last executing test programs: 2.660261985s ago: executing program 2 (id=84): syz_open_procfs(0x0, 0x0) syz_open_dev$usbfs(0x0, 0x75, 0x109301) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.460137456s ago: executing program 2 (id=96): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000687b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2.433536486s ago: executing program 2 (id=97): r0 = syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x329101, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x2c, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.341642686s ago: executing program 4 (id=98): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) signalfd(0xffffffffffffffff, &(0x7f0000001040), 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x8, 0x7, 0x4000000000000e52, 0x1, 0x5479, 0x1041, 0x200000000006, 0x0, 0x1, 0xfffffffffffffffe, 0x100000000, 0xffffffffffffffff, 0x40000000009, 0x8000000000006, 0x800040068], 0x2000, 0x40190}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.174131287s ago: executing program 4 (id=99): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.106477908s ago: executing program 4 (id=100): creat(0x0, 0xd931d3864d39dcdb) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce8514000400e76a686bac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) 1.949394059s ago: executing program 4 (id=101): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x4, 0x6, @remote}, 0x14) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ptype\x00') openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2020) 1.892606239s ago: executing program 4 (id=103): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000380)='task_rename\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000380)='task_rename\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) 1.78343274s ago: executing program 4 (id=105): mlockall(0x7) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) socket(0x27, 0xa, 0x80000001) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000000)) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f0000000280)={0x0, 0x5, 0x57, {0x57, 0x21, "d6d4c329e924d4cb8d78ab0b60c569d49c1d18bace74b6e0f68bba1ea7573756addba4a33a6f7e2889505883f33611cd9add7ae63a9d189a2576a209a0ed192a3c7c7dcaca4cbdf5163c67fe179709ca401fef8310"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x1c, &(0x7f0000000340)={0x40, 0x16, 0x36, "5288fe5e510d9ac9cad237ad72078d59b332d47e8a77ece716d02807cac98d8b59c0111effa9575ae5021a4254a84ac8bcf0565ebcd1"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x7}, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000680)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="401509"], 0x0, 0x0}) 1.385651272s ago: executing program 0 (id=114): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, 0x0) 1.278863832s ago: executing program 0 (id=117): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000000)=[{r1}, {r1, 0x8143}], 0x2, 0x0, 0x0, 0x0) close(0x3) 1.212557663s ago: executing program 0 (id=118): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.133140303s ago: executing program 0 (id=121): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.084721994s ago: executing program 0 (id=122): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000000c0), 0xff, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f00000004c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 962.257724ms ago: executing program 1 (id=123): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xc, 0x3032, 0xffffffffffffffff, 0x4000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1fe, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"b46474f815e8d5535f0887c44335cc824dc6121bc72a77f532ff5dad4d643a9cab29d2310e04be14eb26c0af4985fe45e3b3b0680b3ec92725d74b9716e0f7c3119a2c9a0ae65ff4772e2e12733cb013c4308fe40863480747c0a7ddb9361b1578015ca1bb2c1677ebae096f08345476f567443842946ed946434c75916d1db83fe305920de65bfaf9bd940672216846cb16b8ae67cd3affc61375381f91b3b9f1cc5e38cafe5239aee71dcd481fbe1ecd2547ffbaad4469a74697c28fb9beefa6a5d736712a55eb9110c2cf7964062ba8cbc1c038e84f0f5db7fc7053118bf5221e3efa6fc3edb5d0ca3cde7054dd0751a332520aa8478b1775d552c5cc24d3c2df9eb333e5ca3aa06c1c2cf8526714f5caff2f55b41976fc20b64f1fc61d5b44f50953582a1825d32130a31abfeafd1987317879e29ac51b93c9659e023fff3ddb5e39dd19cc3ef1d883c78b9e073d08a9197fb3717df238b9831831214b186693be9dd2568bb77272e80df5dfed03e8c467627bedfbd93359a9f79a3aa37e873dc1357b37b43d813ea85267b0dc8b1c4cc51bd985328833beb2679b7fb762555bbea2da936b36f8f1673fd5f606b2b6eb23b72bf947206e8dbfeb40ca6f265a3485c8446e0f0da652860b88328073d2282c14b48a7774e62754a968b60e92205e8fafcdd70a55c3c4d1a4821ff44e6e3681f15ae091262e3a3290a24d8ceae30ebbf9d24287bb8a5d73c608d47d287f9e716cf02b4796a83fb0c05e45b89de9ef8bce834e6d7a0be6e30d2c66cb6e640cb01898454ad361bc0701d8fe56113335ae6adec59300db04691cc4a689034272a8e086a32ce7061b4f79fa8afbb48a6ce4b62bdc44af013d78980457e1fa61eb9204818606f4c3b03c0f33cd2a841ac9bc2b73151a96e31ab99e6ec969b5f2c3edd5f9abc69845e487af992758ba445368da93dae1d44360d52a534a88276b8aaf349841d8a4788c60408618437c442308dbf70efeda2e54e9b9e4fe5f76997c9dcb945a26bd75748c85d19ca8b99264dce50580e8d4dbda401dad7df31e9a7a6a3a83bfbdfb5394abd581ac0824fbcd75d2f5205c0b7c9188e6f26bfd97734d9a20433f6cdba9d14a5f32a4d97a57f4603b21146fd1aebf082e863d463c224ad623c17d8043d3bf083f0322408dd6ead6915ac6a4222ab51480eb6e11a8913348219515170d9df90d72d7363bbda3e327d19f98c0a856f98076380e788e602e8a2ae0a1930786874dc21a2e99abda15f35457cf1dcb440c4b41350d0eda352aad7f57a0adc8a6914da06460635ed21c4c11cd1a8ec778064c9f62efba2927828b23f94b16619a5520731c2c40ab8583c9f2e73233d74b84f4877ce6b35bb1180300"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 