last executing test programs: 12.450239329s ago: executing program 4 (id=510): socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=r0, @ANYRES16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00d\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESOCT, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e000000ffffff00000000650000", @ANYRES32=r1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0300000004000000050000000d00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB="000000001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r6}, 0x10) r7 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r8, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r9}], 0x2c, 0xffffffffffbffff8) dup2(r5, r3) tkill(r7, 0x13) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) 10.888235533s ago: executing program 2 (id=519): socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x18, 0x8, 0xffffffff, 0x4, 0x5, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e000000ffffff00000000650000", @ANYRES32=r1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0300000004000000050000000d00"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x400) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@dev, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x5}}, 0xe8) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x10}}, 0x0) write$binfmt_script(r5, &(0x7f0000000a00)={'#! ', './file0'}, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = eventfd(0x0) r10 = eventfd(0x0) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000040)={r10, 0x0, 0x2, r9}) 10.881796524s ago: executing program 2 (id=520): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x787, &(0x7f0000001000)="$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") chdir(&(0x7f0000000100)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) rename(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file1\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth1_virt_wifi\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000002c0)=0x4446, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) request_key(&(0x7f0000002740)='asymmetric\x00', &(0x7f0000002780)={'syz', 0x3}, &(0x7f00000010c0)=',*[\\/&)\x00', 0x0) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r2, &(0x7f00000000c0)="6a767354b3abc74d83a261d7d3b5", 0xe, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) 10.015073784s ago: executing program 2 (id=525): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000084c05e60c00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="000090"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000700)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="2001"], 0x0}) 9.376021253s ago: executing program 4 (id=528): socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/bus/input/devices\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x204410, &(0x7f0000000780)={[{@nodiscard}, {@resuid}, {@nogrpid}]}, 0xfe, 0x4a1, &(0x7f00000001c0)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000013c0)=@abs, 0x6e, &(0x7f0000000a80)=[{&(0x7f00000007c0)=""/48, 0x30}, {&(0x7f0000000500)=""/45, 0x2d}, {&(0x7f0000000680)=""/178, 0xb2}, {&(0x7f00000009c0)=""/122, 0xffffffbf}, {&(0x7f0000001380)=""/46, 0x2e}], 0x5, &(0x7f0000000b00)}, 0x162) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x8500) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0200"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000080010000000000000000021140f0ca44b8874fdf8a448d47b05193a1a8295118e5bf8d3c276e4fee9e2157c87a9eaa121fdcdf98d299bcc1eb7a5d8a157a2d641200d204"], 0x48}}, 0x24000800) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000060000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 8.401880353s ago: executing program 4 (id=531): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() syz_open_procfs(r3, &(0x7f0000000180)='cgroup\x00') setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) recvmmsg(r2, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002002, 0x0) write$binfmt_misc(r1, &(0x7f00000000c0), 0x3e) write$binfmt_misc(r1, &(0x7f0000000040), 0xffc1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000001b7080000000000007b8af8ff00000004000000000000850000008200000095000076e3000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) io_setup(0x4, &(0x7f0000000280)=0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) io_submit(r4, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) ioctl$BINDER_WRITE_READ(r5, 0x40046208, 0x0) 7.776068271s ago: executing program 0 (id=534): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_route(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x709102, 0x108) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RGETLOCK(r2, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) splice(r1, 0x0, r4, 0x0, 0x100000000, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000bd43eafbaa33699ad87704fbd4705ec743fbcaa83a93105c2fe59fcd32a9d17083692fff5691d708934dcff70e8ee531b79636713e02e641069e0c2340fba8cfe13d7009ddfd2a48ef6513f7f004715898"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000630120000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000006c0000000000000000000000000000000000000000006d91adbf7c9b2d354fd1c2a4b7ee68d07f49a3dd5f3cfcc5e5f49af815eb5adbad7074ce2c29e966498479790f7a0af1b0efecf0238acb67e99769bdcf79c98883109390d8245d791169d9a1d4ac2e18d163d0b66b082f891f17ee367fbaf1bc1cec2c7e5798abf8d91276ff2ade0dd1dbdc1b82e6ad346e9098c88ca0fd3432232ca44bc365977be8f9"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, 0x0, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000013c0), 0x802, 0x0) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x2) write$uinput_user_dev(r7, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r7, 0x5501) write$uinput_user_dev(r7, &(0x7f0000000080)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x400002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401], [0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 7.429204734s ago: executing program 2 (id=536): syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x10001, 0xd, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'gretap0\x00'}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, 0x0, &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 7.079021366s ago: executing program 2 (id=537): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000140)="53a1b228144d4835415007b390c577cc8a52baa9acba00f1dd7513f66663907dd44196b10d83678ae900d813987c30ec", 0x30}, {&(0x7f0000000540)="0b8b61a9d3983220d21a6c51b2595f671ffd4f674d81bec0e74d44fc1f87c6699a37d7dc912a573f5160648d2dc6dcb9b7fadbfa5f6d0b77afb8e72fc808ca522704d3a40c10a4ec", 0x48}, {&(0x7f0000000700)="ecb0cf337e24fac56e2538eeef46cfc55416975a2b339dc2fd50692d3a8701efab83f5d5522b4d66e05b95861dbd39ec103f21789acad70354be14337dee47726ee004957151164ff869fd080c8aba3cbbb98dc6833516bd27cea00e2bcf832865128a661ee2d8bb45952d584728fc7b3d9031f3fca7780d3345a6386a1380b311cbf7dcfcc6f0cc62cef4971d77e32d4df628932e98b716b22833c4f753ae66f24ad52ad704929d72860c28223013a4e9e1f1d0457b2ced6397ba", 0xbb}, {&(0x7f0000000340)="88b1b408f4505cceda1a52bd9275c1cee323958beab018ed3fcfbda5a40856fff0e5775f3964edba0dffc9d6d5781f0cd36e643553f83c877d4abcf0197bdc9e0420107e5ce648500ee9d4e1d6f9b70f882178e1d16aedb5ac18916125c173da0679e5256e3494915f76f31d", 0x6c}, {&(0x7f0000000880)="f3800fa39c041d1b847639be7e710c9d84b36d726fd1c0c270e96d7301800d1474a8eb421e917e4356d41fe994c2f77cbe4d1c995b1457fe265375b93d0921e88a50b1ecd43d26e80ac566f640c663150d78beb087b3b94a4abfe1f4595f787d80ddb07bd31da39d135514a9bb1489bef35ef7a524ce59fcada09cab615172ab3d844b24bb76d2b1443a7942708f845d143499446d609aba4d95531eb7396d6606b9d0e6f559fb04ec9352e6dc104d1f6d89e4157200fea77e", 0xb9}, {&(0x7f00000009c0)="91e63bba648258706160117885363debd7e23684aa6e7c41fd6873ca56f4cffd1550819bdaee6c6d923c1ccd95950a085ca74094eee665b3a23811bb4e193946573ddf786db600d95230e5e4771638575d297fc5d7055a5aac2323a863e69f0843e1978fcf5a8501bf0a587601a0019e315d68a38b2fbbc07016fbc5938551d39b5dafe31a7c50f47d8c9d8b0c152d5bbe2194208c2093faa1447e1bff7f78e8e715b29dc3f4ff086a0570bf519be43633f57dfa1628a5665fd75f78295733525e2952887565d265698c93b1c551e71d5b04074a6af623f6b7142de0f4608c4cfb12e49e17f0d2598ea42337393f690fe4f4f29ae7b31753f769c85387c0f22e28df35968d6353e2f0db11339b7d136bff95efb22dae41c46f2d0046486e2ab1ae862a5fe46f32ce0f40d710ef0ffe579497a49404094f2161d17b4401b85481b2d72001ff", 0x145}, {&(0x7f00000007c0)="3efce8a8cebdc7241cb440f11fea781548d34d5e722a5dba696e4537ea944559f4e059a3fe4330959c11510fa33e1c42452283b13d4c83a23330b6408a9be851c6236b43a9ea7afb34e1a990513670a5c28bc7e3214ef988fed2004e84214e139f098cdd67c5f34c9080698ef5b3624d7da6c42114782f19b032ea52", 0x7c}, {&(0x7f0000000940)="c8", 0x1}, {&(0x7f0000000640)='i', 0x1}], 0x9}}], 0x1, 0x7c9ce320e12db95) sendfile(r4, r3, 0x0, 0x4000000000010046) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r1}, 0x10) timer_create(0x0, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='hrtimer_start\x00'}, 0x10) 7.078289616s ago: executing program 2 (id=538): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000031c0000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.879252934s ago: executing program 0 (id=543): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000002a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0xe) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd"], 0xfdef) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r4, &(0x7f0000002380)=[{&(0x7f0000000f40)="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", 0x1000}], 0x1) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000340)=""/52, 0x34}], 0x1, 0x0, 0x0) 6.757036415s ago: executing program 0 (id=545): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d041bc700000000000109022400010000000009042000010300000009210000000122070009058103"], 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000007c0), 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_VLAN={0x6, 0x5, 0x2}]}, 0x24}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000480, &(0x7f0000004080), 0x1, 0x762, &(0x7f0000001180)="$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") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 6.420119487s ago: executing program 4 (id=546): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)=""/17, 0x11}], 0x4}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x60d19000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000004000000000000000002000000e000000200000000000000000d0001007564703a73797a3200000000ae64d5bfc367f0be"], 0x54}}, 0x0) 5.751799248s ago: executing program 1 (id=551): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x28811, r7, 0x0) ftruncate(r7, 0xc17a) ioctl$ASHMEM_SET_NAME(r3, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000d80), 0x208e24b) fdatasync(r8) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x10000000000002a9, 0x0, 0x0) ioctl$HIDIOCGFLAG(r8, 0x8004480e, &(0x7f0000000180)) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r9}, 0x10) 5.575981275s ago: executing program 4 (id=552): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = getpid() prlimit64(r1, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff85000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x20aa400, 0x0, 0xfc, 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r6, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) sendto$inet6(r7, &(0x7f0000000100)="80000fdc2208a1ce", 0x8, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000067c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000020c0)=""/245, 0xf5}], 0x1}}], 0x2, 0x42, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000200), 0x0, 0x0, 0x8, 0x0) add_key(0x0, 0x0, &(0x7f00000003c0)="1f20", 0x2, 0x0) 4.899277267s ago: executing program 1 (id=555): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000", @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e870200010000000000004000020000000005000500000000000a"], 0x80}}, 0x10) listen(0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f00000000c0)=0x7) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYRES8=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000200000085000000860000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fcntl$setown(0xffffffffffffffff, 0x8, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x26e1, 0x0) close(r6) 4.307402282s ago: executing program 4 (id=556): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x48) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x402, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x27a, &(0x7f0000000540)="$eJzs3DFrE38cx/FP0/zbNKVNhr+CgvhFF12ONj4ACdKCGFBqI+ogXO1FQ85cyYVKRGw3FwcfR3F0E9Qn0MXN3a2L4FJQjCRNTdKmitr0onm/oHff5pdP8rvkEr53kNu6+fxBqRA6BbeqWMIUk9a1LaUbVctIax1r1mPqtK7zk5/en7p+6/aVbC43t2A2n128kDGz6dOvHz5+ceZtdfLGy+lX49pM39n6mPmweXzzxNbXxfvF0IqhlYOqubYUBFV3yfdsuRiWHLNrvueGnhXLoVfpGi/4wcpKzdzy8lRypeKFobnlmpW8mlUDq1Zq5t5zi2VzHMemksLP5DcWFtxs1LNA38Qbi0ol645Kmtg3nN+IYlIAACBanf2/Bq7/b3QtP+7/1+n//wD9/zBo9P/J1ue3G/0/AAAAAAAAAAAAAAAAAAAAAAB/g+16PVWv11O7692/cUkJSbv/Rz1P9Afv/3Dr+OFeQvKfruZX85I/0lg2ZAsqypenGaX0pbk/tOzU85dzczPWlNYbf62VX1vNj3bnZ5VSund+didv3fn/lOzMZ5TS/73zmZ75MZ0725F3lNK7uwrka7m5X7fzT2bNLl3N7clPNO8HAAAAAMC/wLHveh6/O85B4zv5Xzg/sOf4Oq6T8Wi3HQAAAACAYRHWHpVc3/cq0RSfWycLIp7GgBfHJP1W/GLHVV/bQ/F9txx28SwYlJduAIuEpEN9wAn1Y6oRfikBAAAA6It20x/1TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGF5HccGzA546dsSbCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAETuWwAAAP//AmwlzQ==") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7, 0x1004, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1) r8 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r8, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r9, 0x82307201, &(0x7f0000000f40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x11, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x3, "5f68dd"}, 0x0}) 3.180644976s ago: executing program 1 (id=558): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e870200010000000000004000020000000005000500000000000a"], 0x80}}, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) listen(r6, 0x0) accept4$bt_l2cap(r6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYRES8=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fcntl$setown(0xffffffffffffffff, 0x8, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x26e1, 0x0) close(r7) 2.298672828s ago: executing program 1 (id=563): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b702000003000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e870200010000000000004000020000000005000500000000000a"], 0x80}}, 0x10) listen(0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f00000000c0)=0x7) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYRES8=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000200000085000000860000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fcntl$setown(0xffffffffffffffff, 0x8, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x26e1, 0x0) close(r6) 1.764011007s ago: executing program 0 (id=564): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) rt_sigaction(0x31, &(0x7f0000000440)={&(0x7f0000000100)="460fd83136f0208249bdd9a1c4c1795a24c12e0f02186736460f18fe8fe978d18dffefffff673ef3a40f9e4f002e2e65400fd5c665f264f6730d", 0x3, &(0x7f0000000340)="410f5cc1c4c2651658030f53a009000000260ffdc326f3d3010f01d9c421896a2bc4e17853dfc4a17d10e183cb67", {[0x5]}}, &(0x7f0000000600)={&(0x7f0000000480)="660f747e5338945854f50000c4417c10272e66440f3a17e000dbe3c402bd97c54666900ffa29656666660f3a42da2f0486", 0x0, &(0x7f00000005c0)="66f3d8daf34c0f1ece440f38cd5d9f26660f7e51d5f24b0f2c3066470f16a1b147b16d410f8a04000000c4617f1224180f1c116566f3460fa6d0"}, 0x8, &(0x7f0000000640)) 1.749860229s ago: executing program 0 (id=565): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085000000570000"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000001c0)=@gcm_128={{0x304}, "c58d3b7db7af7f0f", "8ecf640269ac14a6404a92e8cbe5d8f1", "5d901414", "8b5df6985ba885b3"}, 0x28) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c81, 0xfffffffffffffffc) 1.370462764s ago: executing program 1 (id=566): syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x10001, 0xd, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'gretap0\x00'}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, 0x0, &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 1.367965494s ago: executing program 3 (id=567): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085000000570000"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000001c0)=@gcm_128={{0x304}, "c58d3b7db7af7f0f", "8ecf640269ac14a6404a92e8cbe5d8f1", "5d901414", "8b5df6985ba885b3"}, 0x28) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) setsockopt$MRT_DEL_MFC(r8, 0x0, 0xcd, &(0x7f00000003c0)={@multicast1, @dev={0xac, 0x14, 0x14, 0x2c}, 0x0, "982f8cfc73c6f52815b85111fa9f09f2c8efc805f11d3369d67bc90e04bdb680", 0x5, 0x6, 0xeea, 0x7}, 0x3c) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r9, 0x4c81, 0xfffffffffffffffc) 735.297232ms ago: executing program 0 (id=568): r0 = syz_usb_connect(0x0, 