 R12: 000000000000001a 07:47:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) 07:47:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200290008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:47:14 executing program 4 (fault-call:10 fault-nth:27): mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x0) [ 2290.590754][ T7597] R13: 00007fff189c822f R14: 00007f9391efb9c0 R15: 000000000118cf4c 07:47:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f00000001c0)) 07:47:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200cfa408001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2290.623654][ T7631] __nla_validate_parse: 6 callbacks suppressed [ 2290.623661][ T7631] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2290.693936][ T7639] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=362494 [ 2290.703433][ T7639] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=362494 [ 2290.718397][ T7639] FAULT_INJECTION: forcing a failure. [ 2290.718397][ T7639] name failslab, interval 1, probability 0, space 0, times 0 07:47:14 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb1"}}, &(0x7f0000000080)=0x0) timer_gettime(r5, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) [ 2290.737935][ T7639] CPU: 0 PID: 7639 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2290.748444][ T7639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2290.758520][ T7639] Call Trace: [ 2290.761815][ T7639] dump_stack+0x14a/0x1ce [ 2290.766154][ T7639] ? devkmsg_release+0x11c/0x11c [ 2290.771097][ T7639] ? show_regs_print_info+0x12/0x12 [ 2290.776307][ T7639] ? ext4_evict_inode+0x1a70/0x1a70 [ 2290.781518][ T7639] ? _raw_spin_unlock+0x5/0x20 [ 2290.786318][ T7639] ? __dquot_alloc_space+0x2a1/0xce0 [ 2290.791612][ T7639] should_fail+0x6fb/0x860 [ 2290.796030][ T7639] ? setup_fault_attr+0x3d0/0x3d0 [ 2290.801053][ T7639] ? __ext4_journal_start_sb+0x3ad/0x420 [ 2290.806682][ T7639] ? __ext4_journal_stop+0x2f/0x190 [ 2290.811872][ T7639] ? __ext4_expand_extra_isize+0x3b0/0x3b0 [ 2290.813745][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2290.817680][ T7639] ? ext4_mb_new_blocks+0x423/0x28a0 [ 2290.817696][ T7639] should_failslab+0x5/0x20 [ 2290.838290][ T7639] kmem_cache_alloc+0x36/0x260 [ 2290.843055][ T7639] ext4_mb_new_blocks+0x423/0x28a0 [ 2290.848185][ T7639] ? __vfs_setxattr_noperm+0x12a/0x3e0 [ 2290.850325][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2290.853634][ T7639] ? ext4_mb_pa_callback+0xc0/0xc0 [ 2290.853643][ T7639] ext4_new_meta_blocks+0x178/0x3f0 [ 2290.853652][ T7639] ? ext4_should_retry_alloc+0x1b0/0x1b0 [ 2290.853661][ T7639] ? __entry_find+0x353/0x390 [ 2290.853669][ T7639] ? dquot_initialize_needed+0x126/0x310 [ 2290.853678][ T7639] ext4_xattr_block_set+0x2107/0x40b0 [ 2290.853689][ T7639] ? ext4_xattr_block_find+0x550/0x550 [ 2290.853703][ T7639] ? __ext4_journal_get_write_access+0x86/0x2e0 [ 2290.900751][T29417] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2290.906611][ T7639] ? ext4_xattr_ibody_find+0x80b/0x990 [ 2290.906620][ T7639] ? ext4_xattr_block_find+0xee/0x550 [ 2290.906628][ T7639] ext4_xattr_set_handle+0xf0b/0x1ed0 [ 2290.906638][ T7639] ? ext4_xattr_set_entry+0x3b60/0x3b60 [ 2290.906645][ T7639] ? memset+0x1f/0x40 [ 2290.906655][ T7639] ? dquot_initialize+0x20/0x20 [ 2290.906663][ T7639] ? selinux_inode_setxattr+0x63a/0x1060 [ 2290.906673][ T7639] ? __ext4_journal_start_sb+0x3ad/0x420 [ 2290.906687][ T7639] ext4_xattr_set+0x229/0x330 [ 2290.954831][T29417] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2290.957464][ T7639] ? selinux_perf_event_write+0x100/0x100 [ 2290.957483][ T7639] ? ext4_xattr_set_credits+0x290/0x290 [ 2290.981348][ T7639] ? __ext4_get_inode_loc+0x4b0/0x1080 [ 2290.985985][T29417] usb 1-1: config 0 descriptor?? [ 2290.986802][ T7639] ? ext4_xattr_trusted_get+0x40/0x40 [ 2290.986816][ T7639] __vfs_setxattr+0x3be/0x400 [ 2291.001774][ T7639] __vfs_setxattr_noperm+0x12a/0x3e0 [ 2291.007059][ T7639] vfs_setxattr+0x11e/0x2d0 [ 2291.011571][ T7639] ? xattr_permission+0x350/0x350 [ 2291.016594][ T7639] ? inode_doinit_with_dentry+0x117/0x10e0 [ 2291.022431][ T7639] ? memset+0x1f/0x40 [ 2291.026421][ T7639] ovl_check_setxattr+0xbb/0x140 [ 2291.031362][ T7639] ovl_copy_up_inode+0x454/0xa80 [ 2291.036305][ T7639] ? ovl_ccup_get+0x30/0x30 [ 2291.040812][ T7639] ? memset+0x1f/0x40 [ 2291.044793][ T7639] ? fsnotify+0x1399/0x1460 [ 2291.049316][ T7639] ? __fsnotify_parent+0x310/0x310 [ 2291.054444][ T7639] ? call_rcu+0x10/0x10 [ 2291.058603][ T7639] ovl_copy_up_flags+0x1ad6/0x2a30 [ 2291.066053][ T7639] ? __x64_sys_setxattr+0xb7/0xd0 [ 2291.071070][ T7639] ? do_syscall_64+0xcb/0x150 [ 2291.075744][ T7639] ? ovl_set_origin+0xf0/0xf0 [ 2291.080418][ T7639] ? __rcu_read_lock+0x50/0x50 [ 2291.085535][ T7639] ? avc_has_perm_noaudit+0x37d/0x400 [ 2291.090916][ T7639] ? avc_has_perm_noaudit+0x30c/0x400 [ 2291.096279][ T7639] ? kfree+0x12b/0x600 [ 2291.100338][ T7639] ? avc_denied+0x1c0/0x1c0 [ 2291.104834][ T7639] ? security_compute_validatetrans+0x5d9/0x9b0 [ 2291.111075][ T7639] ? avc_has_perm+0xd5/0x280 [ 2291.115687][ T7639] ? avc_has_perm+0x176/0x280 [ 2291.120381][ T7639] ? avc_has_perm_noaudit+0x400/0x400 [ 2291.125751][ T7639] ? __kasan_kmalloc+0x12c/0x1c0 [ 2291.130708][ T7639] ? __kmalloc+0xf7/0x2d0 [ 2291.135031][ T7639] ? kvmalloc_node+0xc2/0x120 [ 2291.139701][ T7639] ? __sb_start_write+0xa5/0x150 [ 2291.144639][ T7639] ? mnt_want_write+0x274/0x2f0 [ 2291.149481][ T7639] ovl_xattr_set+0xc9/0x400 [ 2291.153977][ T7639] ? ovl_other_xattr_get+0x50/0x50 [ 2291.159080][ T7639] __vfs_setxattr+0x3be/0x400 [ 2291.163766][ T7639] __vfs_setxattr_noperm+0x12a/0x3e0 [ 2291.169090][ T7639] vfs_setxattr+0x11e/0x2d0 [ 2291.173593][ T7639] ? xattr_permission+0x350/0x350 [ 2291.178615][ T7639] ? __kmalloc+0xf7/0x2d0 [ 2291.182938][ T7639] ? __virt_addr_valid+0x1fd/0x290 [ 2291.188045][ T7639] setxattr+0x1e5/0x420 [ 2291.192202][ T7639] ? path_setxattr+0x240/0x240 [ 2291.196974][ T7639] ? getname_flags+0x20d/0x610 [ 2291.201738][ T7639] ? __sb_start_write+0xa5/0x150 [ 2291.206675][ T7639] path_setxattr+0x164/0x240 [ 2291.211263][ T7639] ? fput_many+0x42/0x1a0 [ 2291.215594][ T7639] ? simple_xattr_list_add+0xf0/0xf0 [ 2291.220879][ T7639] ? __ia32_sys_read+0x80/0x80 [ 2291.225642][ T7639] __x64_sys_setxattr+0xb7/0xd0 [ 2291.230523][ T7639] do_syscall_64+0xcb/0x150 [ 2291.235026][ T7639] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2291.240918][ T7639] RIP: 0033:0x45d239 [ 2291.244814][ T7639] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2291.264414][ T7639] RSP: 002b:00007f9391efac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 2291.272824][ T7639] RAX: ffffffffffffffda RBX: 0000000000031500 RCX: 000000000045d239 [ 2291.280836][ T7639] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000140 [ 2291.288812][ T7639] RBP: 00007f9391efaca0 R08: 0000000000000000 R09: 0000000000000000 [ 2291.296787][ T7639] R10: 000000000000002b R11: 0000000000000246 R12: 000000000000001b [ 2291.304760][ T7639] R13: 00007fff189c822f R14: 00007f9391efb9c0 R15: 000000000118cf4c [ 2291.320150][ T7642] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2291.335036][ T7651] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2291.343731][T29417] usbhid 1-1:0.0: can't add hid device: -71 [ 2291.364682][T29417] usbhid: probe of 1-1:0.0 failed with error -71 [ 2291.382067][T29417] usb 1-1: USB disconnect, device number 14 [ 2291.843657][T29417] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 2292.203763][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2292.214701][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2292.224492][T29417] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2292.233544][T29417] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2292.243814][T29417] usb 1-1: config 0 descriptor?? [ 2292.963806][T29417] usb 1-1: string descriptor 0 read error: -71 [ 2292.983713][T29417] uclogic 0003:5543:006E.055D: failed retrieving string descriptor #200: -71 [ 2292.992589][T29417] uclogic 0003:5543:006E.055D: failed retrieving pen parameters: -71 [ 2293.002262][T29417] uclogic 0003:5543:006E.055D: failed probing pen v2 parameters: -71 [ 2293.011238][T29417] uclogic 0003:5543:006E.055D: failed probing parameters: -71 [ 2293.019534][T29417] uclogic: probe of 0003:5543:006E.055D failed with error -71 [ 2293.028646][T29417] usb 1-1: USB disconnect, device number 15 [ 2293.693663][T29417] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 2294.053766][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2294.064676][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2294.075176][T29417] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2294.084612][T29417] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2294.093307][T29417] usb 1-1: config 0 descriptor?? 07:47:17 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040ef174960400000000001490224000100000000090400000103010000092100000001220300090581030000000000"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005000000050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) 07:47:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1e, 0x0, &(0x7f00000001c0)) 07:47:17 executing program 4 (fault-call:10 fault-nth:28): mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x0) 07:47:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080003001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:47:17 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0xffffffff, 0xfffffff9, 0x401, 0xfff, 0x31, "a53c007a7625f0bfb9b5b711f087372a3e7eef", 0x9, 0x9}) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000100)=""/106, 0x6a) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000480)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r7, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x88000}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, r7, 0x0, 0x0, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r7, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x880) lseek(r5, 0x0, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)=0x10000) getdents64(r5, &(0x7f0000000400)=""/255, 0xff) 07:47:17 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb1"}}, &(0x7f0000000080)=0x0) timer_gettime(r5, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) 07:47:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x22, 0x0, &(0x7f00000001c0)) [ 2294.345315][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2294.363721][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2294.377674][ T7678] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:47:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080208001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2294.401034][ T7678] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2294.414255][T29417] usbhid 1-1:0.0: can't add hid device: -71 [ 2294.421514][ T7666] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=363617 [ 2294.429700][T29417] usbhid: probe of 1-1:0.0 failed with error -71 [ 2294.433487][ T7666] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=363617 07:47:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) [ 2294.446384][T29417] usb 1-1: USB disconnect, device number 16 [ 2294.448843][ T7686] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2294.459891][ T7666] FAULT_INJECTION: forcing a failure. [ 2294.459891][ T7666] name failslab, interval 1, probability 0, space 0, times 0 [ 2294.468709][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2294.485142][ T7666] CPU: 1 PID: 7666 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2294.495209][ T7666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2294.505259][ T7666] Call Trace: [ 2294.508563][ T7666] dump_stack+0x14a/0x1ce [ 2294.512889][ T7666] ? devkmsg_release+0x11c/0x11c [ 2294.517823][ T7666] ? _raw_spin_lock+0xa1/0x170 [ 2294.522633][ T7666] ? show_regs_print_info+0x12/0x12 [ 2294.527826][ T7666] should_fail+0x6fb/0x860 [ 2294.532232][ T7666] ? setup_fault_attr+0x3d0/0x3d0 [ 2294.537250][ T7666] ? write_boundary_block+0x150/0x150 [ 2294.542619][ T7666] ? mb_cache_entry_create+0x162/0x810 [ 2294.548071][ T7666] should_failslab+0x5/0x20 [ 2294.552570][ T7666] kmem_cache_alloc+0x36/0x260 [ 2294.557328][ T7666] ? wake_up_bit+0x9a/0x1c0 [ 2294.561825][ T7666] mb_cache_entry_create+0x162/0x810 [ 2294.567105][ T7666] ? ext4_xattr_block_set+0x2db0/0x40b0 [ 2294.572647][ T7666] ext4_xattr_block_set+0x31b9/0x40b0 [ 2294.578023][ T7666] ? ext4_xattr_block_find+0x550/0x550 [ 2294.583651][ T7666] ? __ext4_journal_get_write_access+0x86/0x2e0 [ 2294.589890][ T7666] ? ext4_xattr_ibody_find+0x80b/0x990 [ 2294.595346][ T7666] ? ext4_xattr_block_find+0xee/0x550 07:47:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x24, 0x0, &(0x7f00000001c0)) 07:47:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x25, 0x0, &(0x7f00000001c0)) 07:47:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x26, 0x0, &(0x7f00000001c0)) [ 2294.600718][ T7666] ext4_xattr_set_handle+0xf0b/0x1ed0 [ 2294.606086][ T7666] ? ext4_xattr_set_entry+0x3b60/0x3b60 [ 2294.611627][ T7666] ? memset+0x1f/0x40 [ 2294.615603][ T7666] ? dquot_initialize+0x20/0x20 [ 2294.620454][ T7666] ? selinux_inode_setxattr+0x63a/0x1060 [ 2294.626091][ T7666] ? __ext4_journal_start_sb+0x3ad/0x420 [ 2294.631720][ T7666] ext4_xattr_set+0x229/0x330 [ 2294.636395][ T7666] ? selinux_perf_event_write+0x100/0x100 [ 2294.642109][ T7666] ? ext4_xattr_set_credits+0x290/0x290 [ 2294.647646][ T7666] ? __ext4_get_inode_loc+0x4b0/0x1080 [ 2294.653100][ T7666] ? ext4_xattr_trusted_get+0x40/0x40 [ 2294.658460][ T7666] __vfs_setxattr+0x3be/0x400 [ 2294.663128][ T7666] __vfs_setxattr_noperm+0x12a/0x3e0 [ 2294.668404][ T7666] vfs_setxattr+0x11e/0x2d0 [ 2294.672897][ T7666] ? xattr_permission+0x350/0x350 [ 2294.677911][ T7666] ? inode_doinit_with_dentry+0x117/0x10e0 [ 2294.683711][ T7666] ? memset+0x1f/0x40 [ 2294.687693][ T7666] ovl_check_setxattr+0xbb/0x140 [ 2294.692621][ T7666] ovl_copy_up_inode+0x454/0xa80 [ 2294.697546][ T7666] ? ovl_ccup_get+0x30/0x30 [ 2294.702038][ T7666] ? memset+0x1f/0x40 [ 2294.706009][ T7666] ? fsnotify+0x1399/0x1460 [ 2294.710506][ T7666] ? __fsnotify_parent+0x310/0x310 [ 2294.715612][ T7666] ? call_rcu+0x10/0x10 [ 2294.719757][ T7666] ovl_copy_up_flags+0x1ad6/0x2a30 [ 2294.724873][ T7666] ? __x64_sys_setxattr+0xb7/0xd0 [ 2294.729893][ T7666] ? do_syscall_64+0xcb/0x150 [ 2294.734564][ T7666] ? ovl_set_origin+0xf0/0xf0 [ 2294.739273][ T7666] ? __rcu_read_lock+0x50/0x50 [ 2294.744054][ T7666] ? avc_has_perm_noaudit+0x37d/0x400 [ 2294.749399][ T7666] ? avc_has_perm_noaudit+0x30c/0x400 [ 2294.754745][ T7666] ? kfree+0x12b/0x600 [ 2294.758787][ T7666] ? avc_denied+0x1c0/0x1c0 [ 2294.763284][ T7666] ? security_compute_validatetrans+0x5d9/0x9b0 [ 2294.769508][ T7666] ? avc_has_perm+0xd5/0x280 [ 2294.774071][ T7666] ? avc_has_perm+0x176/0x280 [ 2294.778738][ T7666] ? avc_has_perm_noaudit+0x400/0x400 [ 2294.784082][ T7666] ? __kasan_kmalloc+0x12c/0x1c0 [ 2294.788991][ T7666] ? __kmalloc+0xf7/0x2d0 [ 2294.793330][ T7666] ? kvmalloc_node+0xc2/0x120 [ 2294.797977][ T7666] ? __sb_start_write+0xa5/0x150 [ 2294.802882][ T7666] ? mnt_want_write+0x274/0x2f0 [ 2294.807704][ T7666] ovl_xattr_set+0xc9/0x400 [ 2294.812197][ T7666] ? ovl_other_xattr_get+0x50/0x50 [ 2294.817286][ T7666] __vfs_setxattr+0x3be/0x400 [ 2294.822036][ T7666] __vfs_setxattr_noperm+0x12a/0x3e0 [ 2294.827301][ T7666] vfs_setxattr+0x11e/0x2d0 [ 2294.831887][ T7666] ? xattr_permission+0x350/0x350 [ 2294.836920][ T7666] ? __kmalloc+0xf7/0x2d0 [ 2294.841222][ T7666] ? __virt_addr_valid+0x1fd/0x290 [ 2294.846351][ T7666] setxattr+0x1e5/0x420 [ 2294.851173][ T7666] ? path_setxattr+0x240/0x240 [ 2294.855919][ T7666] ? getname_flags+0x20d/0x610 [ 2294.860667][ T7666] ? __sb_start_write+0xa5/0x150 [ 2294.865577][ T7666] path_setxattr+0x164/0x240 [ 2294.870148][ T7666] ? fput_many+0x42/0x1a0 [ 2294.874476][ T7666] ? simple_xattr_list_add+0xf0/0xf0 [ 2294.879757][ T7666] ? __ia32_sys_read+0x80/0x80 [ 2294.884488][ T7666] __x64_sys_setxattr+0xb7/0xd0 [ 2294.889311][ T7666] do_syscall_64+0xcb/0x150 [ 2294.893787][ T7666] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2294.899652][ T7666] RIP: 0033:0x45d239 [ 2294.903518][ T7666] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2294.923198][ T7666] RSP: 002b:00007f9391efac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 2294.931581][ T7666] RAX: ffffffffffffffda RBX: 0000000000031500 RCX: 000000000045d239 [ 2294.939568][ T7666] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000140 [ 2294.947523][ T7666] RBP: 00007f9391efaca0 R08: 0000000000000000 R09: 0000000000000000 [ 2294.955484][ T7666] R10: 000000000000002b R11: 0000000000000246 R12: 000000000000001c [ 2294.963641][ T7666] R13: 00007fff189c822f R14: 00007f9391efb9c0 R15: 000000000118cf4c [ 2295.283691][T29417] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 2295.643754][T29417] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 73 [ 2295.652281][T29417] usb 1-1: can't read configurations, error -22 [ 2295.813707][T29417] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 2296.173744][T29417] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 73 [ 2296.182269][T29417] usb 1-1: can't read configurations, error -22 [ 2296.189248][T29417] usb usb1-port1: attempt power cycle [ 2296.903709][T29417] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 2297.113740][T29417] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 73 [ 2297.122295][T29417] usb 1-1: can't read configurations, error -22 [ 2297.273719][T29417] usb 1-1: new high-speed USB device number 20 using dummy_hcd 07:47:20 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040345537caf6290fc9f2cc930000090400000103010000092100000005220500090551162000"/54], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005000000050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) 07:47:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x27, 0x0, &(0x7f00000001c0)) 07:47:20 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x24098, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000100)=""/106, 0x6a) lseek(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0xffffffd8) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000a61e281a8b41563b80d78eee8600", @ANYRES16=r6, @ANYBLOB="00002abd6000fddbdf250700000008ee37000400000005003000000000000500290000000000050018000094a21db6d8a9000006002800020000000500290000000093e2ce91b34492efcdf9034476dbf454aa774e9714d813826da7fd80d2220b4fa283e6f0b32367e5e08de41bed8e00e0647b9dfcc2ec94f0a1b6cfa5c6ea1b46b844ff"], 0x4c}, 0x1, 0x0, 0x0, 0x8805}, 0x41) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000340)={0x1c, r6, 0x8, 0x3, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x60) getdents64(r2, &(0x7f0000000400)=""/255, 0xff) 07:47:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080308001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:47:20 executing program 4 (fault-call:10 fault-nth:29): mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x0) 07:47:20 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec3"}}, &(0x7f0000000080)=0x0) timer_gettime(r5, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) [ 2297.374726][ T7715] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2297.393460][ T7723] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2297.404162][ T7714] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=363710 07:47:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x28, 0x0, &(0x7f00000001c0)) 07:47:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080408001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:47:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x29, 0x0, &(0x7f00000001c0)) [ 2297.404861][ T7717] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7717 comm=syz-executor.5 [ 2297.418724][ T7714] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=363710 [ 2297.427725][T29417] usb 1-1: device descriptor read/8, error -71 [ 2297.448001][ T7714] FAULT_INJECTION: forcing a failure. [ 2297.448001][ T7714] name failslab, interval 1, probability 0, space 0, times 0 [ 2297.479001][ T7727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7727 comm=syz-executor.5 [ 2297.479552][ T7735] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2297.492367][ T7714] CPU: 1 PID: 7714 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2297.505890][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:47:21 executing program 5: r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x8001) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}}, 0x0, 0xffffffffffffffff, r0, 0x8) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x14b400, 0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x3, 0x9, 0x1, 0xdf, 0x0, 0x9, 0x4008, 0xa, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x1a}, 0x8002, 0x100000001, 0x5, 0xb, 0x68e, 0x4, 0x9}, r3, 0x2, r4, 0xa) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x200000000011, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x3) getdents64(r7, &(0x7f0000000100)=""/106, 0x6a) lseek(r7, 0x0, 0x0) getdents64(r7, &(0x7f0000000400)=""/255, 0xff) 07:47:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x2a, 0x0, &(0x7f00000001c0)) 07:47:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x2b, 0x0, &(0x7f00000001c0)) [ 2297.511568][ T7714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2297.511572][ T7714] Call Trace: [ 2297.511592][ T7714] dump_stack+0x14a/0x1ce [ 2297.511601][ T7714] ? devkmsg_release+0x11c/0x11c [ 2297.511622][ T7714] ? show_regs_print_info+0x12/0x12 [ 2297.548529][ T7714] ? revert_creds+0x87/0xb0 [ 2297.553031][ T7714] should_fail+0x6fb/0x860 [ 2297.557448][ T7714] ? setup_fault_attr+0x3d0/0x3d0 [ 2297.562466][ T7714] ? avc_has_perm_noaudit+0x37d/0x400 [ 2297.567920][ T7714] ? security_context_to_sid_core+0xc0/0x710 [ 2297.573890][ T7714] should_failslab+0x5/0x20 [ 2297.578421][ T7714] __kmalloc_track_caller+0x5d/0x2c0 [ 2297.583712][ T7714] kmemdup_nul+0x27/0xa0 [ 2297.587951][ T7714] security_context_to_sid_core+0xc0/0x710 [ 2297.593783][ T7714] ? security_context_to_sid+0x50/0x50 [ 2297.599244][ T7714] ? avc_has_perm_noaudit+0x400/0x400 [ 2297.604629][ T7714] security_context_to_sid+0x35/0x50 [ 2297.609910][ T7714] selinux_inode_setxattr+0x742/0x1060 [ 2297.615549][ T7714] ? selinux_inode_getattr+0x3e0/0x3e0 [ 2297.621007][ T7714] ? security_compute_validatetrans+0x5d9/0x9b0 [ 2297.627245][ T7714] ? avc_has_perm+0xd5/0x280 [ 2297.631824][ T7714] ? avc_has_perm+0x176/0x280 [ 2297.636500][ T7714] ? avc_has_perm_noaudit+0x400/0x400 [ 2297.641906][ T7714] security_inode_setxattr+0xcf/0x190 [ 2297.647273][ T7714] __vfs_setxattr_locked+0x96/0x240 [ 2297.655580][ T7714] vfs_setxattr+0x11e/0x2d0 [ 2297.660059][ T7714] ? xattr_permission+0x350/0x350 [ 2297.665100][ T7714] ? __kmalloc+0xf7/0x2d0 [ 2297.669416][ T7714] ? __sb_start_write+0xa5/0x150 [ 2297.674328][ T7714] ovl_xattr_set+0x15a/0x400 [ 2297.678899][ T7714] ? ovl_other_xattr_get+0x50/0x50 [ 2297.683984][ T7714] __vfs_setxattr+0x3be/0x400 [ 2297.688648][ T7714] __vfs_setxattr_noperm+0x12a/0x3e0 [ 2297.693933][ T7714] vfs_setxattr+0x11e/0x2d0 [ 2297.698428][ T7714] ? xattr_permission+0x350/0x350 [ 2297.703436][ T7714] ? __kmalloc+0xf7/0x2d0 [ 2297.707737][ T7714] ? __virt_addr_valid+0x1fd/0x290 [ 2297.712821][ T7714] setxattr+0x1e5/0x420 [ 2297.716950][ T7714] ? path_setxattr+0x240/0x240 [ 2297.721705][ T7714] ? getname_flags+0x20d/0x610 [ 2297.726445][ T7714] ? __sb_start_write+0xa5/0x150 [ 2297.731372][ T7714] path_setxattr+0x164/0x240 [ 2297.735934][ T7714] ? fput_many+0x42/0x1a0 [ 2297.740232][ T7714] ? simple_xattr_list_add+0xf0/0xf0 [ 2297.745493][ T7714] ? __ia32_sys_read+0x80/0x80 [ 2297.750236][ T7714] __x64_sys_setxattr+0xb7/0xd0 [ 2297.755057][ T7714] do_syscall_64+0xcb/0x150 [ 2297.759533][ T7714] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2297.765417][ T7714] RIP: 0033:0x45d239 [ 2297.769305][ T7714] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2297.788881][ T7714] RSP: 002b:00007f9391efac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 2297.797278][ T7714] RAX: ffffffffffffffda RBX: 0000000000031500 RCX: 000000000045d239 [ 2297.805270][ T7714] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000140 [ 2297.813215][ T7714] RBP: 00007f9391efaca0 R08: 0000000000000000 R09: 0000000000000000 [ 2297.821158][ T7714] R10: 000000000000002b R11: 0000000000000246 R12: 000000000000001d [ 2297.829101][ T7714] R13: 00007fff189c822f R14: 00007f9391efb9c0 R15: 000000000118cf4c [ 2297.933716][T29417] usb 1-1: device descriptor read/8, error -71 [ 2298.053763][T29417] usb usb1-port1: unable to enumerate USB device [ 2298.413650][T29417] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 2298.693761][T29417] usb 1-1: too many configurations: 204, using maximum allowed: 8 [ 2298.813780][T29417] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2298.821399][T29417] usb 1-1: can't read configurations, error -61 [ 2298.973739][T29417] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 2299.253791][T29417] usb 1-1: too many configurations: 204, using maximum allowed: 8 [ 2299.373787][T29417] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2299.381369][T29417] usb 1-1: can't read configurations, error -61 [ 2299.388419][T29417] usb usb1-port1: attempt power cycle [ 2300.103677][T29417] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 2300.233744][T29417] usb 1-1: too many configurations: 204, using maximum allowed: 8 07:47:24 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005000000050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) 07:47:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080508001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:47:24 executing program 4 (fault-call:10 fault-nth:30): mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x0) 07:47:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x2c, 0x0, &(0x7f00000001c0)) 07:47:24 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='ufs\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000100)=""/106, 0x6a) lseek(r2, 0x0, 0x0) getdents64(r2, &(0x7f0000000400)=""/255, 0xff) 07:47:24 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec3"}}, &(0x7f0000000080)=0x0) timer_gettime(r5, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) [ 2300.353744][T29417] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2300.361315][T29417] usb 1-1: can't read configurations, error -61 07:47:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x2d, 0x0, &(0x7f00000001c0)) 07:47:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080608001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2300.395707][ T7756] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2300.414720][ T7765] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2300.427506][ T7755] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=363817 07:47:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x2e, 0x0, &(0x7f00000001c0)) [ 2300.441427][ T7755] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=363817 [ 2300.455487][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2300.474943][ T7755] FAULT_INJECTION: forcing a failure. [ 2300.474943][ T7755] name failslab, interval 1, probability 0, space 0, times 0 [ 2300.477119][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2300.487627][ T7755] CPU: 0 PID: 7755 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2300.487632][ T7755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2300.487635][ T7755] Call Trace: [ 2300.487652][ T7755] dump_stack+0x14a/0x1ce [ 2300.487671][ T7755] ? devkmsg_release+0x11c/0x11c [ 2300.487681][ T7755] ? stack_trace_save+0x123/0x1f0 [ 2300.487690][ T7755] ? show_regs_print_info+0x12/0x12 [ 2300.487699][ T7755] ? stack_trace_snprint+0x150/0x150 07:47:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x2f, 0x0, &(0x7f00000001c0)) 07:47:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080708001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:47:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x30, 0x0, &(0x7f00000001c0)) [ 2300.487706][ T7755] ? memset+0x1f/0x40 [ 2300.487723][ T7755] ? fsnotify+0x1399/0x1460 [ 2300.528041][ T7784] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2300.531025][ T7755] should_fail+0x6fb/0x860 [ 2300.531035][ T7755] ? setup_fault_attr+0x3d0/0x3d0 [ 2300.531043][ T7755] ? __kasan_kmalloc+0x189/0x1c0 [ 2300.531052][ T7755] ? ebitmap_cmp+0x1c8/0x230 [ 2300.531067][ T7755] ? mls_compute_context_len+0x81b/0x850 [ 2300.546873][ T7787] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2300.550478][ T7755] ? context_struct_to_string+0x3e4/0x820 [ 2300.550488][ T7755] should_failslab+0x5/0x20 [ 2300.550498][ T7755] __kmalloc+0x5f/0x2d0 [ 2300.550511][ T7755] context_struct_to_string+0x3e4/0x820 [ 2300.617855][ T7755] ? security_bounded_transition+0x560/0x560 [ 2300.623814][ T7755] context_add_hash+0x145/0x280 [ 2300.628690][ T7755] ? mls_context_isvalid+0x98/0x380 [ 2300.633883][ T7755] ? security_sid_to_context_inval+0x40/0x40 [ 2300.639861][ T7755] ? string_to_context_struct+0x486/0x640 [ 2300.645682][ T7755] security_context_to_sid_core+0x406/0x710 [ 2300.651549][ T7755] ? security_context_to_sid+0x50/0x50 [ 2300.656986][ T7755] ? avc_has_perm_noaudit+0x400/0x400 [ 2300.662337][ T7755] security_context_to_sid+0x35/0x50 [ 2300.667603][ T7755] selinux_inode_setxattr+0x742/0x1060 [ 2300.673036][ T7755] ? selinux_inode_getattr+0x3e0/0x3e0 [ 2300.678465][ T7755] ? security_compute_validatetrans+0x5d9/0x9b0 [ 2300.684676][ T7755] ? avc_has_perm+0xd5/0x280 [ 2300.689250][ T7755] ? avc_has_perm+0x176/0x280 [ 2300.693909][ T7755] ? avc_has_perm_noaudit+0x400/0x400 [ 2300.699269][ T7755] security_inode_setxattr+0xcf/0x190 [ 2300.704635][ T7755] __vfs_setxattr_locked+0x96/0x240 [ 2300.709810][ T7755] vfs_setxattr+0x11e/0x2d0 [ 2300.714297][ T7755] ? xattr_permission+0x350/0x350 [ 2300.719313][ T7755] ? __kmalloc+0xf7/0x2d0 [ 2300.723621][ T7755] ? __sb_start_write+0xa5/0x150 [ 2300.728538][ T7755] ovl_xattr_set+0x15a/0x400 [ 2300.733123][ T7755] ? ovl_other_xattr_get+0x50/0x50 [ 2300.733660][T29417] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 2300.738219][ T7755] __vfs_setxattr+0x3be/0x400 [ 2300.738229][ T7755] __vfs_setxattr_noperm+0x12a/0x3e0 [ 2300.738243][ T7755] vfs_setxattr+0x11e/0x2d0 [ 2300.760151][ T7755] ? xattr_permission+0x350/0x350 [ 2300.765162][ T7755] ? __kmalloc+0xf7/0x2d0 [ 2300.769462][ T7755] ? __virt_addr_valid+0x1fd/0x290 [ 2300.774542][ T7755] setxattr+0x1e5/0x420 [ 2300.778666][ T7755] ? path_setxattr+0x240/0x240 [ 2300.783402][ T7755] ? getname_flags+0x20d/0x610 [ 2300.788142][ T7755] ? __sb_start_write+0xa5/0x150 [ 2300.793054][ T7755] path_setxattr+0x164/0x240 [ 2300.797615][ T7755] ? fput_many+0x42/0x1a0 [ 2300.801957][ T7755] ? simple_xattr_list_add+0xf0/0xf0 [ 2300.808174][ T7755] ? __ia32_sys_read+0x80/0x80 [ 2300.812914][ T7755] __x64_sys_setxattr+0xb7/0xd0 [ 2300.817740][ T7755] do_syscall_64+0xcb/0x150 [ 2300.822217][ T7755] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2300.828081][ T7755] RIP: 0033:0x45d239 [ 2300.831960][ T7755] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2300.851883][ T7755] RSP: 002b:00007f9391efac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 2300.860326][ T7755] RAX: ffffffffffffffda RBX: 0000000000031500 RCX: 000000000045d239 [ 2300.868290][ T7755] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000140 [ 2300.877118][ T7755] RBP: 00007f9391efaca0 R08: 0000000000000000 R09: 0000000000000000 [ 2300.885086][ T7755] R10: 000000000000002b R11: 0000000000000246 R12: 000000000000001e [ 2300.893080][ T7755] R13: 00007fff189c822f R14: 00007f9391efb9c0 R15: 000000000118cf4c [ 2300.954164][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2300.965229][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2300.975672][T29417] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2300.985067][T29417] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2300.994724][T29417] usb 1-1: config 0 descriptor?? [ 2301.333741][T29417] usbhid 1-1:0.0: can't add hid device: -71 [ 2301.339689][T29417] usbhid: probe of 1-1:0.0 failed with error -71 [ 2301.348349][T29417] usb 1-1: USB disconnect, device number 24 [ 2301.803684][T29417] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 2302.163794][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2302.174821][T29417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2302.185303][T29417] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2302.194756][T29417] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2302.203451][T29417] usb 1-1: config 0 descriptor?? [ 2302.913738][T29417] usb 1-1: string descriptor 0 read error: -71 [ 2302.933774][T29417] uclogic 0003:5543:006E.055E: failed retrieving string descriptor #200: -71 [ 2302.942625][T29417] uclogic 0003:5543:006E.055E: failed retrieving pen parameters: -71 [ 2302.952289][T29417] uclogic 0003:5543:006E.055E: failed probing pen v2 parameters: -71 [ 2302.961831][T29417] uclogic 0003:5543:006E.055E: failed probing parameters: -71 [ 2302.970218][T29417] uclogic: probe of 0003:5543:006E.055E failed with error -71 [ 2302.979345][T29417] usb 1-1: USB disconnect, device number 25 [ 2303.663678][ T641] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 2304.023780][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2304.034679][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2304.044456][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2304.053477][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2304.064009][ T641] usb 1-1: config 0 descriptor?? 