last executing test programs: 7.192007013s ago: executing program 3 (id=9141): r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f00000001c0)="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", 0x118) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080), 0x8) 7.088718612s ago: executing program 3 (id=9142): sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r2, 0x0, 0x10, &(0x7f0000000240)="170000000200020000ffbe8c5ee17688a2003300030100000057fc5ad90200fb6a880000d6c9db0000db15d091bd8b7002300e00d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009cbdeab2c65b3c0f077dee4a5acba400001fb700674f00c805bbf9315033bf79ac2dfc061f15003901f71517c0fd3e97667e30dee2000000000062068f5ee50c08af9bfa558302ffff02ff03310800ab0840024f02d8e9e90539062a80e605007f7117", 0xb8) 5.601743374s ago: executing program 0 (id=9146): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x444, &(0x7f0000000980)="$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") openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x10010, r0, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = memfd_create(0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x20051, r2, 0xce9e1000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 4.683511406s ago: executing program 4 (id=9148): socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000002000000008000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_freezer_state(r2, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$eJzs3c1rXFUbAPDnTpKmb9r3TV4QbF0FBA2UTkyNrYKLigsRLBR0bTtMpqFmkimZSWlCoBYR3AhaXAi66dqPunPrx1b/Bd2ISEvVtFhxISN3PjqTZiadtvloze8Htz3n3jM595l77zln5h7mBrBjjab/ZCL2R8R7ScRwY30SEQO1VH/E0Xq5myvL+XRJolp99bekVubGynI+2l6T2tPI7IuIb96OOJBZW295cWkmVywW5hv58crsmfHy4tLB07O56cJ0Ye7wxOTkoSPPHBncuFj/+H5p79X3X3ry86N/vfXo5Xe/TeJo7G1sa49jo4zGaOM9GUjfwlVe3OjKtlmy3TvAPUkvzb76VR77Yzj6aqne9F4SAHiQnI+IKgCwwyT6fwDYYZrfA9xYWc6nS/X89n4fsdWuvRARu+vxN+9v1rf0N+7Z7a7dBx26kay635FExMgG1D8aER9/+fqn6RKbdB8SoJM3L0TEyZHRZvvfan+SNXMW6nqfkPFUD2VGb8tr/2DrfJWOf55tjf9a11/m1vgnOox/Bjtcu/diNGJXe37t9Z+5sgHVdJWO/54faM1tu9kWf8NIXyP339qYbyA5dbpYSNu2/0XEWAwMpvmJdeoYu/739VUr+lrJ9vHf7xff+CStP/2/VSJzpf+2JncqV8ndb9xN1y5EPNbfKf7k1vFPuox/j/dYx8vPvfNRt21p/Gm8zWV1/Js/q6x6KeKJ6Bx/U7Le/MTD47XTYbx5UnTwxU8fDnWrv/34p0taf/OzwFZIj//Q+vGPJO3zNct3X8d3l4a/7rbtzvF3Pv93Ja/V0s3G41yuUpmfiNiVvLJ2/aHWa5v5Zvk0/rHHO1//653/6WfCkz3G33/118/uPf7NlcY/dVfH/+4Tl2/O9HWrv7fjP1lLjTXW9NL+9bqD9/PeAQAAAAAAAAAAAAAAAAAAAAAAAECvMhGxN5JM9lY6k8lm68/wfiSGMsVSuXLgVGlhbipqz8oeiYFM86cuh9t+D3Wi8Xv4zfyh2/JPR8T/I+KDwf/U8tl8qTi13cEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMOeLs//T/0yuN17BwBsmt13LHG9sCU7AgBsmTv3/wDAv43+HwB2Hv0/AOw8+n8A2Hn0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGyy48eOpUv1z5XlfJqfOru4MFM6e3CqUJ7Jzi7ks/nS/JnsdKk0XSxk86XZtpf+0OnvFUulM5Mxt3BuvFIoV8bLi0snZksLc5UTp2dz04UThYEtiwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeldeXJrJFYuFeYmHJVEdrh+6B2V/Nj/x88Ef961X5qLTeOMT290yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwc/gkAAP//skMoxA==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x60142, 0x0) open(&(0x7f0000000380)='./file1\x00', 0x42042, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001740)={0x9c02}, 0x8) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) lseek(r5, 0xc6c3, 0x0) openat$cgroup_procs(r2, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) 4.205798758s ago: executing program 3 (id=9153): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@private2, 0x0, 0x0, 0x4e22, 0x0, 0xa, 0x80, 0x40}, {0x0, 0x0, 0x0, 0x200000000000}}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x8, 0x20, 0xb, 0x5, {{0xc, 0x4, 0x0, 0x9, 0x30, 0x68, 0x0, 0x6, 0x4, 0x0, @private=0xa010101, @empty, {[@timestamp_addr={0x44, 0xc, 0xc0, 0x1, 0xd, [{@empty, 0x2}]}, @rr={0x7, 0xf, 0x98, [@private=0xa010101, @remote, @broadcast]}]}}}}}) r3 = dup(0xffffffffffffffff) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000dc0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f0000000600)='%-5lx \x00'}, 0x20) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmmsg(r1, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000ec0)="cd7515005bf72d7a080974ddce8c18734a969305f6580ece8da289390ef4dbda4840604ed5f911b1f587b28584b1bb306a254509076a5a65fbc994e04afa6db281a747456957ac9ec8843b4052d6d72af6f2b44c123ed013cac5240cc9ad6237ee1bf6c7cb87d9a677e68f92f32d56e52a0430b56cf8c202bca3a0825c0eff22acb4762b66a6d10e58eb777ef08c9b89694d1fd8391b814bf10d3ad3cb4aab", 0x9f}, {0x0}, {&(0x7f0000000f80)="50bb1802e68efd0f1524b7681f5016", 0xf}], 0x3}}], 0x1, 0x10) lseek(r5, 0x851, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pB \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x13, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7d2d, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit, @cb_func={0x18, 0xa, 0x4, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x5d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x1f00, 0x25, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000340)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x6, 0xc6a, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[r4, r5, r6, r7, r8], 0x0, 0x10, 0x10000, @void, @value}, 0x94) r9 = socket$key(0xf, 0x3, 0x2) getdents(0xffffffffffffffff, &(0x7f00000012c0)=""/19, 0x13) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001480)={"9a474a1cd4e49ceebfa0c8f3f4167f6f", 0x0, 0x0, {0x1, 0x6}, {0x3, 0x7}, 0x7, [0x7fffffff, 0x3, 0x7fffffffffffffff, 0x8, 0x910, 0x1, 0x100, 0x2, 0xfffffffffffffff9, 0x100000000, 0x10001, 0x2, 0x7, 0x1, 0x8001, 0x3]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r7, 0x5000943f, &(0x7f0000007000)={{r5}, 0x0, 0x1a, @inherit={0x58, &(0x7f0000001080)={0x0, 0x2, 0x37, 0x13e, {0xe, 0x1, 0xb5, 0x7, 0xfffffffffffff801}, [0xffffffffffff54c7, 0x3]}}, @name="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"}) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(r9, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001880)={0x2, 0x13, 0x2, 0x6, 0x2, 0x0, 0x70bd28, 0x25dfdbfe}, 0x10}}, 0x4000040) 4.17431125s ago: executing program 0 (id=9154): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001e0001", @ANYRES32=0x0, @ANYBLOB="0002"], 0x1c}}, 0x0) 4.120026465s ago: executing program 0 (id=9155): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000005440), 0x26, 0x75c, &(0x7f0000005480)="$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") chdir(&(0x7f00000000c0)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r0, 0x0, 0x0) 4.114622926s ago: executing program 0 (id=9156): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856b340da0b53813de2010203010902"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000300), &(0x7f0000000200)}, 0x20) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000004000000228b155e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.707982912s ago: executing program 4 (id=9159): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$getregs(0xc, r0, 0x4, &(0x7f0000001580)=""/4096) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) io_setup(0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d2943e6f5f828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a74c500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a54d9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xbf, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac14141686159f034d2f8702890c6aab845013f2325f1a39018602038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9", 0x0, 0xfe, 0x60000000}, 0x50) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 3.331975995s ago: executing program 2 (id=9162): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1000a, &(0x7f00000003c0)=ANY=[], 0x21, 0x1507, &(0x7f0000001b00)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socket$inet6(0xa, 0x3, 0x8000000003c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 3.321099436s ago: executing program 3 (id=9163): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) 3.298152298s ago: executing program 3 (id=9164): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x112ce3, 0x0, 0x8, 0x0, &(0x7f0000000040)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) close(r3) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c38bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f9055", 0x44) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xcbf, 0xefe}, 0x14) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x40000, 0x0) 2.695303151s ago: executing program 4 (id=9165): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') chdir(&(0x7f00000001c0)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f00000004000000000000001200", @ANYRES32, @ANYBLOB="00bfffffff000000000004000000f40000000000255cde8f04b0d3b59b1233581ea1224f809db1d7147d00eeadbf3dac795ee070dd52ad412427b7a371a0dbac3af38faf7ce0b07004688da1e08b5b94b25978d33a6af7ec4c6c3d5a4d9c063ba96ab2712261dd2f7263e0516a3d38f96ffb5df3a101a55d621095c4983e217265a7010000000106662897612310b9678414b5cf", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) dup(0xffffffffffffffff) link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.544371515s ago: executing program 1 (id=9166): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x1e) connect$pptp(r6, &(0x7f0000000100)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r6, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) pipe2(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 2.415988907s ago: executing program 2 (id=9167): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r0, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) recvmmsg(r0, &(0x7f0000006580)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001580)=""/129, 0x81}], 0x1}, 0x8}], 0x2, 0x0, 0x0) 2.326002324s ago: executing program 3 (id=9168): r0 = syz_open_procfs(0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendto$inet6(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0500000000000109022400010000000009040001090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@main=@item_4={0x3, 0x0, 0x9, "ad117d66"}, @local=@item_4={0x3, 0x2, 0x0, "fa9e274a"}, @global=@item_012={0x2, 0x1, 0x9, "822b"}, @local=@item_4={0x3, 0x2, 0x2, "849b9173"}, @main=@item_4={0x3, 0x0, 0xb, "e633ec2c"}, @local=@item_4={0x3, 0x2, 0x0, "7d024063"}, @main=@item_012={0x0, 0x0, 0xb}, @global=@item_4={0x3, 0x1, 0x0, "cacb7460"}]}}, 0x0}, 0x0) mount$9p_fd(0x20100000, 0x0, 0x0, 0x0, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 2.158653049s ago: executing program 2 (id=9169): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x42042, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000c34e54ffeb84ff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010400000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000001780), 0x20100, 0x0) lseek(0xffffffffffffffff, 0xc6c3, 0x0) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r6, 0x40087708, 0x0) 1.822152339s ago: executing program 4 (id=9170): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x68340, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0x7005, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') open(&(0x7f0000000a40)='./bus\x00', 0x141a42, 0x0) 1.531502524s ago: executing program 1 (id=9171): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xfffffffffffffdf4, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.392062887s ago: executing program 1 (id=9172): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240), 0x0, 0x0, 0x0) unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x26040800, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0x4}, 0x1c) recvfrom$inet6(r3, &(0x7f0000002180)=""/80, 0x50, 0x100, 0x0, 0x0) shutdown(r3, 0x1) splice(r3, 0x0, r2, 0x0, 0x406f413, 0x0) 1.264236678s ago: executing program 1 (id=9173): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4ea, &(0x7f0000000840)="$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") 1.251707139s ago: executing program 2 (id=9174): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)={0x24, 0x2, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xb6}]}, 0x24}}, 0x24000000) 1.152090808s ago: executing program 1 (id=9175): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000007007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000140)='cpuset.cpu_exclusive\x00', 0x2, 0x0) 1.151733408s ago: executing program 2 (id=9176): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000300)={[{@noinline_xattr}, {@four_active_logs}, {@four_active_logs}, {@jqfmt_vfsv1}, {@noinline_data}, {@user_xattr}, {@checkpoint_diasble}, {@fastboot}, {@fsync_mode_strict}, {@discard_unit_section}]}, 0x21, 0x552d, &(0x7f000000abc0)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x46b42, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) sendfile(r0, r0, 0x0, 0x80000001) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000b00)="$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") r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) 812.754278ms ago: executing program 4 (id=9177): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace(0x8, r2) wait4(0x0, 0x0, 0x0, 0x0) 801.530829ms ago: executing program 0 (id=9178): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 740.055495ms ago: executing program 4 (id=9179): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x1}], 0x1) r5 = accept4$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvmsg(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 739.583585ms ago: executing program 0 (id=9180): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000300)={[{@noinline_xattr}, {@four_active_logs}, {@four_active_logs}, {@jqfmt_vfsv1}, {@noinline_data}, {@user_xattr}, {@checkpoint_diasble}, {@fastboot}, {@fsync_mode_strict}, {@discard_unit_section}]}, 0x21, 0x552d, &(0x7f000000abc0)="$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") r1 = open(&(0x7f0000000040)='./bus\x00', 0x46b42, 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfd14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) sendfile(r1, r1, 0x0, 0x80000001) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000b00)="$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") r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@remote, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000000500)=0xe8) 315.728542ms ago: executing program 1 (id=9181): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000000000000000000000000040180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000020000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'bridge_slave_1\x00'}) 0s ago: executing program 2 (id=9182): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getgroups(0x2, &(0x7f0000001480)=[0x0, 0x0]) kernel console output (not intermixed with test programs): gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1951 comm="syz.0.8913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44843f3ef9 code=0x7ffc0000 [ 2203.089751][ T24] audit: type=1326 audit(1726257914.422:13374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1951 comm="syz.0.8913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f44843f3ef9 code=0x7ffc0000 [ 2203.124006][ T24] audit: type=1326 audit(1726257914.422:13375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1951 comm="syz.0.8913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44843f3ef9 code=0x7ffc0000 [ 2203.168254][ T24] audit: type=1326 audit(1726257914.422:13376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1951 comm="syz.0.8913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44843f3ef9 code=0x7ffc0000 [ 2203.216947][T12231] usb 2-1: Using ep0 maxpacket: 32 [ 2203.286400][ T24] audit: type=1326 audit(1726257914.422:13377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1951 comm="syz.0.8913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f44843f3ef9 code=0x7ffc0000 [ 2203.345043][T12231] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2203.371948][T12231] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 2203.411102][T12231] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2203.440465][T12231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2203.467411][T12231] usb 2-1: config 0 descriptor?? [ 2203.495106][ T1944] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 2203.515557][T12231] hub 2-1:0.0: USB hub found [ 2203.735013][T12231] hub 2-1:0.0: 2 ports detected [ 2204.848602][ T796] usb 5-1: USB disconnect, device number 103 [ 2204.857165][ T512] udevd[512]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2206.266038][ T1981] FAULT_INJECTION: forcing a failure. [ 2206.266038][ T1981] name failslab, interval 1, probability 0, space 0, times 0 [ 2206.316191][ T1983] FAULT_INJECTION: forcing a failure. [ 2206.316191][ T1983] name failslab, interval 1, probability 0, space 0, times 0 [ 2206.328948][ T1983] CPU: 1 PID: 1983 Comm: syz.0.8920 Tainted: G W 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 2206.340030][ T1983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2206.349916][ T1983] Call