0x4d, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000735aca105e042107c4900102030109023b00010000000009040000000e010000052406000105240300000d240f0100000000000000000006"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000e8000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) 467.168307ms ago: executing program 1 (id=569): epoll_create(0x2a) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000003335c9c1a2c40a86c9838175d61c00000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getrlimit(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000840)=0x2) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x183442, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000800000b5a6f07a765be238530eee88192eb50e9e57ae2d06ab4c11b59bbf62ad0aaf6da1a2b66dae0a335ce7"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000eb00000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r6}, &(0x7f0000000680), &(0x7f00000006c0)='%+9llu \x00'}, 0x20) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f00000000c0)=0xc4030a4) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f00000002c0)) write$ppp(r5, &(0x7f00000003c0)='\x00!', 0x100000) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x64000600) socket$inet_udp(0x2, 0x2, 0x0) 392.586294ms ago: executing program 3 (id=570): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r0}, 0x18) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') 390.957224ms ago: executing program 3 (id=571): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000140)="53a1b228144d4835415007b390c577cc8a52baa9acba00f1dd7513f66663907dd44196b10d83678ae900d813987c30ec", 0x30}, {&(0x7f0000000540)="0b8b61a9d3983220d21a6c51b2595f671ffd4f674d81bec0e74d44fc1f87c6699a37d7dc912a573f5160648d2dc6dcb9b7fadbfa5f6d0b77afb8e72fc808ca522704d3a40c10a4ec42cef49e0f14cfed658cd906", 0x54}, {&(0x7f0000000700)="ecb0cf337e24fac56e2538eeef46cfc55416975a2b339dc2fd50692d3a8701efab83f5d5522b4d66e05b95861dbd39ec103f21789acad70354be14337dee47726ee004957151164ff869fd080c8aba3cbbb98dc6833516bd27cea00e2bcf832865128a661ee2d8bb45952d584728fc7b3d9031f3fca7780d3345a6386a1380b311cbf7dcfcc6f0cc62cef4971d77e32d4df628932e98b716b22833c4f753ae66f24ad52ad704929d72860c28223013a4e9e1f1d0457b2ced6397ba", 0xbb}, {&(0x7f0000000340)="88b1b408f4505cceda1a52bd9275c1cee323958beab018ed3fcfbda5a40856fff0e5775f3964edba0dffc9d6d5781f0cd36e643553f83c877d4abcf0197bdc9e0420107e5ce648500ee9d4e1d6f9b70f882178e1d16aedb5ac18916125c173da0679e5256e3494915f76f31d", 0x6c}, {&(0x7f0000000880)="f3800fa39c041d1b847639be7e710c9d84b36d726fd1c0c270e96d7301800d1474a8eb421e917e4356d41fe994c2f77cbe4d1c995b1457fe265375b93d0921e88a50b1ecd43d26e80ac566f640c663150d78beb087b3b94a4abfe1f4595f787d80ddb07bd31da39d135514a9bb1489bef35ef7a524ce59fcada09cab615172ab3d844b24bb76d2b1443a7942708f845d143499446d609aba4d95531eb7396d6606b9d0e6f559fb04ec9352e6dc104d1f6d89e4157200fea77e", 0xb9}, {&(0x7f00000009c0)="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", 0x145}, {&(0x7f00000007c0)="3efce8a8cebdc7241cb440f11fea781548d34d5e722a5dba696e4537ea944559f4e059a3fe4330959c11510fa33e1c42452283b13d4c83a23330b6408a9be851c6236b43a9ea7afb34e1a990513670a5c28bc7e3214ef988fed2004e84214e139f098cdd67c5f34c9080698ef5b3624d7da6c42114782f19b032ea52", 0x7c}, {&(0x7f0000000940)="c8", 0x1}, {&(0x7f0000000640)='i', 0x1}], 0x9}}], 0x1, 0x7c9ce320e12db95) sendfile(r4, r3, 0x0, 0x4000000000010046) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r1}, 0x10) timer_create(0x0, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='hrtimer_start\x00'}, 0x10) 389.827584ms ago: executing program 3 (id=572): getpid() syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r5 = epoll_create(0xb398) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000140)) write$vga_arbiter(r4, &(0x7f0000000100)=ANY=[@ANYRES32=r0], 0xe) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x1c3142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$BLKROSET(r6, 0x125d, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r8}, 0x10) 5.06669ms ago: executing program 3 (id=573): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 0s ago: executing program 3 (id=574): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000380)=""/99, 0x63) kernel console output (not intermixed with test programs): with bpf_probe_write_user helper that may corrupt user memory! [ 62.346866][ T1196] input: syz0 as /devices/virtual/input/input20 [ 62.574647][ T782] rtl8150 3-1:0.0: eth1: rtl8150 is detected [ 63.028306][ T1222] syz.0.195[1222] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.028423][ T1222] syz.0.195[1222] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.041461][ T1222] input: syz0 as /devices/virtual/input/input21 [ 63.115456][ T320] usb 5-1: device descriptor read/64, error -71 [ 63.265305][ T812] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 63.397566][ T320] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 63.598124][ T596] usb 3-1: USB disconnect, device number 5 [ 63.645530][ T812] usb 2-1: Using ep0 maxpacket: 8 [ 63.957846][ T812] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.968711][ T812] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.978298][ T812] usb 2-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 63.987137][ T812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.998306][ T812] usb 2-1: config 0 descriptor?? [ 64.035881][ T320] usb 5-1: device descriptor read/64, error -71 [ 64.516212][ T812] playstation 0003:054C:0CE6.0009: unknown main item tag 0x0 [ 64.523534][ T812] playstation 0003:054C:0CE6.0009: unknown main item tag 0x0 [ 64.531038][ T812] playstation 0003:054C:0CE6.0009: unknown main item tag 0x0 [ 64.538277][ T812] playstation 0003:054C:0CE6.0009: unknown main item tag 0x0 [ 64.545439][ T812] playstation 0003:054C:0CE6.0009: unknown main item tag 0x0 [ 64.552615][ T812] playstation 0003:054C:0CE6.0009: unknown main item tag 0x0 [ 64.559871][ T812] playstation 0003:054C:0CE6.0009: unknown main item tag 0x0 [ 64.567465][ T812] playstation 0003:054C:0CE6.0009: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.1-1/input0 [ 64.645306][ T320] usb 5-1: device descriptor read/64, error -71 [ 64.725308][ T812] playstation 0003:054C:0CE6.0009: Invalid byte count transferred, expected 20 got 0 [ 64.734624][ T812] playstation 0003:054C:0CE6.0009: Failed to retrieve DualSense pairing info: -22 [ 64.743650][ T812] playstation 0003:054C:0CE6.0009: Failed to get MAC address from DualSense [ 64.752164][ T812] playstation 0003:054C:0CE6.0009: Failed to create dualsense. [ 64.759546][ T596] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 64.766905][ T320] usb usb5-port1: attempt power cycle [ 64.772621][ T812] playstation: probe of 0003:054C:0CE6.0009 failed with error -22 [ 64.930821][ T812] usb 2-1: USB disconnect, device number 6 [ 65.005271][ T596] usb 3-1: Using ep0 maxpacket: 16 [ 65.788891][ T320] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 65.796381][ T596] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 65.985348][ T596] usb 3-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 66.004310][ T596] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.015268][ T320] usb 5-1: device descriptor read/8, error -71 [ 66.026008][ T596] usb 3-1: Product: syz [ 66.029968][ T596] usb 3-1: Manufacturer: syz [ 66.034404][ T596] usb 3-1: SerialNumber: syz [ 66.044093][ T596] usb 3-1: config 0 descriptor?? [ 66.285311][ T320] usb 5-1: device descriptor read/8, error -71 [ 66.517475][ T812] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 66.575289][ T596] uvcvideo: Found UVC 0.00 device syz (045e:0721) [ 66.581555][ T596] uvcvideo: No valid video chain found. [ 66.588777][ T596] usb 3-1: USB disconnect, device number 6 [ 66.665267][ T320] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 66.765292][ T812] usb 2-1: Using ep0 maxpacket: 16 [ 66.855306][ T320] usb 5-1: device descriptor read/8, error -71 [ 66.895275][ T812] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.075426][ T812] usb 2-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 67.084496][ T812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.092623][ T812] usb 2-1: Product: syz [ 67.096920][ T320] usb 5-1: device descriptor read/8, error -71 [ 67.102941][ T812] usb 2-1: Manufacturer: syz [ 67.118520][ T812] usb 2-1: SerialNumber: syz [ 67.123795][ T812] usb 2-1: config 0 descriptor?? [ 67.363672][ T320] usb usb5-port1: unable to enumerate USB device [ 67.685309][ T812] uvcvideo: Found UVC 0.00 device syz (045e:0721) [ 67.691614][ T812] uvcvideo: No valid video chain found. [ 67.699189][ T812] usb 2-1: USB disconnect, device number 7 [ 67.780495][ T1307] netlink: 28 bytes leftover after parsing attributes in process `syz.3.215'. [ 69.727422][ T1345] syz.3.226[1345] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.727681][ T1345] syz.3.226[1345] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.754381][ T1345] input: syz0 as /devices/virtual/input/input22 [ 70.425346][ T782] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 70.993046][ T782] usb 3-1: device descriptor read/64, error -71 [ 71.093874][ T1369] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.100874][ T1369] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.108163][ T1369] device bridge_slave_0 entered promiscuous mode [ 71.114821][ T1369] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.121851][ T1369] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.129587][ T1369] device bridge_slave_1 entered promiscuous mode [ 71.166462][ T1369] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.173324][ T1369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.180428][ T1369] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.187222][ T1369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.225883][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.233432][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.242468][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.251808][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.262112][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.282176][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.292668][ T1374] FAULT_INJECTION: forcing a failure. [ 71.292668][ T1374] name failslab, interval 1, probability 0, space 0, times 1 [ 71.294751][ T1369] device veth0_vlan entered promiscuous mode [ 71.311233][ T1374] CPU: 0 PID: 1374 Comm: syz.1.235 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 71.320834][ T1374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 71.330745][ T1374] Call Trace: [ 71.333878][ T1374] dump_stack_lvl+0x1e2/0x24b [ 71.338374][ T1374] ? panic+0x812/0x812 [ 71.342270][ T1374] ? bfq_pos_tree_add_move+0x43b/0x43b [ 71.347566][ T1374] dump_stack+0x15/0x17 [ 71.351558][ T1374] should_fail+0x3c6/0x510 [ 71.355811][ T1374] ? __alloc_skb+0x80/0x510 [ 71.360152][ T1374] __should_failslab+0xa4/0xe0 [ 71.364749][ T1374] should_failslab+0x9/0x20 [ 71.369093][ T1374] kmem_cache_alloc+0x3d/0x2e0 [ 71.373686][ T1374] __alloc_skb+0x80/0x510 [ 71.377854][ T1374] ? iov_iter_advance+0x258/0xb20 [ 71.382716][ T1374] alloc_skb_with_frags+0xa1/0x570 [ 71.387666][ T1374] ? 0xffffffffa0026718 [ 71.391665][ T1374] ? _copy_from_iter_full+0xa20/0xa20 [ 71.396864][ T1374] sock_alloc_send_pskb+0x915/0xa50 [ 71.401993][ T1374] ? sock_kzfree_s+0x60/0x60 [ 71.406455][ T1374] ? copyin+0x90/0x90 [ 71.410239][ T1374] packet_sendmsg+0x39a2/0x60a0 [ 71.414934][ T1374] ? kasan_set_track+0x4b/0x70 [ 71.419529][ T1374] ? kasan_set_free_info+0x23/0x40 [ 71.424469][ T1374] ? avc_has_perm+0x14d/0x400 [ 71.428988][ T1374] ? kstrtouint_from_user+0x20a/0x2a0 [ 71.434189][ T1374] ? memset+0x35/0x40 [ 71.438009][ T1374] ? selinux_socket_sendmsg+0x243/0x340 [ 71.443390][ T1374] ? selinux_socket_accept+0x5b0/0x5b0 [ 71.448693][ T1374] ? packet_getsockopt+0xea0/0xea0 [ 71.453633][ T1374] ? check_stack_object+0xf4/0x130 [ 71.458581][ T1374] ? security_socket_sendmsg+0x82/0xb0 [ 71.463871][ T1374] ? packet_getsockopt+0xea0/0xea0 [ 71.468825][ T1374] __sys_sendto+0x545/0x700 [ 71.473161][ T1374] ? __ia32_sys_getpeername+0x90/0x90 [ 71.478370][ T1374] ? __ia32_sys_read+0x90/0x90 [ 71.482971][ T1374] __x64_sys_sendto+0xe5/0x100 [ 71.487571][ T1374] do_syscall_64+0x34/0x70 [ 71.491823][ T1374] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 71.497552][ T1374] RIP: 0033:0x7f0446d5fff9 [ 71.501803][ T1374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.522052][ T1374] RSP: 002b:00007f04459d9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 71.530299][ T1374] RAX: ffffffffffffffda RBX: 00007f0446f17f80 RCX: 00007f0446d5fff9 [ 71.538110][ T1374] RDX: 000000000000e90c RSI: 00000000200000c0 RDI: 0000000000000005 [ 71.545921][ T1374] RBP: 00007f04459d9090 R08: 0000000020000540 R09: 0000000000000014 [ 71.553731][ T1374] R10: 000000000000a0c4 R11: 0000000000000246 R12: 0000000000000001 [ 71.561550][ T1374] R13: 0000000000000000 R14: 00007f0446f17f80 R15: 00007ffc4a51ca78 [ 71.574187][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.582819][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.593766][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.602225][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.622984][ T1369] device veth1_macvtap entered promiscuous mode [ 71.635295][ T782] usb 3-1: device descriptor read/64, error -71 [ 71.641485][ T24] audit: type=1400 audit(2000000003.879:199): avc: denied { remove_name } for pid=76 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.667744][ T24] audit: type=1400 audit(2000000003.879:200): avc: denied { rename } for pid=76 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.689972][ T24] audit: type=1400 audit(2000000003.879:201): avc: denied { create } for pid=76 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.736438][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.752513][ T1379] FAULT_INJECTION: forcing a failure. [ 71.752513][ T1379] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 71.755489][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.765961][ T1379] CPU: 0 PID: 1379 Comm: syz.1.237 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 71.782871][ T1379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 71.792762][ T1379] Call Trace: [ 71.795893][ T1379] dump_stack_lvl+0x1e2/0x24b [ 71.800401][ T1379] ? bfq_pos_tree_add_move+0x43b/0x43b [ 71.805700][ T1379] ? __switch_to+0x5f6/0x1240 [ 71.810210][ T1379] dump_stack+0x15/0x17 [ 71.814200][ T1379] should_fail+0x3c6/0x510 [ 71.818453][ T1379] should_fail_usercopy+0x1a/0x20 [ 71.823315][ T1379] _copy_from_user+0x20/0xd0 [ 71.827740][ T1379] iovec_from_user+0xc7/0x330 [ 71.832253][ T1379] __import_iovec+0x6d/0x3b0 [ 71.836857][ T1379] ? __ia32_sys_shutdown+0x70/0x70 [ 71.841802][ T1379] import_iovec+0xe5/0x120 [ 71.846056][ T1379] ___sys_sendmsg+0x215/0x2e0 [ 71.851000][ T1379] ? __sys_sendmsg+0x280/0x280 [ 71.855603][ T1379] ? rw_verify_area+0x1c3/0x360 [ 71.860290][ T1379] ? __fdget+0x1bc/0x240 [ 71.864368][ T1379] __se_sys_sendmsg+0x1b1/0x280 [ 71.869138][ T1379] ? __x64_sys_sendmsg+0x90/0x90 [ 71.873911][ T1379] ? ksys_write+0x260/0x2c0 [ 71.878258][ T1379] ? debug_smp_processor_id+0x17/0x20 [ 71.883470][ T1379] __x64_sys_sendmsg+0x7b/0x90 [ 71.888067][ T1379] do_syscall_64+0x34/0x70 [ 71.892317][ T1379] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 71.898048][ T1379] RIP: 0033:0x7f0446d5fff9 [ 71.902295][ T1379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.905267][ T782] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 71.922094][ T1379] RSP: 002b:00007f04459d9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.922106][ T1379] RAX: ffffffffffffffda RBX: 00007f0446f17f80 RCX: 00007f0446d5fff9 [ 71.922112][ T1379] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000006 [ 71.922117][ T1379] RBP: 00007f04459d9090 R08: 0000000000000000 R09: 0000000000000000 [ 71.922122][ T1379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.922127][ T1379] R13: 0000000000000000 R14: 00007f0446f17f80 R15: 00007ffc4a51ca78 [ 71.973693][ T1384] syz.0.238[1384] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.977130][ T1384] syz.0.238[1384] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.978358][ T24] audit: type=1400 audit(2000000004.219:202): avc: denied { mounton } for pid=1369 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 72.021791][ T684] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 72.031568][ T1383] input: syz0 as /devices/virtual/input/input23 [ 72.150704][ T318] Bluetooth: hci0: Frame reassembly failed (-84) [ 72.275373][ T684] usb 4-1: Using ep0 maxpacket: 16 [ 72.315420][ T782] usb 3-1: device descriptor read/64, error -71 [ 72.336055][ T123] device bridge_slave_1 left promiscuous mode [ 72.342046][ T123] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.349100][ T331] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 72.356694][ T123] device bridge_slave_0 left promiscuous mode [ 72.362655][ T123] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.370130][ T123] device veth1_macvtap left promiscuous mode [ 72.375982][ T123] device veth0_vlan left promiscuous mode [ 72.405354][ T684] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.605369][ T684] usb 4-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 72.615008][ T684] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.623122][ T684] usb 4-1: Product: syz [ 72.627564][ T684] usb 4-1: Manufacturer: syz [ 72.632022][ T684] usb 4-1: SerialNumber: syz [ 72.638895][ T331] usb 2-1: Using ep0 maxpacket: 16 [ 72.648651][ T684] usb 4-1: config 0 descriptor?? [ 72.725263][ T782] usb 3-1: device descriptor read/64, error -71 [ 72.775391][ T331] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.845330][ T782] usb usb3-port1: attempt power cycle [ 72.945286][ T596] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 72.955467][ T331] usb 2-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 72.964309][ T331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.972188][ T331] usb 2-1: Product: syz [ 72.976119][ T331] usb 2-1: Manufacturer: syz [ 72.980514][ T331] usb 2-1: SerialNumber: syz [ 72.985708][ T331] usb 2-1: config 0 descriptor?? [ 73.195307][ T684] uvcvideo: Found UVC 0.00 device syz (045e:0721) [ 73.201551][ T684] uvcvideo: No valid video chain found. [ 73.207578][ T684] usb 4-1: USB disconnect, device number 4 [ 73.255452][ T782] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 73.355299][ T596] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.366099][ T596] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.375661][ T596] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 73.384474][ T596] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.392783][ T596] usb 1-1: config 0 descriptor?? [ 73.425323][ T782] usb 3-1: device descriptor read/8, error -71 [ 73.525299][ T331] uvcvideo: Found UVC 0.00 device syz (045e:0721) [ 73.531580][ T331] uvcvideo: No valid video chain found. [ 73.538111][ T331] usb 2-1: USB disconnect, device number 8 [ 73.695512][ T782] usb 3-1: device descriptor read/8, error -71 [ 73.975296][ T782] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 74.085322][ T596] usbhid 1-1:0.0: can't add hid device: -71 [ 74.091152][ T596] usbhid: probe of 1-1:0.0 failed with error -71 [ 74.097947][ T596] usb 1-1: USB disconnect, device number 7 [ 74.165355][ T782] usb 3-1: device descriptor read/8, error -71 [ 74.175354][ T321] Bluetooth: hci0: command 0x1003 tx timeout [ 74.181351][ T1391] Bluetooth: hci0: sending frame failed (-49) [ 74.435295][ T782] usb 3-1: device descriptor read/8, error -71 [ 74.555316][ T782] usb usb3-port1: unable to enumerate USB device [ 74.755261][ T392] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 74.795303][ T321] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 74.995297][ T392] usb 1-1: Using ep0 maxpacket: 8 [ 75.155457][ T321] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 75.166127][ T321] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 75.177017][ T321] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.186586][ T321] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 75.199395][ T321] usb 4-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 75.208195][ T321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.216107][ T392] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.227003][ T392] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.236767][ T321] usb 4-1: config 0 descriptor?? [ 75.241587][ T392] usb 1-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 75.250418][ T392] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.258737][ T392] usb 1-1: config 0 descriptor?? [ 75.715907][ T321] hid-rmi 0003:17EF:6085.000A: unknown main item tag 0x0 [ 75.724394][ T321] hid-rmi 0003:17EF:6085.000A: unknown main item tag 0x0 [ 75.731276][ T321] hid-rmi 0003:17EF:6085.000A: unknown main item tag 0x0 [ 75.739063][ T392] playstation 0003:054C:0CE6.000B: unknown main item tag 0x0 [ 75.746284][ T321] hid-rmi 0003:17EF:6085.000A: unknown main item tag 0x0 [ 75.753479][ T392] playstation 0003:054C:0CE6.000B: unknown main item tag 0x0 [ 75.760811][ T321] hid-rmi 0003:17EF:6085.000A: hidraw0: USB HID v0.00 Device [HID 17ef:6085] on usb-dummy_hcd.3-1/input0 [ 75.771861][ T392] playstation 0003:054C:0CE6.000B: unknown main item tag 0x0 [ 75.779117][ T392] playstation 0003:054C:0CE6.000B: unknown main item tag 0x0 [ 75.787086][ T392] playstation 0003:054C:0CE6.000B: unknown main item tag 0x0 [ 75.794273][ T392] playstation 0003:054C:0CE6.000B: unknown main item tag 0x0 [ 75.801506][ T392] playstation 0003:054C:0CE6.000B: unknown main item tag 0x0 [ 75.809512][ T392] playstation 0003:054C:0CE6.000B: hidraw1: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.0-1/input0 [ 75.916101][ T1410] udc-core: couldn't find an available UDC or it's busy [ 75.922898][ T1410] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 75.945379][ T392] playstation 0003:054C:0CE6.000B: Invalid byte count transferred, expected 20 got 0 [ 75.955036][ T392] playstation 0003:054C:0CE6.000B: Failed to retrieve DualSense pairing info: -22 [ 75.965079][ T392] playstation 0003:054C:0CE6.000B: Failed to get MAC address from DualSense [ 75.974133][ T392] playstation 0003:054C:0CE6.000B: Failed to create dualsense. [ 76.037998][ T392] playstation: probe of 0003:054C:0CE6.000B failed with error -22 [ 76.142857][ T392] usb 4-1: USB disconnect, device number 5 [ 76.207884][ T684] usb 1-1: USB disconnect, device number 8 [ 76.255254][ T53] Bluetooth: hci0: command 0x1001 tx timeout [ 76.261179][ T1391] Bluetooth: hci0: sending frame failed (-49) [ 76.665902][ T24] audit: type=1326 audit(2000000008.909:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1423 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face5029ff9 code=0x7ffc0000 [ 76.693799][ T24] audit: type=1326 audit(2000000008.909:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1423 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face5029ff9 code=0x7ffc0000 [ 76.726827][ T24] audit: type=1326 audit(2000000008.909:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1423 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7face5029ff9 code=0x7ffc0000 [ 76.790401][ T24] audit: type=1326 audit(2000000008.909:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1423 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face5029ff9 code=0x7ffc0000 [ 76.824977][ T24] audit: type=1326 audit(2000000008.909:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1423 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face5029ff9 code=0x7ffc0000 [ 76.848436][ T24] audit: type=1326 audit(2000000008.909:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1423 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7face5029ff9 code=0x7ffc0000 [ 76.872123][ T24] audit: type=1400 audit(2000000008.909:209): avc: denied { watch } for pid=1423 comm="syz.3.249" path="/54" dev="tmpfs" ino=296 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 76.894187][ T24] audit: type=1326 audit(2000000008.909:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1423 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face5029ff9 code=0x7ffc0000 [ 76.933087][ T24] audit: type=1326 audit(2000000008.909:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1423 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face5029ff9 code=0x7ffc0000 [ 76.956564][ T24] audit: type=1326 audit(2000000008.909:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1423 comm="syz.3.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7face5029ff9 code=0x7ffc0000 [ 78.496943][ T321] Bluetooth: hci0: command 0x1009 tx timeout [ 79.224163][ T1472] FAULT_INJECTION: forcing a failure. [ 79.224163][ T1472] name failslab, interval 1, probability 0, space 0, times 0 [ 79.236628][ T1472] CPU: 1 PID: 1472 Comm: syz.1.260 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 79.246197][ T1472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 79.256095][ T1472] Call Trace: [ 79.259228][ T1472] dump_stack_lvl+0x1e2/0x24b [ 79.263734][ T1472] ? bfq_pos_tree_add_move+0x43b/0x43b [ 79.269029][ T1472] ? __this_cpu_preempt_check+0x13/0x20 [ 79.274409][ T1472] ? tracing_record_taskinfo_sched_switch+0x84/0x390 [ 79.280924][ T1472] dump_stack+0x15/0x17 [ 79.284928][ T1472] should_fail+0x3c6/0x510 [ 79.289174][ T1472] ? avc_alloc_node+0x7e/0x360 [ 79.293766][ T1472] __should_failslab+0xa4/0xe0 [ 79.298371][ T1472] should_failslab+0x9/0x20 [ 79.302704][ T1472] kmem_cache_alloc+0x3d/0x2e0 [ 79.307312][ T1472] avc_alloc_node+0x7e/0x360 [ 79.307323][ T1472] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 79.307331][ T1472] ? __balance_callback+0x75/0xe0 [ 79.307339][ T1472] ? avc_xperms_free+0x280/0x280 [ 79.307346][ T1472] ? preempt_schedule_irq+0xe7/0x140 [ 79.307353][ T1472] ? preempt_schedule_notrace+0x140/0x140 [ 79.307362][ T1472] avc_update_node+0x4e/0x710 [ 79.307371][ T1472] ? sysvec_reschedule_ipi+0x83/0x160 [ 79.307378][ T1472] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 79.307385][ T1472] avc_denied+0x13f/0x1b0 [ 79.307394][ T1472] avc_has_extended_perms+0xb00/0xf70 [ 79.307404][ T1472] ? __kasan_check_read+0x11/0x20 [ 79.307411][ T1472] ? cpupri_find+0xf1/0x2f0 [ 79.307418][ T1472] ? avc_ss_reset+0x280/0x280 [ 79.307426][ T1472] ? find_lowest_rq+0x196/0x770 [ 79.307438][ T1472] ? ioctl_has_perm+0x1f8/0x560 [ 79.307446][ T1472] ioctl_has_perm+0x3f0/0x560 [ 79.307454][ T1472] ? has_cap_mac_admin+0x3c0/0x3c0 [ 79.307461][ T1472] ? __schedule+0xcc9/0x1330 [ 79.307470][ T1472] selinux_file_ioctl+0x3cc/0x540 [ 79.307479][ T1472] ? selinux_file_alloc_security+0x120/0x120 [ 79.307486][ T1472] ? __kasan_check_read+0x11/0x20 [ 79.307494][ T1472] ? __fget_files+0x31e/0x380 [ 79.307504][ T1472] security_file_ioctl+0x74/0xb0 [ 79.307512][ T1472] __se_sys_ioctl+0x53/0x190 [ 79.307519][ T1472] __x64_sys_ioctl+0x7b/0x90 [ 79.307526][ T1472] do_syscall_64+0x34/0x70 [ 79.307535][ T1472] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 79.307541][ T1472] RIP: 0033:0x7f0446d5fff9 [ 79.307550][ T1472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.307555][ T1472] RSP: 002b:00007f0445997038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.307565][ T1472] RAX: ffffffffffffffda RBX: 00007f0446f18130 RCX: 00007f0446d5fff9 [ 79.307570][ T1472] RDX: 00000000200000c0 RSI: 0000000000008946 RDI: 0000000000000007 [ 79.307575][ T1472] RBP: 00007f0445997090 R08: 0000000000000000 R09: 0000000000000000 [ 79.307579][ T1472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.307584][ T1472] R13: 0000000000000000 R14: 00007f0446f18130 R15: 00007ffc4a51ca78 [ 80.183382][ T1493] cgroup: syz.1.267 (1493) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 80.206375][ T1493] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 80.234756][ T1495] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.241684][ T1495] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.249016][ T1495] device bridge_slave_0 entered promiscuous mode [ 80.256275][ T1495] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.263136][ T1495] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.270471][ T1495] device bridge_slave_1 entered promiscuous mode [ 80.304905][ T1495] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.311753][ T1495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.318932][ T1495] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.325722][ T1495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.343010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.350390][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.357726][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.368158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.376187][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.383111][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.393437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.401416][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.408342][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.420595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.431963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.444985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.456623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.464677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.472298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.480732][ T1495] device veth0_vlan entered promiscuous mode [ 80.486687][ T684] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 80.505839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.516399][ T1495] device veth1_macvtap entered promiscuous mode [ 80.528167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.541605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.847782][ T318] device bridge_slave_1 left promiscuous mode [ 80.854353][ T318] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.866707][ T318] device bridge_slave_0 left promiscuous mode [ 80.873167][ T318] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.886790][ T318] device veth1_macvtap left promiscuous mode [ 80.893353][ T318] device veth0_vlan left promiscuous mode [ 80.900991][ T684] usb 2-1: Using ep0 maxpacket: 16 [ 81.025526][ T684] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.205454][ T684] usb 2-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 81.214543][ T684] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.222603][ T684] usb 2-1: Product: syz [ 81.226621][ T684] usb 2-1: Manufacturer: syz [ 81.231015][ T684] usb 2-1: SerialNumber: syz [ 81.235956][ T684] usb 2-1: config 0 descriptor?? [ 81.704468][ T24] kauditd_printk_skb: 31 callbacks suppressed [ 81.704478][ T24] audit: type=1400 audit(2000000013.939:244): avc: denied { write } for pid=1539 comm="syz.3.279" name="loop-control" dev="devtmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 81.785281][ T684] uvcvideo: Found UVC 0.00 device syz (045e:0721) [ 81.791524][ T684] uvcvideo: No valid video chain found. [ 81.806693][ T684] usb 2-1: USB disconnect, device number 9 [ 82.035262][ T331] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 82.284664][ T24] audit: type=1400 audit(2000000014.519:245): avc: denied { bind } for pid=1547 comm="syz.1.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 82.331768][ T331] usb 4-1: device descriptor read/64, error -71 [ 82.351933][ T1549] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.358824][ T1549] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.366292][ T1549] device bridge_slave_0 entered promiscuous mode [ 82.373267][ T1549] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.380350][ T1549] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.387867][ T1549] device bridge_slave_1 entered promiscuous mode [ 82.425129][ T24] audit: type=1400 audit(2000000014.659:246): avc: denied { create } for pid=1556 comm="syz.2.285" dev="anon_inodefs" ino=19485 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 82.435905][ T1549] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.453498][ T1549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.460587][ T1549] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.467399][ T1549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.106587][ T1563] xt_hashlimit: max too large, truncated to 1048576 [ 83.147277][ T24] audit: type=1400 audit(2000000015.349:247): avc: denied { setopt } for pid=1558 comm="syz.0.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.278843][ T318] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.324422][ T318] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.332188][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.339683][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.365109][ T1549] device veth0_vlan entered promiscuous mode [ 83.371448][ T1565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.287'. [ 83.382659][ T1568] netlink: 24 bytes leftover after parsing attributes in process `syz.2.285'. [ 83.391974][ T24] audit: type=1400 audit(2000000015.629:248): avc: denied { create } for pid=1566 comm="syz.1.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 83.392909][ T123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.419425][ T123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.427497][ T123] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.434583][ T123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.441931][ T123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.450486][ T123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.451133][ T24] audit: type=1400 audit(2000000015.689:249): avc: denied { create } for pid=1566 comm="syz.1.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.458863][ T123] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.484140][ T123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.491386][ T24] audit: type=1400 audit(2000000015.719:250): avc: denied { setopt } for pid=1566 comm="syz.1.