07:47:27 executing program 0: r0 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10000000148, 0x56a, 0xe3, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0xbe, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x25, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x5e, 0x1, {0x22, 0x5}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x20, 0x3f, 0x2}}]}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = dup(0xffffffffffffffff) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x3a}}}, 0x1e) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005000000050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) 07:47:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x31, 0x0, &(0x7f00000001c0)) 07:47:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080808001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:47:27 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040)='freezer.state\x00', 0x2, 0x0) fcntl$notify(r1, 0x402, 0x4) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000100)=""/106, 0x6a) lseek(r3, 0x0, 0x0) getdents64(r3, &(0x7f0000000400)=""/255, 0xff) 07:47:27 executing program 4 (fault-call:10 fault-nth:31): mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x0) 07:47:27 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec3"}}, &(0x7f0000000080)=0x0) timer_gettime(r5, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) 07:47:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x37, 0x0, &(0x7f00000001c0)) 07:47:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080908001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2304.203431][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2304.219483][ T7818] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:47:27 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000100)=""/106, 0x6a) lseek(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) renameat(r2, &(0x7f0000000040)='./file1\x00', r5, &(0x7f00000000c0)='./file0\x00') getdents64(r2, &(0x7f0000000400)=""/255, 0xff) [ 2304.249911][ T7816] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=363917 [ 2304.263981][ T7816] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=363917 [ 2304.275158][ T7816] FAULT_INJECTION: forcing a failure. [ 2304.275158][ T7816] name failslab, interval 1, probability 0, space 0, times 0 [ 2304.279721][ T7825] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:47:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x38, 0x0, &(0x7f00000001c0)) 07:47:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080a08001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2304.287837][ T7816] CPU: 0 PID: 7816 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2304.307095][ T7816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2304.314274][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2304.317162][ T7816] Call Trace: [ 2304.317183][ T7816] dump_stack+0x14a/0x1ce [ 2304.317193][ T7816] ? devkmsg_release+0x11c/0x11c [ 2304.317202][ T7816] ? stack_trace_save+0x123/0x1f0 [ 2304.317217][ T7816] ? show_regs_print_info+0x12/0x12 [ 2304.349212][ T7816] ? stack_trace_snprint+0x150/0x150 [ 2304.354503][ T7816] ? memset+0x1f/0x40 [ 2304.358495][ T7816] ? fsnotify+0x1399/0x1460 [ 2304.358752][ T7834] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2304.363003][ T7816] should_fail+0x6fb/0x860 [ 2304.363013][ T7816] ? setup_fault_attr+0x3d0/0x3d0 [ 2304.363021][ T7816] ? __kasan_kmalloc+0x189/0x1c0 [ 2304.363029][ T7816] ? ebitmap_cmp+0x1c8/0x230 [ 2304.363046][ T7816] ? mls_compute_context_len+0x81b/0x850 07:47:28 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0xffffffd8) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) fstat(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r3) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000180)='./file0\x00', 0x80000000, 0x8, &(0x7f0000000880)=[{&(0x7f00000001c0)="7e7bb7c0e92055c4de70946ecc3fac684ac700145f68575a5242344a2a3f5d7c2f98e8fefdbd25a37894fc0d6381d964f74b9730634498a9d7134dc470427d34d75707b7ee723c56e0a53cb03eaa1204f051b1", 0x53, 0x8}, {&(0x7f0000000240)="6e973b5bd81d9816c68bced4a3b63b9b129b160a2856d73af1b0007f1888791864a3a2ac5bcf78274f78a5022af44f9f63cb4cc95be386c52a8312b7afdf995fc979174d165dafcca43d7f68224cb9ed5eff9e1315575776743a691572ab1fb8eb6c3e3c9b9d5b4e68f51230", 0x6c, 0x3000000}, {&(0x7f0000000500)="9060cd704f6979fbc509aba356f57ba06f41c2fdc5b45bb8fda3734fcf6d3bff5289aa9c74a77a8dcb6fdc7b918a171d2f0f53e2ce1dd49c7098a0a82ef20f430f29ee687183173dac0781a07fc51d86483087f66680fa8efd95926db2b4179a9cd3aa26c0165d00eecbbcd080fe1a8f37b0b3c5d6f2c3df89b6ab02cc70228dbe21e3dffc2fc82f2bdd6e9536d0bbb5b8d6729768f77fb6d441214be838a9b2038177bffbf93a6c395d6953", 0xac, 0xb0}, {&(0x7f0000000300)="f042f925f2f6941acbd4fbc3af63d2e3ea22a74c34fbaa99494a58b620c1d213e2534b", 0x23, 0x7}, {&(0x7f00000005c0)="6ed39240fe078fef2fc4148d6930bc9b8e2c7aa63f86323317f171a45064feb65aa6d587899c156279ea4c358f9c4f3a3514e888ec7134c5a296175b4dd86202758f1d34a16305f3b0825cf31e4b852c8765d40fe18f18059ba4c8d7609fd902ed", 0x61, 0x5}, {&(0x7f0000000640)="23b52713b378fb653f6f2e5d816eee2851e677e3380ac52e87324aa4d79d2dcc8931961d6d929f934aeb7fa3f2567e423f70867ac054592c702ab73cb95636dc9f1d0df97d28df760b39d8a3c81d848d0e9b72dc61767d24ff80d787f7d04ed9081675", 0x63, 0x6}, {&(0x7f00000006c0)="6a75bcb91edee4cd5a77b72eb8912720a07022cabb9a190d72b766d797ffab52cb6651442040034d88e53a55ab4e3ba967d7985f2ab360b764714036af8afa84991e0fd3aa452acbd7b0a474581372c91e2aa6be9ebbad30551447fdbfcd2f82f64e2c8bc609b2184e178258f832c1fa3f6b9aa421135f026090739aeebfb241345ab4098652ac9ee05b913161dc84fed90f78f602c324549034159c", 0x9c, 0x2}, {&(0x7f0000000780)="ad7dc6e00372fe6ddb258cc50cdf7dc7fa69b331fc8acdd8b3ab3470492f0f5933562a6ffc81668ba892f11df487f44b6de34ab21cec1704d771893cc30c855a8ef3a77540c53ceb8c6ceea0faa24927e05a3195903cf2a17ffdc55487763d08f15f4b6e9b84281f8ec232f98bc32a8b1ab90ca9a09edb75d1bef041dae67663e5a94451c40f3f28896456208f32c8951a744b1e71e2bfb5f50a6425ae40d0cf1716fef481034da9eae8b30c71439417493fe3a3941e848ed0a42d1cb388a44e970197e19f26ea2e12d1ba91dee5c83117ad6e55e614f9b1cca350e8e1", 0xdd, 0x7}], 0x0, &(0x7f0000000940)={[{@dots='dots'}, {@nodots='nodots'}], [{@fowner_gt={'fowner>', r3}}, {@audit='audit'}, {@permit_directio='permit_directio'}, {@hash='hash'}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@pcr={'pcr', 0x3d, 0x3e}}, {@permit_directio='permit_directio'}]}) r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000100)=""/106, 0x6a) lseek(r4, 0x0, 0x0) getdents64(r4, &(0x7f0000000400)=""/255, 0xff) [ 2304.396802][ T7816] ? context_struct_to_string+0x3e4/0x820 [ 2304.397567][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2304.402538][ T7816] should_failslab+0x5/0x20 [ 2304.402550][ T7816] __kmalloc+0x5f/0x2d0 [ 2304.402560][ T7816] context_struct_to_string+0x3e4/0x820 [ 2304.402570][ T7816] ? security_bounded_transition+0x560/0x560 [ 2304.402584][ T7816] context_add_hash+0x145/0x280 [ 2304.437910][ T7816] ? mls_context_isvalid+0x98/0x380 [ 2304.443129][ T7816] ? security_sid_to_context_inval+0x40/0x40 [ 2304.449195][ T7816] ? string_to_context_struct+0x486/0x640 [ 2304.454909][ T7816] security_context_to_sid_core+0x406/0x710 [ 2304.460832][ T7816] ? security_context_to_sid+0x50/0x50 [ 2304.466311][ T7816] ? avc_has_perm_noaudit+0x400/0x400 [ 2304.471662][ T7816] security_context_to_sid+0x35/0x50 [ 2304.476925][ T7816] selinux_inode_setxattr+0x742/0x1060 [ 2304.482370][ T7816] ? selinux_inode_getattr+0x3e0/0x3e0 [ 2304.487812][ T7816] ? security_compute_validatetrans+0x5d9/0x9b0 [ 2304.494036][ T7816] ? avc_has_perm+0xd5/0x280 [ 2304.498692][ T7816] ? avc_has_perm+0x176/0x280 [ 2304.503373][ T7816] ? avc_has_perm_noaudit+0x400/0x400 [ 2304.508720][ T7816] security_inode_setxattr+0xcf/0x190 [ 2304.514082][ T7816] __vfs_setxattr_locked+0x96/0x240 [ 2304.519271][ T7816] vfs_setxattr+0x11e/0x2d0 [ 2304.523755][ T7816] ? xattr_permission+0x350/0x350 [ 2304.528764][ T7816] ? __kmalloc+0xf7/0x2d0 [ 2304.533074][ T7816] ? __sb_start_write+0xa5/0x150 [ 2304.538012][ T7816] ovl_xattr_set+0x15a/0x400 [ 2304.542590][ T7816] ? ovl_other_xattr_get+0x50/0x50 [ 2304.547682][ T7816] __vfs_setxattr+0x3be/0x400 [ 2304.552356][ T7816] __vfs_setxattr_noperm+0x12a/0x3e0 [ 2304.557625][ T7816] vfs_setxattr+0x11e/0x2d0 [ 2304.562138][ T7816] ? xattr_permission+0x350/0x350 [ 2304.567155][ T7816] ? __kmalloc+0xf7/0x2d0 [ 2304.571497][ T7816] ? __virt_addr_valid+0x1fd/0x290 [ 2304.576589][ T7816] setxattr+0x1e5/0x420 [ 2304.580724][ T7816] ? path_setxattr+0x240/0x240 [ 2304.585471][ T7816] ? getname_flags+0x20d/0x610 [ 2304.590212][ T7816] ? __sb_start_write+0xa5/0x150 [ 2304.595150][ T7816] path_setxattr+0x164/0x240 [ 2304.599742][ T7816] ? fput_many+0x42/0x1a0 [ 2304.604072][ T7816] ? simple_xattr_list_add+0xf0/0xf0 [ 2304.609357][ T7816] ? __ia32_sys_read+0x80/0x80 [ 2304.614143][ T7816] __x64_sys_setxattr+0xb7/0xd0 [ 2304.618973][ T7816] do_syscall_64+0xcb/0x150 [ 2304.623474][ T7816] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2304.629373][ T7816] RIP: 0033:0x45d239 [ 2304.633246][ T7816] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2304.653033][ T7816] RSP: 002b:00007f9391efac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 2304.661453][ T7816] RAX: ffffffffffffffda RBX: 0000000000031500 RCX: 000000000045d239 [ 2304.669410][ T7816] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000140 [ 2304.677369][ T7816] RBP: 00007f9391efaca0 R08: 0000000000000000 R09: 0000000000000000 [ 2304.685667][ T7816] R10: 000000000000002b R11: 0000000000000246 R12: 000000000000001f [ 2304.693627][ T7816] R13: 00007fff189c822f R14: 00007f9391efb9c0 R15: 000000000118cf4c [ 2304.702047][ T641] usbhid 1-1:0.0: can't add hid device: -71 [ 2304.708901][ T641] usbhid: probe of 1-1:0.0 failed with error -71 [ 2304.721342][ T641] usb 1-1: USB disconnect, device number 26 [ 2305.073696][ T641] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 2305.343657][ T641] usb 1-1: device descriptor read/64, error 18 [ 2305.733651][ T641] usb 1-1: device descriptor read/64, error 18 [ 2306.003686][ T641] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 2306.273703][ T641] usb 1-1: device descriptor read/64, error 18 [ 2306.663700][ T641] usb 1-1: device descriptor read/64, error 18 [ 2306.783772][ T641] usb usb1-port1: attempt power cycle 07:47:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x39, 0x0, &(0x7f00000001c0)) 07:47:30 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="f40000000000004043556e00400000000001090224000100000000090402000103010000092100000001220500090581030000000000"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005000000050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) 07:47:30 executing program 4 (fault-call:10 fault-nth:32): mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x0) 07:47:30 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec351d9f42c"}}, &(0x7f0000000080)=0x0) timer_gettime(r5, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) 07:47:30 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x200000000011, r8, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r7, 0x2405, r8) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffff4f4, 0x0, &(0x7f0000000040)=[r0, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r6, r0, r7]}, 0x8) getdents64(r2, &(0x7f0000000100)=""/106, 0x6a) lseek(r2, 0x0, 0x0) getdents64(r2, &(0x7f0000000400)=""/255, 0xff) 07:47:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080b08001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:47:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3b, 0x0, &(0x7f00000001c0)) [ 2307.219693][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2307.236996][ T7854] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=363965 [ 2307.245983][ T7863] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:47:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080c08001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:47:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3c, 0x0, &(0x7f00000001c0)) 07:47:30 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000100)=""/106, 0x6a) lseek(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$tipc(r5, &(0x7f00000003c0)={&(0x7f0000000300)=@name={0x1e, 0x2, 0x0, {{0x43, 0x40000}, 0x3}}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000780)="021c5da3a6ac805be70409000000000000009d57b798885d71f574a89e9415ff73c8a2bbb1f663c19caf997de73be681ad6761677af1a7a6bcfa5acf8b6c3b6f5aabbfe22fd86a01ae206d6c91c30255d4de2f0d7d4f223062f0269b0bbdb5c95d86d63c6e06da968e6c49a709c7eeff9f42b6a67140151fc438eaa1e9e4f617de934fddc7b1f6cb8a056d1a3d79880f4512f3bf187dc2fc0a5856c3f728b80590071788f741ca99ca73", 0xaa}, {&(0x7f00000000c0)="6224f90e5dd59b40436a62b5377267cc048449f87564a645e1f2f4084c4f3546771fd1cc7e034ae8a0564473f6dc74d029b52bb6ddadf274856d9d8456", 0x3d}, {&(0x7f00000006c0)="0a0040e165d8dcd8490a81cd960d5af6ab55e1e31635bbd70b1b6ce1efe74815f9caf2f721d5855d2cdcc97ce6362bd5e13bfd49cd548f0758fe7a11744549412c21802bbf75af2beb2569c52e750e32dfca10a0ac373e50731d62b1943b2f4f44188cd2a5f646038ac8234e2b3437e897c686c8e0b8fef297c9bc9b442d29d4b3e64bb1e2c7974a4c5d602da77d20fd41a10ae45c7e9b18ae5c", 0x9a}, {&(0x7f0000000240)="24f6c14ab668dafef227c6ddbd0c48aaf754c5cacf958f6f", 0x18}, {&(0x7f0000000500)="1776d9453757c836e0d170cbd4f1f8cfb8d5a67efa9cc665e663ae6d5bdef6423eed58ba835aba0ff79dab2d6a1f9d3e5a5327189801b13b07fd43a2a2e3587ad5326a841f3a1ab8a809828b6f72bd07061b23bb60deac7321fca3743cca68a61b3d9a20a8e72fe973e0c0180dcacb72d28cd8a8d6f3ad3cb8d0239ebdeedbffd7bd542426df808f10db3143b0", 0x8d}, {&(0x7f0000000280)="c613a6b7ed226ae3b1dd6fc407e2f357e97b4d1f6cad8a", 0x17}, {&(0x7f0000000180)="3f33c7f1257d1ae4c33111aa8308f150e7b095ccd90edd24804bf0d4ec4aad4ae421e8f32b84e8e9d6ecde53ec0c43207409b819399f4cb5e3177f2e8c6d93bd0311cffd9ab027d30b2a96d47e57eb7e76ecce97a17af06853095442f627e32578d632642374d45f6b42682453e75421856e0b0546273df2f5daaca4a813781c3c7d668a6ac083e8e1eda57b227677972a4def4efd813fcc8358bece61111f202a3cc0e3b7", 0xa5}], 0x7, &(0x7f00000005c0)="71c7c56591eed112ef8968b12c9f759490e19249337728a58aba70e60b9ce6a456431011f76106002c7423069974de35d43b66cf7b016076f5ca46ddac35ef4a6373256e62b84d84b36d1d28052dfeaf244cef4b404b1d91f5dfaef5bef3da10420966996b3fda143d165c799cd335135c1f25868af47b4bd9f2a0b24b8e356ecf959581a4fd7d2a91b0b0f55eb6e93af87a2307380a96e8588801e62736fb95ac09af62113600db9cf6e19cf08b3e8464cb2770e25e120d7ac2925b66ea5c18c72fe845b8a8379a3ec655678bd077d4132ab2ca2af2cb2a305f", 0xda, 0x800}, 0x0) getdents64(r2, &(0x7f0000000400)=""/255, 0xff) [ 2307.258395][ T7854] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=363965 [ 2307.288221][ T7854] FAULT_INJECTION: forcing a failure. [ 2307.288221][ T7854] name failslab, interval 1, probability 0, space 0, times 0 [ 2307.295893][ T7872] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2307.324099][ T7854] CPU: 1 PID: 7854 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2307.333364][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2307.334191][ T7854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2307.334195][ T7854] Call Trace: [ 2307.334214][ T7854] dump_stack+0x14a/0x1ce [ 2307.334231][ T7854] ? devkmsg_release+0x11c/0x11c [ 2307.366014][ T7854] ? show_regs_print_info+0x12/0x12 [ 2307.371201][ T7854] should_fail+0x6fb/0x860 [ 2307.375636][ T7854] ? setup_fault_attr+0x3d0/0x3d0 [ 2307.380637][ T7854] ? security_context_to_sid_core+0x14a/0x710 [ 2307.386698][ T7854] should_failslab+0x5/0x20 [ 2307.391203][ T7854] __kmalloc_track_caller+0x5d/0x2c0 [ 2307.396467][ T7854] ? kmemdup_nul+0x42/0xa0 [ 2307.400858][ T7854] kstrdup+0x31/0x70 [ 2307.404733][ T7854] security_context_to_sid_core+0x14a/0x710 [ 2307.410609][ T7854] ? dquot_initialize+0x20/0x20 [ 2307.415471][ T7854] ? security_context_to_sid+0x50/0x50 [ 2307.420927][ T7854] ? __ext4_journal_start_sb+0x3ad/0x420 [ 2307.427513][ T7854] ? __ext4_journal_stop+0x2f/0x190 [ 2307.432689][ T7854] security_context_to_sid_force+0x33/0x40 [ 2307.438476][ T7854] selinux_inode_post_setxattr+0x122/0x4e0 [ 2307.444283][ T7854] ? selinux_inode_setxattr+0x1060/0x1060 [ 2307.449993][ T7854] ? __fsnotify_parent+0x310/0x310 [ 2307.455137][ T7854] security_inode_post_setxattr+0xbb/0x120 [ 2307.460925][ T7854] __vfs_setxattr_noperm+0x2fd/0x3e0 [ 2307.466189][ T7854] vfs_setxattr+0x11e/0x2d0 [ 2307.470669][ T7854] ? xattr_permission+0x350/0x350 [ 2307.475689][ T7854] ? __kmalloc+0xf7/0x2d0 [ 2307.480047][ T7854] ? __sb_start_write+0xa5/0x150 [ 2307.484997][ T7854] ovl_xattr_set+0x15a/0x400 [ 2307.489567][ T7854] ? ovl_other_xattr_get+0x50/0x50 [ 2307.495350][ T7854] __vfs_setxattr+0x3be/0x400 [ 2307.500009][ T7854] __vfs_setxattr_noperm+0x12a/0x3e0 [ 2307.505278][ T7854] vfs_setxattr+0x11e/0x2d0 [ 2307.509766][ T7854] ? xattr_permission+0x350/0x350 [ 2307.514771][ T7854] ? __kmalloc+0xf7/0x2d0 [ 2307.519081][ T7854] ? __virt_addr_valid+0x1fd/0x290 [ 2307.524172][ T7854] setxattr+0x1e5/0x420 [ 2307.528318][ T7854] ? path_setxattr+0x240/0x240 [ 2307.533086][ T7854] ? getname_flags+0x20d/0x610 [ 2307.537840][ T7854] ? __sb_start_write+0xa5/0x150 [ 2307.542761][ T7854] path_setxattr+0x164/0x240 [ 2307.547350][ T7854] ? fput_many+0x42/0x1a0 [ 2307.551652][ T7854] ? simple_xattr_list_add+0xf0/0xf0 [ 2307.556920][ T7854] ? __ia32_sys_read+0x80/0x80 [ 2307.561679][ T7854] __x64_sys_setxattr+0xb7/0xd0 [ 2307.566505][ T7854] do_syscall_64+0xcb/0x150 [ 2307.570995][ T7854] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2307.576882][ T7854] RIP: 0033:0x45d239 [ 2307.580748][ T7854] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2307.600330][ T7854] RSP: 002b:00007f9391efac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 2307.608718][ T7854] RAX: ffffffffffffffda RBX: 0000000000031500 RCX: 000000000045d239 [ 2307.616680][ T7854] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000140 07:47:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3d, 0x0, &(0x7f00000001c0)) 07:47:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080d08001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2307.624651][ T7854] RBP: 00007f9391efaca0 R08: 0000000000000000 R09: 0000000000000000 [ 2307.632639][ T7854] R10: 000000000000002b R11: 0000000000000246 R12: 0000000000000020 [ 2307.640621][ T7854] R13: 00007fff189c822f R14: 00007f9391efb9c0 R15: 000000000118cf4c 07:47:31 executing program 4 (fault-call:10 fault-nth:33): mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x0) 07:47:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, 0x0, &(0x7f00000001c0)) [ 2307.667614][ T7854] SELinux: unable to map context to SIDfor (sda1, 16340), rc=12 [ 2307.723789][ T641] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 2307.758646][ T7895] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=364036 [ 2307.768432][ T7895] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=364036 [ 2307.779322][ T7895] FAULT_INJECTION: forcing a failure. [ 2307.779322][ T7895] name failslab, interval 1, probability 0, space 0, times 0 [ 2307.791969][ T7895] CPU: 0 PID: 7895 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2307.802041][ T7895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2307.812092][ T7895] Call Trace: [ 2307.815381][ T7895] dump_stack+0x14a/0x1ce [ 2307.819690][ T7895] ? devkmsg_release+0x11c/0x11c [ 2307.824602][ T7895] ? stack_trace_save+0x123/0x1f0 [ 2307.829601][ T7895] ? show_regs_print_info+0x12/0x12 [ 2307.834874][ T7895] ? stack_trace_snprint+0x150/0x150 [ 2307.840140][ T7895] ? __ext4_handle_dirty_metadata+0x2d8/0x910 [ 2307.846208][ T7895] should_fail+0x6fb/0x860 [ 2307.850614][ T7895] ? setup_fault_attr+0x3d0/0x3d0 [ 2307.855629][ T7895] ? __kasan_kmalloc+0x189/0x1c0 [ 2307.860538][ T7895] ? ebitmap_cmp+0x1c8/0x230 [ 2307.865103][ T7895] ? mls_compute_context_len+0x81b/0x850 [ 2307.870707][ T7895] ? context_struct_to_string+0x3e4/0x820 [ 2307.877373][ T7895] should_failslab+0x5/0x20 [ 2307.881874][ T7895] __kmalloc+0x5f/0x2d0 [ 2307.886028][ T7895] context_struct_to_string+0x3e4/0x820 [ 2307.891555][ T7895] ? security_bounded_transition+0x560/0x560 [ 2307.897509][ T7895] context_add_hash+0x145/0x280 [ 2307.902351][ T7895] ? mls_context_isvalid+0x98/0x380 [ 2307.907537][ T7895] ? security_sid_to_context_inval+0x40/0x40 [ 2307.913502][ T7895] ? string_to_context_struct+0x486/0x640 [ 2307.919192][ T7895] security_context_to_sid_core+0x406/0x710 [ 2307.925058][ T7895] ? security_context_to_sid+0x50/0x50 [ 2307.930494][ T7895] ? __ext4_journal_start_sb+0x3ad/0x420 [ 2307.936114][ T7895] ? __ext4_journal_stop+0x2f/0x190 [ 2307.941302][ T7895] security_context_to_sid_force+0x33/0x40 [ 2307.947098][ T7895] selinux_inode_post_setxattr+0x122/0x4e0 [ 2307.952898][ T7895] ? selinux_inode_setxattr+0x1060/0x1060 [ 2307.958631][ T7895] ? __fsnotify_parent+0x310/0x310 [ 2307.963729][ T7895] security_inode_post_setxattr+0xbb/0x120 [ 2307.969510][ T7895] __vfs_setxattr_noperm+0x2fd/0x3e0 [ 2307.974767][ T7895] vfs_setxattr+0x11e/0x2d0 [ 2307.979241][ T7895] ? xattr_permission+0x350/0x350 [ 2307.984235][ T7895] ? __kmalloc+0xf7/0x2d0 [ 2307.988538][ T7895] ? __sb_start_write+0xa5/0x150 [ 2307.993465][ T7895] ovl_xattr_set+0x15a/0x400 [ 2307.998042][ T7895] ? ovl_other_xattr_get+0x50/0x50 [ 2308.003129][ T7895] __vfs_setxattr+0x3be/0x400 [ 2308.007802][ T7895] __vfs_setxattr_noperm+0x12a/0x3e0 [ 2308.013073][ T7895] vfs_setxattr+0x11e/0x2d0 [ 2308.017571][ T7895] ? xattr_permission+0x350/0x350 [ 2308.022610][ T7895] ? __kmalloc+0xf7/0x2d0 [ 2308.026922][ T7895] ? __virt_addr_valid+0x1fd/0x290 [ 2308.032014][ T7895] setxattr+0x1e5/0x420 [ 2308.036153][ T7895] ? path_setxattr+0x240/0x240 [ 2308.040912][ T7895] ? getname_flags+0x20d/0x610 [ 2308.045653][ T7895] ? __sb_start_write+0xa5/0x150 [ 2308.050563][ T7895] path_setxattr+0x164/0x240 [ 2308.055124][ T7895] ? fput_many+0x42/0x1a0 [ 2308.059426][ T7895] ? simple_xattr_list_add+0xf0/0xf0 [ 2308.064716][ T7895] ? __ia32_sys_read+0x80/0x80 [ 2308.069493][ T7895] __x64_sys_setxattr+0xb7/0xd0 [ 2308.074317][ T7895] do_syscall_64+0xcb/0x150 [ 2308.079666][ T7895] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2308.085538][ T7895] RIP: 0033:0x45d239 [ 2308.089431][ T7895] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2308.109013][ T7895] RSP: 002b:00007f9391efac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 2308.117420][ T7895] RAX: ffffffffffffffda RBX: 0000000000031500 RCX: 000000000045d239 [ 2308.125364][ T7895] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000140 [ 2308.133311][ T7895] RBP: 00007f9391efaca0 R08: 0000000000000000 R09: 0000000000000000 [ 2308.141278][ T7895] R10: 000000000000002b R11: 0000000000000246 R12: 0000000000000021 [ 2308.149242][ T7895] R13: 00007fff189c822f R14: 00007f9391efb9c0 R15: 000000000118cf4c [ 2308.158502][ T7895] SELinux: unable to map context to SIDfor (sda1, 16232), rc=12 [ 2308.283762][ T641] usb 1-1: device descriptor read/8, error -61 [ 2308.553743][ T641] usb 1-1: device descriptor read/8, error -61 [ 2308.823682][ T641] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 2308.993758][ T641] usb 1-1: device descriptor read/8, error -61 [ 2309.263779][ T641] usb 1-1: device descriptor read/8, error -61 [ 2309.383751][ T641] usb usb1-port1: unable to enumerate USB device 07:47:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x42, 0x0, &(0x7f00000001c0)) 07:47:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080e08001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:47:33 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000280)) r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x50, 0x5, 0x1f, 0x4, 0x0, 0x0, 0x1, 0xca00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0x1}, 0x0, 0x0, 0x0, 0x3, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x200000000011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x80000, 0x1, {0x0, r4}}, 0xc9e2) dup2(r3, r2) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000100)=""/106, 0x6a) lseek(r6, 0x0, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x19, &(0x7f0000000180)=0x8, 0x4) 07:47:33 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec351d9f42c"}}, &(0x7f0000000080)=0x0) timer_gettime(r5, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) 07:47:33 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) dup2(r4, r3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) dup2(r6, r5) r7 = dup2(r4, r6) ioctl$TIOCSPTLCK(r7, 0x40045431, &(0x7f0000000140)=0x1) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0xffffffd8) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f0000000040)={0x7, 'macvlan1\x00', {0x3ff}, 0xffc1}) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005000000050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) 07:47:33 executing program 4 (fault-call:10 fault-nth:34): mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x0) 07:47:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x43, 0x0, &(0x7f00000001c0)) [ 2310.253494][ T7907] __nla_validate_parse: 2 callbacks suppressed [ 2310.253500][ T7907] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2310.274409][ T7905] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=363411 [ 2310.290637][ T7905] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=363411 07:47:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x300, 0x0, &(0x7f00000001c0)) 07:47:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200081008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2310.300408][ T7918] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2310.307567][ T7905] FAULT_INJECTION: forcing a failure. [ 2310.307567][ T7905] name failslab, interval 1, probability 0, space 0, times 0 [ 2310.322885][ T7905] CPU: 1 PID: 7905 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2310.332945][ T7905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2310.344394][ T7905] Call Trace: [ 2310.347676][ T7905] dump_stack+0x14a/0x1ce [ 2310.351999][ T7905] ? devkmsg_release+0x11c/0x11c [ 2310.356932][ T7905] ? show_regs_print_info+0x12/0x12 [ 2310.361042][ T7922] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2310.362123][ T7905] should_fail+0x6fb/0x860 [ 2310.362144][ T7905] ? setup_fault_attr+0x3d0/0x3d0 [ 2310.380041][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2310.380736][ T7905] ? _raw_spin_unlock+0x5/0x20 [ 2310.380747][ T7905] ? selinux_inode_post_setxattr+0x318/0x4e0 07:47:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200081108001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2310.380761][ T7905] ? security_context_to_sid_core+0xc0/0x710 [ 2310.406614][ T7905] should_failslab+0x5/0x20 [ 2310.411110][ T7905] __kmalloc_track_caller+0x5d/0x2c0 [ 2310.416400][ T7905] ? selinux_inode_setxattr+0x1060/0x1060 [ 2310.422121][ T7905] kmemdup_nul+0x27/0xa0 [ 2310.425336][ T7928] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2310.426364][ T7905] security_context_to_sid_core+0xc0/0x710 [ 2310.426376][ T7905] ? security_inode_post_setxattr+0xe5/0x120 07:47:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x500, 0x0, &(0x7f00000001c0)) 07:47:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x600, 0x0, &(0x7f00000001c0)) [ 2310.426391][ T7905] ? up_read+0x10/0x10 [ 2310.456487][ T7905] ? security_context_to_sid+0x50/0x50 [ 2310.461944][ T7905] ? vfs_setxattr+0x278/0x2d0 [ 2310.466615][ T7905] security_context_to_sid_force+0x33/0x40 [ 2310.472424][ T7905] selinux_inode_post_setxattr+0x122/0x4e0 [ 2310.478226][ T7905] ? selinux_inode_setxattr+0x1060/0x1060 [ 2310.482893][ T7931] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2310.483939][ T7905] ? __fsnotify_parent+0x310/0x310 [ 2310.483951][ T7905] security_inode_post_setxattr+0xbb/0x120 07:47:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200081208001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:47:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x700, 0x0, &(0x7f00000001c0)) [ 2310.483961][ T7905] __vfs_setxattr_noperm+0x2fd/0x3e0 [ 2310.483974][ T7905] vfs_setxattr+0x11e/0x2d0 [ 2310.513790][ T7905] ? xattr_permission+0x350/0x350 [ 2310.518809][ T7905] ? __kmalloc+0xf7/0x2d0 [ 2310.523133][ T7905] ? __virt_addr_valid+0x1fd/0x290 [ 2310.528239][ T7905] setxattr+0x1e5/0x420 [ 2310.532391][ T7905] ? path_setxattr+0x240/0x240 [ 2310.537148][ T7905] ? getname_flags+0x20d/0x610 [ 2310.541900][ T7905] ? __sb_start_write+0xa5/0x150 [ 2310.546829][ T7905] path_setxattr+0x164/0x240 [ 2310.551436][ T7905] ? fput_many+0x42/0x1a0 [ 2310.555760][ T7905] ? simple_xattr_list_add+0xf0/0xf0 [ 2310.559999][ T7945] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2310.561037][ T7905] ? __ia32_sys_read+0x80/0x80 [ 2310.561047][ T7905] __x64_sys_setxattr+0xb7/0xd0 [ 2310.561062][ T7905] do_syscall_64+0xcb/0x150 [ 2310.571731][ T7946] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2310.575025][ T7905] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2310.575033][ T7905] RIP: 0033:0x45d239 [ 2310.575042][ T7905] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2310.575046][ T7905] RSP: 002b:00007f9391efac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 2310.575061][ T7905] RAX: ffffffffffffffda RBX: 0000000000031500 RCX: 000000000045d239 [ 2310.639354][ T7905] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000140 [ 2310.647317][ T7905] RBP: 00007f9391efaca0 R08: 0000000000000000 R09: 0000000000000000 07:47:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x900, 0x0, &(0x7f00000001c0)) [ 2310.655281][ T7905] R10: 000000000000002b R11: 0000000000000246 R12: 0000000000000022 [ 2310.663234][ T7905] R13: 00007fff189c822f R14: 00007f9391efb9c0 R15: 000000000118cf4c [ 2310.687044][ T7905] SELinux: unable to map context to SIDfor (overlay, 363411), rc=12 07:47:34 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec351d9f42c"}}, &(0x7f0000000080)=0x0) timer_gettime(r5, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) [ 2311.023657][T32251] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 2311.383747][T32251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2311.394690][T32251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2311.405205][T32251] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2311.414621][T32251] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2311.423294][T32251] usb 1-1: config 0 descriptor?? [ 2311.773711][T32251] usbhid 1-1:0.0: can't add hid device: -71 [ 2311.779725][T32251] usbhid: probe of 1-1:0.0 failed with error -71 [ 2311.788608][T32251] usb 1-1: USB disconnect, device number 31 [ 2312.253749][T32251] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 2312.613751][T32251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2312.624655][T32251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2312.635110][T32251] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2312.644575][T32251] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2312.654620][T32251] usb 1-1: config 0 descriptor?? [ 2313.373737][T32251] usb 1-1: string descriptor 0 read error: -71 [ 2313.393798][T32251] uclogic 0003:5543:006E.055F: failed retrieving string descriptor #200: -71 [ 2313.402590][T32251] uclogic 0003:5543:006E.055F: failed retrieving pen parameters: -71 [ 2313.412157][T32251] uclogic 0003:5543:006E.055F: failed probing pen v2 parameters: -71 [ 2313.421160][T32251] uclogic 0003:5543:006E.055F: failed probing parameters: -71 [ 2313.429543][T32251] uclogic: probe of 0003:5543:006E.055F failed with error -71 [ 2313.438515][T32251] usb 1-1: USB disconnect, device number 32 [ 2314.113662][T32251] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 2314.473783][T32251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2314.484665][T32251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2314.495112][T32251] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2314.504580][T32251] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2314.513287][T32251] usb 1-1: config 0 descriptor?? 07:47:38 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = io_uring_setup(0x592d, &(0x7f0000000600)={0x0, 0x57f4, 0x20, 0x0, 0x24d, 0x0, r3}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) dup2(r6, r5) r7 = fcntl$dupfd(r6, 0x0, r0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000500)="8d0cfc4865a58c3dc3f7e4b96638ca04179b625402f1e928f88a511ade0962bcab13abdae9ca81c2ae317edf757423677fab559f0a2eb73882257965d1be32a6a7e271024f414c2870c16d7c6e6a53d687e90cc5dd73846654caa5c12f43190bad7440035ca67d64d1d7a81d9e946d395c3c31de0607953b69c3a058ebf80a2871aa39cd0ab77d64eff9265a0eb744f479ddbabd6db45c02fb917ab858293db7e70c5221beadc100298f0a71f704257c41ab1a1bdc1d68bb8d4cec447ce50005f16d1f5f53e4e6a602a5", 0xca}, {&(0x7f0000000200)="02ee36dd3f977e08b13da9c4ef69efcd69b1dd17df3e45d85fa550fb73afa8f16b5070608515bdc6c45276dd778b46a01782156ee66035fc700641db68083a5dcd2888b9a054fdddd26859c5c2", 0x4d}, {&(0x7f0000000300)="7e3e6d2ad8d2c918b9dd4c287498d77a4956e04e1d632d673ac0e840123a56d92b78db5208b9d5d0bd79a01d53245f802756e408f7dc299af8d3d6d57dc1f987254bc13d2a5c7d73ab2c9d2b654b24", 0x4f}], 0x3, &(0x7f0000000680)=[@rights={{0x30, 0x1, 0x1, [r0, r0, r0, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, r4, r0, r7, r0]}}], 0x68, 0x4}, 0x4000800) r8 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r9, &(0x7f0000000100)=""/106, 0x6a) lseek(r9, 0x0, 0x0) getdents64(r9, &(0x7f0000000400)=""/255, 0xff) 07:47:38 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200082508001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:47:38 executing program 4 (fault-call:10 fault-nth:35): mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x0) 07:47:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0xa00, 0x0, &(0x7f00000001c0)) 07:47:38 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec351d9f42cfe48"}}, &(0x7f0000000080)=0x0) timer_gettime(r5, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) 07:47:38 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000040)={&(0x7f00000000c0)="fbeff777fc4550a4c2fe73cc8c03459a7b6eccc94a79cc9b271dc15131b2aa1c5989bb4123f2da92c5558dfaf7f28d780355aa1e7a70c66629e943049f0ed7eb8239a6a65e4b3b8a208e4ed35e55d8102d61c42b934b20d33ed1d675f56e", &(0x7f0000000140)=""/96, &(0x7f00000001c0)="a29cc97b7e684f03d2abde7e914b1c7961d7fe1a5266470a0c3ced3adcbf2058bc5c93f4f0034d2563965d7f208d052130474759ede6b57954959d3c7b8372dd48c7e762ce0c8dc2806175e691620507ad886903ea1f552df741a0d4c749d718bd1f4b92f1ac3312b7a25f7937137a1080e7303fc70d5feb4b217a39f0312879899f", &(0x7f0000000280)="95423352852e39af2d0ca98aa3eab7f9607c597cdd868220be72d6f0d5aa538f2b5ee79f064aaaeb9b95e05eebd58a7208b53120df5b387d22fe6a50b34857233b67352901962425440163095a1a8b1729beb1a75504ce016438caf32cfab7b508970de14444460f2efc3bc525aa2339922495ab35fd1a98cb1dd14a0e668dd202c81ac1f82d0a8e36116c3cf5fadf75dfeb3d36e8f4971238d04645ea0ac6a971e8ea364775b282184bc79e904fe5a12c619544e49fb7ad230627a0e59229d445654d89e1ca9359da79946a5cc00d733eeead544e8d", 0x7, r3, 0x4}, 0x38) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000380)='nbd\x00') syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005000000050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) 07:47:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0xb00, 0x0, &(0x7f00000001c0)) 07:47:38 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0x24000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0xc}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x24000800) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000100)=""/106, 0x6a) lseek(r5, 0x0, 0x0) getdents64(r5, &(0x7f0000000400)=""/255, 0xff) [ 2314.682865][ T7982] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2314.691233][ T7983] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=364281 [ 2314.701693][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2314.713556][ T7983] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=364281 07:47:38 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200082808001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:47:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0xc00, 0x0, &(0x7f00000001c0)) [ 2314.736421][ T7983] FAULT_INJECTION: forcing a failure. [ 2314.736421][ T7983] name failslab, interval 1, probability 0, space 0, times 0 [ 2314.753761][T32251] usbhid 1-1:0.0: can't add hid device: -71 [ 2314.761094][ T7983] CPU: 0 PID: 7983 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2314.761300][T32251] usbhid: probe of 1-1:0.0 failed with error -71 [ 2314.771182][ T7983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2314.771186][ T7983] Call Trace: [ 2314.771209][ T7983] dump_stack+0x14a/0x1ce [ 2314.771219][ T7983] ? devkmsg_release+0x11c/0x11c [ 2314.771229][ T7983] ? show_regs_print_info+0x12/0x12 [ 2314.771242][ T7983] should_fail+0x6fb/0x860 [ 2314.771250][ T7983] ? setup_fault_attr+0x3d0/0x3d0 [ 2314.771268][ T7983] ? security_context_to_sid_core+0x14a/0x710 [ 2314.798161][T32251] usb 1-1: USB disconnect, device number 33 [ 2314.800235][ T7983] should_failslab+0x5/0x20 [ 2314.800246][ T7983] __kmalloc_track_caller+0x5d/0x2c0 [ 2314.800261][ T7983] ? kmemdup_nul+0x42/0xa0 [ 2314.840971][ T7983] kstrdup+0x31/0x70 [ 2314.844872][ T7983] security_context_to_sid_core+0x14a/0x710 [ 2314.850775][ T7983] ? security_inode_post_setxattr+0xe5/0x120 [ 2314.856766][ T7983] ? up_read+0x10/0x10 [ 2314.860846][ T7983] ? security_context_to_sid+0x50/0x50 [ 2314.866319][ T7983] ? vfs_setxattr+0x278/0x2d0 [ 2314.871007][ T7983] security_context_to_sid_force+0x33/0x40 [ 2314.876856][ T7983] selinux_inode_post_setxattr+0x122/0x4e0 [ 2314.880572][ T8000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=260 sclass=netlink_route_socket pid=8000 comm=syz-executor.5 [ 2314.882668][ T7983] ? selinux_inode_setxattr+0x1060/0x1060 [ 2314.882679][ T7983] ? __fsnotify_parent+0x310/0x310 [ 2314.882690][ T7983] security_inode_post_setxattr+0xbb/0x120 [ 2314.882706][ T7983] __vfs_setxattr_noperm+0x2fd/0x3e0 [ 2314.917438][ T7983] vfs_setxattr+0x11e/0x2d0 [ 2314.921945][ T7983] ? xattr_permission+0x350/0x350 [ 2314.926977][ T7983] ? __kmalloc+0xf7/0x2d0 [ 2314.931312][ T7983] ? __virt_addr_valid+0x1fd/0x290 07:47:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0xd00, 0x0, &(0x7f00000001c0)) 07:47:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0xe00, 0x0, &(0x7f00000001c0)) 07:47:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0xf00, 0x0, &(0x7f00000001c0)) 07:47:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1100, 0x0, &(0x7f00000001c0)) [ 2314.936443][ T7983] setxattr+0x1e5/0x420 [ 2314.940606][ T7983] ? path_setxattr+0x240/0x240 [ 2314.945384][ T7983] ? getname_flags+0x20d/0x610 [ 2314.950157][ T7983] ? __sb_start_write+0xa5/0x150 [ 2314.955108][ T7983] path_setxattr+0x164/0x240 [ 2314.959697][ T7983] ? fput_many+0x42/0x1a0 [ 2314.964026][ T7983] ? simple_xattr_list_add+0xf0/0xf0 [ 2314.969325][ T7983] ? __ia32_sys_read+0x80/0x80 [ 2314.974083][ T7983] __x64_sys_setxattr+0xb7/0xd0 [ 2314.978929][ T7983] do_syscall_64+0xcb/0x150 [ 2314.983429][ T7983] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2314.989316][ T7983] RIP: 0033:0x45d239 [ 2314.993200][ T7983] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2314.996420][ T8000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=260 sclass=netlink_route_socket pid=8000 comm=syz-executor.5 [ 2315.012808][ T7983] RSP: 002b:00007f9391efac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc 07:47:38 executing program 4 (fault-call:10 fault-nth:36): mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x0) 07:47:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1200, 