873.492635ms ago: executing program 2 (id=125): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r3, 0x0, 0xb) splice(r2, 0x0, r5, 0x0, 0x80, 0x4) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r4, 0x0, 0x0) 846.131685ms ago: executing program 1 (id=126): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x9, 0x8, 0x40, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000480), 0x1000, r2}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r2, &(0x7f0000000100), &(0x7f0000000580)=""/4096}, 0x20) 816.717525ms ago: executing program 1 (id=127): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, 0x0, 0xb) splice(r4, 0x0, r3, 0x0, 0x1000, 0x0) splice(r1, 0x0, r5, 0x0, 0x80, 0x0) write$binfmt_aout(r2, 0x0, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 786.044355ms ago: executing program 3 (id=128): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) madvise(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x4) 703.738305ms ago: executing program 1 (id=129): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x101) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xb) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0xa200002d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) copy_file_range(r1, &(0x7f0000000080), r0, 0x0, 0xfffffffffffffff8, 0x0) 570.056586ms ago: executing program 1 (id=130): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8800}, 0x0) 555.325816ms ago: executing program 1 (id=131): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) io_pgetevents(0x0, 0x1ae0, 0x0, 0x0, 0x0, 0x0) 366.312708ms ago: executing program 3 (id=132): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="03000000000000000000210000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) 354.897628ms ago: executing program 3 (id=133): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 284.694808ms ago: executing program 3 (id=134): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10003, 0x1, 0x100000, 0x2000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000394000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x4, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) 234.170958ms ago: executing program 0 (id=135): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000400)=@abs={0x0, 0x0, 0xe22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000540)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="240003"], 0x10e0}}, 0x0) 165.224859ms ago: executing program 3 (id=136): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000280)=[{0x6, 0x1, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2000473d, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000008c0)="3bcbdb0fcfa026557d2ea2b0fa34b7b3ddf4e60fe678186210e935989ea66d7c81fcd371943f18f118107da91cf43c5479ca82428e90b96b3635a98e39939ef5109511d949224164c044f18fb4d64db5c0404f01b99fba50263ee03e82a28fcd751660b0cab68a62a8b6eac29946c988fc747092d35e935ad8442feece96b4ee481cf95a8feb6ec3d6e5cff03f59eb97136d7cb400c1d0ed4ed9b83090abb113aa4e9260", 0xa4}, {&(0x7f0000000000)="742f311ac0f14c14d8a5e88c95eabd83a225186431237ba56d1054bcfd53f0ab68", 0x21}], 0x2}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000000f00)="52348bf9812fc081678b5760a4c4967393fd8939aaf12a894c5424df616c4eea14fbac2dad114a75c405d89fafa5715b56abba4bbceca456d8225e3f6eb57a03287e74c7bd74e40e3fda3150f92d181e7c82cb2f8ea0416fc4c0f111161cdb9a52911925644e25f871d02f403c", 0x6d}], 0x1}}], 0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) recvfrom$inet(r0, &(0x7f00000002c0)=""/234, 0xea, 0x20, 0x0, 0x0) 146.250599ms ago: executing program 3 (id=137): open(0x0, 0x15b341, 0xfe) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 27.674119ms ago: executing program 2 (id=138): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@base={0xa, 0x5, 0x2, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x8, 0x1, 0x7f, 0x1, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 2 (id=139): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.202' (ED25519) to the list of known hosts. [ 20.827261][ T28] audit: type=1400 audit(1761759116.690:64): avc: denied { mounton } for pid=275 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.828288][ T275] cgroup: Unknown subsys name 'net' [ 20.849934][ T28] audit: type=1400 audit(1761759116.690:65): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.877224][ T28] audit: type=1400 audit(1761759116.720:66): avc: denied { unmount } for pid=275 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.877407][ T275] cgroup: Unknown subsys name 'devices' [ 21.020888][ T275] cgroup: Unknown subsys name 'hugetlb' [ 21.026477][ T275] cgroup: Unknown subsys name 'rlimit' [ 21.128795][ T28] audit: type=1400 audit(1761759116.990:67): avc: denied { setattr } for pid=275 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.151957][ T28] audit: type=1400 audit(1761759116.990:68): avc: denied { mounton } for pid=275 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.176650][ T28] audit: type=1400 audit(1761759116.990:69): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.195514][ T277] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.208821][ T28] audit: type=1400 audit(1761759117.080:70): avc: denied { relabelto } for pid=277 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.235008][ T28] audit: type=1400 audit(1761759117.080:71): avc: denied { write } for pid=277 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.261546][ T28] audit: type=1400 audit(1761759117.130:72): avc: denied { read } for pid=275 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.261681][ T275] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.287190][ T28] audit: type=1400 audit(1761759117.130:73): avc: denied { open } for pid=275 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.647025][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.654093][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.661489][ T284] device bridge_slave_0 entered promiscuous mode [ 22.679111][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.686307][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.693672][ T284] device bridge_slave_1 entered promiscuous mode [ 22.703667][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.710752][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.718030][ T286] device bridge_slave_0 entered promiscuous mode [ 22.725751][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.732813][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.740208][ T286] device bridge_slave_1 entered promiscuous mode [ 22.760233][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.767265][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.774620][ T283] device bridge_slave_0 entered promiscuous mode [ 22.783206][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.790283][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.797535][ T283] device bridge_slave_1 entered promiscuous mode [ 22.864823][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.871915][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.879165][ T287] device bridge_slave_0 entered promiscuous mode [ 22.898255][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.905364][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.912752][ T287] device bridge_slave_1 entered promiscuous mode [ 22.959191][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.966283][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.973728][ T285] device bridge_slave_0 entered promiscuous mode [ 22.994472][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.001546][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.008792][ T285] device bridge_slave_1 entered promiscuous mode [ 23.068401][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.075469][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.082756][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.089783][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.144058][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.151110][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.158349][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.165375][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.184303][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.191958][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.199137][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.206905][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.214457][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.242475][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.250890][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.257892][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.265282][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.273378][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.280395][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.288025][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.308805][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.319457][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.344272][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.351803][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.359127][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.367418][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.374447][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.381877][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.389985][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.396980][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.404389][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.412489][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.419503][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.426814][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.434966][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.441976][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.449319][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.457158][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.465098][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.495052][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.503202][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.517519][ T283] device veth0_vlan entered promiscuous mode [ 23.534431][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.542408][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.550083][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.557407][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.565830][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.573394][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.580908][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.589017][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.596055][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.603699][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.611976][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.618981][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.626546][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.648866][ T284] device veth0_vlan entered promiscuous mode [ 