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.491428][ T331] usb 4-1: device descriptor read/64, error -71 [ 83.517003][ T123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.517233][ T123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.517395][ T123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.517572][ T123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.517742][ T123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.518190][ T123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.518352][ T123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.518511][ T123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.518878][ T123] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.519033][ T123] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.617027][ T123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.624978][ T123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.635942][ T1549] device veth1_macvtap entered promiscuous mode [ 83.644353][ T123] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.652078][ T123] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.660243][ T123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.848542][ T123] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.857634][ T123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.923136][ T24] audit: type=1400 audit(2000000016.159:251): avc: denied { execute } for pid=1583 comm="syz.4.282" path="/0/hugetlb.2MB.rsvd.usage_in_bytes" dev="tmpfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 83.925242][ T331] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 84.235252][ T331] usb 4-1: device descriptor read/64, error -71 [ 84.245861][ T318] device bridge_slave_1 left promiscuous mode [ 84.252757][ T318] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.265963][ T318] device bridge_slave_0 left promiscuous mode [ 84.276020][ T318] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.288969][ T318] device veth1_macvtap left promiscuous mode [ 84.299951][ T318] device veth0_vlan left promiscuous mode [ 85.024478][ T331] usb 4-1: device descriptor read/64, error -71 [ 85.312437][ T1624] FAULT_INJECTION: forcing a failure. [ 85.312437][ T1624] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 85.325635][ T1624] CPU: 1 PID: 1624 Comm: syz.2.300 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 85.335232][ T1624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 85.345125][ T1624] Call Trace: [ 85.348263][ T1624] dump_stack_lvl+0x1e2/0x24b [ 85.352766][ T1624] ? bfq_pos_tree_add_move+0x43b/0x43b [ 85.358065][ T1624] dump_stack+0x15/0x17 [ 85.362051][ T1624] should_fail+0x3c6/0x510 [ 85.366309][ T1624] should_fail_alloc_page+0x52/0x60 [ 85.371339][ T1624] __alloc_pages_nodemask+0x1b3/0xaf0 [ 85.373423][ T331] usb usb4-port1: attempt power cycle [ 85.376555][ T1624] ? __kasan_check_read+0x11/0x20 [ 85.376572][ T1624] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 85.392183][ T1624] ? find_lowest_rq+0x196/0x770 [ 85.396862][ T1624] ? pick_next_pushable_task+0x210/0x210 [ 85.402324][ T1624] ? __kasan_check_read+0x11/0x20 [ 85.407186][ T1624] handle_pte_fault+0x1782/0x3e30 [ 85.412061][ T1624] ? __kasan_check_write+0x14/0x20 [ 85.416996][ T1624] ? vmf_allows_speculation+0x6f0/0x6f0 [ 85.422373][ T1624] ? __handle_speculative_fault+0xd03/0x1e90 [ 85.428200][ T1624] ? memcpy+0x56/0x70 [ 85.432009][ T1624] __handle_speculative_fault+0x1370/0x1e90 [ 85.437740][ T1624] ? finish_fault+0xaf0/0xaf0 [ 85.442264][ T1624] ? __kasan_check_read+0x11/0x20 [ 85.447117][ T1624] ? preempt_schedule_irq+0xe7/0x140 [ 85.452233][ T1624] ? preempt_schedule_notrace+0x140/0x140 [ 85.457797][ T1624] ? __schedule+0xcc9/0x1330 [ 85.462218][ T1624] ? irqentry_exit+0x4f/0x60 [ 85.466653][ T1624] ? sysvec_reschedule_ipi+0x83/0x160 [ 85.471849][ T1624] exc_page_fault+0x234/0x5b0 [ 85.476359][ T1624] ? asm_exc_page_fault+0x8/0x30 [ 85.481132][ T1624] asm_exc_page_fault+0x1e/0x30 [ 85.485819][ T1624] RIP: 0033:0x7fa1c7931813 [ 85.490071][ T1624] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 85.509689][ T1624] RSP: 002b:00007fa1c66a44a0 EFLAGS: 00010206 [ 85.515591][ T1624] RAX: 0000000000011000 RBX: 00007fa1c66a4540 RCX: 00007fa1be285000 [ 85.523395][ T1624] RDX: 00007fa1c66a46e0 RSI: 0000000000000019 RDI: 00007fa1c66a45e0 [ 85.531208][ T1624] RBP: 000000000000004a R08: 0000000000000005 R09: 0000000000000007 [ 85.539118][ T1624] R10: 0000000000000008 R11: 00007fa1c66a4540 R12: 0000000000000001 [ 85.546924][ T1624] R13: 00007fa1c7af4a40 R14: 00000000000000ff R15: 00007fa1c66a45e0 [ 85.555090][ T1624] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 85.727288][ T1628] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 85.734312][ T1628] IPv6: NLM_F_CREATE should be set when creating new route [ 85.741383][ T1628] IPv6: NLM_F_CREATE should be set when creating new route [ 85.823813][ T24] audit: type=1400 audit(2000000018.049:252): avc: denied { create } for pid=1632 comm="syz.1.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.886187][ T1631] overlayfs: failed to resolve './file2': -2 [ 86.850922][ T24] audit: type=1400 audit(2000000018.389:253): avc: denied { sys_admin } for pid=1640 comm="syz.1.306" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 87.390821][ T24] audit: type=1400 audit(2000000019.629:254): avc: denied { mounton } for pid=1638 comm="syz.0.305" path="/proc/231/task" dev="proc" ino=18780 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 87.706592][ T320] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 87.786021][ T24] audit: type=1326 audit(2000000020.019:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1670 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face5029ff9 code=0x7ffc0000 [ 87.819927][ T24] audit: type=1326 audit(2000000020.019:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1670 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7face5029ff9 code=0x7ffc0000 [ 88.290978][ T24] audit: type=1326 audit(2000000020.019:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1670 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face5029ff9 code=0x7ffc0000 [ 88.345249][ T24] audit: type=1326 audit(2000000020.019:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1670 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7face5029ff9 code=0x7ffc0000 [ 88.372524][ T24] audit: type=1326 audit(2000000020.019:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1670 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face5029ff9 code=0x7ffc0000 [ 88.406294][ T24] audit: type=1326 audit(2000000020.019:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1670 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7face5029ff9 code=0x7ffc0000 [ 88.430621][ T24] audit: type=1326 audit(2000000020.019:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1670 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face5029ff9 code=0x7ffc0000 [ 88.455870][ T24] audit: type=1326 audit(2000000020.019:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1670 comm="syz.3.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7face5029ff9 code=0x7ffc0000 [ 88.485260][ T320] usb 1-1: Using ep0 maxpacket: 16 [ 88.625318][ T320] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 88.633224][ T320] usb 1-1: config 0 has no interface number 0 [ 88.639438][ T320] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 88.746881][ T1686] FAULT_INJECTION: forcing a failure. [ 88.746881][ T1686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.759789][ T1686] CPU: 1 PID: 1686 Comm: syz.2.316 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 88.769350][ T1686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 88.779329][ T1686] Call Trace: [ 88.782464][ T1686] dump_stack_lvl+0x1e2/0x24b [ 88.786972][ T1686] ? bfq_pos_tree_add_move+0x43b/0x43b [ 88.792268][ T1686] ? irqentry_exit+0x4f/0x60 [ 88.796691][ T1686] dump_stack+0x15/0x17 [ 88.800683][ T1686] should_fail+0x3c6/0x510 [ 88.804938][ T1686] should_fail_usercopy+0x1a/0x20 [ 88.810402][ T1686] _copy_to_user+0x20/0x90 [ 88.814659][ T1686] simple_read_from_buffer+0xc7/0x150 [ 88.819952][ T1686] proc_fail_nth_read+0x1a3/0x210 [ 88.824813][ T1686] ? proc_fault_inject_write+0x390/0x390 [ 88.830283][ T1686] ? security_file_permission+0x86/0xb0 [ 88.835663][ T1686] ? rw_verify_area+0x1c3/0x360 [ 88.840350][ T1686] ? proc_fault_inject_write+0x390/0x390 [ 88.845828][ T1686] vfs_read+0x200/0xba0 [ 88.849809][ T1686] ? __kasan_check_read+0x11/0x20 [ 88.854669][ T1686] ? preempt_schedule_notrace+0x140/0x140 [ 88.860226][ T1686] ? kernel_read+0x70/0x70 [ 88.864479][ T1686] ? irqentry_exit+0x4f/0x60 [ 88.868903][ T1686] ? sysvec_reschedule_ipi+0x83/0x160 [ 88.874110][ T1686] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 88.879580][ T1686] ? ksys_read+0xfd/0x2c0 [ 88.883923][ T1686] ksys_read+0x199/0x2c0 [ 88.887997][ T1686] ? vfs_write+0xe70/0xe70 [ 88.892253][ T1686] ? fpu__clear_all+0x20/0x20 [ 88.896766][ T1686] ? __kasan_check_read+0x11/0x20 [ 88.901623][ T1686] __x64_sys_read+0x7b/0x90 [ 88.905964][ T1686] do_syscall_64+0x34/0x70 [ 88.910218][ T1686] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 88.915945][ T1686] RIP: 0033:0x7fa1c7a6ca3c [ 88.920200][ T1686] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 88.939640][ T1686] RSP: 002b:00007fa1c66a5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 88.947884][ T1686] RAX: ffffffffffffffda RBX: 00007fa1c7c26130 RCX: 00007fa1c7a6ca3c [ 88.955694][ T1686] RDX: 000000000000000f RSI: 00007fa1c66a50a0 RDI: 0000000000000008 [ 88.963501][ T1686] RBP: 00007fa1c66a5090 R08: 0000000000000000 R09: 0000000000000000 [ 88.971312][ T1686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 88.979166][ T1686] R13: 0000000000000000 R14: 00007fa1c7c26130 R15: 00007fff97be3778 [ 89.221939][ T1692] FAULT_INJECTION: forcing a failure. [ 89.221939][ T1692] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.355042][ T1692] CPU: 1 PID: 1692 Comm: syz.2.318 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 89.364658][ T1692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 89.374546][ T1692] Call Trace: [ 89.377684][ T1692] dump_stack_lvl+0x1e2/0x24b [ 89.382192][ T1692] ? bfq_pos_tree_add_move+0x43b/0x43b [ 89.387486][ T1692] ? preempt_schedule_irq+0xe7/0x140 [ 89.392604][ T1692] ? preempt_schedule_notrace+0x140/0x140 [ 89.398162][ T1692] dump_stack+0x15/0x17 [ 89.402150][ T1692] should_fail+0x3c6/0x510 [ 89.406406][ T1692] should_fail_usercopy+0x1a/0x20 [ 89.411263][ T1692] _copy_from_user+0x20/0xd0 [ 89.415692][ T1692] iovec_from_user+0xc7/0x330 [ 89.420208][ T1692] __import_iovec+0x6d/0x3b0 [ 89.424632][ T1692] ? __ia32_sys_shutdown+0x70/0x70 [ 89.429838][ T1692] import_iovec+0xe5/0x120 [ 89.434118][ T1692] ___sys_sendmsg+0x215/0x2e0 [ 89.438608][ T1692] ? __sys_sendmsg+0x280/0x280 [ 89.443455][ T1692] ? rcu_read_unlock_special+0xd8/0x4c0 [ 89.448827][ T1692] ? __fdget+0x1bc/0x240 [ 89.452901][ T1692] __se_sys_sendmsg+0x1b1/0x280 [ 89.457590][ T1692] ? __x64_sys_sendmsg+0x90/0x90 [ 89.462364][ T1692] ? fpu__clear_all+0x20/0x20 [ 89.466871][ T1692] ? __kasan_check_read+0x11/0x20 [ 89.471733][ T1692] __x64_sys_sendmsg+0x7b/0x90 [ 89.476333][ T1692] do_syscall_64+0x34/0x70 [ 89.480669][ T1692] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 89.486395][ T1692] RIP: 0033:0x7fa1c7a6dff9 [ 89.490651][ T1692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.510176][ T1692] RSP: 002b:00007fa1c66e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.518421][ T1692] RAX: ffffffffffffffda RBX: 00007fa1c7c25f80 RCX: 00007fa1c7a6dff9 [ 89.526233][ T1692] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000004 [ 89.534044][ T1692] RBP: 00007fa1c66e7090 R08: 0000000000000000 R09: 0000000000000000 [ 89.541856][ T1692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.549666][ T1692] R13: 0000000000000000 R14: 00007fa1c7c25f80 R15: 00007fff97be3778 [ 89.615468][ T320] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 89.624393][ T320] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 89.644635][ T320] usb 1-1: config 0 descriptor?? [ 89.665290][ T320] usb 1-1: can't set config #0, error -71 [ 89.673789][ T320] usb 1-1: USB disconnect, device number 9 [ 89.864407][ T1714] fuse: Bad value for 'user_id' [ 89.869166][ T331] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 90.125249][ T331] usb 3-1: Using ep0 maxpacket: 32 [ 90.225345][ T320] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 90.275344][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.286089][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.295709][ T331] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 90.304499][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.325448][ T331] usb 3-1: config 0 descriptor?? [ 90.535273][ T320] usb 2-1: device descriptor read/64, error -71 [ 90.625538][ T1722] netlink: 20 bytes leftover after parsing attributes in process `syz.0.326'. [ 90.844654][ T1728] 9pnet: Could not find request transport: f [ 90.978022][ T331] hkems 0003:2006:0118.000C: unbalanced delimiter at end of report description [ 90.987085][ T331] hkems 0003:2006:0118.000C: parse failed [ 90.992650][ T331] hkems: probe of 0003:2006:0118.000C failed with error -22 [ 91.017600][ T303] usb 3-1: USB disconnect, device number 11 [ 91.145251][ T320] usb 2-1: device descriptor read/64, error -71 [ 91.151367][ T331] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 91.614017][ T320] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 91.748086][ T331] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.828055][ T331] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 91.858806][ T24] kauditd_printk_skb: 24 callbacks suppressed [ 91.858824][ T24] audit: type=1400 audit(2000000024.099:287): avc: denied { write } for pid=1738 comm="syz.2.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.901465][ T331] usb 4-1: New USB device found, idVendor=1a7d, idProduct=30d4, bcdDevice= 0.00 [ 91.911374][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.921026][ T24] audit: type=1400 audit(2000000024.129:288): avc: denied { nlmsg_write } for pid=1738 comm="syz.2.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.970299][ T320] usb 2-1: device descriptor read/64, error -71 [ 91.990690][ T331] usb 4-1: config 0 descriptor?? [ 92.249528][ T24] audit: type=1326 audit(2000000024.489:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1726 comm="syz.3.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face5029ff9 code=0x7ffc0000 [ 92.272875][ T24] audit: type=1326 audit(2000000024.489:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1726 comm="syz.3.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face5029ff9 code=0x7ffc0000 [ 92.296399][ T24] audit: type=1326 audit(2000000024.499:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1726 comm="syz.3.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7face5029ff9 code=0x7ffc0000 [ 92.444357][ T24] audit: type=1326 audit(2000000024.499:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1726 comm="syz.3.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face5029ff9 code=0x7ffc0000 [ 92.573532][ T24] audit: type=1326 audit(2000000024.499:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1726 comm="syz.3.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face5029ff9 code=0x7ffc0000 [ 92.619252][ T1757] netlink: 'syz.3.328': attribute type 4 has an invalid length. [ 92.626795][ T1757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.328'. [ 92.683408][ T24] audit: type=1326 audit(2000000024.499:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1726 comm="syz.3.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7face5029ff9 code=0x7ffc0000 [ 92.714493][ T320] usb 2-1: device descriptor read/64, error -71 [ 92.725323][ T24] audit: type=1326 audit(2000000024.499:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1726 comm="syz.3.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face5029ff9 code=0x7ffc0000 [ 92.748499][ T24] audit: type=1326 audit(2000000024.499:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1726 comm="syz.3.