0x0, &(0x7f00000001c0)) [ 2315.012817][ T7983] RAX: ffffffffffffffda RBX: 0000000000031500 RCX: 000000000045d239 [ 2315.012821][ T7983] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000140 [ 2315.012825][ T7983] RBP: 00007f9391efaca0 R08: 0000000000000000 R09: 0000000000000000 [ 2315.012829][ T7983] R10: 000000000000002b R11: 0000000000000246 R12: 0000000000000023 [ 2315.012834][ T7983] R13: 00007fff189c822f R14: 00007f9391efb9c0 R15: 000000000118cf4c [ 2315.023571][ T7983] SELinux: unable to map context to SIDfor (overlay, 364281), rc=12 [ 2315.126381][ T8032] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=364675 [ 2315.135970][ T8032] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=364675 [ 2315.146601][ T8032] FAULT_INJECTION: forcing a failure. [ 2315.146601][ T8032] name failslab, interval 1, probability 0, space 0, times 0 [ 2315.159295][ T8032] CPU: 1 PID: 8032 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2315.169372][ T8032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2315.179414][ T8032] Call Trace: [ 2315.182685][ T8032] dump_stack+0x14a/0x1ce [ 2315.186990][ T8032] ? devkmsg_release+0x11c/0x11c [ 2315.191901][ T8032] ? stack_trace_save+0x123/0x1f0 [ 2315.196900][ T8032] ? show_regs_print_info+0x12/0x12 [ 2315.202074][ T8032] ? stack_trace_snprint+0x150/0x150 [ 2315.207331][ T8032] should_fail+0x6fb/0x860 [ 2315.211731][ T8032] ? setup_fault_attr+0x3d0/0x3d0 [ 2315.216737][ T8032] ? __kasan_kmalloc+0x189/0x1c0 [ 2315.221685][ T8032] ? ebitmap_cmp+0x1c8/0x230 [ 2315.226253][ T8032] ? mls_compute_context_len+0x81b/0x850 [ 2315.231854][ T8032] ? context_struct_to_string+0x3e4/0x820 [ 2315.237575][ T8032] should_failslab+0x5/0x20 [ 2315.242103][ T8032] __kmalloc+0x5f/0x2d0 [ 2315.246264][ T8032] context_struct_to_string+0x3e4/0x820 [ 2315.251796][ T8032] ? security_bounded_transition+0x560/0x560 [ 2315.257753][ T8032] context_add_hash+0x145/0x280 [ 2315.262577][ T8032] ? mls_context_isvalid+0x98/0x380 [ 2315.267753][ T8032] ? security_sid_to_context_inval+0x40/0x40 [ 2315.273728][ T8032] ? string_to_context_struct+0x486/0x640 [ 2315.279435][ T8032] security_context_to_sid_core+0x406/0x710 [ 2315.285302][ T8032] ? security_context_to_sid+0x50/0x50 [ 2315.290733][ T8032] ? vfs_setxattr+0x278/0x2d0 [ 2315.295403][ T8032] security_context_to_sid_force+0x33/0x40 [ 2315.301181][ T8032] selinux_inode_post_setxattr+0x122/0x4e0 [ 2315.306980][ T8032] ? selinux_inode_setxattr+0x1060/0x1060 [ 2315.312676][ T8032] ? __fsnotify_parent+0x310/0x310 [ 2315.317810][ T8032] security_inode_post_setxattr+0xbb/0x120 [ 2315.323654][ T8032] __vfs_setxattr_noperm+0x2fd/0x3e0 [ 2315.328965][ T8032] vfs_setxattr+0x11e/0x2d0 [ 2315.333445][ T8032] ? xattr_permission+0x350/0x350 [ 2315.338453][ T8032] ? __kmalloc+0xf7/0x2d0 [ 2315.342769][ T8032] ? __virt_addr_valid+0x1fd/0x290 [ 2315.347857][ T8032] setxattr+0x1e5/0x420 [ 2315.351989][ T8032] ? path_setxattr+0x240/0x240 [ 2315.356780][ T8032] ? getname_flags+0x20d/0x610 [ 2315.361519][ T8032] ? __sb_start_write+0xa5/0x150 [ 2315.366430][ T8032] path_setxattr+0x164/0x240 [ 2315.370989][ T8032] ? fput_many+0x42/0x1a0 [ 2315.376257][ T8032] ? simple_xattr_list_add+0xf0/0xf0 [ 2315.381519][ T8032] ? __ia32_sys_read+0x80/0x80 [ 2315.386262][ T8032] __x64_sys_setxattr+0xb7/0xd0 [ 2315.391085][ T8032] do_syscall_64+0xcb/0x150 [ 2315.395576][ T8032] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2315.401461][ T8032] RIP: 0033:0x45d239 [ 2315.405329][ T8032] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2315.424911][ T8032] RSP: 002b:00007f9391efac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 2315.433323][ T8032] RAX: ffffffffffffffda RBX: 0000000000031500 RCX: 000000000045d239 [ 2315.441273][ T8032] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000140 [ 2315.449215][ T8032] RBP: 00007f9391efaca0 R08: 0000000000000000 R09: 0000000000000000 [ 2315.457156][ T8032] R10: 000000000000002b R11: 0000000000000246 R12: 0000000000000024 [ 2315.465114][ T8032] R13: 00007fff189c822f R14: 00007f9391efb9c0 R15: 000000000118cf4c 07:47:39 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec351d9f42cfe48"}}, &(0x7f0000000080)=0x0) timer_gettime(r5, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) [ 2315.473760][ T8032] SELinux: unable to map context to SIDfor (overlay, 364675), rc=12 [ 2315.623737][T32251] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 2315.983791][T32251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2315.994824][T32251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2316.005305][T32251] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2316.014742][T32251] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2316.023546][T32251] usb 1-1: config 0 descriptor?? [ 2316.363788][T32251] usbhid 1-1:0.0: can't add hid device: -71 [ 2316.369775][T32251] usbhid: probe of 1-1:0.0 failed with error -71 [ 2316.378315][T32251] usb 1-1: USB disconnect, device number 34 [ 2316.843675][T32251] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 2317.113688][T32251] usb 1-1: device descriptor read/64, error 18 [ 2317.503724][T32251] usb 1-1: device descriptor read/64, error 18 07:47:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200084808001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:47:41 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) waitid(0x0, r1, 0x0, 0x2, &(0x7f0000000180)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000100)=""/106, 0x6a) lseek(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NFNL_MSG_CTHELPER_DEL(r6, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000209050400000000000000000500000108000540000002707f0015"], 0x1c}, 0x1, 0x0, 0x0, 0x2000084}, 0x4080) getdents64(r3, &(0x7f0000000400)=""/255, 0xff) 07:47:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1300, 0x0, &(0x7f00000001c0)) 07:47:41 executing program 4 (fault-call:10 fault-nth:37): mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x0) 07:47:41 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005000000050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockname$unix(r4, &(0x7f00000000c0), &(0x7f0000000040)=0x6e) 07:47:41 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec351d9f42cfe48"}}, &(0x7f0000000080)=0x0) timer_gettime(r5, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) 07:47:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1400, 0x0, &(0x7f00000001c0)) [ 2317.690232][ T8048] __nla_validate_parse: 1 callbacks suppressed [ 2317.690238][ T8048] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2317.724155][ T8060] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:47:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200084c08001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2317.726839][ T8051] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=364714 [ 2317.748749][ T8051] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=364714 [ 2317.763860][ T8050] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2306 sclass=netlink_route_socket pid=8050 comm=syz-executor.5 [ 2317.765539][ T8064] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:47:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1500, 0x0, &(0x7f00000001c0)) [ 2317.778704][ T8051] FAULT_INJECTION: forcing a failure. [ 2317.778704][ T8051] name failslab, interval 1, probability 0, space 0, times 0 [ 2317.800599][ T8051] CPU: 1 PID: 8051 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2317.810665][ T8051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2317.811043][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2317.820716][ T8051] Call Trace: [ 2317.820740][ T8051] dump_stack+0x14a/0x1ce 07:47:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1900, 0x0, &(0x7f00000001c0)) 07:47:41 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0xe4) getdents64(r2, &(0x7f0000000100)=""/106, 0x6a) lseek(r2, 0x0, 0x0) getdents64(r2, &(0x7f0000000400)=""/255, 0xff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$EVIOCGABS20(r5, 0x80184560, &(0x7f0000000040)=""/42) [ 2317.820749][ T8051] ? devkmsg_release+0x11c/0x11c [ 2317.820756][ T8051] ? show_regs_print_info+0x12/0x12 [ 2317.820764][ T8051] should_fail+0x6fb/0x860 [ 2317.820771][ T8051] ? setup_fault_attr+0x3d0/0x3d0 [ 2317.820779][ T8051] ? security_context_to_sid_core+0x570/0x710 [ 2317.820787][ T8051] ? kfree+0x12b/0x600 [ 2317.820795][ T8051] ? inode_doinit_use_xattr+0x58/0x3f0 [ 2317.820803][ T8051] should_failslab+0x5/0x20 [ 2317.820810][ T8051] kmem_cache_alloc_trace+0x39/0x280 [ 2317.820818][ T8051] ? blk_crypto_keyslot_evict+0x160/0x160 07:47:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1a00, 0x0, &(0x7f00000001c0)) [ 2317.820825][ T8051] inode_doinit_use_xattr+0x58/0x3f0 [ 2317.820833][ T8051] inode_doinit_with_dentry+0x8da/0x10e0 [ 2317.820849][ T8051] ? sb_finish_set_opts+0x7e0/0x7e0 [ 2317.845160][ T8050] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2306 sclass=netlink_route_socket pid=8050 comm=syz-executor.5 [ 2317.847707][ T8051] selinux_inode_post_setxattr+0x1fc/0x4e0 [ 2317.847719][ T8051] ? selinux_inode_setxattr+0x1060/0x1060 [ 2317.847734][ T8051] ? __fsnotify_parent+0x310/0x310 [ 2317.934020][ T8051] security_inode_post_setxattr+0xbb/0x120 07:47:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1c00, 0x0, &(0x7f00000001c0)) 07:47:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d00, 0x0, &(0x7f00000001c0)) [ 2317.939835][ T8051] __vfs_setxattr_noperm+0x2fd/0x3e0 [ 2317.946084][ T8051] vfs_setxattr+0x11e/0x2d0 [ 2317.950594][ T8051] ? xattr_permission+0x350/0x350 [ 2317.955622][ T8051] ? __kmalloc+0xf7/0x2d0 [ 2317.959952][ T8051] ? __virt_addr_valid+0x1fd/0x290 [ 2317.965060][ T8051] setxattr+0x1e5/0x420 [ 2317.969217][ T8051] ? path_setxattr+0x240/0x240 [ 2317.973984][ T8051] ? getname_flags+0x20d/0x610 [ 2317.978747][ T8051] ? __sb_start_write+0xa5/0x150 [ 2317.983721][ T8051] path_setxattr+0x164/0x240 07:47:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1e00, 0x0, &(0x7f00000001c0)) [ 2317.988309][ T8051] ? fput_many+0x42/0x1a0 [ 2317.992689][ T8051] ? simple_xattr_list_add+0xf0/0xf0 [ 2317.997977][ T8051] ? __ia32_sys_read+0x80/0x80 [ 2318.002740][ T8051] __x64_sys_setxattr+0xb7/0xd0 [ 2318.007592][ T8051] do_syscall_64+0xcb/0x150 [ 2318.012117][ T8051] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2318.018002][ T8051] RIP: 0033:0x45d239 [ 2318.021897][ T8051] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 07:47:41 executing program 4 (fault-call:10 fault-nth:38): mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x0) [ 2318.041512][ T8051] RSP: 002b:00007f9391efac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 2318.049939][ T8051] RAX: ffffffffffffffda RBX: 0000000000031500 RCX: 000000000045d239 [ 2318.057902][ T8051] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000140 [ 2318.065899][ T8051] RBP: 00007f9391efaca0 R08: 0000000000000000 R09: 0000000000000000 [ 2318.074804][ T8051] R10: 000000000000002b R11: 0000000000000246 R12: 0000000000000025 [ 2318.083146][ T8051] R13: 00007fff189c822f R14: 00007f9391efb9c0 R15: 000000000118cf4c [ 2318.134789][ T8099] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=364744 [ 2318.145532][ T8099] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=364744 [ 2318.156421][ T8099] FAULT_INJECTION: forcing a failure. [ 2318.156421][ T8099] name failslab, interval 1, probability 0, space 0, times 0 [ 2318.169401][T32251] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 2318.177197][ T8099] CPU: 1 PID: 8099 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2318.187239][ T8099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2318.197280][ T8099] Call Trace: [ 2318.200575][ T8099] dump_stack+0x14a/0x1ce [ 2318.204890][ T8099] ? devkmsg_release+0x11c/0x11c [ 2318.209813][ T8099] ? show_regs_print_info+0x12/0x12 [ 2318.214991][ T8099] ? __kasan_slab_free+0x1f2/0x230 [ 2318.220094][ T8099] ? slab_free_freelist_hook+0xd0/0x150 [ 2318.225624][ T8099] ? kfree+0x12b/0x600 [ 2318.229682][ T8099] should_fail+0x6fb/0x860 [ 2318.234180][ T8099] ? setup_fault_attr+0x3d0/0x3d0 [ 2318.239180][ T8099] ? __vfs_getxattr+0x630/0x6e0 [ 2318.244057][ T8099] ? path_setxattr+0x164/0x240 [ 2318.248811][ T8099] ? security_context_to_sid_core+0xc0/0x710 [ 2318.254776][ T8099] should_failslab+0x5/0x20 [ 2318.259256][ T8099] __kmalloc_track_caller+0x5d/0x2c0 [ 2318.264519][ T8099] ? vfs_getxattr_alloc+0x570/0x570 [ 2318.269696][ T8099] kmemdup_nul+0x27/0xa0 [ 2318.273917][ T8099] security_context_to_sid_core+0xc0/0x710 [ 2318.279701][ T8099] ? ovl_xattr_get+0xd5/0xf0 [ 2318.284264][ T8099] ? security_context_to_sid+0x50/0x50 [ 2318.289696][ T8099] ? vfs_getxattr_alloc+0x570/0x570 [ 2318.294893][ T8099] ? inode_doinit_use_xattr+0x58/0x3f0 [ 2318.300339][ T8099] security_context_to_sid_default+0x3a/0x50 [ 2318.306343][ T8099] inode_doinit_use_xattr+0x1c4/0x3f0 [ 2318.311696][ T8099] inode_doinit_with_dentry+0x8da/0x10e0 [ 2318.317330][ T8099] ? sb_finish_set_opts+0x7e0/0x7e0 [ 2318.322502][ T8099] selinux_inode_post_setxattr+0x1fc/0x4e0 [ 2318.328280][ T8099] ? selinux_inode_setxattr+0x1060/0x1060 [ 2318.334076][ T8099] ? __fsnotify_parent+0x310/0x310 [ 2318.339167][ T8099] security_inode_post_setxattr+0xbb/0x120 [ 2318.344960][ T8099] __vfs_setxattr_noperm+0x2fd/0x3e0 [ 2318.350231][ T8099] vfs_setxattr+0x11e/0x2d0 [ 2318.354707][ T8099] ? xattr_permission+0x350/0x350 [ 2318.359708][ T8099] ? __kmalloc+0xf7/0x2d0 [ 2318.364018][ T8099] ? __virt_addr_valid+0x1fd/0x290 [ 2318.369111][ T8099] setxattr+0x1e5/0x420 [ 2318.373257][ T8099] ? path_setxattr+0x240/0x240 [ 2318.378041][ T8099] ? getname_flags+0x20d/0x610 [ 2318.382780][ T8099] ? __sb_start_write+0xa5/0x150 [ 2318.387696][ T8099] path_setxattr+0x164/0x240 [ 2318.392268][ T8099] ? fput_many+0x42/0x1a0 [ 2318.396583][ T8099] ? simple_xattr_list_add+0xf0/0xf0 [ 2318.401841][ T8099] ? __ia32_sys_read+0x80/0x80 [ 2318.406650][ T8099] __x64_sys_setxattr+0xb7/0xd0 [ 2318.411490][ T8099] do_syscall_64+0xcb/0x150 [ 2318.416003][ T8099] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2318.421886][ T8099] RIP: 0033:0x45d239 [ 2318.425781][ T8099] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2318.445402][ T8099] RSP: 002b:00007f9391efac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 2318.453804][ T8099] RAX: ffffffffffffffda RBX: 0000000000031500 RCX: 000000000045d239 [ 2318.461780][ T8099] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000140 [ 2318.469765][ T8099] RBP: 00007f9391efaca0 R08: 0000000000000000 R09: 0000000000000000 [ 2318.485968][ T8099] R10: 000000000000002b R11: 0000000000000246 R12: 0000000000000026 [ 2318.493933][ T8099] R13: 00007fff189c822f R14: 00007f9391efb9c0 R15: 000000000118cf4c [ 2318.503017][ T8099] SELinux: inode_doinit_use_xattr: context_to_sid(system_u:object_r:semanage_trans_lock_t:s0) returned 12 for dev=overlay ino=364744 [ 2318.873760][T32251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2318.884705][T32251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2318.895151][T32251] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2318.904657][T32251] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2318.913343][T32251] usb 1-1: config 0 descriptor?? [ 2319.253745][T32251] usbhid 1-1:0.0: can't add hid device: -71 [ 2319.259733][T32251] usbhid: probe of 1-1:0.0 failed with error -71 [ 2319.268389][T32251] usb 1-1: USB disconnect, device number 36 [ 2319.723663][T32251] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 2320.083844][T32251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2320.094866][T32251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2320.105427][T32251] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2320.114914][T32251] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2320.124962][T32251] usb 1-1: config 0 descriptor?? [ 2320.843786][T32251] usb 1-1: string descriptor 0 read error: -71 [ 2320.863758][T32251] uclogic 0003:5543:006E.0560: failed retrieving string descriptor #200: -71 [ 2320.872526][T32251] uclogic 0003:5543:006E.0560: failed retrieving pen parameters: -71 [ 2320.882174][T32251] uclogic 0003:5543:006E.0560: failed probing pen v2 parameters: -71 [ 2320.891078][T32251] uclogic 0003:5543:006E.0560: failed probing parameters: -71 [ 2320.899311][T32251] uclogic: probe of 0003:5543:006E.0560 failed with error -71 [ 2320.908262][T32251] usb 1-1: USB disconnect, device number 37 [ 2321.573665][ T641] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 2321.933784][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2321.944697][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2321.954549][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2321.963562][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2321.972458][ T641] usb 1-1: config 0 descriptor?? 07:47:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200086008001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:47:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1f00, 0x0, &(0x7f00000001c0)) 07:47:45 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x60400, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000100)=""/106, 0x6a) lseek(r2, 0x0, 0x0) getdents64(r2, &(0x7f0000000400)=""/255, 0xff) 07:47:45 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec351d9f42cfe4829"}}, &(0x7f0000000080)=0x0) timer_gettime(r5, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) 07:47:45 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES64], 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f00000001c0)={0x2c, &(0x7f0000000840)={0x40, 0x4, 0x102, {0x102, 0x21, "ee0ba55831a50ee61622bdd5de3ef277457ac3876e5e95dc2865f96a39bce776e5fe195dac0de062d59ca69ae2ab6e0191a506e8737423d97afecdb51737cadf4a7f4f0779ff45dcf33bab608706163514fe3930d33fa6105c867e85d18aa983d96498f35dfb909f49d42bc291ac9df11216db2e5893ba50ee2ecb36250a4eba69087c8d41b08224e5c7788da1552d001e32cba8d984c6c7f35c71dec9c4be36739a7b31a4f71922ee0041d634b342bd86961e7b478b51923c319231319acb61c2d21441cc970bae879b0fb6adbcb286d1b850020f761f41da6744f2f08d1a7381171de41e6c42f95e49278a0d33a0a1a855d9538d4cc9734a9d1f59d8ad7bde"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x240a}}, &(0x7f0000000100)={0x0, 0xf, 0x2b, {0x5, 0xf, 0x2b, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x8, 0xff00}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x6, 0x6, 0x7, 0xff}, @ext_cap={0x7, 0x10, 0x2, 0x20, 0x1, 0x7, 0xffff}, @ext_cap={0x7, 0x10, 0x2, 0x20, 0xf, 0x5, 0x6}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0xbe, 0x3, 0xf8, 0x80, "9f6341d9", "a2ac9080"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x0, 0x9, 0x7, 0x20, 0x6df7, 0x401}}}, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x0, 0x18677d0f08238011, 0x8f, "37d37f454c125b5bee52058583d2662c33eb2ca1bff3df97d6ac7392c04e3cd531d0cb143d46108b671906672d53ad0bf54cb7438c3ba3ed21864ac985cf6b63fd8eb6364450f9ac8a2ce8a4c79756eb0cbbdea971de98393c9839e4bb29679e01c465e6c37ea7d67f2111cbd9d56c5375109986b72cfd76f901c256a361adfaf2e6f2e0576ebe1410e0bd00000000"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x200, 0x80, [0xff]}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000400)={0x40, 0x9, 0x1}, &(0x7f0000000440)={0x40, 0xb, 0x2, "0805"}, &(0x7f0000000480)={0x40, 0xf, 0x2, 0x40}, &(0x7f00000004c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000500)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000540)={0x40, 0x19, 0x2, '?u'}, &(0x7f0000000580)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000005c0)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000600)={0x40, 0x1e, 0x1}, &(0x7f0000000640)={0x40, 0x21, 0x1, 0x4}}) rt_sigaction(0x0, &(0x7f00000007c0)={&(0x7f0000000740)="470fa1650f0d0d00800000f30f110fc421fc2bb9006028e90d0300000040dc21f30f1efa0f9a76f2460fb486e90b0000f346ab", 0x80000007, &(0x7f0000000780)="0f0f66e3aec461d56a17c4e27d242c8b66490f38f5512fc4a20540f40f5c73dbc4e33921fb18c4c2510cf5f30f1b8f09000000f347ab", {[0x8]}}, &(0x7f0000000a00)={&(0x7f0000000980)="3e660f72d12dc422999c14e60fb0f0c4a3495f32dcc402fd32284e0faea300000000f3d858a666f30fbc8efbdf0000c4c2393f0744de62c8", 0x0, &(0x7f00000009c0)="2e2665f3410fc7f8c4225d8e29c422ed011f672ef2642e3647d1c66f3e26f340abdefa2640d9e9e71766430f747900"}, 0x8, &(0x7f0000000a40)) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005000000050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair(0x8, 0x4, 0x800, &(0x7f0000000040)) 07:47:45 executing program 4 (fault-call:10 fault-nth:39): mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x0) 07:47:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200086808001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2322.235245][ T8125] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2322.245822][ T8128] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2322.259571][ T8124] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=365641 [ 2322.272034][ T8124] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=365641 07:47:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x2200, 0x0, &(0x7f00000001c0)) [ 2322.276478][ T8132] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2322.303722][ T641] usbhid 1-1:0.0: can't add hid device: -71 [ 2322.310259][ T641] usbhid: probe of 1-1:0.0 failed with error -71 [ 2322.314135][ T8137] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2322.319593][ T8124] FAULT_INJECTION: forcing a failure. 07:47:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x2300, 0x0, &(0x7f00000001c0)) 07:47:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200086c08001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2322.319593][ T8124] name failslab, interval 1, probability 0, space 0, times 0 [ 2322.357034][ T641] usb 1-1: USB disconnect, device number 38 [ 2322.372785][ T8124] CPU: 1 PID: 8124 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2322.382868][ T8124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2322.384157][ T8143] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2322.393087][ T8124] Call Trace: [ 2322.393106][ T8124] dump_stack+0x14a/0x1ce [ 2322.393116][ T8124] ? devkmsg_release+0x11c/0x11c [ 2322.393130][ T8124] ? show_regs_print_info+0x12/0x12 [ 2322.404994][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2322.405573][ T8124] should_fail+0x6fb/0x860 [ 2322.405582][ T8124] ? setup_fault_attr+0x3d0/0x3d0 [ 2322.405598][ T8124] ? security_context_to_sid_core+0x14a/0x710 [ 2322.444659][ T8124] should_failslab+0x5/0x20 [ 2322.449159][ T8124] __kmalloc_track_caller+0x5d/0x2c0 07:47:46 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x40001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x200000000011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000100)=""/106, 0x6a) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4000804}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) renameat(r4, &(0x7f0000000180)='./file0\x00', r7, &(0x7f00000001c0)='./file0/file0\x00') lseek(r3, 0x0, 0x0) getdents64(r3, &(0x7f0000000400)=""/255, 0xff) [ 2322.454438][ T8124] ? kmemdup_nul+0x42/0xa0 [ 2322.458841][ T8124] kstrdup+0x31/0x70 [ 2322.462738][ T8124] security_context_to_sid_core+0x14a/0x710 [ 2322.468628][ T8124] ? ovl_xattr_get+0xd5/0xf0 [ 2322.473207][ T8124] ? security_context_to_sid+0x50/0x50 [ 2322.478659][ T8124] ? vfs_getxattr_alloc+0x570/0x570 [ 2322.483853][ T8124] ? inode_doinit_use_xattr+0x58/0x3f0 [ 2322.489329][ T8124] security_context_to_sid_default+0x3a/0x50 [ 2322.495338][ T8124] inode_doinit_use_xattr+0x1c4/0x3f0 [ 2322.500710][ T8124] inode_doinit_with_dentry+0x8da/0x10e0 07:47:46 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x2000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000000)=0xffff, 0x4) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000180)={0x32, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x0, 'fo\x00', 0x27, 0x6, 0x7d}, 0x2c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00') r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open$dir(&(0x7f00000001c0)='./file0/file0\x00', 0x440002, 0x80) getdents64(r5, &(0x7f0000000100)=""/106, 0x6a) lseek(r5, 0x0, 0x0) getdents64(r5, &(0x7f0000000400)=""/255, 0xff) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = dup2(r6, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r7, 0x10, &(0x7f0000000200)={&(0x7f0000000500)=""/225, 0xe1}}, 0x10) 07:47:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x2400, 0x0, &(0x7f00000001c0)) 07:47:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x2500, 0x0, &(0x7f00000001c0)) [ 2322.506346][ T8124] ? sb_finish_set_opts+0x7e0/0x7e0 [ 2322.511545][ T8124] selinux_inode_post_setxattr+0x1fc/0x4e0 [ 2322.517349][ T8124] ? selinux_inode_setxattr+0x1060/0x1060 [ 2322.523061][ T8124] ? __fsnotify_parent+0x310/0x310 [ 2322.528170][ T8124] security_inode_post_setxattr+0xbb/0x120 [ 2322.533967][ T8124] __vfs_setxattr_noperm+0x2fd/0x3e0 [ 2322.539244][ T8124] vfs_setxattr+0x11e/0x2d0 [ 2322.543748][ T8124] ? xattr_permission+0x350/0x350 [ 2322.548792][ T8124] ? __kmalloc+0xf7/0x2d0 [ 2322.553110][ T8124] ? __virt_addr_valid+0x1fd/0x290 07:47:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x2600, 0x0, &(0x7f00000001c0)) [ 2322.558210][ T8124] setxattr+0x1e5/0x420 [ 2322.562355][ T8124] ? path_setxattr+0x240/0x240 [ 2322.567112][ T8124] ? getname_flags+0x20d/0x610 [ 2322.571893][ T8124] ? __sb_start_write+0xa5/0x150 [ 2322.576821][ T8124] path_setxattr+0x164/0x240 [ 2322.581404][ T8124] ? fput_many+0x42/0x1a0 [ 2322.585734][ T8124] ? simple_xattr_list_add+0xf0/0xf0 [ 2322.591015][ T8124] ? __ia32_sys_read+0x80/0x80 [ 2322.595788][ T8124] __x64_sys_setxattr+0xb7/0xd0 [ 2322.600656][ T8124] do_syscall_64+0xcb/0x150 [ 2322.605159][ T8124] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2322.611039][ T8124] RIP: 0033:0x45d239 [ 2322.614921][ T8124] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2322.634512][ T8124] RSP: 002b:00007f9391efac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 2322.642898][ T8124] RAX: ffffffffffffffda RBX: 0000000000031500 RCX: 000000000045d239 [ 2322.650843][ T8124] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000140 [ 2322.658793][ T8124] RBP: 00007f9391efaca0 R08: 0000000000000000 R09: 0000000000000000 [ 2322.666750][ T8124] R10: 000000000000002b R11: 0000000000000246 R12: 0000000000000027 [ 2322.674714][ T8124] R13: 00007fff189c822f R14: 00007f9391efb9c0 R15: 000000000118cf4c [ 2322.686115][ T8124] SELinux: inode_doinit_use_xattr: context_to_sid(system_u:object_r:semanage_trans_lock_t:s0) returned 12 for dev=overlay ino=365641 [ 2322.723703][ T641] usb 1-1: new high-speed USB device number 39 using dummy_hcd 07:47:46 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec351d9f42cfe4829"}}, &(0x7f0000000080)=0x0) timer_gettime(r5, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) [ 2323.083751][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2323.094638][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2323.105081][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2323.114514][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2323.123288][ T641] usb 1-1: config 0 descriptor?? [ 2323.473711][ T641] usbhid 1-1:0.0: can't add hid device: -71 [ 2323.479813][ T641] usbhid: probe of 1-1:0.0 failed with error -71 [ 2323.487611][ T641] usb 1-1: USB disconnect, device number 39 [ 2323.953683][ T641] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 2324.313758][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2324.324705][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2324.336015][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2324.345483][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2324.354583][ T641] usb 1-1: config 0 descriptor?? [ 2324.804047][ T8122] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2325.063918][ T641] usb 1-1: string descriptor 0 read error: -71 [ 2325.083745][ T641] uclogic 0003:5543:006E.0561: failed retrieving string descriptor #200: -71 [ 2325.092532][ T641] uclogic 0003:5543:006E.0561: failed retrieving pen parameters: -71 [ 2325.102213][ T641] uclogic 0003:5543:006E.0561: failed probing pen v2 parameters: -71 [ 2325.111169][ T641] uclogic 0003:5543:006E.0561: failed probing parameters: -71 [ 2325.120058][ T641] uclogic: probe of 0003:5543:006E.0561 failed with error -71 [ 2325.129155][ T641] usb 1-1: USB disconnect, device number 40 [ 2325.793672][ T641] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 2326.153765][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2326.164696][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2326.174492][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2326.183513][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2326.192404][ T641] usb 1-1: config 0 descriptor?? 07:47:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200087408001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:47:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x2700, 0x0, &(0x7f00000001c0)) 07:47:50 executing program 4 (fault-call:10 fault-nth:40): mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x0) 07:47:50 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) dup2(r3, r2) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000040)=0xf11, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000100)=""/106, 0x6a) lseek(r4, 0x0, 0x0) getdents64(r4, &(0x7f0000000400)=""/255, 0xff) 07:47:50 executing program 0: r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00b2b0921f796f30c5"], 0x0, 0x0, 0x0, 0x0}, 0x0) 07:47:50 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec351d9f42cfe4829"}}, &(0x7f0000000080)=0x0) timer_gettime(r5, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) 07:47:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x2800, 0x0, &(0x7f00000001c0)) 07:47:50 executing program 5: r0 = inotify_init() mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x4000000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$IPSET_CMD_SWAP(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x40, 0x6, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040}, 0x40880) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000100)=""/106, 0x6a) lseek(r6, 0x0, 0x0) getdents64(r6, &(0x7f0000000400)=""/255, 0xff) [ 2326.453130][ T8198] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2326.465519][ T8193] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=365815 [ 2326.473020][ T8203] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:47:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200087a08001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2326.509131][ T8193] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=365815 [ 2326.520625][ T8208] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1542 sclass=netlink_route_socket pid=8208 comm=syz-executor.5 [ 2326.530755][ T8211] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2326.538074][ T8193] FAULT_INJECTION: forcing a failure. [ 2326.538074][ T8193] name failslab, interval 1, probability 0, space 0, times 0 [ 2326.546123][ T8213] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2326.555582][ T8193] CPU: 0 PID: 8193 Comm: syz-executor.4 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2326.575316][ T8193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2326.586057][ T8193] Call Trace: [ 2326.589346][ T8193] dump_stack+0x14a/0x1ce [ 2326.593672][ T8193] ? devkmsg_release+0x11c/0x11c 07:47:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x2900, 0x0, &(0x7f00000001c0)) 07:47:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b05020008000a001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:47:50 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000500)={0x7, "df2ef8cfc8c570f6e884cec50a0879cccad21099cbddf63784269fb16d6dc1125790b3bc98afcc2279912fef3c823f6d7864c0df4d5bc7a5b4a001c61ff45400756ca3a36229b1f8eebf5f6be7eaa220f94cce1b0af0a53ff3537de93e0ef155a9b07abf35c0fb3f8aa0feaaccfa965221c71e1a1f4e9a1269a45eb946eeacda504daa8638d34cc9d58048997e2ee749e16692624c81927b46a2a6e0e362f5ff6be6ae9fd91452f2c4a78972958fd0c0143984e014e83ba045bb11bd7c6a6f648901364381dbdd4c6f9ec81044eb337d2a4dd76c9e65dafafe568b706de77a1d5c9df3a57fb9568c5cd2b35269fb27acc0e7630f0a104022d4b8cb5fcb6957656ac9f3f20db327099448c4c0b0af9fad214df4d2712d713da088580d48d90e115a2bb0895674383fcf835487326b5882914212665c54d871bdd781660b2aeecd4a8f99969687cf014f454d6d0f13fbe84a659675e6410d1dd417f42ad3a243f7b647abf81afc91653fa43a8218aad20aa10b788d1a020cfd95e9e7c46a632dbfdcd1a0a9aac2715d793368dd6f4272e5ca53cdb3dafdeb0b5524e38559fbc20fec5e8914e71b6c2c5c78fd72b29cbef5509db0369063918d6b9499dc2c9cf15213bb5ff1ea6c336ec11d252d2aea534125a2e122707ba64433dbe90e681f66d809d4e785f07206b82957c2232dcf562119f8d1de78c9fe030b0c668096cc7c72"}) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000100)=""/106, 0x6a) getresgid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000180)) lseek(r5, 0x0, 0x0) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x38, 0x2, 0x10, 0x0, 0x7, 0x0, 0x0, 0x3}, 0x0) ptrace$setregset(0x4205, r6, 0x202, &(0x7f0000000280)={&(0x7f00000001c0)="fb8439f0037f0953c518be8b4e623dc07d9428a27d238185ceeb9ae0315accd2b85c005132c988f18a7d3b78cff253b907628253a7266d0a584a3221d86a1c6d6de8d2c118dfec2cf9cb67e76c4a4558db7ba58ca999ae84d3a1dd2f586c97bd616fa6fc9c33ebd34944ad7eaf94cc4462814b24b33b3f247280d9a8ca80ce607f68e4496c019305fe860750eb5d874a6746ad928fcf1a41d6d5743713286b9fbe41b60718611748421ebe881694bba18357ad879e", 0xb5}) getdents64(r5, &(0x7f0000000400)=""/255, 0xff) [ 2326.594246][ T8216] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1542 sclass=netlink_route_socket pid=8216 comm=syz-executor.5 [ 2326.598607][ T8193] ? stack_trace_save+0x123/0x1f0 [ 2326.598618][ T8193] ? show_regs_print_info+0x12/0x12 [ 2326.598626][ T8193] ? stack_trace_snprint+0x150/0x150 [ 2326.598635][ T8193] should_fail+0x6fb/0x860 [ 2326.598649][ T8193] ? setup_fault_attr+0x3d0/0x3d0 [ 2326.637036][ T8193] ? __kasan_kmalloc+0x189/0x1c0 [ 2326.650961][ T8193] ? ebitmap_cmp+0x1c8/0x230 07:47:50 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000100)=""/106, 0x6a) mount(&(0x7f0000000040)=ANY=[@ANYBLOB='/dev/loo00\x00'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x100800, &(0x7f00000001c0)='cgroup2\x00') lseek(r2, 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100, 0xa2) getdents64(r2, &(0x7f0000000400)=""/255, 0xff) 07:47:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x2a00, 0x0, &(0x7f00000001c0)) [ 2326.655552][ T8193] ? mls_compute_context_len+0x81b/0x850 [ 2326.661183][ T8193] ? context_struct_to_string+0x3e4/0x820 [ 2326.666897][ T8193] should_failslab+0x5/0x20 [ 2326.671400][ T8193] __kmalloc+0x5f/0x2d0 [ 2326.675555][ T8193] context_struct_to_string+0x3e4/0x820 [ 2326.681101][ T8193] ? security_bounded_transition+0x560/0x560 [ 2326.687073][ T8193] context_add_hash+0x145/0x280 [ 2326.691911][ T8193] ? mls_context_isvalid+0x98/0x380 [ 2326.697102][ T8193] ? security_sid_to_context_inval+0x40/0x40 [ 2326.700722][ T8227] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2326.703072][ T8193] ? string_to_context_struct+0x486/0x640 [ 2326.703082][ T8193] security_context_to_sid_core+0x406/0x710 [ 2326.703091][ T8193] ? security_context_to_sid+0x50/0x50 [ 2326.703106][ T8193] ? vfs_getxattr_alloc+0x570/0x570 [ 2326.721465][ T8227] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2326.723885][ T8193] ? inode_doinit_use_xattr+0x58/0x3f0 [ 2326.723895][ T8193] security_context_to_sid_default+0x3a/0x50 [ 2326.723904][ T8193] inode_doinit_use_xattr+0x1c4/0x3f0 [ 2326.723912][ T8193] inode_doinit_with_dentry+0x8da/0x10e0 [ 2326.723921][ T8193] ? sb_finish_set_opts+0x7e0/0x7e0 [ 2326.723930][ T8193] selinux_inode_post_setxattr+0x1fc/0x4e0 [ 2326.723939][ T8193] ? selinux_inode_setxattr+0x1060/0x1060 [ 2326.723947][ T8193] ? __fsnotify_parent+0x310/0x310 [ 2326.723956][ T8193] security_inode_post_setxattr+0xbb/0x120 [ 2326.723965][ T8193] __vfs_setxattr_noperm+0x2fd/0x3e0 [ 2326.723972][ T8193] vfs_setxattr+0x11e/0x2d0 07:47:50 executing program 4 (fault-call:10 fault-nth:41): mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x0) 07:47:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x2b00, 0x0, &(0x7f00000001c0)) [ 2326.723979][ T8193] ? xattr_permission+0x350/0x350 [ 2326.723987][ T8193] ? __kmalloc+0xf7/0x2d0 [ 2326.723995][ T8193] ? __virt_addr_valid+0x1fd/0x290 [ 2326.724003][ T8193] setxattr+0x1e5/0x420 [ 2326.724010][ T8193] ? path_setxattr+0x240/0x240 [ 2326.724023][ T8193] ? getname_flags+0x20d/0x610 [ 2326.724029][ T8193] ? __sb_start_write+0xa5/0x150 [ 2326.724036][ T8193] path_setxattr+0x164/0x240 [ 2326.724043][ T8193] ? fput_many+0x42/0x1a0 [ 2326.724051][ T8193] ? simple_xattr_list_add+0xf0/0xf0 [ 2326.724067][ T8193] ? __ia32_sys_read+0x80/0x80 [ 2326.757910][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2326.758185][ T8193] __x64_sys_setxattr+0xb7/0xd0 [ 2326.770987][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2326.774340][ T8193] do_syscall_64+0xcb/0x150 [ 2326.774352][ T8193] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2326.774360][ T8193] RIP: 0033:0x45d239 [ 2326.774368][ T8193] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2326.774372][ T8193] RSP: 002b:00007f9391efac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 2326.774380][ T8193] RAX: ffffffffffffffda RBX: 0000000000031500 RCX: 000000000045d239 [ 2326.774385][ T8193] RDX: 0000000020000240 RSI: 0000000020000200 RDI: 0000000020000140 [ 2326.774389][ T8193] RBP: 00007f9391efaca0 R08: 0000000000000000 R09: 0000000000000000 [ 2326.774394][ T8193] R10: 000000000000002b R11: 0000000000000246 R12: 0000000000000028 [ 2326.774398][ T8193] R13: 00007fff189c822f R14: 00007f9391efb9c0 R15: 000000000118cf4c [ 2326.774535][ T641] usbhid 1-1:0.0: can't add hid device: -71 [ 2326.815820][ T8193] SELinux: inode_doinit_use_xattr: context_to_sid(system_u:object_r:semanage_trans_lock_t:s0) returned 12 for dev=overlay ino=365815 [ 2326.819143][ T641] usbhid: probe of 1-1:0.0 failed with error -71 [ 2326.992363][ T641] usb 1-1: USB disconnect, device number 41 [ 2327.026962][ T8242] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=365048 [ 2327.037393][ T8242] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=365048 [ 2327.373683][ T641] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 2327.733782][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2327.744772][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2327.754577][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2327.763677][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2327.772410][ T641] usb 1-1: config 0 descriptor?? [ 2328.123759][ T641] usbhid 1-1:0.0: can't add hid device: -71 [ 2328.129864][ T641] usbhid: probe of 1-1:0.0 failed with error -71 [ 2328.138405][ T641] usb 1-1: USB disconnect, device number 42 [ 2328.603699][ T641] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 2328.963762][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2328.974745][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2328.985215][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2328.994642][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2329.003295][ T641] usb 1-1: config 0 descriptor?? [ 2329.743715][ T641] usbhid 1-1:0.0: can't add hid device: -71 [ 2329.749719][ T641] usbhid: probe of 1-1:0.0 failed with error -71 [ 2329.758209][ T641] usb 1-1: USB disconnect, device number 43 [ 2330.453685][ T7947] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 2330.813759][ T7947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2330.824765][ T7947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2330.834553][ T7947] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2330.843564][ T7947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2330.852436][ T7947] usb 1-1: config 0 descriptor?? 