23.655552][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.663181][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.670748][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.678938][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.687445][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.695591][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.703526][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.711639][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.719597][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.727373][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.735473][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.742905][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.758195][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.766703][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.775095][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.782129][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.789577][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.797834][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.806225][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.814773][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.822996][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.830036][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.837492][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.850052][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.857961][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.865986][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.874222][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.886612][ T287] device veth0_vlan entered promiscuous mode [ 23.893520][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.901170][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.910433][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.918462][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.926426][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.934465][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.944137][ T284] device veth1_macvtap entered promiscuous mode [ 23.956481][ T283] device veth1_macvtap entered promiscuous mode [ 23.966683][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.974481][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.982811][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.991324][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.998826][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.007274][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.029358][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.037672][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.046045][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.046337][ T284] request_module fs-gadgetfs succeeded, but still no fs? [ 24.054819][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.070436][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.078640][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.087078][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.095041][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.103144][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.111435][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.119825][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.127947][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.136342][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.143848][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.154047][ T286] device veth0_vlan entered promiscuous mode [ 24.163679][ T285] device veth0_vlan entered promiscuous mode [ 24.172501][ T287] device veth1_macvtap entered promiscuous mode [ 24.179547][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.188092][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.197163][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.205876][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.217424][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.241860][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.244649][ T338] serio: Serial port ptm0 [ 24.249590][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.261329][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.269809][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.278055][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.286380][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.305718][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.320400][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.337813][ T285] device veth1_macvtap entered promiscuous mode [ 24.370490][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.381889][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.382150][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.382395][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.382710][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.383166][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.383382][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.384540][ T286] device veth1_macvtap entered promiscuous mode [ 24.426205][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.426434][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.426648][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.426859][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.427098][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.536844][ T358] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8'. [ 25.280818][ T380] Driver unsupported XDP return value 0 on prog (id 15) dev