Trace: [ 2206.353054][ T1983] dump_stack_lvl+0x1e2/0x24b [ 2206.357559][ T1983] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2206.362858][ T1983] dump_stack+0x15/0x17 [ 2206.366845][ T1983] should_fail+0x3c6/0x510 [ 2206.371107][ T1983] ? security_file_alloc+0x29/0x120 [ 2206.376131][ T1983] __should_failslab+0xa4/0xe0 [ 2206.380736][ T1983] should_failslab+0x9/0x20 [ 2206.385084][ T1983] kmem_cache_alloc+0x3d/0x2e0 [ 2206.389683][ T1983] ? __alloc_file+0x29/0x330 [ 2206.394105][ T1983] security_file_alloc+0x29/0x120 [ 2206.398959][ T1983] __alloc_file+0xbf/0x330 [ 2206.403211][ T1983] alloc_empty_file+0x95/0x180 [ 2206.407814][ T1983] path_openat+0x105/0x3000 [ 2206.412163][ T1983] ? __kasan_slab_alloc+0xc3/0xe0 [ 2206.417359][ T1983] ? __kasan_slab_alloc+0xb1/0xe0 [ 2206.422303][ T1983] ? slab_post_alloc_hook+0x61/0x2f0 [ 2206.427525][ T1983] ? kmem_cache_alloc+0x168/0x2e0 [ 2206.432374][ T1983] ? getname_flags+0xba/0x520 [ 2206.436885][ T1983] ? getname+0x19/0x20 [ 2206.440891][ T1983] ? __x64_sys_openat+0x243/0x290 [ 2206.445742][ T1983] ? do_syscall_64+0x34/0x70 [ 2206.450170][ T1983] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2206.456162][ T1983] ? do_filp_open+0x460/0x460 [ 2206.460677][ T1983] do_filp_open+0x21c/0x460 [ 2206.465020][ T1983] ? vfs_tmpfile+0x2b0/0x2b0 [ 2206.469448][ T1983] ? get_unused_fd_flags+0x94/0xa0 [ 2206.474386][ T1983] do_sys_openat2+0x13f/0x710 [ 2206.478900][ T1983] ? mutex_trylock+0xa0/0xa0 [ 2206.483324][ T1983] ? do_sys_open+0x220/0x220 [ 2206.487747][ T1983] ? __kasan_check_write+0x14/0x20 [ 2206.492693][ T1983] ? ksys_write+0x260/0x2c0 [ 2206.497031][ T1983] __x64_sys_openat+0x243/0x290 [ 2206.501719][ T1983] ? __ia32_sys_open+0x270/0x270 [ 2206.506494][ T1983] ? debug_smp_processor_id+0x17/0x20 [ 2206.511698][ T1983] do_syscall_64+0x34/0x70 [ 2206.515951][ T1983] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2206.521677][ T1983] RIP: 0033:0x7f44843f3ef9 [ 2206.525930][ T1983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2206.545372][ T1983] RSP: 002b:00007f448306d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2206.553615][ T1983] RAX: ffffffffffffffda RBX: 00007f44845abf80 RCX: 00007f44843f3ef9 [ 2206.561425][ T1983] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 2206.569236][ T1983] RBP: 00007f448306d090 R08: 0000000000000000 R09: 0000000000000000 [ 2206.577047][ T1983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2206.584859][ T1983] R13: 0000000000000000 R14: 00007f44845abf80 R15: 00007ffca9205f98 [ 2206.618757][ T1981] CPU: 0 PID: 1981 Comm: syz.2.8919 Tainted: G W 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 2206.620780][ T371] usb 2-1: USB disconnect, device number 76 [ 2206.629852][ T1981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2206.629857][ T1981] Call Trace: [ 2206.629875][ T1981] dump_stack_lvl+0x1e2/0x24b [ 2206.629885][ T1981] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2206.629896][ T1981] ? avc_has_perm+0x275/0x400 [ 2206.629913][ T1981] dump_stack+0x15/0x17 [ 2206.666929][ T1981] should_fail+0x3c6/0x510 [ 2206.671174][ T1981] ? avc_alloc_node+0x7e/0x360 [ 2206.675776][ T1981] __should_failslab+0xa4/0xe0 [ 2206.680374][ T1981] should_failslab+0x9/0x20 [ 2206.684706][ T1981] kmem_cache_alloc+0x3d/0x2e0 [ 2206.689308][ T1981] avc_alloc_node+0x7e/0x360 [ 2206.693737][ T1981] ? 0xffffffffa0028000 [ 2206.697726][ T1981] ? is_bpf_text_address+0x172/0x190 [ 2206.702842][ T1981] ? avc_xperms_free+0x280/0x280 [ 2206.707617][ T1981] ? __kernel_text_address+0x9b/0x110 [ 2206.712826][ T1981] ? unwind_get_return_address+0x4d/0x90 [ 2206.718292][ T1981] avc_update_node+0x4e/0x710 [ 2206.722807][ T1981] avc_denied+0x13f/0x1b0 [ 2206.726973][ T1981] avc_has_extended_perms+0xb00/0xf70 [ 2206.732187][ T1981] ? kasan_set_free_info+0x23/0x40 [ 2206.737126][ T1981] ? ____kasan_slab_free+0x121/0x160 [ 2206.742244][ T1981] ? __kasan_slab_free+0x11/0x20 [ 2206.747019][ T1981] ? slab_free_freelist_hook+0xc0/0x190 [ 2206.752401][ T1981] ? kmem_cache_free+0xa9/0x1e0 [ 2206.757087][ T1981] ? putname+0xe7/0x140 [ 2206.761102][ T1981] ? do_sys_openat2+0x1fc/0x710 [ 2206.765852][ T1981] ? avc_ss_reset+0x280/0x280 [ 2206.770367][ T1981] ? _kstrtoull+0x3a0/0x4a0 [ 2206.774705][ T1981] ? kstrtouint_from_user+0x20a/0x2a0 [ 2206.779913][ T1981] ? kstrtol_from_user+0x310/0x310 [ 2206.784864][ T1981] ? __fsnotify_parent+0x4b9/0x6c0 [ 2206.789809][ T1981] ? __fsnotify_update_child_dentry_flags+0x2b0/0x2b0 [ 2206.796403][ T1981] ? proc_fail_nth_write+0x20b/0x290 [ 2206.801524][ T1981] ? ioctl_has_perm+0x1f8/0x560 [ 2206.806213][ T1981] ioctl_has_perm+0x3f0/0x560 [ 2206.810728][ T1981] ? preempt_count_add+0x92/0x1a0 [ 2206.815585][ T1981] ? has_cap_mac_admin+0x3c0/0x3c0 [ 2206.820545][ T1981] ? kernel_write+0x3d0/0x3d0 [ 2206.825048][ T1981] selinux_file_ioctl+0x3cc/0x540 [ 2206.829907][ T1981] ? selinux_file_alloc_security+0x120/0x120 [ 2206.835723][ T1981] ? __fget_files+0x31e/0x380 [ 2206.840238][ T1981] security_file_ioctl+0x74/0xb0 [ 2206.845011][ T1981] __se_sys_ioctl+0x53/0x190 [ 2206.849434][ T1981] __x64_sys_ioctl+0x7b/0x90 [ 2206.853861][ T1981] do_syscall_64+0x34/0x70 [ 2206.858115][ T1981] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2206.863838][ T1981] RIP: 0033:0x7f4f58c44ef9 [ 2206.868096][ T1981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2206.887533][ T1981] RSP: 002b:00007f4f5787c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2206.895778][ T1981] RAX: ffffffffffffffda RBX: 00007f4f58dfd130 RCX: 00007f4f58c44ef9 [ 2206.903588][ T1981] RDX: 0000000020000080 RSI: 0000000000008933 RDI: 000000000000000a [ 2206.911401][ T1981] RBP: 00007f4f5787c090 R08: 0000000000000000 R09: 0000000000000000 [ 2206.919298][ T1981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2206.927197][ T1981] R13: 0000000000000000 R14: 00007f4f58dfd130 R15: 00007ffe62cb42b8 [ 2207.121867][ T1996] FAULT_INJECTION: forcing a failure. [ 2207.121867][ T1996] name failslab, interval 1, probability 0, space 0, times 0 [ 2207.134382][ T1996] CPU: 1 PID: 1996 Comm: syz.1.8922 Tainted: G W 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 2207.145380][ T1996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2207.155269][ T1996] Call Trace: [ 2207.158409][ T1996] dump_stack_lvl+0x1e2/0x24b [ 2207.162911][ T1996] ? panic+0x812/0x812 [ 2207.166817][ T1996] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2207.172116][ T1996] ? release_firmware_map_entry+0x18d/0x18d [ 2207.177842][ T1996] dump_stack+0x15/0x17 [ 2207.181833][ T1996] should_fail+0x3c6/0x510 [ 2207.186090][ T1996] ? __d_alloc+0x2d/0x6c0 [ 2207.190254][ T1996] __should_failslab+0xa4/0xe0 [ 2207.194853][ T1996] should_failslab+0x9/0x20 [ 2207.199192][ T1996] kmem_cache_alloc+0x3d/0x2e0 [ 2207.203794][ T1996] ? irqentry_exit+0x4f/0x60 [ 2207.208217][ T1996] __d_alloc+0x2d/0x6c0 [ 2207.212213][ T1996] d_alloc+0x4b/0x1d0 [ 2207.216033][ T1996] __lookup_hash+0xe7/0x290 [ 2207.220368][ T1996] filename_create+0x202/0x750 [ 2207.225237][ T1996] ? __check_object_size+0x2e6/0x3c0 [ 2207.230359][ T1996] ? kern_path_create+0x40/0x40 [ 2207.235051][ T1996] do_mkdirat+0xcc/0x2c0 [ 2207.239119][ T1996] ? sysvec_reschedule_ipi+0x83/0x160 [ 2207.244321][ T1996] ? do_mknodat+0x450/0x450 [ 2207.248668][ T1996] __x64_sys_mkdirat+0x7b/0x90 [ 2207.253265][ T1996] do_syscall_64+0x34/0x70 [ 2207.257517][ T1996] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2207.263243][ T1996] RIP: 0033:0x7ff109d4e797 [ 2207.267496][ T1996] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2207.286946][ T1996] RSP: 002b:00007ff108986e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2207.295185][ T1996] RAX: ffffffffffffffda RBX: 00007ff108986ef0 RCX: 00007ff109d4e797 [ 2207.302995][ T1996] RDX: 00000000000001ff RSI: 0000000020000100 RDI: 00000000ffffff9c [ 2207.310802][ T1996] RBP: 0000000020000040 R08: 0000000020000000 R09: 0000000000000000 [ 2207.318615][ T1996] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000020000100 [ 2207.326426][ T1996] R13: 00007ff108986eb0 R14: 0000000000000000 R15: 0000000000000000 [ 2207.389149][ T24] kauditd_printk_skb: 45 callbacks suppressed [ 2207.389161][ T24] audit: type=1400 audit(1726257918.802:13423): avc: denied { create } for pid=2001 comm="syz.4.8926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2207.415481][ T2002] FAULT_INJECTION: forcing a failure. [ 2207.415481][ T2002] name failslab, interval 1, probability 0, space 0, times 0 [ 2207.428853][ T2002] CPU: 1 PID: 2002 Comm: syz.4.8926 Tainted: G W 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 2207.439939][ T2002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2207.449832][ T2002] Call Trace: [ 2207.452967][ T2002] dump_stack_lvl+0x1e2/0x24b [ 2207.457475][ T2002] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2207.462770][ T2002] dump_stack+0x15/0x17 [ 2207.466762][ T2002] should_fail+0x3c6/0x510 [ 2207.471034][ T2002] ? audit_log_start+0x48c/0x9b0 [ 2207.471053][ T2002] __should_failslab+0xa4/0xe0 [ 2207.480387][ T2002] should_failslab+0x9/0x20 [ 2207.484759][ T2002] kmem_cache_alloc+0x3d/0x2e0 [ 2207.489329][ T2002] audit_log_start+0x48c/0x9b0 [ 2207.493922][ T2002] ? audit_serial+0x30/0x30 [ 2207.498271][ T2002] ? debug_smp_processor_id+0x17/0x20 [ 2207.503464][ T2002] ? slow_avc_audit+0x3c0/0x3c0 [ 2207.508151][ T2002] ? avc_audit_pre_callback+0x2b0/0x2b0 [ 2207.513531][ T2002] common_lsm_audit+0xe4/0x1ba0 [ 2207.518220][ T2002] ? ipv6_skb_to_auditdata+0xe80/0xe80 [ 2207.523513][ T2002] ? __kasan_check_write+0x14/0x20 [ 2207.528463][ T2002] ? _raw_spin_lock+0xa4/0x1b0 [ 2207.533062][ T2002] ? _raw_spin_trylock_bh+0x190/0x190 [ 2207.538268][ T2002] ? __kasan_check_write+0x14/0x20 [ 2207.543215][ T2002] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 2207.548509][ T2002] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 2207.554152][ T2002] slow_avc_audit+0x26c/0x3c0 [ 2207.558662][ T2002] ? avc_get_hash_stats+0x180/0x180 [ 2207.563698][ T2002] ? rcu_read_unlock_special+0xd8/0x4c0 [ 2207.569079][ T2002] ? __rcu_read_unlock+0x90/0x90 [ 2207.573850][ T2002] ? avc_denied+0x13f/0x1b0 [ 2207.578199][ T2002] avc_has_perm+0x20b/0x400 [ 2207.582534][ T2002] ? avc_has_perm_noaudit+0x240/0x240 [ 2207.587739][ T2002] ? unwind_get_return_address+0x4d/0x90 [ 2207.593207][ T2002] ? arch_stack_walk+0xf3/0x140 [ 2207.597896][ T2002] selinux_socket_sendmsg+0x243/0x340 [ 2207.603102][ T2002] ? selinux_socket_accept+0x5b0/0x5b0 [ 2207.608397][ T2002] ? kmem_cache_free+0xa9/0x1e0 [ 2207.613083][ T2002] ? check_stack_object+0x114/0x130 [ 2207.618115][ T2002] security_socket_sendmsg+0x72/0xb0 [ 2207.623237][ T2002] ____sys_sendmsg+0x51a/0x8f0 [ 2207.627836][ T2002] ? __sys_sendmsg_sock+0x40/0x40 [ 2207.632697][ T2002] ? import_iovec+0xe5/0x120 [ 2207.637121][ T2002] ___sys_sendmsg+0x252/0x2e0 [ 2207.641635][ T2002] ? __sys_sendmsg+0x280/0x280 [ 2207.646238][ T2002] ? rw_verify_area+0x1c3/0x360 [ 2207.650926][ T2002] ? __fdget+0x1bc/0x240 [ 2207.655001][ T2002] __se_sys_sendmsg+0x1b1/0x280 [ 2207.659695][ T2002] ? __x64_sys_sendmsg+0x90/0x90 [ 2207.664461][ T2002] ? ksys_write+0x260/0x2c0 [ 2207.668817][ T2002] ? debug_smp_processor_id+0x17/0x20 [ 2207.674011][ T2002] __x64_sys_sendmsg+0x7b/0x90 [ 2207.678609][ T2002] do_syscall_64+0x34/0x70 [ 2207.682981][ T2002] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2207.688874][ T2002] RIP: 0033:0x7f2db42ddef9 [ 2207.693127][ T2002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2207.712576][ T2002] RSP: 002b:00007f2db2f57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2207.720811][ T2002] RAX: ffffffffffffffda RBX: 00007f2db4495f80 RCX: 00007f2db42ddef9 [ 2207.728620][ T2002] RDX: 0000000000000000 RSI: 0000000020004440 RDI: 0000000000000007 [ 2207.736432][ T2002] RBP: 00007f2db2f57090 R08: 0000000000000000 R09: 0000000000000000 [ 2207.744243][ T2002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2207.752056][ T2002] R13: 0000000000000000 R14: 00007f2db4495f80 R15: 00007ffeddcc7d28 [ 2207.760390][ T2002] audit: audit_lost=8 audit_rate_limit=0 audit_backlog_limit=64 [ 2207.767962][ T2002] audit: out of memory in audit_log_start [ 2207.771114][ T53] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 2207.820087][ T24] audit: type=1400 audit(1726257919.232:13424): avc: denied { setopt } for pid=2008 comm="syz.1.8929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2207.850984][ T24] audit: type=1326 audit(1726257919.262:13425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2010 comm="syz.1.8930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff109d4fef9 code=0x7ffc0000 [ 2207.876932][ T2011] syz.1.8930[2011] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2207.876990][ T2011] syz.1.8930[2011] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2207.897177][ T24] audit: type=1326 audit(1726257919.292:13426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2010 comm="syz.1.8930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7ff109d4fef9 code=0x7ffc0000 [ 2207.934031][ T24] audit: type=1326 audit(1726257919.292:13427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2010 comm="syz.1.8930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff109d4fef9 code=0x7ffc0000 [ 2207.968552][ T24] audit: type=1326 audit(1726257919.292:13428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2010 comm="syz.1.8930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff109d4fef9 code=0x7ffc0000 [ 2208.021874][ T24] audit: type=1326 audit(1726257919.302:13429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2010 comm="syz.1.8930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff109d4fef9 code=0x7ffc0000 [ 2208.048059][ T2022] tmpfs: Unknown parameter 'huce' [ 2208.057511][ T2022] FAULT_INJECTION: forcing a failure. [ 2208.057511][ T2022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2208.070386][ T2022] CPU: 1 PID: 2022 Comm: syz.4.8928 Tainted: G W 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 2208.081532][ T2022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2208.091427][ T2022] Call Trace: [ 2208.094560][ T2022] dump_stack_lvl+0x1e2/0x24b [ 2208.099064][ T2022] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2208.104356][ T2022] ? preempt_schedule_irq+0xe7/0x140 [ 2208.109487][ T2022] dump_stack+0x15/0x17 [ 2208.113645][ T2022] should_fail+0x3c6/0x510 [ 2208.117902][ T2022] should_fail_usercopy+0x1a/0x20 [ 2208.122759][ T2022] _copy_to_user+0x20/0x90 [ 2208.127011][ T2022] simple_read_from_buffer+0xc7/0x150 [ 2208.132217][ T2022] proc_fail_nth_read+0x1a3/0x210 [ 2208.137074][ T2022] ? proc_fault_inject_write+0x390/0x390 [ 2208.142543][ T2022] ? security_file_permission+0x86/0xb0 [ 2208.147924][ T2022] ? rw_verify_area+0x1c3/0x360 [ 2208.152869][ T2022] ? proc_fault_inject_write+0x390/0x390 [ 2208.158337][ T2022] vfs_read+0x200/0xba0 [ 2208.162333][ T2022] ? kernel_read+0x70/0x70 [ 2208.166583][ T2022] ? __kasan_check_write+0x14/0x20 [ 2208.171545][ T2022] ? mutex_lock+0xa5/0x110 [ 2208.175784][ T2022] ? mutex_trylock+0xa0/0xa0 [ 2208.180219][ T2022] ? __fdget_pos+0x2e7/0x3a0 [ 2208.184652][ T2022] ? ksys_read+0x77/0x2c0 [ 2208.188808][ T2022] ksys_read+0x199/0x2c0 [ 2208.192884][ T2022] ? vfs_write+0xe70/0xe70 [ 2208.197135][ T2022] ? fpu__clear_all+0x20/0x20 [ 2208.201649][ T2022] ? __kasan_check_read+0x11/0x20 [ 2208.206509][ T2022] __x64_sys_read+0x7b/0x90 [ 2208.210849][ T2022] do_syscall_64+0x34/0x70 [ 2208.216150][ T2022] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2208.221852][ T2022] RIP: 0033:0x7f2db42dc93c [ 2208.226099][ T2022] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 2208.245544][ T2022] RSP: 002b:00007f2db2f15030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2208.253781][ T2022] RAX: ffffffffffffffda RBX: 00007f2db4496130 RCX: 00007f2db42dc93c [ 2208.261590][ T2022] RDX: 000000000000000f RSI: 00007f2db2f150a0 RDI: 0000000000000007 [ 2208.269400][ T2022] RBP: 00007f2db2f15090 R08: 0000000000000000 R09: 0000000000000000 [ 2208.277213][ T2022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2208.285023][ T2022] R13: 0000000000000000 R14: 00007f2db4496130 R15: 00007ffeddcc7d28 [ 2208.300778][ T24] audit: type=1326 audit(1726257919.302:13430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2010 comm="syz.1.8930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff109d4fef9 code=0x7ffc0000 [ 2208.371680][ T2026] overlayfs: failed to resolve './file2': -2 [ 2208.445068][ T53] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2208.461532][ T53] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2208.505058][ T53] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2208.534291][ T53] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2208.565387][ T53] usb 3-1: config 0 descriptor?? [ 2208.581116][T28775] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 2208.723091][ T2028] syz.4.8935[2028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2208.723150][ T2028] syz.4.8935[2028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2208.835050][T28775] usb 2-1: Using ep0 maxpacket: 32 [ 2209.065004][T10168] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 2209.133794][ T2045] tipc: Started in network mode [ 2209.138643][ T2045] tipc: Own node identity 00000000000000000000000000000001, cluster identity 4711 [ 2209.148122][ T2045] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 2209.156467][ T2045] tipc: Enabled bearer , priority 10 [ 2209.325149][T28775] usb 2-1: config 4 has an invalid interface number: 13 but max is 3 [ 2209.333338][T28775] usb 2-1: config 4 has an invalid interface number: 106 but max is 3 [ 2209.342628][T28775] usb 2-1: config 4 has an invalid descriptor of length 1, skipping remainder of the config [ 2209.372331][T28775] usb 2-1: config 4 has 2 interfaces, different from the descriptor's value: 4 [ 2209.382483][T28775] usb 2-1: config 4 has no interface number 0 [ 2209.389180][T28775] usb 2-1: config 4 has no interface number 1 [ 2209.396522][T28775] usb 2-1: config 4 interface 13 altsetting 1 endpoint 0x3 has invalid maxpacket 528, setting to 64 [ 2209.408351][T28775] usb 2-1: config 4 interface 13 altsetting 1 has an invalid endpoint with address 0x80, skipping [ 2209.420477][T28775] usb 2-1: config 4 interface 13 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 2209.442140][T28775] usb 2-1: config 4 interface 13 altsetting 1 endpoint 0xC has an invalid bInterval 118, changing to 10 [ 2209.453248][T28775] usb 2-1: config 4 interface 13 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 2209.463545][T28775] usb 2-1: config 4 interface 13 altsetting 1 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 2209.474422][T28775] usb 2-1: config 4 interface 106 altsetting 129 endpoint 0xD has an invalid bInterval 127, changing to 7 [ 2209.485498][T28775] usb 2-1: config 4 interface 106 altsetting 129 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 2209.496427][T28775] usb 2-1: config 4 interface 106 altsetting 129 has a duplicate endpoint with address 0xD, skipping [ 2209.507166][T28775] usb 2-1: config 4 interface 106 altsetting 129 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 2209.539034][T28775] usb 2-1: config 4 interface 13 has no altsetting 0 [ 2209.547502][T28775] usb 2-1: config 4 interface 106 has no altsetting 0 [ 2209.555325][T10168] usb 1-1: Using ep0 maxpacket: 16 [ 2209.685064][T10168] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 2209.693882][T10168] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 2209.703372][T10168] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 2209.705062][T28775] usb 2-1: New USB device found, idVendor=0403, idProduct=f44a, bcdDevice=e0.94 [ 2209.712809][T10168] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2209.722172][T28775] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2209.731212][T10168] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 2209.739348][T28775] usb 2-1: Product: 理线樼괁讀娆׊ગặ颍莽벲㫂Ꞇ됑ಏ䀻阎뙩䠘ꡔ䦞≏鍁ፎ畆陥ⳑ䌟ᒬ愙へ⹿졕疵恾᫧皘༊덊ア㚴랶䙀懒邯碪Ḭﵲꉕ믯㤬鄗ధ⤿懍ٸ욁걸⋸迧ண逎ᖳ䬪 [ 2209.748569][T10168] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2209.770948][T28775] usb 2-1: Manufacturer: 킂鲑囒真捎뤅煡낣봚㑇骓㡋Ⴝ矚儁ꆤ൤븙⟞⢎ⳳ봬理릭徊ʑ홻 [ 2209.777193][T10168] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 2209.788935][T28775] usb 2-1: SerialNumber: ﳿ [ 2209.797483][T10168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2209.855040][T21190] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 2209.862990][T10168] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 2210.204964][T21190] usb 4-1: Using ep0 maxpacket: 8 [ 2210.446716][ T290] tipc: 32-bit node address hash set to 1000000 [ 2210.462904][T10168] scsi host1: usb-storage 1-1:1.0 [ 2210.501863][T28775] ftdi_sio 2-1:4.13: FTDI USB Serial Device converter detected [ 2210.509848][T28775] usb 2-1: Detected FT2232C [ 2210.535027][T21190] usb 4-1: unable to get BOS descriptor set [ 2210.569961][T28775] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 2210.579104][ T2068] FAULT_INJECTION: forcing a failure. [ 2210.579104][ T2068] name failslab, interval 1, probability 0, space 0, times 0 [ 2210.591607][ T2068] CPU: 1 PID: 2068 Comm: syz.2.8946 Tainted: G W 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 2210.602598][ T2068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2210.612490][ T2068] Call Trace: [ 2210.615631][ T2068] dump_stack_lvl+0x1e2/0x24b [ 2210.620126][ T2068] ? panic+0x812/0x812 [ 2210.624030][ T2068] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2210.629330][ T2068] dump_stack+0x15/0x17 [ 2210.633323][ T2068] should_fail+0x3c6/0x510 [ 2210.636741][T21190] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 114, changing to 10 [ 2210.637581][ T2068] ? kobject_uevent_env+0x269/0x700 [ 2210.637599][ T2068] __should_failslab+0xa4/0xe0 [ 2210.648564][T21190] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2210.653553][ T2068] should_failslab+0x9/0x20 [ 2210.653571][ T2068] kmem_cache_alloc_trace+0x3a/0x2e0 [ 2210.659158][ T53] usbhid 3-1:0.0: can't add hid device: -71 [ 2210.670738][ T2068] ? mutex_lock+0xa5/0x110 [ 2210.670753][ T2068] ? dev_uevent_filter+0xb0/0xb0 [ 2210.670765][ T2068] kobject_uevent_env+0x269/0x700 [ 2210.670781][ T2068] ? mutex_unlock+0x1c/0x40 [ 2210.675213][ T53] usbhid: probe of 3-1:0.0 failed with error -71 [ 2210.680199][ T2068] kobject_uevent+0x1f/0x30 [ 2210.680217][ T2068] device_del+0xd2f/0xf00 [ 2210.688589][ T53] usb 3-1: USB disconnect, device number 118 [ 2210.690187][ T2068] ? kill_device+0xd0/0xd0 [ 2210.690204][ T2068] ? mntput+0x5d/0xc0 [ 2210.732709][ T2068] ? simple_release_fs+0xaf/0xe0 [ 2210.737473][ T2068] device_unregister+0x15/0x40 [ 2210.742069][ T2068] bdi_unregister+0x4bf/0x5b0 [ 2210.746583][ T2068] ? bdi_set_owner+0x80/0x80 [ 2210.751012][ T2068] ? __kasan_check_write+0x14/0x20 [ 2210.755958][ T2068] ? _raw_spin_lock+0xa4/0x1b0 [ 2210.760557][ T2068] ? _raw_spin_trylock_bh+0x190/0x190 [ 2210.765763][ T2068] bdi_put+0xab/0x110 [ 2210.769582][ T2068] generic_shutdown_super+0x285/0x2d0 [ 2210.774792][ T2068] kill_anon_super+0x3d/0x70 [ 2210.779216][ T2068] fuse_kill_sb_anon+0x1e8/0x200 [ 2210.783991][ T2068] deactivate_locked_super+0xad/0x110 [ 2210.789231][ T2068] deactivate_super+0xbe/0xf0 [ 2210.793714][ T2068] cleanup_mnt+0x45c/0x510 [ 2210.797983][ T2068] __cleanup_mnt+0x19/0x20 [ 2210.802218][ T2068] task_work_run+0x129/0x190 [ 2210.806645][ T2068] exit_to_user_mode_loop+0xbf/0xd0 [ 2210.811686][ T2068] syscall_exit_to_user_mode+0xa2/0x1a0 [ 2210.817060][ T2068] do_syscall_64+0x40/0x70 [ 2210.821313][ T2068] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2210.827039][ T2068] RIP: 0033:0x7f4f58c44ef9 [ 2210.831293][ T2068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2210.850738][ T2068] RSP: 002b:00007f4f578be038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 2210.858977][ T2068] RAX: 0000000000000000 RBX: 00007f4f58dfcf80 RCX: 00007f4f58c44ef9 [ 2210.866786][ T2068] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020000280 [ 2210.874607][ T2068] RBP: 00007f4f578be090 R08: 0000000000000000 R09: 0000000000000000 [ 2210.882410][ T2068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2210.885084][T21190] usb 4-1: New USB device found, idVendor=046d, idProduct=b309, bcdDevice= 0.40 [ 2210.890230][ T2068] R13: 0000000000000000 R14: 00007f4f58dfcf80 R15: 00007ffe62cb42b8 [ 2211.143638][T21190] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2211.144141][T28775] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2211.159852][T21190] usb 4-1: Product: ऊ凹࠘ㄣ玐昤✚︾ʵ [ 2211.166931][T28775] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2211.170633][T21190] usb 4-1: SerialNumber: 㓛压뾀퇻ꫳ蘍᡿텗膱ꐟ鼻㶮髯괕胖鱷딺⥕阬伳蛌ⓣ㔟搲㏔樤 [ 2211.194387][T28775] ftdi_sio 2-1:4.106: FTDI USB Serial Device converter detected [ 2211.202640][T28775] usb 2-1: Detected FT2232C [ 2211.247807][T28775] ftdi_sio ttyUSB1: Unable to read latency timer: -71 [ 2211.265047][T28775] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 2211.272148][T28775] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 2211.285353][T28775] usb 2-1: USB disconnect, device number 77 [ 2211.296780][T28775] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2211.314695][T28775] ftdi_sio 2-1:4.13: device disconnected [ 2211.578319][T28775] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 2211.591679][T28775] ftdi_sio 2-1:4.106: device disconnected [ 2211.599511][T10168] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 2211.693306][ T2081] bridge0: port 1(bridge_slave_0) entered blocking state [ 2211.700390][ T2081] bridge0: port 1(bridge_slave_0) entered disabled state [ 2211.707777][ T2081] device bridge_slave_0 entered promiscuous mode [ 2211.714505][ T2081] bridge0: port 2(bridge_slave_1) entered blocking state [ 2211.721405][ T2081] bridge0: port 2(bridge_slave_1) entered disabled state [ 2211.728851][ T2081] device bridge_slave_1 entered promiscuous mode [ 2211.764640][ T2081] bridge0: port 2(bridge_slave_1) entered blocking state [ 2211.771504][ T2081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2211.778593][ T2081] bridge0: port 1(bridge_slave_0) entered blocking state [ 2211.785368][ T2081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2211.806869][T21742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2211.814207][T21742] bridge0: port 1(bridge_slave_0) entered disabled state [ 2211.821719][T21742] bridge0: port 2(bridge_slave_1) entered disabled state [ 2211.836141][T21742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2211.844151][T21742] bridge0: port 1(bridge_slave_0) entered blocking state [ 2211.851022][T21742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2211.858323][T21190] usbhid 4-1:1.0: can't add hid device: -71 [ 2211.865535][T21742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2211.866252][T21190] usbhid: probe of 4-1:1.0 failed with error -71 [ 2211.873636][T21742] bridge0: port 2(bridge_slave_1) entered blocking state [ 2211.883314][T21190] usb 4-1: USB disconnect, device number 112 [ 2211.886380][T21742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2211.906701][T21742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2211.916195][T21742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2211.934489][ T2081] device veth0_vlan entered promiscuous mode [ 2211.941704][T21742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2211.950744][T21742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2211.958900][T21742] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2211.966502][T21742] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2211.980219][T21742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2211.989148][ T2081] device veth1_macvtap entered promiscuous mode [ 2212.000215][T21742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2212.010110][T21742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2212.187304][ T290] usb 1-1: USB disconnect, device number 81 [ 2212.220527][T26618] device bridge_slave_1 left promiscuous mode [ 2212.226819][T26618] bridge0: port 2(bridge_slave_1) entered disabled state [ 2212.227026][T32495] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=0x01 driverbyte=0x00 [ 2212.243567][T26618] device bridge_slave_0 left promiscuous mode [ 2212.250046][T32495] sd 1:0:0:0: [sdb] Sense not available. [ 2212.250091][T26618] bridge0: port 1(bridge_slave_0) entered disabled state [ 2212.258854][T32495] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 2212.269632][T32495] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 2212.275998][T26618] device veth1_macvtap left promiscuous mode [ 2212.277002][T32495] sd 1:0:0:0: [sdb] Write Protect is off [ 2212.281826][T26618] device veth0_vlan left promiscuous mode [ 2212.293593][ T2099] xt_bpf: check failed: parse error [ 2212.307642][T32495] sd 1:0:0:0: [sdb] Asking for cache data failed [ 2212.322701][T32495] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 2212.329734][ T849] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 2212.362326][T32495] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=0x07 driverbyte=0x00 [ 2212.385006][T32495] sd 1:0:0:0: [sdb] Sense not available. [ 2212.390562][T32495] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 2212.409695][ T24] kauditd_printk_skb: 98 callbacks suppressed [ 2212.409708][ T24] audit: type=1326 audit(1726257923.822:13529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2101 comm="syz.0.8955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44843f3ef9 code=0x7ffc0000 [ 2212.457893][ T24] audit: type=1326 audit(1726257923.852:13530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2101 comm="syz.0.8955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44843f3ef9 code=0x7ffc0000 [ 2212.482011][ T24] audit: type=1326 audit(1726257923.852:13531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2101 comm="syz.0.8955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44843f3ef9 code=0x7ffc0000 [ 2212.512421][ T24] audit: type=1326 audit(1726257923.852:13532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2101 comm="syz.0.8955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44843f3ef9 code=0x7ffc0000 [ 2212.550913][ T24] audit: type=1326 audit(1726257923.852:13533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2101 comm="syz.0.8955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44843f3ef9 code=0x7ffc0000 [ 2212.574954][ T24] audit: type=1326 audit(1726257923.852:13534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2101 comm="syz.0.8955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44843f3ef9 code=0x7ffc0000 [ 2212.645357][ T2088] bridge0: port 1(bridge_slave_0) entered blocking state [ 2212.652278][ T2088] bridge0: port 1(bridge_slave_0) entered disabled state [ 2212.779027][ T2088] device bridge_slave_0 entered promiscuous mode [ 2212.810136][ T24] audit: type=1326 audit(1726257923.852:13535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2101 comm="syz.0.8955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44843f3ef9 code=0x7ffc0000 [ 2212.819999][ T849] usb 5-1: Using ep0 maxpacket: 32 [ 2212.837274][ T2088] bridge0: port 2(bridge_slave_1) entered blocking state [ 2212.853431][ T2088] bridge0: port 2(bridge_slave_1) entered disabled state [ 2212.861097][ T2088] device bridge_slave_1 entered promiscuous mode [ 2212.870716][ T24] audit: type=1326 audit(1726257923.852:13536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2101 comm="syz.0.8955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f44843f3ef9 code=0x7ffc0000 [ 2212.895395][ T24] audit: type=1326 audit(1726257923.852:13537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2101 comm="syz.0.8955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44843f3ef9 code=0x7ffc0000 [ 2212.962517][T32495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2212.969866][T32495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2212.979017][T32495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2212.987084][ T849] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 2212.987384][T32495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2212.998990][ T849] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0xD has invalid wMaxPacketSize 0 [ 2213.015241][ T849] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2213.015249][T32495] bridge0: port 1(bridge_slave_0) entered blocking state [ 2213.015262][T32495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2213.022431][ T849] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 2213.045919][ T849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2213.054550][ T849] usb 5-1: config 0 descriptor?? [ 2213.060353][T32495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2213.069915][T32495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2213.078161][T32495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2213.086635][T32495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2213.094555][T32495] bridge0: port 2(bridge_slave_1) entered blocking state [ 2213.101397][T32495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2213.105707][ T849] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 2213.110197][T32495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2213.123685][T32495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2213.132613][T32495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2213.142541][ T2088] device veth0_vlan entered promiscuous mode [ 2213.148921][T32495] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2213.156291][T32495] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2213.172106][T32495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2213.180823][ T2088] device veth1_macvtap entered promiscuous mode [ 2213.190384][T32495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2213.200255][T32495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2213.222812][ T24] audit: type=1400 audit(1726257924.632:13538): avc: denied { name_bind } for pid=2109 comm="syz.1.8950" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 2213.938924][ T2126] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8951'. [ 2214.738880][ T2137] usb usb8: usbfs: process 2137 (syz.1.8961) did not claim interface 0 before use [ 2215.412691][ T371] usb 5-1: USB disconnect, device number 104 [ 2215.425763][T26618] device bridge_slave_1 left promiscuous mode [ 2215.431696][T26618] bridge0: port 2(bridge_slave_1) entered disabled state [ 2215.439142][T26618] device bridge_slave_0 left promiscuous mode [ 2215.445256][T26618] bridge0: port 1(bridge_slave_0) entered disabled state [ 2215.452830][T26618] device veth1_macvtap left promiscuous mode [ 2215.458839][T26618] device veth0_vlan left promiscuous mode [ 2215.870606][ T2155] FAULT_INJECTION: forcing a failure. [ 2215.870606][ T2155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2215.883739][ T2155] CPU: 0 PID: 2155 Comm: syz.2.8963 Tainted: G W 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 2215.894812][ T2155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2215.904831][ T2155] Call Trace: [ 2215.907978][ T2155] dump_stack_lvl+0x1e2/0x24b [ 2215.912474][ T2155] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2215.917780][ T2155] dump_stack+0x15/0x17 [ 2215.921758][ T2155] should_fail+0x3c6/0x510 [ 2215.926012][ T2155] should_fail_usercopy+0x1a/0x20 [ 2215.930958][ T2155] _copy_from_user+0x20/0xd0 [ 2215.935386][ T2155] iovec_from_user+0xc7/0x330 [ 2215.939904][ T2155] __import_iovec+0x6d/0x3b0 [ 2215.944322][ T2155] ? __ia32_sys_shutdown+0x70/0x70 [ 2215.949272][ T2155] import_iovec+0xe5/0x120 [ 2215.953524][ T2155] ___sys_sendmsg+0x215/0x2e0 [ 2215.958042][ T2155] ? __sys_sendmsg+0x280/0x280 [ 2215.962641][ T2155] ? rw_verify_area+0x1c3/0x360 [ 2215.967333][ T2155] ? __fdget+0x1bc/0x240 [ 2215.971406][ T2155] __se_sys_sendmsg+0x1b1/0x280 [ 2215.976090][ T2155] ? __x64_sys_sendmsg+0x90/0x90 [ 2215.980862][ T2155] ? ksys_write+0x260/0x2c0 [ 2215.985208][ T2155] ? debug_smp_processor_id+0x17/0x20 [ 2215.990412][ T2155] __x64_sys_sendmsg+0x7b/0x90 [ 2215.995010][ T2155] do_syscall_64+0x34/0x70 [ 2215.999265][ T2155] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2216.004991][ T2155] RIP: 0033:0x7f4f58c44ef9 [ 2216.009249][ T2155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2216.029124][ T2155] RSP: 002b:00007f4f5787c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2216.037361][ T2155] RAX: ffffffffffffffda RBX: 00007f4f58dfd130 RCX: 00007f4f58c44ef9 [ 2216.045173][ T2155] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 000000000000000a [ 2216.052982][ T2155] RBP: 00007f4f5787c090 R08: 0000000000000000 R09: 0000000000000000 [ 2216.060794][ T2155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2216.068607][ T2155] R13: 0000000000000000 R14: 00007f4f58dfd130 R15: 00007ffe62cb42b8 [ 2216.354986][T10168] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 2216.362435][ T849] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 2216.509640][ T2167] tmpfs: Unknown parameter 'huce' [ 2216.804964][T10168] usb 2-1: Using ep0 maxpacket: 16 [ 2216.809939][ T849] usb 4-1: Using ep0 maxpacket: 16 [ 2216.945087][ T849] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 2216.956974][ T849] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 2216.967413][ T849] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 2216.985927][ T849] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2216.995659][ T849] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 2217.005461][ T849] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2217.011931][ T849] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 2217.020795][ T849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2217.028673][T10168] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2217.054650][T10168] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2217.085498][ T849] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 2217.417751][ T24] kauditd_printk_skb: 37 callbacks suppressed [ 2217.417764][ T24] audit: type=1326 audit(1726257928.832:13576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2179 comm="syz.2.8973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f58c44ef9 code=0x7ffc0000 [ 2217.456046][ T24] audit: type=1326 audit(1726257928.862:13577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2179 comm="syz.2.8973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f58c44ef9 code=0x7ffc0000 [ 2217.480480][ T24] audit: type=1326 audit(1726257928.862:13578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2179 comm="syz.2.8973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f58c44ef9 code=0x7ffc0000 [ 2217.504605][ T24] audit: type=1326 audit(1726257928.862:13579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2179 comm="syz.2.8973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f58c44ef9 code=0x7ffc0000 [ 2217.528122][ T24] audit: type=1326 audit(1726257928.862:13580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2179 comm="syz.2.8973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f58c44ef9 code=0x7ffc0000 [ 2217.551613][ T24] audit: type=1326 audit(1726257928.862:13581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2179 comm="syz.2.8973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f4f58c44ef9 code=0x7ffc0000 [ 2217.577584][ T24] audit: type=1326 audit(1726257928.862:13582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2179 comm="syz.2.8973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f58c44ef9 code=0x7ffc0000 [ 2217.602527][ T24] audit: type=1326 audit(1726257928.862:13583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2179 comm="syz.2.8973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f58c44ef9 code=0x7ffc0000 [ 2217.663851][T10168] usb 2-1: string descriptor 0 read error: -22 [ 2217.667552][ T24] audit: type=1326 audit(1726257928.862:13584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2179 comm="syz.2.8973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f58c44ef9 code=0x7ffc0000 [ 2217.673005][ T849] ums-sddr09: probe of 4-1:1.0 failed with error -22 [ 2217.676117][ T849] usb 4-1: USB disconnect, device number 113 [ 2217.734100][T10168] usb 2-1: New USB device found, idVendor=056a, idProduct=0035, bcdDevice= 0.40 [ 2217.743669][T10168] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2217.755263][ T24] audit: type=1326 audit(1726257928.862:13585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2179 comm="syz.2.8973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f58c44ef9 code=0x7ffc0000 [ 2217.956619][T26618] tipc: Disabling bearer [ 2217.962779][T26618] tipc: Left network mode [ 2218.236289][ T2152] udc-core: couldn't find an available UDC or it's busy [ 2218.243140][ T2152] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2218.271608][ T2196] bridge0: port 1(bridge_slave_0) entered blocking state [ 2218.282269][ T2152] udc-core: couldn't find an available UDC or it's busy [ 2218.289794][ T2196] bridge0: port 1(bridge_slave_0) entered disabled state [ 2218.300745][ T2152] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2218.308914][ T2196] device bridge_slave_0 entered promiscuous mode [ 2218.318593][ T2196] bridge0: port 2(bridge_slave_1) entered blocking state [ 2218.325972][ T2196] bridge0: port 2(bridge_slave_1) entered disabled state [ 2218.333248][ T2196] device bridge_slave_1 entered promiscuous mode [ 2218.385689][ T2196] bridge0: port 2(bridge_slave_1) entered blocking state [ 2218.392562][ T2196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2218.399673][ T2196] bridge0: port 1(bridge_slave_0) entered blocking state [ 2218.406442][ T2196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2218.433006][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2218.441676][T32665] bridge0: port 1(bridge_slave_0) entered disabled state [ 2218.449311][T32665] bridge0: port 2(bridge_slave_1) entered disabled state [ 2218.463064][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2218.471398][T32665] bridge0: port 1(bridge_slave_0) entered blocking state [ 2218.478264][T32665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2218.485946][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2218.494127][T32665] bridge0: port 2(bridge_slave_1) entered blocking state [ 2218.500997][T32665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2218.515301][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2218.533147][ T796] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 2218.542614][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2218.551881][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2218.563713][ T2196] device veth0_vlan entered promiscuous mode [ 2218.574741][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2218.582931][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2218.590615][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2218.604541][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2218.617236][ T2196] device veth1_macvtap entered promiscuous mode [ 2218.628375][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2218.642897][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2218.735659][T26618] device bridge_slave_1 left promiscuous mode [ 2218.741696][T26618] bridge0: port 2(bridge_slave_1) entered disabled state [ 2218.749626][T26618] device bridge_slave_0 left promiscuous mode [ 2218.756178][T26618] bridge0: port 1(bridge_slave_0) entered disabled state [ 2218.764277][T26618] device veth1_macvtap left promiscuous mode [ 2218.770528][T26618] device veth0_vlan left promiscuous mode [ 2218.804990][ T796] usb 4-1: Using ep0 maxpacket: 8 [ 2218.847533][ T2210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8984'. [ 2218.856888][ T2211] netlink: 'syz.4.8984': attribute type 4 has an invalid length. [ 2218.866963][ T2210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2061 sclass=netlink_route_socket pid=2210 comm=syz.4.8984 [ 2218.935514][ T796] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2218.945850][T28775] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 2218.953550][ T796] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2219.125048][ T796] usb 4-1: New USB device found, idVendor=1044, idProduct=800d, bcdDevice=57.5c [ 2219.134138][ T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2219.142525][ T796] usb 4-1: Product: syz [ 2219.146958][ T796] usb 4-1: Manufacturer: syz [ 2219.151503][ T796] usb 4-1: SerialNumber: syz [ 2219.190602][ T796] usb 4-1: config 0 descriptor?? [ 2219.235917][ T796] rndis_host 4-1:0.0: skipping garbage [ 2219.241258][ T796] usb 4-1: bad CDC descriptors [ 2219.375469][ T796] usb 2-1: USB disconnect, device number 78 [ 2219.415598][T28775] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2219.479990][ T2223] overlayfs: './file0' not a directory [ 2219.485559][ T2224] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2219.488501][T28775] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2219.499863][ T2224] overlayfs: './file0' not a directory [ 2219.509479][T28775] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2219.523821][T28775] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2219.549197][T28775] usb 3-1: config 0 descriptor?? [ 2219.953841][ T2232] tipc: Started in network mode [ 2219.958708][ T2232] tipc: Own node identity 00000000000000000000000000000001, cluster identity 4711 [ 2219.968217][ T2232] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 2219.976587][ T2232] tipc: Enabled bearer , priority 10 [ 2221.392764][ T371] tipc: 32-bit node address hash set to 1000000 [ 2221.649347][ T5] usb 4-1: USB disconnect, device number 114 [ 2221.786122][T32495] tipc: Disabling bearer [ 2221.805029][T28775] usbhid 3-1:0.0: can't add hid device: -71 [ 2221.811022][T28775] usbhid: probe of 3-1:0.0 failed with error -71 [ 2221.811155][T32495] tipc: Left network mode [ 2221.820279][T28775] usb 3-1: USB disconnect, device number 119 [ 2222.122115][ T849] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 2222.176004][ T2268] bridge0: port 1(bridge_slave_0) entered blocking state [ 2222.182926][ T2268] bridge0: port 1(bridge_slave_0) entered disabled state [ 2222.190296][ T2268] device bridge_slave_0 entered promiscuous mode [ 2222.197134][ T2268] bridge0: port 2(bridge_slave_1) entered blocking state [ 2222.204029][ T2268] bridge0: port 2(bridge_slave_1) entered disabled state [ 2222.211163][ T2268] device bridge_slave_1 entered promiscuous mode [ 2222.274091][ T2269] bridge0: port 1(bridge_slave_0) entered blocking state [ 2222.281207][ T2269] bridge0: port 1(bridge_slave_0) entered disabled state [ 2222.288608][ T2269] device bridge_slave_0 entered promiscuous mode [ 2222.295710][ T2269] bridge0: port 2(bridge_slave_1) entered blocking state [ 2222.302537][ T2269] bridge0: port 2(bridge_slave_1) entered disabled state [ 2222.309844][ T2269] device bridge_slave_1 entered promiscuous mode [ 2222.327447][ T2271] bridge0: port 1(bridge_slave_0) entered blocking state [ 2222.334280][ T2271] bridge0: port 1(bridge_slave_0) entered disabled state [ 2222.341550][ T2271] device bridge_slave_0 entered promiscuous mode [ 2222.352615][ T2271] bridge0: port 2(bridge_slave_1) entered blocking state [ 2222.359732][ T2271] bridge0: port 2(bridge_slave_1) entered disabled state [ 2222.366951][ T2271] device bridge_slave_1 entered promiscuous mode [ 2222.375325][ T849] usb 2-1: Using ep0 maxpacket: 32 [ 2222.422069][ T2268] bridge0: port 2(bridge_slave_1) entered blocking state [ 2222.428926][ T2268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2222.436104][ T2268] bridge0: port 1(bridge_slave_0) entered blocking state [ 2222.442873][ T2268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2222.466386][T32495] device bridge_slave_1 left promiscuous mode [ 2222.472355][T32495] bridge0: port 2(bridge_slave_1) entered disabled state [ 2222.479714][T32495] device bridge_slave_0 left promiscuous mode [ 2222.485936][T32495] bridge0: port 1(bridge_slave_0) entered disabled state [ 2222.493432][T32495] device veth1_macvtap left promiscuous mode [ 2222.499404][T32495] device veth0_vlan left promiscuous mode [ 2222.535084][ T849] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 2222.551543][ T849] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0xD has invalid wMaxPacketSize 0 [ 2222.562618][ T849] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2222.569892][ T849] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 2222.579181][ T849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2222.588137][ T849] usb 2-1: config 0 descriptor?? [ 2222.626835][ T849] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2222.650683][ T2269] bridge0: port 2(bridge_slave_1) entered blocking state [ 2222.657548][ T2269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2222.664613][ T2269] bridge0: port 1(bridge_slave_0) entered blocking state [ 2222.671430][ T2269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2222.682682][ T2271] bridge0: port 2(bridge_slave_1) entered blocking state [ 2222.689541][ T2271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2222.696602][ T2271] bridge0: port 1(bridge_slave_0) entered blocking state [ 2222.703395][ T2271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2222.837912][T32665] bridge0: port 1(bridge_slave_0) entered disabled state [ 2222.849120][T32665] bridge0: port 2(bridge_slave_1) entered disabled state [ 2222.864269][T32665] bridge0: port 1(bridge_slave_0) entered disabled state [ 2222.873750][T32665] bridge0: port 2(bridge_slave_1) entered disabled state [ 2222.882170][T32665] bridge0: port 1(bridge_slave_0) entered disabled state [ 2222.896229][T32665] bridge0: port 2(bridge_slave_1) entered disabled state [ 2222.951161][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2222.958551][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2222.965868][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2222.973962][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2222.982218][T32665] bridge0: port 1(bridge_slave_0) entered blocking state [ 2222.989086][T32665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2222.996483][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2223.005672][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2223.014096][T32665] bridge0: port 2(bridge_slave_1) entered blocking state [ 2223.020955][T32665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2223.028543][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2223.037218][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2223.045817][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2223.057403][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2223.158927][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2223.166197][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2223.182377][ T2285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9001'. [ 2223.196623][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2223.203820][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2223.211359][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2223.219684][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2223.228750][T32665] bridge0: port 1(bridge_slave_0) entered blocking state [ 2223.235608][T32665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2223.242887][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2223.251131][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2223.259196][T32665] bridge0: port 2(bridge_slave_1) entered blocking state [ 2223.266033][T32665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2223.273258][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2223.281523][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2223.289611][T32665] bridge0: port 1(bridge_slave_0) entered blocking state [ 2223.296469][T32665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2223.303623][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2223.312206][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2223.320392][T32665] bridge0: port 2(bridge_slave_1) entered blocking state [ 2223.327239][T32665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2223.341260][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2223.349169][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2223.364392][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2223.373246][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2223.383062][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2223.391030][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2223.402594][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2223.410848][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2223.419276][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2223.427435][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2223.440686][ T2271] device veth0_vlan entered promiscuous mode [ 2223.453313][ T2271] device veth1_macvtap entered promiscuous mode [ 2223.475924][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2223.483751][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2223.492230][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2223.501200][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2223.509364][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2223.517125][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2223.525409][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2223.533689][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2223.542120][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2223.551183][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2223.559143][T32665] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2223.568710][T32495] tipc: Disabling bearer [ 2223.573592][T32495] tipc: Left network mode [ 2223.578309][T32495] tipc: Left network mode [ 2223.582607][ T2269] device veth0_vlan entered promiscuous mode [ 2223.590858][T21742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2223.601566][T32665] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 2223.605733][T21742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2223.610033][T32665] Bluetooth: hci0: Frame reassembly failed (-84) [ 2223.617304][T21742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2223.630911][T21742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2223.657836][T21742] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2223.665602][T21742] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2223.673620][T21742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2223.682186][T21742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2223.705742][T21742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2223.713732][T21742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2223.723818][ T2269] device veth1_macvtap entered promiscuous mode [ 2223.734644][T21742] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2223.742229][T21742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2223.750012][T21742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2223.759196][ T2268] device veth0_vlan entered promiscuous mode [ 2223.773459][T21742] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2223.782295][T21742] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2223.804037][ T2268] device veth1_macvtap entered promiscuous mode [ 2223.811255][T21742] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2223.819847][ T2298] FAULT_INJECTION: forcing a failure. [ 2223.819847][ T2298] name failslab, interval 1, probability 0, space 0, times 0 [ 2223.832889][ T2298] CPU: 1 PID: 2298 Comm: syz.4.9011 Tainted: G W 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 2223.833163][T21742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2223.843963][ T2298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2223.843967][ T2298] Call Trace: [ 2223.843986][ T2298] dump_stack_lvl+0x1e2/0x24b [ 2223.843995][ T2298] ? panic+0x812/0x812 [ 2223.844004][ T2298] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2223.844015][ T2298] dump_stack+0x15/0x17 [ 2223.844024][ T2298] should_fail+0x3c6/0x510 [ 2223.844041][ T2298] ? kernfs_fop_open+0x7fa/0xab0 [ 2223.852927][T21742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2223.861774][ T2298] __should_failslab+0xa4/0xe0 [ 2223.861787][ T2298] should_failslab+0x9/0x20 [ 2223.861804][ T2298] kmem_cache_alloc_trace+0x3a/0x2e0 [ 2223.865466][T21742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2223.869403][ T2298] kernfs_fop_open+0x7fa/0xab0 [ 2223.869419][ T2298] ? kernfs_fop_mmap+0x3c0/0x3c0 [ 2223.930509][ T2298] do_dentry_open+0x7c1/0x10d0 [ 2223.935102][ T2298] vfs_open+0x73/0x80 [ 2223.938917][ T2298] path_openat+0x2660/0x3000 [ 2223.943345][ T2298] ? kmem_cache_alloc+0x168/0x2e0 [ 2223.948204][ T2298] ? do_syscall_64+0x34/0x70 [ 2223.952630][ T2298] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2223.958534][ T2298] ? do_filp_open+0x460/0x460 [ 2223.963047][ T2298] do_filp_open+0x21c/0x460 [ 2223.967383][ T2298] ? vfs_tmpfile+0x2b0/0x2b0 [ 2223.971913][ T2298] ? get_unused_fd_flags+0x94/0xa0 [ 2223.976855][ T2298] do_sys_openat2+0x13f/0x710 [ 2223.981367][ T2298] ? do_sys_open+0x220/0x220 [ 2223.985797][ T2298] ? __kasan_check_write+0x14/0x20 [ 2223.990747][ T2298] ? ksys_write+0x260/0x2c0 [ 2223.995080][ T2298] __x64_sys_openat+0x243/0x290 [ 2223.999767][ T2298] ? __ia32_sys_open+0x270/0x270 [ 2224.004541][ T2298] ? irqentry_exit_to_user_mode+0x41/0x80 [ 2224.010355][ T2298] ? irqentry_exit+0x12/0x60 [ 2224.014877][ T2298] ? exc_page_fault+0x33d/0x5b0 [ 2224.019555][ T2298] do_syscall_64+0x34/0x70 [ 2224.023813][ T2298] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2224.029537][ T2298] RIP: 0033:0x7f1ec4c68890 [ 2224.033790][ T2298] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 2224.053228][ T2298] RSP: 002b:00007f1ec38a0f40 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2224.061475][ T2298] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1ec4c68890 [ 2224.069369][ T2298] RDX: 0000000000000000 RSI: 00007f1ec4cdc91c RDI: 00000000ffffff9c [ 2224.077182][ T2298] RBP: 00007f1ec4cdc91c R08: 0000000000000000 R09: 0000000000000000 [ 2224.084995][ T2298] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 2224.092805][ T2298] R13: 0000000000000000 R14: 00007f1ec4e22130 R15: 00007ffdc29f3748 [ 2224.102952][T21742] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2224.111802][T21742] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2224.120311][T21742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2224.139686][T21742] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2224.147943][T21742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2224.164619][T28022] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2224.173552][T28022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2224.233414][ T2303] netlink: 'syz.2.9006': attribute type 27 has an invalid length. [ 2224.251967][ T2303] bridge0: port 2(bridge_slave_1) entered disabled state [ 2224.258934][ T2303] bridge0: port 1(bridge_slave_0) entered disabled state [ 2224.281177][ T2303] FAULT_INJECTION: forcing a failure. [ 2224.281177][ T2303] name failslab, interval 1, probability 0, space 0, times 0 [ 2224.293951][ T2303] CPU: 1 PID: 2303 Comm: syz.2.9006 Tainted: G W 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 2224.305193][ T2303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2224.315077][ T2303] Call Trace: [ 2224.318210][ T2303] dump_stack_lvl+0x1e2/0x24b [ 2224.322721][ T2303] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2224.328013][ T2303] dump_stack+0x15/0x17 [ 2224.332004][ T2303] should_fail+0x3c6/0x510 [ 2224.336257][ T2303] ? __alloc_skb+0x80/0x510 [ 2224.340596][ T2303] __should_failslab+0xa4/0xe0 [ 2224.345204][ T2303] should_failslab+0x9/0x20 [ 2224.349542][ T2303] kmem_cache_alloc+0x3d/0x2e0 [ 2224.354136][ T2303] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 2224.359864][ T2303] __alloc_skb+0x80/0x510 [ 2224.364034][ T2303] ? if_nlmsg_size+0x59c/0x5f0 [ 2224.368631][ T2303] rtmsg_ifinfo_build_skb+0x7f/0x180 [ 2224.373748][ T2303] rtmsg_ifinfo+0x78/0x120 [ 2224.378003][ T2303] __dev_notify_flags+0xdd/0x610 [ 2224.382776][ T2303] ? __kasan_check_read+0x11/0x20 [ 2224.387639][ T2303] ? __dev_change_flags+0x6e0/0x6e0 [ 2224.392676][ T2303] ? __dev_change_flags+0x508/0x6e0 [ 2224.397708][ T2303] ? dev_get_flags+0x1e0/0x1e0 [ 2224.402301][ T2303] ? 0xffffffffa0028000 [ 2224.406296][ T2303] ? is_bpf_text_address+0x172/0x190 [ 2224.411430][ T2303] ? stack_trace_save+0x1c0/0x1c0 [ 2224.416279][ T2303] ? __kernel_text_address+0x9b/0x110 [ 2224.421484][ T2303] dev_change_flags+0xf0/0x1a0 [ 2224.426086][ T2303] do_setlink+0xc5c/0x3c30 [ 2224.430340][ T2303] ? stack_trace_save+0x113/0x1c0 [ 2224.435197][ T2303] ? stack_trace_snprint+0xf0/0xf0 [ 2224.440144][ T2303] ? __kasan_slab_free+0x11/0x20 [ 2224.444925][ T2303] ? rtnetlink_event+0x1b0/0x1b0 [ 2224.449690][ T2303] ? rtnl_newlink+0x100/0x2000 [ 2224.454290][ T2303] ? ____kasan_kmalloc+0xed/0x110 [ 2224.459158][ T2303] ? ____kasan_kmalloc+0xdb/0x110 [ 2224.464011][ T2303] ? __kasan_kmalloc+0x9/0x10 [ 2224.468532][ T2303] ? kmem_cache_alloc_trace+0x18a/0x2e0 [ 2224.473904][ T2303] ? rtnl_newlink+0x100/0x2000 [ 2224.478510][ T2303] ? __nla_validate_parse+0x1e53/0x2700 [ 2224.483892][ T2303] ? __nla_validate+0x50/0x50 [ 2224.488408][ T2303] rtnl_newlink+0x109a/0x2000 [ 2224.492926][ T2303] ? rtnl_setlink+0x530/0x530 [ 2224.497436][ T2303] ? enqueue_task+0x192/0x1450 [ 2224.502055][ T2303] ? ttwu_do_activate+0x1ed/0x2d0 [ 2224.506894][ T2303] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 2224.512544][ T2303] ? __kasan_check_write+0x14/0x20 [ 2224.517570][ T2303] ? mutex_lock+0xa5/0x110 [ 2224.521824][ T2303] ? mutex_trylock+0xa0/0xa0 [ 2224.526243][ T2303] ? rtnl_setlink+0x530/0x530 [ 2224.530755][ T2303] rtnetlink_rcv_msg+0x955/0xc50 [ 2224.535531][ T2303] ? is_bpf_text_address+0x172/0x190 [ 2224.540656][ T2303] ? rtnetlink_bind+0x80/0x80 [ 2224.545163][ T2303] ? arch_stack_walk+0xf3/0x140 [ 2224.549856][ T2303] ? stack_trace_save+0x113/0x1c0 [ 2224.554711][ T2303] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2224.555154][ T5] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 2224.560622][ T2303] ? stack_trace_snprint+0xf0/0xf0 [ 2224.560635][ T2303] ? avc_has_perm+0x14d/0x400 [ 2224.560646][ T2303] ? memcpy+0x56/0x70 [ 2224.560655][ T2303] ? avc_has_perm+0x275/0x400 [ 2224.560664][ T2303] ? __kasan_slab_alloc+0xb1/0xe0 [ 2224.560673][ T2303] ? slab_post_alloc_hook+0x61/0x2f0 [ 2224.560681][ T2303] ? kmem_cache_alloc+0x168/0x2e0 [ 2224.560689][ T2303] ? avc_has_perm_noaudit+0x240/0x240 [ 2224.560700][ T2303] ? iov_iter_advance+0x258/0xb20 [ 2224.560710][ T2303] netlink_rcv_skb+0x1cf/0x410 [ 2224.560719][ T2303] ? rtnetlink_bind+0x80/0x80 [ 2224.560726][ T2303] ? netlink_ack+0xb30/0xb30 [ 2224.560736][ T2303] ? __netlink_lookup+0x37b/0x3a0 [ 2224.560745][ T2303] rtnetlink_rcv+0x1c/0x20 [ 2224.560754][ T2303] netlink_unicast+0x8df/0xac0 [ 2224.560765][ T2303] ? netlink_detachskb+0x90/0x90 [ 2224.560782][ T2303] ? security_netlink_send+0x7b/0xa0 [ 2224.648418][ T2303] netlink_sendmsg+0xa46/0xd00 [ 2224.652998][ T2303] ? netlink_getsockopt+0x5c0/0x5c0 [ 2224.658025][ T2303] ? kmem_cache_free+0xa9/0x1e0 [ 2224.662713][ T2303] ? security_socket_sendmsg+0x82/0xb0 [ 2224.668003][ T2303] ? netlink_getsockopt+0x5c0/0x5c0 [ 2224.673043][ T2303] ____sys_sendmsg+0x59e/0x8f0 [ 2224.677726][ T2303] ? __sys_sendmsg_sock+0x40/0x40 [ 2224.682587][ T2303] ? import_iovec+0xe5/0x120 [ 2224.687022][ T2303] ___sys_sendmsg+0x252/0x2e0 [ 2224.691526][ T2303] ? __sys_sendmsg+0x280/0x280 [ 2224.696128][ T2303] ? rw_verify_area+0x1c3/0x360 [ 2224.700904][ T2303] ? __fdget+0x1bc/0x240 [ 2224.704984][ T2303] __se_sys_sendmsg+0x1b1/0x280 [ 2224.709696][ T2303] ? __x64_sys_sendmsg+0x90/0x90 [ 2224.714437][ T2303] ? ksys_write+0x260/0x2c0 [ 2224.718780][ T2303] ? debug_smp_processor_id+0x17/0x20 [ 2224.723985][ T2303] __x64_sys_sendmsg+0x7b/0x90 [ 2224.728587][ T2303] do_syscall_64+0x34/0x70 [ 2224.732847][ T2303] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2224.738565][ T2303] RIP: 0033:0x7f65e4841ef9 [ 2224.742995][ T2303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2224.762438][ T2303] RSP: 002b:00007f65e34bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2224.770676][ T2303] RAX: ffffffffffffffda RBX: 00007f65e49f9f80 RCX: 00007f65e4841ef9 [ 2224.778487][ T2303] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000009 [ 2224.786301][ T2303] RBP: 00007f65e34bb090 R08: 0000000000000000 R09: 0000000000000000 [ 2224.794107][ T2303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2224.801922][ T2303] R13: 0000000000000000 R14: 00007f65e49f9f80 R15: 00007ffdc3488248 [ 2224.828021][ T2303] bridge0: port 1(bridge_slave_0) entered blocking state [ 2224.834930][ T2303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2224.842985][ T2303] bridge0: port 2(bridge_slave_1) entered blocking state [ 2224.849853][ T2303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2224.863063][ T5] usb 1-1: Using ep0 maxpacket: 32 [ 2224.876811][ T796] usb 2-1: USB disconnect, device number 79 [ 2224.881351][ T2303] device veth0_vlan left promiscuous mode [ 2224.889904][ T2303] device veth0_vlan entered promiscuous mode [ 2224.897074][ T2303] device veth1_macvtap left promiscuous mode [ 2224.903916][ T2303] device veth1_macvtap entered promiscuous mode [ 2224.921141][T28022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2224.929197][T28022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2224.936981][T28022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2224.956286][T28022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2224.964633][T28022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2224.973369][T28022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2224.982577][T28022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2224.990597][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2225.002006][T28022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2225.004951][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2225.010238][T28022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2225.019952][ T5] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 2225.027765][T28022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2225.037002][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2225.044348][T28022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2225.055086][ T5] usb 1-1: config 0 descriptor?? [ 2225.060104][T28022] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 2225.073260][T28022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2225.082104][T28022] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 2225.409528][T28022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2225.453583][T28022] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2225.469352][T28022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2225.479822][T28022] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2225.490401][T28022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2225.605714][T32495] device bridge_slave_1 left promiscuous mode [ 2225.611721][T32495] bridge0: port 2(bridge_slave_1) entered disabled state [ 2225.619030][T32495] device bridge_slave_0 left promiscuous mode [ 2225.625150][T32495] bridge0: port 1(bridge_slave_0) entered disabled state [ 2225.633215][T32495] device bridge_slave_1 left promiscuous mode [ 2225.639430][T10168] Bluetooth: hci0: command 0x1003 tx timeout [ 2225.639533][T32495] bridge0: port 2(bridge_slave_1) entered