07:47:54 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x1c) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000100)=""/84, 0x54) keyctl$assume_authority(0x10, 0x0) lseek(r2, 0x0, 0x0) getdents64(r2, &(0x7f0000000400)=""/255, 0xff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x5}, 0x821, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @loopback}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0xffffffd8) write$binfmt_elf64(r5, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x5, 0x1, 0x81, 0x80, 0x3, 0x3, 0x3, 0x306, 0x40, 0x33f, 0xfffffffd, 0x4000, 0x38, 0x1, 0x3f, 0x4e, 0x6}, [{0x3, 0x401, 0x6, 0x4, 0x9, 0x2, 0x45d00000, 0x433}, {0x60000001, 0x3, 0x3a, 0x6, 0x2, 0x9, 0x6}], "dc266ff227e37ef229366ca70cdcdb365adc6faa40eb9429e3c32fd6789b8a8303bce554e19a85dd0b7c1ea12581b8fbfdf1e0eee3023ed79a65e1bd664772418547573ff8c76cdf89a71cb7953366906e799a8496f6251b6a2b4158dd60f8927073e098f4", [[], [], [], [], [], [], [], []]}, 0x915) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x200000000011, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) flock(r3, 0x8) 07:47:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080029001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:47:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x2c00, 0x0, &(0x7f00000001c0)) 07:47:54 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x0) 07:47:54 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec351d9f42cfe4829e0"}}, 0x0) timer_gettime(0x0, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) 07:47:54 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) dup2(r3, r2) flistxattr(0xffffffffffffffff, &(0x7f0000000140)=""/101, 0x65) write$binfmt_aout(r2, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0xa16) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @loopback}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0xffffffd8) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r4, 0xf507, 0x0) 07:47:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x2d00, 0x0, &(0x7f00000001c0)) 07:47:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080040001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2331.032182][ T8269] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2331.047987][ T8269] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2331.066298][ T8260] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=365907 07:47:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x2e00, 0x0, &(0x7f00000001c0)) [ 2331.081723][ T8260] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=365907 [ 2331.085559][ T7947] usbhid 1-1:0.0: can't add hid device: -71 07:47:54 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x21, 0x0) 07:47:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b05020008a4cf001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:47:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x2f00, 0x0, &(0x7f00000001c0)) [ 2331.127243][ T7947] usbhid: probe of 1-1:0.0 failed with error -71 [ 2331.146639][ T7947] usb 1-1: USB disconnect, device number 44 [ 2331.200550][ T8297] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=365175 [ 2331.210575][ T8297] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=365175 [ 2331.220799][ T8297] SELinux: Context system_u:object_r:semanage_trans_ is not valid (left unmapped). [ 2331.234045][ T8297] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2331.248360][ T8297] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2331.503661][ T7947] usb 1-1: new high-speed USB device number 45 using dummy_hcd 07:47:55 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fspick(r3, &(0x7f0000000140)='./file0\x00', 0x0) times(&(0x7f0000000040)) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f00000000c0)=""/119, 0x77) lseek(r5, 0x0, 0x0) getdents64(r5, &(0x7f0000000400)=""/255, 0xff) 07:47:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080003001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:47:55 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2c, 0x0) 07:47:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3000, 0x0, &(0x7f00000001c0)) 07:47:55 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec351d9f42cfe4829e0"}}, 0x0) timer_gettime(0x0, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) [ 2331.830277][ T8307] __nla_validate_parse: 8 callbacks suppressed [ 2331.830283][ T8307] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2331.846308][ T8307] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2331.857430][ T8312] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2331.863818][ T7947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2331.868605][ T8312] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2331.900048][ T7947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2331.910053][ T8305] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=365214 [ 2331.923131][ T8305] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=365214 [ 2331.935461][ T7947] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2331.944946][ T7947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2331.956230][ T7947] usb 1-1: config 0 descriptor?? [ 2331.966336][ T8305] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2331.980592][ T8305] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2332.293702][ T7947] usbhid 1-1:0.0: can't add hid device: -71 [ 2332.299713][ T7947] usbhid: probe of 1-1:0.0 failed with error -71 [ 2332.308387][ T7947] usb 1-1: USB disconnect, device number 45 [ 2332.773704][ T7947] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 2333.133783][ T7947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2333.144731][ T7947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2333.155191][ T7947] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2333.165110][ T7947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2333.174686][ T7947] usb 1-1: config 0 descriptor?? [ 2333.913713][ T7947] usbhid 1-1:0.0: can't add hid device: -71 [ 2333.919765][ T7947] usbhid: probe of 1-1:0.0 failed with error -71 [ 2333.928182][ T7947] usb 1-1: USB disconnect, device number 46 [ 2334.623684][ T641] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 2334.983814][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2334.994842][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2335.004630][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2335.013732][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2335.022453][ T641] usb 1-1: config 0 descriptor?? 07:47:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080004001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:47:58 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000100)=""/106, 0x6a) lseek(r2, 0x0, 0x0) getdents64(r2, &(0x7f0000000400)=""/255, 0xff) 07:47:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3100, 0x0, &(0x7f00000001c0)) 07:47:58 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x1001, 0x0) 07:47:58 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec351d9f42cfe4829e0"}}, 0x0) timer_gettime(0x0, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) 07:47:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3700, 0x0, &(0x7f00000001c0)) [ 2335.192921][ T8342] netlink: 'syz-executor.2': attribute type 30 has an invalid length. [ 2335.207706][ T8342] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2335.221153][ T8340] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=365285 07:47:58 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000100)=""/106, 0x6a) lseek(r2, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x5c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x63f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10001}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfff7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x5) getdents64(r2, &(0x7f0000000400)=""/255, 0xff) 07:47:58 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = eventfd2(0x0, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000002540)=""/4108, 0x100c}], 0x1) r3 = socket(0x10, 0x80002, 0x0) io_setup(0x202, &(0x7f00000004c0)=0x0) io_submit(r4, 0x0, 0x0) io_submit(r4, 0x2, &(0x7f0000000300)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, r2}, 0x0]) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="120100000000004043556e00400000000001090224000100000000090400000103010000f2378d0921000000012205000905810300000000000dba6ec35e594d5940d8e6e6a616ff45e063d638433622436842787c55a67ec339d02aacede1968aa2bb8ac386bc6294cfaea222d8f866671f07eee881b9ac229b877dcb6cc27f37decc43f1ff0ec43b666e0613a7bd8fb7b56019d608452871b67ff3c5ebf9a6485a667b1791d0f87903875dc9b7684b0df9cdf5ce5df65cc185701311db04b4526ecbf9f2b12eb378cd74531f42605016b0"], 0x0) syz_usb_disconnect(r5) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000000c0)={0x0, 0x0, 0xf, 0x8, 0xffff, 0xffffffffffffffff, &(0x7f0000000380)}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x3, 0xffffffffffffffff, &(0x7f0000000240)="30523b965824489056c5d0a86d0fe95f9c110fdb4d3ea72d7f7252bde666572a4eb79d42511fc40c25ce8cd882110bde3e48eb0de072cb096376f500e901edaae8b22759cc43df3b07a2666c88a514301974eb6d70b812f24e3892d3418020b1110fc03ae2f253fd214486f3ede3820e96a66d36ef271d142baf3012bc558c5a7f814e011487c4751caa", 0x8a, 0x6, 0x0, 0x2, r1}]) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = dup2(r8, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400204) io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0xb97, 0xffffffffffffffff, &(0x7f00000001c0)="f2bbb8e5524d3f184ed32ccdcff5ed054b13a7f2a8368bd4d12d767d25395459c8de343edfd7d307986896510142f2416695bb56c40563064823c8010b4649693d2bb792721eb5c43a5f28abd4ec8f6d896b0b5c5af1", 0x56, 0x3, 0x0, 0x2}, &(0x7f0000000180)) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005030000050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) 07:47:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3800, 0x0, &(0x7f00000001c0)) 07:47:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b05020008000a001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:47:58 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2001, 0x0) [ 2335.235697][ T8350] netlink: 'syz-executor.2': attribute type 30 has an invalid length. [ 2335.253727][ T641] usbhid 1-1:0.0: can't add hid device: -71 [ 2335.259371][ T8340] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=365285 [ 2335.259927][ T641] usbhid: probe of 1-1:0.0 failed with error -71 [ 2335.280627][ T8350] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:47:58 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x402000, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x8) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0xc8000000000) r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, r3) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000180)='bic\x00', 0xffffffffffffff0d) shutdown(r4, 0x1) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x122) getdents64(0xffffffffffffffff, &(0x7f00000001c0)=""/122, 0x7a) lseek(r7, 0x0, 0x0) getdents64(r7, &(0x7f0000000400)=""/255, 0xff) 07:47:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3900, 0x0, &(0x7f00000001c0)) 07:47:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3b00, 0x0, &(0x7f00000001c0)) [ 2335.316058][ T641] usb 1-1: USB disconnect, device number 47 [ 2335.338297][ T8366] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2335.350922][ T8366] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:47:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3c00, 0x0, &(0x7f00000001c0)) 07:47:59 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r4, 0x8970, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x200000000011, r5, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r5) close(r1) r6 = dup(r0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f00000000c0)={0x20, 0xfffffffffffffffe, 0x7, {0x800, 0x4, 0x1}}, 0x20) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) [ 2335.412378][ T8373] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=366099 [ 2335.437532][ T8373] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=366099 [ 2335.467893][ T8373] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2335.482354][ T8373] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2335.773677][ T641] usb 1-1: new high-speed USB device number 48 using dummy_hcd 07:47:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080029001e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:47:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3d00, 0x0, &(0x7f00000001c0)) 07:47:59 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x1000000, 0x0) [ 2335.996587][ T8400] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2336.006602][ T8400] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2336.028788][ T8401] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=365392 [ 2336.040805][ T8401] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2336.055145][ T8401] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2336.133802][ T641] usb 1-1: config 0 has an invalid descriptor of length 242, skipping remainder of the config [ 2336.144457][ T641] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2336.158064][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2336.167492][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2336.176572][ T641] usb 1-1: config 0 descriptor?? [ 2336.214371][ T641] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2336.415123][ T7947] usb 1-1: USB disconnect, device number 48 [ 2336.883693][ T7947] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 2337.253760][ T7947] usb 1-1: config 0 has an invalid descriptor of length 242, skipping remainder of the config [ 2337.264244][ T7947] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2337.277180][ T7947] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2337.286262][ T7947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2337.295172][ T7947] usb 1-1: config 0 descriptor?? [ 2337.334392][ T7947] usbhid 1-1:0.0: couldn't find an input interrupt endpoint 07:48:02 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000cc0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x822800}, 0xc, &(0x7f0000000c80)={&(0x7f0000000800)={0x460, 0x3f4, 0x400, 0x70bd25, 0x25dfdbfe, {0x2, 0x2, 0x17, [0x4, 0x1ff, 0x5, 0x2, 0x93, 0xd7d8, 0x8000, 0xfffffffd, 0xff, 0xffffffff, 0x3, 0x2, 0x2, 0x3, 0x80000000, 0x2c, 0x8, 0x3f, 0xe9f9, 0x80000001, 0x6ea, 0x1f, 0x896, 0x7e4, 0x2, 0x1000, 0x8000, 0xf9, 0x5, 0x5, 0x0, 0x7fff, 0xff, 0x2, 0x7, 0x8ac, 0x0, 0x9, 0x3, 0x4, 0x6400000, 0x7, 0xfffffffc, 0x0, 0x7, 0x1, 0xff3, 0x9, 0x401, 0x5353, 0xd29, 0x1f0, 0x3ff, 0x3, 0xff, 0x7, 0xffff, 0x6, 0x1000, 0x400, 0x1, 0x2, 0x2, 0xc6], [0x0, 0x100, 0x5, 0x8, 0x97bff08, 0x20, 0x1000, 0x2ae406e8, 0x8, 0x1, 0x0, 0x6, 0x8, 0x3, 0xfffffbff, 0x10001, 0x9, 0x2, 0x6, 0x1, 0x2, 0x7, 0x2, 0x80000000, 0xff, 0xffff8001, 0xfffffffe, 0x1, 0x3ff80000, 0x0, 0x9, 0xfffeffff, 0x4, 0x31, 0x38, 0xaa09, 0x81, 0x7fff, 0xffffff52, 0x1, 0x4, 0x80, 0xf50b, 0x2, 0x0, 0x6, 0xffe00000, 0x8, 0x0, 0x8, 0x5, 0x0, 0x3, 0x80000001, 0x1000, 0x5, 0xffffffff, 0x0, 0x7, 0x3ff, 0xdc61, 0x8001, 0x5, 0x8001], [0x8, 0x7, 0x5, 0x6, 0x5, 0xffffffff, 0x4, 0x0, 0x30, 0x20, 0x2, 0x1, 0x200, 0x8, 0x8, 0x2, 0x91, 0xbd9f, 0x2, 0x6, 0x7, 0xd648cfbe, 0x400, 0x3acf, 0x3, 0x2e, 0x2, 0xffffff80, 0x1ff, 0x3, 0x101, 0x30, 0x80, 0x7fff, 0x3, 0x800, 0xdc, 0x8ad, 0x1, 0x1, 0x3437b41d, 0x4, 0x10000, 0x6, 0x8, 0xfffffc01, 0x9, 0xbc6, 0x0, 0xe4, 0x8c6, 0x4, 0x5, 0xffffffff, 0x7f, 0x41, 0x7ff, 0x4, 0x400, 0xffffffff, 0x37313de9, 0x200, 0x9], [0xaac5, 0x8, 0xb0c, 0x0, 0x5, 0x1, 0x6, 0x4f, 0x85, 0xff, 0xe2a8, 0x1, 0x1, 0x6, 0x8, 0xffff153e, 0x7fffffff, 0x5, 0x80000000, 0x40, 0xfff, 0x6, 0x953f, 0x100, 0x7fffffff, 0x1, 0x27f, 0x6, 0x20, 0xf76, 0xa, 0x101, 0x3, 0x3ef6, 0x7, 0x4, 0x3734760, 0x5, 0x6, 0x9, 0x1, 0x7497, 0x8000, 0x1, 0x7fffffff, 0x0, 0xfffffffe, 0xfffffbff, 0xb9e, 0x200, 0x1, 0xf3, 0x80000001, 0x9, 0x9, 0x10000, 0x9, 0x7f4, 0xfff, 0x2, 0x10001, 0x0, 0x80000001, 0x3], 0x3e, ['cgroup2\x00', 'cgroup2\x00', 'cgroup2\x00', 'cgroup2\x00', 'cgroup2\x00', '@(\x00', 'cgroup2\x00', '/&\x00', 'cgroup2\x00']}, [""]}, 0x460}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) getdents64(r2, &(0x7f0000000100)=""/106, 0x6a) lseek(r2, 0x0, 0x0) getdents64(r2, &(0x7f0000000400)=""/255, 0xff) recvmsg(r1, &(0x7f00000000c0)={&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000200)=""/158, 0x9e}, {&(0x7f0000000500)=""/236, 0xec}, {&(0x7f0000000600)=""/244, 0xf4}, {&(0x7f0000000700)=""/249, 0xf9}], 0x4, &(0x7f0000000300)=""/108, 0x6c}, 0x2000) 07:48:02 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec351d9f42cfe4829e0"}}, &(0x7f0000000080)) timer_gettime(0x0, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) 07:48:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e00, 0x0, &(0x7f00000001c0)) 07:48:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b0502000800cfa41e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:48:02 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2000026b, 0x0) 07:48:02 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) rt_sigqueueinfo(0x0, 0xf, &(0x7f0000000500)={0x34, 0x9, 0x3}) syz_usb_disconnect(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@empty, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000400)=0xe8) r5 = open(&(0x7f0000000480)='./file0\x00', 0x220000, 0x44) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f00000004c0)=0x10000, 0x4) sendmsg$inet6(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0xa, 0x4e23, 0x64, @private1, 0x2}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="a11d471ca18faea05537aca2ce4a14e9001b4edc6b1d3c7ec94c3313f6b736df6f4205e66c703f2ab6ae4651c10789d09794e8023bfc1c5a4a69e353c0529d863b68c83db94a372f24819f0e6d7134403d9e48b9f44ce9fcb13b614b604b0a6de8e66707320a743b5c24d7c66eacc34db38b25232ec67dc9629b26727ef9935759a40c9091aba616707d24c007c68790617aa5200faff30f942c9ef82f61b073621dea28ecc925b476a1a5b795147cffc8ede5580dd6dfd9cd32e87ab6db7f77c16632bf8a19618c9017bcc83e53958a", 0xd0}, {&(0x7f0000000200)="13b0fec3febcd476c6d0f05412f6df55c537b7e53ce1d74b5749c263f5c31091e1e67952de588e54aec14f3510b305077e06e83a988da2497ec8fd121c40437f34461fb1505e7a10a21fc72c70f3adef68a13960e8657256e94ced8db43e24c136f5cf68281f974b561925cfa64485694e1a2c10bfcf83664ca30bfe977258299a4568b1d083fc3bb2eb823398", 0x8d}], 0x2, &(0x7f0000000840)=[@rthdrdstopts={{0x28, 0x29, 0x37, {0x2f, 0x2, [], [@ra={0x5, 0x2, 0x1004}, @jumbo={0xc2, 0x4, 0x7f}, @jumbo={0xc2, 0x4, 0x2}]}}}, @hopopts={{0x18, 0x29, 0x36, {0x32}}}, @dstopts={{0xf0, 0x29, 0x37, {0x3a, 0x1a, [], [@ra={0x5, 0x2, 0xe03c}, @hao={0xc9, 0x10, @loopback}, @generic={0x40, 0xbd, "ff1918048ba5ab7683741186846870811dcbe0da40ba6c9fa18b8278241bb3476eda68acf88309602f54e01c363be9df2cee3b198d067467a4a35ac22ff12825857b100c8f69c7d9fac49c676517611135948284c726486a3663131bac2da2befa0c51282b2d8fdaded2a43a7208d09b7f19e8bc27004fb6cb623562a0c5858acf63a173464f69c94ef85782df22c0312419310f41482f1da152fc21119c15544e31f3bca2907cc44f98eddb0633dfb6a7f0e6ff5e10d4cdb96edc9fb4"}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @rthdrdstopts={{0x1038, 0x29, 0x37, {0x6c, 0x203, [], [@generic={0x0, 0x18, "8313cada4bc9120110244ff7218900"/24}, @generic={0x20, 0x1000, "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"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2, r4}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @hopopts={{0x48, 0x29, 0x36, {0x16, 0x5, [], [@ra={0x5, 0x2, 0x1}, @generic={0x12, 0x21, "2b922d4017ebab4dd66a7b19dc8381e95018f3a556feae52b0ee0c68e4be31e370"}, @enc_lim={0x4, 0x1, 0x3}, @pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0x36}}, @dstopts_2292={{0x48, 0x29, 0x4, {0x87, 0x5, [], [@jumbo={0xc2, 0x4, 0x100}, @calipso={0x7, 0x20, {0x1, 0x6, 0x0, 0xd5f, [0x20, 0xbcfa, 0x39]}}, @ra={0x5, 0x2, 0x1}]}}}], 0x1268}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000000)=r8) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000500000069618ad02eccaa8d9b9a47cd8283846a25"], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 2338.636466][ T641] usb 1-1: USB disconnect, device number 49 [ 2338.675018][ T8426] __nla_validate_parse: 2 callbacks suppressed 07:48:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f00, 0x0, &(0x7f00000001c0)) [ 2338.675023][ T8426] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2338.685476][ T8422] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=365436 [ 2338.695165][ T8426] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:48:02 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0xffffffc3, 0x0) 07:48:02 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x9931, 0x0, 0x58}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000100)=""/106, 0x6a) lseek(r2, 0x0, 0x0) socketpair(0x4, 0xa, 0x439a1c0f, &(0x7f0000000040)) getdents64(r2, &(0x7f0000000400)=""/255, 0xff) 07:48:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b0502000800080005004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:48:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x4000, 0x0, &(0x7f00000001c0)) [ 2338.731196][ T8438] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2338.742377][ T8438] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:48:02 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='hfsplus\x00', 0x1000008, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000100)=""/106, 0x6a) lseek(r2, 0x0, 0x0) getdents64(r2, &(0x7f0000000400)=""/255, 0xff) 07:48:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x4200, 0x0, &(0x7f00000001c0)) [ 2338.801129][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2338.807304][ T8448] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=365477 [ 2338.820743][ T8457] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2339.043686][ T641] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 2339.323749][ T641] usb 1-1: no configurations [ 2339.328373][ T641] usb 1-1: can't read configurations, error -22 07:48:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b0502000800080006004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:48:03 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0xffffffde, 0x0) 07:48:03 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec351d9f42cfe4829e0"}}, &(0x7f0000000080)) timer_gettime(0x0, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) 07:48:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x4300, 0x0, &(0x7f00000001c0)) [ 2339.477579][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2339.486945][ T641] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 2339.495576][ T8478] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2339.502599][ T8472] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=365530 [ 2339.783769][ T641] usb 1-1: no configurations [ 2339.788457][ T641] usb 1-1: can't read configurations, error -22 [ 2339.795591][ T641] usb usb1-port1: attempt power cycle [ 2340.503695][ T641] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 2340.633801][ T641] usb 1-1: no configurations [ 2340.638407][ T641] usb 1-1: can't read configurations, error -22 [ 2340.793696][ T641] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 2340.923769][ T641] usb 1-1: no configurations [ 2340.928367][ T641] usb 1-1: can't read configurations, error -22 [ 2340.935330][ T641] usb usb1-port1: unable to enumerate USB device 07:48:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b0502000800080007004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:48:05 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000100)=""/106, 0x6a) lseek(r2, 0x0, 0x0) getdents64(r2, &(0x7f0000000400)=""/255, 0xff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') recvmmsg(r3, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, r4, 0x1707, 0x0, 0x0, {0xe}}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xa8, r4, 0x20, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffeffff}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xbc8a}]}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5adddbdf}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4010}, 0x4c800) 07:48:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1000000, 0x0, &(0x7f00000001c0)) 07:48:05 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x2) 07:48:05 executing program 0: r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b4, 0x1, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x84, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x4000, 0x80, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000000040)) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005000000050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) 07:48:05 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec351d9f42cfe4829e0"}}, &(0x7f0000000080)) timer_gettime(0x0, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) 07:48:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x2000000, 0x0, &(0x7f00000001c0)) 07:48:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3000000, 0x0, &(0x7f00000001c0)) 07:48:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x4000000, 0x0, &(0x7f00000001c0)) [ 2341.695580][ T8496] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2341.729550][ T8493] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=366311 07:48:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x5000000, 0x0, &(0x7f00000001c0)) 07:48:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b0502000800080009004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2341.750170][ T8504] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2341.765323][ T8493] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=366311 07:48:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x6000000, 0x0, &(0x7f00000001c0)) 07:48:05 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x200000008) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = dup2(r4, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400201) ioctl$SIOCGETLINKNAME(r5, 0x89e0, &(0x7f00000000c0)={0x2, 0x2}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = dup2(r6, r3) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x1) getdents64(r7, &(0x7f0000000180)=""/119, 0x77) lseek(r2, 0x0, 0x0) getdents64(r2, &(0x7f0000000400)=""/255, 0xff) 07:48:05 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x3) 07:48:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008000b004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:48:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x7000000, 0x0, &(0x7f00000001c0)) [ 2341.797712][ T8493] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2341.814563][ T8493] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2341.926641][ T8536] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=366684 [ 2341.936754][ T8536] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=366684 [ 2341.949652][ T8536] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2341.964009][ T8536] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2342.133669][ T7947] usb 1-1: new low-speed USB device number 54 using dummy_hcd [ 2342.403693][ T7947] usb 1-1: device descriptor read/64, error 18 [ 2342.803696][ T7947] usb 1-1: device descriptor read/64, error 18 [ 2343.073703][ T7947] usb 1-1: new low-speed USB device number 55 using dummy_hcd [ 2343.343723][ T7947] usb 1-1: device descriptor read/64, error 18 [ 2343.733713][ T7947] usb 1-1: device descriptor read/64, error 18 [ 2343.853759][ T7947] usb usb1-port1: attempt power cycle [ 2344.563709][ T7947] usb 1-1: new low-speed USB device number 56 using dummy_hcd [ 2344.653736][ T7947] usb 1-1: Invalid ep0 maxpacket: 0 07:48:08 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000000004043556e0040000048e2a789382400010026bf00090400000103000500090581030000000000000000000000000000e56e0a73231dabcb147108ef9d5e1049e3249ecf974f176d5be4f3b7d35e011334539baf7a9fc0fdfb988b9a32d3f91994f9c4a5c69e31d8c29bfd63fd5a"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000380)=ANY=[], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$TIPC_NL_MON_PEER_GET(r4, 0xfffffffffffffffe, 0x48800) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xb802, 0x0) write$P9_RMKNOD(r5, &(0x7f0000000080)={0x14, 0x13, 0x1, {0x8}}, 0x14) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005000000050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) 07:48:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008000f004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:48:08 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x1, 0x1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) getdents64(r2, &(0x7f0000000100)=""/106, 0x6a) lseek(r2, 0x0, 0x0) getdents64(r2, &(0x7f0000000400)=""/255, 0xff) 07:48:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x8000000, 0x0, &(0x7f00000001c0)) 07:48:08 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x4) 07:48:08 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec351d9f42cfe4829e0"}}, &(0x7f0000000080)=0x0) timer_gettime(r5, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) 07:48:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x9000000, 0x0, &(0x7f00000001c0)) [ 2344.714579][ T8546] __nla_validate_parse: 3 callbacks suppressed [ 2344.714585][ T8546] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2344.734989][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:48:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b0502000800080012004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:48:08 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x11) getdents64(r2, &(0x7f0000000100)=""/106, 0x6a) lseek(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getdents64(r5, &(0x7f0000000180)=""/263, 0xfffffffffffffd34) syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', &(0x7f0000000300)='./file0\x00', 0x6, 0x3, &(0x7f0000000640)=[{&(0x7f00000003c0)="650151f20e753b5831c751549f9145ae546b69c5e1128f124190a5e5144fabcacf8e78535e9888b63ca8f8845011ffb0842037a362c36845883396dee0d21756763534eff87c7c7ab67f239569b578fd4dc18ad365d5874e13603e0e90b825b70c13629bf96bc31baec313b9bd94fc3871aef549c00edfdd3ce2dda6c00747a54983a4cdc624f44172454746596bf540718278a3", 0x94, 0x9}, {&(0x7f0000000480)="f23cb2c22491cee0705ad69961d6d0eb6af913f02eb1a15b6c36fbfb01c6d2ff42dc79d33ea00abb5ddd237e0ab07b04f91574a2b95099c232cb8935e0c8d205a8006a4febc3e132320db94207f1938473eb6a61fba3b494d5e12fc0c0c3acc6bdb4336c508dbc6cbe577d05aee45465308c1237c604f036117d1aab166fb339e07aefedfb6795d09ae28e953d10f544b3e0aba967507116d8938ae85830ad178b8cfe0901e928582c25d1b39fe17e772dad1d58829c6e006cb2cbd5eea5a386f0d19f6f50", 0xc5, 0x19}, {&(0x7f0000000580)="20e0ce114b24cf0094858b88dd471eb079cf1d4c3d047731e5e86754bcf086dc10e416009e4e5a0aa6c92445f453268f6627771a8de4fad14840ab9135ae73e5c18c5c2d3cc53075b27d812d146bab2b9c46d7f9fc1d0fe9a51e6c533b8d5771ad2a8df05a186c333243857a1091c64b5f383e0265f5bd5ef708f3cb69817001e9665fca1700d2dde6cc87ab9d", 0x8d, 0x6b}], 0x80, &(0x7f00000006c0)={[{@size={'size', 0x3d, [0x65, 0x25, 0x34, 0x6b, 0x6b, 0x36]}}, {@huge_never={'huge=never', 0x3d, 'cgroup2\x00'}}, {@mpol={'mpol', 0x3d, {'local', '=static', @void}}}, {@size={'size', 0x3d, [0x30]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x35, 0x78, 0x30, 0x36, 0x70, 0x70, 0x70]}}], [{@measure='measure'}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) chdir(&(0x7f0000000040)='./file0\x00') prctl$PR_MCE_KILL(0x21, 0x1, 0x0) [ 2344.765691][ T8547] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=366414 [ 2344.791428][ T8547] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 07:48:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0xa000000, 0x0, &(0x7f00000001c0)) 07:48:08 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x400000, 0x0) getdents64(r2, &(0x7f0000000100)=""/106, 0x6a) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x200000000011, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x200000000011, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x200000000011, r6, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r6) ppoll(&(0x7f0000000040)=[{}, {r4, 0x1100}, {r5, 0x646}, {r1, 0x10}, {r0, 0x9}], 0x5, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000180)={[0x80000000]}, 0x8) lseek(r2, 0x0, 0x0) getdents64(r2, &(0x7f0000000400)=""/255, 0xff) 07:48:08 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x5) [ 2344.812837][ T8547] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2344.821666][ T8565] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2344.845423][ T8569] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2344.935600][ T8580] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=366774 [ 2345.023700][ T7947] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 2345.153768][ T7947] usb 1-1: too many configurations: 167, using maximum allowed: 8 [ 2345.273784][ T7947] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2345.281401][ T7947] usb 1-1: can't read configurations, error -61 [ 2345.288498][ T7947] usb usb1-port1: unable to enumerate USB device 07:48:11 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b0502000800080015004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:48:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0xb000000, 0x0, &(0x7f00000001c0)) 07:48:11 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000100)=""/106, 0x6a) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000500)={0x85}, 