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face5029ff9 code=0x7ffc0000 [ 92.835304][ T320] usb usb2-port1: attempt power cycle [ 92.995248][ T53] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 93.235249][ T53] usb 1-1: Using ep0 maxpacket: 8 [ 93.255254][ T320] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 93.355296][ T53] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.366053][ T53] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.376464][ T53] usb 1-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 93.385372][ T53] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.393573][ T53] usb 1-1: config 0 descriptor?? [ 93.445280][ T320] usb 2-1: device descriptor read/8, error -71 [ 93.920049][ T53] playstation 0003:054C:0CE6.000D: unknown main item tag 0x0 [ 93.955303][ T320] usb 2-1: device descriptor read/8, error -71 [ 93.969758][ T53] playstation 0003:054C:0CE6.000D: unknown main item tag 0x0 [ 93.977010][ T53] playstation 0003:054C:0CE6.000D: unknown main item tag 0x0 [ 93.984259][ T53] playstation 0003:054C:0CE6.000D: unknown main item tag 0x0 [ 93.991420][ T53] playstation 0003:054C:0CE6.000D: unknown main item tag 0x0 [ 93.998707][ T53] playstation 0003:054C:0CE6.000D: unknown main item tag 0x0 [ 94.005936][ T53] playstation 0003:054C:0CE6.000D: unknown main item tag 0x0 [ 94.013580][ T53] playstation 0003:054C:0CE6.000D: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.0-1/input0 [ 94.026304][ T782] usb 4-1: USB disconnect, device number 9 [ 94.135440][ T53] playstation 0003:054C:0CE6.000D: Invalid byte count transferred, expected 20 got 0 [ 94.149636][ T53] playstation 0003:054C:0CE6.000D: Failed to retrieve DualSense pairing info: -22 [ 94.158923][ T53] playstation 0003:054C:0CE6.000D: Failed to get MAC address from DualSense [ 94.167516][ T53] playstation 0003:054C:0CE6.000D: Failed to create dualsense. [ 94.177941][ T53] playstation: probe of 0003:054C:0CE6.000D failed with error -22 [ 94.255249][ T320] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 94.265331][ T331] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 94.338814][ T782] usb 1-1: USB disconnect, device number 10 [ 94.450627][ T320] usb 2-1: device descriptor read/8, error -71 [ 94.525247][ T331] usb 3-1: Using ep0 maxpacket: 8 [ 94.835687][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.846471][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.856846][ T331] usb 3-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 94.865879][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.895294][ T320] usb 2-1: device descriptor read/8, error -71 [ 95.389493][ T331] usb 3-1: config 0 descriptor?? [ 95.396593][ T320] usb usb2-port1: unable to enumerate USB device [ 95.650620][ T1803] EXT4-fs warning (device sda1): ext4_group_extend:1805: can't shrink FS - resize aborted [ 95.876562][ T331] playstation 0003:054C:0CE6.000E: unknown main item tag 0x0 [ 95.883925][ T331] playstation 0003:054C:0CE6.000E: unknown main item tag 0x0 [ 95.891340][ T331] playstation 0003:054C:0CE6.000E: unknown main item tag 0x0 [ 95.898715][ T331] playstation 0003:054C:0CE6.000E: unknown main item tag 0x0 [ 95.910156][ T331] playstation 0003:054C:0CE6.000E: unknown main item tag 0x0 [ 95.918263][ T331] playstation 0003:054C:0CE6.000E: unknown main item tag 0x0 [ 95.926425][ T331] playstation 0003:054C:0CE6.000E: unknown main item tag 0x0 [ 95.936296][ T331] playstation 0003:054C:0CE6.000E: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.2-1/input0 [ 96.085440][ T331] playstation 0003:054C:0CE6.000E: Invalid byte count transferred, expected 20 got 0 [ 96.097092][ T331] playstation 0003:054C:0CE6.000E: Failed to retrieve DualSense pairing info: -22 [ 96.106228][ T331] playstation 0003:054C:0CE6.000E: Failed to get MAC address from DualSense [ 96.114698][ T331] playstation 0003:054C:0CE6.000E: Failed to create dualsense. [ 96.122650][ T331] playstation: probe of 0003:054C:0CE6.000E failed with error -22 [ 96.175264][ T782] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 96.290667][ T331] usb 3-1: USB disconnect, device number 12 [ 96.415389][ T782] usb 5-1: Using ep0 maxpacket: 16 [ 96.535286][ T782] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.725279][ T782] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 96.734148][ T782] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.741978][ T782] usb 5-1: Product: syz [ 96.746014][ T782] usb 5-1: Manufacturer: syz [ 96.750413][ T782] usb 5-1: SerialNumber: syz [ 96.755307][ T782] usb 5-1: config 0 descriptor?? [ 97.285318][ T321] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 97.335299][ T782] uvcvideo: Found UVC 0.00 device syz (045e:0721) [ 97.341599][ T782] uvcvideo: No valid video chain found. [ 97.347778][ T782] usb 5-1: USB disconnect, device number 10 [ 97.565252][ T320] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 97.806693][ T320] usb 1-1: Using ep0 maxpacket: 16 [ 97.918362][ T321] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 97.935404][ T321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.935486][ T320] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.943194][ T321] usb 3-1: Product: syz [ 97.943204][ T321] usb 3-1: Manufacturer: syz [ 97.943220][ T321] usb 3-1: SerialNumber: syz [ 97.954281][ T320] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.975785][ T321] usb 3-1: config 0 descriptor?? [ 97.979818][ T320] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.993947][ T320] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 98.002965][ T320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.014870][ T320] usb 1-1: config 0 descriptor?? [ 98.111601][ T1843] FAULT_INJECTION: forcing a failure. [ 98.111601][ T1843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.124541][ T1843] CPU: 1 PID: 1843 Comm: syz.3.360 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 98.134063][ T1843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 98.143953][ T1843] Call Trace: [ 98.147090][ T1843] dump_stack_lvl+0x1e2/0x24b [ 98.151600][ T1843] ? bfq_pos_tree_add_move+0x43b/0x43b [ 98.156896][ T1843] dump_stack+0x15/0x17 [ 98.160881][ T1843] should_fail+0x3c6/0x510 [ 98.165137][ T1843] should_fail_usercopy+0x1a/0x20 [ 98.170000][ T1843] _copy_from_user+0x20/0xd0 [ 98.174427][ T1843] do_ip6t_set_ctl+0x768/0x1220 [ 98.179198][ T1843] ? switch_mm_irqs_off+0x2f9/0x9a0 [ 98.184226][ T1843] ? __schedule+0xbee/0x1330 [ 98.188656][ T1843] ? cleanup_entry+0x4d0/0x4d0 [ 98.193254][ T1843] ? __kasan_check_read+0x11/0x20 [ 98.198113][ T1843] ? preempt_schedule_common+0xbe/0xf0 [ 98.203404][ T1843] ? preempt_schedule+0xd9/0xe0 [ 98.208095][ T1843] ? schedule_preempt_disabled+0x20/0x20 [ 98.213562][ T1843] ? __kasan_check_write+0x14/0x20 [ 98.218512][ T1843] ? mutex_lock+0xa5/0x110 [ 98.222847][ T1843] ? mutex_trylock+0xa0/0xa0 [ 98.227285][ T1843] ? preempt_schedule_thunk+0x16/0x18 [ 98.232484][ T1843] nf_setsockopt+0x274/0x2a0 [ 98.236935][ T1843] ipv6_setsockopt+0x2789/0x3ea0 [ 98.241685][ T1843] ? ipv6_update_options+0x390/0x390 [ 98.246805][ T1843] ? native_set_ldt+0x360/0x360 [ 98.251491][ T1843] ? __update_idle_core+0x2a0/0x2a0 [ 98.256533][ T1843] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 98.261993][ T1843] ? update_load_avg+0x541/0x1690 [ 98.266856][ T1843] ? __kasan_check_write+0x14/0x20 [ 98.271804][ T1843] ? __switch_to+0x5f6/0x1240 [ 98.276325][ T1843] ? compat_start_thread+0x80/0x80 [ 98.281267][ T1843] ? pick_next_task_fair+0xa94/0xd40 [ 98.286390][ T1843] ? __update_idle_core+0x2a0/0x2a0 [ 98.291421][ T1843] ? avc_has_perm+0x14d/0x400 [ 98.295935][ T1843] ? avc_has_perm+0x275/0x400 [ 98.300533][ T1843] ? avc_has_perm_noaudit+0x240/0x240 [ 98.305744][ T1843] ? selinux_socket_setsockopt+0x260/0x360 [ 98.311380][ T1843] ? selinux_socket_getsockopt+0x340/0x340 [ 98.317028][ T1843] udpv6_setsockopt+0x8c/0xa0 [ 98.321537][ T1843] sock_common_setsockopt+0xa2/0xc0 [ 98.326570][ T1843] ? sock_common_recvmsg+0x240/0x240 [ 98.331691][ T1843] __sys_setsockopt+0x502/0x870 [ 98.336382][ T1843] ? __ia32_sys_recv+0xb0/0xb0 [ 98.340978][ T1843] ? __kasan_check_write+0x14/0x20 [ 98.345926][ T1843] ? switch_fpu_return+0x1e4/0x3c0 [ 98.350870][ T1843] ? fpu__clear_all+0x20/0x20 [ 98.355385][ T1843] __x64_sys_setsockopt+0xbf/0xd0 [ 98.360244][ T1843] do_syscall_64+0x34/0x70 [ 98.364500][ T1843] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 98.370234][ T1843] RIP: 0033:0x7face5029ff9 [ 98.374480][ T1843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.393918][ T1843] RSP: 002b:00007face3c61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 98.402174][ T1843] RAX: ffffffffffffffda RBX: 00007face51e2130 RCX: 00007face5029ff9 [ 98.410150][ T1843] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 98.418057][ T1843] RBP: 00007face3c61090 R08: 0000000000000648 R09: 0000000000000000 [ 98.425868][ T1843] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.433681][ T1843] R13: 0000000000000000 R14: 00007face51e2130 R15: 00007ffea42e8fc8 [ 98.659890][ T1824] udc-core: couldn't find an available UDC or it's busy [ 98.666924][ T1824] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 98.686177][ T320] koneplus 0003:1E7D:2E22.000F: item fetching failed at offset 0/2 [ 98.694216][ T320] koneplus 0003:1E7D:2E22.000F: parse failed [ 98.700331][ T320] koneplus: probe of 0003:1E7D:2E22.000F failed with error -22 [ 98.972255][ T320] usb 1-1: USB disconnect, device number 11 [ 100.198615][ T53] usb 3-1: USB disconnect, device number 13 [ 100.351290][ T1867] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.358222][ T1867] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.365293][ T303] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 100.373068][ T1867] device bridge_slave_0 entered promiscuous mode [ 100.379884][ T1867] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.386873][ T1867] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.401109][ T1867] device bridge_slave_1 entered promiscuous mode [ 100.894611][ T1867] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.901469][ T1867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.908565][ T1867] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.915351][ T1867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.967478][ T1867] device veth0_vlan entered promiscuous mode [ 100.990500][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.998975][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.007933][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.016043][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.023854][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.032186][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.040381][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.047760][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.060461][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.069253][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.077390][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.093623][ T1867] device veth1_macvtap entered promiscuous mode [ 101.255464][ T303] usb 1-1: Using ep0 maxpacket: 32 [ 101.258847][ T24] kauditd_printk_skb: 63 callbacks suppressed [ 101.258858][ T24] audit: type=1400 audit(2000000033.349:360): avc: denied { audit_write } for pid=1882 comm="syz.3.372" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 101.287224][ T24] audit: type=1107 audit(2000000033.349:361): pid=1882 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='Z 6$5G%w [ 101.287224][ T24] [ 101.287224][ T24] [ 101.287224][ T24] dav;AO1?p_ZʿM/R޴dx.P†M^z]^)A@?\e>hu_I;l̲ ǀqsz]ހ0gd]cJ[cd&@R VhƲ,.gQ'wojX"N OUޕUqa+|T6Nb;N)\; Q-4PGh*…Ñ.I{׹f:%ybER\Gߊ kC:F$c'͕+a#g78o'?\M~2~h?2|$A3泥zaSQ9LN򪜤i.ru4ӷT8Raf71y詶l[ D4~rHSBN (VYz 6/c<7kO+H~Ѭ,qlMhOq}`!^?nm'X'Y-!_1nk]Ur>1'!x0О1#3FO=}NqAD|7 6glA(w3>*!gΦgB# N)- [ 101.291670][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.391903][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.605376][ T303] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 101.617341][ T303] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.633311][ T303] usb 1-1: Product: syz [ 101.642515][ T303] usb 1-1: Manufacturer: syz [ 101.651107][ T303] usb 1-1: SerialNumber: syz [ 101.661268][ T303] usb 1-1: config 0 descriptor?? [ 101.725303][ T53] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 101.960941][ T123] device bridge_slave_1 left promiscuous mode [ 101.967107][ T123] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.974392][ T123] device bridge_slave_0 left promiscuous mode [ 101.980472][ T123] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.988291][ T123] device veth1_macvtap left promiscuous mode [ 101.994102][ T123] device veth0_vlan left promiscuous mode [ 102.005246][ T53] usb 2-1: Using ep0 maxpacket: 16 [ 102.159275][ T53] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.204667][ T24] audit: type=1400 audit(2000000034.439:362): avc: denied { read } for pid=1894 comm="syz.3.374" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 102.870333][ T24] audit: type=1400 audit(2000000034.439:363): avc: denied { open } for pid=1894 comm="syz.3.374" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 102.908979][ T24] audit: type=1400 audit(2000000035.009:364): avc: denied { mount } for pid=1900 comm="syz.4.376" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 102.935752][ T24] audit: type=1400 audit(2000000035.009:365): avc: denied { mounton } for pid=1900 comm="syz.4.376" path="/21/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 103.189453][ T303] (unnamed net_device) (uninitialized): Assigned a random MAC address: ce:34:fd:ca:72:cc [ 103.204594][ T303] rtl8150 1-1:0.0: eth1: rtl8150 is detected [ 103.212916][ T303] usb 1-1: USB disconnect, device number 12 [ 103.216423][ T53] usb 2-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 103.236017][ T53] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.245421][ T53] usb 2-1: Product: syz [ 103.249416][ T53] usb 2-1: Manufacturer: syz [ 103.264165][ T24] audit: type=1400 audit(2000000035.009:366): avc: denied { unlink } for pid=1900 comm="syz.4.376" name="#1" dev="tmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 103.301612][ T53] usb 2-1: SerialNumber: syz [ 103.359581][ T53] usb 2-1: config 0 descriptor?? [ 103.516359][ T24] audit: type=1400 audit(2000000035.009:367): avc: denied { read } for pid=1900 comm="syz.4.376" name="4:1" dev="overlay" ino=7248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 103.538699][ T24] audit: type=1400 audit(2000000035.299:368): avc: denied { read } for pid=1904 comm="syz.2.377" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.558481][ T24] audit: type=1400 audit(2000000035.389:369): avc: denied { unmount } for pid=1549 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 103.729756][ T1952] netlink: 36 bytes leftover after parsing attributes in process `syz.2.382'. [ 104.114612][ T53] uvcvideo: Found UVC 0.00 device syz (045e:0721) [ 104.138526][ T53] uvcvideo: No valid video chain found. [ 104.145913][ T53] usb 2-1: USB disconnect, device number 14 [ 104.176674][ C1] Illegal XDP return value 1603896156, expect packet loss! [ 104.218032][ T1967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.227904][ T1967] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.325340][ T25] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 104.614227][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 104.765320][ T53] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 104.795565][ T1996] netlink: 36 bytes leftover after parsing attributes in process `syz.1.395'. [ 104.804611][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.980575][ T25] usb 4-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 104.990923][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.998892][ T25] usb 4-1: Product: syz [ 105.002907][ T25] usb 4-1: Manufacturer: syz [ 105.007436][ T25] usb 4-1: SerialNumber: syz [ 105.033840][ T25] usb 4-1: config 0 descriptor?? [ 105.145351][ T53] usb 3-1: config 0 has an invalid descriptor of length 254, skipping remainder of the config [ 105.155917][ T53] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 105.168953][ T53] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 105.177945][ T53] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.198175][ T53] usb 3-1: config 0 descriptor?? [ 105.259707][ T53] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 105.575413][ T25] uvcvideo: Found UVC 0.00 device syz (045e:0721) [ 106.019677][ T25] uvcvideo: No valid video chain found. [ 106.046894][ T25] usb 4-1: USB disconnect, device number 10 [ 106.505231][ T321] usb 3-1: USB disconnect, device number 14 [ 106.597319][ T2027] 9pnet: Insufficient options for proto=fd [ 106.711547][ T2047] FAULT_INJECTION: forcing a failure. [ 106.711547][ T2047] name failslab, interval 1, probability 0, space 0, times 0 [ 106.748279][ T2047] CPU: 1 PID: 2047 Comm: syz.1.410 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 106.757893][ T2047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 106.767783][ T2047] Call Trace: [ 106.770918][ T2047] dump_stack_lvl+0x1e2/0x24b [ 106.775427][ T2047] ? bfq_pos_tree_add_move+0x43b/0x43b [ 106.780725][ T2047] ? __kasan_check_write+0x14/0x20 [ 106.785672][ T2047] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 106.790530][ T2047] dump_stack+0x15/0x17 [ 106.794528][ T2047] should_fail+0x3c6/0x510 [ 106.798785][ T2047] ? __alloc_skb+0x80/0x510 [ 106.803120][ T2047] __should_failslab+0xa4/0xe0 [ 106.807716][ T2047] should_failslab+0x9/0x20 [ 106.812053][ T2047] kmem_cache_alloc+0x3d/0x2e0 [ 106.816652][ T2047] ? tcp_set_state+0x49e/0x6d0 [ 106.821250][ T2047] __alloc_skb+0x80/0x510 [ 106.825418][ T2047] ? kmem_cache_free+0xa9/0x1e0 [ 106.830108][ T2047] tcp_send_active_reset+0x82/0x6c0 [ 106.835144][ T2047] __tcp_close+0x500/0xfd0 [ 106.839391][ T2047] tcp_close+0x29/0x110 [ 106.843378][ T2047] inet_release+0x184/0x200 [ 106.847721][ T2047] inet6_release+0x57/0x70 [ 106.851977][ T2047] sock_close+0xdf/0x270 [ 106.856052][ T2047] ? sock_mmap+0xa0/0xa0 [ 106.860135][ T2047] __fput+0x33d/0x7b0 [ 106.863950][ T2047] ____fput+0x15/0x20 [ 106.867767][ T2047] task_work_run+0x129/0x190 [ 106.872201][ T2047] exit_to_user_mode_loop+0xbf/0xd0 [ 106.877231][ T2047] syscall_exit_to_user_mode+0xa2/0x1a0 [ 106.882611][ T2047] do_syscall_64+0x40/0x70 [ 106.886865][ T2047] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 106.892588][ T2047] RIP: 0033:0x7f52e08cfff9 [ 106.896851][ T2047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.916282][ T2047] RSP: 002b:00007f52df549038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 106.924529][ T2047] RAX: 0000000000000000 RBX: 00007f52e0a87f80 RCX: 00007f52e08cfff9 [ 106.932342][ T2047] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 106.940150][ T2047] RBP: 00007f52df549090 R08: 0000000000000000 R09: 0000000000000000 [ 106.947961][ T2047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.955773][ T2047] R13: 0000000000000000 R14: 00007f52e0a87f80 R15: 00007ffc71e46ca8 [ 106.967475][ T24] kauditd_printk_skb: 11 callbacks suppressed [ 106.967484][ T24] audit: type=1400 audit(2000000038.949:381): avc: denied { name_bind } for pid=2046 comm="syz.1.410" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 107.520440][ T2069] netlink: 28 bytes leftover after parsing attributes in process `syz.0.412'. [ 107.745297][ T24] audit: type=1400 audit(2000000039.989:382): avc: denied { setopt } for pid=2076 comm="syz.4.