last executing test programs: 41.911848217s ago: executing program 2 (id=6419): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x1a1001) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r6, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x25dfdbfc}, 0x1e}}, 0x0) sendto$inet6(r5, 0x0, 0x4, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) socket$tipc(0x1e, 0x1, 0x0) socket$tipc(0x1e, 0x5, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0xff, 0x208, &(0x7f0000000780)="$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") clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) 41.047752096s ago: executing program 2 (id=6424): socket(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = epoll_create1(0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000000c0)={0xe000001a}) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[], 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) unshare(0x22020600) 40.684176178s ago: executing program 2 (id=6426): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = gettid() futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x2000000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000406c256d000000000000010902"], 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0) 38.032409802s ago: executing program 2 (id=6439): bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000000040), 0x49, 0x61a, &(0x7f0000001080)="$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") mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={[], [], 0x2f}) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB="6618a3", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {0x0, 0x3fffffff}}, 0x0) chdir(0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000440)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r1 = socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) move_mount(0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) sendmmsg$inet6(r1, &(0x7f0000003840)=[{{&(0x7f0000000840)={0xa, 0x4e23, 0x7f, @local, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000002400)=ANY=[], 0x30}}], 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ftruncate(r6, 0x8001) 37.048038904s ago: executing program 2 (id=6445): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, &(0x7f0000000980)={0x0, 0x0, 0x7, {0x7, 0x0, "12279dfa7e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) 31.4125927s ago: executing program 2 (id=6461): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="8c0000000001010400000000ffffff88020000002400018014000180"], 0x8c}, 0x1, 0x600000000000000, 0x0, 0x40}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ptrace(0x10, 0x1) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$cont(0x9, r6, 0x0, 0x3) 13.604959781s ago: executing program 1 (id=6509): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42042, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000480)="37d4", 0x2}], 0x1, 0x6e45, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1, 0x0, 0xff, r8}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000013007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d80)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 13.596006922s ago: executing program 4 (id=6511): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) dup(0xffffffffffffffff) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) 12.139230329s ago: executing program 1 (id=6513): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0xfff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00001100000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000000040)=0x8, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@can_delroute={0x194, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_CS_CRC8={0x11e, 0x6, {0xc, 0x0, 0x0, 0x0, 0x0, "da0c4ab3d3540e16c792ad5416a869c60921ed52264fc693ad078f61027de4cdf1885b14c070e2d78cef9fa5a066dc2af7a802b87516ce5ea2d452338788ec53d3fe0a245975937501ae1d3cbdae0af4bbffb761d39cc34a902827bdbc03e2fd9d26f4f94cb7612060c86719aa9227b856fe8a70e496d74d19ae8354f7c2ecf648ed9348f02eaaf985165ab1bf558b062d1a9cf7478a1fe766654f11ba859c33c3ddf4601cdafc7b5d8e58602cc082fd8a1b847f066bbc4ae39ec7c298b303d75e23e40b4dfdbe65290830d52fe8e4c8bf5e0b81271a8c7640b24aa4a83237f89cff76ec3ed539457c1e3ae8b046b0a51d9f4a0c48fc778d1d6f21a4960c313d", 0x0, "8093a0c32af2552e53200ae1002632002c84c88b"}}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "ba51e7ad079edbdc"}}}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "91be0bd38ec1f65e"}, 0x2}}, @CGW_MOD_SET={0x15, 0x4, {{{}, 0x0, 0x0, 0x0, 0x0, "e9da705f58baa4b9"}}}, @CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "d23bcbcdcaf9eef3"}, 0x3}}]}, 0x194}}, 0x0) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r9, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r9, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r10, 0x890c, &(0x7f0000000140)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x1, 0x9, 0x0, 0x9, 0x40000044}) syz_usb_control_io(r9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 12.138687489s ago: executing program 3 (id=6514): socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$igmp(0x2, 0x3, 0x2) (async) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0900000004000000040000000000000000800000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32, @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32=r1, @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4) (async) setsockopt$packet_int(r6, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000340)={'sit0\x00', 0x0}) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r7, &(0x7f00000000c0)="3f03fe7f0300120006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) sendto$packet(r7, &(0x7f00000000c0)="3f03fe7f0300120006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0xfdef, &(0x7f0000001b80)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa00fcff4500001400000000000600000000000000000002"], 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000"], 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4ef, &(0x7f0000000a00)="$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") lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) (async) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) 10.658252128s ago: executing program 3 (id=6516): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed29010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0xffffffffffffff19, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) 10.657684388s ago: executing program 0 (id=6517): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x3000cd0, &(0x7f0000000440)=ANY=[], 0x1, 0x1509, &(0x7f0000002d40)="$eJzs3Am4TmX3MPC17vveHDI8Sea97rV5kuEmSUJJMiRJEpI5IUmSJEkcMiUhCRlPkjlkTicd8zxkTjp5JUkSkinc33VUn7f3fft6p//n/b9n/a5rX+deZ++1nrXPup7z7L2v65xvuwyt1rB65XrMDP8M/esCf/6SCAAJADAAALIDQAAAZXKUyZG2P5PGxH/qRcT/kPrTr3YH4mqS+advMv/0Teafvsn80zeZf/om80/fZP7pm8xfiHRtZt5rZUu/mzz//19O/SvJ8vmfLuDv7ZD5/7fR/9DRMv/0Teafvsn80zeZf/pz5RYsuKp9iKtP3v/pm8xfiHTt3/5Mef3Zq/1MW7Z/YBNCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIf4/OOuvMADw6/pq9yWEEEIIIYQQQoh/H//+1e5ACCGEEEIIIYQQ//MQFGgwEEAGyAgJkAkywzWQBbJCNsgOMbgWcsB1kBOuh1yQG/JAXsgH+aEAhEBggSGCglAI4nADFIYboQgUhWJQHByUgJJwE5SCm6E03AJl4FYoC7dBOSh/+TXT3AmV4C6oDHdDFagK1aA63AM14F6oCfdBLbgfasMDUAcehLrwENSD+tAAHoaG8Ag0gsbQBJpCM2gOLf4gPyn738p/EbrDS9ADekIi9ILe8DL0gb7QD/rDAHgFBsKrMAheg8EwBIbC6zAM3oDh8CaMgJEwCt6C0TAGxsI4GA8TIAnehonwDkyCdx/JClNgKkyD6TADZsJ7MAtmwxx4H+bCPJgPSZkWwiJYDB/AEvgQkuEjWAofQwosg+WwAlbCKlgNa2AtrIP1sAE2wibYDFtgK3wC22A77ICdsAt2wx74FPbCZ7APPodU/OIfzD/z23zoioCAChUaNJgBM2ACJmBmzIxZMAtmw2wYwxjmwByYE3NiLsyFeTAPJmI+LIAFkJCQkbEgFsQ4xrEwFsYiWASLYTF06LAklsRSeNF7XxrLYBksi2WxHJbH8ng73o4VsSJWwkpYGStjFayC1bAa3oP34L1YE2tiLayFtbE21sE6WBfrYj2shw2wATbEhtgIG2ETbILNsBm2wBbYEltiK2yFbbANtsW22A7bYXtsjx2wA3bEjtgJO2Fn7IxdsAt2xRfwBXwRX8SX8CXsiVVUL+yNvbEP9sF+2B/74ys4EF/FV/E1HIxDcCi+jq/jGzgcT+MIHImjcBRWVGNwLI5DVhMwCZMwI0zESTgJJ+MUnILTcDrOwJk4E2fhbJyN7+NcnIfzcAEuwEW4GBfjEvwQkzEZl+IZTMFluBxX4EpchStxDa7FNbgeN+B63ISbcAtuwU/wE9yO23En7sTduBs/xU/xM/wMB2MqpuJ+3I8H8AAexIN4CA/hYTyMR/AIHsWjeAyP4XE8gSfxBJ7CU3gaz+BZADiP5/ECXsBLeCntza/SGGVUBpVBJagElVllVllUFpVNZVMxFVM5VA6VU+VUuVQulUflUflUPlVAFVCkSLGKVEFVUMVVXBVWhVURVUQVU8WUU06VVCVVKVVKlValVRl1qyqrblPlVHnV2t2ublcVVRtXSd2lKqvKqoqqqqqp6qq6qqFqqJqqpqqlaqnaqraqox5UdVUv7If1VdpkGqoh2EgNxSaqqWqmmqs38FHVUg3HVqq1aqMeVyNxBLZTLV179ZTqoMZiR/WMGofPqs5qAnZRz6uu6gXVTb2ouqtWrofqqSZjL9VbTcM+qq/qp/qrWVhVpU2smnpNvZhxiBqqXleL8A01XL2pRqiRapR6S41WY9RYNU6NVxNUknpbTVTvqEnqXTVZTVFT1TQ1Xc1QM9V7apaareao99VcNU+DWqAWqkVqsfpALVEfqmT1kVqqPlYpaplarlaolWqVWq3WqLVqnVqvNqiNapParLaoreoTtU1tVzvUTrVL7VZ71Kdqr/pM7VOfq1T1hdqv/qQOqC/VQfWVOqS+VofVN+qI+lYdVd+pY+p7dVydUCfVD+qU+lGdVmfUWXVOnVc/qQvqorqkvAKNWmmtjQ50Bp1RJ+hMOrO+RmfRWXU2nV3H9LU6h75O59TX61w6t85j8up8Or8uoENN2mrWkS6oC+m4vkEX1jfqIrqoLqaLa6dL6JL6Jl1K36xL61t0GX2rLqtv0+V0eV3Bg75DV9R36kr6Ll1Z362r6Kq6mq6u79E19L26pr5P19L369r6AV1HP6jr6od0PV1fN9AP64b6Ed1IN9ZNdFPdTDfXLfSjuqV+TLfSrXUb/bhuq5/Q7fSTur1+SnfQT+uO+hndST+rO+vndBf9vO6qX9Dd9EV9SXvdQ/fUibqX7q1f1n10X91P99cD9Ct6oH5VD9Kv6cF6iB6qX9fD9Bt6uH5Tj9Aj9Sj9lh6tx+ixepweryfoJP22nqjf0ZP0u3qynqKn6ml6up6h+/1Sac7fkf/O38gfdPnVt+it+hO9TW/XO/ROvUvv1nv0Hr1X79X79D6dqlP1fr1fH9AH9EF9UB/Sh/RhfVgf0Uf0UX1UH9PH9HF9Qp/TP+hT+kd9Wp/RZ/Q5fV6f1xd++RmAQaOMNsYEJoPJaBJMJpPZXGOymKwmm8luYuZak8NcZ3Ka600uk9vkMXlNPpPfFDChIWMNm8gUNIVM3NxgCpsbTRFT1BQzxY0zJUxJc9O/nP9H/bUwLUxL09K0Mq1MG9PGtDVtTTvTzrQ37U0H08F0NB1NJ9PJdDadTRfTxXQ1XU030810N91ND9PDJJpE09u8bPqYvqaf6W8GmFfMQDPQDDKDzGAz2Aw1Q80wM8wMN8PNCDPCjDKjzGgz2ow1Y814M94k+exmoploJplJZrKZbKYOyG6mm+lmpplpZplZZo6ZY+aauWa+mW8WmoVmsVlslpglJtkkm6VmqUkxy8wys8KsMKvMKrPGrDHrzDqzwWwwm8wmk2K2mq1mm9lmdpgdZpfZZfaYPWav2Wv2mX0m1aSa/Wa/OWAOmIPmoDlkDpnD5rA5Yo6Yo+aoOWaOmePmuDlpTppT5pQ5bU6bs+asOW/OmwvmgrlkLqVd9gUqUIEJTJAhyBAkBAlB5iBzkCXIEmQLsgWxIBbkCHIEOYPrg1xB7iBPkDfIF+QPCgRhQIENOIiCgkGhIB7cEBQObgyKBEWDYkHxwAUlgpLBTUGp4OagdHBLUCa4NSgb3BaUC8oHFYLbgzuCisGdQaXgrqBycHdQJagaVAuqB/cENYJ7g5rBfUGt4P6gdvBAUCd4MKgbPBTUC+oHDYKHg4bBI0GjoHHQJGgaNAuaBy3+rfW9P537Mdcj7Bkmhr3C3uHLYZ+wb9gv7B8OCF8JB4avhoPC18LB4ZBwaPh6OCx8IxwevhmOCEeGo8K3wtHhmHBsOC4cH04Ik8K3w4nhO+Gk8N1wcjglnBpMC6eHM8KZ4XvhrHB2OCd8P5wbzgvnhwvCheGiEH++JIbk8KNwafhxmBIuC5eHK8KV4apwdbgmXBuuC9eHG8KN4aYyA38+NNwWbg93hDvDXeHucE/4abg3/CzcF34epoZfhPvDP4UHwi/Dg+FX4aHw6/Bw+E14JPw2PBp+Fx4Lvw+PhyfCk+EP4anwx/B0eCY8G54Lz4c/hRfCi+Gl0Kdd3Kd9vJMhQxkoAyVQAmWmzJSFslA2ykYxilEOykE5KSflolyUh/JQPspHBagApWFiKkgFKU5xKkyFqQgVoWJUjBw5KkklqRSVotJUmspQGSpLZakclaMKVIHuoDvoTrqT7qK76G66m6pSVapO1akG1aCaVJNqUS2qTbWpDtWhulSX6lE9akANqCE1pEbUiJpQE2pGzagFtaCW1JJaUStqQ22oLbWldtSO2lN76kAdqCN1pE7UiTpTZ+pCXagrdaVu1I26U3fqQT0okRKpN/WmPtSH+lE/GkADaCANpEE0iAbTYBpKQ2kYDaPhNJxG0EgaRW/RaBpDY2kcjacJlERJNJEm0iSaRJNpMk2lqTSdptNMmkmzaBbNoTk0l+bSfJpPC2khLabFtISWUDIl01JaSimUQstpOa2klbSaVtNaWkvraT1tpI20mTbTVtpK22gb7aAdtIt20R7aQ3tpL+2jfZRKqbSf9tMBOkAH6SAdokN0mA7TETpCR+koHaNjdJyO00k6SafoFJ2m03SWztJ5+oku0EW6RJ4SbCab2V5js9isNpvNbv8yzmPz2nw2vy1gQ5vL5v5NTNbaIraoLWaLW2dL2JL2pr+Ky9nytoK93d5hK9o7bSVbzmaCP49r2HttTXufrWXvt9XtPb+Ja9sHbB37iK1rG9t6tqltYJvbhvYR28g2tk1sU9vMNrdt7RO2nX3StrdPJXSwT/95bNPiJfZDu9aus+vtBrvXfmbP2nP2iP3Wnrc/2R62px1gX7ED7at2kH3NDrZDfhsD2FH2LTvajrFj7Tg73k74q3iqnWan2xl2pn3PzrKz/ypebD+wc22ynW8X2IV20eU4radk+5Fdaj+2KXaZXW5X2JV2lV1t1/zfXlfYTXaz3WL32E/tNrvd7rA77S67+3Kcdh777Oc21X5hD9tv7AH7pT1oj9pD9uvLcdr5HbXf2WP2e3vcnrAn7Q/2lP3RnrZnLp9/2rn/YC/aS9ZbYGTFmg0HnIEzcgJn4sx8DWfhrJyNs3OMr+UcfB3n5Os5F+fmPJyX83F+LsAhE1tmjrggF+I438CF+UYuwkW5GBdnxyW4JN/EpfhmLs23cBm+lcvybVyOy3MFvp3v4Ip8J1fiu7gy381VuCpX4+p8D9fge7km38e1+H6uzQ9wHX6Q6/JDXI/rcwN+mBvyI9yIG3MTbsrNuDm34Ee5JT/Grbg1t+HHuS0/we34SW7PT3EHfpo78jPciZ/lzvwcd+HnuSu/wN34Re7OL3EP7smJ3It788vch/tyP+7PA/gVHsiv8iB+jQfzEB7Kr/MwfoOH85s8gkfyKH6LR/MYHsvjeDxP4CR+myfyOzyJ3+XJPIWn8jSezjN4Jr/Hs3g2z+H3eS7P4/m8gBfyIl7MH/AS/pCT+SNeyh9zCi/j5byCV/IqXs1reC2v4/W8gTfyJt7MW3grf8LbeDvv4J28i3fzHv6U9/JnvI8/51T+gvfzn/gAf8kH+Ss+xF/zYf6Gj/C3fJS/42P8PR/nE3ySf+BT/COf5jN8ls/xef6JL/BFvsSeIcJIRToyURBliDJGCVGmKHN0TZQlyhpli7JHsejaKEd0XZQzuj7KFeWO8kR5o3xR/qhAFEYU2YijKCoYFYri0Q1R4ejGqEhUNCoWFY9cVCIqGd0UlYpujkpHt0RlolujstFtUbmofFQhuj26I6oY3RlViu6KKkd3R1WiqlG1qHp0T1QjujeqGd0X1Yruj0pHD0R1ogejutFDUb2oftQgejhqGD0SNYoaR02iplGzqHnUIno0ahk9FrWKWkdtosejttETUbvoyah99FTUIXr6yv6iwc+fpn+xPzHqFelfnpDdpxfGF8UXxz+IL4l/GE+OfxRfGv84nhJfFl8eXxFfGV8VXx1fE18bXxdfH98Q3xjfFN8c3xL3vnpGcJh2IwzGBS6Dy+gSXCaX2V3jsrisLpvL7mLuWpfDXedyuutdLpfb5XF5XT6X3xVwoSNnHbvIFXSFXNzd4Aq7G10RV9QVc8WdcyVcSdfctXAtXEv3mGvlWrs27nH3uHvCPeGeTPilcdfRPeM6uWddZ/ece84977q6F1w396Lr7l5yPVxPl+gSXW/X2/VxfVw/188NcAPcQDfQDXKD3GA32A11Q90wN8wNd8PdCDfCjXKj3Gg32o11Y914N94luSQ30U10k9wkN9lNdlPdVDfdTXcz3Uw3y81yc9wcN9fNdfPdfLfQLXSL3WK3xC1xyS7ZLXVLXYpLccvdcrfSrXSr3Wq31q116916t9FtdJvdZrfVbXXb3Da3w+1wu9wut8ftcXvdXrfP7XOpLtXtd/vdAXfAHXRfuUPua3fYfeOOuG/dUfedO+a+d8fdCXfSeX3K/ehOuzPurDvnzruf3AV30V1y3iXF3o5NjL0TmxR7NzY5NiU2NTYtNj02IzYz9l5sVmx2bE7s/djc2LzY/NiC2MLYotji2AexJbEPY8mxj2JLYx/HUmLLYstjK2IrY6ti3uffFvmCvpCP+xt8YX+jL+KL+mK+uHe+hC/pb/Kl/M2+tL/Fl/G3+rL+Nl/Ol/cVfGPfxDf1zXxz38I/6lv6x3wr39q38Y/7tv4J384/6dv7p3wH/7Tv6J/xnfyzvrN/znfxz8/7Zcq+u3/J9/A9faLv5Xv7l30f39f38/39AP+KH+hf9YP8a36wH+KH+tf9MP+GH+7f9CP8SD/Kv+VH+zF+rB/nx/sJPsm/7Sf6d/wk/66f7Kf4qX6an+5n+Jn+PT/Lz/Zz/Pt+rp/n5/sFfqFf5Bf7D/wS/6FP9h/5pf5jn+KX+eV+hV/pV/nVfo1f69f59X6D3+g3+c1+i9/qP/Hb/Ha/w+/0u/xuv8d/6vf6z/w+/7lP9V/4/f5P/oD/0h/0X/lD/mt/2H/jj/hv/VH/nT/mv/fH/Ql/0v/gT/kf/Wl/xp/15/x5/5O/4C/6S/I3a0IIIYQQfxf9B/t7/Y3vqV+2NL0BIOv2vIf+subGXD+v+6q9HWIA8FTPLvV/3erXT0xM/OXYFA1BoQUAELuSnwGuxMugDTwB7aE1lPqb/fVVFS5f9/2/6sdvBcgMkOnXnLTbo1/jK/Vv/p36jT/g362/7Of6CwCKFLqSk1b41/hK/dK/U39329+vf7n/TF8mAbT6s5wscCW+Ur8kPAZPQ/vfHCmEEEIIIYQQQvysrzrf9Q/uPy/fn+czv837Nf6j+/M/UOlf7V8IIYQQQgghhBB/7NkXuj35aPv2rTv9Ny8y/me08R+wQAD4D2hDFv/5i6v9m0kIIYQQQgjx73blov9qdyKEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQqRf//x/CFN/98FX+xyFEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEKIq+3/BAAA//+0FVXr") truncate(&(0x7f0000000080)='./file1\x00', 0xfe0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x6, 0x4, 0x1a00, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x980) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r1, &(0x7f0000000880), &(0x7f0000000000)=""/48}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r2) truncate(&(0x7f00000000c0)='./file1\x00', 0x9cb3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x86, &(0x7f00000006c0)={@local, @random="a15cc14e96b3", @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@cipso={0x86, 0x8, 0x3, [{0x0, 0x2}]}]}}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @rand_addr, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@multicast2}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @cipso={0x86, 0x21, 0x0, [{0x0, 0xd, "34abeec8d03ff1a8b8835e"}, {0x0, 0xe, "4ef661e96b4014469f350a42"}]}]}}}}}}}, 0x0) 10.657192479s ago: executing program 4 (id=6518): socket$nl_generic(0x11, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000008e2602c67f", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) syz_emit_ethernet(0x36, &(0x7f0000000740)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x32, 0x0, @private1, @local}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a000090400000103010100092100080001220300090581", @ANYRES64], 0x0) syz_usb_control_io(r3, &(0x7f0000001080)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x4, 0x7, 0x3, 0x1, 0x4, 0xfffa}}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000d40)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="35b7aeab58b8eb6fb12a8fb68555ced001b9caa1a56c43a6ab5b36006af7dd0a53fc15025e59dbf43d2fa76f292ea777216fafdc944d19b56099eeda25e7216e74fcc068712573bef1c0be54da652ac0c71d4a027b0136021eafafc471599b31e421981366995c98eab08f09b100de071c66691a6919c866e7444ae69d2971e0f40c372983cd3d94845d171cd33d592c84b7eefcacee83ed49b8584654b3841cc9645de958bafad485c0c07d6720d6fa12ebe1effca46ca428dd46f55ed89e028c9fc1765708"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000000)) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r8}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @loopback, @multicast1}, {0x16, 0x0, 0x0, @multicast1}}}}}, 0x0) 9.130410854s ago: executing program 0 (id=6519): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000002929b7a87545e30f32ec5a437b994278ce1f0f0d61d696622e4243f443002dc44206444bbb57153c3ef066fd12d7cbb3dffbce281577b29e3a3023b0f5e0c4377dc2a1771543df3854873a9d0a4994728f80cc4093971649a06600abaef1d610cbf0a1418dcf39c5a52b828db370d2ea6faadbe71012c1087f2679b482653b7d6a5bc89d2d2be2aba1e7c7111d1284f06af79a44e69c4e80b8f9685a52"], 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000600)='k', 0x20000000}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000980)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb7000000b704000000000000850000002400000095b16e06b4fb6bf2dc510c5598e6e42d9b94695fa22080de8df4db5c0661c1db970653cfe91853957b8a1dc704ba75cddcdc692e14645dc58d48c8a8c060da9f38"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 7.453396416s ago: executing program 0 (id=6520): r0 = syz_pidfd_open(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000200)={[{@abort}, {@nolazytime}]}, 0x1, 0x7a1, &(0x7f0000000700)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r5 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, 0x0) r6 = syz_clone(0x20002000, 0x0, 0x0, 0x0, 0x0, 0x0) fallocate(r0, 0x22, 0x8, 0x2) kcmp$KCMP_EPOLL_TFD(0x0, r6, 0x7, r0, &(0x7f0000000040)={r5, r0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00') pread64(r8, &(0x7f000001a240)=""/102400, 0x19000, 0xfe) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010000104000000000000007d09e6d9ff", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d000000001400028008000200020000000800010003000000140003007866726d30"], 0x58}}, 0x0) 7.451786626s ago: executing program 1 (id=6521): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0xa, 0x2400000001, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r5 = socket$inet(0x2, 0xa, 0x2004) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) socket$packet(0x11, 0x3, 0x300) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) 7.451216346s ago: executing program 3 (id=6522): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000300)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000010003904000000000400000000000000", @ANYRES32=r6, @ANYBLOB="030000007f0000002000128008000100736974001400028008000100", @ANYRES32], 0x40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x80) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x48801) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_socket_connect_nvme_tcp() socket$nl_route(0x10, 0x3, 0x0) 7.450408446s ago: executing program 4 (id=6523): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42042, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000480)="37d4", 0x2}], 0x1, 0x6e45, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1, 0x0, 0xff, r8}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000013007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x1a, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x31, &(0x7f00000001c0)=""/49, 0x40f00, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000280)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400)=[r4, r0, 0xffffffffffffffff, r0, r0, r5, r4, 0xffffffffffffffff, r4, r4], &(0x7f0000000580)=[{0x1, 0x2, 0xa, 0x1}, {0x0, 0x2, 0x4, 0x8}], 0x10, 0x5d7415cd, @void, @value}, 0x94) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d80)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 5.733280603s ago: executing program 0 (id=6524): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, &(0x7f0000000980)={0x0, 0x0, 0x7, {0x7, 0x0, "12279dfa7e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 5.732132673s ago: executing program 1 (id=6525): socket(0x1e, 0x4, 0x0) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff8500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810744, &(0x7f0000000700)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@jqfmt_vfsv0}, {@delalloc}, {@usrjquota}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0x1, 0x451, &(0x7f0000000d00)="$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") pipe2(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x1) r3 = getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000240)) sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r6, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) 5.731560063s ago: executing program 3 (id=6526): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x44}}, 0x0) fstat(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3818746, &(0x7f0000000280)={[{@nouser_xattr}, {@barrier_val={'barrier', 0x3d, 0x23e8}}, {@block_validity}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fsmagic}, {@pcr={'pcr', 0x3d, 0x32}}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, 'blkio.bfqq\xb7vg_queue_size\x00'}}]}, 0x1, 0x45a, &(0x7f0000001180)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) syz_open_procfs(0x0, &(0x7f0000000240)='attr/exec\x00') r3 = openat$binderfs(0xffffff9c, 0x0, 0x800, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000100001040000eb040100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32], 0x3c}}, 0x0) 5.728155813s ago: executing program 4 (id=6527): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe7f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_4={0x3, 0x1, 0x0, "f7940ef7"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @global=@item_012={0x2, 0x1, 0x1, "38af"}, @local=@item_012={0x2, 0x2, 0x0, "1a70"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000000)='B') 3.921048281s ago: executing program 1 (id=6528): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x9902, 0x4, 0x1, 0x8000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x200000, 0x0, 0x0, 0x0, @value, @void, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000003c0)=0x70, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000900)=[{0x6, 0x0, 0x0, 0xec}]}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000000700)="09268a60fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88ff4f90b1a7511bf746bec66ba1fe92e8615fc3f7af9c3310b39cc2dc3616dcdfaebc65ca325fd99357ed9d11b266a7c88722db6e38df1089394f438cb9fbc08e62754c233cced4a4d4d05a3e5029a01298d3ee87d8a0803a2d26906f42f5b5aaf47d2752a8b23954f309cae13ef250cf76775ddfd153eef2b1a8458a3cb6dc764f19b41c8c61c7305a51a4bfa0c897c7c1f438a851222a5560c0e77b0b5934296bc6f28af87d651f7348a2ba2ca67f930cc655afe0220cbeb79a2a87bba6be2de3e756e674c405bcc51843b4cc75ff7ec38a34d1a2a61f0a1223e69484b5d922b5590758c33317df18c401ff910f9b3f0eaef8b9d928392097a025b0459", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file2\x00', 0x10502, &(0x7f0000001b80)=ANY=[], 0x1, 0x11f3, &(0x7f0000002580)="$eJzs3E+LW1UYB+C3cWrHqfNHrdV2oQfduLo0s3AlSJApyASU2gitINw6NxpyTUJuGIiI1ZVbP4e4dCeIX2A2fgZ3s3HZhXiFpLVNTdUuOpH6PJv7kvf8cu8hEDjhnBy/8c2n/W6VdfNJNE6disYoIt1KkaIRd7y0P79eu77farf3rqR0uXW1+XpKaevlHz/4/LtXfpqcff/7rR/OxNHOh8e/7v5ydP7owvHvVz/pValXpcFwkvJ0Yzic5DfKIh30qn6W0rtlkVdF6g2qYrzQ75bD0Wia8sHB5sZoXFRVygfT1C+maTJMk/E05R/nvUHKsixtbgQPdPqfh3S+vVXXdURdn44no67r+qnYiLPxdGzGVnwZEc/Es/FcnIvn43y8EC/Ghdmok3h8AAAAAAAAAAAAAAAAAAAA+P/4u/P/27Hj/D8AAAAAAAAAAAAAAAAAAACcgPeuXd9vtdt7V1Jajyi/PuwcdubXeb/VjV6UUcSl2I7fYnb6f25eX367vXcpzezEV+XN2/mbh50nFvPN2d8J3M6vzXp38s15Pi3mz8TGvfnd2I5zy++/uzS/Hq+9ek8+i+34+aMYRhkHs3vfzX/RTOmtd9r35S/OxgEAAMDjIEt/Wrp+z7IH9ef5h/h94L719VpcXFvt3Imopp/187IsxovF+l9eUfz7ovGI3rkR/5EJKh7/YtXfTJyEux/6qp8EAAAAAAAAAACAh/GIdxGuxZKdZW+uZqoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/sAPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgqAAD//99CzUo=") r5 = open(&(0x7f0000000200)='./bus\x00', 0x1c507e, 0x0) r6 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$binfmt_elf64(r6, &(0x7f0000000240)=ANY=[], 0xfd14) sendfile(r5, r5, 0x0, 0x100000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x20002) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f0000000180)={0x1, 0x39, 0x4, 0x0, 0x7}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r8 = socket(0xa, 0x3, 0x6) getsockopt$bt_BT_SECURITY(r8, 0x29, 0x7, 0x0, 0x2054dfff) 3.919540271s ago: executing program 3 (id=6529): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$incfs(0x0, 0x0, 0x0, 0x20002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\x00\x00') 2.010903759s ago: executing program 0 (id=6530): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000002929b7a87545e30f32ec5a437b994278ce1f0f0d61d696622e4243f443002dc44206444bbb57153c3ef066fd12d7cbb3dffbce281577b29e3a3023b0f5e0c4377dc2a1771543df3854873a9d0a4994728f80cc4093971649a06600abaef1d610cbf0a1418dcf39c5a52b828db370d2ea6faadbe71012c1087f2679b482653b7d6a5bc89d2d2be2aba1e7c7111d1284f06af79a44e69c4e80b8f9685a52"], 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000600)='k', 0x20000000}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 2.00951611s ago: executing program 1 (id=6531): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300081a, &(0x7f00000001c0)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c666d61736b3d30313737373737373737373737373737373737373737332c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c2c756e695f786c6174653d302c726f6469722c726f6469722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d312c6572726f72733d636f6e74696e75652c74696d655f6f66667365743d3078303030303030303030303030303465302c757466383d302c0077b5b28056fc4549d277ed7fab6b0be29df17f888ccab55cccc917ad315c8ea56f5a89c104f92d058b92f5881e69e06002f5914c03fef3eb09121733eaf5ded73df976fbd4cfcb8b70b0bf44da1b46bc3935431d5e60a641f9e4ebbf71c77fc9a810ce726b8c6d6295a5f2e2b069b95ba8ecce52ded99b82923228c37d5e1ec11cdbcabb8a89cbf2cf2771d69e3cf0e6760094145e542e426bceaab9b2cf261046247bce0565db3ac5888b74efd48bc9f455e60f49496ca8137aba85fe39756814fda1f0624b33a2025792a477ccfff09befb1d0cf1599d272628028b9786e1fbfb3d637c2561421488c9de8d3739a94bf13ac582f6b67de0cad933631794271b2259fe5d73a74ad7da615c31505c7c0c168052d38e5b64c4bb7d0599e5dcf0000000000000000000000000000002790cf17418aa278cfc0c9d1c81c63e58b877706a4b7eed8a5aff253298db2939adc0efdab4745ab0e09ef8beaaf04e5374c2e7e4672e47fe5a25502919954242f8d779d84091f20646210edf871d3f20ad66fcf4b816323b8abb307381d4ada887dcc71e35f364baa1b93fd5ee36c02aa4628511442992ced893ab946472440b53fc08cc41403e167b1f2605e04d5f0c16ed49969b59d650d88642b10c7893fe9b664421a40f4822ffcc284dfe9aea76e4a04293c970f2dae776decf07b085e16511b0bd365b0f86c7fcd8df00a87f4dbbf8e623667e3b65e4c487055a2e5cd64402a4de537bf113fc7370099e4faebe6ea9d4f155f8f5f4c5f9b205ce1bbc8c0002a19457e05a210d9e9820bc7f318ebfdfcc22f83150503b2", @ANYRES16], 0xd, 0x2a0, &(0x7f0000000840)="$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") syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r0 = open(0x0, 0x141042, 0x0) fallocate(r0, 0x8, 0x0, 0x10000) r1 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000500), 0xbf) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe3f) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0xffff}) sendfile(r1, r1, &(0x7f0000000240), 0x7f06) (fail_nth: 13) 2.009248389s ago: executing program 3 (id=6532): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed29010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0xffffffffffffff19, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) 2.008351509s ago: executing program 4 (id=6533): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x44}}, 0x0) fstat(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3818746, &(0x7f0000000280)={[{@nouser_xattr}, {@barrier_val={'barrier', 0x3d, 0x23e8}}, {@block_validity}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fsmagic}, {@pcr={'pcr', 0x3d, 0x32}}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, 'blkio.bfqq\xb7vg_queue_size\x00'}}]}, 0x1, 0x45a, &(0x7f0000001180)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) syz_open_procfs(0x0, &(0x7f0000000240)='attr/exec\x00') r3 = openat$binderfs(0xffffff9c, 0x0, 0x800, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000100001040000eb040100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32], 0x3c}}, 0x0) 1.64081ms ago: executing program 0 (id=6534): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0xa, 0x2400000001, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r5 = socket$inet(0x2, 0xa, 0x2004) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) socket$packet(0x11, 0x3, 0x300) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) 0s ago: executing program 4 (id=6535): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kvm_ioapic_set_irq\x00', r0}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000001840)={0x2020}, 0x2020) (async) read$FUSE(r2, &(0x7f0000001840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) preadv2(r2, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/100, 0x64}], 0x1, 0x2b, 0x0, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) (async) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) (async) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) (async) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) (async) connect$inet(0xffffffffffffffff, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) listen(r1, 0xa1) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) shutdown(r1, 0x1) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000080), 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000956efac4aad8d0272607efc5ce1051fa2ee2349c26069c7fab57722de8dc94a3c387825ffef96bcfa827ee4bbaea31", @ANYRESHEX=r3, @ANYRES64=r5], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) (async) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): veth1_macvtap entered promiscuous mode [ 1658.698618][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1658.706683][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1658.714660][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1658.742438][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1658.758077][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1658.784292][T14676] usb 4-1: USB disconnect, device number 82 [ 1658.795072][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1658.806909][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1658.935398][T25228] tipc: Enabled bearer , priority 0 [ 1659.087436][T20790] device bridge_slave_1 left promiscuous mode [ 1659.093421][T20790] bridge0: port 2(bridge_slave_1) entered disabled state [ 1659.101078][T20790] device bridge_slave_0 left promiscuous mode [ 1659.107130][T20790] bridge0: port 1(bridge_slave_0) entered disabled state [ 1659.114998][T20790] device veth1_macvtap left promiscuous mode [ 1659.124446][T20790] device veth0_vlan left promiscuous mode [ 1659.130057][ T9484] usbhid 1-1:0.0: can't add hid device: -71 [ 1659.136052][ T9484] usbhid: probe of 1-1:0.0 failed with error -71 [ 1659.149062][ T9484] usb 1-1: USB disconnect, device number 64 [ 1659.196484][T15810] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1659.236476][T24345] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1659.436985][T15810] usb 2-1: Using ep0 maxpacket: 32 [ 1659.526488][T24345] usb 3-1: device descriptor read/64, error -71 [ 1659.556607][T15810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1659.576468][T15810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1659.593808][T15810] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1659.612576][T15810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1659.704913][T15810] usb 2-1: config 0 descriptor?? [ 1659.727395][T25223] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1659.747130][T15810] hub 2-1:0.0: USB hub found [ 1659.770375][T20192] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1661.352951][ T24] kauditd_printk_skb: 282 callbacks suppressed [ 1661.352962][ T24] audit: type=1400 audit(2000005684.791:123778): avc: denied { map_create } for pid=25240 comm="syz.0.6275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1661.383622][T15810] hub 2-1:0.0: 5 ports detected [ 1661.397865][ T24] audit: type=1400 audit(2000005684.791:123779): avc: denied { bpf } for pid=25240 comm="syz.0.6275" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1661.417384][T15810] hub 2-1:0.0: insufficient power available to use all downstream ports [ 1661.418896][ T24] audit: type=1400 audit(2000005684.791:123780): avc: denied { map_read map_write } for pid=25240 comm="syz.0.6275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1661.447013][ T24] audit: type=1400 audit(2000005685.101:123781): avc: denied { prog_load } for pid=25240 comm="syz.0.6275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1661.466177][T24345] usb 3-1: device descriptor read/64, error -71 [ 1661.472557][ T24] audit: type=1400 audit(2000005685.101:123782): avc: denied { bpf } for pid=25240 comm="syz.0.6275" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1661.500325][ T24] audit: type=1400 audit(2000005685.101:123783): avc: denied { perfmon } for pid=25240 comm="syz.0.6275" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1661.521831][ T24] audit: type=1400 audit(2000005685.101:123784): avc: denied { prog_run } for pid=25240 comm="syz.0.6275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1661.546237][ T24] audit: type=1400 audit(2000005685.431:123785): avc: denied { read write } for pid=25242 comm="syz.4.6276" name="loop4" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1661.631611][T25257] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1661.638725][T25257] audit: audit_lost=362 audit_rate_limit=0 audit_backlog_limit=64 [ 1661.718450][T20192] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1661.733135][T20192] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1661.743942][T20192] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1661.753493][T20192] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.781748][T20192] usb 4-1: config 0 descriptor?? [ 1661.788090][T25220] tipc: Disabling bearer [ 1661.836631][T15810] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 1661.842792][T15810] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 1661.898381][T25261] tipc: Enabling of bearer rejected, failed to enable media [ 1661.979682][T25262] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1662.449304][T15810] usbhid 2-1:0.0: can't add hid device: -71 [ 1662.455144][T15810] usbhid: probe of 2-1:0.0 failed with error -71 [ 1662.496782][T15810] usb 2-1: USB disconnect, device number 65 [ 1662.606836][T20192] usbhid 4-1:0.0: can't add hid device: -71 [ 1662.615728][T20192] usbhid: probe of 4-1:0.0 failed with error -71 [ 1662.638465][T20192] usb 4-1: USB disconnect, device number 83 [ 1663.031478][T25288] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25288 comm=syz.3.6289 [ 1663.376464][T24345] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1663.857036][T24345] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1663.872041][T25305] sit: Dst spoofed 0.