0x8) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000540)=""/212) r3 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x8, 0x230142) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f00000000c0)=0x100000000) lseek(r2, 0x0, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x38, 0x0, 0x42, 0x0, 0x7}, 0x0) get_robust_list(r4, &(0x7f0000000300)=&(0x7f0000000280)={&(0x7f00000001c0)={&(0x7f0000000180)}, 0x0, &(0x7f0000000240)={&(0x7f0000000200)}}, &(0x7f0000000340)=0x18) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f00000003c0)) getdents64(r2, &(0x7f0000000400)=""/255, 0xff) 07:48:11 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x6) 07:48:11 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$uinput_user_dev(r4, &(0x7f00000000c0)={'syz1\x00', {0x5880, 0x3ff, 0xffe1}, 0x3a, [0x72a, 0x0, 0x20, 0x9, 0x9, 0x9, 0x4, 0x6, 0x9, 0x7f, 0x9, 0x0, 0x6, 0x8, 0xb7, 0x370, 0x3f, 0x400, 0xcd, 0x564, 0x1, 0x1000, 0x80, 0x1, 0x9, 0x0, 0xdcf, 0xee, 0xfffffff8, 0x9, 0x778, 0xb26a, 0x7fff, 0x7, 0xffff, 0x47f, 0x2, 0x5, 0x9, 0x30000, 0x2, 0x200, 0x7, 0x9, 0xfff, 0xbdb, 0x10000, 0x81, 0x8, 0x1800, 0x8, 0x9, 0x7, 0x908, 0x2, 0xfffffe00, 0x5, 0x8, 0x8000, 0x7, 0x9, 0x1, 0x2, 0x81], [0x7, 0xed54, 0x100, 0x2, 0x56, 0x2, 0x3, 0x5e6, 0xffff4e45, 0x7, 0x53, 0x4, 0x0, 0xf, 0x9, 0x2800, 0x1f9, 0x9, 0x10000, 0xd, 0xff, 0x7f, 0x5, 0x4, 0x0, 0x4, 0x80, 0xffff, 0xda3b, 0x3, 0xac, 0x9, 0x5, 0x2, 0x1f, 0x1, 0x77c2, 0x80000000, 0x40, 0x8, 0x4, 0x2, 0x80000000, 0xfffffffe, 0x3, 0x8001, 0xffff, 0x3, 0x7, 0x1f, 0xffffff7f, 0x4, 0x9, 0x7, 0xd3, 0xfffffffe, 0x4, 0x8, 0x0, 0x9, 0x81, 0x27, 0x80000001, 0xf622], [0x5, 0xfffffff9, 0x7fffffff, 0x3, 0x2, 0x65, 0x1e, 0xffffffff, 0xdf, 0xcd6, 0x3c, 0x8, 0x8, 0x2, 0x80000000, 0x9, 0x9, 0x6, 0x9, 0xfffffffe, 0x2, 0x10000, 0xb77, 0x3, 0xd17c, 0x80000001, 0xf3, 0x5, 0x9, 0x8, 0x9, 0xec7, 0x5, 0x10000, 0xba1, 0x5, 0x8, 0xffffff20, 0xfffffffe, 0x3, 0x3, 0x0, 0x1b, 0x7fffffff, 0x28, 0xfffffffd, 0x7, 0x7, 0xfb, 0x0, 0x1, 0x80000001, 0x74, 0x92, 0xa5c7, 0x5, 0x80000001, 0x1b, 0x9, 0xfffffff9, 0x827, 0x1, 0x1, 0xffffffc1], [0x7, 0x9762817, 0x7, 0x6, 0x4, 0x1, 0x7, 0x1, 0x7fffffff, 0x200, 0x0, 0x80000001, 0xfffff1c8, 0x10000, 0x6, 0x2, 0x8, 0xe5, 0x1, 0x7fff, 0x3, 0x8, 0x4, 0x7, 0xee5, 0x5, 0x8, 0xabb, 0x2, 0x7, 0x50, 0x4, 0x4, 0x3, 0x9, 0x101, 0x1, 0x0, 0x6, 0x100, 0x80000001, 0x1, 0x8, 0x200000, 0x5, 0x2, 0x5d, 0x2, 0x81, 0x4c, 0x6, 0x5, 0x10000, 0xf29a, 0x1, 0x1f, 0x9, 0x20, 0x8, 0x2, 0x7ff, 0x7, 0xffff, 0x2]}, 0x45c) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005000000050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) 07:48:11 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec351d9f42cfe4829e0"}}, &(0x7f0000000080)=0x0) timer_gettime(r5, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) 07:48:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0xc000000, 0x0, &(0x7f00000001c0)) 07:48:11 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000100)=""/106, 0x6a) lseek(r2, 0x0, 0x0) getdents64(r2, &(0x7f0000000400)=""/255, 0xff) socketpair(0x2c, 0x3, 0x8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_tcp_int(r3, 0x6, 0x1b, &(0x7f0000000200), &(0x7f0000000240)=0x4) [ 2347.729109][ T8587] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 2347.747181][ T8587] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:48:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0xd000000, 0x0, &(0x7f00000001c0)) 07:48:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0xe000000, 0x0, &(0x7f00000001c0)) [ 2347.779002][ T8604] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 2347.796230][ T8594] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=366817 [ 2347.799295][ T8604] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:48:11 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b0502000800080016004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:48:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0xf000000, 0x0, &(0x7f00000001c0)) [ 2347.839620][ T8594] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2347.867918][ T8594] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 07:48:11 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) r2 = getegid() r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r4) setregid(r2, r4) fchownat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', r1, r4, 0x400) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000100)=""/106, 0x6a) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x800, 0x0) lseek(r7, 0x0, 0x0) getdents64(r7, &(0x7f0000000180)=""/258, 0x102) 07:48:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x10000000, 0x0, &(0x7f00000001c0)) 07:48:11 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x7) 07:48:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x11000000, 0x0, &(0x7f00000001c0)) [ 2347.895607][ T8623] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2347.983139][ T8637] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=366878 [ 2347.998256][ T8637] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2348.013083][ T8637] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2348.203700][ T7947] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 2348.563762][ T7947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2348.575690][ T7947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2348.586282][ T7947] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2348.595719][ T7947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2348.604959][ T7947] usb 1-1: config 0 descriptor?? [ 2348.943806][ T7947] usbhid 1-1:0.0: can't add hid device: -71 [ 2348.949766][ T7947] usbhid: probe of 1-1:0.0 failed with error -71 [ 2348.958048][ T7947] usb 1-1: USB disconnect, device number 58 [ 2349.413673][ T7947] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 2349.773769][ T7947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2349.784692][ T7947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2349.795151][ T7947] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2349.804621][ T7947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2349.813307][ T7947] usb 1-1: config 0 descriptor?? [ 2350.523924][ T7947] usb 1-1: string descriptor 0 read error: -71 [ 2350.543837][ T7947] uclogic 0003:5543:006E.0562: failed retrieving string descriptor #200: -71 [ 2350.554097][ T7947] uclogic 0003:5543:006E.0562: failed retrieving pen parameters: -71 [ 2350.563506][ T7947] uclogic 0003:5543:006E.0562: failed probing pen v2 parameters: -71 [ 2350.574141][ T7947] uclogic 0003:5543:006E.0562: failed probing parameters: -71 [ 2350.582430][ T7947] uclogic: probe of 0003:5543:006E.0562 failed with error -71 [ 2350.593799][ T7947] usb 1-1: USB disconnect, device number 59 [ 2351.263702][ T7947] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 2351.623788][ T7947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2351.635833][ T7947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2351.646903][ T7947] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2351.656783][ T7947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2351.666471][ T7947] usb 1-1: config 0 descriptor?? 07:48:15 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) dup2(r3, r2) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000040)={0x1, 'ip6gretap0\x00', {}, 0x2b7}) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005000000050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) 07:48:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008001d004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:48:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x12000000, 0x0, &(0x7f00000001c0)) 07:48:15 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x48000, 0x0) getdents64(r2, &(0x7f0000000100)=""/106, 0x6a) lseek(r2, 0x0, 0x0) getdents64(r2, &(0x7f0000000400)=""/255, 0xff) 07:48:15 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x8) 07:48:15 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec351d9f42cfe4829e0"}}, &(0x7f0000000080)=0x0) timer_gettime(r5, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) 07:48:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x13000000, 0x0, &(0x7f00000001c0)) 07:48:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x14000000, 0x0, &(0x7f00000001c0)) 07:48:15 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) dup2(r4, r3) r5 = signalfd4(r4, &(0x7f0000000040)={[0x3]}, 0x8, 0x800) sendto$unix(r5, &(0x7f00000000c0)="aba3a38f5787516f5777ba4638d65a8f50b426bcb0630b790405b7219df04468c4296ab76887274d95c0cb488e17feed6ec23db6", 0x34, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) getdents64(r2, &(0x7f0000000100)=""/106, 0x6a) lseek(r2, 0x0, 0x0) getdents64(r2, &(0x7f0000000400)=""/255, 0xff) [ 2351.918184][ T8663] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 2351.940449][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:48:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008021e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2351.972424][ T8675] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 2351.975842][ T8665] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=366934 [ 2351.987769][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2352.003839][ T7947] usbhid 1-1:0.0: can't add hid device: -71 [ 2352.010057][ T7947] usbhid: probe of 1-1:0.0 failed with error -71 07:48:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x15000000, 0x0, &(0x7f00000001c0)) 07:48:15 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000100)=""/106, 0x6a) lseek(r2, 0x0, 0x0) getdents64(r2, &(0x7f0000000400)=""/255, 0xff) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000040)='{\'-!/:!B\xca(#.*\x00', &(0x7f00000000c0)='./file0\x00', r2) r3 = creat(&(0x7f0000000180)='./file0\x00', 0xac62d67adb6fa91f) accept4$unix(r3, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e, 0x80c00) [ 2352.022224][ T8665] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2352.029418][ T7947] usb 1-1: USB disconnect, device number 60 [ 2352.048024][ T8665] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2352.078715][ T8689] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2352.093576][ T8689] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2352.105016][ T8693] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2352.118352][ T8693] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2352.433713][ T7947] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 2352.793819][ T7947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2352.805574][ T7947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2352.815725][ T7947] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2352.825397][ T7947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2352.835892][ T7947] usb 1-1: config 0 descriptor?? [ 2353.183766][ T7947] usbhid 1-1:0.0: can't add hid device: -71 [ 2353.189915][ T7947] usbhid: probe of 1-1:0.0 failed with error -71 [ 2353.198621][ T7947] usb 1-1: USB disconnect, device number 61 [ 2353.673723][ T7947] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 2354.033875][ T7947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2354.045101][ T7947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2354.055886][ T7947] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2354.066185][ T7947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2354.075609][ T7947] usb 1-1: config 0 descriptor?? [ 2354.793884][ T7947] usb 1-1: string descriptor 0 read error: -71 [ 2354.813821][ T7947] uclogic 0003:5543:006E.0563: failed retrieving string descriptor #200: -71 [ 2354.824003][ T7947] uclogic 0003:5543:006E.0563: failed retrieving pen parameters: -71 [ 2354.832240][ T7947] uclogic 0003:5543:006E.0563: failed probing pen v2 parameters: -71 [ 2354.842730][ T7947] uclogic 0003:5543:006E.0563: failed probing parameters: -71 [ 2354.851602][ T7947] uclogic: probe of 0003:5543:006E.0563 failed with error -71 [ 2354.860934][ T7947] usb 1-1: USB disconnect, device number 62 [ 2355.523721][ T641] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 2355.893765][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2355.904743][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2355.914532][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2355.923570][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2355.932453][ T641] usb 1-1: config 0 descriptor?? 07:48:19 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005000000050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKROSET(r4, 0x125d, &(0x7f0000000040)=0x7) 07:48:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x19000000, 0x0, &(0x7f00000001c0)) 07:48:19 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x9) 07:48:19 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x9, 0x4, 0xb8, 0x5}}) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000100)=""/106, 0x6a) lseek(r5, 0x0, 0x0) getdents64(r5, &(0x7f0000000400)=""/255, 0xff) 07:48:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008031e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:48:19 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r2, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec351d9f42cfe4829e0"}}, &(0x7f0000000080)=0x0) timer_gettime(r4, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x23) splice(r0, 0x0, r1, 0x0, 0x47fe2, 0x0) 07:48:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1a000000, 0x0, &(0x7f00000001c0)) 07:48:19 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x200000000011, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) r4 = dup3(r2, r1, 0x80000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1101}) r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000100)=""/106, 0x6a) lseek(r5, 0x0, 0x0) getdents64(r5, &(0x7f0000000400)=""/255, 0xff) [ 2356.189891][ T8720] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2356.215173][ T8723] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=367021 [ 2356.226400][ T8720] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:48:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1c000000, 0x0, &(0x7f00000001c0)) [ 2356.247600][ T8723] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2356.257212][ T8734] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2356.273848][ T641] usbhid 1-1:0.0: can't add hid device: -71 [ 2356.280968][ T641] usbhid: probe of 1-1:0.0 failed with error -71 [ 2356.281525][ T8734] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:48:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d000000, 0x0, &(0x7f00000001c0)) 07:48:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008041e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:48:19 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0xa) [ 2356.289891][ T641] usb 1-1: USB disconnect, device number 63 [ 2356.304915][ T8723] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2356.411197][ T8751] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=367068 [ 2356.425326][ T8751] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2356.439750][ T8751] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2356.683668][ T641] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 2357.043736][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2357.054627][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2357.064392][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2357.073437][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2357.082213][ T641] usb 1-1: config 0 descriptor?? [ 2357.423775][ T641] usbhid 1-1:0.0: can't add hid device: -71 [ 2357.429733][ T641] usbhid: probe of 1-1:0.0 failed with error -71 [ 2357.437678][ T641] usb 1-1: USB disconnect, device number 64 [ 2357.903700][ T641] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 2358.263773][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2358.274656][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2358.285123][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2358.294566][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2358.303211][ T641] usb 1-1: config 0 descriptor?? [ 2359.023876][ T641] usb 1-1: string descriptor 0 read error: -71 [ 2359.043781][ T641] uclogic 0003:5543:006E.0564: failed retrieving string descriptor #200: -71 [ 2359.052582][ T641] uclogic 0003:5543:006E.0564: failed retrieving pen parameters: -71 [ 2359.062111][ T641] uclogic 0003:5543:006E.0564: failed probing pen v2 parameters: -71 [ 2359.071050][ T641] uclogic 0003:5543:006E.0564: failed probing parameters: -71 [ 2359.079451][ T641] uclogic: probe of 0003:5543:006E.0564 failed with error -71 [ 2359.088509][ T641] usb 1-1: USB disconnect, device number 65 [ 2359.753674][ T641] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 2360.113793][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2360.124848][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2360.134667][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2360.143771][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2360.152576][ T641] usb 1-1: config 0 descriptor?? 07:48:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008051e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:48:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1e000000, 0x0, &(0x7f00000001c0)) 07:48:24 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getrusage(0x0, &(0x7f0000000180)) r1 = dup(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x10a4, 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000100)=""/106, 0x6a) lseek(r5, 0x0, 0x0) getdents64(r5, &(0x7f0000000400)=""/255, 0xff) 07:48:24 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0xb) 07:48:24 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r2, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec351d9f42cfe4829e0"}}, &(0x7f0000000080)=0x0) timer_gettime(r4, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x23) splice(r0, 0x0, r1, 0x0, 0x47fe2, 0x0) 07:48:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1f000000, 0x0, &(0x7f00000001c0)) [ 2360.424902][ T8773] __nla_validate_parse: 2 callbacks suppressed [ 2360.424909][ T8773] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2360.464407][ T8773] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2360.483789][ T641] usbhid 1-1:0.0: can't add hid device: -71 [ 2360.490770][ T641] usbhid: probe of 1-1:0.0 failed with error -71 [ 2360.502019][ T8787] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2360.518103][ T8778] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=367174 [ 2360.527461][ T641] usb 1-1: USB disconnect, device number 66 07:48:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x22000000, 0x0, &(0x7f00000001c0)) [ 2360.538878][ T8787] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:48:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008061e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:48:24 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0xc) 07:48:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23000000, 0x0, &(0x7f00000001c0)) [ 2360.639669][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2360.661921][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2360.673946][ T8803] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=367988 07:48:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x24000000, 0x0, &(0x7f00000001c0)) 07:48:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008071e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2360.690056][ T8806] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2360.722427][ T8806] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:48:24 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0xd) 07:48:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x25000000, 0x0, &(0x7f00000001c0)) 07:48:24 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000100)=""/106, 0x6a) lseek(r2, 0x0, 0x0) getdents64(r2, &(0x7f0000000400)=""/255, 0xff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r4, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @remote}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7ccc, 0x1}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000002}, 0x1) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @loopback}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0xffffffd8) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f0000000200)={{0x2, 0x4e23, @multicast2}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10, {0x2, 0x4e21, @private=0xa010100}, 'veth0_to_bridge\x00'}) 07:48:24 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0xe) [ 2360.798293][ T8816] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2360.808599][ T8815] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=368012 [ 2360.820504][ T8816] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2360.917166][ T8824] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=368035 [ 2360.951242][ T8824] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2360.977845][ T8824] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 07:48:24 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r2, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec351d9f42cfe4829e0"}}, &(0x7f0000000080)=0x0) timer_gettime(r4, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x23) splice(r0, 0x0, r1, 0x0, 0x47fe2, 0x0) 07:48:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008081e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:48:24 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r2, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8805}, 0x41) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10004}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c885}, 0x404c040) syz_usb_disconnect(r0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = fsmount(r6, 0x1, 0x80) ioctl$TIOCL_SETVESABLANK(r7, 0x541c, &(0x7f0000000000)) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="8d8f9ccd0005025600"/20], 0x0, 0x0, 0x0, 0x0}, 0x0) 07:48:24 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x10) 07:48:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x26000000, 0x0, &(0x7f00000001c0)) 07:48:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008091e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:48:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x27000000, 0x0, &(0x7f00000001c0)) 07:48:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x28000000, 0x0, &(0x7f00000001c0)) 07:48:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b0502000800080a1e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2361.269718][ T8835] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=368063 [ 2361.286470][ T8835] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 07:48:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b0502000800080b1e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2361.307485][ T8835] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2361.503675][ T7947] usb 1-1: new high-speed USB device number 67 using dummy_hcd 07:48:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x29000000, 0x0, &(0x7f00000001c0)) 07:48:25 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x11) [ 2361.735788][ T8872] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=367343 [ 2361.750478][ T8872] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2361.765237][ T8872] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2361.883832][ T7947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2361.894788][ T7947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2361.904582][ T7947] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2361.913596][ T7947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2361.922624][ T7947] usb 1-1: config 0 descriptor?? 07:48:25 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec351d9f42cfe4829e0"}}, &(0x7f0000000080)=0x0) timer_gettime(r4, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) [ 2362.263728][ T7947] usbhid 1-1:0.0: can't add hid device: -71 [ 2362.269765][ T7947] usbhid: probe of 1-1:0.0 failed with error -71 [ 2362.278142][ T7947] usb 1-1: USB disconnect, device number 67 [ 2362.733696][ T7947] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 2363.093784][ T7947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2363.104677][ T7947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2363.115113][ T7947] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2363.124591][ T7947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2363.133322][ T7947] usb 1-1: config 0 descriptor?? [ 2363.873742][ T7947] usbhid 1-1:0.0: can't add hid device: -71 [ 2363.879782][ T7947] usbhid: probe of 1-1:0.0 failed with error -71 [ 2363.888395][ T7947] usb 1-1: USB disconnect, device number 68 [ 2364.583706][ T641] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 2364.943774][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2364.954710][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2364.964548][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2364.973604][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2364.982538][ T641] usb 1-1: config 0 descriptor?? 07:48:28 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) mknodat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x400, 0x8) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000400)={@remote, @multicast2, 0x0}, &(0x7f0000000440)=0xc) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="ada8d3dcd68f018a759f225e82cc951ca202db6342f4c9be86d549a33d405be55a3db3c5a0c992b63d277e66108a8bbc62a7412e7092d75ec3b5868d7909a380313a2861ee6782a297929467627352fcd56fe4dfbad4c7f0543f54e8bff8344da1daa6489baa08b190b614ccd94880936747116445171a81dc9cd92ee2b18935cad70d05bb9d055088f8316bb65a3f27f8a79da0321a943d0fe8355463400e3b14727910ffa3e2fa90b2989dd30e2247d145a744edf1a07e4583b51204dd895333a040b8927c0dd2ce9741cfcc712d2d91c0987c63fbced72e85a829fb33a9e1", @ANYBLOB="000427bd7000fcded22517000000440001801400020067656e65766531000000000004", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYBLOB="1400020076657468315f766c616e00000000000034000180080001", @ANYRES32=r2, @ANYBLOB="140002006970366772657461703000000000000014000200766574683100"/40], 0xb4}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000040) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000500)={'syztnl2\x00', r2, 0x7800, 0x8, 0x400, 0xffff, {{0x26, 0x4, 0x1, 0x2c, 0x98, 0x67, 0x0, 0xf, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x47, 0x3, [{0x0, 0xf, "eafd186e24a7e8a5e0a2892a53"}, {0x7, 0x2}, {0x7, 0x4, "a6a3"}, {0x5, 0x8, "c6652d823c97"}, {0x6, 0x8, "3d1c122233a8"}, {0x6, 0xa, "e95db14f94b5f9c7"}, {0x2, 0x12, "8321bb3d79e9c657019f70db48068ef7"}]}, @lsrr={0x83, 0xb, 0xe7, [@broadcast, @dev={0xac, 0x14, 0x14, 0xd}]}, @lsrr={0x83, 0x13, 0x8f, [@loopback, @loopback, @local, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xb7, 0x3, 0x7, [{@empty, 0x5}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0x8f, 0x3, 0x7, [{@rand_addr=0x64010100, 0x7}]}]}}}}}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @loopback}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0xffffffd8) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000280)={@multicast2, @multicast1, 0x0}, &(0x7f0000000300)=0xc) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)={0x60, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x48c7, 0x3}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xa65, 0x1}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x4}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x60}, 0x1, 0x0, 0x0, 0x200008c0}, 0x50) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r6 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000100)=""/106, 0x6a) lseek(r6, 0x0, 0x0) getdents64(r6, &(0x7f0000000400)=""/255, 0xff) 07:48:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b0502000800080c1e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:48:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x2a000000, 0x0, &(0x7f00000001c0)) 07:48:28 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x12) 07:48:28 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec351d9f42cfe4829e0"}}, &(0x7f0000000080)=0x0) timer_gettime(r4, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) 07:48:28 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0xffffffd8) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x200000000011, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) r4 = dup3(r1, r2, 0x0) ioctl$PPPIOCDISCONN(r4, 0x7439) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005000000050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) 07:48:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b0502000800080d1e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:48:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x2b000000, 0x0, &(0x7f00000001c0)) 07:48:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x2c000000, 0x0, &(0x7f00000001c0)) [ 2365.175270][ T8901] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=368187 [ 2365.195144][ T8901] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2365.209764][ T641] usbhid 1-1:0.0: can't add hid device: -71 [ 2365.216348][ T641] usbhid: probe of 1-1:0.0 failed with error -71 07:48:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x2d000000, 0x0, &(0x7f00000001c0)) 07:48:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b0502000800080e1e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:48:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x2e000000, 0x0, &(0x7f00000001c0)) [ 2365.227587][ T641] usb 1-1: USB disconnect, device number 69 [ 2365.237762][ T8901] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2365.603671][ T641] usb 1-1: new high-speed USB device number 70 using dummy_hcd 07:48:29 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x13) 07:48:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008101e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:48:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x2f000000, 0x0, &(0x7f00000001c0)) 07:48:29 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec351d9f42cfe4829e0"}}, &(0x7f0000000080)=0x0) timer_gettime(r4, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) 07:48:29 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000100)=""/106, 0x6a) lseek(r2, 0x0, 0x0) getdents64(r2, &(0x7f0000000400)=""/255, 0xff) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) fstat(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r5) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@local}}, &(0x7f0000000300)=0xe8) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) fstat(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r8) getresuid(&(0x7f0000000340), &(0x7f0000000380)=0x0, &(0x7f00000003c0)) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x2, &(0x7f0000000500)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@allow_other='allow_other'}], [{@permit_directio='permit_directio'}, {@appraise_type='appraise_type=imasig'}, {@dont_appraise='dont_appraise'}, {@subj_role={'subj_role', 0x3d, 'cgroup2\x00'}}, {@obj_role={'obj_role', 0x3d, 'cgroup2\x00'}}, {@uid_gt={'uid>', r6}}, {@fsname={'fsname', 0x3d, '##)(D)],@##)-'}}, {@euid_lt={'euid<', r8}}, {@euid_eq={'euid', 0x3d, r9}}]}}) [ 2365.963762][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2365.975828][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2365.977118][ T8946] __nla_validate_parse: 28 callbacks suppressed [ 2365.977125][ T8946] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2365.993570][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2366.002885][ T8946] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2366.018190][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2366.028251][ T8953] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2366.040015][ T8953] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2366.045634][ T641] usb 1-1: config 0 descriptor?? [ 2366.064228][ T8943] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=367521 [ 2366.083361][ T8943] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2366.097836][ T8943] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2366.413763][ T641] usbhid 1-1:0.0: can't add hid device: -71 [ 2366.419734][ T641] usbhid: probe of 1-1:0.0 failed with error -71 [ 2366.427723][ T641] usb 1-1: USB disconnect, device number 70 [ 2366.903695][ T641] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 2367.173702][ T641] usb 1-1: device descriptor read/64, error 18 [ 2367.563707][ T641] usb 1-1: device descriptor read/64, error 18 [ 2367.833712][ T641] usb 1-1: new high-speed USB device number 72 using dummy_hcd 07:48:31 executing program 5: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) setxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000180)=@v3={0x3000000, [{0x80, 0x7}, {0x1, 0x4}], 0xffffffffffffffff}, 0x18, 0x0) getdents64(r2, &(0x7f0000000100)=""/106, 0x6a) lseek(r2, 0x0, 0x0) getdents64(r2, &(0x7f0000000400)=""/255, 0xff) 07:48:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x30000000, 0x0, &(0x7f00000001c0)) 07:48:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008111e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:48:31 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x14) 07:48:31 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec351d9f42cfe4829e0"}}, &(0x7f0000000080)=0x0) timer_gettime(r5, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) [ 2368.103702][ T641] usb 1-1: device descriptor read/64, error 18 07:48:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x31000000, 0x0, &(0x7f00000001c0)) [ 2368.166300][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2368.179177][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:48:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x37000000, 0x0, &(0x7f00000001c0)) 07:48:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008121e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:48:31 executing program 5 (fault-call:5 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f00000001c0)) [ 2368.217711][ T8974] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=367574 [ 2368.240543][ T8974] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 07:48:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f00000001c0)) 07:48:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x38000000, 0x0, &(0x7f00000001c0)) 07:48:31 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x24) 07:48:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x300, 0x1d, 0x0, &(0x7f00000001c0)) [ 2368.277698][ T8991] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2368.279421][ T8974] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2368.308075][ T8991] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:48:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x39000000, 0x0, &(0x7f00000001c0)) 07:48:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x2, 0x0, &(0x7f00000001c0)) 07:48:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008251e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2368.349925][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2368.379141][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2368.431183][ T9008] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=368359 [ 2368.457644][ T9008] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2368.474600][ T9008] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 07:48:32 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec351d9f42cfe4829e0"}}, &(0x7f0000000080)=0x0) timer_gettime(r5, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) 07:48:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3b000000, 0x0, &(0x7f00000001c0)) 07:48:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3, 0x0, &(0x7f00000001c0)) 07:48:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008281e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:48:32 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x25) 07:48:32 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x20, r1, 0x200, 0x7, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r1, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYRESOCT], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002205000000", @ANYRES64], 0x0}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040d80402c04000000000010902240088ff74e27544668f0100000000090400000103010000092100000001220500090581030000000000560429b78818e73b3f516bc02947d4d42416dcbad38a83363d1794d28a89cd8477f1297441aac1d4147a291a430b62d56de38366416c74719336bd18"], 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x4d8, 