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 107.840596][ T25] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 107.951167][ T2071] FAULT_INJECTION: forcing a failure. [ 107.951167][ T2071] name failslab, interval 1, probability 0, space 0, times 0 [ 107.973934][ T2071] CPU: 0 PID: 2071 Comm: syz.2.415 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 107.983547][ T2071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 107.993436][ T2071] Call Trace: [ 107.996575][ T2071] dump_stack_lvl+0x1e2/0x24b [ 108.001081][ T2071] ? bfq_pos_tree_add_move+0x43b/0x43b [ 108.006382][ T2071] ? vfs_write+0x852/0xe70 [ 108.010635][ T2071] dump_stack+0x15/0x17 [ 108.014624][ T2071] should_fail+0x3c6/0x510 [ 108.018877][ T2071] ? getname_flags+0xba/0x520 [ 108.023387][ T2071] __should_failslab+0xa4/0xe0 [ 108.027991][ T2071] should_failslab+0x9/0x20 [ 108.032327][ T2071] kmem_cache_alloc+0x3d/0x2e0 [ 108.036933][ T2071] ? mutex_trylock+0xa0/0xa0 [ 108.041357][ T2071] getname_flags+0xba/0x520 [ 108.045694][ T2071] do_mknodat+0x176/0x450 [ 108.049857][ T2071] ? fput+0x1a/0x20 [ 108.053499][ T2071] ? may_open+0x3f0/0x3f0 [ 108.057668][ T2071] __x64_sys_mknodat+0x9b/0xb0 [ 108.062273][ T2071] do_syscall_64+0x34/0x70 [ 108.066522][ T2071] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 108.072246][ T2071] RIP: 0033:0x7fa1c7a6dff9 [ 108.076501][ T2071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.095940][ T2071] RSP: 002b:00007fa1c66e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 108.104183][ T2071] RAX: ffffffffffffffda RBX: 00007fa1c7c25f80 RCX: 00007fa1c7a6dff9 [ 108.111998][ T2071] RDX: 0000000000000000 RSI: 0000000020001600 RDI: 0000000000000005 [ 108.119806][ T2071] RBP: 00007fa1c66e7090 R08: 0000000000000000 R09: 0000000000000000 [ 108.127618][ T2071] R10: 0000000000000704 R11: 0000000000000246 R12: 0000000000000001 [ 108.135430][ T2071] R13: 0000000000000000 R14: 00007fa1c7c25f80 R15: 00007fff97be3778 [ 108.492444][ T25] usb 4-1: unable to get BOS descriptor or descriptor too short [ 108.605269][ T25] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 108.612670][ T25] usb 4-1: can't read configurations, error -71 [ 108.791116][ T24] audit: type=1400 audit(2000000041.029:383): avc: denied { setopt } for pid=2092 comm="syz.2.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 108.924866][ T2109] netlink: 36 bytes leftover after parsing attributes in process `syz.4.424'. [ 109.137814][ T2113] netlink: 20 bytes leftover after parsing attributes in process `syz.3.426'. [ 109.163657][ T24] audit: type=1400 audit(2000000041.399:384): avc: denied { write } for pid=2116 comm="syz.2.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 109.349919][ T24] audit: type=1400 audit(2000000041.589:385): avc: denied { create } for pid=2114 comm="syz.0.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 109.388606][ T24] audit: type=1400 audit(2000000041.589:386): avc: denied { listen } for pid=2114 comm="syz.0.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 109.887239][ T2136] FAULT_INJECTION: forcing a failure. [ 109.887239][ T2136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.900166][ T2136] CPU: 0 PID: 2136 Comm: syz.4.431 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 109.909783][ T2136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 109.919675][ T2136] Call Trace: [ 109.922810][ T2136] dump_stack_lvl+0x1e2/0x24b [ 109.927316][ T2136] ? bfq_pos_tree_add_move+0x43b/0x43b [ 109.932629][ T2136] ? arch_stack_walk+0xf3/0x140 [ 109.937299][ T2136] dump_stack+0x15/0x17 [ 109.941290][ T2136] should_fail+0x3c6/0x510 [ 109.945543][ T2136] should_fail_usercopy+0x1a/0x20 [ 109.950404][ T2136] _copy_from_user+0x20/0xd0 [ 109.954837][ T2136] __copy_msghdr_from_user+0xaf/0x7c0 [ 109.960040][ T2136] ? __ia32_sys_shutdown+0x70/0x70 [ 109.964985][ T2136] ? kmem_cache_free+0xa9/0x1e0 [ 109.969673][ T2136] ? __kasan_slab_free+0x11/0x20 [ 109.974444][ T2136] ? slab_free_freelist_hook+0xc0/0x190 [ 109.979829][ T2136] ? kmem_cache_free+0xa9/0x1e0 [ 109.984537][ T2136] ? putname+0xe7/0x140 [ 109.988507][ T2136] ? do_sys_openat2+0x1fc/0x710 [ 109.993199][ T2136] ___sys_sendmsg+0x166/0x2e0 [ 109.997723][ T2136] ? __sys_sendmsg+0x280/0x280 [ 110.002317][ T2136] ? fsnotify_set_children_dentry_flags+0x210/0x210 [ 110.008733][ T2136] ? proc_fail_nth_write+0x20b/0x290 [ 110.013859][ T2136] ? __fdget+0x1bc/0x240 [ 110.017941][ T2136] __sys_sendmmsg+0x2c3/0x510 [ 110.022443][ T2136] ? __ia32_sys_sendmsg+0x90/0x90 [ 110.027303][ T2136] ? mutex_lock+0xa5/0x110 [ 110.031557][ T2136] ? __kasan_check_write+0x14/0x20 [ 110.036505][ T2136] ? __ia32_sys_read+0x90/0x90 [ 110.041102][ T2136] __x64_sys_sendmmsg+0xa0/0xb0 [ 110.045790][ T2136] do_syscall_64+0x34/0x70 [ 110.050044][ T2136] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 110.055770][ T2136] RIP: 0033:0x7f9f0b19aff9 [ 110.060040][ T2136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.079466][ T2136] RSP: 002b:00007f9f09df3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 110.087712][ T2136] RAX: ffffffffffffffda RBX: 00007f9f0b353058 RCX: 00007f9f0b19aff9 [ 110.095520][ T2136] RDX: 0000000000000001 RSI: 00000000200004c0 RDI: 0000000000000003 [ 110.103330][ T2136] RBP: 00007f9f09df3090 R08: 0000000000000000 R09: 0000000000000000 [ 110.111142][ T2136] R10: 00000000040440c1 R11: 0000000000000246 R12: 0000000000000001 [ 110.118954][ T2136] R13: 0000000000000000 R14: 00007f9f0b353058 R15: 00007ffee750b848 [ 110.423907][ T2139] FAULT_INJECTION: forcing a failure. [ 110.423907][ T2139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.442325][ T24] audit: type=1400 audit(2000000042.679:387): avc: denied { create } for pid=2151 comm="syz.2.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 110.464710][ T2139] CPU: 0 PID: 2139 Comm: syz.4.435 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 110.474325][ T2139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 110.484214][ T2139] Call Trace: [ 110.487344][ T2139] dump_stack_lvl+0x1e2/0x24b [ 110.491858][ T2139] ? bfq_pos_tree_add_move+0x43b/0x43b [ 110.497164][ T2139] ? can_reuse_spf_vma+0xe0/0xe0 [ 110.501922][ T2139] dump_stack+0x15/0x17 [ 110.505911][ T2139] should_fail+0x3c6/0x510 [ 110.510166][ T2139] should_fail_usercopy+0x1a/0x20 [ 110.515026][ T2139] _copy_from_user+0x20/0xd0 [ 110.519453][ T2139] io_submit_one+0xbf/0x1dd0 [ 110.523877][ T2139] ? vmacache_update+0xb7/0x120 [ 110.528572][ T2139] ? __kasan_check_write+0x14/0x20 [ 110.533513][ T2139] ? up_read+0x14/0x90 [ 110.537422][ T2139] ? exc_page_fault+0x33d/0x5b0 [ 110.542106][ T2139] ? lookup_ioctx+0x2c0/0x2c0 [ 110.546621][ T2139] ? asm_exc_page_fault+0x1e/0x30 [ 110.551481][ T2139] ? __get_user_4+0x1c/0x30 [ 110.555822][ T2139] ? lookup_ioctx+0x1ae/0x2c0 [ 110.560332][ T2139] __se_sys_io_submit+0x168/0x3c0 [ 110.565189][ T2139] ? __x64_sys_io_submit+0x90/0x90 [ 110.570139][ T2139] ? __ia32_sys_read+0x90/0x90 [ 110.574742][ T2139] ? debug_smp_processor_id+0x17/0x20 [ 110.579950][ T2139] __x64_sys_io_submit+0x7b/0x90 [ 110.584720][ T2139] do_syscall_64+0x34/0x70 [ 110.588981][ T2139] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 110.594791][ T2139] RIP: 0033:0x7f9f0b19aff9 [ 110.599050][ T2139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.618484][ T2139] RSP: 002b:00007f9f09e14038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 110.626726][ T2139] RAX: ffffffffffffffda RBX: 00007f9f0b352f80 RCX: 00007f9f0b19aff9 [ 110.634537][ T2139] RDX: 0000000020000700 RSI: 0000000000000001 RDI: 00007f9f09dcb000 [ 110.642351][ T2139] RBP: 00007f9f09e14090 R08: 0000000000000000 R09: 0000000000000000 [ 110.650158][ T2139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.657973][ T2139] R13: 0000000000000000 R14: 00007f9f0b352f80 R15: 00007ffee750b848 [ 111.012074][ T24] audit: type=1400 audit(2000000043.249:388): avc: denied { unmount } for pid=1549 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 111.717716][ T24] audit: type=1400 audit(2000000043.959:389): avc: denied { connect } for pid=2170 comm="syz.0.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.754452][ T24] audit: type=1400 audit(2000000043.989:390): avc: denied { read } for pid=2170 comm="syz.0.442" path="socket:[21785]" dev="sockfs" ino=21785 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.789646][ T123] tipc: Subscription rejected, illegal request [ 111.963476][ T2183] netlink: 20 bytes leftover after parsing attributes in process `syz.0.444'. [ 112.239001][ T15] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 112.656152][ T15] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.666309][ T15] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.677306][ T15] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.687050][ T15] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 112.696415][ T15] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.710048][ T15] usb 3-1: config 0 descriptor?? [ 113.345286][ T25] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 113.825246][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 114.005511][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.032998][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.085695][ T25] usb 5-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 114.094688][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.107231][ T25] usb 5-1: config 0 descriptor?? [ 114.137585][ T15] usb 3-1: USB disconnect, device number 15 [ 114.586151][ T25] playstation 0003:054C:0CE6.0010: unknown main item tag 0x0 [ 114.593364][ T25] playstation 0003:054C:0CE6.0010: unknown main item tag 0x0 [ 114.601718][ T25] playstation 0003:054C:0CE6.0010: unknown main item tag 0x0 [ 114.609121][ T25] playstation 0003:054C:0CE6.0010: unknown main item tag 0x0 [ 114.635133][ T25] playstation 0003:054C:0CE6.0010: unknown main item tag 0x0 [ 114.642694][ T25] playstation 0003:054C:0CE6.0010: unknown main item tag 0x0 [ 114.650252][ T25] playstation 0003:054C:0CE6.0010: unknown main item tag 0x0 [ 114.659103][ T25] playstation 0003:054C:0CE6.0010: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.4-1/input0 [ 114.661465][ T24] audit: type=1400 audit(2000000046.899:391): avc: denied { unmount } for pid=1867 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 114.779815][ T2236] FAULT_INJECTION: forcing a failure. [ 114.779815][ T2236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.792806][ T2236] CPU: 1 PID: 2236 Comm: syz.1.458 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 114.802397][ T2236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 114.812292][ T2236] Call Trace: [ 114.815423][ T2236] dump_stack_lvl+0x1e2/0x24b [ 114.819930][ T2236] ? bfq_pos_tree_add_move+0x43b/0x43b [ 114.825227][ T2236] dump_stack+0x15/0x17 [ 114.829215][ T2236] should_fail+0x3c6/0x510 [ 114.833470][ T2236] should_fail_usercopy+0x1a/0x20 [ 114.838336][ T2236] _copy_to_user+0x20/0x90 [ 114.842583][ T2236] simple_read_from_buffer+0xc7/0x150 [ 114.847794][ T2236] proc_fail_nth_read+0x1a3/0x210 [ 114.852652][ T2236] ? proc_fault_inject_write+0x390/0x390 [ 114.858123][ T2236] ? security_file_permission+0x86/0xb0 [ 114.863501][ T2236] ? rw_verify_area+0x1c3/0x360 [ 114.868196][ T2236] ? proc_fault_inject_write+0x390/0x390 [ 114.873654][ T2236] vfs_read+0x200/0xba0 [ 114.877647][ T2236] ? fput_many+0x160/0x1b0 [ 114.881902][ T2236] ? kernel_read+0x70/0x70 [ 114.886154][ T2236] ? __kasan_check_write+0x14/0x20 [ 114.891099][ T2236] ? mutex_lock+0xa5/0x110 [ 114.895352][ T2236] ? mutex_trylock+0xa0/0xa0 [ 114.899784][ T2236] ? __fdget_pos+0x2e7/0x3a0 [ 114.904204][ T2236] ? ksys_read+0x77/0x2c0 [ 114.908372][ T2236] ksys_read+0x199/0x2c0 [ 114.912451][ T2236] ? vfs_write+0xe70/0xe70 [ 114.916706][ T2236] ? debug_smp_processor_id+0x17/0x20 [ 114.921911][ T2236] __x64_sys_read+0x7b/0x90 [ 114.926254][ T2236] do_syscall_64+0x34/0x70 [ 114.930505][ T2236] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 114.936232][ T2236] RIP: 0033:0x7f52e08cea3c [ 114.940487][ T2236] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 114.959925][ T2236] RSP: 002b:00007f52df549030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 114.968172][ T2236] RAX: ffffffffffffffda RBX: 00007f52e0a87f80 RCX: 00007f52e08cea3c [ 114.976157][ T2236] RDX: 000000000000000f RSI: 00007f52df5490a0 RDI: 0000000000000004 [ 114.983968][ T2236] RBP: 00007f52df549090 R08: 0000000000000000 R09: 0000000000000000 [ 114.991781][ T2236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.999590][ T2236] R13: 0000000000000000 R14: 00007f52e0a87f80 R15: 00007ffc71e46ca8 [ 115.007839][ T25] playstation 0003:054C:0CE6.0010: Invalid byte count transferred, expected 20 got 0 [ 115.030828][ T25] playstation 0003:054C:0CE6.0010: Failed to retrieve DualSense pairing info: -22 [ 115.055237][ T25] playstation 0003:054C:0CE6.0010: Failed to get MAC address from DualSense [ 115.063779][ T25] playstation 0003:054C:0CE6.0010: Failed to create dualsense. [ 115.085751][ T25] playstation: probe of 0003:054C:0CE6.0010 failed with error -22 [ 115.512070][ T20] usb 5-1: USB disconnect, device number 11 [ 115.975282][ T15] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 116.128246][ T2260] FAULT_INJECTION: forcing a failure. [ 116.128246][ T2260] name failslab, interval 1, probability 0, space 0, times 0 [ 116.140719][ T2260] CPU: 1 PID: 2260 Comm: syz.0.467 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 116.150286][ T2260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 116.160178][ T2260] Call Trace: [ 116.163329][ T2260] dump_stack_lvl+0x1e2/0x24b [ 116.167819][ T2260] ? panic+0x812/0x812 [ 116.171724][ T2260] ? bfq_pos_tree_add_move+0x43b/0x43b [ 116.177024][ T2260] ? ___ratelimit+0x42c/0x580 [ 116.181534][ T2260] dump_stack+0x15/0x17 [ 116.185527][ T2260] should_fail+0x3c6/0x510 [ 116.189781][ T2260] ? tcp_setsockopt+0x22d/0x3660 [ 116.194555][ T2260] __should_failslab+0xa4/0xe0 [ 116.199174][ T2260] should_failslab+0x9/0x20 [ 116.203494][ T2260] __kmalloc_track_caller+0x5f/0x320 [ 116.208617][ T2260] ? __kasan_check_write+0x14/0x20 [ 116.213563][ T2260] ipv6_setsockopt+0x1049/0x3ea0 [ 116.218361][ T2260] ? ipv6_update_options+0x390/0x390 [ 116.223453][ T2260] ? preempt_schedule_irq+0xe7/0x140 [ 116.228574][ T2260] ? preempt_schedule_notrace+0x140/0x140 [ 116.234133][ T2260] ? kvm_sched_clock_read+0x18/0x40 [ 116.239162][ T2260] ? sched_clock+0x3a/0x40 [ 116.243418][ T2260] ? sched_clock_cpu+0x1b/0x3b0 [ 116.248102][ T2260] ? sched_clock+0x3a/0x40 [ 116.252356][ T2260] ? kvm_sched_clock_read+0x18/0x40 [ 116.257404][ T2260] ? sched_clock+0x3a/0x40 [ 116.261657][ T2260] ? sched_clock_cpu+0x1b/0x3b0 [ 116.266335][ T2260] ? sched_clock+0x3a/0x40 [ 116.270604][ T2260] ? __kasan_check_write+0x14/0x20 [ 116.275531][ T2260] ? __switch_to+0x5f6/0x1240 [ 116.280047][ T2260] ? plist_check_list+0x23f/0x270 [ 116.284956][ T2260] ? compat_start_thread+0x80/0x80 [ 116.289852][ T2260] ? plist_del+0x40e/0x420 [ 116.294110][ T2260] ? _raw_spin_unlock_irq+0x4e/0x70 [ 116.299163][ T2260] ? finish_task_switch+0x130/0x5a0 [ 116.304175][ T2260] ? switch_mm_irqs_off+0x2f9/0x9a0 [ 116.309211][ T2260] ? __switch_to_asm+0x34/0x60 [ 116.313810][ T2260] ? __schedule+0xbee/0x1330 [ 116.318235][ T2260] ? release_firmware_map_entry+0x18d/0x18d [ 116.323961][ T2260] tcp_setsockopt+0x22d/0x3660 [ 116.328561][ T2260] ? tcp_sock_set_keepcnt+0xa0/0xa0 [ 116.333596][ T2260] ? irqentry_exit+0x4f/0x60 [ 116.338020][ T2260] ? sysvec_reschedule_ipi+0x83/0x160 [ 116.343228][ T2260] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 116.348700][ T2260] sock_common_setsockopt+0xa2/0xc0 [ 116.353730][ T2260] ? sock_common_recvmsg+0x240/0x240 [ 116.358853][ T2260] __sys_setsockopt+0x502/0x870 [ 116.363546][ T2260] ? __ia32_sys_recv+0xb0/0xb0 [ 116.368137][ T2260] ? __kasan_check_write+0x14/0x20 [ 116.373086][ T2260] ? switch_fpu_return+0x1e4/0x3c0 [ 116.378032][ T2260] ? fpu__clear_all+0x20/0x20 [ 116.382545][ T2260] __x64_sys_setsockopt+0xbf/0xd0 [ 116.387421][ T2260] do_syscall_64+0x34/0x70 [ 116.391665][ T2260] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 116.397394][ T2260] RIP: 0033:0x7fecea7b2ff9 [ 116.401654][ T2260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.421080][ T2260] RSP: 002b:00007fece93ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 116.429326][ T2260] RAX: ffffffffffffffda RBX: 00007fecea96b130 RCX: 00007fecea7b2ff9 [ 116.437136][ T2260] RDX: 0000000000000039 RSI: 0000000000000029 RDI: 0000000000000005 [ 116.444947][ T2260] RBP: 00007fece93ea090 R08: 0000000000000118 R09: 0000000000000000 [ 116.452986][ T2260] R10: 0000000020e86000 R11: 0000000000000246 R12: 0000000000000001 [ 116.460871][ T2260] R13: 0000000000000000 R14: 00007fecea96b130 R15: 00007ffc2411c698 [ 116.825290][ T15] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 116.836170][ T15] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.847144][ T15] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.856719][ T684] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 116.864193][ T15] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 116.877107][ T15] usb 3-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 117.409131][ T15] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.422994][ T15] usb 3-1: config 0 descriptor?? [ 117.629223][ T684] usb 2-1: Using ep0 maxpacket: 16 [ 117.905466][ T15] hid (null): report_id 0 is invalid [ 117.912222][ T15] uclogic 0003:5543:0003.0011: report_id 0 is invalid [ 117.918875][ T15] uclogic 0003:5543:0003.0011: item 0 0 1 8 parsing failed [ 118.115599][ T24] audit: type=1400 audit(2000000050.359:392): avc: denied { connect } for pid=2239 comm="syz.2.