last executing test programs: 18.099612197s ago: executing program 4 (id=26): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x2008080, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x1, 0x2c8, &(0x7f0000000780)="$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") socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000b00)={0x7fff, 0x10, 0x5, 0x2, 0x28b, 0xae3, 0x2, 0x12}, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2902, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x10000, 0x240, 0x340, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000002c0)=ANY=[]) 12.364619596s ago: executing program 3 (id=31): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0xc2042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x20000000, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0xffffffff}, 0x50) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x20) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 12.273154977s ago: executing program 4 (id=32): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_emit_ethernet(0xaa, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaabbc1ec14fcd6b688a8e9ff8100290008004200009400000000002f9078000000d3e590d60135c33689dd35f5e7861bf000ffffffff94040000440449a38634ffffffff0106123777240210cf49e655e79e7118f751ea78e5d70107e27cf1fcac02113b7f7ea4a76a95ae5b2386969f90b444240a23ac1e0101000000067f000001000000080a01b8d8ac010100000003e000000100000a0c0713f0e0000002ac14141eac1414bbac"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x7, 0x9) write$P9_RWRITE(r3, &(0x7f0000000040)={0xb}, 0x11000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@oldalloc}, {@errors_remount}, {@minixdf}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000080)={0x0, 0x2000003}) read(r2, &(0x7f0000032440)=""/102364, 0x18fdc) write$binfmt_elf64(r3, 0x0, 0x78) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup(r1) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000300)={{{@in=@multicast2, @in6=@loopback, 0x4e20, 0x5, 0x4e21, 0x8, 0xa, 0x90, 0xa0, 0xc}, {0x1, 0xf, 0x40000000, 0x2000000000004, 0xffffffffffffffff, 0x9, 0x7, 0x8}, {0x80, 0x7, 0x1, 0x81}, 0x662a, 0x6e6bba, 0x1, 0x1, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d3, 0x32}, 0x2, @in6=@mcast1, 0x3503, 0x2, 0x2, 0xd, 0x9, 0x5, 0x2}}, 0xe8) r6 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r6, 0x0, 0x20, 0x24040010, 0x0, 0x0) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000000)='./file2\x00', 0x20404a, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1dc, &(0x7f0000000440)="$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") r7 = gettid() r8 = syz_open_dev$vcsu(&(0x7f0000000840), 0x750386f9, 0x240) futimesat(r8, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) 9.086615207s ago: executing program 3 (id=36): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000007c0)={0xa, 0x2, 0x0, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x2, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592266c5b98fb19402835fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) sendmmsg$inet6(r1, &(0x7f0000008e00)=[{{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000001780)="19", 0x1}], 0x1}}], 0x1, 0x84) close_range(r0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000000709007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000008500000050000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.009425149s ago: executing program 1 (id=37): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='hrtimer_start\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r2}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 8.998510759s ago: executing program 4 (id=38): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0xc2042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x20000000, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0xffffffff}, 0x50) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x20) fcntl$addseals(r4, 0x409, 0x8) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 8.931162311s ago: executing program 3 (id=40): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0xc2042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x20000000, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0xffffffff}, 0x50) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x20) fcntl$addseals(r4, 0x409, 0x8) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 8.888623211s ago: executing program 1 (id=41): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000c00)={[{@bsdgroups}, {@resgid}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@resuid}, {@auto_da_alloc}, {@noload}, {@jqfmt_vfsv1}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="02000000040000000800000001000000800000002e96953a5dc3a5dcf4da93fa65dc256a05e7bb67444b65db20"], 0x34) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r6}, 0x8) socket$vsock_stream(0x28, 0x1, 0x0) r7 = syz_clone3(&(0x7f0000000400)={0x1040000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000200), {0x41}, &(0x7f0000000240)=""/167, 0xa7, &(0x7f0000000300)=""/168, &(0x7f00000003c0)=[0x0], 0x1}, 0x58) sched_setscheduler(r7, 0x6, &(0x7f0000000480)=0xffffffff) socket$vsock_stream(0x28, 0x1, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r9, 0x89a3, &(0x7f0000000200)='bridge0\x00') 7.549261467s ago: executing program 1 (id=42): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000000)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYBLOB], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$eJzs3d9rZFcdAPDvvcmkyW5qpiqyFmyLrewW3ZmksRpF2gqiTwW1vq8xmYSQSSZkJnUTiqb4BwgiKvgH+CL44KMg/RNEWNB3UVFEd/VR98qdudH8mEnGZJJZJ58PnMw598f5nnPJ3Lk/DvcGcG29EBFvRMRYRLwcETPF9LRIsd9J+XKPHr6zlKcksuytvyaRFNMO6srL4xFxs1htMiK++qWIbyQn4zZ399YX6/XadlGutja2qs3dvbtrG4urtdXa5vz83M8j4tWF2axwoX6WI+K1L/zxB9/9yRdf++Unvvm7e3++8628WZ/7UKfdEbF0oQA9dOoutbfFgXwbbV9GsCHJ+1MaG3YrAADoR36M//6I+Gj7+H8mxtpHcwAAAMAoyV6fjn8mERkAAAAwstKImI4krRRjAaYjTSuVzhjeD8aNtN5otj6+0tjZXM7nRZSjlK6s1WuzxVjhcpSSvDxXjLE9KL9yrDwfEc9ExPdnptrlylKjvjzsix8AAABwTdx8/uj5/z9m0nYeAAAAGDHlngUAAABgVDjlBwAAgNHn/B8AAABG2pfffDNP2cF7vJff3t1Zb7x9d7nWXK9s7CxVlhrbW5XVRmO1/cy+jbPqqzcaW5+MzZ371Vat2ao2d/fubTR2Nlv31o68AhsAAAC4Qs88/95vk4jY/+xUO0XxHECAI/4w7AYAgzQ27AYAQzM+7AYAQ1M6cwl7CBh1yRnzTw7e6VwrjF9dTnsAAIDBu/3hk/f/J4p5Z18bAP6fGesDANfP0bt7U0NrB3D1SucdAXhr0C0BhuV9nY+nes3v+fCOPu7/d64xZNm5GgYAAAzMdDslaaU4Tp+ONK1UIp6Ox1k5SsnKWr02W5wf/Gam9FRenmuvmZw5ZhgAAAAAAAAAAAAAAAAAAAAAAAAA6MiyJDIAAABgpEWkf0raT/OPuD3z0vTRqwPH3vr147d+eH+x1dqei5hI/jaTT5qIiNaPiumvZF4JAAAAAMM1lf/pnKcXn3PDbhIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAo+bRw3eWDtJVxv3L5yOi3C3+eEy2PyejFBE3/p7E+KH1kogYG0D8/Xcj4la3+Ek8zrKsXLSiW/ypS45fbm+a7vHTiLg5gPhwnb2X73/e6Pb9S+OF9mf37994kS6q9/4v/c/+b6zH/ufpY+Venn3ws2rP+O9GPDveff9zED/pxD8SIi+82Gcfv/61vb2uMw5V2S3+4VjV1sZWtbm7d3dtY3G1tlrbnJ+f+9TCpxdeXZitrqzVa8XfrmG+95FfPD6t/zd6xC8f7f+J7f9SX73P4l8P7j/8QKdQ6hb/zovdf39v9YifFr99Hyvy+fzbB/n9Tv6w53766+dO6/9yj/5PntH/O331Pz7z8le+8/uuc05sDQDgKjR399YX6/Xa9imZyT6W+Z8yERet5/WBtudJyMTZy0w+IU29jEz27c7/48XqueDqJzLZRVYfjwE0Y+LE93QszlthErGf19XnPyQAADBi/nvQf9odJAAAAAAAAAAAAAAAAAAAAOAynfOxZJMR0ffCx2PuD6erAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACn+ncAAAD//+8b0g8=") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xac2b9}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x4c}}, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000640)=[{0x5, 0x4a, 0x37, 0x7a}]}) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r8, &(0x7f0000000040)=ANY=[], 0x6) open(&(0x7f0000000180)='./bus\x00', 0x4827e, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="666c7573682c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c00a56dc300a96c9b20f3fabdcb10cad696323259cc0500e5f91620d7b9aed9e1fa74020a4f00b8ff"], 0x1, 0x25a, &(0x7f0000000b80)="$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") 7.39481937s ago: executing program 4 (id=44): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000000)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYBLOB], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xac2b9}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x4c}}, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000640)=[{0x5, 0x4a, 0x37, 0x7a}]}) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r8, &(0x7f0000000040)=ANY=[], 0x6) open(&(0x7f0000000180)='./bus\x00', 0x4827e, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="666c7573682c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c00a56dc300a96c9b20f3fabdcb10cad696323259cc0500e5f91620d7b9aed9e1fa74020a4f00b8ff"], 0x1, 0x25a, &(0x7f0000000b80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 7.229624943s ago: executing program 3 (id=45): shutdown(0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f00000004c0)={0x20, 0x16, 0x4, "fe211774"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000f40)={0x1c, &(0x7f0000000a80)={0x40, 0xf, 0x4, "68ae5e08"}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001240)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.095938544s ago: executing program 2 (id=46): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0xc2042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r2) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x20000000, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0xffffffff}, 0x50) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x20) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 4.948465936s ago: executing program 4 (id=47): shutdown(0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f00000004c0)={0x20, 0x16, 0x4, "fe211774"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000f40)={0x1c, &(0x7f0000000a80)={0x40, 0xf}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001240)={0x34, &(0x7f00000001c0)={0x40, 0x9, 0xf, "945f67546c8f755d5d16331914555b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.823818239s ago: executing program 1 (id=48): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000380)={@rand_addr=' \x01\x00', 