0xc002, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r4) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x4d8, 0xc002, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r5) syz_usb_disconnect(r5) r6 = syz_usb_connect(0x5, 0x24, &(0x7f0000000400)=ANY=[], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYRES32=r6, @ANYRES32], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_INFO(r7, 0x0, 0x60, &(0x7f0000000100)={'filter\x00'}, &(0x7f0000000180)=0x44) 07:48:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008481e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:48:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x4, 0x0, &(0x7f00000001c0)) 07:48:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3c000000, 0x0, &(0x7f00000001c0)) 07:48:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b0502000800084c1e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:48:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3d000000, 0x0, &(0x7f00000001c0)) 07:48:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x5, 0x0, &(0x7f00000001c0)) [ 2369.008459][ T9031] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=368403 [ 2369.024645][ T9031] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2369.063079][ T9031] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2369.393677][ T641] usb 1-1: device descriptor read/64, error -71 [ 2369.513804][ T641] usb usb1-port1: attempt power cycle 07:48:33 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec351d9f42cfe4829e0"}}, &(0x7f0000000080)=0x0) timer_gettime(r5, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x47fe2, 0x0) 07:48:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e000000, 0x0, &(0x7f00000001c0)) 07:48:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x6, 0x0, &(0x7f00000001c0)) 07:48:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008601e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:48:33 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x2c) [ 2369.819677][ T9071] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=368467 [ 2370.223739][ T641] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 2370.433778][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2370.444711][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2370.455196][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2370.464689][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2370.474761][ T641] usb 1-1: config 0 descriptor?? [ 2370.716957][ T9033] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2370.725445][ T9033] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2370.933432][ T9033] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2371.142092][ T9033] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2371.551573][ T9033] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2371.853766][ T641] usbhid 1-1:0.0: can't add hid device: -71 [ 2371.860237][ T641] usbhid: probe of 1-1:0.0 failed with error -71 [ 2371.868808][ T641] usb 1-1: USB disconnect, device number 73 07:48:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x7, 0x0, &(0x7f00000001c0)) 07:48:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008681e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:48:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f000000, 0x0, &(0x7f00000001c0)) 07:48:36 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x30) 07:48:36 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r2, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec351d9f42cfe4829e0"}}, &(0x7f0000000080)=0x0) timer_gettime(r4, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r0, r3, 0x0, 0x23) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x47fe2, 0x0) 07:48:36 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005000000050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x8, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000005}, 0x4004000) 07:48:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x8, 0x0, &(0x7f00000001c0)) 07:48:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40000000, 0x0, &(0x7f00000001c0)) [ 2372.502741][ T9106] __nla_validate_parse: 14 callbacks suppressed [ 2372.502748][ T9106] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2372.535760][ T9106] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:48:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x42000000, 0x0, &(0x7f00000001c0)) [ 2372.542552][ T9107] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=368513 [ 2372.562176][ T9107] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2372.566056][ T9122] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2372.583775][ T9107] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 07:48:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x9, 0x0, &(0x7f00000001c0)) 07:48:36 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x48) 07:48:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b0502000800086c1e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2372.597672][ T9122] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:48:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x43000000, 0x0, &(0x7f00000001c0)) 07:48:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0xa, 0x0, &(0x7f00000001c0)) 07:48:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)) 07:48:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008741e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2372.647186][ T9133] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2372.657112][ T9133] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2372.718781][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2372.729559][ T9144] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=368887 [ 2372.732481][ T9149] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2372.773757][ T641] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 2373.143775][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2373.155340][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2373.165658][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2373.174992][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2373.184257][ T641] usb 1-1: config 0 descriptor?? 07:48:36 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r2, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec351d9f42cfe4829e0"}}, &(0x7f0000000080)=0x0) timer_gettime(r4, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r0, r3, 0x0, 0x23) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x47fe2, 0x0) [ 2373.513826][ T641] usbhid 1-1:0.0: can't add hid device: -71 [ 2373.520022][ T641] usbhid: probe of 1-1:0.0 failed with error -71 [ 2373.528736][ T641] usb 1-1: USB disconnect, device number 74 [ 2373.993775][ T641] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 2374.353816][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2374.365498][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2374.377509][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2374.387417][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2374.396751][ T641] usb 1-1: config 0 descriptor?? [ 2375.075080][ T9109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=9109 comm=syz-executor.0 [ 2375.113810][ T641] usb 1-1: string descriptor 0 read error: -71 [ 2375.133782][ T641] uclogic 0003:5543:006E.0565: failed retrieving string descriptor #200: -71 [ 2375.143090][ T641] uclogic 0003:5543:006E.0565: failed retrieving pen parameters: -71 [ 2375.151683][ T641] uclogic 0003:5543:006E.0565: failed probing pen v2 parameters: -71 [ 2375.160073][ T641] uclogic 0003:5543:006E.0565: failed probing parameters: -71 [ 2375.167949][ T641] uclogic: probe of 0003:5543:006E.0565 failed with error -71 [ 2375.176934][ T641] usb 1-1: USB disconnect, device number 75 [ 2375.863711][ T7947] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 2376.223861][ T7947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2376.235142][ T7947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2376.245851][ T7947] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2376.255246][ T7947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2376.265043][ T7947] usb 1-1: config 0 descriptor?? 07:48:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0xb, 0x0, &(0x7f00000001c0)) 07:48:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x2) 07:48:40 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x4c) 07:48:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b0502000800087a1e004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:48:40 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005000000050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') 07:48:40 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r2, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec351d9f42cfe4829e0"}}, &(0x7f0000000080)=0x0) timer_gettime(r4, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r0, r3, 0x0, 0x23) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x47fe2, 0x0) 07:48:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0xc, 0x0, &(0x7f00000001c0)) 07:48:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x3) 07:48:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b0502000800080004004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:48:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0xd, 0x0, &(0x7f00000001c0)) [ 2376.421240][ T9188] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2376.436450][ T9188] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2376.450099][ T9187] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=369678 07:48:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x4) 07:48:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b0502000800080005004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:48:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x5) [ 2376.480519][ T9187] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2376.514501][ T7947] usbhid 1-1:0.0: can't add hid device: -71 07:48:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x6) 07:48:40 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x60) 07:48:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0xe, 0x0, &(0x7f00000001c0)) [ 2376.526463][ T9187] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2376.541093][ T7947] usbhid: probe of 1-1:0.0 failed with error -71 [ 2376.555603][ T7947] usb 1-1: USB disconnect, device number 76 [ 2376.577568][ T9228] sock: process `syz-executor.5' is using obsolete getsockopt SO_BSDCOMPAT [ 2376.623197][ T9233] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=369035 [ 2376.638901][ T9233] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2376.653754][ T9233] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2376.923704][ T7947] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 2377.313919][ T7947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2377.325544][ T7947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2377.336432][ T7947] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2377.346072][ T7947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2377.355317][ T7947] usb 1-1: config 0 descriptor?? [ 2377.693774][ T7947] usbhid 1-1:0.0: can't add hid device: -71 [ 2377.700262][ T7947] usbhid: probe of 1-1:0.0 failed with error -71 [ 2377.708755][ T7947] usb 1-1: USB disconnect, device number 77 [ 2378.173779][ T7947] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 2378.533788][ T7947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2378.544999][ T7947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2378.555896][ T7947] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2378.565681][ T7947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2378.575135][ T7947] usb 1-1: config 0 descriptor?? [ 2379.293851][ T7947] usb 1-1: string descriptor 0 read error: -71 [ 2379.313824][ T7947] uclogic 0003:5543:006E.0566: failed retrieving string descriptor #200: -71 [ 2379.323142][ T7947] uclogic 0003:5543:006E.0566: failed retrieving pen parameters: -71 [ 2379.333023][ T7947] uclogic 0003:5543:006E.0566: failed probing pen v2 parameters: -71 [ 2379.342181][ T7947] uclogic 0003:5543:006E.0566: failed probing parameters: -71 [ 2379.350905][ T7947] uclogic: probe of 0003:5543:006E.0566 failed with error -71 [ 2379.360322][ T7947] usb 1-1: USB disconnect, device number 78 [ 2380.023741][ T641] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 2380.383885][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2380.395931][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2380.405936][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2380.415107][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2380.424153][ T641] usb 1-1: config 0 descriptor?? 07:48:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x7) 07:48:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b0502000800080006004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:48:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0xf, 0x0, &(0x7f00000001c0)) 07:48:44 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x68) 07:48:44 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x3, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="85288772c8af5f14d453c620484ad2c586bf55fabae16701799a7b4ca065186b1394116147e3e6c345b44499a2909bdea12024bed32f2da5845f276f77141dba5de4c0b565e7ed899cfa99e7c41c733ded0bc19ec5a602954362226343bcc0ff35e8033cf5c5b1066fec02a6003e349ab63cdb5b6971d82a4128b87be78d68eaaacdcf906b1c6ee99f21a11eab8c0bd55c37edb10ad82d852c01d40f2311ca53d8be6c95e4"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) dup2(r3, r2) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'netpci0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="4700000001000000040a0000200000001b4848ccff03000000010000"]}) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005000000050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) 07:48:44 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec351d9f42cfe4829e0"}}, &(0x7f0000000080)=0x0) timer_gettime(r5, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x47fe2, 0x0) 07:48:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x8) 07:48:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x10, 0x0, &(0x7f00000001c0)) 07:48:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b0502000800080007004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2380.684035][ T9258] __nla_validate_parse: 5 callbacks suppressed [ 2380.684041][ T9258] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2380.714774][ T9266] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2380.721815][ T9260] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=369856 07:48:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x9) 07:48:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x11, 0x0, &(0x7f00000001c0)) [ 2380.749567][ T9275] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2380.769805][ T9279] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2380.770247][ T9275] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 07:48:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0xa) 07:48:44 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x6c) 07:48:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x12, 0x0, &(0x7f00000001c0)) [ 2380.785791][ T9284] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2380.806648][ T641] usbhid 1-1:0.0: can't add hid device: -71 [ 2380.818290][ T641] usbhid: probe of 1-1:0.0 failed with error -71 07:48:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b0502000800080008004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:48:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0xb) [ 2380.840593][ T641] usb 1-1: USB disconnect, device number 79 [ 2380.852755][ T9293] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2380.924149][ T9305] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=369158 [ 2380.937898][ T9305] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2380.953182][ T9305] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2381.203705][ T641] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 2381.563800][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2381.574765][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2381.584547][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2381.593583][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2381.602495][ T641] usb 1-1: config 0 descriptor?? [ 2381.943760][ T641] usbhid 1-1:0.0: can't add hid device: -71 [ 2381.949706][ T641] usbhid: probe of 1-1:0.0 failed with error -71 [ 2381.957523][ T641] usb 1-1: USB disconnect, device number 80 [ 2382.413738][ T641] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 2382.773815][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2382.784710][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2382.794526][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2382.803555][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2382.814405][ T641] usb 1-1: config 0 descriptor?? [ 2383.533872][ T641] usb 1-1: string descriptor 0 read error: -71 [ 2383.553732][ T641] uclogic 0003:5543:006E.0567: failed retrieving string descriptor #200: -71 [ 2383.562535][ T641] uclogic 0003:5543:006E.0567: failed retrieving pen parameters: -71 [ 2383.574135][ T641] uclogic 0003:5543:006E.0567: failed probing pen v2 parameters: -71 [ 2383.582238][ T641] uclogic 0003:5543:006E.0567: failed probing parameters: -71 [ 2383.591251][ T641] uclogic: probe of 0003:5543:006E.0567 failed with error -71 [ 2383.600445][ T641] usb 1-1: USB disconnect, device number 81 [ 2384.263712][ T641] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 2384.623789][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2384.634671][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2384.645247][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2384.654698][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2384.663386][ T641] usb 1-1: config 0 descriptor?? 07:48:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0xc) 07:48:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x13, 0x0, &(0x7f00000001c0)) 07:48:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b0502000800080009004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:48:48 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x74) 07:48:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000320000012bbd7000fcdbdf2500000000100001000c0004000800010069707400cdf62d36d8fcea093de301ed3ec58af32f684c594d638f0655c85394ebe942dcfb68740552fb72faa693d31338c2de23f9cee98006e4b49c01c33e4872feba1daa0659a7928e18937ac30d3a9d2357c7b38a8d55dd1b904f7ade9fd730373d2fd28816bb91d87f14f48bbabb2c8debd6cbe67750ea72fbafb748c5827216e4943f78bb2b"], 0x24}, 0x1, 0x0, 0x0, 0x44850}, 0x40400c0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_ROPEN(r2, &(0x7f0000000040)={0x18, 0x71, 0x2, {{0x10, 0x4, 0x4}, 0x3}}, 0x18) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005000000050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) 07:48:48 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec351d9f42cfe4829e0"}}, &(0x7f0000000080)=0x0) timer_gettime(r5, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x47fe2, 0x0) 07:48:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008000b004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:48:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x14, 0x0, &(0x7f00000001c0)) [ 2384.924283][ T9338] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2384.935408][ T9343] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2384.941678][ T9334] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=369963 [ 2384.957033][ T9339] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=625 sclass=netlink_route_socket pid=9339 comm=syz-executor.0 07:48:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0xd) [ 2384.972922][ T9351] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2384.991364][ T9352] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2384.994154][ T641] usbhid 1-1:0.0: can't add hid device: -71 07:48:48 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x7a) 07:48:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x15, 0x0, &(0x7f00000001c0)) 07:48:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0xe) 07:48:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008000f004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2385.015612][ T9352] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2385.015676][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2385.046922][ T641] usbhid: probe of 1-1:0.0 failed with error -71 [ 2385.055613][ T641] usb 1-1: USB disconnect, device number 82 07:48:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0xf) 07:48:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x19, 0x0, &(0x7f00000001c0)) 07:48:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x10) [ 2385.112104][ T9369] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=369995 [ 2385.123691][ T9374] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2385.403692][ T641] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 2385.763812][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2385.774741][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2385.784535][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2385.793735][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2385.802534][ T641] usb 1-1: config 0 descriptor?? [ 2386.153774][ T641] usbhid 1-1:0.0: can't add hid device: -71 [ 2386.159834][ T641] usbhid: probe of 1-1:0.0 failed with error -71 [ 2386.167404][ T641] usb 1-1: USB disconnect, device number 83 [ 2386.643717][ T641] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 2387.003760][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2387.014707][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2387.024478][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2387.033503][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2387.042394][ T641] usb 1-1: config 0 descriptor?? [ 2387.783817][ T641] usb 1-1: string descriptor 0 read error: -71 [ 2387.803739][ T641] uclogic 0003:5543:006E.0568: failed retrieving string descriptor #200: -71 [ 2387.812581][ T641] uclogic 0003:5543:006E.0568: failed retrieving pen parameters: -71 [ 2387.820754][ T641] uclogic 0003:5543:006E.0568: failed probing pen v2 parameters: -71 [ 2387.828885][ T641] uclogic 0003:5543:006E.0568: failed probing parameters: -71 [ 2387.836420][ T641] uclogic: probe of 0003:5543:006E.0568 failed with error -71 [ 2387.845305][ T641] usb 1-1: USB disconnect, device number 84 [ 2388.226317][ T9339] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=625 sclass=netlink_route_socket pid=9339 comm=syz-executor.0 [ 2388.493740][ T7947] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 2388.853786][ T7947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2388.864901][ T7947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2388.875327][ T7947] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2388.884781][ T7947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2388.893513][ T7947] usb 1-1: config 0 descriptor?? 07:48:52 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) ioprio_get$pid(0x0, r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005000000050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) 07:48:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b0502000800080012004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:48:52 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0xc0) 07:48:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x11) 07:48:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1a, 0x0, &(0x7f00000001c0)) 07:48:52 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec351d9f42cfe4829e0"}}, &(0x7f0000000080)=0x0) timer_gettime(r5, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x47fe2, 0x0) 07:48:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x12) 07:48:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) [ 2389.160428][ T9418] __nla_validate_parse: 1 callbacks suppressed [ 2389.160434][ T9418] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2389.165536][ T9413] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=369428 [ 2389.173599][ T9423] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:48:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b0502000800080015004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:48:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1e, 0x0, &(0x7f00000001c0)) [ 2389.208319][ T9424] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2389.223813][ T7947] usbhid 1-1:0.0: can't add hid device: -71 [ 2389.228994][ T9424] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2389.239541][ T7947] usbhid: probe of 1-1:0.0 failed with error -71 [ 2389.247770][ T9434] netlink: 'syz-executor.2': attribute type 21 has an invalid length. 07:48:52 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0xe0) 07:48:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x22, 0x0, &(0x7f00000001c0)) [ 2389.264968][ T9434] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2389.267834][ T7947] usb 1-1: USB disconnect, device number 85 [ 2389.287428][ T9439] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 2389.300852][ T9439] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2389.359658][ T9447] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=370130 [ 2389.373295][ T9447] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2389.387678][ T9447] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2389.633692][ T7947] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 2389.993880][ T7947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2390.004813][ T7947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2390.015198][ T7947] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2390.024722][ T7947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2390.033419][ T7947] usb 1-1: config 0 descriptor?? [ 2390.373789][ T7947] usbhid 1-1:0.0: can't add hid device: -71 [ 2390.380240][ T7947] usbhid: probe of 1-1:0.0 failed with error -71 [ 2390.389530][ T7947] usb 1-1: USB disconnect, device number 86 [ 2390.853722][ T7947] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 2391.213780][ T7947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2391.224715][ T7947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2391.235389][ T7947] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2391.244897][ T7947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2391.253592][ T7947] usb 1-1: config 0 descriptor?? [ 2391.973806][ T7947] usb 1-1: string descriptor 0 read error: -71 [ 2391.993753][ T7947] uclogic 0003:5543:006E.0569: failed retrieving string descriptor #200: -71 [ 2392.002580][ T7947] uclogic 0003:5543:006E.0569: failed retrieving pen parameters: -71 [ 2392.010721][ T7947] uclogic 0003:5543:006E.0569: failed probing pen v2 parameters: -71 [ 2392.018884][ T7947] uclogic 0003:5543:006E.0569: failed probing parameters: -71 [ 2392.026443][ T7947] uclogic: probe of 0003:5543:006E.0569 failed with error -71 [ 2392.035244][ T7947] usb 1-1: USB disconnect, device number 87 [ 2392.703739][ T7947] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 2393.063804][ T7947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2393.074679][ T7947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2393.084502][ T7947] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2393.093554][ T7947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2393.102428][ T7947] usb 1-1: config 0 descriptor?? 07:48:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b0502000800080016004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:48:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x13) 07:48:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) 07:48:56 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x204) 07:48:56 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x200000000011, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x200000000011, r5, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r4, @ANYBLOB="81656fa57d9e95452b20b95c62388384c4c394f8b2afaab9cba2da6557be8421eb5ceccae6acbec2c73bf7e2a24e4e188c7cf2ef6f2896bed6416d8f73ab295391b53000e110ebb96bdc29c7f7154260f093363e71f3e574c9d01df8c8b494f6fb6169b115d7f43126bd7cc61fe22eb233facf2037406ea05c0dfdc8e2ea8427f93c5b870dec79e07c9021d2212d95737a09d4f86944cadd59c58ed45bbfed1551237af93505e4f505bb09c9961f1fc54beb91daaa28cda5504088c369dddb29be2ee508cd10c838cf3c9816136d7b3e63e7400acaa636da7e813f9c5bb775b409ebbe639ad3c75c1df82adaade8945a068694cdb40c0e938255f4"], 0x0, 0x0, 0x0, 0x0}, 0x0) 07:48:56 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec351d9f42cfe4829e0"}}, &(0x7f0000000080)=0x0) timer_gettime(r5, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 07:48:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x24, 0x0, &(0x7f00000001c0)) 07:48:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x14) 07:48:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008001d004000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:48:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x25, 0x0, &(0x7f00000001c0)) [ 2393.261081][ T9473] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2393.289715][ T9471] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=370233 07:48:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x15) [ 2393.323291][ T9471] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2393.323736][ T7947] usbhid 1-1:0.0: can't add hid device: -71 [ 2393.343143][ T9471] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2393.365092][ T7947] usbhid: probe of 1-1:0.0 failed with error -71 07:48:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x26, 0x0, &(0x7f00000001c0)) 07:48:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x19) 07:48:57 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x300) 07:48:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x27, 0x0, &(0x7f00000001c0)) [ 2393.373914][ T9496] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 2393.392968][ T7947] usb 1-1: USB disconnect, device number 88 [ 2393.400375][ T9496] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:48:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x1a) [ 2393.434210][ T9508] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 2393.450146][ T9508] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2393.484717][ T9516] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=370264 [ 2393.753679][ T7947] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 2394.123765][ T7947] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2394.132767][ T7947] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2394.142475][ T7947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2394.151693][ T7947] usb 1-1: config 0 descriptor?? [ 2394.395554][ T641] usb 1-1: USB disconnect, device number 89 [ 2394.863698][ T641] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 2395.223780][ T641] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2395.232746][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2395.241826][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2395.250710][ T641] usb 1-1: config 0 descriptor?? 07:49:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008001e000300ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:49:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x28, 0x0, &(0x7f00000001c0)) 07:49:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x1c) 07:49:00 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x402) 07:49:00 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec351d9f42cfe4829e0"}}, &(0x7f0000000080)=0x0) timer_gettime(r5, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 07:49:00 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getpeername$unix(r6, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e) r7 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x400041, 0x0) ioctl$TIOCMSET(r8, 0x5418, &(0x7f0000000180)) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000100)={'hsr0\x00', 0x9}) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005000000050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x2000, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r9, 0x0, 0x483, &(0x7f00000000c0)={0x3b, @remote, 0x4e22, 0x2, 'wlc\x00', 0x28, 0x2, 0x6a}, 0x2c) 07:49:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x29, 0x0, &(0x7f00000001c0)) [ 2396.850325][ T641] usb 1-1: USB disconnect, device number 90 [ 2396.882505][ T9544] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:49:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x1d) [ 2396.902455][ T9540] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=370307 [ 2396.925774][ T9540] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2396.925960][ T9553] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:49:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x2a, 0x0, &(0x7f00000001c0)) 07:49:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008001e000500ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:49:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x1e) [ 2396.946800][ T9540] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2396.986522][ T9564] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:49:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x2b, 0x0, &(0x7f00000001c0)) 07:49:00 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x406) 07:49:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008001e000600ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:49:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x22) 07:49:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x23) [ 2397.001393][ T9566] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2397.052765][ T9576] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2397.076322][ T9579] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2397.111702][ T9582] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=370780 [ 2397.127650][ T9582] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2397.141969][ T9582] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2397.263710][ T641] usb 1-1: new high-speed USB device number 91 using dummy_hcd 07:49:01 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='projid_map\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') timer_create(0x2, &(0x7f0000000000)={0x0, 0x38, 0x4, @thr={&(0x7f00000002c0)="76f8ada114a0019f661c6e6e116f199068d0471f8ff715243387b842499e56a990b44fa612d946b10e9c4324e5eb09e4e996d37ea9308fdac236cc62c68a5935be53fee50d4840dd352f4704babb2ff70b99be424932f3e57e1c503a9c6f814207ab2df4cda91d44ba534d94d3a3755845a071f7ad5291cba1cc11d6726346ae2c4b0e2e6ae6a062dc2a4669c64d6f7965c766", &(0x7f0000000380)="bbb8943e3bebec5484534357f437ab39df702ef8c32f5d3bd9a43c2324c0f742fd36b710f299b283582bdc15fa63d163c16a4992b436d127597d175ab9cf34993f0c049f88c22281a179b4067732dea0272ad816ba65b86885960dc58c49df8c5fdeb38a4ea1a85f81f480f3e835dc648853a1091caa5dbabcb18a84efdc7283854ec351d9f42cfe4829e0"}}, &(0x7f0000000080)=0x0) timer_gettime(r5, &(0x7f0000000140)) syz_open_dev$ptys(0xc, 0x3, 0x0) sendfile(r1, r4, 0x0, 0x23) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) [ 2397.623770][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2397.634773][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2397.645249][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2397.654701][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2397.663460][ T641] usb 1-1: config 0 descriptor?? [ 2398.003762][ T641] usbhid 1-1:0.0: can't add hid device: -71 [ 2398.009768][ T641] usbhid: probe of 1-1:0.0 failed with error -71 [ 2398.017261][ T641] usb 1-1: USB disconnect, device number 91 [ 2398.483700][ T641] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 2398.843816][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2398.854735][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2398.865272][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2398.874811][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2398.884829][ T641] usb 1-1: config 0 descriptor?? [ 2399.593770][ T641] usb 1-1: string descriptor 0 read error: -71 [ 2399.613862][ T641] uclogic 0003:5543:006E.056A: failed retrieving string descriptor #200: -71 [ 2399.622683][ T641] uclogic 0003:5543:006E.056A: failed retrieving pen parameters: -71 [ 2399.632254][ T641] uclogic 0003:5543:006E.056A: failed probing pen v2 parameters: -71 [ 2399.641139][ T641] uclogic 0003:5543:006E.056A: failed probing parameters: -71 [ 2399.649655][ T641] uclogic: probe of 0003:5543:006E.056A failed with error -71 [ 2399.659008][ T641] usb 1-1: USB disconnect, device number 92 [ 2400.333685][T32251] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 2400.693806][T32251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2400.705022][T32251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2400.714857][T32251] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2400.724043][T32251] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2400.732773][T32251] usb 1-1: config 0 descriptor?? 