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:1a9a [ 1663.885706][T24345] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1663.936447][T24345] usb 3-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1663.981756][T24345] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1664.021488][T24345] usb 3-1: config 0 descriptor?? [ 1664.306452][T14687] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1664.366707][T24345] usbhid 3-1:0.0: can't add hid device: -71 [ 1664.372691][T25304] SELinux: policydb string length 16 does not match expected length 8 [ 1664.372777][T24345] usbhid: probe of 3-1:0.0 failed with error -71 [ 1664.380775][T25304] SELinux: failed to load policy [ 1664.413603][T24345] usb 3-1: USB disconnect, device number 56 [ 1664.436457][T20192] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1664.463390][T25315] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1664.477579][T25315] overlayfs: filesystem on './bus' not supported as upperdir [ 1664.551167][T25318] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6299'. [ 1664.575376][T25321] udc-core: couldn't find an available UDC or it's busy [ 1664.582585][T25321] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1664.706466][T20192] usb 5-1: Using ep0 maxpacket: 32 [ 1664.726809][T14687] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1664.746540][T14687] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1664.759219][T14687] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1664.776455][T14687] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1664.796598][T14687] usb 4-1: config 0 descriptor?? [ 1664.836483][ T9478] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1664.847631][T20192] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1664.866447][T20192] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1664.886454][T20192] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1664.895267][T20192] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1664.927466][T20192] usb 5-1: config 0 descriptor?? [ 1664.947973][T25313] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1665.050008][T20192] hub 5-1:0.0: USB hub found [ 1665.257119][T20192] hub 5-1:0.0: 5 ports detected [ 1665.280630][T20192] hub 5-1:0.0: insufficient power available to use all downstream ports [ 1665.427398][T14687] plantronics 0003:047F:FFFF.012D: unknown main item tag 0x0 [ 1665.436705][T14687] plantronics 0003:047F:FFFF.012D: unknown main item tag 0x0 [ 1665.451068][T14687] plantronics 0003:047F:FFFF.012D: unknown main item tag 0x0 [ 1665.466822][T14687] plantronics 0003:047F:FFFF.012D: unknown main item tag 0x0 [ 1665.475347][T14687] plantronics 0003:047F:FFFF.012D: unknown main item tag 0x0 [ 1665.483109][T14687] plantronics 0003:047F:FFFF.012D: unknown main item tag 0x0 [ 1665.490966][T14687] plantronics 0003:047F:FFFF.012D: unknown main item tag 0x0 [ 1665.498900][T14687] plantronics 0003:047F:FFFF.012D: unknown main item tag 0x0 [ 1665.509778][T14687] plantronics 0003:047F:FFFF.012D: unknown main item tag 0x0 [ 1665.522264][T14687] plantronics 0003:047F:FFFF.012D: unknown main item tag 0x0 [ 1665.533763][T14687] plantronics 0003:047F:FFFF.012D: No inputs registered, leaving [ 1665.541672][T20192] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 1665.550416][T20192] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 1665.570057][T14687] plantronics 0003:047F:FFFF.012D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1665.636521][ T9478] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 1665.653891][ T9478] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 1665.676190][ T9478] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1665.697045][ T9478] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1665.746561][T20192] usbhid 5-1:0.0: can't add hid device: -71 [ 1665.746637][T25320] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1665.752324][T20192] usbhid: probe of 5-1:0.0 failed with error -71 [ 1665.810184][T20192] usb 5-1: USB disconnect, device number 72 [ 1666.401139][ T24] kauditd_printk_skb: 634 callbacks suppressed [ 1666.401151][ T24] audit: type=1400 audit(2000005691.141:124374): avc: denied { read write } for pid=25216 comm="syz-executor" name="loop4" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1666.431790][ T24] audit: type=1400 audit(2000005691.141:124375): avc: denied { open } for pid=25216 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1666.456224][ T24] audit: type=1400 audit(2000005691.141:124376): avc: denied { ioctl } for pid=25216 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=115 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1666.482211][ T24] audit: type=1400 audit(2000005691.151:124377): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1666.504181][ T24] audit: type=1400 audit(2000005691.151:124378): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1666.528543][ T24] audit: type=1400 audit(2000005691.151:124379): avc: denied { append } for pid=77 comm="syslogd" name="messages" dev="tmpfs" ino=27 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1666.567280][ T24] audit: type=1400 audit(2000005691.151:124380): avc: denied { open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=27 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1666.589969][ T24] audit: type=1400 audit(2000005691.151:124381): avc: denied { getattr } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=27 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1666.628320][ T24] audit: type=1400 audit(2000005691.171:124382): avc: denied { prog_load } for pid=25329 comm="syz.1.6302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1666.654640][ T24] audit: type=1400 audit(2000005691.171:124383): avc: denied { bpf } for pid=25329 comm="syz.1.6302" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1666.666511][ T9478] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 1666.897795][ T9478] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input119 [ 1666.923721][ T9478] usb 1-1: USB disconnect, device number 65 [ 1666.929465][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1667.522380][T15829] usb 4-1: USB disconnect, device number 84 [ 1669.237163][T25375] sit: Dst spoofed 0.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:1a9a [ 1669.306424][T14687] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1669.586419][ T9484] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1669.706527][T14687] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1669.717541][T14687] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1669.728542][T14687] usb 3-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1669.737657][T14687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1669.760307][T25382] FAULT_INJECTION: forcing a failure. [ 1669.760307][T25382] name failslab, interval 1, probability 0, space 0, times 0 [ 1669.764986][T14687] usb 3-1: config 0 descriptor?? [ 1669.773066][T25382] CPU: 0 PID: 25382 Comm: syz.3.6315 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 1669.787471][T25382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1669.797363][T25382] Call Trace: [ 1669.800495][T25382] dump_stack_lvl+0x1e2/0x24b [ 1669.805001][T25382] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1669.810299][T25382] ? security_compute_av+0xd50/0xd50 [ 1669.815418][T25382] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 1669.820712][T25382] dump_stack+0x15/0x17 [ 1669.824702][T25382] should_fail+0x3c6/0x510 [ 1669.828961][T25382] ? avc_alloc_node+0x7e/0x360 [ 1669.833557][T25382] __should_failslab+0xa4/0xe0 [ 1669.838160][T25382] should_failslab+0x9/0x20 [ 1669.842495][T25382] kmem_cache_alloc+0x3d/0x2e0 [ 1669.847106][T25382] avc_alloc_node+0x7e/0x360 [ 1669.851521][T25382] ? __kasan_check_write+0x14/0x20 [ 1669.856477][T25382] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 1669.861766][T25382] ? _raw_spin_lock+0x1b0/0x1b0 [ 1669.866453][T25382] ? avc_xperms_free+0x280/0x280 [ 1669.871229][T25382] avc_compute_av+0x136/0x690 [ 1669.875740][T25382] avc_has_perm_noaudit+0x1d6/0x240 [ 1669.880773][T25382] ? avc_denied+0x1b0/0x1b0 [ 1669.885115][T25382] ? stack_trace_save+0x1c0/0x1c0 [ 1669.889977][T25382] selinux_inode_permission+0x379/0x690 [ 1669.895380][T25382] ? selinux_inode_follow_link+0x3c0/0x3c0 [ 1669.900998][T25382] ? stack_trace_save+0x113/0x1c0 [ 1669.905872][T25382] security_inode_permission+0xa0/0xf0 [ 1669.911167][T25382] inode_permission+0xf1/0x500 [ 1669.915751][T25382] link_path_walk+0x1f6/0xbd0 [ 1669.920268][T25382] ? path_init+0xe52/0x11a0 [ 1669.924602][T25382] ? handle_lookup_down+0x130/0x130 [ 1669.929727][T25382] path_lookupat+0xa0/0x450 [ 1669.934067][T25382] filename_lookup+0x26a/0x6f0 [ 1669.938662][T25382] ? hashlen_string+0x120/0x120 [ 1669.943355][T25382] ? getname_flags+0x1fd/0x520 [ 1669.947951][T25382] user_path_at_empty+0x40/0x50 [ 1669.952641][T25382] __se_sys_mount+0x285/0x3b0 [ 1669.957153][T25382] ? __x64_sys_mount+0xd0/0xd0 [ 1669.961750][T25382] __x64_sys_mount+0xbf/0xd0 [ 1669.966175][T25382] do_syscall_64+0x34/0x70 [ 1669.970432][T25382] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1669.976157][T25382] RIP: 0033:0x7f751f541ff9 [ 1669.980413][T25382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1669.999852][T25382] RSP: 002b:00007f751e1bb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1670.008273][T25382] RAX: ffffffffffffffda RBX: 00007f751f6f9f80 RCX: 00007f751f541ff9 [ 1670.016381][T25382] RDX: 0000000000000000 RSI: 0000000020006480 RDI: 0000000000000000 [ 1670.024178][T25382] RBP: 00007f751e1bb090 R08: 0000000000000000 R09: 0000000000000000 [ 1670.031990][T25382] R10: 0000000000084008 R11: 0000000000000246 R12: 0000000000000001 [ 1670.039799][T25382] R13: 0000000000000000 R14: 00007f751f6f9f80 R15: 00007fff97e245f8 [ 1670.049176][ T9483] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1670.216487][ T9484] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1670.227536][ T9484] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1670.248169][ T9484] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1670.257495][ T9484] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1670.266963][ T9484] usb 1-1: config 0 descriptor?? [ 1670.296464][ T9483] usb 5-1: Using ep0 maxpacket: 32 [ 1670.539095][T14687] usbhid 3-1:0.0: can't add hid device: -71 [ 1670.545724][T14687] usbhid: probe of 3-1:0.0 failed with error -71 [ 1670.555538][T14687] usb 3-1: USB disconnect, device number 57 [ 1670.606474][ T9483] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1670.617508][ T9483] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1670.628370][ T9483] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1670.637261][ T9484] usbhid 1-1:0.0: can't add hid device: -71 [ 1670.642968][ T9484] usbhid: probe of 1-1:0.0 failed with error -71 [ 1670.649083][ T9483] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1670.657956][ T9484] usb 1-1: USB disconnect, device number 66 [ 1670.665703][ T9483] usb 5-1: config 0 descriptor?? [ 1670.686847][T25380] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1670.707167][ T9483] hub 5-1:0.0: USB hub found [ 1670.826447][T15829] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1670.926486][ T9483] hub 5-1:0.0: 5 ports detected [ 1670.948078][ T9483] hub 5-1:0.0: insufficient power available to use all downstream ports [ 1671.270793][T15829] usb 4-1: Using ep0 maxpacket: 32 [ 1671.306693][ T9483] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 1671.312829][ T9483] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 1671.386527][T15829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1671.397622][T15829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1671.408712][T15829] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1671.417520][ T9483] usbhid 5-1:0.0: can't add hid device: -71 [ 1671.417881][ T24] kauditd_printk_skb: 386 callbacks suppressed [ 1671.417892][ T24] audit: type=1400 audit(2000005696.161:124770): avc: denied { read } for pid=25393 comm="syz.1.6319" path="socket:[118958]" dev="sockfs" ino=118958 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1671.423242][ T9478] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1671.460511][ T9483] usbhid: probe of 5-1:0.0 failed with error -71 [ 1671.466641][T15829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1671.476097][T15829] usb 4-1: config 0 descriptor?? [ 1671.481017][ T24] audit: type=1400 audit(2000005696.211:124771): avc: denied { read } for pid=25393 comm="syz.1.6319" path="socket:[118958]" dev="sockfs" ino=118958 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1671.505011][ T24] audit: type=1400 audit(2000005696.221:124772): avc: denied { read } for pid=25393 comm="syz.1.6319" path="socket:[118958]" dev="sockfs" ino=118958 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1671.505454][T25389] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1671.530273][ T24] audit: type=1400 audit(2000005696.221:124773): avc: denied { read } for pid=25393 comm="syz.1.6319" path="socket:[118958]" dev="sockfs" ino=118958 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1671.536024][ T9483] usb 5-1: USB disconnect, device number 73 [ 1671.559854][ T24] audit: type=1400 audit(2000005696.241:124774): avc: denied { ioctl } for pid=25387 comm="syz.3.6317" path="/dev/raw-gadget" dev="devtmpfs" ino=161 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1671.565832][T15829] hub 4-1:0.0: USB hub found [ 1671.596311][ T24] audit: type=1400 audit(2000005696.241:124775): avc: denied { ioctl } for pid=25387 comm="syz.3.6317" path="/dev/raw-gadget" dev="devtmpfs" ino=161 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1671.621336][ T24] audit: type=1400 audit(2000005696.241:124776): avc: denied { read } for pid=25393 comm="syz.1.6319" path="socket:[118958]" dev="sockfs" ino=118958 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1671.645652][ T24] audit: type=1400 audit(2000005696.331:124777): avc: denied { read } for pid=25393 comm="syz.1.6319" path="socket:[118958]" dev="sockfs" ino=118958 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1671.669735][ T24] audit: type=1400 audit(2000005696.331:124778): avc: denied { read } for pid=25393 comm="syz.1.6319" path="socket:[118958]" dev="sockfs" ino=118958 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1671.693879][ T24] audit: type=1400 audit(2000005696.331:124779): avc: denied { read } for pid=25393 comm="syz.1.6319" path="socket:[118958]" dev="sockfs" ino=118958 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1671.776480][T15829] hub 4-1:0.0: 2 ports detected [ 1671.824208][ T9478] usb 1-1: Using ep0 maxpacket: 32 [ 1672.016004][T25410] tipc: Started in network mode [ 1672.020800][T25410] tipc: Own node identity f258c8c87067, cluster identity 4711 [ 1672.028282][T25410] tipc: Enabled bearer , priority 0 [ 1672.122887][ T9478] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1672.133612][ T9478] usb 1-1: config 0 has no interface number 0 [ 1672.139530][ T9478] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1672.150223][ T9478] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1672.159891][ T9478] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1672.168867][ T9478] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1672.177504][ T9478] usb 1-1: config 0 descriptor?? [ 1672.401101][T20192] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1672.566423][T24345] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1672.646405][T20192] usb 3-1: Using ep0 maxpacket: 16 [ 1672.776946][T20192] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1672.787630][T20192] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1672.800549][T20192] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1672.809373][T20192] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1672.818331][T20192] usb 3-1: config 0 descriptor?? [ 1672.856489][T24345] usb 5-1: device descriptor read/64, error -71 [ 1673.036452][ T9483] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1673.076527][ T9478] uclogic 0003:28BD:0094.012E: pen parameters not found [ 1673.083448][ T9478] uclogic 0003:28BD:0094.012E: interface is invalid, ignoring [ 1673.146430][T24346] tipc: 32-bit node address hash set to c8c83f82 [ 1673.246441][T24345] usb 5-1: device descriptor read/64, error -71 [ 1673.276416][ T9483] usb 2-1: Using ep0 maxpacket: 8 [ 1673.292997][T20192] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.012F/input/input120 [ 1673.305144][ T9478] usb 1-1: USB disconnect, device number 67 [ 1673.368471][T20192] microsoft 0003:045E:07DA.012F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1673.396504][ T9483] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1673.407875][ T9483] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1673.417756][ T9483] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1673.454117][T15829] usb 4-1: USB disconnect, device number 85 [ 1673.460149][ T9483] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1673.470971][ T9483] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1673.479842][ T9483] usb 2-1: config 0 descriptor?? [ 1673.516423][T24345] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1673.711187][T20192] usb 3-1: USB disconnect, device number 58 [ 1673.836421][T24345] usb 5-1: device descriptor read/64, error -71 [ 1673.957430][ T9483] hid-steam 0003:28DE:1102.0130: item fetching failed at offset 0/7 [ 1673.965437][ T9483] hid-steam 0003:28DE:1102.0130: steam_probe:parse of hid interface failed [ 1673.973976][ T9483] hid-steam: probe of 0003:28DE:1102.0130 failed with error -22 [ 1674.160385][ T9483] usb 2-1: USB disconnect, device number 66 [ 1674.256500][T24345] usb 5-1: device descriptor read/64, error -71 [ 1674.376541][T24345] usb usb5-port1: attempt power cycle [ 1674.836499][T24345] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1674.930848][T25410] tipc: Disabling bearer [ 1675.006463][T15829] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1675.636434][T15829] usb 3-1: Using ep0 maxpacket: 32 [ 1675.806419][T24345] usb 5-1: device not accepting address 76, error -71 [ 1675.900708][T20192] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1675.957076][T25446] FAULT_INJECTION: forcing a failure. [ 1675.957076][T25446] name failslab, interval 1, probability 0, space 0, times 0 [ 1675.970475][T25446] CPU: 1 PID: 25446 Comm: syz.4.6333 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 1675.980254][T25446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1675.990143][T25446] Call Trace: [ 1675.993281][T25446] dump_stack_lvl+0x1e2/0x24b [ 1675.997789][T25446] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1676.003083][T25446] dump_stack+0x15/0x17 [ 1676.007076][T25446] should_fail+0x3c6/0x510 [ 1676.011353][T25446] ? shmem_initxattrs+0xd2/0x200 [ 1676.016203][T25446] __should_failslab+0xa4/0xe0 [ 1676.020801][T25446] should_failslab+0x9/0x20 [ 1676.025129][T25446] __kmalloc+0x60/0x330 [ 1676.029122][T25446] shmem_initxattrs+0xd2/0x200 [ 1676.033722][T25446] security_inode_init_security+0x252/0x390 [ 1676.039449][T25446] ? shmem_tmpfile+0x100/0x100 [ 1676.044049][T25446] ? security_dentry_create_files_as+0xc0/0xc0 [ 1676.050038][T25446] ? simple_acl_create+0x29e/0x2c0 [ 1676.054987][T25446] shmem_mknod+0xb8/0x1c0 [ 