0x55}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) request_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000780)={'syz', 0x0}, &(0x7f0000000740)='logon\x00', 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000440)=0x19) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00'}, 0x10) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) 4.585275343s ago: executing program 2 (id=49): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0xc2042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x20000000, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0xffffffff}, 0x50) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x20) fcntl$addseals(r4, 0x409, 0x8) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 4.032074753s ago: executing program 3 (id=50): shutdown(0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f00000004c0)={0x20, 0x16, 0x4, "fe211774"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000f40)={0x1c, &(0x7f0000000a80)={0x40, 0xf, 0x2, "68ae"}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001240)={0x34, &(0x7f00000001c0)={0x40, 0x9, 0xf, "945f67546c8f755d5d16331914555b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.030340914s ago: executing program 0 (id=51): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0xc2042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x20000000, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0xffffffff}, 0x50) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x20) fcntl$addseals(r4, 0x409, 0x8) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 3.944732995s ago: executing program 2 (id=52): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x2a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="06000000040000000700000008"], 0x50) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r3, &(0x7f0000000940)='R', 0x1, 0x4fed3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x121) 3.783640538s ago: executing program 1 (id=53): sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000c00)={[{@bsdgroups}, {@resgid}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@resuid}, {@auto_da_alloc}, {@noload}, {@jqfmt_vfsv1}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="02000000040000000800000001000000800000002e96953a5dc3a5dcf4da93fa65dc256a05e7bb67444b65db20"], 0x34) socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000480)=0xffffffff) socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r6, 0x89a3, &(0x7f0000000200)='bridge0\x00') 3.6983168s ago: executing program 2 (id=54): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000380)={@rand_addr=' \x01\x00', 0x55}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) request_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000780)={'syz', 0x0}, &(0x7f0000000740)='logon\x00', 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000440)=0x19) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00'}, 0x10) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) 2.973154613s ago: executing program 0 (id=55): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000b00)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000180000000000000000950000000000000085100000fcffffff9500000000000000"], &(0x7f00000000c0)='GPL\x00'}, 0x78) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f00000009c0)={[{@discard}, {@commit={'commit', 0x3d, 0xbcfc}}, {@discard}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}, 0x0}, {@nouid32}, {@noload}, {@nodiscard}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@init_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@bh}, {@dax_never}, {@resgid}], [{@audit}, {@subj_user={'subj_user', 0x3d, 'audit'}}], 0x2c}, 0xa, 0x523, &(0x7f0000000480)="$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") 2.688599659s ago: executing program 2 (id=56): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0xc2042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) close(r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x20000000, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0xffffffff}, 0x50) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x20) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 2.386788115s ago: executing program 2 (id=57): shutdown(0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f00000004c0)={0x20, 0x16, 0x4, "fe211774"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000f40)={0x1c, &(0x7f0000000a80)={0x40, 0xf, 0x4, "68ae5e08"}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001240)={0x34, &(0x7f00000001c0)={0x40, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.177006328s ago: executing program 1 (id=58): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000030000000006241a030000090581030004000080090401000002efff000904010102020d0000090582020002000008090503020002100000"], 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtaction={0x18, 0x30, 0x10b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000002c0)={0x30001, 0x0, {[0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffd, 0x5]}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000040)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x13, 0x6b39, 0x10, 0x11e, 0x9, 0x5, 0xbe, 0x8, 0x8, 0x1, 0x7, 0x1c}}, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) sendmmsg$inet(r2, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 2.10448987s ago: executing program 0 (id=59): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@user_xattr}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x44d, &(0x7f0000000cc0)="$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") r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000014c0)={0x0, 0x5, 0x39b, 0x1}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000600)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000002ac0)={{r0}, r6, 0x4, @inherit={0x50, &(0x7f0000000140)={0x1, 0x1, 0x3, 0x3, {0x4, 0x8, 0x1, 0x10da5a2d, 0x8420}, [0x696cca21]}}, @devid=r5}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x1, 0xd}, {}, {0x8, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c840}, 0x40004) recvmmsg(r3, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200290000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000020"]) 1.995074872s ago: executing program 0 (id=60): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x2a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="06000000040000000700000008"], 0x50) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r3, &(0x7f0000000940)='R', 0x1, 0x4fed3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x121) 1.831117535s ago: executing program 0 (id=61): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000003c0)='./file0\x00', 0x210451, &(0x7f0000000000)=ANY=[], 0x1, 0x24c, &(0x7f0000000680)="$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") r2 = fspick(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$FUSE_INIT(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000002700)={0x7, 0x6, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b601000000000000bd110000000000008510000002000000850000007600000095000000000000009500a5050000000077d8f3b4000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d75357f21699cdc6751dfb265a0e3ccae669e173a649c1cfd6587d472d64e7cc955d77578f4c35235138d5421f9453559c35da860e8ef14142b2a3e314422b854421eed734ceb1efeecb9c66854c3b3ffe1b4ce25d7c983c005c03bf3a48dfe3e26e7a23129d6606fd28a697a9d552af6d9a9df2c3af333"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f00001001", @ANYRES64], 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x7101}) 349.325993ms ago: executing program 4 (id=62): r0 = syz_clone3(&(0x7f00000016c0)={0x1000000, &(0x7f0000000580), 0x0, 0x0, {0x1a}, 0x0, 0x0, &(0x7f0000001640)=""/35, &(0x7f0000001680)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3}, 0x58) sched_setscheduler(r0, 0x1, &(0x7f0000001740)=0xcb38) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x2, "19fde941"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0xc, @string={0xc, 0x3, "093ff47b0dee459e3a69"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41e}}, 0x0, 0x0}, 0x0) 234.830266ms ago: executing program 0 (id=63): shutdown(0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f00000004c0)={0x20, 0x16, 0x4, "fe211774"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000f40)={0x1c, &(0x7f0000000a80)={0x40, 0xf}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001240)={0x34, &(0x7f00000001c0)={0x40, 0x9, 0xf, "945f67546c8f755d5d16331914555b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=64): socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)) mkdir(&(0x7f0000000000)='./file0\x00', 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x0, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100088}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = getpgid(0x0) getpgrp(r8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000003000000000000000000000071120500000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYRES8=r7, @ANYRES8=r7, @ANYRES8=r9], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.6' (ED25519) to the list of known hosts. [ 22.652829][ T30] audit: type=1400 audit(1759628533.951:64): avc: denied { mounton } for pid=273 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.654294][ T273] cgroup: Unknown subsys name 'net' [ 22.675531][ T30] audit: type=1400 audit(1759628533.951:65): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.703245][ T30] audit: type=1400 audit(1759628533.981:66): avc: denied { unmount } for pid=273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.703467][ T273] cgroup: Unknown subsys name 'devices' [ 22.912596][ T273] cgroup: Unknown subsys name 'hugetlb' [ 22.918223][ T273] cgroup: Unknown subsys name 'rlimit' [ 23.088573][ T30] audit: type=1400 audit(1759628534.381:67): avc: denied { setattr } for pid=273 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.111976][ T30] audit: type=1400 audit(1759628534.381:68): avc: denied { mounton } for pid=273 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.136966][ T30] audit: type=1400 audit(1759628534.381:69): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.144981][ T275] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.169088][ T30] audit: type=1400 audit(1759628534.461:70): avc: denied { relabelto } for pid=275 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.194619][ T30] audit: type=1400 audit(1759628534.461:71): avc: denied { write } for pid=275 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 23.271289][ T30] audit: type=1400 audit(1759628534.571:72): avc: denied { read } for pid=273 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.297045][ T30] audit: type=1400 audit(1759628534.571:73): avc: denied { open } for pid=273 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.297144][ T273] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.518372][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.525566][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.533133][ T281] device bridge_slave_0 entered promiscuous mode [ 24.540085][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.547227][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.554724][ T281] device bridge_slave_1 entered promiscuous mode [ 24.583517][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.590600][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.598039][ T282] device bridge_slave_0 entered promiscuous mode [ 24.615562][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.622697][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.630058][ T282] device bridge_slave_1 entered promiscuous mode [ 24.655991][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.663482][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.671055][ T284] device bridge_slave_0 entered promiscuous mode [ 24.685075][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.692163][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.699630][ T284] device bridge_slave_1 entered promiscuous mode [ 24.712361][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.719432][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.726979][ T283] device bridge_slave_0 entered promiscuous mode [ 24.744866][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.751974][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.759415][ T283] device bridge_slave_1 entered promiscuous mode [ 24.824540][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.831772][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.839107][ T285] device bridge_slave_0 entered promiscuous mode [ 24.856554][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.863728][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.871247][ T285] device bridge_slave_1 entered promiscuous mode [ 25.008783][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.015874][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.023204][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.030233][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.040137][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.047352][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.054678][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.061735][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.079972][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.087051][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.094348][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.101414][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.120778][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.127844][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.135151][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.142328][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.158280][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.165365][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.172743][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.179888][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.210805][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.218151][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.225795][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.233561][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.241061][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.248446][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.255801][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.263055][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.270218][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.277587][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.284941][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.292934][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.300435][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.309287][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.317546][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.324605][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.343639][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.351492][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.359671][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.366765][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.386782][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.394471][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.403530][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.410735][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.418381][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.426714][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.433781][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.441154][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.449339][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.456419][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.464012][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.472256][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.479291][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.486733][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.494917][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.501993][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.510294][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.518462][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.525566][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.538569][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.546746][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.574465][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.582670][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.591424][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.599414][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.608373][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.616581][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.624566][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.632796][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.640853][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.648867][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.657085][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.665310][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.684895][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.693294][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.701774][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.710043][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.720918][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.728600][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.737814][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.745910][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.763699][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.771378][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.779165][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.787794][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.796312][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.804997][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.813406][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.821715][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.829868][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.836922][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.844345][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.852437][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.860765][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.868318][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.880027][ T281] device veth0_vlan entered promiscuous mode [ 25.887689][ T283] device veth0_vlan entered promiscuous mode [ 25.900862][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.909386][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.917971][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.926780][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.935108][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.942163][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.953017][ T284] device veth0_vlan entered promiscuous mode [ 25.966700][ T282] device veth0_vlan entered promiscuous mode [ 25.973077][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.981744][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.989623][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.997989][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.006288][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.014613][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.022855][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.031156][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.039048][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.047399][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.055062][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.062679][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.070120][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.082751][ T283] device veth1_macvtap entered promiscuous mode [ 26.091630][ T281] device veth1_macvtap entered promiscuous mode [ 26.101472][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.116703][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.125320][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.133937][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.142384][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.151002][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.159230][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.172478][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.180849][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.189376][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.201139][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.209538][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.230076][ T284] device veth1_macvtap entered promiscuous mode [ 26.239106][ T281] request_module fs-gadgetfs succeeded, but still no fs? [ 26.253883][ T282] device veth1_macvtap entered promiscuous mode [ 26.265019][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.276697][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.284376][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.292233][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.301526][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.309808][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.318243][ T285] device veth0_vlan entered promiscuous mode [ 26.334775][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.347958][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.356794][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.365627][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.386719][ T285] device veth1_macvtap entered promiscuous mode [ 26.395805][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.404841][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.416537][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.425231][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.433835][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.466312][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.475128][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.485663][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.495087][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.690316][ T333] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.800359][ T58] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 27.057834][ T58] usb 4-1: Using ep0 maxpacket: 32 [ 27.100504][ T334] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 27.100870][ T333] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.119345][ T333] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.190424][ T58] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 27.198724][ T58] usb 4-1: config 0 has no interface number 0 [ 27.204942][ T333] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 27.214092][ T58] usb 4-1: config 0 interface 184 has no altsetting 0 [ 27.221048][ T333] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 27.229135][ T333] usb 1-1: Manufacturer: syz [ 27.235163][ T333] usb 1-1: config 0 descriptor?? [ 27.393124][ T58] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 27.432630][ T354] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 27.440409][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.448781][ T58] usb 4-1: Product: syz [ 27.453257][ T58] usb 4-1: Manufacturer: syz [ 27.503036][ T58] usb 4-1: SerialNumber: syz [ 27.508348][ T58] usb 4-1: config 0 descriptor?? [ 27.527821][ T334] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.551021][ T58] smsc75xx v1.0.0 [ 27.671716][ T359] loop2: detected capacity change from 0 to 512 [ 27.720369][ T354] usb 5-1: Using ep0 maxpacket: 32 [ 27.754887][ T359] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 27.840635][ T359] EXT4-fs (loop2): 1 orphan inode deleted [ 27.846502][ T359] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback. [ 27.859192][ T359] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.950624][ T359] device ip6erspan0 entered promiscuous mode [ 28.007346][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 28.007455][ T30] audit: type=1400 audit(1759628539.151:110): avc: denied { mount } for pid=356 comm="syz.2.8" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.050739][ T354] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 28.069888][ T354] usb 5-1: config 0 has no interface number 0 [ 28.108322][ T354] usb 5-1: config 0 interface 184 has no altsetting 0 [ 28.260444][ T58] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 28.272076][ T354] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 28.598438][ T359] syz.2.8 (359) used greatest stack depth: 21592 bytes left [ 28.606683][ T58] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 28.616247][ T354] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.624771][ T354] usb 5-1: Product: syz [ 28.629141][ T354] usb 5-1: Manufacturer: syz [ 28.634025][ T354] usb 5-1: SerialNumber: syz [ 28.642563][ T354] usb 5-1: config 0 descriptor?? [ 28.681525][ T354] smsc75xx v1.0.0 [ 28.694086][ T30] audit: type=1400 audit(1759628539.991:111): avc: denied { read } for pid=365 comm="syz.2.9" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 28.716971][ T30] audit: type=1400 audit(1759628540.011:112): avc: denied { open } for pid=365 comm="syz.2.9" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 28.741830][ T30] audit: type=1400 audit(1759628540.011:113): avc: denied { create } for pid=365 comm="syz.2.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 28.820438][ T334] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 28.830328][ T333] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #100: -71 [ 28.830738][ T334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.847185][ T333] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 28.847210][ T333] uclogic 0003:256C:006D.0001: failed probing pen v1 parameters: -71 [ 28.855668][ T334] usb 2-1: Product: syz [ 28.866856][ T333] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 28.868021][ T334] usb 2-1: Manufacturer: syz [ 28.880397][ T334] usb 2-1: SerialNumber: syz [ 28.890326][ T333] uclogic: probe of 0003:256C:006D.0001 failed with error -71 [ 28.902299][ T333] usb 1-1: USB disconnect, device number 2 [ 29.060807][ T30] audit: type=1400 audit(1759628540.361:114): avc: denied { create } for pid=369 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.081065][ T30] audit: type=1400 audit(1759628540.361:115): avc: denied { read write } for pid=369 comm="syz.2.10" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 29.104367][ T30] audit: type=1400 audit(1759628540.361:116): avc: denied { open } for pid=369 comm="syz.2.10" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 29.141969][ T30] audit: type=1400 audit(1759628540.441:117): avc: denied { read } for pid=343 comm="syz.1.2" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 29.164507][ T30] audit: type=1400 audit(1759628540.441:118): avc: denied { open } for pid=343 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 29.192787][ T30] audit: type=1400 audit(1759628540.441:119): avc: denied { create } for pid=343 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.192823][ T373] loop2: detected capacity change from 0 to 512 [ 29.263470][ T373] EXT4-fs (loop2): Ignoring removed oldalloc option [ 29.270463][ T373] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 29.281848][ T373] EXT4-fs (loop2): 1 truncate cleaned up [ 29.287590][ T373] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000040,oldalloc,errors=remount-ro,minixdf,. Quota mode: none. [ 29.360428][ T58] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 29.371413][ T354] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 29.382532][ T58] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 29.392225][ T354] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 29.401443][ T58] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 29.411129][ T58] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 29.430731][ T376] loop0: detected capacity change from 0 to 1024 [ 29.435665][ T58] usb 4-1: USB disconnect, device number 2 [ 29.448030][ T376] ======================================================= [ 29.448030][ T376] WARNING: The mand mount option has been deprecated and [ 29.448030][ T376] and is ignored by this kernel. Remove the mand [ 29.448030][ T376] option from the mount to silence this warning. [ 29.448030][ T376] ======================================================= [ 29.531789][ T376] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 29.545298][ T376] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.562790][ T376] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 29.577880][ T376] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 29.590824][ T376] EXT4-fs (loop0): This should not happen!! Data will be lost [ 29.590824][ T376] [ 29.601105][ T376] EXT4-fs (loop0): Total free blocks count 0 [ 29.607293][ T376] EXT4-fs (loop0): Free/Dirty block details [ 29.613719][ T376] EXT4-fs (loop0): free_blocks=4293918720 [ 29.619642][ T376] EXT4-fs (loop0): dirty_blocks=16 [ 29.624985][ T376] EXT4-fs (loop0): Block reservation details [ 29.631310][ T376] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 29.702824][ T381] loop0: detected capacity change from 0 to 16 [ 29.770389][ T381] erofs: (device loop0): mounted with root inode @ nid 36. [ 30.050348][ T58] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 30.070459][ T334] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 30.077002][ T334] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 30.085036][ T334] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 30.100476][ T354] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 30.112530][ T354] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 30.122227][ T354] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 30.132004][ T354] smsc75xx: probe of 5-1:0.184 failed with error -61 [ 30.280407][ T334] cdc_ncm 2-1:1.0: setting tx_max = 136 [ 30.287490][ T334] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 30.297666][ T333] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 30.303877][ T334] usb 2-1: USB disconnect, device number 2 [ 30.317093][ T334] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 30.430334][ T58] usb 1-1: config 27 has an invalid descriptor of length 255, skipping remainder of the config [ 30.440886][ T58] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 30.452303][ T58] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 30.465403][ T58] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 30.470324][ T6] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 30.474495][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.531204][ T58] usb 1-1: invalid MIDI out EP 0 [ 30.536474][ T58] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 30.560308][ T333] usb 3-1: Using ep0 maxpacket: 32 [ 30.680349][ T333] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 30.690506][ T333] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 30.703799][ T333] usb 3-1: config 0 interface 0 has no altsetting 0 [ 30.710574][ T333] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 30.719740][ T333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.728699][ T333] usb 3-1: config 0 descriptor?? [ 30.780934][ T58] usb 1-1: USB disconnect, device number 3 [ 30.840399][ T6] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.016283][ T393] loop1: detected capacity change from 0 to 512 [ 31.211078][ T393] EXT4-fs (loop1): 1 orphan inode deleted [ 31.216915][ T393] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback. [ 31.228926][ T393] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.306610][ T393] device ip6erspan0 entered promiscuous mode [ 31.416545][ T333] hid-thrustmaster 0003:044F:B65D.0002: item fetching failed at offset 3/5 [ 31.447112][ T333] hid-thrustmaster 0003:044F:B65D.0002: parse failed with error -22 [ 31.582877][ T333] hid-thrustmaster: probe of 0003:044F:B65D.0002 failed with error -22 [ 31.626913][ T399] loop4: detected capacity change from 0 to 16 [ 31.900254][ C0] sched: RT throttling activated [ 31.992478][ T333] usb 3-1: USB disconnect, device number 2 [ 32.001506][ T58] usb 5-1: USB disconnect, device number 2 [ 32.100399][ T6] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 32.109633][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.117689][ T6] usb 4-1: Product: syz [ 32.122179][ T6] usb 4-1: Manufacturer: syz [ 32.126803][ T6] usb 4-1: SerialNumber: syz [ 32.142458][ T399] erofs: (device loop4): mounted with root inode @ nid 36. [ 32.167496][ T406] loop1: detected capacity change from 0 to 256 [ 32.448987][ T407] loop1: detected capacity change from 0 to 512 [ 32.459334][ T409] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 32.496460][ T407] EXT4-fs (loop1): orphan cleanup on readonly fs [ 32.504641][ T407] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.20: bg 0: block 248: padding at end of block bitmap is not set [ 32.519216][ T407] EXT4-fs error (device loop1): ext4_acquire_dquot:6200: comm syz.1.20: Failed to acquire dquot type 1 [ 32.520325][ T58] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 32.538841][ T407] EXT4-fs (loop1): 1 truncate cleaned up [ 32.545222][ T407] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 32.561085][ T407] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 32.571438][ T407] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 0 [ 32.588406][ T407] netlink: 'syz.1.20': attribute type 13 has an invalid length. [ 32.589601][ T409] kvm: pic: non byte write [ 32.642222][ T407] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.647220][ T414] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.20: deleted inode referenced: 12 [ 32.649867][ T407] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.910342][ T58] usb 5-1: config 27 has an invalid descriptor of length 255, skipping remainder of the config [ 32.920885][ T333] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 32.928784][ T58] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 32.940126][ T58] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 32.953196][ T58] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 32.962309][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.011310][ T58] usb 5-1: invalid MIDI out EP 0 [ 33.016701][ T58] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 33.026312][ T407] syz.1.20 (407) used greatest stack depth: 21344 bytes left [ 33.109482][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 33.109498][ T30] audit: type=1400 audit(1759628544.401:149): avc: denied { name_bind } for pid=417 comm="syz.1.23" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 33.113219][ T418] loop1: detected capacity change from 0 to 512 [ 33.116565][ T30] audit: type=1400 audit(1759628544.401:150): avc: denied { node_bind } for pid=417 comm="syz.1.23" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 33.146176][ T418] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 33.182807][ T418] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 33.200280][ T333] usb 3-1: Using ep0 maxpacket: 32 [ 33.209952][ T418] syz.1.23 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 33.221382][ T30] audit: type=1400 audit(1759628544.521:151): avc: denied { write } for pid=417 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.242450][ T30] audit: type=1400 audit(1759628544.521:152): avc: denied { read } for pid=417 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.243144][ T418] tipc: Started in network mode [ 33.267671][ T418] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 33.276944][ T6] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 33.277103][ T418] tipc: Enabling of bearer rejected, failed to enable media [ 33.283432][ T6] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 33.283454][ T6] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 33.341523][ T293] usb 5-1: USB disconnect, device number 3 [ 33.350415][ T333] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 33.358887][ T333] usb 3-1: config 0 has no interface number 0 [ 33.368231][ T333] usb 3-1: config 0 interface 184 has no altsetting 0 [ 33.480334][ T6] cdc_ncm 4-1:1.0: setting tx_max = 136 [ 33.487493][ T6] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 33.503369][ T6] usb 4-1: USB disconnect, device number 3 [ 33.511608][ T6] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 33.531528][ T30] audit: type=1400 audit(1759628544.831:153): avc: denied { getattr } for pid=426 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=496 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 33.540472][ T333] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 33.562029][ T30] audit: type=1400 audit(1759628544.851:154): avc: denied { read } for pid=428 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=496 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 33.567544][ T333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.599121][ T30] audit: type=1400 audit(1759628544.891:155): avc: denied { open } for pid=428 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=496 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 33.615979][ T333] usb 3-1: Product: syz [ 33.628371][ T333] usb 3-1: Manufacturer: syz [ 33.633285][ T333] usb 3-1: SerialNumber: syz [ 33.638602][ T333] usb 3-1: config 0 descriptor?? [ 33.663394][ T30] audit: type=1400 audit(1759628544.961:156): avc: denied { create } for pid=425 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 33.686616][ T26] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 33.694626][ T333] smsc75xx v1.0.0 [ 33.699059][ T30] audit: type=1400 audit(1759628544.961:157): avc: denied { write } for pid=425 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.usb0.link" dev="tmpfs" ino=783 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 33.725443][ T30] audit: type=1400 audit(1759628544.961:158): avc: denied { append } for pid=425 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" dev="tmpfs" ino=783 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 33.959087][ T454] loop0: detected capacity change from 0 to 512 [ 34.013695][ T454] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 34.112089][ T454] EXT4-fs (loop0): orphan cleanup on readonly fs [ 34.122154][ T454] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.25: bg 0: block 248: padding at end of block bitmap is not set [ 34.137834][ T454] EXT4-fs error (device loop0): ext4_acquire_dquot:6200: comm syz.0.25: Failed to acquire dquot type 1 [ 34.152961][ T454] EXT4-fs (loop0): 1 truncate cleaned up [ 34.164113][ T454] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,grpjquota=,resuid=0x0000000000000000,auto_da_alloc,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 34.268472][ T457] loop4: detected capacity change from 0 to 256 [ 35.515021][ T465] loop3: detected capacity change from 0 to 512 [ 39.212732][ T454] syz.0.25 (454) used greatest stack depth: 20592 bytes left [ 39.419060][ T465] EXT4-fs (loop3): 1 orphan inode deleted [ 39.425192][ T465] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback. [ 39.436826][ T465] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.485979][ T460] device ip6erspan0 entered promiscuous mode [ 39.514340][ T333] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 39.525347][ T333] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 39.535291][ T26] usb 