07:49:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x24) 07:49:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x2c, 0x0, &(0x7f00000001c0)) 07:49:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008001e000700ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:49:04 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x408) 07:49:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) 07:49:04 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x810, 0x2, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005000000050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) 07:49:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) 07:49:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x2d, 0x0, &(0x7f00000001c0)) 07:49:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x25) 07:49:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008001e000900ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:49:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) [ 2400.890762][ T9614] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2400.926352][ T9616] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=370881 [ 2400.958936][ T9616] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2400.973796][T32251] usbhid 1-1:0.0: can't add hid device: -71 [ 2400.978646][ T9636] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2400.980418][T32251] usbhid: probe of 1-1:0.0 failed with error -71 07:49:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x26) 07:49:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) 07:49:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x2e, 0x0, &(0x7f00000001c0)) 07:49:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) 07:49:04 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x480) 07:49:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008001e000a00ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2400.999629][ T9616] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2401.023554][ T9641] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2401.048214][T32251] usb 1-1: USB disconnect, device number 93 [ 2401.080014][ T9651] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2401.130328][ T9656] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=370969 [ 2401.146048][ T9656] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2401.160319][ T9656] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2401.433692][T32251] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 2401.935422][ T9618] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2401.993832][T32251] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2402.053765][T32251] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 2402.061353][T32251] usb 1-1: can't read configurations, error -71 [ 2402.953740][T32251] usb 1-1: new high-speed USB device number 95 using dummy_hcd 07:49:06 executing program 0: chdir(&(0x7f0000000040)='./file0\x00') r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x4d8, 0xc002, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000400000000b5"], 0x0, 0x0, 0x0, 0x0}, 0x0) 07:49:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x2f, 0x0, &(0x7f00000001c0)) 07:49:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x27) 07:49:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) 07:49:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008001e000b00ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:49:06 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x500) [ 2403.254176][ T9660] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 07:49:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x28) 07:49:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) 07:49:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x30, 0x0, &(0x7f00000001c0)) [ 2403.294726][ T9673] __nla_validate_parse: 1 callbacks suppressed [ 2403.294732][ T9673] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2403.313832][T32251] usb 1-1: unable to get BOS descriptor or descriptor too short 07:49:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) 07:49:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x29) [ 2403.345935][ T9684] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2403.355783][ T9666] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=371011 [ 2403.379169][ T9666] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 07:49:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) [ 2403.395575][T32251] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 2403.410416][T32251] usb 1-1: can't read configurations, error -71 [ 2403.418568][T32251] usb usb1-port1: attempt power cycle [ 2403.423823][ T9666] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2404.133739][T32251] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 2404.343808][T32251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2404.354832][T32251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2404.365403][T32251] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2404.374943][T32251] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2404.384836][T32251] usb 1-1: config 0 descriptor?? [ 2404.624304][ T9675] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2404.832226][ T9675] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2405.123757][T32251] usbhid 1-1:0.0: can't add hid device: -71 [ 2405.129730][T32251] usbhid: probe of 1-1:0.0 failed with error -71 [ 2405.138234][T32251] usb 1-1: USB disconnect, device number 96 [ 2405.547157][ T9704] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2405.555713][ T9706] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2405.813706][ T641] usb 1-1: new high-speed USB device number 97 using dummy_hcd 07:49:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008001e024000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:49:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x31, 0x0, &(0x7f00000001c0)) 07:49:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x2a) 07:49:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, 0xffffffffffffffff, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) 07:49:09 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x600) 07:49:09 executing program 0: syz_usb_disconnect(0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) dup2(r4, r3) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r6, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = dup2(r7, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat$cgroup_int(r8, &(0x7f0000000200)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r9 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYRESDEC=r1, @ANYRES32=r5], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005000000050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000c0601010000000000000000020000070900020073797a3100000000228868ffd38be05b28715bb1d3baff5cfcc6a534ed3b4632e3a96c5e64f89684000eeb46df27e5315a6e66cf13e2c77332efcd3e018f11d970cd938814e6774c814aeed5924a712751ffb71d95f1164caa0ef27037af32319be0c49a5ad9"], 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x60000) 07:49:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, 0xffffffffffffffff, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) 07:49:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x2b) 07:49:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x37, 0x0, &(0x7f00000001c0)) [ 2405.936356][ T9716] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2405.964114][ T9726] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:49:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, 0xffffffffffffffff, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) 07:49:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008001e034000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:49:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x2c) 07:49:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x38, 0x0, &(0x7f00000001c0)) [ 2405.989055][ T9718] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=371084 [ 2406.012012][ T9737] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:49:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) 07:49:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x2d) 07:49:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008001e044000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2406.036970][ T9745] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2406.041160][ T9718] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 07:49:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) [ 2406.087195][ T9718] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2406.108863][ T9753] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2406.713747][ T641] usb 1-1: device descriptor read/all, error -61 [ 2406.863774][ T641] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 2407.133707][ T641] usb 1-1: device descriptor read/64, error 18 [ 2407.523689][ T641] usb 1-1: device descriptor read/64, error 18 [ 2407.643817][ T641] usb usb1-port1: attempt power cycle [ 2408.353714][ T641] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 2408.523836][ T641] usb 1-1: device descriptor read/8, error -61 [ 2408.793773][ T641] usb 1-1: device descriptor read/8, error -61 07:49:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x39, 0x0, &(0x7f00000001c0)) 07:49:12 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x604) 07:49:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x2e) 07:49:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008001e054000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:49:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) 07:49:12 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pipe(&(0x7f0000000300)={0xffffffffffffffff}) mknodat(r5, &(0x7f0000000340)='./file0\x00', 0x400, 0x8) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000400)={@remote, @multicast2, 0x0}, &(0x7f0000000440)=0xc) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="ada8d3dcd68f018a759f225e82cc951ca202db6342f4c9be86d549a33d405be55a3db3c5a0c992b63d277e66108a8bbc62a7412e7092d75ec3b5868d7909a380313a2861ee6782a297929467627352fcd56fe4dfbad4c7f0543f54e8bff8344da1daa6489baa08b190b614ccd94880936747116445171a81dc9cd92ee2b18935cad70d05bb9d055088f8316bb65a3f27f8a79da0321a943d0fe8355463400e3b14727910ffa3e2fa90b2989dd30e2247d145a744edf1a07e4583b51204dd895333a040b8927c0dd2ce9741cfcc712d2d91c0987c63fbced72e85a829fb33a9e1", @ANYBLOB="000427bd7000fcdbdf2517000000440001801400020067656e65766531000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYBLOB="1400020076657468315f766c616e00000000000034000180080001", @ANYRES32=r6, @ANYBLOB="140002006970366772657461703000000000000014000200766574683100"/40], 0xb4}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000040) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', r6, 0x2f, 0x9, 0x20, 0x1f, 0x20, @ipv4={[], [], @empty}, @private2={0xfc, 0x2, [], 0x1}, 0x1, 0x20}}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 07:49:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3b, 0x0, &(0x7f00000001c0)) 07:49:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x2f) 07:49:12 executing program 3: setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r0, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, &(0x7f00000001c0)) [ 2408.983298][ T9773] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2409.009790][ T9769] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=371719 07:49:12 executing program 3: setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r0, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, &(0x7f00000001c0)) 07:49:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x30) 07:49:12 executing program 3: setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r0, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, &(0x7f00000001c0)) 07:49:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008001e064000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:49:12 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x700) 07:49:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3c, 0x0, &(0x7f00000001c0)) [ 2409.028933][ T9769] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2409.049792][ T9769] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2409.052639][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:49:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x31) 07:49:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) [ 2409.107667][ T9799] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2409.142704][ T9804] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2409.193508][ T9811] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=371247 [ 2409.207588][ T9811] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2409.221849][ T9811] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2409.283720][ T641] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 2409.493834][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2409.504833][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2409.514635][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2409.523699][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2409.532465][ T641] usb 1-1: config 0 descriptor?? [ 2409.873752][ T641] usbhid 1-1:0.0: can't add hid device: -71 [ 2409.879777][ T641] usbhid: probe of 1-1:0.0 failed with error -71 [ 2409.888212][ T641] usb 1-1: USB disconnect, device number 100 [ 2410.353681][ T641] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 2410.713788][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2410.724695][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2410.735185][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2410.744602][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2410.753351][ T641] usb 1-1: config 0 descriptor?? 07:49:16 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005000000050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCSIG(r4, 0x40045436, 0xe) 07:49:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3d, 0x0, &(0x7f00000001c0)) 07:49:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x37) 07:49:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) 07:49:16 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008001e074000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:49:16 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x804) 07:49:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, 0x0, &(0x7f00000001c0)) 07:49:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x38) [ 2412.507832][ T9829] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2412.520319][ T9836] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2412.545780][ T641] usbhid 1-1:0.0: can't add hid device: -71 [ 2412.551947][ T641] usbhid: probe of 1-1:0.0 failed with error -71 07:49:16 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008001e084000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:49:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) 07:49:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x42, 0x0, &(0x7f00000001c0)) [ 2412.558612][ T9830] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=371323 [ 2412.581051][ T641] usb 1-1: USB disconnect, device number 101 07:49:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x39) [ 2412.601343][ T9850] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2412.602921][ T9830] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2412.623586][ T9855] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2412.626475][ T9830] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2412.963727][ T641] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 2413.323801][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2413.334716][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2413.345159][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2413.354636][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2413.363312][ T641] usb 1-1: config 0 descriptor?? [ 2413.703741][ T641] usbhid 1-1:0.0: can't add hid device: -71 [ 2413.709737][ T641] usbhid: probe of 1-1:0.0 failed with error -71 [ 2413.718130][ T641] usb 1-1: USB disconnect, device number 102 [ 2414.183705][ T641] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 2414.544327][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2414.555823][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2414.566323][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2414.575920][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2414.585022][ T641] usb 1-1: config 0 descriptor?? [ 2415.303893][ T641] usb 1-1: string descriptor 0 read error: -71 [ 2415.323747][ T641] uclogic 0003:5543:006E.056B: failed retrieving string descriptor #200: -71 [ 2415.332551][ T641] uclogic 0003:5543:006E.056B: failed retrieving pen parameters: -71 [ 2415.342218][ T641] uclogic 0003:5543:006E.056B: failed probing pen v2 parameters: -71 [ 2415.351219][ T641] uclogic 0003:5543:006E.056B: failed probing parameters: -71 [ 2415.359618][ T641] uclogic: probe of 0003:5543:006E.056B failed with error -71 [ 2415.368739][ T641] usb 1-1: USB disconnect, device number 103 [ 2416.033689][ T641] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 2416.393795][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2416.404714][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2416.414507][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2416.423529][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2416.432401][ T641] usb 1-1: config 0 descriptor?? 07:49:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) 07:49:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x43, 0x0, &(0x7f00000001c0)) 07:49:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008001e094000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:49:20 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x900) 07:49:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x3b) 07:49:20 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005000000050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) dup2(r3, r2) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @loopback}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0xffffffd8) r5 = dup3(r2, r4, 0x80000) ioctl$HIDIOCAPPLICATION(r5, 0x4802, 0xff) 07:49:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) 07:49:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x3c) 07:49:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f00000001c0)) [ 2416.689519][ T9882] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2416.715955][ T9885] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=371887 07:49:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008001e0a4000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:49:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) [ 2416.736433][ T9885] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2416.753942][ T641] usbhid 1-1:0.0: can't add hid device: -71 [ 2416.759914][ T641] usbhid: probe of 1-1:0.0 failed with error -71 [ 2416.775887][ T641] usb 1-1: USB disconnect, device number 104 07:49:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x3d) 07:49:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f00000001c0)=0x2) 07:49:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) 07:49:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f00000001c0)=0x3) 07:49:20 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0xa00) 07:49:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x3e) [ 2416.791633][ T9885] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2416.808763][ T9909] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2416.828582][ T9915] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2416.921684][ T9930] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=371932 [ 2416.935224][ T9930] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2416.949480][ T9930] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2417.173723][ T641] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 2417.533784][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2417.545260][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2417.556361][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2417.565615][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2417.574410][ T641] usb 1-1: config 0 descriptor?? [ 2417.913745][ T641] usbhid 1-1:0.0: can't add hid device: -71 [ 2417.919703][ T641] usbhid: probe of 1-1:0.0 failed with error -71 [ 2417.927985][ T641] usb 1-1: USB disconnect, device number 105 [ 2418.383790][ T641] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 2418.743803][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2418.754699][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2418.765157][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2418.774652][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2418.783378][ T641] usb 1-1: config 0 descriptor?? [ 2419.503915][ T641] usb 1-1: string descriptor 0 read error: -71 [ 2419.523753][ T641] uclogic 0003:5543:006E.056C: failed retrieving string descriptor #200: -71 [ 2419.532537][ T641] uclogic 0003:5543:006E.056C: failed retrieving pen parameters: -71 [ 2419.542097][ T641] uclogic 0003:5543:006E.056C: failed probing pen v2 parameters: -71 [ 2419.551072][ T641] uclogic 0003:5543:006E.056C: failed probing parameters: -71 [ 2419.559565][ T641] uclogic: probe of 0003:5543:006E.056C failed with error -71 [ 2419.568582][ T641] usb 1-1: USB disconnect, device number 106 [ 2420.243715][ T641] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 2420.603780][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2420.614793][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2420.625294][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2420.634827][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2420.645682][ T641] usb 1-1: config 0 descriptor?? 07:49:24 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000000004043556e00400448000103010000092100000001220500090581030000000000"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005000000050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) 07:49:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008001e0b4000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:49:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f00000001c0)=0x4) 07:49:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x42) 07:49:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) 07:49:24 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0xb00) 07:49:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x43) 07:49:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) 07:49:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f00000001c0)=0x300) [ 2420.798951][ T9953] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2420.836394][ T9959] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=371976 07:49:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f00000001c0)=0x4000) 07:49:24 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0xc00) 07:49:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x300) [ 2420.849070][ T9965] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2420.863842][ T641] usbhid 1-1:0.0: can't add hid device: -71 [ 2420.871109][ T641] usbhid: probe of 1-1:0.0 failed with error -71 [ 2420.887620][ T641] usb 1-1: USB disconnect, device number 107 [ 2420.948242][ T9982] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=372016 [ 2420.960481][ T9982] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2420.975188][ T9982] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2421.273722][ T641] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 2421.673781][ T641] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2421.681514][ T641] usb 1-1: can't read configurations, error -61 [ 2421.833719][ T641] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 2422.233784][ T641] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2422.241475][ T641] usb 1-1: can't read configurations, error -61 [ 2422.247874][ T641] usb usb1-port1: attempt power cycle [ 2422.953723][ T641] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 2423.203772][ T641] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2423.211610][ T641] usb 1-1: can't read configurations, error -61 [ 2423.363732][ T641] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 2423.613771][ T641] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2423.621478][ T641] usb 1-1: can't read configurations, error -61 [ 2423.628521][ T641] usb usb1-port1: unable to enumerate USB device 07:49:27 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000040)='/dev/hidraw#\x00', 0x20, 0xa00) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005000000050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) 07:49:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) 07:49:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x500) 07:49:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008001e0c4000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:49:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f00000001c0)=0x1000000) 07:49:27 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0xd00) 07:49:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) 07:49:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x600) [ 2423.810768][ T9994] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2423.837499][ T9993] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=372047 07:49:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) 07:49:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f00000001c0)=0x2000000) 07:49:27 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0xe00) 07:49:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008001e0d4000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2423.860954][T10001] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2423.945853][T10014] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=372780 [ 2423.956319][T10017] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2423.966965][T10019] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2423.972684][T10022] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2423.981459][T10019] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2424.273768][ T641] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 2424.633791][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2424.644755][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2424.654523][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2424.663534][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2424.672473][ T641] usb 1-1: config 0 descriptor?? [ 2425.013781][ T641] usbhid 1-1:0.0: can't add hid device: -71 [ 2425.019758][ T641] usbhid: probe of 1-1:0.0 failed with error -71 [ 2425.027462][ T641] usb 1-1: USB disconnect, device number 112 [ 2425.503722][ T641] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 2425.863784][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2425.874693][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2425.884478][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2425.893521][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2425.902441][ T641] usb 1-1: config 0 descriptor?? [ 2426.633764][ T641] usb 1-1: string descriptor 0 read error: -71 [ 2426.653760][ T641] uclogic 0003:5543:006E.056D: failed retrieving string descriptor #200: -71 [ 2426.662597][ T641] uclogic 0003:5543:006E.056D: failed retrieving pen parameters: -71 [ 2426.672479][ T641] uclogic 0003:5543:006E.056D: failed probing pen v2 parameters: -71 [ 2426.681463][ T641] uclogic 0003:5543:006E.056D: failed probing parameters: -71 [ 2426.689774][ T641] uclogic: probe of 0003:5543:006E.056D failed with error -71 [ 2426.698855][ T641] usb 1-1: USB disconnect, device number 113 [ 2427.343747][ T641] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 2427.703794][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2427.714689][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2427.725144][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2427.734584][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2427.744947][ T641] usb 1-1: config 0 descriptor?? 07:49:31 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x200000000011, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000040)={0x7, 0x2, 0x5a000000, 0xfffff650, 0x10001}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005000000050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) clock_getres(0x0, &(0x7f00000000c0)) 07:49:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x700) 07:49:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f00000001c0)=0x3000000) 07:49:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) 07:49:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008001e0e4000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:49:31 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x1100) 07:49:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f00000001c0)=0x4000000) 07:49:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) 07:49:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x900) 07:49:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f00000001c0)=0x40000000) [ 2428.015069][T10047] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:49:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) 07:49:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) [ 2428.059591][T10059] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2428.067784][T10050] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=372899 [ 2428.084447][ T641] usbhid 1-1:0.0: can't add hid device: -71 [ 2428.090677][ T641] usbhid: probe of 1-1:0.0 failed with error -71 [ 2428.096597][T10050] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2428.109038][ T641] usb 1-1: USB disconnect, device number 114 [ 2428.132239][T10050] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2428.473720][ T641] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 2428.833773][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2428.844704][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2428.854483][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2428.863500][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2428.872400][ T641] usb 1-1: config 0 descriptor?? [ 2429.115982][T10051] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2429.413765][ T641] usbhid 1-1:0.0: can't add hid device: -71 [ 2429.420042][ T641] usbhid: probe of 1-1:0.0 failed with error -71 [ 2429.428173][ T641] usb 1-1: USB disconnect, device number 115 [ 2430.113723][ T641] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 2430.473908][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2430.484792][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2430.495243][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2430.504666][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2430.513421][ T641] usb 1-1: config 0 descriptor?? [ 2430.755471][T10082] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 07:49:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000040)=0x9) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000)=0x8001, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f00000001c0)) 07:49:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008001e104000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:49:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0xa00) 07:49:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) 07:49:34 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x1200) 07:49:34 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@private1, @in=@private}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in6=@empty}}, &(0x7f0000000040)=0xfffffca2) syz_usb_disconnect(r0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) mknodat(r5, &(0x7f0000000340)='./file0\x00', 0x400, 0x8) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000400)={@remote, @multicast2, 0x0}, &(0x7f0000000440)=0xc) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="ada8d3dcd68f018a759f225e82cc951ca202db6342f4c9be86d549a33d405be55a3db3c5a0c992b63d277e66108a8bbc62a7412e7092d75ec3b5868d7909a380313a2861ee6782a297929467627352fcd56fe4dfbad4c7f0543f54e8bff8344da1daa6489baa08b190b614ccd94880936747116445171a81dc9cd92ee2b18935cad70d05bb9d055088f8316bb65a3f27f8a79da0321a943d0fe8355463400e3b14727910ffa3e2fa90b2989dd30e2247d145a744edf1a07e4583b51204dd895333a040b8927c0dd2ce9741cfcc712d2d91c0987c63fbced72e85a829fb33a9e1", @ANYBLOB="000427bd7000fcdbdf2517000000440001801400020067656e65766531000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYBLOB="1400020076657468315f766c616e00000000000034000180080001", @ANYRES32=r6, @ANYBLOB="140002006970366772657461703000000000000014000200766574683100"/40], 0xb4}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000040) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f00000000c0)={@rand_addr=' \x01\x00', r6}, 0x14) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005849f00050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) 07:49:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) 07:49:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0xb00) [ 2431.002162][T10089] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2431.025927][T10099] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:49:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, 0x0, 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) 07:49:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = dup(0xffffffffffffffff) ioctl$CHAR_RAW_SECDISCARD(r2, 0x127d, &(0x7f0000000000)) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f00000001c0)) 07:49:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008001e114000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:49:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0xc00) [ 2431.048706][T10093] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=373015 [ 2431.053764][ T641] usbhid 1-1:0.0: can't add hid device: -71 [ 2431.073603][T10093] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2431.080751][ T641] usbhid: probe of 1-1:0.0 failed with error -71 07:49:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='devices.list\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f00000001c0)) 07:49:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, 0x0, 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) 07:49:34 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x1300) 07:49:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0xd00) [ 2431.120193][T10117] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2431.125207][ T641] usb 1-1: USB disconnect, device number 116 [ 2431.135907][T10093] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2431.150917][T10121] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:49:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @loopback}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0xffffffd8) write$binfmt_elf32(r4, &(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES32=r4, @ANYRESHEX=r2], 0xffffffffffffff9c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f00000001c0)) [ 2431.235027][T10134] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=373081 [ 2431.248376][T10134] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2431.263289][T10134] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2431.493684][ T641] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 2431.853827][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2431.864806][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2431.875328][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2431.884847][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2431.893541][ T641] usb 1-1: config 0 descriptor?? [ 2432.243774][ T641] usbhid 1-1:0.0: can't add hid device: -71 [ 2432.249735][ T641] usbhid: probe of 1-1:0.0 failed with error -71 [ 2432.257672][ T641] usb 1-1: USB disconnect, device number 117 [ 2432.713701][ T641] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 2433.073789][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2433.084831][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2433.095438][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2433.104891][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2433.113529][ T641] usb 1-1: config 0 descriptor?? 