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 118.117819][ T15] uclogic 0003:5543:0003.0011: parse failed [ 118.143181][ T15] uclogic: probe of 0003:5543:0003.0011 failed with error -22 [ 118.229022][ T20] usb 3-1: USB disconnect, device number 16 [ 118.255379][ T684] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 118.264278][ T684] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.272334][ T684] usb 2-1: Product: syz [ 118.276341][ T684] usb 2-1: Manufacturer: syz [ 118.280734][ T684] usb 2-1: SerialNumber: syz [ 118.285719][ T684] usb 2-1: config 0 descriptor?? [ 118.765288][ T684] r8152 2-1:0.0: Unknown version 0x0000 [ 118.772480][ T684] usb 2-1: USB disconnect, device number 15 [ 119.035267][ T20] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 119.275309][ T20] usb 1-1: Using ep0 maxpacket: 8 [ 119.395373][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.406751][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.419264][ T20] usb 1-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 119.440259][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.484333][ T20] usb 1-1: config 0 descriptor?? [ 119.966440][ T20] playstation 0003:054C:0CE6.0012: unknown main item tag 0x0 [ 119.973739][ T20] playstation 0003:054C:0CE6.0012: unknown main item tag 0x0 [ 119.981429][ T20] playstation 0003:054C:0CE6.0012: unknown main item tag 0x0 [ 119.988947][ T20] playstation 0003:054C:0CE6.0012: unknown main item tag 0x0 [ 119.996279][ T20] playstation 0003:054C:0CE6.0012: unknown main item tag 0x0 [ 120.003570][ T20] playstation 0003:054C:0CE6.0012: unknown main item tag 0x0 [ 120.011546][ T20] playstation 0003:054C:0CE6.0012: unknown main item tag 0x0 [ 120.027659][ T20] playstation 0003:054C:0CE6.0012: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.0-1/input0 [ 120.246705][ T20] playstation 0003:054C:0CE6.0012: Invalid byte count transferred, expected 20 got 0 [ 120.256412][ T20] playstation 0003:054C:0CE6.0012: Failed to retrieve DualSense pairing info: -22 [ 120.265954][ T20] playstation 0003:054C:0CE6.0012: Failed to get MAC address from DualSense [ 120.274513][ T20] playstation 0003:054C:0CE6.0012: Failed to create dualsense. [ 120.285247][ T684] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 120.289941][ T20] playstation: probe of 0003:054C:0CE6.0012 failed with error -22 [ 120.998186][ T2334] input: syz0 as /devices/virtual/input/input25 [ 121.009130][ T320] usb 1-1: USB disconnect, device number 13 [ 121.029670][ T24] audit: type=1400 audit(2000000053.259:393): avc: denied { read } for pid=79 comm="acpid" name="event3" dev="devtmpfs" ino=573 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.052980][ T24] audit: type=1400 audit(2000000053.259:394): avc: denied { open } for pid=79 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=573 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.076464][ T24] audit: type=1400 audit(2000000053.259:395): avc: denied { ioctl } for pid=79 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=573 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.445230][ T684] usb 3-1: Using ep0 maxpacket: 16 [ 121.465252][ T303] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 121.519414][ T24] audit: type=1400 audit(2000000053.759:396): avc: denied { read } for pid=2344 comm="syz.1.491" dev="nsfs" ino=4026532723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 121.549303][ T24] audit: type=1400 audit(2000000053.779:397): avc: denied { open } for pid=2344 comm="syz.1.491" path="net:[4026532723]" dev="nsfs" ino=4026532723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 121.595287][ T684] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.735418][ T303] usb 4-1: Using ep0 maxpacket: 32 [ 121.796339][ T684] usb 3-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 122.039120][ T684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.048694][ T684] usb 3-1: Product: syz [ 122.053406][ T684] usb 3-1: Manufacturer: syz [ 122.058190][ T684] usb 3-1: SerialNumber: syz [ 122.066906][ T684] usb 3-1: config 0 descriptor?? [ 122.115297][ T303] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 122.123542][ T303] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 122.132349][ T303] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 122.141230][ T303] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 122.150751][ T303] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 122.555353][ T303] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 122.568203][ T303] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 122.577042][ T303] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.588205][ T303] usb 4-1: config 0 descriptor?? [ 122.825291][ T684] uvcvideo: Found UVC 0.00 device syz (045e:0721) [ 122.833712][ T684] uvcvideo: No valid video chain found. [ 122.842011][ T684] usb 3-1: USB disconnect, device number 17 [ 122.849183][ T303] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 122.870554][ T303] usb 4-1: USB disconnect, device number 13 [ 122.878495][ T303] usblp0: removed [ 123.021493][ T2380] FAULT_INJECTION: forcing a failure. [ 123.021493][ T2380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.034448][ T2380] CPU: 1 PID: 2380 Comm: syz.1.500 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 123.044128][ T2380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 123.054024][ T2380] Call Trace: [ 123.057166][ T2380] dump_stack_lvl+0x1e2/0x24b [ 123.061658][ T2380] ? bfq_pos_tree_add_move+0x43b/0x43b [ 123.066957][ T2380] ? get_sigframe+0x378/0x4b0 [ 123.071468][ T2380] ? memcpy+0x56/0x70 [ 123.075284][ T2380] dump_stack+0x15/0x17 [ 123.079278][ T2380] should_fail+0x3c6/0x510 [ 123.083532][ T2380] should_fail_usercopy+0x1a/0x20 [ 123.088393][ T2380] _copy_to_user+0x20/0x90 [ 123.092647][ T2380] copy_siginfo_to_user+0x24/0x80 [ 123.097507][ T2380] arch_do_signal_or_restart+0xa9f/0x17c0 [ 123.103064][ T2380] ? __do_sys_rt_sigreturn+0x1e0/0x1e0 [ 123.108359][ T2380] exit_to_user_mode_loop+0x9b/0xd0 [ 123.113390][ T2380] syscall_exit_to_user_mode+0xa2/0x1a0 [ 123.118770][ T2380] do_syscall_64+0x40/0x70 [ 123.123024][ T2380] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 123.128750][ T2380] RIP: 0033:0x7f52e08cfff7 [ 123.133013][ T2380] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 123.152446][ T2380] RSP: 002b:00007f52df549038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 123.160690][ T2380] RAX: 000000000000002d RBX: 00007f52e0a87f80 RCX: 00007f52e08cfff9 [ 123.168503][ T2380] RDX: 0000000000000025 RSI: 0000000020000180 RDI: 0000000000000005 [ 123.176316][ T2380] RBP: 00007f52df549090 R08: 0000000000000000 R09: 000000000000ff04 [ 123.184122][ T2380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.191934][ T2380] R13: 0000000000000000 R14: 00007f52e0a87f80 R15: 00007ffc71e46ca8 [ 123.285250][ T15] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 123.467216][ T303] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 123.766317][ T2392] netlink: 28 bytes leftover after parsing attributes in process `syz.0.503'. [ 123.805257][ T303] usb 4-1: Using ep0 maxpacket: 32 [ 123.810054][ T53] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 123.865319][ T15] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.876219][ T15] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.886515][ T15] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 123.895851][ T15] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.904588][ T15] usb 5-1: config 0 descriptor?? [ 123.945279][ T303] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 123.953425][ T303] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 123.964070][ T303] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 123.973028][ T303] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 124.175566][ T53] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.204208][ T53] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.216299][ T303] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 124.226928][ T303] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 124.230931][ T53] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 124.239751][ T303] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 124.256423][ T53] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.260816][ T303] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.276715][ T303] usb 4-1: config 0 descriptor?? [ 124.282935][ T53] usb 2-1: config 0 descriptor?? [ 124.305267][ T303] usb 4-1: can't set config #0, error -71 [ 124.316735][ T303] usb 4-1: USB disconnect, device number 14 [ 124.457907][ T2407] FAULT_INJECTION: forcing a failure. [ 124.457907][ T2407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.498500][ T2407] CPU: 1 PID: 2407 Comm: syz.3.506 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 124.508114][ T2407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 124.518002][ T2407] Call Trace: [ 124.521143][ T2407] dump_stack_lvl+0x1e2/0x24b [ 124.525651][ T2407] ? bfq_pos_tree_add_move+0x43b/0x43b [ 124.530940][ T2407] dump_stack+0x15/0x17 [ 124.534933][ T2407] should_fail+0x3c6/0x510 [ 124.539185][ T2407] should_fail_usercopy+0x1a/0x20 [ 124.544054][ T2407] _copy_from_user+0x20/0xd0 [ 124.548477][ T2407] __se_sys_bpf+0x2efc/0x11cb0 [ 124.553073][ T2407] ? stack_trace_save+0x113/0x1c0 [ 124.557931][ T2407] ? stack_trace_snprint+0xf0/0xf0 [ 124.562969][ T2407] ? kmem_cache_free+0xa9/0x1e0 [ 124.567656][ T2407] ? kmem_cache_free+0xa9/0x1e0 [ 124.572344][ T2407] ? kasan_set_track+0x5d/0x70 [ 124.576943][ T2407] ? __x64_sys_bpf+0x90/0x90 [ 124.581365][ T2407] ? __kasan_slab_free+0x11/0x20 [ 124.586138][ T2407] ? slab_free_freelist_hook+0xc0/0x190 [ 124.591525][ T2407] ? kmem_cache_free+0xa9/0x1e0 [ 124.591631][ T15] isku 0003:1E7D:319C.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0 [ 124.596209][ T2407] ? putname+0xe7/0x140 [ 124.596218][ T2407] ? do_sys_openat2+0x1fc/0x710 [ 124.596226][ T2407] ? __x64_sys_openat+0x243/0x290 [ 124.596234][ T2407] ? do_syscall_64+0x34/0x70 [ 124.596243][ T2407] ? _kstrtoull+0x3a0/0x4a0 [ 124.596252][ T2407] ? kstrtouint_from_user+0x20a/0x2a0 [ 124.596268][ T2407] ? kstrtol_from_user+0x310/0x310 [ 124.639438][ T2407] ? memset+0x35/0x40 [ 124.643249][ T2407] ? __fsnotify_parent+0x4b9/0x6c0 [ 124.648205][ T2407] ? kmem_cache_free+0xa9/0x1e0 [ 124.652886][ T2407] ? kernel_write+0x3d0/0x3d0 [ 124.657399][ T2407] ? __kasan_check_write+0x14/0x20 [ 124.662346][ T2407] ? mutex_lock+0xa5/0x110 [ 124.666599][ T2407] ? mutex_trylock+0xa0/0xa0 [ 124.671028][ T2407] ? __kasan_check_write+0x14/0x20 [ 124.675975][ T2407] ? fput_many+0x160/0x1b0 [ 124.680235][ T2407] ? debug_smp_processor_id+0x17/0x20 [ 124.685432][ T2407] __x64_sys_bpf+0x7b/0x90 [ 124.689677][ T2407] do_syscall_64+0x34/0x70 [ 124.693933][ T2407] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 124.699658][ T2407] RIP: 0033:0x7face5029ff9 [ 124.703911][ T2407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.723350][ T2407] RSP: 002b:00007face3c61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 124.731596][ T2407] RAX: ffffffffffffffda RBX: 00007face51e2130 RCX: 00007face5029ff9 [ 124.739411][ T2407] RDX: 0000000000000010 RSI: 0000000020000880 RDI: 000000000000000f [ 124.747218][ T2407] RBP: 00007face3c61090 R08: 0000000000000000 R09: 0000000000000000 [ 124.755031][ T2407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.762842][ T2407] R13: 0000000000000000 R14: 00007face51e2130 R15: 00007ffea42e8fc8 [ 124.774564][ T2408] 9pnet: Could not find request transport: f [ 124.889657][ T321] usb 5-1: USB disconnect, device number 12 [ 124.995398][ T53] hid (null): bogus close delimiter [ 125.817078][ T2426] netlink: 20 bytes leftover after parsing attributes in process `syz.0.512'. [ 125.825800][ T2426] tipc: Invalid UDP bearer configuration [ 125.825919][ T2426] tipc: Enabling of bearer rejected, failed to enable media [ 126.675292][ T53] usb 2-1: string descriptor 0 read error: -71 [ 126.695273][ T53] uclogic 0003:256C:006D.0014: failed retrieving string descriptor #200: -71 [ 126.703924][ T53] uclogic 0003:256C:006D.0014: failed retrieving pen parameters: -71 [ 126.711805][ T53] uclogic 0003:256C:006D.0014: failed probing pen v2 parameters: -71 [ 126.719843][ T53] uclogic 0003:256C:006D.0014: failed probing parameters: -71 [ 126.727222][ T53] uclogic: probe of 0003:256C:006D.0014 failed with error -71 [ 126.767797][ T53] usb 2-1: USB disconnect, device number 16 [ 127.041114][ T24] audit: type=1400 audit(2000000059.279:398): avc: denied { write } for pid=2448 comm="syz.2.519" path="socket:[22393]" dev="sockfs" ino=22393 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 127.085589][ T303] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 127.253304][ T24] audit: type=1400 audit(2000000059.489:399): avc: denied { write } for pid=2451 comm="syz.2.520" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 127.274318][ T24] audit: type=1400 audit(2000000059.509:400): avc: denied { read } for pid=2451 comm="syz.2.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 127.355300][ T303] usb 1-1: Using ep0 maxpacket: 16 [ 127.702652][ T303] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.875286][ T303] usb 1-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 127.884177][ T303] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.891969][ T303] usb 1-1: Product: syz [ 127.895962][ T303] usb 1-1: Manufacturer: syz [ 127.900355][ T303] usb 1-1: SerialNumber: syz [ 127.905589][ T303] usb 1-1: config 0 descriptor?? [ 127.995243][ T53] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 128.249666][ T25] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 128.257314][ T53] usb 2-1: Using ep0 maxpacket: 8 [ 128.575371][ T303] uvcvideo: Found UVC 0.00 device syz (045e:0721) [ 128.581640][ T303] uvcvideo: No valid video chain found. [ 128.587992][ T303] usb 1-1: USB disconnect, device number 14 [ 128.599266][ T53] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.641709][ T53] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.651297][ T53] usb 2-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 128.660501][ T53] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.685697][ T53] usb 2-1: config 0 descriptor?? [ 128.755254][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 128.893016][ T24] audit: type=1400 audit(2000000061.009:401): avc: denied { connect } for pid=2475 comm="syz.4.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 128.912216][ T24] audit: type=1400 audit(2000000061.019:402): avc: denied { write } for pid=2475 comm="syz.4.