2-1: device descriptor read/all, error -71 [ 39.541720][ T333] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 39.552183][ T333] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 39.564550][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 39.564564][ T30] audit: type=1400 audit(1759628550.791:163): avc: denied { read } for pid=458 comm="syz.3.27" dev="nsfs" ino=4026532463 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 39.613968][ T333] usb 3-1: USB disconnect, device number 3 [ 39.675935][ T480] loop1: detected capacity change from 0 to 512 [ 39.761840][ T481] loop2: detected capacity change from 0 to 512 [ 39.797143][ T479] loop0: detected capacity change from 0 to 1024 [ 39.832876][ T480] EXT4-fs (loop1): 1 orphan inode deleted [ 39.838740][ T480] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback. [ 39.851457][ T480] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.073278][ T481] EXT4-fs (loop2): Ignoring removed oldalloc option [ 40.113090][ T30] audit: type=1400 audit(1759628550.791:164): avc: denied { open } for pid=458 comm="syz.3.27" path="net:[4026532463]" dev="nsfs" ino=4026532463 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 40.154625][ T487] loop4: detected capacity change from 0 to 512 [ 40.161938][ T481] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 40.211719][ T479] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 40.637311][ T481] EXT4-fs (loop2): 1 truncate cleaned up [ 40.645238][ T487] EXT4-fs (loop4): Ignoring removed oldalloc option [ 40.659854][ T479] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.675860][ T487] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 40.686851][ T481] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000040,oldalloc,errors=remount-ro,minixdf,. Quota mode: none. [ 40.710945][ T30] audit: type=1400 audit(1759628550.791:165): avc: denied { bind } for pid=458 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.734613][ T479] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 40.750306][ T30] audit: type=1400 audit(1759628550.791:166): avc: denied { write } for pid=458 comm="syz.3.27" path="socket:[16029]" dev="sockfs" ino=16029 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.774020][ T479] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 40.783377][ T30] audit: type=1400 audit(1759628550.791:167): avc: denied { read write open } for pid=458 comm="syz.3.27" path="/3/file1/bus" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 40.799686][ T479] EXT4-fs (loop0): This should not happen!! Data will be lost [ 40.799686][ T479] [ 40.810882][ T487] EXT4-fs (loop4): 1 truncate cleaned up [ 40.819546][ T479] EXT4-fs (loop0): Total free blocks count 0 [ 40.831169][ T479] EXT4-fs (loop0): Free/Dirty block details [ 40.837275][ T479] EXT4-fs (loop0): free_blocks=4293918720 [ 40.843098][ T479] EXT4-fs (loop0): dirty_blocks=16 [ 40.848365][ T479] EXT4-fs (loop0): Block reservation details [ 40.855666][ T479] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 40.861820][ T30] audit: type=1400 audit(1759628550.861:168): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 40.881131][ T487] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000040,oldalloc,errors=remount-ro,minixdf,. Quota mode: none. [ 40.886920][ T30] audit: type=1400 audit(1759628551.151:169): avc: denied { mount } for pid=471 comm="syz.1.29" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 41.001346][ T500] loop1: detected capacity change from 0 to 512 [ 41.033085][ T500] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 41.120771][ T30] audit: type=1400 audit(1759628551.291:170): avc: denied { append } for pid=471 comm="syz.1.29" path="/6/file1/memory.events.local" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 41.210533][ T500] EXT4-fs (loop1): orphan cleanup on readonly fs [ 41.225953][ T500] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.33: bg 0: block 248: padding at end of block bitmap is not set [ 41.252027][ T500] Quota error (device loop1): write_blk: dquota write failed [ 41.259821][ T500] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 41.270471][ T500] EXT4-fs error (device loop1): ext4_acquire_dquot:6200: comm syz.1.33: Failed to acquire dquot type 1 [ 41.291670][ T500] EXT4-fs (loop1): 1 truncate cleaned up [ 41.298575][ T500] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,grpjquota=,resuid=0x0000000000000000,auto_da_alloc,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 42.830137][ T505] loop0: detected capacity change from 0 to 1024 [ 42.862379][ T505] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 42.883674][ T505] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.897591][ T505] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 42.942225][ T505] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 42.955147][ T505] EXT4-fs (loop0): This should not happen!! Data will be lost [ 42.955147][ T505] [ 42.965426][ T505] EXT4-fs (loop0): Total free blocks count 0 [ 42.972099][ T505] EXT4-fs (loop0): Free/Dirty block details [ 42.978119][ T505] EXT4-fs (loop0): free_blocks=4293918720 [ 42.985522][ T505] EXT4-fs (loop0): dirty_blocks=16 [ 42.991087][ T505] EXT4-fs (loop0): Block reservation details [ 42.997104][ T505] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 43.140311][ T333] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 43.253041][ T525] loop1: detected capacity change from 0 to 512 [ 43.292955][ T525] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 43.389156][ T525] EXT4-fs (loop1): orphan cleanup on readonly fs [ 43.398375][ T525] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.41: bg 0: block 248: padding at end of block bitmap is not set [ 43.414498][ T525] EXT4-fs error (device loop1): ext4_acquire_dquot:6200: comm syz.1.41: Failed to acquire dquot type 1 [ 43.427897][ T525] EXT4-fs (loop1): 1 truncate cleaned up [ 43.434624][ T525] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,grpjquota=,resuid=0x0000000000000000,auto_da_alloc,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 45.836725][ T535] loop4: detected capacity change from 0 to 512 [ 45.846114][ T540] loop1: detected capacity change from 0 to 512 [ 45.878157][ T533] loop0: detected capacity change from 0 to 40427 [ 45.912535][ T333] usb 3-1: unable to read config index 0 descriptor/all [ 45.973572][ T333] usb 3-1: can't read configurations, error -71 [ 46.015217][ T533] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 46.040577][ T354] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 46.143443][ T535] EXT4-fs (loop4): 1 orphan inode deleted [ 46.149382][ T535] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback. [ 46.161623][ T535] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.265497][ T535] device ip6erspan0 entered promiscuous mode [ 46.441701][ T533] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 46.479012][ T540] EXT4-fs (loop1): 1 orphan inode deleted [ 46.484910][ T540] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback. [ 46.497069][ T540] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.040359][ T354] usb 4-1: Using ep0 maxpacket: 32 [ 47.085087][ T533] F2FS-fs (loop0): invalid crc value [ 47.162675][ T533] F2FS-fs (loop0): Found nat_bits in checkpoint [ 47.230572][ T354] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 47.311203][ T533] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 47.321577][ T354] usb 4-1: config 0 has no interface number 0 [ 47.322110][ T533] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 47.329531][ T354] usb 4-1: config 0 interface 184 has no altsetting 0 [ 47.424709][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 47.424724][ T30] audit: type=1400 audit(1759628558.721:172): avc: denied { create } for pid=532 comm="syz.0.43" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 47.550597][ T354] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 47.566090][ T354] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.582154][ T354] usb 4-1: Product: syz [ 47.594151][ T354] usb 4-1: Manufacturer: syz [ 47.602114][ T354] usb 4-1: SerialNumber: syz [ 47.692780][ T354] usb 4-1: config 0 descriptor?? [ 47.816132][ T30] audit: type=1400 audit(1759628559.111:173): avc: denied { create } for pid=532 comm="syz.0.43" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 47.817118][ T293] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 47.839648][ T533] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 47.856762][ T533] FAT-fs (loop1): unable to read boot sector [ 47.880388][ T354] usb 4-1: can't set config #0, error -71 [ 47.890351][ T30] audit: type=1400 audit(1759628559.131:174): avc: denied { mounton } for pid=532 comm="syz.0.43" path="/8/bus/file0" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 47.897657][ T354] usb 4-1: USB disconnect, device number 4 [ 47.913317][ T30] audit: type=1400 audit(1759628559.171:175): avc: denied { remove_name } for pid=532 comm="syz.0.43" name="file1" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.941867][ T30] audit: type=1400 audit(1759628559.171:176): avc: denied { rename } for pid=532 comm="syz.0.43" name="file1" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 48.042878][ T566] loop2: detected capacity change from 0 to 1024 [ 48.075898][ T566] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 48.103782][ T566] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.132740][ T566] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 48.149282][ T566] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 48.169952][ T566] EXT4-fs (loop2): This should not happen!! Data will be lost [ 48.169952][ T566] [ 48.180323][ T293] usb 5-1: Using ep0 maxpacket: 32 [ 48.180845][ T566] EXT4-fs (loop2): Total free blocks count 0 [ 48.191800][ T566] EXT4-fs (loop2): Free/Dirty block details [ 48.197844][ T566] EXT4-fs (loop2): free_blocks=4293918720 [ 48.203777][ T566] EXT4-fs (loop2): dirty_blocks=16 [ 48.208918][ T566] EXT4-fs (loop2): Block reservation details [ 48.214995][ T566] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 48.306952][ T576] loop1: detected capacity change from 0 to 512 [ 48.313434][ T293] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 48.324806][ T293] usb 5-1: config 0 has no interface number 0 [ 48.330320][ T354] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 48.331340][ T293] usb 5-1: config 0 interface 184 has no altsetting 0 [ 48.363173][ T576] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 48.379577][ T576] EXT4-fs (loop1): orphan cleanup on readonly fs [ 48.389146][ T576] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.53: bg 0: block 248: padding at end of block bitmap is not set [ 48.413978][ T576] Quota error (device loop1): write_blk: dquota write failed [ 48.436264][ T576] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 48.467586][ T576] EXT4-fs error (device loop1): ext4_acquire_dquot:6200: comm syz.1.53: Failed to acquire dquot type 1 [ 48.532219][ T576] EXT4-fs (loop1): 1 truncate cleaned up [ 48.538649][ T576] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,grpjquota=,resuid=0x0000000000000000,auto_da_alloc,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 48.580485][ T293] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 48.589665][ T293] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.620310][ T354] usb 4-1: Using ep0 maxpacket: 32 [ 48.830605][ T354] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 48.853726][ T354] usb 4-1: config 0 has no interface number 0 [ 48.899576][ T354] usb 4-1: config 0 interface 184 has no altsetting 0 [ 48.946798][ T293] usb 5-1: Product: syz [ 48.951081][ T293] usb 5-1: Manufacturer: syz [ 48.955714][ T293] usb 5-1: SerialNumber: syz [ 48.974979][ T293] usb 5-1: config 0 descriptor?? [ 49.010797][ T293] smsc75xx v1.0.0 [ 49.150375][ T354] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 49.159514][ T354] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.167889][ T354] usb 4-1: Product: syz [ 49.172329][ T354] usb 4-1: Manufacturer: syz [ 49.176990][ T354] usb 4-1: SerialNumber: syz [ 49.186643][ T584] loop0: detected capacity change from 0 to 512 [ 49.193861][ T354] usb 4-1: config 0 descriptor?? [ 49.299123][ T584] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 49.313142][ T354] smsc75xx v1.0.0 [ 49.318991][ T584] EXT4-fs (loop0): can't mount with commit=48380, fs mounted w/o journal [ 49.650373][ T293] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 49.661367][ T293] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 49.860291][ T588] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 49.872575][ T594] loop0: detected capacity change from 0 to 512 [ 49.912606][ T594] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 49.919873][ T594] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 49.931157][ T594] EXT4-fs (loop0): 1 truncate cleaned up [ 49.936836][ T594] EXT4-fs (loop0): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nombcache,user_xattr,mblk_io_submit,resuid=0x0000000000000000,norecovery,,errors=continue. Quota mode: none. [ 49.970692][ T354] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 49.988445][ T597] loop0: detected capacity change from 0 to 1024 [ 49.991775][ T354] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 50.012315][ T597] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 50.025569][ T597] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.039877][ T597] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 50.055095][ T597] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 50.068343][ T597] EXT4-fs (loop0): This should not happen!! Data will be lost [ 50.068343][ T597] [ 50.078719][ T597] EXT4-fs (loop0): Total free blocks count 0 [ 50.085202][ T597] EXT4-fs (loop0): Free/Dirty block details [ 50.091241][ T597] EXT4-fs (loop0): free_blocks=4293918720 [ 50.097115][ T597] EXT4-fs (loop0): dirty_blocks=16 [ 50.102506][ T597] EXT4-fs (loop0): Block reservation details [ 50.108629][ T597] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 50.114936][ T588] usb 3-1: Using ep0 maxpacket: 32 [ 50.120304][ T58] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 50.190441][ T602] loop0: detected capacity change from 0 to 16 [ 50.233206][ T602] erofs: (device loop0): mounted with root inode @ nid 36. [ 50.240652][ T588] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 50.248885][ T588] usb 3-1: config 0 has no interface number 0 [ 50.255452][ T588] usb 3-1: config 0 interface 184 has no altsetting 0 [ 50.380447][ T293] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 50.391298][ T293] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 50.401054][ T293] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 50.410605][ T293] smsc75xx: probe of 5-1:0.184 failed with error -61 [ 50.420855][ T588] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 50.430072][ T588] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.438277][ T588] usb 3-1: Product: syz [ 50.442579][ T588] usb 3-1: Manufacturer: syz [ 50.447301][ T588] usb 3-1: SerialNumber: syz [ 50.453081][ T588] usb 3-1: config 0 descriptor?? [ 50.490478][ T58] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.502008][ T588] smsc75xx v1.0.0 [ 50.530364][ T355] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 50.660385][ T58] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 50.669480][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.677793][ T58] usb 2-1: Product: syz [ 50.682031][ T58] usb 2-1: Manufacturer: syz [ 50.686727][ T58] usb 2-1: SerialNumber: syz [ 50.700449][ T354] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 50.711744][ T354] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 50.721394][ T354] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 50.731332][ T354] smsc75xx: probe of 4-1:0.184 failed with error -61 [ 50.900404][ T355] usb 1-1: config 27 has an invalid descriptor of length 255, skipping remainder of the config [ 50.910995][ T355] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 50.922030][ T355] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 50.935133][ T355] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 50.944253][ T355] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.991221][ T355] usb 1-1: invalid MIDI out EP 0 [ 50.996457][ T355] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 51.150347][ T588] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 51.161408][ T588] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 51.221521][ T355] usb 1-1: USB disconnect, device number 4 [ 51.606924][ T466] usb 5-1: USB disconnect, device number 4 [ 51.850383][ T58] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 51.856972][ T58] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 51.864681][ T58] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 51.956032][ T354] usb 4-1: USB disconnect, device number 5 [ 52.020311][ T466] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 52.050308][ T355] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 52.070362][ T58] cdc_ncm 2-1:1.0: setting tx_max = 136 [ 52.077458][ T58] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 52.087758][ T588] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 52.134300][ T58] usb 2-1: USB disconnect, device number 5 [ 52.202612][ T58] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 52.246050][ T588] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 52.268821][ T588] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 52.323124][ T588] smsc75xx: probe of 3-1:0.184 failed with error -61 [ 52.405419][ T466] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.416968][ T588] usb 3-1: USB disconnect, device number 6 [ 52.422995][ T466] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.434323][ T354] ================================================================== [ 52.442525][ T354] BUG: KASAN: use-after-free in worker_thread+0xa2e/0x1200 [ 52.449755][ T354] Read of size 8 at addr ffff88810c3cac60 by task kworker/1:4/354 [ 52.457558][ T354] [ 52.459899][ T354] CPU: 1 PID: 354 Comm: kworker/1:4 Not tainted syzkaller #0 [ 52.467267][ T354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 52.477324][ T354] Workqueue: 0x0 (usb_hub_wq) [ 52.482114][ T354] Call Trace: [ 52.485406][ T354] [ 52.488334][ T354] __dump_stack+0x21/0x30 [ 52.492665][ T354] dump_stack_lvl+0xee/0x150 [ 52.497289][ T354] ? show_regs_print_info+0x20/0x20 [ 52.502611][ T354] ? load_image+0x3a0/0x3a0 [ 52.507153][ T354] ? __schedule+0xb76/0x14c0 [ 52.511757][ T354] print_address_description+0x7f/0x2c0 [ 52.517328][ T354] ? worker_thread+0xa2e/0x1200 [ 52.522184][ T354] kasan_report+0xf1/0x140 [ 52.526637][ T354] ? worker_thread+0xa2e/0x1200 [ 52.531572][ T354] __asan_report_load8_noabort+0x14/0x20 [ 52.537215][ T354] worker_thread+0xa2e/0x1200 [ 52.541896][ T354] ? __kthread_parkme+0xac/0x200 [ 52.546831][ T354] kthread+0x411/0x500 [ 52.550911][ T354] ? worker_clr_flags+0x190/0x190 [ 52.555933][ T354] ? kthread_blkcg+0xd0/0xd0 [ 52.560523][ T354] ret_from_fork+0x1f/0x30 [ 52.564939][ T354] [ 52.568053][ T354] [ 52.570370][ T354] Allocated by task 58: [ 52.574535][ T354] __kasan_kmalloc+0xda/0x110 [ 52.579210][ T354] __kmalloc+0x13d/0x2c0 [ 52.583445][ T354] kvmalloc_node+0x206/0x300 [ 52.588028][ T354] alloc_netdev_mqs+0x8d/0xc90 [ 52.592882][ T354] alloc_etherdev_mqs+0x34/0x40 [ 52.597978][ T354] usbnet_probe+0x219/0x2860 [ 52.602695][ T354] usb_probe_interface+0x5ff/0xae0 [ 52.608113][ T354] really_probe+0x285/0x970 [ 52.612624][ T354] __driver_probe_device+0x198/0x280 [ 52.617925][ T354] driver_probe_device+0x54/0x3e0 [ 52.622964][ T354] __device_attach_driver+0x2a6/0x460 [ 52.628328][ T354] bus_for_each_drv+0x175/0x200 [ 52.633177][ T354] __device_attach+0x2a2/0x400 [ 52.637938][ T354] device_initial_probe+0x1a/0x20 [ 