07:49:38 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005000000050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) 07:49:38 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008001e124000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:49:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, 0x0, 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) 07:49:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0xe00) 07:49:38 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x1400) 07:49:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) dup2(r2, r1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) dup2(r4, r3) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r4, 0x4, 0x1, 0x7b3f, 0x2}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1800014, 0x10012, r5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x7, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f00000001c0)) 07:49:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) [ 2434.852607][T10155] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2434.864136][T10157] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=10157 comm=syz-executor.5 [ 2434.878808][T10156] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=372284 [ 2434.888945][T10161] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:49:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0xf00) 07:49:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) [ 2434.894896][T10163] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=10163 comm=syz-executor.5 [ 2434.899741][ T641] usbhid 1-1:0.0: can't add hid device: -71 07:49:38 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008001e254000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:49:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) [ 2434.944673][T10172] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2434.951172][ T641] usbhid: probe of 1-1:0.0 failed with error -71 [ 2434.962082][T10172] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 07:49:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000300)={0xffffffffffffffff, 0x3, 0x1ff, 0x3, 0x4}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) dup2(r6, r5) r7 = dup(r6) getsockopt$inet6_tcp_buf(r7, 0x6, 0xe, &(0x7f0000000200)=""/213, &(0x7f0000000000)=0xd5) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) dup2(r9, r8) getpeername(r9, &(0x7f0000000140)=@ethernet={0x0, @random}, &(0x7f00000000c0)=0x80) write$binfmt_elf32(r9, &(0x7f0000000040)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r4, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, 0x0, &(0x7f00000001c0)) [ 2434.990740][ T641] usb 1-1: USB disconnect, device number 118 [ 2435.006349][T10180] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2435.031879][T10186] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2435.373745][ T641] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 2435.733848][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2435.744729][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2435.755212][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2435.764634][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2435.773329][ T641] usb 1-1: config 0 descriptor?? [ 2436.113761][ T641] usbhid 1-1:0.0: can't add hid device: -71 [ 2436.119841][ T641] usbhid: probe of 1-1:0.0 failed with error -71 [ 2436.127585][ T641] usb 1-1: USB disconnect, device number 119 [ 2436.583693][ T641] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 2436.943800][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2436.954701][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2436.965198][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2436.974691][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2436.984934][ T641] usb 1-1: config 0 descriptor?? [ 2437.703840][ T641] usb 1-1: string descriptor 0 read error: -71 [ 2437.723755][ T641] uclogic 0003:5543:006E.056E: failed retrieving string descriptor #200: -71 [ 2437.732542][ T641] uclogic 0003:5543:006E.056E: failed retrieving pen parameters: -71 [ 2437.742177][ T641] uclogic 0003:5543:006E.056E: failed probing pen v2 parameters: -71 [ 2437.751103][ T641] uclogic 0003:5543:006E.056E: failed probing parameters: -71 [ 2437.759394][ T641] uclogic: probe of 0003:5543:006E.056E failed with error -71 [ 2437.768457][ T641] usb 1-1: USB disconnect, device number 120 [ 2438.433768][ T641] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 2438.793794][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2438.804737][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2438.815225][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2438.824686][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2438.833350][ T641] usb 1-1: config 0 descriptor?? 07:49:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) 07:49:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x1100) 07:49:42 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x2000) 07:49:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000140)=""/176) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r2, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r2, 0x0) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, 0x0, &(0x7f0000000000)) 07:49:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008001e284000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:49:42 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000380)=ANY=[], 0x0) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x2281, 0xa6) pwrite64(r2, &(0x7f00000000c0)="da3d514cf31574fda2f9ddf6568738fed648f3fb4747fd3a5dee9432378d84b81d93593a51c84a75a327a5d6356983925cfdd160f863551734a572e01577cac9d837e35d5d82152c82564a712392921d669c666be5fd652820467343280e0ed15d4cc59959c187bb1681cb6e2457fa0c5064d3a765d8bb6b950127266eac486b12cb1ee94fb56c00529770923435a030c07e4a18665f764ec63e8a53955e6f65165d7f5ce5d64baea68eddaa5c4cf1ecca7743248f6ffede4b52aa436211ef85120a11aeea4288451328e854b5d20c2be0ae3203f5", 0xd5, 0x1) syz_usb_control_io$hid(r1, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) dup2(r5, r4) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9fc8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0xfe04b067305f86db, r7, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, r7) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000200)={0xaff, 0x0, &(0x7f00000001c0)=[r2, r4, r2, r7]}, 0x4) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRES64], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0022e20000157623029641808622e16cd58bff87b2ee3301aca6ef2bdd4c7dd9e49ea4b293df713811f3783641c5b656deff4d8d11c5df91776c37043a0c23b32f4ec8710eb4db43d9ca0ea1923fe4f205546ba9243c37e4f18285df89992300895ee887d9ff8e356142d3e313539a04dd2470da705762f12e301448a0d5e7a981ebb6ff3ce3a09609765f91c0574a4d9af11c000000", @ANYRES64], 0x0}, 0x0) syz_usb_control_io(r8, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 07:49:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) 07:49:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x1200) 07:49:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008001e484000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:49:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) 07:49:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x1300) [ 2439.105196][T10215] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2439.117835][T10220] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2439.142718][T10214] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=373332 07:49:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup2(r1, r0) ioctl$sock_proto_private(r0, 0x89ef, &(0x7f0000000000)="b90770e8f659520e58f5cbdcf82736bff83ec0ed029ac705d56ae7ec14b366d01bb8921e73ac5154c068178692de76abca0a3753315040e595070810e0ca25e3df290bfdce276d492be38afb3cacf529102f760906dff16c84b98894361a1c1967") r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x8010, r3, 0x0) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, 0x0, &(0x7f00000001c0)) 07:49:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, 0xffffffffffffffff, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) 07:49:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x1400) [ 2439.173757][ T641] usbhid 1-1:0.0: can't add hid device: -71 [ 2439.179975][ T641] usbhid: probe of 1-1:0.0 failed with error -71 [ 2439.194090][T10236] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2439.211050][ T641] usb 1-1: USB disconnect, device number 121 07:49:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x1500) 07:49:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, 0xffffffffffffffff, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) 07:49:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r5, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x15c, r6, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x80000000}, {0x6, 0x11, 0x2}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x800}, {0x6, 0x11, 0x8d9d}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffffff69}, {0x6, 0x11, 0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8000}, {0x6, 0x11, 0x8000}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x681}}]}, 0x15c}}, 0x4000) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x108, r6, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x108}}, 0x48004) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x16c, r6, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x91}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x393}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x4}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x104c}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x74, r6, 0x100, 0x70bd27, 0x25dfdbfe, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x40014) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f00000001c0)) [ 2439.216975][T10214] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2439.236205][T10243] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2439.243850][T10214] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2439.350679][T10259] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10259 comm=syz-executor.5 [ 2439.603697][ T641] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 2439.963771][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2439.974707][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2439.985169][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2439.994570][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2440.003321][ T641] usb 1-1: config 0 descriptor?? [ 2440.343744][ T641] usbhid 1-1:0.0: can't add hid device: -71 [ 2440.349741][ T641] usbhid: probe of 1-1:0.0 failed with error -71 [ 2440.358089][ T641] usb 1-1: USB disconnect, device number 122 [ 2440.833711][ T641] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 2441.193796][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2441.204720][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2441.215235][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2441.224688][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2441.233421][ T641] usb 1-1: config 0 descriptor?? [ 2441.685329][T10219] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2441.763764][ T641] usbhid 1-1:0.0: can't add hid device: -71 [ 2441.769832][ T641] usbhid: probe of 1-1:0.0 failed with error -71 [ 2441.778402][ T641] usb 1-1: USB disconnect, device number 123 [ 2442.463699][ T7947] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 2442.823808][ T7947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2442.834703][ T7947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2442.844661][ T7947] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2442.853738][ T7947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2442.862464][ T7947] usb 1-1: config 0 descriptor?? 07:49:46 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x2400) 07:49:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008001e4c4000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:49:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x1900) 07:49:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, 0xffffffffffffffff, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f00000001c0)) 07:49:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000000)=0x4, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f00000001c0)) socket$inet6_udp(0xa, 0x2, 0x0) 07:49:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) tkill(r2, 0x3d) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f00000001c0)) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000000)={0xcd, 0x0, 0x5, 0x6b2b1ec7, 0x1, 0x8}) 07:49:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x1a00) 07:49:46 executing program 0: r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005000000050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="04e59ae2efb8b6ef7fdf14000000", @ANYRES16=r4, @ANYBLOB="0100000000000000000031000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x81}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x4}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x4}, @NL80211_STA_WME_MAX_SP={0x1a, 0x2, "e2cacd2d5ed1d34243b5535aba5e903a2a27defe0000"}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 07:49:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, &(0x7f00000001c0)) [ 2443.021355][T10281] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:49:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x5, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r2, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f00000001c0)) 07:49:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x1c00) 07:49:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, &(0x7f00000001c0)) [ 2443.076460][T10299] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2443.084526][T10287] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=373501 [ 2443.095662][ T7947] usbhid 1-1:0.0: can't add hid device: -71 [ 2443.104712][ T7947] usbhid: probe of 1-1:0.0 failed with error -71 07:49:46 executing program 5: setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) write$binfmt_elf32(r0, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, &(0x7f00000001c0)) 07:49:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008001e604000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:49:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x1d00) 07:49:46 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x2500) 07:49:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, &(0x7f00000001c0)) [ 2443.124613][ T7947] usb 1-1: USB disconnect, device number 124 [ 2443.131698][T10287] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2443.147778][T10287] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 07:49:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)) 07:49:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x1e00) [ 2443.193540][T10319] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2443.258041][T10330] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=372548 [ 2443.270408][T10330] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2443.284820][T10330] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2443.483789][ T7947] usb 1-1: new low-speed USB device number 125 using dummy_hcd [ 2443.723726][ T7947] usb 1-1: Invalid ep0 maxpacket: 64 [ 2443.873725][ T7947] usb 1-1: new low-speed USB device number 126 using dummy_hcd [ 2444.113727][ T7947] usb 1-1: Invalid ep0 maxpacket: 64 [ 2444.119099][ T7947] usb usb1-port1: attempt power cycle [ 2444.833764][ T7947] usb 1-1: new low-speed USB device number 127 using dummy_hcd [ 2444.923778][ T7947] usb 1-1: Invalid ep0 maxpacket: 64 [ 2445.073722][ T7947] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 2445.163775][ T7947] usb 1-1: Invalid ep0 maxpacket: 64 [ 2445.169153][ T7947] usb usb1-port1: unable to enumerate USB device 07:49:49 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x3a) ioctl$RTC_PIE_OFF(r2, 0x7006) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005000000050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) 07:49:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)) 07:49:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x1f00) 07:49:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008001e684000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:49:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) r2 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x200000000011, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r3, 0x8000000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f00000001c0)) 07:49:49 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x2aa8) 07:49:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x2200) 07:49:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008001e6c4000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:49:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)) [ 2446.069576][T10340] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2446.081786][T10348] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 07:49:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000000)=0xe) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r4, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r4, 0x0) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, 0x0, &(0x7f00000001c0)) 07:49:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x2300) 07:49:49 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x2aaa) [ 2446.115576][T10352] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2446.127562][T10343] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=373615 [ 2446.151654][T10361] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2446.230303][T10372] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=373654 [ 2446.241586][T10374] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2446.256546][T10374] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2446.523712][ T7947] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 2446.883788][ T7947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2446.894755][ T7947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2446.905297][ T7947] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2446.914833][ T7947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2446.923557][ T7947] usb 1-1: config 0 descriptor?? [ 2447.253782][ T7947] usbhid 1-1:0.0: can't add hid device: -71 [ 2447.259741][ T7947] usbhid: probe of 1-1:0.0 failed with error -71 [ 2447.268265][ T7947] usb 1-1: USB disconnect, device number 3 [ 2447.733701][ T7947] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 2448.093806][ T7947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2448.104861][ T7947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2448.115306][ T7947] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2448.124789][ T7947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2448.133511][ T7947] usb 1-1: config 0 descriptor?? [ 2448.843818][ T7947] usb 1-1: string descriptor 0 read error: -71 [ 2448.863774][ T7947] uclogic 0003:5543:006E.056F: failed retrieving string descriptor #200: -71 [ 2448.872571][ T7947] uclogic 0003:5543:006E.056F: failed retrieving pen parameters: -71 [ 2448.880770][ T7947] uclogic 0003:5543:006E.056F: failed probing pen v2 parameters: -71 [ 2448.888939][ T7947] uclogic 0003:5543:006E.056F: failed probing parameters: -71 [ 2448.896498][ T7947] uclogic: probe of 0003:5543:006E.056F failed with error -71 [ 2448.905321][ T7947] usb 1-1: USB disconnect, device number 4 [ 2449.573734][ T641] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 2449.933799][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2449.944776][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2449.955222][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2449.964721][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2449.973409][ T641] usb 1-1: config 0 descriptor?? 07:49:53 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="9b1515a30256000000e422d08797cbf1890d9ecb19136b7baca0994714c86f90756b8cbb2b4794115696157d5fddeff35320f2bb5e4626600e058191e12d434d212a8082d0c8d1c81867ed6e64297bd4c5df1aea5c8ecd65cfde92752689e9a8acb7ef2e1ba8a0be80c25f1fd6afd2115cd80dc995650cc26e5fb70073a8be2cb60a29a0fe4fd5224c0f770c59a881ff07ca764fb38d9abefd93486d650518512c869e78d3912c567bd1f37e35bd014ed246ca3191968b47f5f069d59efbe7bffd1239e22f6027847523dcb88137195bcf61d9738ccf579cbca633c99dc80c2ad23f5619"], 0x0, 0x0, 0x0, 0x0}, 0x0) 07:49:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, 0x0) 07:49:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008001e744000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:49:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x10000008, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0x0, 0x200003ed, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f00000001c0)) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000200)="96f26c2e41eccb06d3bbdfcd98de2a3d9117deb3b173cff14918e24abf31b2897633b39f1bcc445c02f15b590d02c90e976e9f40342b7b94f02e845ef881525700cbed650f3dea3a2cb3492b4575c3f9434c734807662b521b513dcd173bb35ffd774e5173312b3d0d8e6b16729b0369b6205dcd10bce39681f8b360b6f3198a44aecce6583c2a2c3936a93029b9edaeb380ded287c8ebfe638a2a08d00a2a679653e9f5f6205312b8860c", 0xab, 0xfffffffffffffffc) 07:49:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x2400) 07:49:53 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x2aab) 07:49:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f00000001c0)) 07:49:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, 0x0) 07:49:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x2500) 07:49:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008001e7a4000ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 2450.129667][T10397] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2450.167403][T10400] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=373712 07:49:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_elf32(r7, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r7, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f00000001c0)) 07:49:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x2600) [ 2450.194827][T10400] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2450.207270][T10417] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2450.215429][T10400] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2450.220940][ T641] usbhid 1-1:0.0: can't add hid device: -71 [ 2450.264527][ T641] usbhid: probe of 1-1:0.0 failed with error -71 [ 2450.284514][ T641] usb 1-1: USB disconnect, device number 5 [ 2450.633713][ T641] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 2451.003813][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2451.014709][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2451.024513][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2451.033567][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2451.042470][ T641] usb 1-1: config 0 descriptor?? [ 2451.393774][ T641] usbhid 1-1:0.0: can't add hid device: -71 [ 2451.399733][ T641] usbhid: probe of 1-1:0.0 failed with error -71 [ 2451.408099][ T641] usb 1-1: USB disconnect, device number 6 [ 2451.863720][ T641] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 2452.223806][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2452.234709][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2452.245235][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2452.254675][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2452.263374][ T641] usb 1-1: config 0 descriptor?? [ 2453.003734][ T641] usbhid 1-1:0.0: can't add hid device: -71 [ 2453.009789][ T641] usbhid: probe of 1-1:0.0 failed with error -71 [ 2453.018146][ T641] usb 1-1: USB disconnect, device number 7 [ 2453.713720][ T641] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 2454.073796][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2454.084722][ T641] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2454.095169][ T641] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 2454.104645][ T641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2454.113341][ T641] usb 1-1: config 0 descriptor?? 07:49:57 executing program 4: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x2c00) 07:49:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, 0x0) 07:49:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x2700) 07:49:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd078b050200080008001e0002000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 07:49:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) listen(r0, 0xffff) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) pwritev2(r1, &(0x7f0000001500)=[{&(0x7f0000000000)="6f10f682d22e188c618a7269f1211283f7d81ce81f22e0b5d8c9c029db1d95f7b3860a3f211e604a69f831b246688dea9bedd3ccd36ce2c7a1a0e2", 0x3b}, {&(0x7f0000000200)="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", 0xfe}, {&(0x7f0000000040)}, {&(0x7f00000000c0)="385f09160987bd137ee4f2a035861f35c8fc69f69f5a9c7b6a7af328222a6a62e5f73e7d6167b7fa5e0407eca4e49728c326", 0x32}, {&(0x7f0000000140)="0fb9deccbf023a36faae277fd18940a9d1644f0ac6434dc33c6134457928f1c3a0733e2c6ffdd1dbe1809db9cb586c5a3b395e66713c7e26549a829480383897adc246e3b3adf31a18e72e9f3a69e1f8c6fd55f1bb756de46eaa3ab2", 0x5c}, {&(0x7f0000000300)="8bc65f9d73eece5ae4228814e7044ec43859332960ebfdeb9dbf3259e7779403f96a0daf210286985d256ae16b3b1a1b31e7bc903b7dbd22a5e2d77eb4a5f3104d6e58b35d86b020e3a20b0f72b4a0fd9ad766186b0f833e56279e7530480b", 0x5f}, {&(0x7f0000000380)="39975f90e3e58f96d8c2aef2dec8798c87f19a4a7672e4eec132aedca3d42f66b80e526e586cdba49715b89a2a828200e50ee45b9c05ac1903874a051a1e333931772339229de4586aa267e544da02c508ea901327", 0x55}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="4d434618394847bc62b87e269be6e7ceea52f0958578e5244c5d8aa8803e900493d9efbe06ad285273c38677929b7b3bf00ffaf5c1d649cefac8e8aabe1de07274724788bedc9dd24d8770db1d292aca94f1d11a05453b32ade388dce8a6c8e0167b0784", 0x64}, {&(0x7f0000001480)="49e430767d3f1dc4ece652a21cf9f11d2a98ed6b647e1ee3e9422dffb5cb360f512a8bcb7b7c6812b102d5fc828d5ea947550155e824ef93778fdb3e83e66d625b8942447f20acc8d5586df9b35789c9584fa7cdd8c3e5804af4ec9957", 0x5d}], 0xa, 0x1, 0x3, 0x10) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f00000001c0)) 07:49:57 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000380)=ANY=[], 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x4d8, 0xc002, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r2) syz_usb_control_io(r2, &(0x7f0000000240)={0x2c, &(0x7f00000000c0)={0x0, 0xb, 0x3, {0x3, 0x21, "82"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x812}}, &(0x7f0000000140)={0x0, 0xf, 0x3e, {0x5, 0xf, 0x3e, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x28, 0x9, 0x9, 0x100}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "9c25c2dda550efdcf92d0c64095295fc"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x0, 0x3f}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x18ab, 0x0, 0x53, [0xc0]}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3f, 0x10, 0x45, 0x74, "c7c82f83", "9defa51c"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x60, 0x6, 0x6, 0xe8, 0x8, 0x2}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x40, 0x8, 0x78, "b7f87406e002d95aa3203f6fb56bd525e0fad03370c8e910a5aef82627bd45d0ba22590d1aa02b7e22348b0d7e4732fdfc3003d6aee9660545d71cdfd0a4066b5cc4582c6e5c94eb7e49030ef285d1d77d12bd79fde63307b5bf780ef448fefa2ae63e401ce76e54858cdf0220723d8cc22c470c4a3aad9b"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xc1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x100, 0x80}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x1f}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000480)={0x40, 0xb, 0x2, "7da5"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x1ff}, &(0x7f0000000500)={0x40, 0x13, 0x6, @local}, &(0x7f0000000540)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000580)={0x40, 0x19, 0x2, "8fb0"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x7}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = dup2(r4, r3) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000040)) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005000000050256"], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = fsmount(r5, 0x0, 0x7a) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) 07:49:57 executing program 3: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) setxattr$security_selinux(&(0x7f0000000140)='./bus/file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:semanage_trans_lock_t:s0\x00', 0x2b, 0x1300) [ 2454.269842][T10448] kasan: CONFIG_KASAN_INLINE enabled [ 2454.291416][T10448] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 2454.302506][T10448] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 2454.309494][T10448] CPU: 1 PID: 10448 Comm: syz-executor.2 Not tainted 5.4.58-syzkaller-00210-gc3221b7ac740 #0 [ 2454.319633][T10448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2454.329699][T10448] RIP: 0010:fib_check_nexthop+0x16e/0x310 [ 2454.333802][ T641] usbhid 1-1:0.0: can't add hid device: -71 [ 2454.335413][T10448] Code: 8b 1b 48 83 c3 10 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 20 29 04 fe 48 8b 1b 48 83 c3 70 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 03 29 04 fe 48 8b 1b 48 83 c3 2f [ 2454.335420][T10448] RSP: 0018:ffff8881be8fef48 EFLAGS: 00010202 07:49:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x2800) 07:49:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) dup2(r6, r5) sendfile(r4, r5, &(0x7f0000000000)=0x3, 0xb9) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x0, [], [{0x8, 0x455c, 0x10000, 0x7fffffff, 0x5, 0xf775}, {0x83, 0x6, 0x101, 0xcf25, 0x0, 0x7fff}], [[], [], [], [], [], [], [], []]}) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f00000001c0)) [ 2454.335428][T10448] RAX: 000000000000000e RBX: 0000000000000070 RCX: 0000000000000002 [ 2454.335440][T10448] RDX: ffffc9000348b000 RSI: 000000000000008b RDI: 00000000000000fe [ 2454.341388][ T641] usbhid: probe of 1-1:0.0 failed with error -71 [ 2454.360914][T10448] RBP: 0000000000000001 R08: ffffffff836c0e1b R09: 0000000000000003 [ 2454.360919][T10448] R10: ffffed1037d1fe19 R11: 0000000000000004 R12: 000000000000008b [ 2454.360923][T10448] R13: dffffc0000000000 R14: ffff8881be8ff860 R15: 000000000000008b [ 2454.360930][T10448] FS: 00007f8f6b61b700(0000) GS:ffff8881db900000(0000) knlGS:0000000000000000 [ 2454.360934][T10448] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2454.360938][T10448] CR2: 000000000051bb20 CR3: 00000001d227d003 CR4: 00000000001606e0 [ 2454.360945][T10448] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2454.360949][T10448] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 2454.360952][T10448] Call Trace: [ 2454.360971][T10448] fib_create_info+0x1936/0x4200 [ 2454.360986][T10448] ? fib_result_prefsrc+0x4a0/0x4a0 07:49:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x2900) [ 2454.382079][ T641] usb 1-1: USB disconnect, device number 8 [ 2454.383111][T10448] ? prep_new_page+0x11a/0x380 [ 2454.383121][T10448] ? __nla_validate_parse+0x1a6a/0x21e0 [ 2454.383136][T10448] fib_table_insert+0x228/0x2030 [ 2454.441434][T10455] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=373834 [ 2454.444754][T10448] ? __nla_validate+0x50/0x50 [ 2454.444766][T10448] ? avc_has_perm_noaudit+0x30c/0x400 [ 2454.444774][T10448] ? fib_detect_death+0x560/0x560 [ 2454.444781][T10448] ? rtm_to_fib_config+0x1107/0x16d0 07:49:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x2a00) 07:49:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000009, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000001c0)=0x2b00) [ 2454.444792][T10448] ? fib_new_table+0x110/0x310 [ 2454.444807][T10448] inet_rtm_newroute+0x146/0x280 [ 2454.526399][T10448] ? fib_del_ifaddr+0x2710/0x2710 [ 2454.531453][T10448] ? unwind_next_frame+0x1c90/0x2330 [ 2454.536745][T10448] ? security_capable+0xb1/0xd0 [ 2454.541599][T10448] ? fib_del_ifaddr+0x2710/0x2710 [ 2454.546628][T10448] rtnetlink_rcv_msg+0x96e/0xc60 [ 2454.551565][T10448] ? is_bpf_text_address+0x290/0x2b0 [ 2454.556850][T10448] ? rtnetlink_bind+0x80/0x80 [ 2454.561533][T10448] ? unwind_get_return_address+0x48/0x90 [ 2454.567150][T10448] ? arch_stack_walk+0xd8/0x120 [ 2454.572010][T10448] ? stack_trace_save+0x123/0x1f0 [ 2454.577036][T10448] ? psi_ttwu_dequeue+0x320/0x320 [ 2454.582062][T10448] ? stack_trace_snprint+0x150/0x150 [ 2454.587346][T10448] ? _raw_spin_lock_bh+0xa4/0x180 [ 2454.592369][T10448] ? rhashtable_jhash2+0x1cf/0x2f0 [ 2454.597485][T10448] ? jhash+0x740/0x740 [ 2454.601585][T10448] ? rht_key_hashfn+0x157/0x240 [ 2454.606437][T10448] ? deferred_put_nlk_sk+0x210/0x210 [ 2454.611887][T10448] ? netlink_sendmsg+0x77b/0xd80 [ 2454.616845][T10448] ? jhash+0x740/0x740 [ 2454.620905][T10448] ? netlink_hash+0xd0/0xd0 [ 2454.625393][T10448] ? __rcu_read_lock+0x50/0x50 [ 2454.630151][T10448] netlink_rcv_skb+0x200/0x480 [ 2454.634950][T10448] ? rtnetlink_bind+0x80/0x80 [ 2454.639722][T10448] ? netlink_ack+0xa90/0xa90 [ 2454.644287][T10448] ? __rcu_read_lock+0x50/0x50 [ 2454.649041][T10448] ? selinux_vm_enough_memory+0x170/0x170 [ 2454.654760][T10448] ? netlink_trim+0x10a/0x230 [ 2454.659415][T10448] netlink_unicast+0x8ad/0xa50 [ 2454.664187][T10448] ? netlink_detachskb+0x60/0x60 [ 2454.669107][T10448] ? __virt_addr_valid+0x1fd/0x290 [ 2454.674192][T10448] netlink_sendmsg+0x9de/0xd80 [ 2454.678948][T10448] ? netlink_getsockopt+0x8e0/0x8e0 [ 2454.684124][T10448] ? import_iovec+0x1c2/0x380 [ 2454.688780][T10448] ? security_socket_sendmsg+0xad/0xc0 [ 2454.694232][T10448] ? netlink_getsockopt+0x8e0/0x8e0 [ 2454.699412][T10448] ____sys_sendmsg+0x58a/0x8d0 [ 2454.704159][T10448] ? __sys_sendmsg_sock+0x2b0/0x2b0 [ 2454.709338][T10448] ? percpu_counter_add_batch+0x12d/0x150 [ 2454.715042][T10448] __sys_sendmsg+0x2d5/0x3c0 [ 2454.719617][T10448] ? ____sys_sendmsg+0x8d0/0x8d0 [ 2454.724564][T10448] ? _copy_to_user+0x8e/0xb0 [ 2454.729162][T10448] do_syscall_64+0xcb/0x150 [ 2454.733660][T10448] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2454.739560][T10448] RIP: 0033:0x45d239 [ 2454.743432][T10448] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2454.743725][ T641] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 2454.763027][T10448] RSP: 002b:00007f8f6b61ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2454.763036][T10448] RAX: ffffffffffffffda RBX: 0000000000026e00 RCX: 000000000045d239 [ 2454.763040][T10448] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000006 [ 2454.763044][T10448] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 2454.763049][T10448] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 2454.763053][T10448] R13: 00007fffa7f7fe1f R14: 00007f8f6b61b9c0 R15: 000000000118cf4c [ 2454.763059][T10448] Modules linked in: [ 2454.777171][T10448] ---[ end trace 5256e5220b8bcd0c ]--- [ 2454.828815][T10448] RIP: 0010:fib_check_nexthop+0x16e/0x310 [ 2454.834581][T10448] Code: 8b 1b 48 83 c3 10 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 20 29 04 fe 48 8b 1b 48 83 c3 70 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 03 29 04 fe 48 8b 1b 48 83 c3 2f [ 2454.854228][T10448] RSP: 0018:ffff8881be8fef48 EFLAGS: 00010202 [ 2454.860287][T10448] RAX: 000000000000000e RBX: 0000000000000070 RCX: 0000000000000002 [ 2454.868434][T10448] RDX: ffffc9000348b000 RSI: 000000000000008b RDI: 00000000000000fe [ 2454.876447][T10448] RBP: 0000000000000001 R08: ffffffff836c0e1b R09: 0000000000000003 [ 2454.884504][T10448] R10: ffffed1037d1fe19 R11: 0000000000000004 R12: 000000000000008b [ 2454.892572][T10448] R13: dffffc0000000000 R14: ffff8881be8ff860 R15: 000000000000008b [ 2454.900571][T10448] FS: 00007f8f6b61b700(0000) GS:ffff8881db900000(0000) knlGS:0000000000000000 [ 2454.909987][T10448] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2454.916602][T10448] CR2: 00007fb89fc9c000 CR3: 00000001d227d002 CR4: 00000000001606e0 [ 2454.924602][T10448] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2454.932564][T10448] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 2454.940595][T10448] Kernel panic - not syncing: Fatal exception [ 2454.947047][T10448] Kernel Offset: disabled [ 2454.951357][T10448] Rebooting in 86400 seconds..