1676.059151][T25446] shmem_create+0x2b/0x40 [ 1676.063314][T25446] ? shmem_fallocate+0xe90/0xe90 [ 1676.068090][T25446] path_openat+0x1377/0x3000 [ 1676.072519][T25446] ? do_filp_open+0x460/0x460 [ 1676.077030][T25446] do_filp_open+0x21c/0x460 [ 1676.081366][T25446] ? vfs_tmpfile+0x2b0/0x2b0 [ 1676.085802][T25446] ? get_unused_fd_flags+0x94/0xa0 [ 1676.090746][T25446] do_sys_openat2+0x13f/0x710 [ 1676.095257][T25446] ? do_sys_open+0x220/0x220 [ 1676.100463][T25446] ? __kasan_check_write+0x14/0x20 [ 1676.105407][T25446] ? fput_many+0x160/0x1b0 [ 1676.109663][T25446] ? fput+0x1a/0x20 [ 1676.113304][T25446] ? ksys_write+0x260/0x2c0 [ 1676.117644][T25446] __x64_sys_creat+0x11f/0x160 [ 1676.122245][T25446] ? __x32_compat_sys_openat+0x290/0x290 [ 1676.127717][T25446] ? debug_smp_processor_id+0x17/0x20 [ 1676.132920][T25446] do_syscall_64+0x34/0x70 [ 1676.137189][T25446] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1676.142902][T25446] RIP: 0033:0x7f0a979f8ff9 [ 1676.147155][T25446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1676.166594][T25446] RSP: 002b:00007f0a96672038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 1676.174840][T25446] RAX: ffffffffffffffda RBX: 00007f0a97bb0f80 RCX: 00007f0a979f8ff9 [ 1676.182658][T25446] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1676.190468][T25446] RBP: 00007f0a96672090 R08: 0000000000000000 R09: 0000000000000000 [ 1676.198277][T25446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1676.206103][T25446] R13: 0000000000000000 R14: 00007f0a97bb0f80 R15: 00007fff696588c8 [ 1676.334907][T25443] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6330'. [ 1676.346957][T15829] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1676.355680][T15829] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1676.365782][T15829] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1676.366466][T20192] usb 4-1: Using ep0 maxpacket: 32 [ 1676.434953][ T24] kauditd_printk_skb: 415 callbacks suppressed [ 1676.434963][ T24] audit: type=1400 audit(2000005701.171:125195): avc: denied { map_create } for pid=25448 comm="syz.4.6334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1676.461303][ T24] audit: type=1400 audit(2000005701.171:125196): avc: denied { bpf } for pid=25448 comm="syz.4.6334" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1676.483419][ T24] audit: type=1400 audit(2000005701.171:125197): avc: denied { map_read map_write } for pid=25448 comm="syz.4.6334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1676.510419][ T24] audit: type=1400 audit(2000005701.201:125198): avc: denied { ioctl } for pid=25441 comm="syz.3.6332" path="/dev/raw-gadget" dev="devtmpfs" ino=161 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1676.536467][T20192] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1676.552372][T20192] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1676.556528][T15829] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1676.563769][T20192] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1676.581212][T20192] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1676.586448][T15829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1676.596849][ T24] audit: type=1400 audit(2000005701.231:125199): avc: denied { read write } for pid=21772 comm="syz-executor" name="loop0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1676.617043][T20192] usb 4-1: config 0 descriptor?? [ 1676.628729][T15829] usb 3-1: Product: syz [ 1676.666950][T25442] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1676.697119][T20192] hub 4-1:0.0: USB hub found [ 1676.702166][T15829] usb 3-1: Manufacturer: syz [ 1676.706920][T15829] usb 3-1: SerialNumber: syz [ 1676.711724][ T24] audit: type=1400 audit(2000005701.231:125200): avc: denied { open } for pid=21772 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1676.737246][ T24] audit: type=1400 audit(2000005701.231:125201): avc: denied { ioctl } for pid=21772 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=111 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1676.857234][ T24] audit: type=1400 audit(2000005701.241:125202): avc: denied { ioctl } for pid=25425 comm="syz.2.6327" path="/dev/raw-gadget" dev="devtmpfs" ino=161 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1676.916438][T20192] hub 4-1:0.0: 5 ports detected [ 1676.936496][T20192] hub 4-1:0.0: insufficient power available to use all downstream ports [ 1676.945453][ T24] audit: type=1400 audit(2000005701.241:125203): avc: denied { prog_load } for pid=25448 comm="syz.4.6334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1677.097552][ T24] audit: type=1400 audit(2000005701.251:125204): avc: denied { bpf } for pid=25448 comm="syz.4.6334" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1677.206710][T25455] netlink: 13 bytes leftover after parsing attributes in process `syz.0.6335'. [ 1677.836547][T20192] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 1677.856945][T20192] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 1677.931645][T25465] FAULT_INJECTION: forcing a failure. [ 1677.931645][T25465] name failslab, interval 1, probability 0, space 0, times 0 [ 1677.944060][T25465] CPU: 0 PID: 25465 Comm: syz.4.6338 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 1677.953830][T25465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1677.964074][T25465] Call Trace: [ 1677.967211][T25465] dump_stack_lvl+0x1e2/0x24b [ 1677.971720][T25465] ? panic+0x812/0x812 [ 1677.975641][T25465] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1677.980907][T25465] ? 0xffffffffa0026338 [ 1677.984904][T25465] ? is_bpf_text_address+0x172/0x190 [ 1677.990026][T25465] ? stack_trace_save+0x1c0/0x1c0 [ 1677.994885][T25465] dump_stack+0x15/0x17 [ 1677.998877][T25465] should_fail+0x3c6/0x510 [ 1678.003130][T25465] ? dst_alloc+0x17d/0x590 [ 1678.007388][T25465] __should_failslab+0xa4/0xe0 [ 1678.011984][T25465] should_failslab+0x9/0x20 [ 1678.016321][T25465] kmem_cache_alloc+0x3d/0x2e0 [ 1678.017235][T20192] usbhid 4-1:0.0: can't add hid device: -71 [ 1678.020928][T25465] dst_alloc+0x17d/0x590 [ 1678.020938][T25465] ip_route_input_rcu+0x1a8a/0x2890 [ 1678.020958][T25465] ? unwind_get_return_address+0x4d/0x90 [ 1678.026812][T20192] usbhid: probe of 4-1:0.0 failed with error -71 [ 1678.030737][T25465] ? ip_route_input_noref+0x110/0x110 [ 1678.030745][T25465] ? ipt_do_table+0x14ff/0x1760 [ 1678.030763][T25465] ip_route_input_noref+0xba/0x110 [ 1678.049121][T20192] usb 4-1: USB disconnect, device number 86 [ 1678.052610][T25465] ? ip_route_use_hint+0x4f0/0x4f0 [ 1678.072915][T25465] ? __kasan_check_write+0x14/0x20 [ 1678.077866][T25465] ? nf_nat_ipv4_pre_routing+0x255/0x3b0 [ 1678.083333][T25465] ip_rcv_finish_core+0x40e/0x12f0 [ 1678.088274][T25465] ip_rcv+0xef/0x320 [ 1678.092007][T25465] ? ip_local_deliver_finish+0x240/0x240 [ 1678.097477][T25465] ? ip_rcv_core+0xaa0/0xaa0 [ 1678.102080][T25465] ? __kasan_slab_alloc+0xc3/0xe0 [ 1678.107019][T25465] ? __kasan_slab_alloc+0xb1/0xe0 [ 1678.111879][T25465] ? ip_local_deliver_finish+0x240/0x240 [ 1678.117349][T25465] __netif_receive_skb+0x1c6/0x530 [ 1678.122297][T25465] ? ksys_write+0x199/0x2c0 [ 1678.126644][T25465] ? __x64_sys_write+0x7b/0x90 [ 1678.131233][T25465] ? do_syscall_64+0x34/0x70 [ 1678.135661][T25465] ? deliver_ptype_list_skb+0x3c0/0x3c0 [ 1678.141049][T25465] netif_receive_skb+0xb0/0x480 [ 1678.145728][T25465] ? netif_receive_skb_core+0x210/0x210 [ 1678.151111][T25465] tun_rx_batched+0x6d9/0x870 [ 1678.155621][T25465] ? eth_type_trans+0x2e4/0x620 [ 1678.160307][T25465] ? local_bh_enable+0x30/0x30 [ 1678.164908][T25465] tun_get_user+0x2bf3/0x38f0 [ 1678.169424][T25465] ? _kstrtoull+0x3a0/0x4a0 [ 1678.173761][T25465] ? tun_do_read+0x1f60/0x1f60 [ 1678.178361][T25465] ? kstrtouint_from_user+0x20a/0x2a0 [ 1678.183569][T25465] ? kstrtol_from_user+0x310/0x310 [ 1678.188518][T25465] ? avc_policy_seqno+0x1b/0x70 [ 1678.193205][T25465] ? selinux_file_permission+0x2bb/0x560 [ 1678.198676][T25465] ? fsnotify_perm+0x67/0x4e0 [ 1678.203189][T25465] tun_chr_write_iter+0x1a8/0x250 [ 1678.208044][T25465] vfs_write+0xb4c/0xe70 [ 1678.212299][T25465] ? kernel_write+0x3d0/0x3d0 [ 1678.216803][T25465] ? __fdget_pos+0x209/0x3a0 [ 1678.221316][T25465] ? ksys_write+0x77/0x2c0 [ 1678.225562][T25465] ksys_write+0x199/0x2c0 [ 1678.229727][T25465] ? __ia32_sys_read+0x90/0x90 [ 1678.234326][T25465] ? debug_smp_processor_id+0x17/0x20 [ 1678.239533][T25465] __x64_sys_write+0x7b/0x90 [ 1678.243958][T25465] do_syscall_64+0x34/0x70 [ 1678.248215][T25465] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1678.253938][T25465] RIP: 0033:0x7f0a979f7adf [ 1678.258194][T25465] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 1678.277640][T25465] RSP: 002b:00007f0a96672000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1678.286275][T25465] RAX: ffffffffffffffda RBX: 00007f0a97bb0f80 RCX: 00007f0a979f7adf [ 1678.294251][T25465] RDX: 0000000000000036 RSI: 0000000020001800 RDI: 00000000000000c8 [ 1678.302058][T25465] RBP: 00007f0a96672090 R08: 0000000000000000 R09: 0000000000000000 [ 1678.309867][T25465] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 1678.317679][T25465] R13: 0000000000000000 R14: 00007f0a97bb0f80 R15: 00007fff696588c8 [ 1678.803096][T25482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6342'. [ 1679.076437][T15829] usb 3-1: 0:2 : does not exist [ 1679.102667][T15829] usb 3-1: USB disconnect, device number 59 [ 1679.176484][T24344] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1679.856526][T24344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1679.879461][T24344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1679.902604][T24344] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1679.923275][T24344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1679.945955][T24344] usb 5-1: config 0 descriptor?? [ 1680.079621][T25495] sit: Dst spoofed 0.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:1a9a [ 1680.617610][T24344] isku 0003:1E7D:319C.0131: item fetching failed at offset 5/7 [ 1680.637787][T24344] isku 0003:1E7D:319C.0131: parse failed [ 1680.706418][T24344] isku: probe of 0003:1E7D:319C.0131 failed with error -22 [ 1680.821420][T15829] usb 5-1: USB disconnect, device number 78 [ 1681.496807][ T24] kauditd_printk_skb: 327 callbacks suppressed [ 1681.496816][ T24] audit: type=1400 audit(2000005706.241:125529): avc: denied { map_create } for pid=25511 comm="syz.0.6351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1681.523476][ T24] audit: type=1400 audit(2000005706.261:125530): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1681.616383][ T24] audit: type=1400 audit(2000005706.261:125531): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1681.746998][ T24] audit: type=1400 audit(2000005706.261:125532): avc: denied { append } for pid=77 comm="syslogd" name="messages" dev="tmpfs" ino=27 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1681.770522][ T24] audit: type=1400 audit(2000005706.261:125533): avc: denied { open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=27 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1681.793479][ T24] audit: type=1400 audit(2000005706.261:125534): avc: denied { getattr } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=27 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1681.816789][ T24] audit: type=1400 audit(2000005706.341:125535): avc: denied { read write } for pid=23079 comm="syz-executor" name="loop2" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1681.841565][ T24] audit: type=1400 audit(2000005706.341:125536): avc: denied { open } for pid=23079 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1681.869754][ T24] audit: type=1400 audit(2000005706.341:125537): avc: denied { ioctl } for pid=23079 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=113 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1681.950892][ T24] audit: type=1400 audit(2000005706.341:125538): avc: denied { read write } for pid=25216 comm="syz-executor" name="loop4" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1681.978214][T15810] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1682.126391][ T9483] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1682.176389][T15829] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1682.216437][T15810] usb 2-1: Using ep0 maxpacket: 16 [ 1682.336522][T15810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1682.347884][T15810] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1682.360585][T15810] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1682.369367][ T9483] usb 1-1: Using ep0 maxpacket: 32 [ 1682.374371][T15810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1682.383111][T15810] usb 2-1: config 0 descriptor?? [ 1682.416444][T15829] usb 5-1: Using ep0 maxpacket: 32 [ 1682.486436][ T9483] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1682.497682][ T9483] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1682.508720][ T9483] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1682.517647][ T9483] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1682.527697][ T9483] usb 1-1: config 0 descriptor?? [ 1682.536988][T15829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1682.548260][T25514] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1682.555097][T15829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1682.566296][T15829] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1682.575842][ T9483] hub 1-1:0.0: USB hub found [ 1682.582003][T15829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1682.600742][T15829] usb 5-1: config 0 descriptor?? [ 1682.616621][T25518] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1682.638237][T15829] hub 5-1:0.0: USB hub found [ 1682.776426][ T9483] hub 1-1:0.0: 2 ports detected [ 1682.856426][T15829] hub 5-1:0.0: 5 ports detected [ 1682.870306][T15810] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0132/input/input121 [ 1682.881750][T15829] hub 5-1:0.0: insufficient power available to use all downstream ports [ 1682.896440][T14687] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1682.958680][T15810] microsoft 0003:045E:07DA.0132: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1683.106424][T15829] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 1683.112621][T15829] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 1683.156400][T14687] usb 3-1: Using ep0 maxpacket: 16 [ 1683.216612][T15829] usbhid 5-1:0.0: can't add hid device: -71 [ 1683.222627][T15829] usbhid: probe of 5-1:0.0 failed with error -71 [ 1683.256704][T15829] usb 5-1: USB disconnect, device number 79 [ 1683.274545][ T9484] usb 2-1: USB disconnect, device number 67 [ 1683.286620][T14687] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1683.466446][T14687] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1683.475294][T14687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.483125][T14687] usb 3-1: Product: syz [ 1683.487092][T14687] usb 3-1: Manufacturer: syz [ 1683.491496][T14687] usb 3-1: SerialNumber: syz [ 1683.497146][T14687] usb 3-1: config 0 descriptor?? [ 1683.537142][T14687] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1683.545048][T14687] usb 3-1: Detected FT232RL [ 1683.756414][T14687] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1683.779641][T14687] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1683.806719][T14687] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 1683.816509][T14687] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1683.836555][T14687] usb 3-1: USB disconnect, device number 60 [ 1683.846590][T14687] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1683.855834][T14687] ftdi_sio 3-1:0.0: device disconnected [ 1684.493831][T15829] usb 1-1: USB disconnect, device number 68 [ 1684.506422][ T9483] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 1684.846444][T14687] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1685.276441][T14687] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1685.297173][T14687] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1685.336421][T14687] usb 3-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1685.379221][T14687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1685.497325][T14687] usb 3-1: config 0 descriptor?? [ 1685.631719][T25549] tipc: Enabled bearer , priority 0 [ 1686.106433][T14687] usbhid 3-1:0.0: can't add hid device: -71 [ 1686.112298][T14687] usbhid: probe of 3-1:0.0 failed with error -71 [ 1686.120756][T14687] usb 3-1: USB disconnect, device number 61 [ 1686.126429][T15829] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1686.286574][T24345] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1686.396464][T15829] usb 1-1: device descriptor read/64, error -71 [ 1686.512814][ T24] kauditd_printk_skb: 286 callbacks suppressed [ 1686.512826][ T24] audit: type=1400 audit(2000005711.251:125825): avc: denied { read write } for pid=23079 comm="syz-executor" name="loop2" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1686.543889][ T24] audit: type=1400 audit(2000005711.251:125826): avc: denied { read write open } for pid=23079 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1686.569846][ T24] audit: type=1400 audit(2000005711.251:125827): avc: denied { ioctl } for pid=23079 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=113 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1686.595910][ T24] audit: type=1400 audit(2000005711.261:125828): avc: denied { read write } for pid=25564 comm="syz.2.6365" name="raw-gadget" dev="devtmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1686.619722][T24345] usb 4-1: Using ep0 maxpacket: 32 [ 1686.624998][ T24] audit: type=1400 audit(2000005711.261:125829): avc: denied { read write open } for pid=25564 comm="syz.2.6365" path="/dev/raw-gadget" dev="devtmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1686.649806][ T24] audit: type=1400 audit(2000005711.261:125830): avc: denied { ioctl } for pid=25564 