52.642954][ T354] bus_probe_device+0xc0/0x1e0 [ 52.647751][ T354] device_add+0xb31/0xed0 [ 52.652219][ T354] usb_set_configuration+0x19c2/0x1f10 [ 52.657713][ T354] usb_generic_driver_probe+0x91/0x150 [ 52.663284][ T354] usb_probe_device+0x148/0x260 [ 52.668145][ T354] really_probe+0x285/0x970 [ 52.672641][ T354] __driver_probe_device+0x198/0x280 [ 52.677922][ T354] driver_probe_device+0x54/0x3e0 [ 52.682942][ T354] __device_attach_driver+0x2a6/0x460 [ 52.688308][ T354] bus_for_each_drv+0x175/0x200 [ 52.693158][ T354] __device_attach+0x2a2/0x400 [ 52.697915][ T354] device_initial_probe+0x1a/0x20 [ 52.702935][ T354] bus_probe_device+0xc0/0x1e0 [ 52.707712][ T354] device_add+0xb31/0xed0 [ 52.712035][ T354] usb_new_device+0xd06/0x1620 [ 52.716796][ T354] hub_event+0x29c4/0x4480 [ 52.721210][ T354] process_one_work+0x6be/0xba0 [ 52.726061][ T354] worker_thread+0xa59/0x1200 [ 52.730822][ T354] kthread+0x411/0x500 [ 52.734896][ T354] ret_from_fork+0x1f/0x30 [ 52.739311][ T354] [ 52.741625][ T354] Freed by task 58: [ 52.745415][ T354] kasan_set_track+0x4a/0x70 [ 52.749998][ T354] kasan_set_free_info+0x23/0x40 [ 52.754971][ T354] ____kasan_slab_free+0x125/0x160 [ 52.760074][ T354] __kasan_slab_free+0x11/0x20 [ 52.764851][ T354] slab_free_freelist_hook+0xc2/0x190 [ 52.770248][ T354] kfree+0xc4/0x270 [ 52.774055][ T354] kvfree+0x35/0x40 [ 52.777858][ T354] netdev_freemem+0x3f/0x60 [ 52.782361][ T354] netdev_release+0x7f/0xb0 [ 52.786858][ T354] device_release+0x96/0x1c0 [ 52.791614][ T354] kobject_put+0x18a/0x270 [ 52.796113][ T354] put_device+0x1f/0x30 [ 52.800270][ T354] free_netdev+0x34b/0x450 [ 52.804787][ T354] usbnet_disconnect+0x24b/0x3a0 [ 52.809880][ T354] usb_unbind_interface+0x212/0x8c0 [ 52.815084][ T354] device_release_driver_internal+0x4c1/0x760 [ 52.821165][ T354] device_release_driver+0x19/0x20 [ 52.826280][ T354] bus_remove_device+0x2dd/0x340 [ 52.831232][ T354] device_del+0x696/0xe90 [ 52.835576][ T354] usb_disable_device+0x3a8/0x750 [ 52.840600][ T354] usb_disconnect+0x31e/0x850 [ 52.845277][ T354] hub_event+0x1a96/0x4480 [ 52.849700][ T354] process_one_work+0x6be/0xba0 [ 52.854704][ T354] worker_thread+0xd7b/0x1200 [ 52.859527][ T354] kthread+0x411/0x500 [ 52.863639][ T354] ret_from_fork+0x1f/0x30 [ 52.868071][ T354] [ 52.870393][ T354] Last potentially related work creation: [ 52.876109][ T354] kasan_save_stack+0x3a/0x60 [ 52.880799][ T354] __kasan_record_aux_stack+0xd2/0x100 [ 52.886258][ T354] kasan_record_aux_stack_noalloc+0xb/0x10 [ 52.892338][ T354] insert_work+0x51/0x310 [ 52.896802][ T354] __queue_work+0x8e5/0xc60 [ 52.901443][ T354] queue_work_on+0xd2/0x140 [ 52.905970][ T354] usbnet_link_change+0x189/0x1b0 [ 52.910991][ T354] usbnet_probe+0x1dfd/0x2860 [ 52.915684][ T354] usb_probe_interface+0x5ff/0xae0 [ 52.920790][ T354] really_probe+0x285/0x970 [ 52.925284][ T354] __driver_probe_device+0x198/0x280 [ 52.930599][ T354] driver_probe_device+0x54/0x3e0 [ 52.935938][ T354] __device_attach_driver+0x2a6/0x460 [ 52.941319][ T354] bus_for_each_drv+0x175/0x200 [ 52.946171][ T354] __device_attach+0x2a2/0x400 [ 52.950926][ T354] device_initial_probe+0x1a/0x20 [ 52.955958][ T354] bus_probe_device+0xc0/0x1e0 [ 52.960840][ T354] device_add+0xb31/0xed0 [ 52.965453][ T354] usb_set_configuration+0x19c2/0x1f10 [ 52.970908][ T354] usb_generic_driver_probe+0x91/0x150 [ 52.976442][ T354] usb_probe_device+0x148/0x260 [ 52.981446][ T354] really_probe+0x285/0x970 [ 52.985969][ T354] __driver_probe_device+0x198/0x280 [ 52.991254][ T354] driver_probe_device+0x54/0x3e0 [ 52.996292][ T354] __device_attach_driver+0x2a6/0x460 [ 53.001825][ T354] bus_for_each_drv+0x175/0x200 [ 53.006707][ T354] __device_attach+0x2a2/0x400 [ 53.011556][ T354] device_initial_probe+0x1a/0x20 [ 53.016601][ T354] bus_probe_device+0xc0/0x1e0 [ 53.021369][ T354] device_add+0xb31/0xed0 [ 53.025904][ T354] usb_new_device+0xd06/0x1620 [ 53.030773][ T354] hub_event+0x29c4/0x4480 [ 53.035236][ T354] process_one_work+0x6be/0xba0 [ 53.040102][ T354] worker_thread+0xa59/0x1200 [ 53.044785][ T354] kthread+0x411/0x500 [ 53.048862][ T354] ret_from_fork+0x1f/0x30 [ 53.053401][ T354] [ 53.055795][ T354] The buggy address belongs to the object at ffff88810c3ca000 [ 53.055795][ T354] which belongs to the cache kmalloc-4k of size 4096 [ 53.070004][ T354] The buggy address is located 3168 bytes inside of [ 53.070004][ T354] 4096-byte region [ffff88810c3ca000, ffff88810c3cb000) [ 53.083484][ T354] The buggy address belongs to the page: [ 53.089168][ T354] page:ffffea000430f200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10c3c8 [ 53.099412][ T354] head:ffffea000430f200 order:3 compound_mapcount:0 compound_pincount:0 [ 53.107951][ T354] flags: 0x4000000000010200(slab|head|zone=1) [ 53.114305][ T354] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100043380 [ 53.122891][ T354] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 53.131554][ T354] page dumped because: kasan: bad access detected [ 53.137955][ T354] page_owner tracks the page as allocated [ 53.143666][ T354] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 370, ts 50692545058, free_ts 25420401358 [ 53.164071][ T354] post_alloc_hook+0x192/0x1b0 [ 53.168934][ T354] prep_new_page+0x1c/0x110 [ 53.173431][ T354] get_page_from_freelist+0x2cc5/0x2d50 [ 53.178978][ T354] __alloc_pages+0x18f/0x440 [ 53.183560][ T354] new_slab+0xa1/0x4d0 [ 53.187640][ T354] ___slab_alloc+0x381/0x810 [ 53.192225][ T354] __slab_alloc+0x49/0x90 [ 53.196654][ T354] __kmalloc+0x16a/0x2c0 [ 53.201045][ T354] kvmalloc_node+0x206/0x300 [ 53.205643][ T354] seq_read_iter+0x1fc/0xd30 [ 53.210229][ T354] kernfs_fop_read_iter+0x147/0x470 [ 53.215420][ T354] vfs_read+0x68b/0xbe0 [ 53.219572][ T354] ksys_read+0x140/0x240 [ 53.223806][ T354] __x64_sys_read+0x7b/0x90 [ 53.228302][ T354] x64_sys_call+0x96d/0x9a0 [ 53.232799][ T354] do_syscall_64+0x4c/0xa0 [ 53.237221][ T354] page last free stack trace: [ 53.241878][ T354] free_unref_page_prepare+0x542/0x550 [ 53.247332][ T354] free_unref_page+0xa2/0x550 [ 53.252006][ T354] __free_pages+0x6c/0x100 [ 53.256419][ T354] __free_slab+0xe8/0x1e0 [ 53.260745][ T354] discard_slab+0x29/0x40 [ 53.265071][ T354] __slab_free+0x211/0x290 [ 53.269478][ T354] ___cache_free+0x104/0x120 [ 53.274060][ T354] qlink_free+0x4d/0x90 [ 53.278212][ T354] qlist_free_all+0x5f/0xb0 [ 53.282714][ T354] kasan_quarantine_reduce+0x14a/0x170 [ 53.288182][ T354] __kasan_slab_alloc+0x2f/0xf0 [ 53.293026][ T354] slab_post_alloc_hook+0x4f/0x2b0 [ 53.298131][ T354] kmem_cache_alloc+0xf7/0x260 [ 53.303178][ T354] __alloc_skb+0xe0/0x740 [ 53.307802][ T354] mld_newpack+0x13a/0x9d0 [ 53.312225][ T354] add_grhead+0x5e/0x290 [ 53.316474][ T354] [ 53.318801][ T354] Memory state around the buggy address: [ 53.324441][ T354] ffff88810c3cab00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 53.332496][ T354] ffff88810c3cab80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 53.340553][ T354] >ffff88810c3cac00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 53.348600][ T354] ^ [ 53.355784][ T354] ffff88810c3cac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 53.363863][ T354] ffff88810c3cad00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 53.372000][ T354] ================================================================== [ 53.380063][ T354] Disabling lock debugging due to kernel taint [ 53.393466][ T30] audit: type=1400 audit(1759628564.691:177): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 53.418097][ T30] audit: type=1400 audit(1759628564.711:178): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.440652][ T30] audit: type=1400 audit(1759628564.711:179): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.462106][ T30] audit: type=1400 audit(1759628564.711:180): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.482801][ T30] audit: type=1400 audit(1759628564.711:181): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 53.482818][ T466] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 53.510883][ T30] audit: type=1400 audit(1759628564.711:182): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 53.512574][ T466] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 53.535676][ T355] usb 1-1: Using ep0 maxpacket: 32 [ 53.543451][ T466] usb 5-1: Manufacturer: syz [ 53.558053][ T30] audit: type=1400 audit(1759628564.711:183): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 53.596143][ T466] usb 5-1: config 0 descriptor?? [ 53.690343][ T355] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 53.698669][ T355] usb 1-1: config 0 has no interface number 0 [ 53.704809][ T355] usb 1-1: config 0 interface 184 has no altsetting 0 [ 53.870392][ T355] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 53.879526][ T355] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.887579][ T355] usb 1-1: Product: syz [ 53.891807][ T355] usb 1-1: Manufacturer: syz [ 53.896424][ T355] usb 1-1: SerialNumber: syz [ 53.902701][ T355] usb 1-1: config 0 descriptor?? [ 53.940837][ T355] smsc75xx v1.0.0 [ 54.610349][ T355] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 54.621554][ T355] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 54.800362][ T466] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #100: -71 [ 54.809616][ T466] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71 [ 54.817743][ T466] uclogic 0003:256C:006D.0003: failed probing pen v1 parameters: -71 [ 54.826005][ T466] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 54.833632][ T466] uclogic: probe of 0003:256C:006D.0003 failed with error -71 [ 54.845313][ T466] usb 5-1: USB disconnect, device number 5 [ 55.310400][ T355] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 55.326276][ T355] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 55.335986][ T355] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 55.345438][ T355] smsc75xx: probe of 1-1:0.184 failed with error -61 [ 56.531157][ T466] usb 1-1: USB disconnect, device number 5