N/A, expect packet loss! [ 25.350264][ T384] ======================================================= [ 25.350264][ T384] WARNING: The mand mount option has been deprecated and [ 25.350264][ T384] and is ignored by this kernel. Remove the mand [ 25.350264][ T384] option from the mount to silence this warning. [ 25.350264][ T384] ======================================================= [ 25.745465][ T408] loop0: detected capacity change from 0 to 128 [ 25.816888][ T413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31'. [ 25.847521][ T408] syz.0.27: attempt to access beyond end of device [ 25.847521][ T408] loop0: rw=0, sector=121, nr_sectors = 920 limit=128 [ 25.911307][ T415] loop2: detected capacity change from 0 to 512 [ 25.919514][ T415] EXT4-fs: dax option not supported [ 25.931969][ T417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.34'. [ 25.944128][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 25.944154][ T28] audit: type=1400 audit(1761759121.810:132): avc: denied { create } for pid=414 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 25.978007][ T417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.34'. [ 25.994487][ T28] audit: type=1400 audit(1761759121.840:133): avc: denied { write } for pid=414 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 26.037986][ T28] audit: type=1400 audit(1761759121.840:134): avc: denied { nlmsg_write } for pid=414 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 26.063275][ T28] audit: type=1400 audit(1761759121.870:135): avc: denied { lock } for pid=420 comm="syz.4.37" path="socket:[16600]" dev="sockfs" ino=16600 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 26.087041][ T28] audit: type=1400 audit(1761759121.870:136): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 26.107388][ T28] audit: type=1400 audit(1761759121.960:137): avc: denied { shutdown } for pid=422 comm="syz.2.36" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.107456][ T432] xt_hashlimit: max too large, truncated to 1048576 [ 26.153231][ T28] audit: type=1400 audit(1761759122.020:138): avc: denied { setattr } for pid=435 comm="syz.4.40" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.269596][ T28] audit: type=1400 audit(1761759122.140:139): avc: denied { write } for pid=442 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 26.319465][ T28] audit: type=1400 audit(1761759122.160:140): avc: denied { execute } for pid=440 comm="syz.2.42" path="/10/file0/cgroup.controllers" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 26.370055][ T28] audit: type=1400 audit(1761759122.210:141): avc: denied { read } for pid=442 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 26.406251][ T450] loop1: detected capacity change from 0 to 512 [ 26.460363][ T450] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 26.509402][ T450] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.596799][ T454] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.798749][ T455] EXT4-fs warning (device loop1): verify_group_input:169: Last group not full [ 26.980730][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 27.011655][ T470] device syzkaller0 entered promiscuous mode [ 27.063656][ T475] kvm [474]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x9f06 [ 27.072926][ T475] kvm [474]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xc401 [ 27.280205][ T284] EXT4-fs (loop1): unmounting filesystem. [ 27.366101][ T500] netlink: 16 bytes leftover after parsing attributes in process `syz.4.63'. [ 27.434786][ T507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.65'. [ 27.445624][ T507] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 27.458881][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 27.467370][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 27.475751][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 27.484423][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 27.492809][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 27.501225][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 27.509890][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 27.518163][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 27.579581][ T510] loop2: detected capacity change from 0 to 128 [ 27.605797][ T510] syz.2.67: attempt to access beyond end of device [ 27.605797][ T510] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 27.633639][ T510] syz.2.67: attempt to access beyond end of device [ 27.633639][ T510] loop2: rw=524288, sector=897, nr_sectors = 144 limit=128 [ 27.647472][ T510] syz.2.67: attempt to access beyond end of device [ 27.647472][ T510] loop2: rw=0, sector=1025, nr_sectors = 8 limit=128 [ 27.660658][ T510] syz.2.67: attempt to access beyond end of device [ 27.660658][ T510] loop2: rw=0, sector=1025, nr_sectors = 8 limit=128 [ 27.673866][ T6] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 27.673897][ T510] syz.2.67: attempt to access beyond end of device [ 27.673897][ T510] loop2: rw=0, sector=1025, nr_sectors = 8 limit=128 [ 27.694819][ T510] syz.2.67: attempt to access beyond end of device [ 27.694819][ T510] loop2: rw=0, sector=1025, nr_sectors = 8 limit=128 [ 27.813917][ T521] loop3: detected capacity change from 0 to 1024 [ 27.842717][ T521] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 27.861082][ T6] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 27.874539][ T6] usb 2-1: config 0 has no interface number 0 [ 27.882850][ T521] 9pnet_fd: Insufficient options for proto=fd [ 27.888957][ T6] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.923548][ T529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=529 