disabled state [ 2225.645340][ T2292] Bluetooth: hci0: sending frame failed (-49) [ 2225.658182][T32495] device bridge_slave_0 left promiscuous mode [ 2225.664169][T32495] bridge0: port 1(bridge_slave_0) entered disabled state [ 2225.672414][T32495] device veth1_macvtap left promiscuous mode [ 2225.678443][T32495] device veth0_vlan left promiscuous mode [ 2225.684381][T32495] device wg0 left promiscuous mode [ 2225.689631][T32495] device veth1_macvtap left promiscuous mode [ 2225.695533][T32495] device veth0_vlan left promiscuous mode [ 2225.779553][ T24] kauditd_printk_skb: 51 callbacks suppressed [ 2225.779564][ T24] audit: type=1326 audit(1726257937.192:13637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2318 comm="syz.1.9016" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1fa4aaef9 code=0x0 [ 2225.889990][ T2324] syz.1.9016[2324] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2225.890028][ T2324] syz.1.9016[2324] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2225.903799][ T24] audit: type=1326 audit(1726257937.312:13638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2318 comm="syz.1.9016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fa4aaef9 code=0x7ffc0000 [ 2225.938699][ T24] audit: type=1326 audit(1726257937.312:13639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2318 comm="syz.1.9016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fa4aaef9 code=0x7ffc0000 [ 2225.965534][ T24] audit: type=1326 audit(1726257937.312:13640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2318 comm="syz.1.9016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1fa4aaef9 code=0x7ffc0000 [ 2226.030827][ T24] audit: type=1326 audit(1726257937.312:13641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2318 comm="syz.1.9016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fa4aaef9 code=0x7ffc0000 [ 2226.055105][ T796] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 2226.064421][ T24] audit: type=1326 audit(1726257937.312:13642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2318 comm="syz.1.9016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fa4aaef9 code=0x7ffc0000 [ 2226.088683][ T24] audit: type=1326 audit(1726257937.312:13643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2318 comm="syz.1.9016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1fa4aaef9 code=0x7ffc0000 [ 2226.112168][ T24] audit: type=1326 audit(1726257937.312:13644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2318 comm="syz.1.9016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fa4aaef9 code=0x7ffc0000 [ 2226.135848][ T5] usbhid 1-1:0.0: can't add hid device: -71 [ 2226.135932][ T24] audit: type=1326 audit(1726257937.312:13645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2318 comm="syz.1.9016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1fa4aaef9 code=0x7ffc0000 [ 2226.141845][ T5] usbhid: probe of 1-1:0.0 failed with error -71 [ 2226.165563][ T24] audit: type=1326 audit(1726257937.312:13646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2318 comm="syz.1.9016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1fa4aaef9 code=0x7ffc0000 [ 2226.176428][ T5] usb 1-1: USB disconnect, device number 82 [ 2226.314974][ T796] usb 3-1: Using ep0 maxpacket: 16 [ 2226.435263][ T796] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2226.445733][ T796] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2226.454414][ T796] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2226.625092][ T796] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2226.634423][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2226.642295][ T796] usb 3-1: Product: syz [ 2226.646334][ T796] usb 3-1: Manufacturer: syz [ 2226.650737][ T796] usb 3-1: SerialNumber: syz [ 2226.672937][ T2333] FAULT_INJECTION: forcing a failure. [ 2226.672937][ T2333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2226.685988][ T2333] CPU: 0 PID: 2333 Comm: syz.4.9020 Tainted: G W 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 2226.697066][ T2333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2226.706953][ T2333] Call Trace: [ 2226.710090][ T2333] dump_stack_lvl+0x1e2/0x24b [ 2226.714591][ T2333] ? panic+0x812/0x812 [ 2226.718500][ T2333] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2226.723793][ T2333] dump_stack+0x15/0x17 [ 2226.727783][ T2333] should_fail+0x3c6/0x510 [ 2226.732037][ T2333] should_fail_usercopy+0x1a/0x20 [ 2226.736897][ T2333] strncpy_from_user+0x24/0x2d0 [ 2226.741586][ T2333] ? getname_flags+0xba/0x520 [ 2226.746097][ T2333] getname_flags+0xf2/0x520 [ 2226.750438][ T2333] user_path_at_empty+0x2d/0x50 [ 2226.755124][ T2333] do_fchownat+0xec/0x240 [ 2226.759290][ T2333] ? chown_common+0x640/0x640 [ 2226.763804][ T2333] ? __secure_computing+0xf0/0x300 [ 2226.768751][ T2333] __x64_sys_fchownat+0xbf/0xd0 [ 2226.773439][ T2333] do_syscall_64+0x34/0x70 [ 2226.777694][ T2333] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2226.783416][ T2333] RIP: 0033:0x7f1ec4c69ef9 [ 2226.787674][ T2333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2226.807112][ T2333] RSP: 002b:00007f1ec38e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000104 [ 2226.815359][ T2333] RAX: ffffffffffffffda RBX: 00007f1ec4e21f80 RCX: 00007f1ec4c69ef9 [ 2226.823168][ T2333] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 2226.830980][ T2333] RBP: 00007f1ec38e3090 R08: 0000000000000000 R09: 0000000000000000 [ 2226.838788][ T2333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2226.846602][ T2333] R13: 0000000000000000 R14: 00007f1ec4e21f80 R15: 00007ffdc29f3748 [ 2227.005040][ T944] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 2227.035012][T12231] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 2227.289855][ T2339] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 2227.425070][ T944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2227.435846][T12231] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2227.447489][ T944] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2227.460151][T12231] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 2227.471339][T12231] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 2227.480439][ T944] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2227.489478][T12231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2227.497400][ T944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2227.506653][T12231] usb 2-1: config 0 descriptor?? [ 2227.511680][ T944] usb 1-1: config 0 descriptor?? [ 2227.525067][ T2331] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 2227.715991][T32336] Bluetooth: hci0: command 0x1001 tx timeout [ 2227.721919][ T2292] Bluetooth: hci0: sending frame failed (-49) [ 2228.046824][T12231] dragonrise 0003:0079:0006.00BE: item fetching failed at offset 2/5 [ 2228.055258][T12231] dragonrise 0003:0079:0006.00BE: parse failed [ 2228.061264][T12231] dragonrise: probe of 0003:0079:0006.00BE failed with error -22 [ 2228.254679][T12231] usb 2-1: USB disconnect, device number 80 [ 2228.905291][ T796] usb 3-1: 0:2 : does not exist [ 2228.995102][T12231] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 2229.010277][ T796] usb 3-1: USB disconnect, device number 120 [ 2229.185125][ T2365] FAULT_INJECTION: forcing a failure. [ 2229.185125][ T2365] name failslab, interval 1, probability 0, space 0, times 0 [ 2229.197635][ T2365] CPU: 1 PID: 2365 Comm: syz.1.9027 Tainted: G W 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 2229.208622][ T2365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2229.218513][ T2365] Call Trace: [ 2229.221646][ T2365] dump_stack_lvl+0x1e2/0x24b [ 2229.226156][ T2365] ? panic+0x812/0x812 [ 2229.230059][ T2365] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2229.235624][ T2365] dump_stack+0x15/0x17 [ 2229.239607][ T2365] should_fail+0x3c6/0x510 [ 2229.243863][ T2365] ? __alloc_skb+0x80/0x510 [ 2229.248208][ T2365] __should_failslab+0xa4/0xe0 [ 2229.252802][ T2365] should_failslab+0x9/0x20 [ 2229.257145][ T2365] kmem_cache_alloc+0x3d/0x2e0 [ 2229.261742][ T2365] ? __kernel_text_address+0x9b/0x110 [ 2229.266955][ T2365] __alloc_skb+0x80/0x510 [ 2229.271116][ T2365] ? arch_stack_walk+0xf3/0x140 [ 2229.275815][ T2365] alloc_skb_with_frags+0xa1/0x570 [ 2229.280753][ T2365] ? terminate_walk+0x407/0x4f0 [ 2229.285436][ T2365] tcp_send_rcvq+0x179/0x600 [ 2229.289882][ T2365] ? sk_wake_async+0xc0/0xc0 [ 2229.294300][ T2365] ? kmem_cache_free+0xa9/0x1e0 [ 2229.298984][ T2365] ? __kasan_check_read+0x11/0x20 [ 2229.303835][ T2365] ? tcp_rate_check_app_limited+0x1f3/0x370 [ 2229.309563][ T2365] tcp_sendmsg_locked+0x359f/0x3ae0 [ 2229.314599][ T2365] ? avc_has_perm+0x275/0x400 [ 2229.319111][ T2365] ? _kstrtoull+0x3a0/0x4a0 [ 2229.323448][ T2365] ? kstrtouint_from_user+0x20a/0x2a0 [ 2229.328662][ T2365] ? __kasan_check_write+0x14/0x20 [ 2229.333609][ T2365] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 2229.338730][ T2365] ? local_bh_enable+0x1f/0x30 [ 2229.343326][ T2365] ? lock_sock_nested+0x26a/0x300 [ 2229.348194][ T2365] ? selinux_socket_accept+0x5b0/0x5b0 [ 2229.353585][ T2365] ? tcp_free_fastopen_req+0x80/0x80 [ 2229.358814][ T2365] tcp_sendmsg+0x2f/0x50 [ 2229.362969][ T2365] inet6_sendmsg+0xa1/0xc0 [ 2229.367220][ T2365] ? inet6_compat_ioctl+0x4e0/0x4e0 [ 2229.372254][ T2365] __sys_sendto+0x545/0x700 [ 2229.376597][ T2365] ? __kasan_check_write+0x14/0x20 [ 2229.381549][ T2365] ? __ia32_sys_getpeername+0x90/0x90 [ 2229.386757][ T2365] ? __ia32_sys_read+0x90/0x90 [ 2229.391375][ T2365] __x64_sys_sendto+0xe5/0x100 [ 2229.395956][ T2365] do_syscall_64+0x34/0x70 [ 2229.400213][ T2365] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2229.405935][ T2365] RIP: 0033:0x7fa1fa4aaef9 [ 2229.410187][ T2365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2229.429624][ T2365] RSP: 002b:00007fa1f9124038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2229.437868][ T2365] RAX: ffffffffffffffda RBX: 00007fa1fa662f80 RCX: 00007fa1fa4aaef9 [ 2229.445678][ T2365] RDX: fffffffffffffd79 RSI: 00000000200002c0 RDI: 0000000000000003 [ 2229.453488][ T2365] RBP: 00007fa1f9124090 R08: 0000000000000000 R09: 0000000000000000 [ 2229.461301][ T2365] R10: 000000002000c850 R11: 0000000000000246 R12: 0000000000000001 [ 2229.469112][ T2365] R13: 0000000000000000 R14: 00007fa1fa662f80 R15: 00007ffd6bf05468 [ 2229.487513][ T2368] FAULT_INJECTION: forcing a failure. [ 2229.487513][ T2368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2229.500458][ T2368] CPU: 0 PID: 2368 Comm: syz.1.9028 Tainted: G W 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 2229.511449][ T2368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2229.521341][ T2368] Call Trace: [ 2229.524487][ T2368] dump_stack_lvl+0x1e2/0x24b [ 2229.525011][T12231] usb 5-1: Using ep0 maxpacket: 16 [ 2229.528993][ T2368] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2229.529005][ T2368] ? kmem_cache_free+0xa9/0x1e0 [ 2229.529015][ T2368] dump_stack+0x15/0x17 [ 2229.529024][ T2368] should_fail+0x3c6/0x510 [ 2229.529040][ T2368] should_fail_usercopy+0x1a/0x20 [ 2229.557028][ T2368] _copy_from_user+0x20/0xd0 [ 2229.561456][ T2368] __sys_connect+0x137/0x410 [ 2229.565871][ T2368] ? fput_many+0x160/0x1b0 [ 2229.570128][ T2368] ? __sys_connect_file+0x170/0x170 [ 2229.575169][ T2368] ? debug_smp_processor_id+0x17/0x20 [ 2229.580364][ T2368] __x64_sys_connect+0x7a/0x90 [ 2229.584972][ T2368] do_syscall_64+0x34/0x70 [ 2229.589219][ T2368] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2229.594946][ T2368] RIP: 0033:0x7fa1fa4aaef9 [ 2229.599195][ T2368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2229.618639][ T2368] RSP: 002b:00007fa1f9124038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2229.626884][ T2368] RAX: ffffffffffffffda RBX: 00007fa1fa662f80 RCX: 00007fa1fa4aaef9 [ 2229.634692][ T2368] RDX: 000000000000002a RSI: 0000000020000180 RDI: 0000000000000003 [ 2229.642508][ T2368] RBP: 00007fa1f9124090 R08: 0000000000000000 R09: 0000000000000000 [ 2229.645034][T12231] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 2229.650320][ T2368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2229.650328][ T2368] R13: 0000000000000000 R14: 00007fa1fa662f80 R15: 00007ffd6bf05468 [ 2229.677098][T12231] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 2229.686894][T12231] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 2229.696690][T12231] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2229.710589][T12231] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 2229.724336][T12231] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2229.731745][T12231] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 2229.741040][T12231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2229.785700][ T944] usbhid 1-1:0.0: can't add hid device: -71 [ 2229.791504][ T944] usbhid: probe of 1-1:0.0 failed with error -71 [ 2229.801183][ T944] usb 1-1: USB disconnect, device number 83 [ 2229.805140][ T5] Bluetooth: hci0: command 0x1009 tx timeout [ 2229.913851][T12231] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 2230.041962][ T2382] fuse: Unknown parameter '0x0000000000000007' [ 2230.582005][T12231] scsi host1: usb-storage 5-1:1.0 [ 2231.206410][ T2395] tipc: Started in network mode [ 2231.214422][ T2395] tipc: Own node identity 00000000000000000000000000000001, cluster identity 4711 [ 2231.236155][ T2395] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 2231.259668][ T2395] tipc: Enabled bearer , priority 10 [ 2231.460391][ T2396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9034'. [ 2231.514173][ T2396] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9034'. [ 2231.530205][ T2400] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 2231.540358][ T24] kauditd_printk_skb: 28 callbacks suppressed [ 2231.540370][ T24] audit: type=1400 audit(1726257942.942:13675): avc: denied { mounton } for pid=2399 comm="syz.0.9036" path="/proc/16/task" dev="proc" ino=162391 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 2231.636551][ T796] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 2232.075097][ T24] audit: type=1400 audit(1726257943.412:13676): avc: denied { mount } for pid=2409 comm="syz.1.9039" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 2232.224193][ T2406] syz.0.9037[2406] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2232.224244][ T2406] syz.0.9037[2406] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2232.375056][T12231] tipc: 32-bit node address hash set to 1000000 [ 2232.392628][ T796] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 2232.594657][ T24] audit: type=1400 audit(1726257944.002:13677): avc: denied { setopt } for pid=2427 comm="syz.0.9044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2232.614723][ T24] audit: type=1400 audit(1726257944.012:13678): avc: denied { write } for pid=2427 comm="syz.0.9044" path="socket:[163045]" dev="sockfs" ino=163045 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2232.639240][ T796] usb 3-1: Using ep0 maxpacket: 16 [ 2232.765042][ T796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2232.775909][ T796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2232.785752][ T796] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2232.798784][ T796] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2232.807881][ T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2232.819828][ T796] usb 3-1: config 0 descriptor?? [ 2233.035338][T28632] usb 5-1: USB disconnect, device number 105 [ 2233.075962][T32495] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=0x07 driverbyte=0x00 [ 2233.085735][T32495] sd 1:0:0:0: [sdb] Sense not available. [ 2233.091301][T32495] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 2233.098440][T32495] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 2233.104183][T32495] sd 1:0:0:0: [sdb] Write Protect is off [ 2233.110105][T32495] sd 1:0:0:0: [sdb] Asking for cache data failed [ 2233.116526][T32495] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 2233.139506][T32495] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=0x07 driverbyte=0x00 [ 2233.149641][T32495] sd 1:0:0:0: [sdb] Sense not available. [ 2233.155264][T32495] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 2233.185921][ T512] udevd[512]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 2233.575768][ T796] microsoft 0003:045E:07DA.00BF: unknown main item tag 0x0 [ 2233.582817][ T796] microsoft 0003:045E:07DA.00BF: unknown main item tag 0x0 [ 2233.592058][ T796] microsoft 0003:045E:07DA.00BF: unknown main item tag 0x0 [ 2233.614983][ T796] microsoft 0003:045E:07DA.00BF: unknown main item tag 0x0 [ 2233.622025][ T796] microsoft 0003:045E:07DA.00BF: unknown main item tag 0x0 [ 2233.644051][ T796] microsoft 0003:045E:07DA.00BF: unknown main item tag 0x0 [ 2233.651242][ T796] microsoft 0003:045E:07DA.00BF: unknown main item tag 0x0 [ 2233.658424][ T796] microsoft 0003:045E:07DA.00BF: unknown