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 128.975966][ T2483] netlink: 28 bytes leftover after parsing attributes in process `syz.3.529'. [ 128.995275][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.006093][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.016837][ T25] usb 3-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 129.025750][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.038558][ T25] usb 3-1: config 0 descriptor?? [ 129.166069][ T53] playstation 0003:054C:0CE6.0015: unknown main item tag 0x0 [ 129.173284][ T53] playstation 0003:054C:0CE6.0015: unknown main item tag 0x0 [ 129.180738][ T53] playstation 0003:054C:0CE6.0015: unknown main item tag 0x0 [ 129.187968][ T53] playstation 0003:054C:0CE6.0015: unknown main item tag 0x0 [ 129.195165][ T53] playstation 0003:054C:0CE6.0015: unknown main item tag 0x0 [ 129.202345][ T53] playstation 0003:054C:0CE6.0015: unknown main item tag 0x0 [ 129.209569][ T53] playstation 0003:054C:0CE6.0015: unknown main item tag 0x0 [ 129.218041][ T53] playstation 0003:054C:0CE6.0015: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.1-1/input0 [ 129.558503][ T25] playstation 0003:054C:0CE6.0016: unknown main item tag 0x0 [ 129.575378][ T53] playstation 0003:054C:0CE6.0015: Invalid byte count transferred, expected 20 got 0 [ 129.584656][ T53] playstation 0003:054C:0CE6.0015: Failed to retrieve DualSense pairing info: -22 [ 129.593969][ T25] playstation 0003:054C:0CE6.0016: unknown main item tag 0x0 [ 129.605234][ T25] playstation 0003:054C:0CE6.0016: unknown main item tag 0x0 [ 129.612414][ T25] playstation 0003:054C:0CE6.0016: unknown main item tag 0x0 [ 129.624735][ T53] playstation 0003:054C:0CE6.0015: Failed to get MAC address from DualSense [ 129.633667][ T25] playstation 0003:054C:0CE6.0016: unknown main item tag 0x0 [ 129.641203][ T53] playstation 0003:054C:0CE6.0015: Failed to create dualsense. [ 129.648744][ T25] playstation 0003:054C:0CE6.0016: unknown main item tag 0x0 [ 129.656110][ T25] playstation 0003:054C:0CE6.0016: unknown main item tag 0x0 [ 129.663551][ T53] playstation: probe of 0003:054C:0CE6.0015 failed with error -22 [ 129.674019][ T25] playstation 0003:054C:0CE6.0016: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.2-1/input0 [ 129.746543][ T53] usb 2-1: USB disconnect, device number 17 [ 129.795267][ T25] playstation 0003:054C:0CE6.0016: Invalid byte count transferred, expected 20 got 0 [ 129.804525][ T25] playstation 0003:054C:0CE6.0016: Failed to retrieve DualSense pairing info: -22 [ 129.813649][ T25] playstation 0003:054C:0CE6.0016: Failed to get MAC address from DualSense [ 129.822068][ T25] playstation 0003:054C:0CE6.0016: Failed to create dualsense. [ 129.830239][ T25] playstation: probe of 0003:054C:0CE6.0016 failed with error -22 [ 129.885231][ T303] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 129.915298][ T320] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 129.998808][ T53] usb 3-1: USB disconnect, device number 18 [ 130.267858][ T303] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.278649][ T303] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 130.291434][ T320] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.303504][ T303] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 130.312361][ T320] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 130.326666][ T2502] input: syz1 as /devices/virtual/input/input26 [ 130.332782][ T303] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.341763][ T320] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 130.350845][ T303] usb 5-1: config 0 descriptor?? [ 130.355694][ T320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.363838][ T320] usb 4-1: config 0 descriptor?? [ 130.608050][ T2493] FAULT_INJECTION: forcing a failure. [ 130.608050][ T2493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.620993][ T2493] CPU: 1 PID: 2493 Comm: syz.3.532 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 130.630506][ T2493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 130.640396][ T2493] Call Trace: [ 130.643527][ T2493] dump_stack_lvl+0x1e2/0x24b [ 130.648040][ T2493] ? bfq_pos_tree_add_move+0x43b/0x43b [ 130.653332][ T2493] dump_stack+0x15/0x17 [ 130.657325][ T2493] should_fail+0x3c6/0x510 [ 130.661769][ T2493] should_fail_usercopy+0x1a/0x20 [ 130.666623][ T2493] _copy_from_user+0x20/0xd0 [ 130.671052][ T2493] kstrtouint_from_user+0xca/0x2a0 [ 130.676006][ T2493] ? kstrtol_from_user+0x310/0x310 [ 130.680953][ T2493] ? snprintf+0xd6/0x120 [ 130.685025][ T2493] ? memset+0x35/0x40 [ 130.688843][ T2493] proc_fail_nth_write+0xa6/0x290 [ 130.693702][ T2493] ? security_file_permission+0x7b/0xb0 [ 130.699099][ T2493] ? proc_fail_nth_read+0x210/0x210 [ 130.704117][ T2493] ? security_file_permission+0x86/0xb0 [ 130.709500][ T2493] ? rw_verify_area+0x1c3/0x360 [ 130.714183][ T2493] ? proc_fail_nth_read+0x210/0x210 [ 130.719230][ T2493] vfs_write+0x36a/0xe70 [ 130.723301][ T2493] ? kernel_write+0x3d0/0x3d0 [ 130.727815][ T2493] ? __kasan_check_write+0x14/0x20 [ 130.732759][ T2493] ? mutex_lock+0xa5/0x110 [ 130.737097][ T2493] ? mutex_trylock+0xa0/0xa0 [ 130.741525][ T2493] ? __fdget_pos+0x2e7/0x3a0 [ 130.745950][ T2493] ? ksys_write+0x77/0x2c0 [ 130.750205][ T2493] ksys_write+0x199/0x2c0 [ 130.754371][ T2493] ? __ia32_sys_read+0x90/0x90 [ 130.758973][ T2493] ? debug_smp_processor_id+0x17/0x20 [ 130.764177][ T2493] __x64_sys_write+0x7b/0x90 [ 130.768602][ T2493] do_syscall_64+0x34/0x70 [ 130.772857][ T2493] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 130.778584][ T2493] RIP: 0033:0x7face5028adf [ 130.782844][ T2493] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 130.802276][ T2493] RSP: 002b:00007face3ca3030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 130.810521][ T2493] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007face5028adf [ 130.818334][ T2493] RDX: 0000000000000001 RSI: 00007face3ca30a0 RDI: 0000000000000007 [ 130.826143][ T2493] RBP: 00007face3ca3090 R08: 0000000000000000 R09: 0000000000000000 [ 130.834042][ T2493] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 130.841854][ T2493] R13: 0000000000000000 R14: 00007face51e1f80 R15: 00007ffea42e8fc8 [ 130.871507][ T303] usbhid 5-1:0.0: can't add hid device: -71 [ 130.877355][ T303] usbhid: probe of 5-1:0.0 failed with error -71 [ 130.884172][ T303] usb 5-1: USB disconnect, device number 13 [ 130.946364][ T24] audit: type=1326 audit(2000000063.189:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2522 comm="syz.3.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face5029ff9 code=0x7ffc0000 [ 130.969518][ T24] audit: type=1326 audit(2000000063.189:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2522 comm="syz.3.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face5029ff9 code=0x7ffc0000 [ 130.993694][ T24] audit: type=1326 audit(2000000063.189:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2522 comm="syz.3.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7face5029ff9 code=0x7ffc0000 [ 131.025294][ T320] usbhid 4-1:0.0: can't add hid device: -71 [ 131.032590][ T320] usbhid: probe of 4-1:0.0 failed with error -71 [ 131.033549][ T318] Bluetooth: hci0: Frame reassembly failed (-84) [ 131.047804][ T320] usb 4-1: USB disconnect, device number 15 [ 131.069683][ T24] audit: type=1326 audit(2000000063.189:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2522 comm="syz.3.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face5029ff9 code=0x7ffc0000 [ 131.126899][ T24] audit: type=1326 audit(2000000063.189:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2522 comm="syz.3.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face5029ff9 code=0x7ffc0000 [ 131.226607][ T2534] netlink: 28 bytes leftover after parsing attributes in process `syz.3.542'. [ 131.331242][ T2537] xt_CT: No such helper "syz1" [ 131.682352][ T2541] netlink: 20 bytes leftover after parsing attributes in process `syz.4.546'. [ 131.691081][ T2541] tipc: Invalid UDP bearer configuration [ 131.691181][ T2541] tipc: Enabling of bearer rejected, failed to enable media [ 131.795272][ T303] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 132.007331][ T2545] Zero length message leads to an empty skb [ 132.328281][ T24] kauditd_printk_skb: 1 callbacks suppressed [ 132.328291][ T24] audit: type=1400 audit(2000000064.569:409): avc: denied { map } for pid=2553 comm="syz.1.551" path="/dev/ashmem" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.363177][ T303] usb 1-1: config 0 has an invalid interface number: 32 but max is 0 [ 132.371139][ T303] usb 1-1: config 0 has no interface number 0 [ 132.377028][ T303] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.388224][ T303] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.398116][ T303] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 132.407011][ T303] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.419055][ T303] usb 1-1: config 0 descriptor?? [ 132.504278][ T24] audit: type=1400 audit(2000000064.739:410): avc: denied { connect } for pid=2557 comm="syz.4.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 132.524065][ T24] audit: type=1400 audit(2000000064.759:411): avc: denied { read } for pid=2557 comm="syz.4.552" laddr=fe80::11 lport=2 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 132.909064][ T303] hid (null): report_id 0 is invalid [ 133.019383][ T303] logitech-djreceiver 0003:046D:C71B.0017: unknown main item tag 0x0 [ 133.027328][ T303] logitech-djreceiver 0003:046D:C71B.0017: unknown main item tag 0x2 [ 133.035244][ T303] logitech-djreceiver 0003:046D:C71B.0017: report_id 0 is invalid [ 133.043020][ T303] logitech-djreceiver 0003:046D:C71B.0017: item 0 1 1 8 parsing failed [ 133.051248][ T303] logitech-djreceiver 0003:046D:C71B.0017: logi_dj_probe: parse failed [ 133.059798][ T303] logitech-djreceiver: probe of 0003:046D:C71B.0017 failed with error -22 [ 133.070466][ T25] Bluetooth: hci0: command 0x1003 tx timeout [ 133.076386][ T1391] Bluetooth: hci0: sending frame failed (-49) [ 135.291222][ T320] Bluetooth: hci0: command 0x1001 tx timeout [ 135.297154][ T1391] Bluetooth: hci0: sending frame failed (-49) [ 135.435221][ T303] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 135.590428][ T2588] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 135.599081][ T2588] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 135.995487][ T2595] netlink: 20 bytes leftover after parsing attributes in process `syz.3.562'. [ 136.004149][ T2595] tipc: Invalid UDP bearer configuration [ 136.004168][ T2595] tipc: Enabling of bearer rejected, failed to enable media [ 136.172269][ T25] usb 1-1: USB disconnect, device number 15 [ 136.245287][ T303] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.256556][ T303] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.266633][ T303] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 136.275537][ T303] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.295631][ T303] usb 5-1: config 0 descriptor?? [ 137.375253][ T15] Bluetooth: hci0: command 0x1009 tx timeout [ 137.457541][ T303] pyra 0003:1E7D:2CF6.0018: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 137.534692][ T25] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 137.612388][ T24] audit: type=1400 audit(2000000069.849:412): avc: denied { read append } for pid=2618 comm="syz.1.569" name="ppp" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 137.635386][ T24] audit: type=1400 audit(2000000069.849:413): avc: denied { open } for pid=2618 comm="syz.1.569" path="/dev/ppp" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 137.658407][ T24] audit: type=1400 audit(2000000069.849:414): avc: denied { ioctl } for pid=2618 comm="syz.1.569" path="/dev/ppp" dev="devtmpfs" ino=133 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 139.145172][ C1] sched: RT throttling activated [ 139.185393][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 142.145236][ T303] pyra 0003:1E7D:2CF6.0018: couldn't init struct pyra_device [ 142.152443][ T303] pyra 0003:1E7D:2CF6.0018: couldn't install mouse [ 143.185821][ T303] pyra: probe of 0003:1E7D:2CF6.0018 failed with error -71 [ 146.175231][ T25] usb 1-1: device descriptor read/all, error -110 [ 146.175651][ T303] usb 5-1: USB disconnect, device number 14 [ 149.148003][ T25] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 160.155208][ T25] usb 1-1: device descriptor read/64, error -110 [ 171.145719][ T25] usb 1-1: device descriptor read/64, error -32 [ 172.157214][ T25] usb usb1-port1: attempt power cycle [ 186.145489][ T25] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 191.185196][ T25] usb 1-1: device descriptor read/8, error -32 [ 197.145202][ T25] usb 1-1: device descriptor read/8, error -32 [ 206.145220][ T25] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 215.175215][ T25] usb 1-1: device descriptor read/8, error -32 [ 221.185189][ T25] usb 1-1: device descriptor read/8, error -32 [ 223.186837][ T25] usb usb1-port1: unable to enumerate USB device SYZFAIL: failed to send rpc fd=3 want=768 sent=0 n=-1 (errno 104: Connection reset by peer) [ 388.443485][ T2652] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.450530][ T2652] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.457832][ T2652] device bridge_slave_0 entered promiscuous mode [ 388.465409][ T2652] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.472221][ T2652] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.479432][ T2652] device bridge_slave_1 entered promiscuous mode [ 388.510511][ T2652] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.517344][ T2652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.524406][ T2652] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.531246][ T2652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.547103][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 388.554437][ T318] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.561541][ T318] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.571447][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 388.579529][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 388.587492][ T318] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.594299][ T318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.602383][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 388.610446][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 388.618564][ T318] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.625399][ T318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.635852][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 388.643659][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 388.652929][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 388.660739][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 388.672454][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 388.682162][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 388.693460][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 388.701285][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 388.709008][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 388.716213][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 388.723947][ T2652] device veth0_vlan entered promiscuous mode [ 388.732621][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 388.740519][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 388.749880][ T2652] device veth1_macvtap entered promiscuous mode [ 388.758153][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 388.765655][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 388.773568][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 388.784784][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 388.792823][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 388.808642][ T24] audit: type=1400 audit(2000000321.049:415): avc: denied { unmount } for pid=2652 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 390.055621][ T123] device bridge_slave_1 left promiscuous mode [ 390.061559][ T123] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.068727][ T123] device bridge_slave_0 left promiscuous mode [ 390.074611][ T123] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.082293][ T123] device bridge_slave_1 left promiscuous mode [ 390.088263][ T123] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.095420][ T123] device bridge_slave_0 left promiscuous mode [ 390.101300][ T123] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.108793][ T123] device bridge_slave_1 left promiscuous mode [ 390.114675][ T123] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.121885][ T123] device bridge_slave_0 left promiscuous mode [ 390.127905][ T123] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.135430][ T123] device bridge_slave_1 left promiscuous mode [ 390.141311][ T123] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.148427][ T123] device bridge_slave_0 left promiscuous mode [ 390.154313][ T123] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.161967][ T24] audit: type=1400 audit(2000000322.399:416): avc: denied { unlink } for pid=76 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 390.162398][ T123] device bridge_slave_1 left promiscuous mode [ 390.189850][ T123] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.196924][ T123] device bridge_slave_0 left promiscuous mode [ 390.202802][ T123] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.211313][ T123] device veth1_macvtap left promiscuous mode [ 390.217138][ T123] device veth0_vlan left promiscuous mode [ 390.222831][ T123] device veth1_macvtap left promiscuous mode [ 390.228655][ T123] device veth0_vlan left promiscuous mode [ 390.234262][ T123] device veth1_macvtap left promiscuous mode [ 390.240033][ T123] device veth0_vlan left promiscuous mode [ 390.245726][ T123] device veth1_macvtap left promiscuous mode [ 390.251503][ T123] device veth0_vlan left promiscuous mode [ 390.257368][ T123] device veth1_macvtap left promiscuous mode [ 390.263150][ T123] device veth0_vlan left promiscuous mode