comm=syz.4.75 [ 27.937511][ T6] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.948644][ T286] EXT4-fs (loop3): unmounting filesystem. [ 27.962725][ T525] loop2: detected capacity change from 0 to 40427 [ 27.968282][ T6] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 27.981879][ T525] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 27.981904][ T525] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 27.999443][ T6] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 28.011800][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.012553][ T525] F2FS-fs (loop2): Found nat_bits in checkpoint [ 28.020856][ T6] usb 2-1: config 0 descriptor?? [ 28.052958][ T536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=536 comm=syz.3.76 [ 28.056495][ T534] loop0: detected capacity change from 0 to 512 [ 28.103847][ T534] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 28.127562][ T534] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002] [ 28.130990][ T525] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 28.136198][ T534] System zones: 1-12 [ 28.143446][ T525] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 28.154544][ T534] EXT4-fs (loop0): orphan cleanup on readonly fs [ 28.177952][ T534] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.77: invalid indirect mapped block 12 (level 1) [ 28.207867][ T525] bridge0: port 3(syz_tun) entered blocking state [ 28.224514][ T525] bridge0: port 3(syz_tun) entered disabled state [ 28.231196][ T534] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.77: invalid indirect mapped block 2 (level 2) [ 28.246684][ T525] device syz_tun entered promiscuous mode [ 28.247696][ T506] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 28.252702][ T534] EXT4-fs (loop0): 1 truncate cleaned up [ 28.260258][ T525] bridge0: port 3(syz_tun) entered blocking state [ 28.265575][ T534] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 28.271961][ T525] bridge0: port 3(syz_tun) entered forwarding state [ 28.359120][ T283] EXT4-fs (loop0): unmounting filesystem. [ 28.395281][ T561] netlink: 24 bytes leftover after parsing attributes in process `syz.4.88'. [ 28.422127][ T561] netlink: 56 bytes leftover after parsing attributes in process `syz.4.88'. [ 28.505230][ T6] usbhid 2-1:0.1: can't add hid device: -71 [ 28.523245][ T6] usbhid: probe of 2-1:0.1 failed with error -71 [ 28.560161][ T6] usb 2-1: USB disconnect, device number 2 [ 28.595929][ T579] kvm: pic: non byte write [ 28.869298][ T60] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 28.913949][ T595] netlink: 'syz.4.100': attribute type 13 has an invalid length. [ 28.947550][ T595] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 28.965767][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 28.974869][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.984293][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 28.993849][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 29.002306][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 29.010745][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 29.019054][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 29.037436][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 29.064818][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 29.075251][ T60] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 29.085659][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 29.095609][ T60] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 29.126334][ T60] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 29.138599][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.147105][ T60] usb 3-1: Product: syz [ 29.156316][ T603] syz.4.103[603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 29.156379][ T603] syz.4.103[603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 29.159238][ T60] usb 3-1: Manufacturer: syz [ 29.185517][ T60] usb 3-1: SerialNumber: syz [ 29.192294][ T60] usb 3-1: config 0 descriptor?? [ 29.198233][ T60] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 29.206979][ T603] syz.4.103[603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 29.207037][ T603] syz.4.103[603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 29.409352][ T60] scsi host1: usb-storage 3-1:0.0 [ 29.512887][ T622] xt_bpf: check failed: parse error [ 29.569835][ T426] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 29.618069][ T19] usb 3-1: USB disconnect, device number 2 [ 29.618161][ T628] syz.0.113 (628) used greatest stack depth: 21472 bytes left [ 29.695602][ T633] loop3: detected capacity change from 0 to 128 [ 29.715731][ T631] syz.0.114 (631) used greatest stack depth: 19776 bytes left [ 29.750438][ T426] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 29.760278][ T426] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 29.771680][ T426] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 29.780791][ T426] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.788781][ T426] usb 5-1: Product: syz [ 29.793022][ T426] usb 5-1: Manufacturer: syz [ 29.797831][ T426] usb 5-1: SerialNumber: syz [ 29.803184][ T426] usb 5-1: config 0 descriptor?? [ 29.808393][ T611] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 29.815639][ T611] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 30.030479][ T611] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 30.037688][ T611] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 30.101052][ T655] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 30.729267][ T609] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 30.851655][ T426] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 30.870486][ T426] dm9601 5-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet, 52:88:fe:5e:51:0d [ 30.889158][ T426] usb 5-1: USB disconnect, device number 2 [ 30.899809][ T426] dm9601 5-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet [ 30.911585][ T609] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.925692][ T609] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 30.949262][ T609] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 30.979261][ T609] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.989802][ T609] usb 2-1: config 0 descriptor?? [ 30.995473][ T60] ================================================================== [ 31.003544][ T60] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x130 [ 31.011356][ T60] Read of size 8 at addr ffff88811e086cf0 by task kworker/1:2/60 [ 31.019069][ T60] [ 31.021386][ T60] CPU: 1 PID: 60 Comm: kworker/1:2 Not tainted syzkaller #0 [ 31.028662][ T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 31.038714][ T60] Workqueue: events kernfs_notify_workfn [ 31.044353][ T60] Call Trace: [ 31.047627][ T60] [ 31.050544][ T60] __dump_stack+0x21/0x24 [ 31.054859][ T60] dump_stack_lvl+0xee/0x150 [ 31.059428][ T60] ? __cfi_dump_stack_lvl+0x8/0x8 [ 31.064443][ T60] ? __list_del_entry_valid+0xa6/0x130 [ 31.069883][ T60] print_address_description+0x71/0x200 [ 31.075417][ T60] print_report+0x4a/0x60 [ 31.079735][ T60] kasan_report+0x122/0x150 [ 31.084225][ T60] ? __list_del_entry_valid+0xa6/0x130 [ 31.089668][ T60] __asan_report_load8_noabort+0x14/0x20 [ 31.095285][ T60] __list_del_entry_valid+0xa6/0x130 [ 31.100549][ T60] process_one_work+0x4b9/0xc40 [ 31.105398][ T60] worker_thread+0xa29/0x11f0 [ 31.110062][ T60] kthread+0x281/0x320 [ 31.114113][ T60] ? __cfi_worker_thread+0x10/0x10 [ 31.119202][ T60] ? __cfi_kthread+0x10/0x10 [ 31.123772][ T60] ret_from_fork+0x1f/0x30 [ 31.128164][ T60] [ 31.131158][ T60] [ 31.133455][ T60] Allocated by task 426: [ 31.137668][ T60] kasan_set_track+0x4b/0x70 [ 31.142233][ T60] kasan_save_alloc_info+0x25/0x30 [ 31.147319][ T60] __kasan_kmalloc+0x95/0xb0 [ 31.151908][ T60] __kmalloc_node+0xb2/0x1e0 [ 31.156472][ T60] kvmalloc_node+0x294/0x480 [ 31.161033][ T60] alloc_netdev_mqs+0x8d/0xf90 [ 31.165768][ T60] alloc_etherdev_mqs+0x37/0x40 [ 31.170591][ T60] usbnet_probe+0x20c/0x2780 [ 31.175173][ T60] usb_probe_interface+0x610/0xaf0 [ 31.180257][ T60] really_probe+0x2cb/0x960 [ 31.184730][ T60] __driver_probe_device+0x198/0x280 [ 31.189984][ T60] driver_probe_device+0x54/0x3e0 [ 31.195004][ T60] __device_attach_driver+0x2e9/0x4a0 [ 31.200360][ T60] bus_for_each_drv+0x183/0x210 [ 31.205192][ T60] __device_attach+0x2a2/0x400 [ 31.209928][ T60] device_initial_probe+0x1a/0x20 [ 31.214924][ T60] bus_probe_device+0xc0/0x1f0 [ 31.219665][ T60] device_add+0xb4d/0xef0 [ 31.223972][ T60] usb_set_configuration+0x19c2/0x1f10 [ 31.229405][ T60] usb_generic_driver_probe+0x91/0x150 [ 31.234839][ T60] usb_probe_device+0x159/0x270 [ 31.239663][ T60] really_probe+0x2cb/0x960 [ 31.244139][ T60] __driver_probe_device+0x198/0x280 [ 31.249391][ T60] driver_probe_device+0x54/0x3e0 [ 31.254383][ T60] __device_attach_driver+0x2e9/0x4a0 [ 31.259724][ T60] bus_for_each_drv+0x183/0x210 [ 31.264543][ T60] __device_attach+0x2a2/0x400 [ 31.269276][ T60] device_initial_probe+0x1a/0x20 [ 31.274268][ T60] bus_probe_device+0xc0/0x1f0 [ 31.279004][ T60] device_add+0xb4d/0xef0 [ 31.283309][ T60] usb_new_device+0xa70/0x1520 [ 31.288045][ T60] hub_event+0x2850/0x4350 [ 31.292455][ T60] process_one_work+0x71f/0xc40 [ 31.297276][ T60] worker_thread+0xa29/0x11f0 [ 31.301922][ T60] kthread+0x281/0x320 [ 31.305961][ T60] ret_from_fork+0x1f/0x30 [ 31.310349][ T60] [ 31.312650][ T60] Freed by task 426: [ 31.316512][ T60] kasan_set_track+0x4b/0x70 [ 31.321076][ T60] kasan_save_free_info+0x31/0x50 [ 31.326072][ T60] ____kasan_slab_free+0x132/0x180 [ 31.331151][ T60] __kasan_slab_free+0x11/0x20 [ 31.335884][ T60] slab_free_freelist_hook+0xc2/0x190 [ 31.341230][ T60] __kmem_cache_free+0xb7/0x1b0 [ 31.346138][ T60] kfree+0x6f/0xf0 [ 31.349832][ T60] kvfree+0x35/0x40 [ 31.353614][ T60] netdev_freemem+0x3f/0x60 [ 31.358088][ T60] netdev_release+0x7f/0xb0 [ 31.362573][ T60] device_release+0xa4/0x1d0 [ 31.367133][ T60] kobject_put+0x19d/0x280 [ 31.371519][ T60] put_device+0x1f/0x30 [ 31.375647][ T60] free_netdev+0x392/0x490 [ 31.380034][ T60] usbnet_disconnect+0x25a/0x3b0 [ 31.384944][ T60] usb_unbind_interface+0x223/0x8d0 [ 31.390113][ T60] device_release_driver_internal+0x508/0x820 [ 31.396145][ T60] device_release_driver+0x19/0x20 [ 31.401224][ T60] bus_remove_device+0x2ee/0x350 [ 31.406134][ T60] device_del+0x6a4/0xeb0 [ 31.410432][ T60] usb_disable_device+0x3a8/0x750 [ 31.415428][ T60] usb_disconnect+0x31e/0x860 [ 31.420074][ T60] hub_event+0x1a78/0x4350 [ 31.424462][ T60] process_one_work+0x71f/0xc40 [ 31.429281][ T60] worker_thread+0xd2e/0x11f0 [ 31.433926][ T60] kthread+0x281/0x320 [ 31.437988][ T60] ret_from_fork+0x1f/0x30 [ 31.442375][ T60] [ 31.444675][ T60] Last potentially related work creation: [ 31.450358][ T60] kasan_save_stack+0x3a/0x60 [ 31.455003][ T60] __kasan_record_aux_stack+0xb6/0xc0 [ 31.460349][ T60] kasan_record_aux_stack_noalloc+0xb/0x10 [ 31.466219][ T60] insert_work+0x51/0x300 [ 31.470523][ T60] __queue_work+0x9b1/0xd30 [ 31.474997][ T60] queue_work_on+0xd2/0x140 [ 31.479470][ T60] usbnet_link_change+0x189/0x1b0 [ 31.484465][ T60] usbnet_probe+0x1d55/0x2780 [ 31.489113][ T60] usb_probe_interface+0x610/0xaf0 [ 31.494194][ T60] really_probe+0x2cb/0x960 [ 31.498666][ T60] __driver_probe_device+0x198/0x280 [ 31.503922][ T60] driver_probe_device+0x54/0x3e0 [ 31.508915][ T60] __device_attach_driver+0x2e9/0x4a0 [ 31.514258][ T60] bus_for_each_drv+0x183/0x210 [ 31.519077][ T60] __device_attach+0x2a2/0x400 [ 31.523808][ T60] device_initial_probe+0x1a/0x20 [ 31.528798][ T60] bus_probe_device+0xc0/0x1f0 [ 31.533531][ T60] device_add+0xb4d/0xef0 [ 31.537833][ T60] usb_set_configuration+0x19c2/0x1f10 [ 31.543264][ T60] usb_generic_driver_probe+0x91/0x150 [ 31.548694][ T60] usb_probe_device+0x159/0x270 [ 31.553516][ T60] really_probe+0x2cb/0x960 [ 31.557986][ T60] __driver_probe_device+0x198/0x280 [ 31.563238][ T60] driver_probe_device+0x54/0x3e0 [ 31.568230][ T60] __device_attach_driver+0x2e9/0x4a0 [ 31.573570][ T60] bus_for_each_drv+0x183/0x210 [ 31.578391][ T60] __device_attach+0x2a2/0x400 [ 31.583129][ T60] device_initial_probe+0x1a/0x20 [ 31.588121][ T60] bus_probe_device+0xc0/0x1f0 [ 31.592856][ T60] device_add+0xb4d/0xef0 [ 31.597176][ T60] usb_new_device+0xa70/0x1520 [ 31.601913][ T60] hub_event+0x2850/0x4350 [ 31.606303][ T60] process_one_work+0x71f/0xc40 [ 31.611134][ T60] worker_thread+0xa29/0x11f0 [ 31.615778][ T60] kthread+0x281/0x320 [ 31.619817][ T60] ret_from_fork+0x1f/0x30 [ 31.624203][ T60] [ 31.626497][ T60] The buggy address belongs to the object at ffff88811e086000 [ 31.626497][ T60] which belongs to the cache kmalloc-4k of size 4096 [ 31.640516][ T60] The buggy address is located 3312 bytes inside of [ 31.640516][ T60] 4096-byte region [ffff88811e086000, ffff88811e087000) [ 31.653929][ T60] [ 31.656225][ T60] The buggy address belongs to the physical page: [ 31.662603][ T60] page:ffffea0004782000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11e080 [ 31.672814][ T60] head:ffffea0004782000 order:3 compound_mapcount:0 compound_pincount:0 [ 31.681104][ T60] flags: 0x4000000000010200(slab|head|zone=1) [ 31.687147][ T60] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100043380 [ 31.695697][ T60] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 31.704246][ T60] page dumped because: kasan: bad access detected [ 31.710638][ T60] page_owner tracks the page as allocated [ 31.716332][ T60] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 334, tgid 334 (udevd), ts 29717227480, free_ts 29671153641 [ 31.738282][ T60] post_alloc_hook+0x1f5/0x210 [ 31.743036][ T60] prep_new_page+0x1c/0x110 [ 31.747515][ T60] get_page_from_freelist+0x2c7b/0x2cf0 [ 31.753033][ T60] __alloc_pages+0x1c3/0x450 [ 31.757594][ T60] alloc_slab_page+0x6e/0xf0 [ 31.762165][ T60] new_slab+0x98/0x3d0 [ 31.766207][ T60] ___slab_alloc+0x6bd/0xb20 [ 31.770768][ T60] __slab_alloc+0x5e/0xa0 [ 31.775072][ T60] __kmem_cache_alloc_node+0x203/0x2c0 [ 31.780504][ T60] kmalloc_trace+0x29/0xb0 [ 31.784895][ T60] kernfs_iop_get_link+0x65/0x620 [ 31.789902][ T60] pick_link+0x6dd/0xe30 [ 31.794127][ T60] step_into+0xc4c/0xf30 [ 31.798342][ T60] path_openat+0x1651/0x2f50 [ 31.802900][ T60] do_filp_open+0x1c1/0x3c0 [ 31.807373][ T60] do_sys_openat2+0x185/0x7e0 [ 31.812023][ T60] page last free stack trace: [ 31.816925][ T60] free_unref_page_prepare+0x742/0x750 [ 31.822354][ T60] free_unref_page+0x8f/0x530 [ 31.827003][ T60] __free_pages+0x67/0x100 [ 31.831388][ T60] __free_slab+0xca/0x1a0 [ 31.835690][ T60] __unfreeze_partials+0x160/0x190 [ 31.840773][ T60] put_cpu_partial+0xa9/0x100 [ 31.845421][ T60] __slab_free+0x1c4/0x280 [ 31.849810][ T60] ___cache_free+0xbf/0xd0 [ 31.854197][ T60] qlist_free_all+0xc6/0x140 [ 31.858754][ T60] kasan_quarantine_reduce+0x14a/0x170 [ 31.864180][ T60] __kasan_slab_alloc+0x24/0x80 [ 31.869001][ T60] slab_post_alloc_hook+0x4f/0x2d0 [ 31.874082][ T60] kmem_cache_alloc+0x16e/0x330 [ 31.878904][ T60] getname_flags+0xb9/0x500 [ 31.883380][ T60] getname+0x19/0x20 [ 31.887240][ T60] do_sys_openat2+0xcb/0x7e0 [ 31.891804][ T60] [ 31.894097][ T60] Memory state around the buggy address: [ 31.899692][ T60] ffff88811e086b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 31.907739][ T60] ffff88811e086c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 31.915767][ T60] >ffff88811e086c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 31.923796][ T60] ^ [ 31.931480][ T60] ffff88811e086d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 31.939509][ T60] ffff88811e086d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 31.947540][ T60] ================================================================== [ 31.955579][ T60] Disabling lock debugging due to kernel taint [ 32.008893][ T28] kauditd_printk_skb: 72 callbacks suppressed [ 32.008906][ T28] audit: type=1400 audit(1761759127.870:214): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 32.037048][ T28] audit: type=1400 audit(1761759127.870:215): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.058335][ T28] audit: type=1400 audit(1761759127.870:216): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.079541][ T28] audit: type=1400 audit(1761759127.870:217): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.100059][ T28] audit: type=1400 audit(1761759127.870:218): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.120463][ T28] audit: type=1400 audit(1761759127.870:219): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.143305][ T28] audit: type=1400 audit(1761759127.870:220): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.166086][ T28] audit: type=1400 audit(1761759128.030:221): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 32.194871][ T609] usbhid 2-1:0.0: can't add hid device: -71 [ 32.201537][ T609] usbhid: probe of 2-1:0.0 failed with error -71 [ 32.221248][ T609] usb 2-1: USB disconnect, device number 3