main item tag 0x0 [ 2233.665673][ T796] microsoft 0003:045E:07DA.00BF: unknown main item tag 0x0 [ 2233.672703][ T796] microsoft 0003:045E:07DA.00BF: unknown main item tag 0x0 [ 2233.684271][ T796] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.00BF/input/input154 [ 2233.696418][ T24] audit: type=1400 audit(1726257945.112:13679): avc: denied { read } for pid=78 comm="acpid" name="event3" dev="devtmpfs" ino=12860 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2233.725141][ T24] audit: type=1400 audit(1726257945.112:13680): avc: denied { open } for pid=78 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=12860 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2233.726436][ T796] microsoft 0003:045E:07DA.00BF: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 2233.765161][ T24] audit: type=1400 audit(1726257945.182:13681): avc: denied { ioctl } for pid=78 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=12860 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2233.794398][ T796] usb 3-1: USB disconnect, device number 121 [ 2233.818396][ T2450] bridge0: port 1(bridge_slave_0) entered blocking state [ 2233.825348][ T2450] bridge0: port 1(bridge_slave_0) entered disabled state [ 2233.832599][ T2450] device bridge_slave_0 entered promiscuous mode [ 2233.840016][ T2450] bridge0: port 2(bridge_slave_1) entered blocking state [ 2233.846963][ T2450] bridge0: port 2(bridge_slave_1) entered disabled state [ 2233.854373][ T2450] device bridge_slave_1 entered promiscuous mode [ 2233.905755][ T2450] bridge0: port 2(bridge_slave_1) entered blocking state [ 2233.912787][ T2450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2233.919958][ T2450] bridge0: port 1(bridge_slave_0) entered blocking state [ 2233.926833][ T2450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2233.948210][ T2447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9048'. [ 2233.958200][ T2447] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9048'. [ 2233.971421][T32495] bridge0: port 1(bridge_slave_0) entered disabled state [ 2233.979787][T32495] bridge0: port 2(bridge_slave_1) entered disabled state [ 2233.987172][T32495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2233.994560][T32495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2234.022142][T28022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2234.030708][T28022] bridge0: port 1(bridge_slave_0) entered blocking state [ 2234.037559][T28022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2234.046080][T28022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2234.054103][T28022] bridge0: port 2(bridge_slave_1) entered blocking state [ 2234.060959][T28022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2234.071107][ T24] audit: type=1400 audit(1726257945.482:13682): avc: denied { read } for pid=2456 comm="syz.1.9051" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 2234.094389][T28022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2234.094441][ T24] audit: type=1400 audit(1726257945.482:13683): avc: denied { open } for pid=2456 comm="syz.1.9051" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 2234.102624][T28022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2234.133432][ T2459] FAULT_INJECTION: forcing a failure. [ 2234.133432][ T2459] name failslab, interval 1, probability 0, space 0, times 0 [ 2234.143766][T28022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2234.146220][ T2459] CPU: 1 PID: 2459 Comm: syz.4.9050 Tainted: G W 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 2234.164828][ T2459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2234.174711][ T2459] Call Trace: [ 2234.177848][ T2459] dump_stack_lvl+0x1e2/0x24b [ 2234.182354][ T2459] ? panic+0x812/0x812 [ 2234.186259][ T2459] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2234.191554][ T2459] ? fuse_permission+0x1c59/0x54c0 [ 2234.196507][ T2459] ? __kasan_check_write+0x14/0x20 [ 2234.201450][ T2459] dump_stack+0x15/0x17 [ 2234.205459][ T2459] should_fail+0x3c6/0x510 [ 2234.209703][ T2459] ? fuse_alloc_forget+0x46/0x50 [ 2234.214466][ T2459] __should_failslab+0xa4/0xe0 [ 2234.219066][ T2459] should_failslab+0x9/0x20 [ 2234.223453][ T2459] kmem_cache_alloc_trace+0x3a/0x2e0 [ 2234.228528][ T2459] fuse_alloc_forget+0x46/0x50 [ 2234.233131][ T2459] create_new_entry+0xcd/0x540 [ 2234.237739][ T2459] ? sidtab_context_to_sid+0x81/0xc60 [ 2234.243023][ T2459] ? fuse_atomic_open+0x34e0/0x34e0 [ 2234.248055][ T2459] ? policydb_context_isvalid+0x1de/0x430 [ 2234.253615][ T2459] ? ebitmap_destroy+0x4b/0xe0 [ 2234.258211][ T2459] ? security_compute_sid+0x1dcb/0x1f30 [ 2234.263591][ T2459] fuse_mkdir+0x3ff/0x2650 [ 2234.267851][ T2459] ? fuse_symlink+0x2470/0x2470 [ 2234.272531][ T2459] ? security_transition_sid+0x90/0x90 [ 2234.277822][ T2459] ? __kasan_slab_free+0x11/0x20 [ 2234.282726][ T2459] ? avc_has_perm+0x275/0x400 [ 2234.287241][ T2459] ? may_create+0x65a/0x900 [ 2234.291591][ T2459] ? show_sid+0x250/0x250 [ 2234.295742][ T2459] ? kmem_cache_free+0xa9/0x1e0 [ 2234.300427][ T2459] ? filename_create+0x4ba/0x750 [ 2234.305291][ T2459] ? selinux_inode_mkdir+0x22/0x30 [ 2234.310238][ T2459] ? security_inode_mkdir+0xbc/0x100 [ 2234.315366][ T2459] vfs_mkdir+0x4cf/0x6c0 [ 2234.319438][ T2459] do_mkdirat+0x1a6/0x2c0 [ 2234.323613][ T2459] ? do_mknodat+0x450/0x450 [ 2234.327943][ T2459] ? debug_smp_processor_id+0x17/0x20 [ 2234.333150][ T2459] __x64_sys_mkdir+0x60/0x70 [ 2234.337587][ T2459] do_syscall_64+0x34/0x70 [ 2234.341846][ T2459] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2234.347568][ T2459] RIP: 0033:0x7f1ec4c69ef9 [ 2234.351810][ T2459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2234.371252][ T2459] RSP: 002b:00007f1ec38c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2234.379494][ T2459] RAX: ffffffffffffffda RBX: 00007f1ec4e22058 RCX: 00007f1ec4c69ef9 [ 2234.387311][ T2459] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 2234.395119][ T2459] RBP: 00007f1ec38c2090 R08: 0000000000000000 R09: 0000000000000000 [ 2234.402929][ T2459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2234.410738][ T2459] R13: 0000000000000000 R14: 00007f1ec4e22058 R15: 00007ffdc29f3748 [ 2234.429237][ T2450] device veth0_vlan entered promiscuous mode [ 2234.453006][T28022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2234.478033][T28022] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2234.486581][T28022] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2234.498191][ T2450] device veth1_macvtap entered promiscuous mode [ 2234.505435][T28022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2234.520445][T28022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2234.540668][T28022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2235.644600][ T24] audit: type=1400 audit(1726257947.052:13684): avc: denied { bind } for pid=2487 comm="syz.0.9059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2236.221835][ T2498] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9059'. [ 2236.280365][ T2503] netlink: 'syz.1.9063': attribute type 4 has an invalid length. [ 2236.303208][ T2503] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2236.566127][T28022] device bridge_slave_1 left promiscuous mode [ 2236.573490][T28022] bridge0: port 2(bridge_slave_1) entered disabled state [ 2236.583334][ T24] kauditd_printk_skb: 2 callbacks suppressed [ 2236.583353][ T24] audit: type=1400 audit(1726257948.002:13687): avc: denied { watch watch_reads } for pid=2504 comm="syz.1.9064" path="/26" dev="tmpfs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2236.638026][T28022] device bridge_slave_0 left promiscuous mode [ 2236.646892][T28022] bridge0: port 1(bridge_slave_0) entered disabled state [ 2236.665248][T28022] device veth1_macvtap left promiscuous mode [ 2236.673353][T28022] device veth0_vlan left promiscuous mode [ 2236.831771][ T24] audit: type=1326 audit(1726257948.242:13688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2512 comm="syz.0.9066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca86340ef9 code=0x7ffc0000 [ 2236.940954][ T24] audit: type=1326 audit(1726257948.242:13689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2512 comm="syz.0.9066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca86340ef9 code=0x7ffc0000 [ 2236.993752][ T24] audit: type=1326 audit(1726257948.242:13690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2512 comm="syz.0.9066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca86340ef9 code=0x7ffc0000 [ 2237.029842][ T2493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9060'. [ 2237.041891][ T2511] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9060'. [ 2237.095450][ T24] audit: type=1326 audit(1726257948.242:13691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2512 comm="syz.0.9066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca86340ef9 code=0x7ffc0000 [ 2237.213493][ T24] audit: type=1326 audit(1726257948.242:13692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2512 comm="syz.0.9066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca86340ef9 code=0x7ffc0000 [ 2237.250672][ T24] audit: type=1326 audit(1726257948.242:13693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2512 comm="syz.0.9066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca86340ef9 code=0x7ffc0000 [ 2237.275607][ T24] audit: type=1326 audit(1726257948.242:13694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2512 comm="syz.0.9066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca86340ef9 code=0x7ffc0000 [ 2237.306391][ T24] audit: type=1326 audit(1726257948.242:13695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2512 comm="syz.0.9066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca86340ef9 code=0x7ffc0000 [ 2237.344336][ T24] audit: type=1326 audit(1726257948.242:13696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2512 comm="syz.0.9066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7fca86340ef9 code=0x7ffc0000 [ 2237.645082][ T2534] loop_set_status: loop3 () has still dirty pages (nrpages=2) [ 2239.604021][ T2564] netlink: 'syz.0.9082': attribute type 4 has an invalid length. [ 2239.765328][ T2576] loop_set_status: loop3 () has still dirty pages (nrpages=2) [ 2240.534945][ T53] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 2240.670654][ T2606] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 2240.809465][ T2613] bridge0: port 1(bridge_slave_0) entered blocking state [ 2240.816413][ T2613] bridge0: port 1(bridge_slave_0) entered disabled state [ 2240.823571][ T2613] device bridge_slave_0 entered promiscuous mode [ 2240.832831][ T2613] bridge0: port 2(bridge_slave_1) entered blocking state [ 2240.840083][ T2613] bridge0: port 2(bridge_slave_1) entered disabled state [ 2240.847672][ T2613] device bridge_slave_1 entered promiscuous mode [ 2240.898129][ T2613] bridge0: port 2(bridge_slave_1) entered blocking state [ 2240.905003][ T2613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2240.912088][ T2613] bridge0: port 1(bridge_slave_0) entered blocking state [ 2240.918972][ T2613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2240.926420][ T53] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2240.937699][ T53] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2240.947504][ T53] usb 1-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 2240.957804][ T53] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2240.965762][T28632] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 2240.985680][ T53] usb 1-1: config 0 descriptor?? [ 2240.999649][T28022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2241.009197][T28022] bridge0: port 1(bridge_slave_0) entered disabled state [ 2241.017450][T28022] bridge0: port 2(bridge_slave_1) entered disabled state [ 2241.037706][T28022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2241.046811][T28022] bridge0: port 1(bridge_slave_0) entered blocking state [ 2241.053666][T28022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2241.062122][T28022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2241.070565][T28022] bridge0: port 2(bridge_slave_1) entered blocking state [ 2241.077439][T28022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2241.095666][T28022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2241.103496][T28022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2241.119060][T28022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2241.128447][T28022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2241.137025][T28022] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2241.151123][T28022] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2241.162090][ T2613] device veth0_vlan entered promiscuous mode [ 2241.173724][T28022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2241.183527][ T2613] device veth1_macvtap entered promiscuous mode [ 2241.194343][T28022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2241.207891][T28022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2241.275799][T32495] device bridge_slave_1 left promiscuous mode [ 2241.281880][T32495] bridge0: port 2(bridge_slave_1) entered disabled state [ 2241.289615][T32495] device bridge_slave_0 left promiscuous mode [ 2241.296136][T32495] bridge0: port 1(bridge_slave_0) entered disabled state [ 2241.304030][T32495] device veth1_macvtap left promiscuous mode [ 2241.310055][T32495] device veth0_vlan left promiscuous mode [ 2241.345007][T28632] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2241.359094][T28632] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 2241.375659][T28632] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 2241.386653][T28632] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2241.414367][T28632] usb 2-1: config 0 descriptor?? [ 2241.483885][ T53] wacom 0003:056A:0325.00C0: unbalanced delimiter at end of report description [ 2241.509568][ T53] wacom 0003:056A:0325.00C0: parse failed [ 2241.516452][ T53] wacom: probe of 0003:056A:0325.00C0 failed with error -22 [ 2241.685629][ T2596] udc-core: couldn't find an available UDC or it's busy [ 2241.692617][ T2596] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2241.702532][ T944] usb 1-1: USB disconnect, device number 84 [ 2242.583834][ T2648] binder: 2634:2648 ioctl c018620c 20000140 returned -22 [ 2243.415536][ T2650] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 2243.424972][ T2650] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2243.735055][ T2667] binder: 2654:2667 ioctl c0306201 0 returned -14 [ 2243.747362][ T24] kauditd_printk_skb: 24 callbacks suppressed [ 2243.747404][ T24] audit: type=1400 audit(2000000003.760:13721): avc: denied { set_context_mgr } for pid=2654 comm="syz.3.9114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2243.865264][ T2668] 9pnet: Insufficient options for proto=fd [ 2243.874726][T28775] usb 2-1: USB disconnect, device number 81 [ 2243.900196][ T24] audit: type=1400 audit(2000000003.930:13722): avc: denied { connect } for pid=2671 comm="syz.2.9119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2244.365240][ T2681] loop_set_status: loop2 () has still dirty pages (nrpages=1) [ 2245.136253][ T24] audit: type=1400 audit(2000000005.170:13723): avc: denied { read } for pid=2702 comm="syz.4.9132" name="uinput" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2245.160888][ T2703] input: syz0 as /devices/virtual/input/input155 [ 2245.171852][ T24] audit: type=1400 audit(2000000005.170:13724): avc: denied { create } for pid=2699 comm="syz.0.9130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2245.192125][ T24] audit: type=1400 audit(2000000005.190:13725): avc: denied { ioctl } for pid=2702 comm="syz.4.9132" path="/dev/uinput" dev="devtmpfs" ino=165 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2245.673801][ T24] audit: type=1400 audit(2000000005.700:13726): avc: denied { append } for pid=2727 comm="syz.4.9139" name="001" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 2248.745648][ T24] audit: type=1400 audit(2000000008.780:13727): avc: denied { map } for pid=2745 comm="syz.4.9145" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2248.745713][ T2746] binder: BINDER_SET_CONTEXT_MGR already set [ 2248.775228][ T2746] binder: 2745:2746 ioctl 4018620d 200001c0 returned -16 [ 2248.869114][ T24] audit: type=1400 audit(2000000008.900:13728): avc: denied { setopt } for pid=2742 comm="syz.2.9143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2249.902885][ T24] audit: type=1326 audit(2000000009.930:13729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2769 comm="syz.1.9152" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1fa4aaef9 code=0x0 [ 2250.258344][ T2774] input: syz0 as /devices/virtual/input/input156 [ 2250.264575][ T2774] input: failed to attach handler leds to device input156, error: -6 [ 2250.347426][ T24] audit: type=1400 audit(2000000010.380:13730): avc: denied { setopt } for