comm="syz.2.6365" path="/dev/raw-gadget" dev="devtmpfs" ino=161 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1686.678280][ T24] audit: type=1400 audit(2000005711.261:125831): avc: denied { ioctl } for pid=25564 comm="syz.2.6365" path="/dev/raw-gadget" dev="devtmpfs" ino=161 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1686.704988][ T24] audit: type=1400 audit(2000005711.311:125832): avc: denied { ioctl } for pid=25545 comm="syz.0.6360" path="/dev/raw-gadget" dev="devtmpfs" ino=161 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1686.730759][ T24] audit: type=1400 audit(2000005711.311:125833): avc: denied { create } for pid=25566 comm="syz.1.6366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1686.750727][ T24] audit: type=1400 audit(2000005711.311:125834): avc: denied { prog_load } for pid=25566 comm="syz.1.6366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1686.796457][T14687] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1686.806481][T24345] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1686.814447][T24345] usb 4-1: config 0 has no interface number 0 [ 1686.820394][T24345] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1686.831082][T24345] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1686.840753][T24345] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1686.849626][T24345] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1686.859465][T24345] usb 4-1: config 0 descriptor?? [ 1686.876358][T15829] usb 1-1: device descriptor read/64, error -71 [ 1687.146529][T15829] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1687.226431][T14687] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1687.237152][T14687] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1687.246704][T14687] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1687.255499][T14687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1687.265777][T14687] usb 3-1: config 0 descriptor?? [ 1687.416385][T15829] usb 1-1: device descriptor read/64, error -71 [ 1687.450574][T25574] FAULT_INJECTION: forcing a failure. [ 1687.450574][T25574] name failslab, interval 1, probability 0, space 0, times 0 [ 1687.463950][T25574] CPU: 0 PID: 25574 Comm: syz.1.6368 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 1687.473969][T25574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1687.483857][T25574] Call Trace: [ 1687.486992][T25574] dump_stack_lvl+0x1e2/0x24b [ 1687.491532][T25574] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1687.496840][T25574] dump_stack+0x15/0x17 [ 1687.500788][T25574] should_fail+0x3c6/0x510 [ 1687.505049][T25574] ? audit_log_start+0x48c/0x9b0 [ 1687.509813][T25574] __should_failslab+0xa4/0xe0 [ 1687.514424][T25574] should_failslab+0x9/0x20 [ 1687.518759][T25574] kmem_cache_alloc+0x3d/0x2e0 [ 1687.523354][T25574] audit_log_start+0x48c/0x9b0 [ 1687.527959][T25574] ? audit_serial+0x30/0x30 [ 1687.532314][T25574] ? fsnotify_perm+0x67/0x4e0 [ 1687.536817][T25574] ? security_file_permission+0x7b/0xb0 [ 1687.542193][T25574] ? security_file_permission+0x86/0xb0 [ 1687.547580][T25574] ? ppp_write+0x66/0x360 [ 1687.551732][T25574] ? rw_verify_area+0x1c3/0x360 [ 1687.556421][T25574] audit_seccomp+0x61/0x1e0 [ 1687.560759][T25574] __seccomp_filter+0xd03/0x1e10 [ 1687.565532][T25574] ? vfs_writev+0x3a8/0x510 [ 1687.569870][T25574] ? __secure_computing+0x300/0x300 [ 1687.574906][T25574] ? kmem_cache_free+0xa9/0x1e0 [ 1687.579592][T25574] ? __fget_files+0x31e/0x380 [ 1687.584111][T25574] ? fput_many+0x160/0x1b0 [ 1687.588362][T25574] ? fput+0x1a/0x20 [ 1687.592002][T25574] ? do_writev+0x2bb/0x340 [ 1687.596258][T25574] ? do_readv+0x460/0x460 [ 1687.600424][T25574] __secure_computing+0xf0/0x300 [ 1687.605197][T25574] syscall_enter_from_user_mode+0xbf/0x1a0 [ 1687.610838][T25574] do_syscall_64+0x13/0x70 [ 1687.615092][T25574] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1687.620816][T25574] RIP: 0033:0x7f7db5121a3c [ 1687.625070][T25574] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1687.644509][T25574] RSP: 002b:00007f7db3d9c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1687.652755][T25574] RAX: ffffffffffffffda RBX: 00007f7db52daf80 RCX: 00007f7db5121a3c [ 1687.660565][T25574] RDX: 000000000000000f RSI: 00007f7db3d9c0a0 RDI: 0000000000000005 [ 1687.668377][T25574] RBP: 00007f7db3d9c090 R08: 0000000000000000 R09: 0000000000000000 [ 1687.676188][T25574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1687.684007][T25574] R13: 0000000000000000 R14: 00007f7db52daf80 R15: 00007fff652b9008 [ 1687.712099][T25563] udc-core: couldn't find an available UDC or it's busy [ 1687.728509][T25550] tipc: Disabling bearer [ 1687.737754][T25563] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1687.808604][T25575] bridge0: port 3(syz_tun) entered blocking state [ 1687.814833][T25575] bridge0: port 3(syz_tun) entered disabled state [ 1687.821949][T25575] device syz_tun entered promiscuous mode [ 1687.827630][T25575] bridge0: port 3(syz_tun) entered blocking state [ 1687.833840][T25575] bridge0: port 3(syz_tun) entered forwarding state [ 1687.857911][T25580] udc-core: couldn't find an available UDC or it's busy [ 1687.864658][T25580] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1687.907637][T24345] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0094.0133/input/input122 [ 1687.940902][T24345] uclogic 0003:28BD:0094.0133: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.3-1/input1 [ 1689.194153][T24345] usb 4-1: USB disconnect, device number 87 [ 1689.246881][T25595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6373'. [ 1689.566687][T24344] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1689.696374][T14687] usbhid 3-1:0.0: can't add hid device: -71 [ 1689.706605][T14687] usbhid: probe of 3-1:0.0 failed with error -71 [ 1689.714837][T14687] usb 3-1: USB disconnect, device number 62 [ 1690.102481][T25612] EXT4-fs warning (device sda1): ext4_group_extend:1805: can't shrink FS - resize aborted [ 1690.216532][T24344] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1690.224942][T24344] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1690.234879][T24345] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1690.242597][T24344] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1690.251405][T24344] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1690.376365][T15829] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1690.376557][T24344] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1690.392651][T24344] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1690.400427][T24344] usb 5-1: Product: syz [ 1690.404418][T24344] usb 5-1: Manufacturer: syz [ 1690.456928][T24344] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 1690.506346][T24345] usb 4-1: Using ep0 maxpacket: 32 [ 1690.646387][T15829] usb 1-1: device descriptor read/64, error -71 [ 1690.660468][T24344] usb 5-1: USB disconnect, device number 80 [ 1690.880295][T25624] tipc: Enabled bearer , priority 0 [ 1691.016501][T24345] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1691.025642][T24345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.033517][T24345] usb 4-1: Product: syz [ 1691.037470][T24345] usb 4-1: Manufacturer: syz [ 1691.043454][T24345] usb 4-1: SerialNumber: syz [ 1691.060593][T24345] usb 4-1: config 0 descriptor?? [ 1691.206385][T20192] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1691.358518][T15829] usb 1-1: device descriptor read/64, error -71 [ 1691.545542][ T24] kauditd_printk_skb: 329 callbacks suppressed [ 1691.545552][ T24] audit: type=1400 audit(2000005716.281:126162): avc: denied { prog_load } for pid=25632 comm="syz.4.6384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1691.548120][T25635] tipc: Enabling of bearer rejected, failed to enable media [ 1691.552689][ T24] audit: type=1400 audit(2000005716.281:126163): avc: denied { bpf } for pid=25632 comm="syz.4.6384" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1691.600097][T20192] usb 3-1: device descriptor read/64, error -71 [ 1691.636333][T15829] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1691.676948][ T24] audit: type=1400 audit(2000005716.281:126164): avc: denied { perfmon } for pid=25632 comm="syz.4.6384" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1691.698219][ T24] audit: type=1400 audit(2000005716.291:126165): avc: denied { create } for pid=25632 comm="syz.4.6384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1691.717787][ T24] audit: type=1400 audit(2000005716.291:126166): avc: denied { create } for pid=25632 comm="syz.4.6384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1691.748804][ T24] audit: type=1400 audit(2000005716.291:126167): avc: denied { write } for pid=25632 comm="syz.4.6384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1691.798349][ T24] audit: type=1400 audit(2000005716.291:126168): avc: denied { read } for pid=25632 comm="syz.4.6384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1691.836375][ T24] audit: type=1400 audit(2000005716.341:126169): avc: denied { execmem } for pid=25599 comm="syz.3.6375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1691.885844][ T24] audit: type=1400 audit(2000005716.411:126170): avc: denied { ioctl } for pid=25605 comm="syz.0.6377" path="/dev/raw-gadget" dev="devtmpfs" ino=161 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1691.916379][T15829] usb 1-1: device descriptor read/64, error -71 [ 1691.956109][ T24] audit: type=1400 audit(2000005716.491:126171): avc: denied { ioctl } for pid=25605 comm="syz.0.6377" path="/dev/raw-gadget" dev="devtmpfs" ino=161 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1692.066324][T20192] usb 3-1: device descriptor read/64, error -71 [ 1692.306358][T15829] usb 1-1: device descriptor read/64, error -71 [ 1692.316389][ T9483] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 1692.336361][T20192] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1692.426469][T15829] usb usb1-port1: attempt power cycle [ 1692.666422][T20192] usb 3-1: device descriptor read/64, error -71 [ 1692.686424][ T9483] usb 2-1: config 0 has an invalid interface number: 118 but max is 0 [ 1692.694422][ T9483] usb 2-1: config 0 has no interface number 0 [ 1692.856499][ T9483] usb 2-1: New USB device found, idVendor=0856, idProduct=ac33, bcdDevice= 0.f8 [ 1692.865526][ T9483] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.873302][ T9483] usb 2-1: Product: syz [ 1692.878912][ T9483] usb 2-1: Manufacturer: syz [ 1692.883320][ T9483] usb 2-1: SerialNumber: syz [ 1692.888994][ T9483] usb 2-1: config 0 descriptor?? [ 1692.927100][ T9483] ftdi_sio 2-1:0.118: FTDI USB Serial Device converter detected [ 1692.934870][ T9483] usb 2-1: Detected SIO [ 1692.939695][ T9483] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1693.076379][T20192] usb 3-1: device descriptor read/64, error -71 [ 1693.137032][T14687] usb 2-1: USB disconnect, device number 68 [ 1693.143697][T14687] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1693.153580][T14687] ftdi_sio 2-1:0.118: device disconnected [ 1693.196515][T20192] usb usb3-port1: attempt power cycle [ 1693.616385][T20192] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1693.626342][T14687] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1693.718947][T25624] tipc: Disabling bearer [ 1693.937898][T20192] usb 3-1: device descriptor read/8, error -71 [ 1694.156371][T14687] usb 5-1: Using ep0 maxpacket: 32 [ 1694.647265][T20192] usb 3-1: device descriptor read/8, error -71 [ 1694.753481][T14687] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1694.761553][T14687] usb 5-1: config 0 has no interface number 0 [ 1694.777953][T14687] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1694.790620][T14687] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1694.869277][T14687] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1694.884352][T14687] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1694.910001][T14687] usb 5-1: config 0 descriptor?? [ 1696.206322][T15829] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1696.286428][T24345] rtl8150 4-1:0.0: couldn't reset the device [ 1696.292698][T24345] rtl8150: probe of 4-1:0.0 failed with error -5 [ 1696.303139][T24345] usb 4-1: USB disconnect, device number 88 [ 1696.416350][T14687] uclogic 0003:28BD:0094.0134: pen parameters not found [ 1696.423159][T14687] uclogic 0003:28BD:0094.0134: interface is invalid, ignoring [ 1696.446323][T15829] usb 1-1: Using ep0 maxpacket: 32 [ 1696.566433][T15829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1696.577455][T15829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1696.586320][T20192] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1696.588601][T15829] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1696.604563][T15829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1696.614653][T15829] usb 1-1: config 0 descriptor?? [ 1696.628159][T18872] usb 5-1: USB disconnect, device number 81 [ 1696.636648][T25681] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1696.636696][ T24] kauditd_printk_skb: 308 callbacks suppressed [ 1696.636708][ T24] audit: type=1400 audit(2000005721.381:126480): avc: denied { ioctl } for pid=25677 comm="syz.0.6395" path="/dev/raw-gadget" dev="devtmpfs" ino=161 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1696.656804][T15829] hub 1-1:0.0: USB hub found [ 1696.686536][ T24] audit: type=1400 audit(2000005721.431:126481): avc: denied { ioctl } for pid=25702 comm="syz.2.6402" path="/dev/raw-gadget" dev="devtmpfs" ino=161 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1696.711491][T20192] usb 3-1: Using ep0 maxpacket: 32 [ 1696.736616][ T24] audit: type=1400 audit(2000005721.481:126482): avc: denied { ioctl } for pid=25702 comm="syz.2.6402" path="/dev/raw-gadget" dev="devtmpfs" ino=161 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1696.762233][ T24] audit: type=1326 audit(2000005721.501:126483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25682 comm="syz.1.6397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db5122ff9 code=0x7fc00000 [ 1696.785932][ T24] audit: type=1326 audit(2000005721.501:126484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25682 comm="syz.1.6397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f7db5122ff9 code=0x7fc00000 [ 1696.809804][ T24] audit: type=1400 audit(2000005721.551:126485): avc: denied { ioctl } for pid=25702 comm="syz.2.6402" path="/dev/raw-gadget" dev="devtmpfs" ino=161 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1696.835087][ T24] audit: type=1400 audit(2000005721.571:126486): avc: denied { ioctl } for pid=25702 comm="syz.2.6402" path="/dev/raw-gadget" dev="devtmpfs" ino=161 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1696.855107][T20192] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1696.872065][ T24] audit: type=1400 audit(2000005721.611:126487): avc: denied { execmem } for pid=25704 comm="syz.1.6403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1696.891765][T15829] hub 1-1:0.0: 2 ports detected [ 1696.897124][ T24] audit: type=1400 audit(2000005721.611:126488): avc: denied { ioctl } for pid=25702 comm="syz.2.6402" path="/dev/raw-gadget" dev="devtmpfs" ino=161 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1696.937790][T20192] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1696.949147][T20192] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1696.959042][ T24] audit: type=1400 audit(2000005721.701:126489): avc: denied { read write } for pid=24416 comm="syz-executor" name="loop3" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1696.959776][T20192] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1697.088070][T20192] usb 3-1: config 0 descriptor?? [ 1697.116601][T25703] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1697.136840][T20192] hub 3-1:0.0: USB hub found [ 1697.355367][T25719] FAULT_INJECTION: forcing a failure. [ 1697.355367][T25719] name failslab, interval 1, probability 0, space 0, times 0 [ 1697.367807][T25719] CPU: 1 PID: 25719 Comm: syz.4.6405 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 1697.377569][T25719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1697.387462][T25719] Call Trace: [ 1697.390594][T25719] dump_stack_lvl+0x1e2/0x24b [ 1697.395101][T25719] ? panic+0x812/0x812 [ 1697.399008][T25719] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1697.404319][T25719] ? release_sock+0x163/0x1b0 [ 1697.408817][T25719] dump_stack+0x15/0x17 [ 1697.412914][T25719] should_fail+0x3c6/0x510 [ 1697.417241][T25719] ? __alloc_skb+0x80/0x510 [ 1697.421581][T25719] __should_failslab+0xa4/0xe0 [ 1697.426276][T25719] should_failslab+0x9/0x20 [ 1697.430660][T25719] kmem_cache_alloc+0x3d/0x2e0 [ 1697.435212][T25719] __alloc_skb+0x80/0x510 [ 1697.439370][T25719] ? netlink_autobind+0x159/0x190 [ 1697.444229][T25719] netlink_sendmsg+0x7a4/0xd00 [ 1697.448963][T25719] ? netlink_getsockopt+0x5c0/0x5c0 [ 1697.453989][T25719] ? netlink_getsockopt+0x5c0/0x5c0 [ 1697.459023][T25719] ? netlink_getsockopt+0x5c0/0x5c0 [ 1697.464055][T25719] ____sys_sendmsg+0x59e/0x8f0 [ 1697.468655][T25719] ? __sys_sendmsg_sock+0x40/0x40 [ 1697.473516][T25719] ? import_iovec+0xe5/0x120 [ 1697.477939][T25719] ___sys_sendmsg+0x252/0x2e0 [ 1697.482457][T25719] ? __sys_sendmsg+0x280/0x280 [ 1697.487601][T25719] ? __kasan_check_write+0x14/0x20 [ 1697.492530][T25719] ? __fdget+0x1bc/0x240 [ 1697.496716][T25719] __se_sys_sendmsg+0x1b1/0x280 [ 1697.501473][T25719] ? __x64_sys_sendmsg+0x90/0x90 [ 1697.506328][T25719] ? fpu__clear_all+0x20/0x20 [ 1697.510852][T25719] ? __kasan_check_read+0x11/0x20 [ 1697.515696][T25719] __x64_sys_sendmsg+0x7b/0x90 [ 1697.520297][T25719] do_syscall_64+0x34/0x70 [ 1697.524551][T25719] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1697.530275][T25719] RIP: 0033:0x7f0a979f8ff9 [ 1697.534531][T25719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1697.553968][T25719] RSP: 002b:00007f0a96630038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1697.562214][T25719] RAX: ffffffffffffffda RBX: 00007f0a97bb1130 RCX: 00007f0a979f8ff9 [ 1697.570024][T25719] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000007 [ 1697.577835][T25719] RBP: 00007f0a96630090 R08: 0000000000000000 R09: 0000000000000000 [ 1697.585646][T25719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1697.593462][T25719] R13: 0000000000000000 R14: 00007f0a97bb1130 R15: 00007fff696588c8 [ 1697.602377][T20192] hub 3-1:0.0: 5 ports detected [ 1697.626417][T20192] hub 3-1:0.0: insufficient power available to use all downstream ports [ 1697.849376][T20192] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 1697.855681][T20192] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 1697.876382][T15810] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1698.034579][T20192] usbhid 3-1:0.0: can't add hid device: -71 [ 1698.040410][T20192] usbhid: probe of 3-1:0.0 failed with error -71 [ 1698.078761][T20192] usb 3-1: USB disconnect, device number 66 [ 1698.116304][T15810] usb 2-1: Using ep0 maxpacket: 32 [ 1698.236383][T15810] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1698.244329][T15810] usb 2-1: config 0 has no interface number 0 [ 1698.326392][ T9483] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1698.406439][T15810] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1698.415759][T15810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1698.423618][T15810] usb 2-1: Product: syz [ 1698.427597][T15810] usb 2-1: Manufacturer: syz [ 1698.431969][T15810] usb 2-1: SerialNumber: syz [ 1698.437796][T15810] usb 2-1: config 0 descriptor?? [ 1698.654224][ T9483] usb 5-1: Using ep0 maxpacket: 16 [ 1698.715842][T15829] usb 1-1: USB disconnect, device number 74 [ 1698.725009][T15810] smsc95xx v2.0.0 [ 1698.836352][ T9483] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1698.847112][ T9483] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1698.860104][ T9483] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1698.869108][ T9483] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1698.886308][ T9483] usb 5-1: config 0 descriptor?? [ 1699.076333][T15829] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1699.076523][T25740] bridge0: port 3(erspan0) entered blocking state [ 1699.090235][T25740] bridge0: port 3(erspan0) entered disabled state [ 1699.097790][T25740] device erspan0 entered promiscuous mode [ 1699.103710][T25740] bridge0: port 3(erspan0) entered blocking state [ 1699.109950][T25740] bridge0: port 3(erspan0) entered forwarding state [ 1699.336326][T15829] usb 1-1: Using ep0 maxpacket: 8 [ 1699.381480][ T9483] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0135/input/input123 [ 1699.466188][ T9483] microsoft 0003:045E:07DA.0135: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1699.478320][T15829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1699.490853][T15829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1699.501315][T15829] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1699.513942][T15829] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1699.522888][T15829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1699.531556][T15829] usb 1-1: config 0 descriptor?? [ 1699.636421][T20192] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1699.736485][T15810] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 1699.749483][T15810] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 1699.776488][T15810] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1699.787443][T24345] usb 5-1: USB disconnect, device number 82 [ 1699.796734][T15810] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 1699.813867][T15810] usb 2-1: USB disconnect, device number 69 [ 1700.017494][T15829] hid-steam 0003:28DE:1102.0136: item fetching failed at offset 0/7 [ 1700.025566][T15829] hid-steam 0003:28DE:1102.0136: steam_probe:parse of hid interface failed [ 1700.034177][T15829] hid-steam: probe of 0003:28DE:1102.0136 failed with error -22 [ 1700.046361][T20192] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1700.057433][T20192] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1700.067072][T20192] usb 3-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1700.075885][T20192] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.084557][T20192] usb 3-1: config 0 descriptor?? [ 1700.096313][T14687] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1700.229481][T15829] usb 1-1: USB disconnect, device number 75 [ 1700.305567][T25750] 9pnet: Insufficient options for proto=fd [ 1700.328594][T25753] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 1700.358364][T25755] FAULT_INJECTION: forcing a failure. [ 1700.358364][T25755] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1700.371589][T25755] CPU: 0 PID: 25755 Comm: syz.4.6417 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 1700.381355][T25755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1700.391266][T25755] Call Trace: [ 1700.394380][T25755] dump_stack_lvl+0x1e2/0x24b [ 1700.398887][T25755] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1700.404182][T25755] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 1700.409142][T25755] ? _raw_spin_lock_irqsave+0x210/0x210 [ 1700.414509][T25755] dump_stack+0x15/0x17 [ 1700.418500][T25755] should_fail+0x3c6/0x510 [ 1700.422757][T25755] should_fail_alloc_page+0x52/0x60 [ 1700.427791][T25755] __alloc_pages_nodemask+0x1b3/0xaf0 [ 1700.432998][T25755] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 1700.438379][T25755] ? __kasan_check_write+0x14/0x20 [ 1700.443327][T25755] ? wait_for_completion+0x18/0x20 [ 1700.448537][T25755] ? vhost_work_flush+0x1cc/0x220 [ 1700.453392][T25755] ? vhost_poll_stop+0x80/0x80 [ 1700.457992][T25755] kmalloc_order+0x4c/0x170 [ 1700.462349][T25755] kmalloc_order_trace+0x18/0x90 [ 1700.467112][T25755] vhost_dev_set_owner+0x4bb/0xac0 [ 1700.472058][T25755] ? fsnotify_set_children_dentry_flags+0x210/0x210 [ 1700.478477][T25755] ? proc_fail_nth_write+0x20b/0x290 [ 1700.483596][T25755] ? vhost_dev_has_owner+0x40/0x40 [ 1700.488541][T25755] ? vhost_set_backend_features+0x1b0/0x1b0 [ 1700.494271][T25755] ? do_vfs_ioctl+0x798/0x1a30 [ 1700.498871][T25755] ? ioctl_has_perm+0x3f0/0x560 [ 1700.503556][T25755] ? preempt_count_add+0x92/0x1a0 [ 1700.508418][T25755] vhost_dev_ioctl+0xd6/0xd70 [ 1700.512932][T25755] ? vhost_init_device_iotlb+0x230/0x230 [ 1700.518397][T25755] ? mutex_lock+0xa5/0x110 [ 1700.522651][T25755] ? mutex_trylock+0xa0/0xa0 [ 1700.526366][T20192] usbhid 3-1:0.0: can't add hid device: -71 [ 1700.527083][T25755] ? selinux_file_ioctl+0x3cc/0x540 [ 1700.527102][T25755] vhost_vsock_dev_ioctl+0x21c/0xef0 [ 1700.533049][T20192] usbhid: probe of 3-1:0.0 failed with error -71 [ 1700.537849][T25755] ? of_get_mac_address+0x560/0x560 [ 1700.537862][T25755] ? security_file_ioctl+0x84/0xb0 [ 1700.537871][T25755] ? of_get_mac_address+0x560/0x560 [ 1700.537880][T25755] __se_sys_ioctl+0x114/0x190 [ 1700.537895][T25755] __x64_sys_ioctl+0x7b/0x90 [ 1700.544165][T20192] usb 3-1: USB disconnect, device number 67 [ 1700.549131][T25755] do_syscall_64+0x34/0x70 [ 1700.549143][T25755] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1700.549158][T25755] RIP: 0033:0x7f0a979f8ff9 [ 1700.593040][T25755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1700.612478][T25755] RSP: 002b:00007f0a96672038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1700.616358][T14687] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1700.620735][T25755] RAX: ffffffffffffffda RBX: 00007f0a97bb0f80 RCX: 00007f0a979f8ff9 [ 1700.631593][T14687] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1700.639214][T25755] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000006 [ 1700.639220][T25755] RBP: 00007f0a96672090 R08: 0000000000000000 R09: 0000000000000000 [ 1700.639226][T25755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1700.639233][T25755] R13: 0000000000000000 R14: 00007f0a97bb0f80 R15: 00007fff696588c8 [ 1700.680048][T24345] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1700.687536][T14687] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1700.696851][T14687] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.718655][T14687] usb 4-1: config 0 descriptor?? [ 1701.076378][T24345] usb 2-1: Using ep0 maxpacket: 16 [ 1701.207237][T14687] usbhid 4-1:0.0: can't add hid device: -71 [ 1701.332030][T14687] usbhid: probe of 4-1:0.0 failed with error -71 [ 1701.372068][T24345] usb 2-1: config index 0 descriptor too short (expected 12336, got 36) [ 1701.393681][T14687] usb 4-1: USB disconnect, device number 89 [ 1701.399435][T24345] usb 2-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 1701.411334][T24345] usb 2-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config [ 1701.428669][T24345] usb 2-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 1701.443776][T24345] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1701.452736][T24345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1701.542423][T25767] FAULT_INJECTION: forcing a failure. [ 1701.542423][T25767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1701.573729][T25767] CPU: 0 PID: 25767 Comm: syz.0.6420 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 1701.583500][T25767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1701.593391][T25767] Call Trace: [ 1701.596528][T25767] dump_stack_lvl+0x1e2/0x24b [ 1701.601032][T25767] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1701.606330][T25767] dump_stack+0x15/0x17 [ 1701.610319][T25767] should_fail+0x3c6/0x510 [ 1701.614574][T25767] should_fail_usercopy+0x1a/0x20 [ 1701.619436][T25767] strncpy_from_user+0x24/0x2d0 [ 1701.624120][T25767] ? getname_flags+0xba/0x520 [ 1701.628633][T25767] getname_flags+0xf2/0x520 [ 1701.632973][T25767] __x64_sys_rename+0x6e/0x90 [ 1701.637485][T25767] do_syscall_64+0x34/0x70 [ 1701.641739][T25767] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1701.647465][T25767] RIP: 0033:0x7fbb0302aff9 [ 1701.651718][T25767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1701.671160][T25767] RSP: 002b:00007fbb01ca4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 1701.679403][T25767] RAX: ffffffffffffffda RBX: 00007fbb031e2f80 RCX: 00007fbb0302aff9 [ 1701.687212][T25767] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 00000000200001c0 [ 1701.695024][T25767] RBP: 00007fbb01ca4090 R08: 0000000000000000 R09: 0000000000000000 [ 1701.702834][T25767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1701.710647][T25767] R13: 0000000000000000 R14: 00007fbb031e2f80 R15: 00007ffd2b2c5908 [ 1701.723261][ T24] kauditd_printk_skb: 369 callbacks suppressed [ 1701.723272][ T24] audit: type=1400 audit(2000005726.311:126859): avc: denied { read write } for pid=25216 comm="syz-executor" name="loop4" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1701.776338][T24345] usb 2-1: string descriptor 0 read error: -71 [ 1701.783800][T24345] usb 2-1: USB disconnect, device number 70 [ 1701.791262][ T24] audit: type=1400 audit(2000005726.311:126860): avc: denied { open } for pid=25216 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1701.846301][ T24] audit: type=1400 audit(2000005726.311:126861): avc: denied { ioctl } for pid=25216 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=115 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1701.872227][ T24] audit: type=1400 audit(2000005726.461:126862): avc: denied { map_create } for pid=25749 comm="syz.1.6415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1701.895222][ T24] audit: type=1400 audit(2000005726.461:126863): avc: denied { prog_load } for pid=25749 comm="syz.1.6415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1701.914521][ T24] audit: type=1400 audit(2000005726.461:126864): avc: denied { bpf } for pid=25749 comm="syz.1.6415" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1701.935543][ T24] audit: type=1400 audit(2000005726.461:126865): avc: denied { perfmon } for pid=25749 comm="syz.1.6415" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1702.038385][ T24] audit: type=1400 audit(2000005726.471:126866): avc: denied { read write } for pid=24416 comm="syz-executor" name="loop3" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1702.063264][ T24] audit: type=1400 audit(2000005726.471:126867): avc: denied { open } for pid=24416 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1702.107851][ T24] audit: type=1400 audit(2000005726.471:126868): avc: denied { ioctl } for pid=24416 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=114 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1702.133993][T20192] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1702.467960][T20192] usb 5-1: Using ep0 maxpacket: 32 [ 1702.625931][T25792] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 1702.632262][T20192] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1702.642557][T20192] usb 5-1: config 0 has no interface number 0 [ 1702.649136][T20192] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1702.660171][T20192] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1702.670098][T20192] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1702.679364][T20192] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1702.689894][T20192] usb 5-1: config 0 descriptor?? [ 1702.749899][T18872] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1703.386327][T20192] uclogic 0003:28BD:0094.0137: pen parameters not found [ 1703.393329][T20192] uclogic 0003:28BD:0094.0137: interface is invalid, ignoring [ 1703.618359][T20192] usb 5-1: USB disconnect, device number 83 [ 1703.863563][T18872] usb 3-1: config 0 has no interfaces? [ 1703.868950][T18872] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1703.877747][T18872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1703.886806][T18872] usb 3-1: config 0 descriptor?? [ 1704.026330][T15810] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1704.128394][T14687] usb 3-1: USB disconnect, device number 68 [ 1704.966525][T15810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1704.983036][T15810] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1705.004172][T15810] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1705.015620][T25838] fuse: Unknown parameter 'f£0x0000000000000003' [ 1705.017327][T15810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1705.029809][T15829] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1705.050700][T15810] usb 1-1: config 0 descriptor?? [ 1705.156610][T25845] binfmt_misc: register: failed to install interpreter file ./file0 [ 1705.306274][T15829] usb 2-1: device descriptor read/64, error -71 [ 1705.536303][T24344] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1705.549062][T15810] plantronics 0003:047F:FFFF.0138: unknown main item tag 0x0 [ 1705.562565][T15810] plantronics 0003:047F:FFFF.0138: No inputs registered, leaving [ 1705.587086][T15810] plantronics 0003:047F:FFFF.0138: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1705.706278][T15829] usb 2-1: device descriptor read/64, error -71 [ 1705.907120][T18872] usb 1-1: USB disconnect, device number 76 [ 1705.947496][T24344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1705.964067][T24344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1705.973920][T24344] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1705.982805][T24344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1705.991916][T24344] usb 5-1: config 0 descriptor?? [ 1705.996357][T15829] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1706.226296][T15810] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1706.266321][T15829] usb 2-1: device descriptor read/64, error -71 [ 1706.508215][T24344] isku 0003:1E7D:319C.0139: item fetching failed at offset 5/7 [ 1706.516290][T15810] usb 3-1: Using ep0 maxpacket: 32 [ 1706.520290][T24344] isku 0003:1E7D:319C.0139: parse failed [ 1706.526909][T24344] isku: probe of 0003:1E7D:319C.0139 failed with error -22 [ 1707.682648][ T24] kauditd_printk_skb: 473 callbacks suppressed [ 1707.682659][ T24] audit: type=1400 audit(2000005731.541:127342): avc: denied { map_create } for pid=25857 comm="syz.0.6446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1707.715336][T18872] usb 5-1: USB disconnect, device number 84 [ 1707.881043][T25865] device bridge_slave_1 left promiscuous mode [ 1707.887132][T25865] bridge0: port 2(bridge_slave_1) entered disabled state [ 1707.935540][ T24] audit: type=1400 audit(2000005731.541:127343): avc: denied { bpf } for pid=25857 comm="syz.0.6446" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1707.956677][ T24] audit: type=1400 audit(2000005731.541:127344): avc: denied { map_read map_write } for pid=25857 comm="syz.0.6446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1707.976693][ T24] audit: type=1400 audit(2000005731.901:127345): avc: denied { prog_load } for pid=25857 comm="syz.0.6446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1708.006740][ T24] audit: type=1400 audit(2000005731.901:127346): avc: denied { perfmon } for pid=25857 comm="syz.0.6446" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1708.028285][ T24] audit: type=1400 audit(2000005731.901:127347): avc: denied { prog_run } for pid=25857 comm="syz.0.6446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1708.034566][T15810] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1708.048754][ T24] audit: type=1400 audit(2000005732.451:127348): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1708.055168][T15829] usb 2-1: device descriptor read/64, error -71 [ 1708.065618][T15810] usb 3-1: config 0 has no interface number 0 [ 1708.078023][ T24] audit: type=1400 audit(2000005732.451:127349): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1708.090263][T15810] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1708.110490][ T24] audit: type=1400 audit(2000005732.451:127350): avc: denied { append } for pid=77 comm="syslogd" name="messages" dev="tmpfs" ino=28 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1708.178599][ T24] audit: type=1400 audit(2000005732.451:127351): avc: denied { open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=28 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1708.208298][T15829] usb usb2-port1: attempt power cycle [ 1708.213588][T15810] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1708.223327][T15810] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1708.232288][T15810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1708.249537][T15810] usb 3-1: config 0 descriptor?? [ 1709.286754][T25898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6455'. [ 1710.286348][T15810] uclogic 0003:28BD:0094.013A: pen parameters not found [ 1710.294157][T15810] uclogic 0003:28BD:0094.013A: interface is invalid, ignoring [ 1710.304169][T25904] FAULT_INJECTION: forcing a failure. [ 1710.304169][T25904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1710.317060][T25904] CPU: 1 PID: 25904 Comm: syz.1.6456 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 1710.326886][T25904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1710.336936][T25904] Call Trace: [ 1710.340067][T25904] dump_stack_lvl+0x1e2/0x24b [ 1710.344578][T25904] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1710.349867][T25904] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 1710.355162][T25904] dump_stack+0x15/0x17 [ 1710.359152][T25904] should_fail+0x3c6/0x510 [ 1710.359162][T25904] should_fail_usercopy+0x1a/0x20 [ 1710.359169][T25904] _copy_to_user+0x20/0x90 [ 1710.359178][T25904] simple_read_from_buffer+0xc7/0x150 [ 1710.359187][T25904] proc_fail_nth_read+0x1a3/0x210 [ 1710.359196][T25904] ? proc_fault_inject_write+0x390/0x390 [ 1710.359205][T25904] ? security_file_permission+0x86/0xb0 [ 1710.359214][T25904] ? rw_verify_area+0x1c3/0x360 [ 1710.359221][T25904] ? proc_fault_inject_write+0x390/0x390 [ 1710.359228][T25904] vfs_read+0x200/0xba0 [ 1710.359237][T25904] ? kernel_read+0x70/0x70 [ 1710.359246][T25904] ? __kasan_check_write+0x14/0x20 [ 1710.359254][T25904] ? mutex_lock+0xa5/0x110 [ 1710.359261][T25904] ? mutex_trylock+0xa0/0xa0 [ 1710.359271][T25904] ? __fdget_pos+0x2e7/0x3a0 [ 1710.359277][T25904] ? ksys_read+0x77/0x2c0 [ 1710.359285][T25904] ksys_read+0x199/0x2c0 [ 1710.359292][T25904] ? do_epoll_ctl+0x7b1/0xec0 [ 1710.359300][T25904] ? vfs_write+0xe70/0xe70 [ 1710.359307][T25904] ? __x64_sys_epoll_ctl+0x15d/0x1a0 [ 1710.359316][T25904] ? debug_smp_processor_id+0x17/0x20 [ 1710.359324][T25904] __x64_sys_read+0x7b/0x90 [ 1710.359331][T25904] do_syscall_64+0x34/0x70 [ 1710.359341][T25904] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1710.359348][T25904] RIP: 0033:0x7f7db5121a3c [ 1710.359358][T25904] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1710.359364][T25904] RSP: 002b:00007f7db3d7b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1710.359376][T25904] RAX: ffffffffffffffda RBX: 00007f7db52db058 RCX: 00007f7db5121a3c [ 1710.359382][T25904] RDX: 000000000000000f RSI: 00007f7db3d7b0a0 RDI: 000000000000000a [ 1710.359388][T25904] RBP: 00007f7db3d7b090 R08: 0000000000000000 R09: 0000000000000000 [ 1710.359393][T25904] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 1710.359399][T25904] R13: 0000000000000000 R14: 00007f7db52db058 R15: 00007fff652b9008 [ 1710.544162][T15810] usb 3-1: USB disconnect, device number 69 [ 1711.613156][T25925] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6461'. [ 1711.712274][T25925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6461'. [ 1712.291951][T25925] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6461'. [ 1712.323667][T25925] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6461'. [ 1712.700144][ T24] kauditd_printk_skb: 311 callbacks suppressed [ 1712.700155][ T24] audit: type=1400 audit(2000005737.441:127663): avc: denied { map_create } for pid=25915 comm="syz.0.6459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1712.752580][ T24] audit: type=1400 audit(2000005737.441:127664): avc: denied { write } for pid=25915 comm="syz.0.6459" name="udp" dev="proc" ino=4026532789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1712.787731][ T24] audit: type=1400 audit(2000005737.441:127665): avc: denied { write } for pid=25915 comm="syz.0.6459" path="/proc/714/net/udp" dev="proc" ino=4026532789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1712.814266][ T24] audit: type=1400 audit(2000005737.511:127666): avc: denied { read write } for pid=25931 comm="syz.4.6463" name="loop4" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1712.890001][ T24] audit: type=1400 audit(2000005737.511:127667): avc: denied { open } for pid=25931 comm="syz.4.6463" path="/dev/loop4" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1713.230237][ T24] audit: type=1400 audit(2000005737.511:127668): avc: denied { ioctl } for pid=25931 comm="syz.4.6463" path="/dev/loop4" dev="devtmpfs" ino=115 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1713.271452][ T24] audit: type=1400 audit(2000005737.511:127669): avc: denied { create } for pid=25941 comm="syz.1.6465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1713.303926][ T24] audit: type=1400 audit(2000005737.511:127670): avc: denied { ioctl } for pid=25931 comm="syz.4.6463" path="/dev/loop4" dev="devtmpfs" ino=115 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1713.340763][T14685] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1713.875113][ T24] audit: type=1400 audit(2000005737.551:127671): avc: denied { execmem } for pid=25941 comm="syz.1.6465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1713.907845][ T24] audit: type=1400 audit(2000005737.621:127672): avc: denied { read write } for pid=21772 comm="syz-executor" name="loop0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1714.963262][T14685] usb 2-1: device descriptor read/64, error -71 [ 1714.969740][T25962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6468'. [ 1715.093307][T25971] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6471'. [ 1717.735766][ T24] kauditd_printk_skb: 194 callbacks suppressed [ 1717.735778][ T24] audit: type=1400 audit(2000005742.471:127867): avc: denied { perfmon } for pid=25986 comm="syz.3.6476" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1717.811080][ T24] audit: type=1400 audit(2000005742.521:127868): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1717.862932][T14685] usb 2-1: device descriptor read/64, error -71 [ 1717.913349][ T24] audit: type=1400 audit(2000005742.521:127869): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1717.957526][ T24] audit: type=1400 audit(2000005742.521:127870): avc: denied { append } for pid=77 comm="syslogd" name="messages" dev="tmpfs" ino=28 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1717.979804][ T24] audit: type=1400 audit(2000005742.521:127871): avc: denied { open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=28 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1718.036274][ T24] audit: type=1400 audit(2000005742.521:127872): avc: denied { getattr } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=28 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1718.059806][ T24] audit: type=1400 audit(2000005742.531:127873): avc: denied { map_read map_write } for pid=25986 comm="syz.3.6476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1718.130363][ T24] audit: type=1400 audit(2000005742.531:127874): avc: denied { prog_load } for pid=25986 comm="syz.3.6476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1718.329857][ T24] audit: type=1400 audit(2000005742.531:127875): avc: denied { bpf } for pid=25986 comm="syz.3.6476" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1718.366769][ T24] audit: type=1400 audit(2000005742.531:127876): avc: denied { perfmon } for pid=25986 comm="syz.3.6476" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1718.831343][T26003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6480'. [ 1718.960665][T26009] tipc: Enabled bearer , priority 0 [ 1719.286265][T14685] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1719.378442][T26020] tipc: Enabling of bearer rejected, failed to enable media [ 1719.556219][T14685] usb 2-1: device descriptor read/64, error -71 [ 1720.007173][T14685] usb 2-1: device descriptor read/64, error -71 [ 1720.136309][T14685] usb usb2-port1: attempt power cycle [ 1720.336584][T26025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6486'. [ 1720.446220][T14683] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1720.556237][T14685] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1720.786376][T14685] usb 2-1: device descriptor read/8, error -71 [ 1720.836263][T15810] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1720.846321][T14683] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1720.857095][T14683] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1720.866550][T14683] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1720.875360][T14683] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1720.885061][T14683] usb 5-1: config 0 descriptor?? [ 1721.066323][T14685] usb 2-1: device descriptor read/8, error -71 [ 1721.096500][T15829] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1721.196263][T15810] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1721.206280][T15810] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1721.336303][T15829] usb 4-1: Using ep0 maxpacket: 16 [ 1721.336547][T14685] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1721.376611][T15810] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1721.385571][T15810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1721.393483][T15810] usb 1-1: Product: syz [ 1721.397498][T15810] usb 1-1: Manufacturer: syz [ 1721.401874][T15810] usb 1-1: SerialNumber: syz [ 1721.407482][T14683] lg-g15 0003:046D:C222.013B: unknown main item tag 0x0 [ 1721.409467][T15810] usb 1-1: config 0 descriptor?? [ 1721.422141][T14683] lg-g15 0003:046D:C222.013B: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0 [ 1721.456296][T15829] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1721.466687][T15810] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 1721.556279][T14685] usb 2-1: device descriptor read/8, error -71 [ 1721.622514][T14687] usb 5-1: USB disconnect, device number 85 [ 1721.626306][T15829] usb 4-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 1721.637379][T15829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1721.645153][T15829] usb 4-1: Product: syz [ 1721.649370][T15829] usb 4-1: Manufacturer: syz [ 1721.653754][T15829] usb 4-1: SerialNumber: syz [ 1721.659455][T15829] usb 4-1: config 0 descriptor?? [ 1721.779271][T26004] tipc: Disabling bearer [ 1721.806258][T14685] usb 2-1: device descriptor read/8, error -71 [ 1721.813615][T23079] bridge0: port 3(syz_tun) entered disabled state [ 1721.827006][T23079] device syz_tun left promiscuous mode [ 1721.834339][T23079] bridge0: port 3(syz_tun) entered disabled state [ 1721.907505][ T527] tipc: Left network mode [ 1721.926319][T14685] usb usb2-port1: unable to enumerate USB device [ 1722.396851][ T527] device bridge_slave_1 left promiscuous mode [ 1722.403031][ T527] bridge0: port 2(bridge_slave_1) entered disabled state [ 1722.410673][ T527] device bridge_slave_0 left promiscuous mode [ 1722.416637][ T527] bridge0: port 1(bridge_slave_0) entered disabled state [ 1722.424099][ T527] device veth1_macvtap left promiscuous mode [ 1722.429947][ T527] device veth0_vlan left promiscuous mode [ 1722.740960][ T24] kauditd_printk_skb: 341 callbacks suppressed [ 1722.740971][ T24] audit: type=1400 audit(2000005747.481:128218): avc: denied { execmem } for pid=26057 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1722.848767][ T24] audit: type=1400 audit(2000005747.591:128219): avc: denied { read write } for pid=26058 comm="syz.4.6495" name="loop4" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1722.872907][ T24] audit: type=1400 audit(2000005747.591:128220): avc: denied { open } for pid=26058 comm="syz.4.6495" path="/dev/loop4" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1722.897803][ T24] audit: type=1400 audit(2000005747.591:128221): avc: denied { ioctl } for pid=26058 comm="syz.4.6495" path="/dev/loop4" dev="devtmpfs" ino=115 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1722.923769][ T24] audit: type=1400 audit(2000005747.651:128222): avc: denied { prog_load } for pid=26058 comm="syz.4.6495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1722.942954][ T24] audit: type=1400 audit(2000005747.651:128223): avc: denied { bpf } for pid=26058 comm="syz.4.6495" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1722.963518][ T24] audit: type=1400 audit(2000005747.651:128224): avc: denied { perfmon } for pid=26058 comm="syz.4.6495" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1722.984628][ T24] audit: type=1400 audit(2000005747.661:128225): avc: denied { prog_run } for pid=26058 comm="syz.4.6495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1723.003988][ T24] audit: type=1400 audit(2000005747.721:128226): avc: denied { execmem } for pid=26058 comm="syz.4.6495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1723.094920][ T24] audit: type=1400 audit(2000005747.831:128227): avc: denied { mounton } for pid=26058 comm="syz.4.6495" path="/57/file0" dev="tmpfs" ino=343 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1724.155800][ T9480] usb 1-1: USB disconnect, device number 77 [ 1724.186254][T15829] uvcvideo: Found UVC 0.00 device syz (045e:0721) [ 1724.192556][T15829] uvcvideo: No valid video chain found. [ 1724.202201][T15829] usb 4-1: USB disconnect, device number 90 [ 1724.496223][T24345] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1724.756210][T24345] usb 5-1: Using ep0 maxpacket: 32 [ 1725.066491][T24345] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1725.075335][T24345] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1725.083654][T24345] usb 5-1: Product: syz [ 1725.087693][T24345] usb 5-1: Manufacturer: syz [ 1725.092275][T24345] usb 5-1: SerialNumber: syz [ 1725.098552][T24345] usb 5-1: config 0 descriptor?? [ 1725.256218][T14683] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1725.266206][ T9480] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1725.496198][T14683] usb 2-1: Using ep0 maxpacket: 16 [ 1725.516413][ T9480] usb 1-1: Using ep0 maxpacket: 32 [ 1725.626264][T14683] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1725.636971][T14683] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1725.649543][T14683] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1725.658761][T14683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1725.700902][T14683] usb 2-1: config 0 descriptor?? [ 1726.036279][ T9480] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1726.045312][ T9480] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1726.053307][ T9480] usb 1-1: Product: syz [ 1726.057280][ T9480] usb 1-1: Manufacturer: syz [ 1726.061648][ T9480] usb 1-1: SerialNumber: syz [ 1726.067281][ T9480] usb 1-1: config 0 descriptor?? [ 1726.332029][T14683] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.013C/input/input124 [ 1726.407717][T14683] microsoft 0003:045E:07DA.013C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1726.735477][T14685] usb 2-1: USB disconnect, device number 78 [ 1728.135195][ T24] kauditd_printk_skb: 258 callbacks suppressed [ 1728.135206][ T24] audit: type=1400 audit(2000005752.871:128486): avc: denied { map_create } for pid=26101 comm="syz.3.6505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1728.188389][T26108] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=26108 comm=syz.0.6507 [ 1728.209291][ T24] audit: type=1400 audit(2000005752.901:128487): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1728.231650][ T24] audit: type=1400 audit(2000005752.901:128488): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1728.257943][ T24] audit: type=1400 audit(2000005752.901:128489): avc: denied { append } for pid=77 comm="syslogd" name="messages" dev="tmpfs" ino=28 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1728.281239][ T24] audit: type=1400 audit(2000005752.901:128490): avc: denied { open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=28 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1728.305163][ T24] audit: type=1400 audit(2000005752.901:128491): avc: denied { getattr } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=28 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1728.332758][ T24] audit: type=1400 audit(2000005752.901:128492): avc: denied { create } for pid=26104 comm="syz.4.6506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1728.353973][ T24] audit: type=1400 audit(2000005752.901:128493): avc: denied { read write } for pid=21772 comm="syz-executor" name="loop0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1728.381776][ T24] audit: type=1400 audit(2000005752.901:128494): avc: denied { open } for pid=21772 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1728.406942][ T24] audit: type=1400 audit(2000005752.901:128495): avc: denied { ioctl } for pid=21772 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=111 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1728.843556][T26114] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6506'. [ 1728.852481][T26114] netlink: 43 bytes leftover after parsing attributes in process `syz.4.6506'. [ 1728.861246][T26114] netlink: 'syz.4.6506': attribute type 6 has an invalid length. [ 1728.868751][T26114] netlink: 'syz.4.6506': attribute type 5 has an invalid length. [ 1728.876346][T26114] netlink: 43 bytes leftover after parsing attributes in process `syz.4.6506'. [ 1728.926256][T24345] rtl8150 5-1:0.0: couldn't reset the device [ 1728.932155][T24345] rtl8150: probe of 5-1:0.0 failed with error -5 [ 1728.939053][T24345] usb 5-1: USB disconnect, device number 86 [ 1730.146871][T26128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6508'. [ 1730.966284][ T9480] rtl8150 1-1:0.0: couldn't reset the device [ 1730.972588][ T9480] rtl8150: probe of 1-1:0.0 failed with error -5 [ 1730.983605][ T9480] usb 1-1: USB disconnect, device number 78 [ 1731.366178][T14682] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1731.606169][T14682] usb 2-1: Using ep0 maxpacket: 32 [ 1731.726367][T14682] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1731.737295][T14682] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1731.748255][T14682] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1731.757078][T14682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1731.772784][T14682] usb 2-1: config 0 descriptor?? [ 1731.796506][T26146] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1731.816868][T14682] hub 2-1:0.0: USB hub found [ 1732.036238][T14682] hub 2-1:0.0: 2 ports detected [ 1732.606189][T20192] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1732.626223][T18872] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1732.846475][T20192] usb 4-1: Using ep0 maxpacket: 32 [ 1732.886171][T18872] usb 5-1: Using ep0 maxpacket: 32 [ 1733.026324][T18872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1733.037617][T18872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1733.049040][T18872] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1733.057849][T18872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1733.066896][T18872] usb 5-1: config 0 descriptor?? [ 1733.096436][T26153] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1733.126258][T20192] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1733.128604][T18872] hub 5-1:0.0: USB hub found [ 1733.138894][T20192] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.147375][T20192] usb 4-1: Product: syz [ 1733.151313][T20192] usb 4-1: Manufacturer: syz [ 1733.155731][T20192] usb 4-1: SerialNumber: syz [ 1733.161177][T20192] usb 4-1: config 0 descriptor?? [ 1733.176521][ T24] kauditd_printk_skb: 288 callbacks suppressed [ 1733.176531][ T24] audit: type=1400 audit(2000005757.921:128784): avc: denied { ioctl } for pid=26149 comm="syz.3.6516" path="/dev/raw-gadget" dev="devtmpfs" ino=161 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1733.339554][ T24] audit: type=1400 audit(2000005758.081:128785): avc: denied { ioctl } for pid=26152 comm="syz.4.6518" path="/dev/raw-gadget" dev="devtmpfs" ino=161 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1733.364767][T18872] hub 5-1:0.0: 5 ports detected [ 1733.367466][ T24] audit: type=1400 audit(2000005758.111:128786): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1733.386261][T18872] hub 5-1:0.0: insufficient power available to use all downstream ports [ 1733.391363][ T24] audit: type=1400 audit(2000005758.111:128787): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1733.420847][ T24] audit: type=1400 audit(2000005758.111:128788): avc: denied { append } for pid=77 comm="syslogd" name="messages" dev="tmpfs" ino=28 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1733.443151][ T24] audit: type=1400 audit(2000005758.111:128789): avc: denied { open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=28 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1733.465519][ T24] audit: type=1400 audit(2000005758.111:128790): avc: denied { getattr } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=28 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1733.488427][ T24] audit: type=1400 audit(2000005758.141:128791): avc: denied { ioctl } for pid=26149 comm="syz.3.6516" path="/dev/raw-gadget" dev="devtmpfs" ino=161 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1733.565199][ T24] audit: type=1400 audit(2000005758.301:128792): avc: denied { prog_load } for pid=26152 comm="syz.4.6518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1733.584436][ T24] audit: type=1400 audit(2000005758.301:128793): avc: denied { bpf } for pid=26152 comm="syz.4.6518" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1733.676210][T18872] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 1733.682349][T18872] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 1733.756337][T14682] hub 2-1:0.0: hub_ext_port_status failed (err = -32) [ 1733.966552][T24344] usb 2-1: USB disconnect, device number 79 [ 1734.026317][T18872] usbhid 5-1:0.0: can't add hid device: -71 [ 1734.032085][T18872] usbhid: probe of 5-1:0.0 failed with error -71 [ 1734.067044][T18872] usb 5-1: USB disconnect, device number 87 [ 1736.205538][T26178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6522'. [ 1737.348592][T20192] rtl8150 4-1:0.0: couldn't reset the device [ 1737.354501][T20192] rtl8150: probe of 4-1:0.0 failed with error -5 [ 1737.363802][T20192] usb 4-1: USB disconnect, device number 91 [ 1737.666216][T18872] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1737.673754][T15829] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1737.926176][T15829] usb 5-1: Using ep0 maxpacket: 16 [ 1737.931161][T18872] usb 1-1: Using ep0 maxpacket: 32 [ 1738.096274][T15829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1738.142688][T18872] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1738.150539][T18872] usb 1-1: config 0 has no interface number 0 [ 1738.156472][T15829] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1738.169168][T18872] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1738.180210][T15829] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1738.189067][T18872] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1738.198612][T15829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1738.206517][T18872] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1738.215587][T18872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1738.223668][T15829] usb 5-1: config 0 descriptor?? [ 1738.231720][T18872] usb 1-1: config 0 descriptor?? [ 1738.246506][ T24] kauditd_printk_skb: 176 callbacks suppressed [ 1738.246519][ T24] audit: type=1400 audit(2000005762.992:128970): avc: denied { ioctl } for pid=26189 comm="syz.4.6527" path="/dev/raw-gadget" dev="devtmpfs" ino=161 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1738.278627][ T24] audit: type=1400 audit(2000005762.992:128971): avc: denied { ioctl } for pid=26189 comm="syz.4.6527" path="/dev/raw-gadget" dev="devtmpfs" ino=161 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1738.304433][ T24] audit: type=1400 audit(2000005763.022:128972): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1738.326261][ T24] audit: type=1400 audit(2000005763.022:128973): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1738.347612][ T24] audit: type=1400 audit(2000005763.022:128974): avc: denied { append } for pid=77 comm="syslogd" name="messages" dev="tmpfs" ino=28 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1738.369965][ T24] audit: type=1400 audit(2000005763.022:128975): avc: denied { open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=28 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1738.392511][ T24] audit: type=1400 audit(2000005763.022:128976): avc: denied { getattr } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=28 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1738.481177][ T24] audit: type=1400 audit(2000005763.222:128977): avc: denied { map_create } for pid=26189 comm="syz.4.6527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1738.500561][ T24] audit: type=1400 audit(2000005763.222:128978): avc: denied { prog_load } for pid=26189 comm="syz.4.6527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1738.520096][ T24] audit: type=1400 audit(2000005763.222:128979): avc: denied { bpf } for pid=26189 comm="syz.4.6527" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1738.762424][T15829] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.013E/input/input125 [ 1738.848135][T15829] microsoft 0003:045E:07DA.013E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1738.956230][T18872] uclogic 0003:28BD:0094.013D: failed retrieving string descriptor #100: -71 [ 1738.965816][T18872] uclogic 0003:28BD:0094.013D: failed retrieving pen parameters: -71 [ 1738.974110][T18872] uclogic 0003:28BD:0094.013D: pen probing failed: -71 [ 1738.981504][T18872] uclogic 0003:28BD:0094.013D: failed probing parameters: -71 [ 1738.988847][T18872] uclogic: probe of 0003:28BD:0094.013D failed with error -71 [ 1738.996990][T18872] usb 1-1: USB disconnect, device number 79 [ 1739.167940][T14683] usb 5-1: USB disconnect, device number 88 [ 1741.311889][T26220] FAULT_INJECTION: forcing a failure. [ 1741.311889][T26220] name failslab, interval 1, probability 0, space 0, times 0 [ 1741.324370][T26220] CPU: 1 PID: 26220 Comm: syz.1.6531 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 1741.334247][T26220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1741.344658][T26220] Call Trace: [ 1741.347789][T26220] dump_stack_lvl+0x1e2/0x24b [ 1741.352294][T26220] ? panic+0x812/0x812 [ 1741.356198][T26220] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1741.361492][T26220] ? preempt_schedule_irq+0xe7/0x140 [ 1741.366613][T26220] ? preempt_schedule_notrace+0x140/0x140 [ 1741.372163][T26220] dump_stack+0x15/0x17 [ 1741.376156][T26220] should_fail+0x3c6/0x510 [ 1741.380409][T26220] ? iter_file_splice_write+0x27d/0xf80 [ 1741.385793][T26220] __should_failslab+0xa4/0xe0 [ 1741.390396][T26220] should_failslab+0x9/0x20 [ 1741.394730][T26220] __kmalloc+0x60/0x330 [ 1741.398724][T26220] iter_file_splice_write+0x27d/0xf80 [ 1741.403930][T26220] ? atime_needs_update+0x2d7/0x5a0 [ 1741.408980][T26220] ? touch_atime+0x1dc/0x4c0 [ 1741.413391][T26220] ? current_time+0x2f0/0x2f0 [ 1741.417906][T26220] ? splice_from_pipe+0x230/0x230 [ 1741.422764][T26220] ? generic_file_splice_read+0x547/0x780 [ 1741.428320][T26220] ? splice_shrink_spd+0xb0/0xb0 [ 1741.433100][T26220] ? fsnotify_perm+0x324/0x4e0 [ 1741.437697][T26220] ? splice_from_pipe+0x230/0x230 [ 1741.442549][T26220] direct_splice_actor+0xff/0x130 [ 1741.447414][T26220] splice_direct_to_actor+0x4d1/0xba0 [ 1741.452637][T26220] ? do_splice_direct+0x3c0/0x3c0 [ 1741.457940][T26220] ? pipe_to_sendpage+0x340/0x340 [ 1741.462782][T26220] ? security_file_permission+0x86/0xb0 [ 1741.468274][T26220] ? rw_verify_area+0x1c3/0x360 [ 1741.472952][T26220] do_splice_direct+0x27f/0x3c0 [ 1741.477711][T26220] ? do_splice_to+0x170/0x170 [ 1741.482226][T26220] ? fsnotify_perm+0x67/0x4e0 [ 1741.486737][T26220] ? security_file_permission+0x7b/0xb0 [ 1741.492120][T26220] ? security_file_permission+0x86/0xb0 [ 1741.497645][T26220] do_sendfile+0x8f4/0x10e0 [ 1741.502064][T26220] ? do_preadv+0x350/0x350 [ 1741.506512][T26220] ? __kasan_check_write+0x14/0x20 [ 1741.511671][T26220] ? _copy_from_user+0x96/0xd0 [ 1741.516322][T26220] __x64_sys_sendfile64+0x163/0x230 [ 1741.521347][T26220] ? __ia32_sys_sendfile+0x240/0x240 [ 1741.526465][T26220] ? __kasan_check_read+0x11/0x20 [ 1741.531325][T26220] ? asm_sysvec_reschedule_ipi+0xa/0x20 [ 1741.536707][T26220] ? irqentry_exit_to_user_mode+0x41/0x80 [ 1741.542259][T26220] do_syscall_64+0x34/0x70 [ 1741.546514][T26220] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1741.552243][T26220] RIP: 0033:0x7f7db5122ff9 [ 1741.556497][T26220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1741.575932][T26220] RSP: 002b:00007f7db3d5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1741.584179][T26220] RAX: ffffffffffffffda RBX: 00007f7db52db130 RCX: 00007f7db5122ff9 [ 1741.591989][T26220] RDX: 0000000020000240 RSI: 0000000000000003 RDI: 0000000000000003 [ 1741.599801][T26220] RBP: 00007f7db3d5a090 R08: 0000000000000000 R09: 0000000000000000 [ 1741.607698][T26220] R10: 0000000000007f06 R11: 0000000000000246 R12: 0000000000000002 [ 1741.615509][T26220] R13: 0000000000000000 R14: 00007f7db52db130 R15: 00007fff652b9008 [ 1741.705297][T26223] device bridge_slave_1 left promiscuous mode [ 1741.712184][T26223] bridge0: port 2(bridge_slave_1) entered disabled state [ 1741.786381][T14683] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1742.286181][T14683] usb 4-1: Using ep0 maxpacket: 32 [ 1742.566208][T14683] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1742.575076][T14683] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1742.582868][T14683] usb 4-1: Product: syz [ 1742.586865][T14683] usb 4-1: Manufacturer: syz [ 1742.591255][T14683] usb 4-1: SerialNumber: syz [ 1742.596863][T14683] usb 4-1: config 0 descriptor?? SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: repeatedly failed to execute the program proc=2 req=6492 state=1 status=67 (errno 9: Bad file descriptor) [ 1743.716141][ T24] kauditd_printk_skb: 124 callbacks suppressed [ 1743.716162][ T24] audit: type=1400 audit(2000005768.332:129104): avc: denied { prog_load } for pid=26211 comm="syz.3.6532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1743.900044][ T24] audit: type=1400 audit(2000005768.452:129105): avc: denied { bpf } for pid=26211 comm="syz.3.6532" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1743.964683][ T24] audit: type=1400 audit(2000005768.452:129106): avc: denied { perfmon } for pid=26211 comm="syz.3.6532" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1744.071024][ T24] audit: type=1400 audit(2000005768.452:129107): avc: denied { map_create } for pid=26211 comm="syz.3.6532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1744.131078][ T24] audit: type=1400 audit(2000005768.482:129108): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1744.196165][ T24] audit: type=1400 audit(2000005768.482:129109): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1744.274388][ T24] audit: type=1400 audit(2000005768.492:129110): avc: denied { append } for pid=77 comm="syslogd" name="messages" dev="tmpfs" ino=28 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1744.365383][ T24] audit: type=1400 audit(2000005768.492:129111): avc: denied { open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=28 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1744.388297][ T24] audit: type=1400 audit(2000005768.492:129112): avc: denied { getattr } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=28 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1744.411594][ T24] audit: type=1400 audit(2000005768.992:129113): avc: denied { read write } for pid=25216 comm="syz-executor" name="loop4" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1744.536960][T26130] tipc: Left network mode [ 1745.426778][T26130] device bridge_slave_0 left promiscuous mode [ 1745.432708][T26130] bridge0: port 1(bridge_slave_0) entered disabled state [ 1745.440799][T26130] device veth1_macvtap left promiscuous mode [ 1745.446679][T26130] device veth0_vlan left promiscuous mode [ 1745.877441][T26130] tipc: Disabling bearer [ 1745.882689][T26130] tipc: Disabling bearer [ 1745.887839][T26130] tipc: Left network mode [ 1745.892068][T26130] tipc: Left network mode [ 1745.896306][T26130] tipc: Left network mode [ 1746.086200][T14683] rtl8150 4-1:0.0: couldn't reset the device [ 1746.092133][T14683] rtl8150: probe of 4-1:0.0 failed with error -5 [ 1746.106985][T14683] usb 4-1: USB disconnect, device number 92 [ 1746.447449][T26130] bridge0: port 3(erspan0) entered disabled state [ 1746.455074][T26130] device erspan0 left promiscuous mode [ 1746.460385][T26130] bridge0: port 3(erspan0) entered disabled state [ 1746.747126][T26130] device bridge_slave_1 left promiscuous mode [ 1746.753185][T26130] bridge0: port 2(bridge_slave_1) entered disabled state [ 1746.760567][T26130] device bridge_slave_0 left promiscuous mode [ 1746.766489][T26130] bridge0: port 1(bridge_slave_0) entered disabled state [ 1746.773930][T26130] device bridge_slave_0 left promiscuous mode [ 1746.779886][T26130] bridge0: port 1(bridge_slave_0) entered disabled state [ 1746.787204][T26130] device bridge_slave_1 left promiscuous mode [ 1746.793090][T26130] bridge0: port 2(bridge_slave_1) entered disabled state [ 1746.800294][T26130] device bridge_slave_0 left promiscuous mode [ 1746.806227][T26130] bridge0: port 1(bridge_slave_0) entered disabled state [ 1746.813846][T26130] device veth1_macvtap left promiscuous mode [ 1746.819700][T26130] device veth0_vlan left promiscuous mode [ 1746.825305][T26130] device veth1_macvtap left promiscuous mode [ 1746.831037][T26130] device veth0_vlan left promiscuous mode [ 1746.836703][T26130] device veth1_macvtap left promiscuous mode [ 1748.851004][ T24] kauditd_printk_skb: 26 callbacks suppressed [ 1748.851016][ T24] audit: type=1400 audit(2000005773.592:129140): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1748.878727][ T24] audit: type=1400 audit(2000005773.592:129141): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1748.900073][ T24] audit: type=1400 audit(2000005773.592:129142): avc: denied { append } for pid=77 comm="syslogd" name="messages" dev="tmpfs" ino=28 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1748.922245][ T24] audit: type=1400 audit(2000005773.592:129143): avc: denied { open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=28 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1748.944588][ T24] audit: type=1400 audit(2000005773.592:129144): avc: denied { getattr } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=28 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1749.854233][ T24] audit: type=1400 audit(2000005774.592:129145): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1749.876466][ T24] audit: type=1400 audit(2000005774.592:129146): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1749.897925][ T24] audit: type=1400 audit(2000005774.592:129147): avc: denied { append } for pid=77 comm="syslogd" name="messages" dev="tmpfs" ino=28 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1749.920009][ T24] audit: type=1400 audit(2000005774.592:129148): avc: denied { open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=28 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1749.942406][ T24] audit: type=1400 audit(2000005774.592:129149): avc: denied { getattr } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=28 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1