pid=2773 comm="syz.3.9153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2250.684089][T32336] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 2251.006556][ T2785] fuse: root generation should be zero [ 2251.095124][T32336] usb 1-1: config 0 has no interfaces? [ 2251.285071][T32336] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 2251.513538][T32336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2251.521422][T32336] usb 1-1: Product: syz [ 2251.525350][T32336] usb 1-1: Manufacturer: syz [ 2251.529784][T32336] usb 1-1: SerialNumber: syz [ 2251.542490][T32336] usb 1-1: config 0 descriptor?? [ 2251.788391][ T2813] overlayfs: failed to resolve './file0': -2 [ 2252.093519][ T24] audit: type=1400 audit(2000000012.110:13731): avc: denied { connect } for pid=2815 comm="syz.1.9166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2252.564964][T27937] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 2252.790100][ T24] audit: type=1400 audit(2000000012.810:13732): avc: denied { write } for pid=2828 comm="syz.4.9170" name="rtc0" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2252.901449][T27937] usb 4-1: Using ep0 maxpacket: 16 [ 2253.145100][T27937] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2253.155992][T27937] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2253.165563][T27937] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2253.178321][T27937] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2253.187219][T27937] usb 4-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 2253.204992][T27937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2253.214405][T27937] usb 4-1: config 0 descriptor?? [ 2253.632867][T28775] usb 1-1: USB disconnect, device number 85 [ 2253.784229][ T24] audit: type=1400 audit(2000000013.810:13733): avc: denied { bind } for pid=2856 comm="syz.4.9179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2253.958425][ T24] audit: type=1400 audit(2000000013.840:13734): avc: denied { write } for pid=2856 comm="syz.4.9179" path="socket:[165012]" dev="sockfs" ino=165012 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2253.999574][T27937] hid-generic 0003:045E:05DA.00C1: ignoring exceeding usage max [ 2254.010721][T27937] hid-generic 0003:045E:05DA.00C1: hidraw0: USB HID v0.00 Device [HID 045e:05da] on usb-dummy_hcd.3-1/input0 [ 2254.024355][ T24] audit: type=1400 audit(2000000013.840:13735): avc: denied { accept } for pid=2856 comm="syz.4.9179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2254.045376][ T24] audit: type=1400 audit(2000000013.840:13736): avc: denied { read } for pid=2856 comm="syz.4.9179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2254.177282][T28775] usb 4-1: USB disconnect, device number 115 [ 2258.073331][ T2865] bridge0: port 2(bridge_slave_1) entered disabled state [ 2386.023438][ T26] INFO: task kworker/u4:4:28022 blocked for more than 125 seconds. [ 2387.034884][ T26] Tainted: G W 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 2387.043553][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2394.064865][ T26] task:kworker/u4:4 state:D stack: 0 pid:28022 ppid: 2 flags:0x10004000 [ 2394.073904][ T26] Workqueue: netns cleanup_net [ 2397.056705][ T26] Call Trace: [ 2397.059856][ T26] __schedule+0xbe6/0x1330 [ 2397.064075][ T26] ? release_firmware_map_entry+0x18d/0x18d [ 2399.044910][ T26] ? __mutex_add_waiter+0xe4/0x310 [ 2399.049861][ T26] ? kthread_data+0x53/0xc0 [ 2399.054192][ T26] ? wq_worker_sleeping+0x63/0x200 [ 2403.064874][ T26] schedule+0x13d/0x1d0 [ 2403.068857][ T26] schedule_preempt_disabled+0x13/0x20 [ 2403.074157][ T26] __mutex_lock+0x7b8/0xf20 [ 2409.034877][ T26] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 2409.041783][ T26] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 2411.046892][ T26] ? free_percpu+0xf4/0xad0 [ 2411.051230][ T26] __mutex_lock_slowpath+0xe/0x10 [ 2414.054866][ T26] mutex_lock+0xd6/0x110 [ 2414.058938][ T26] ? mutex_trylock+0xa0/0xa0 [ 2414.063361][ T26] ? put_device+0x17/0x30 [ 2417.057901][ T26] ? put_device+0x1f/0x30 [ 2417.062059][ T26] ? free_netdev+0x384/0x470 [ 2418.074906][ T26] rtnl_lock+0x15/0x20 [ 2419.074870][ T26] netdev_run_todo+0xbc5/0xdc0 [ 2420.025463][ T26] ? alloc_netdev_mqs+0xcd0/0xcd0 [ 2420.030313][ T26] ? netdev_refcnt_read+0x1e0/0x1e0 [ 2424.034915][ T26] ? unregister_netdevice_queue+0x258/0x350 [ 2424.040724][ T26] ? list_netdevice+0x4c0/0x4c0 [ 2425.054880][ T26] rtnl_unlock+0xe/0x10 [ 2425.058865][ T26] ip6gre_exit_batch_net+0x5b7/0x600 [ 2425.063980][ T26] ? ip6gre_init_net+0x320/0x320 [ 2425.068770][ T26] ? __kasan_check_read+0x11/0x20 [ 2425.073612][ T26] ? ip6gre_init_net+0x320/0x320 [ 2426.022719][ T26] cleanup_net+0x6e9/0xcb0 [ 2427.054893][ T26] ? __switch_to_asm+0x34/0x60 [ 2427.059482][ T26] ? ops_init+0x4a0/0x4a0 [ 2427.063644][ T26] ? read_word_at_a_time+0x12/0x20 [ 2431.034949][ T26] ? strscpy+0x9c/0x260 [ 2431.038958][ T26] process_one_work+0x6dc/0xbd0 [ 2431.043626][ T26] worker_thread+0xaea/0x1510 [ 2436.054891][ T26] kthread+0x34b/0x3d0 [ 2436.058789][ T26] ? worker_clr_flags+0x180/0x180 [ 2436.063645][ T26] ? kthread_blkcg+0xd0/0xd0 [ 2439.054868][ T26] ret_from_fork+0x1f/0x30 [ 2439.059168][ T26] NMI backtrace for cpu 0 [ 2439.063285][ T26] CPU: 0 PID: 26 Comm: khungtaskd Tainted: G W 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 2439.074219][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2439.084103][ T26] Call Trace: [ 2439.087237][ T26] dump_stack_lvl+0x1e2/0x24b [ 2439.091742][ T26] ? panic+0x812/0x812 [ 2439.095654][ T26] ? bfq_pos_tree_add_move+0x43b/0x43b [ 2439.100947][ T26] ? rcu_read_unlock_special+0xd8/0x4c0 [ 2439.106331][ T26] ? sched_show_task+0x363/0x540 [ 2439.111099][ T26] ? __rcu_read_unlock+0x90/0x90 [ 2439.115877][ T26] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 2439.121776][ T26] dump_stack+0x15/0x17 [ 2439.125773][ T26] nmi_trigger_cpumask_backtrace+0x2b5/0x300 [ 2439.131593][ T26] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 2439.137484][ T26] arch_trigger_cpumask_backtrace+0x10/0x20 [ 2439.143210][ T26] watchdog+0xe5d/0xfd0 [ 2439.147208][ T26] ? hungtask_pm_notify+0x50/0x50 [ 2439.152064][ T26] ? __kasan_check_read+0x11/0x20 [ 2439.156923][ T26] ? __kthread_parkme+0xb9/0x1c0 [ 2439.161696][ T26] kthread+0x34b/0x3d0 [ 2439.165601][ T26] ? hungtask_pm_notify+0x50/0x50 [ 2439.170575][ T26] ? kthread_blkcg+0xd0/0xd0 [ 2439.174996][ T26] ret_from_fork+0x1f/0x30 [ 2439.179398][ T26] Sending NMI from CPU 0 to CPUs 1: [ 2439.185054][ C1] NMI backtrace for cpu 1 [ 2439.185062][ C1] CPU: 1 PID: 2857 Comm: syz.4.9179 Tainted: G W 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 2439.185068][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2439.185072][ C1] RIP: 0010:preempt_count_sub+0x3b/0x160 [ 2439.185083][ C1] Code: c1 e8 03 49 be 00 00 00 00 00 fc ff df 42 0f b6 04 30 84 c0 0f 85 c1 00 00 00 83 3d de a4 bf 05 00 75 22 65 8b 05 61 59 b9 7e <89> c1 81 e1 ff ff ff 7f 39 d9 7c 24 81 fb fe 00 00 00 77 07 0f b6 [ 2439.185088][ C1] RSP: 0018:ffffc90000cc7598 EFLAGS: 00000046 [ 2439.185096][ C1] RAX: 0000000080000003 RBX: 0000000000000001 RCX: ffffffff8708b903 [ 2439.185100][ C1] RDX: dffffc0000000000 RSI: ffffffff85602520 RDI: 0000000000000001 [ 2439.185105][ C1] RBP: ffffc90000cc75a8 R08: ffffc90000cc7728 R09: 000000000000000f [ 2439.185110][ C1] R10: ffffc90000cc7730 R11: dffffc0000000001 R12: ffff8881160ea780 [ 2439.185115][ C1] R13: ffffffff8159b780 R14: dffffc0000000000 R15: 1ffff92000198ed1 [ 2439.185120][ C1] FS: 00007f6140cd06c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 2439.185124][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2439.185129][ C1] CR2: 000000110c2fa6ba CR3: 000000011f79d000 CR4: 00000000003506a0 [ 2439.185133][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2439.185138][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2439.185141][ C1] Call Trace: [ 2439.185143][ C1] [ 2439.185146][ C1] ? show_regs+0x58/0x60 [ 2439.185150][ C1] ? nmi_cpu_backtrace+0x133/0x160 [ 2439.185153][ C1] ? preempt_count_sub+0x3b/0x160 [ 2439.185157][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2439.185160][ C1] ? nmi_handle+0xa8/0x280 [ 2439.185163][ C1] ? preempt_count_sub+0x3b/0x160 [ 2439.185167][ C1] ? default_do_nmi+0x69/0x160 [ 2439.185170][ C1] ? exc_nmi+0xad/0x100 [ 2439.185174][ C1] ? end_repeat_nmi+0x16/0x31 [ 2439.185177][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 2439.185181][ C1] ? preempt_count_sub+0x3b/0x160 [ 2439.185184][ C1] ? preempt_count_sub+0x3b/0x160 [ 2439.185188][ C1] ? preempt_count_sub+0x3b/0x160 [ 2439.185191][ C1] [ 2439.185194][ C1] is_module_text_address+0xe3/0x140 [ 2439.185198][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 2439.185202][ C1] __kernel_text_address+0x89/0x110 [ 2439.185206][ C1] unwind_get_return_address+0x4d/0x90 [ 2439.185209][ C1] arch_stack_walk+0xf3/0x140 [ 2439.185213][ C1] stack_trace_save+0x113/0x1c0 [ 2439.185217][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 2439.185220][ C1] ? kmem_cache_free+0xa9/0x1e0 [ 2439.185224][ C1] ? kasan_set_track+0x5d/0x70 [ 2439.185227][ C1] __kasan_slab_alloc+0xb1/0xe0 [ 2439.185231][ C1] ? __kasan_slab_alloc+0xb1/0xe0 [ 2439.185235][ C1] ? slab_post_alloc_hook+0x61/0x2f0 [ 2439.185239][ C1] ? kmem_cache_alloc+0x168/0x2e0 [ 2439.185242][ C1] ? __sigqueue_alloc+0x19e/0x2f0 [ 2439.185246][ C1] ? __send_signal+0x1e6/0xb90 [ 2439.185249][ C1] ? send_signal+0x4c1/0x5e0 [ 2439.185253][ C1] ? do_send_sig_info+0xde/0x230 [ 2439.185257][ C1] ? group_send_sig_info+0x113/0x320 [ 2439.185260][ C1] ? bpf_send_signal_common+0x2d8/0x420 [ 2439.185264][ C1] ? bpf_send_signal+0x19/0x20 [ 2439.185268][ C1] ? bpf_prog_7ba5217f62dcd359+0x38/0xfb0 [ 2439.185271][ C1] ? bpf_trace_run2+0xef/0x280 [ 2439.185275][ C1] ? __bpf_trace_sys_enter+0x62/0x70 [ 2439.185279][ C1] ? syscall_enter_from_user_mode+0x144/0x1a0 [ 2439.185282][ C1] ? do_syscall_64+0x13/0x70 [ 2439.185286][ C1] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2439.185290][ C1] slab_post_alloc_hook+0x61/0x2f0 [ 2439.185293][ C1] ? __sigqueue_alloc+0x19e/0x2f0 [ 2439.185297][ C1] kmem_cache_alloc+0x168/0x2e0 [ 2439.185300][ C1] ? __sigqueue_alloc+0x19e/0x2f0 [ 2439.185304][ C1] __sigqueue_alloc+0x19e/0x2f0 [ 2439.185307][ C1] __send_signal+0x1e6/0xb90 [ 2439.185310][ C1] send_signal+0x4c1/0x5e0 [ 2439.185313][ C1] do_send_sig_info+0xde/0x230 [ 2439.185317][ C1] group_send_sig_info+0x113/0x320 [ 2439.185321][ C1] ? __lock_task_sighand+0x100/0x100 [ 2439.185324][ C1] ? __local_bh_enable_ip+0x53/0x80 [ 2439.185328][ C1] ? fpu__clear+0x265/0x2e0 [ 2439.185331][ C1] bpf_send_signal_common+0x2d8/0x420 [ 2439.185335][ C1] ? bpf_do_trace_printk+0x270/0x270 [ 2439.185338][ C1] bpf_send_signal+0x19/0x20 [ 2439.185343][ C1] bpf_prog_7ba5217f62dcd359+0x38/0xfb0 [ 2439.185346][ C1] bpf_trace_run2+0xef/0x280 [ 2439.185349][ C1] ? bpf_trace_run1+0x210/0x210 [ 2439.185353][ C1] ? __do_sys_rt_sigreturn+0x160/0x1e0 [ 2439.185356][ C1] __bpf_trace_sys_enter+0x62/0x70 [ 2439.185360][ C1] syscall_enter_from_user_mode+0x144/0x1a0 [ 2439.185364][ C1] do_syscall_64+0x13/0x70 [ 2439.185367][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 2439.185371][ C1] RIP: 0033:0x7f6141ff2869 [ 2439.185382][ C1] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 2439.185386][ C1] RSP: 002b:00007f6140ccfb40 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 2439.185394][ C1] RAX: ffffffffffffffda RBX: 00007f614220ef88 RCX: 00007f6141ff2869 [ 2439.185398][ C1] RDX: 00007f6140ccfb40 RSI: 00007f6140ccfc70 RDI: 0000000000000011 [ 2439.185402][ C1] RBP: 00007f614220ef80 R08: 0000000000000000 R09: 0000000000000000 [ 2439.185406][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f614220ef8c [ 2439.185410][ C1] R13: 0000000000000000 R14: 00007fff3caadf20 R15: 00007fff3caae008 SYZFAIL: failed to send rpc fd=3 want=79736 sent=0 n=-1 (errno 32: Broken pipe) [ 2449.432472][ T24] audit: type=1400 audit(2000000209.460:13737): avc: denied { write } for pid=274 comm="syz-executor" path="pipe:[13378]" dev="pipefs" ino=13378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 2449.650240][ T2891] bridge0: port 1(bridge_slave_0) entered blocking state [ 2449.657278][ T2891] bridge0: port 1(bridge_slave_0) entered disabled state [ 2449.664478][ T2891] device bridge_slave_0 entered promiscuous mode [ 2449.672246][ T2891] bridge0: port 2(bridge_slave_1) entered blocking state [ 2449.679207][ T2891] bridge0: port 2(bridge_slave_1) entered disabled state [ 2449.686430][ T2891] device bridge_slave_1 entered promiscuous mode [ 2449.720261][ T2891] bridge0: port 2(bridge_slave_1) entered blocking state [ 2449.727106][ T2891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2449.734188][ T2891] bridge0: port 1(bridge_slave_0) entered blocking state [ 2449.741203][ T2891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2449.759170][T32495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2449.766520][T32495] bridge0: port 1(bridge_slave_0) entered disabled state [ 2449.773643][T32495] bridge0: port 2(bridge_slave_1) entered disabled state [ 2449.783792][T32495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2449.791765][T32495] bridge0: port 1(bridge_slave_0) entered blocking state [ 2449.798609][T32495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2449.807280][T32495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2449.815421][T32495] bridge0: port 2(bridge_slave_1) entered blocking state [ 2449.822246][T32495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2449.835877][T32495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2449.849352][T32495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2449.863980][T32495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2449.874437][T32495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2449.882396][T32495] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2449.889768][T32495] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2449.897767][ T2891] device veth0_vlan entered promiscuous mode [ 2449.907863][T32495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2449.916763][ T2891] device veth1_macvtap entered promiscuous mode [ 2449.928212][T32495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2449.939042][T32495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2449.947793][T28022] tipc: Disabling bearer [ 2449.952638][T28022] tipc: Left network mode [ 2450.875910][T28022] device bridge_slave_1 left promiscuous mode [ 2450.881869][T28022] bridge0: port 2(bridge_slave_1) entered disabled state [ 2450.889344][T28022] device bridge_slave_0 left promiscuous mode [ 2450.895307][T28022] bridge0: port 1(bridge_slave_0) entered disabled state [ 2450.904266][T28022] device bridge_slave_1 left promiscuous mode [ 2450.910282][T28022] bridge0: port 2(bridge_slave_1) entered disabled state [ 2450.917609][T28022] device bridge_slave_0 left promiscuous mode [ 2450.923524][T28022] bridge0: port 1(bridge_slave_0) entered disabled state [ 2450.931192][T28022] device bridge_slave_1 left promiscuous mode [ 2450.937120][T28022] bridge0: port 2(bridge_slave_1) entered disabled state [ 2450.944256][T28022] device bridge_slave_0 left promiscuous mode [ 2450.950299][T28022] bridge0: port 1(bridge_slave_0) entered disabled state [ 2450.957842][T28022] device bridge_slave_1 left promiscuous mode [ 2450.963748][T28022] bridge0: port 2(bridge_slave_1) entered disabled state [ 2450.971120][T28022] device bridge_slave_0 left promiscuous mode [ 2450.977155][T28022] bridge0: port 1(bridge_slave_0) entered disabled state [ 2450.984672][T28022] device bridge_slave_1 left promiscuous mode [ 2450.990840][T28022] bridge0: port 2(bridge_slave_1) entered disabled state [ 2450.998284][T28022] device bridge_slave_0 left promiscuous mode [ 2451.004199][T28022] bridge0: port 1(bridge_slave_0) entered disabled state [ 2451.012483][T28022] device veth1_macvtap left promiscuous mode [ 2451.018334][T28022] device veth0_vlan left promiscuous mode [ 2451.023990][T28022] device veth1_macvtap left promiscuous mode [ 2451.029831][T28022] device veth0_vlan left promiscuous mode [ 2451.035506][T28022] device veth1_macvtap left promiscuous mode [ 2451.041290][T28022] device veth0_vlan left promiscuous mode [ 2451.047258][T28022] device veth1_macvtap left promiscuous mode [ 2451.053056][T28022] device veth0_vlan left promiscuous mode [ 2451.059068][T28022] device veth1_macvtap left promiscuous mode [ 2451.064941][T28022] device veth0_vlan left promiscuous mode [ 2453.945472][T28022] device bridge_slave_1 left promiscuous mode [ 2453.951391][T28022] bridge0: port 2(bridge_slave_1) entered disabled state [ 2453.958723][T28022] device bridge_slave_0 left promiscuous mode [ 2453.964622][T28022] bridge0: port 1(bridge_slave_0) entered disabled state [ 2453.972269][T28022] device veth1_macvtap left promiscuous mode [ 2453.978114][T28022] device veth0_vlan left promiscuous mode