last executing test programs: 4.006581091s ago: executing program 2 (id=14): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x10000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}]}, 0x44}}, 0x0) 3.869211441s ago: executing program 2 (id=15): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='hsr0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000007580)=[{{&(0x7f0000000480)={0x2, 0x4e20, @loopback}, 0x10, 0x0}}, {{&(0x7f0000000600)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000001cc0)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x2) 3.868676451s ago: executing program 2 (id=16): socketpair$unix(0x1, 0x2, 0x0, 0x0) epoll_create1(0x0) syz_open_dev$loop(0x0, 0x5, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x10000, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) sync_file_range(0xffffffffffffffff, 0x1, 0xfffffffffffffffe, 0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18) getdents64(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x22}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mount$9p_fd(0x0, 0x0, 0x0, 0x1, 0x0) r6 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x11, 0x4000) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) 3.868463171s ago: executing program 4 (id=17): socket$packet(0x11, 0x2, 0x300) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/packet\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x4c, 0x0) 3.81456721s ago: executing program 4 (id=19): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, "76cd8a", 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @dev}}}}, 0x0) 3.286757739s ago: executing program 4 (id=20): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x9, 0x12) 2.808122187s ago: executing program 4 (id=23): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x38) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r5, 0x5607, 0x2) ioctl$KDSETMODE(r4, 0x4b3a, 0x1) ioctl$TCXONC(r4, 0x4b3a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a010200000000000000"], 0xe8}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') socket(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000240)=0x2, 0x4) 2.807175248s ago: executing program 2 (id=24): syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x17, 0x78, 0xaf, 0x20, 0x7c4, 0xa002, 0xc0dd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8a, 0x0, 0x0, 0x9f, 0x83, 0x37}}]}}]}}, 0x0) 2.489835067s ago: executing program 3 (id=25): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a64000000060a0b0400000000000000000200000038000480340001800b0001006e756d67656e00002400028008000240000000020800034000000001080001400004001508000440000000070900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) 2.348976036s ago: executing program 3 (id=27): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x238, 0x268, 0x0, {}, [@common=@unspec=@time={{0x38}, {0xcd, 0x0, 0x8e3d, 0x10e18, 0xfffffffd, 0x6, 0x3}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3, 0x0, 0x20}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) 2.320177256s ago: executing program 3 (id=28): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x1}, 0x0, 0x2}, 0xe) 2.285789126s ago: executing program 3 (id=29): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}]}], {0x14}}, 0xb8}}, 0x0) 2.285546496s ago: executing program 3 (id=30): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 1.994644655s ago: executing program 0 (id=32): socket$inet_tcp(0x2, 0x1, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x402, &(0x7f0000002740)={[{@stripe={'stripe', 0x3d, 0x3}}, {@nodelalloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@nodiscard}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTdv91nUwhvoghT04mUvX1h8TfJiPosOBvs/Q3pXRZBlNOtY6cHtwL77IEEQciH+A7z4O/wH/ioEOhoyiD75EbnrTZWvSZm22Zubzgduec89Nzz0593t6bk5CAhhaE9mPQsSrEfFtEnG4rWw08sKJteNWH16fzbYkGo3P/koiyfe1jk/y3wfzzCsR8dvXEScLG+utLa8slMrldDHPT9YrVyZryyunLlVK8+l8enl6ZubMOzPT77/3bt/a+ub5f3749O5HZ745vvr9L/eP3E7ibBzKy9rbsQM32jMTMZE/J2Nx9okDp/pQ2SBJdvsE2JaRPM7HIhsDDsdIHvXA/99XEdEAhlQi/mFIteYBrXv7Pt0HvzAefLh2A7Sx/aNrr43Evua90YHV5LE7o+x+d7wP9Wd1/PrnndvZFv17HQJgSzduRsTp0dGN41+Sj3/bd7qHY56sw/gHz8/dbP7zVqf5T2F9/hMd5j8HO8Tudmwd/4X7faimq2z+90HH+e/6otX4SJ57qTnnG0suXiqn2dj2ckSciLG9WX6z9Zwzq/ca3cra53/ZltXfmgvm53F/dO/jj5kr1Us7aXO7BzcjXus4/03W+z/p0P/Z83G+xzqOpXde71a2dfufrcbPEW907P9HK1rJ5uuTk83rYbJ1VWz0961jv3erf7fbn/X/gc3bP560r9fWnr6On/b9m3Yr2+71vyf5vJnek++7VqrXF6ci9iSfbNw//eixrXzr+Kz9J45vPv51uv73R8QXPbb/1tFbXQ8dhP6fe6r+f/rEvY+//LFb/b31/9vN1Il8Ty/jX68nuJPnDgAAAAAAAAZNISIORVIorqcLhWJx7f0dR+NAoVyt1U9erC5dnovmZ2XHY6zQWuk+3PZ+iKn8/bCt/PQT+ZmIOBIR343sb+aLs9Xy3G43HgAAAAAAAAAAAAAAAAAAAAbEwYh9nT7/n/ljZLfPDnjmfOU3DK/u8Z+X9OObnoCB5P8/DC/xD8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8AAAAAAAAAAAAAAAAAAAAAAAAAAADQV+fPncu2xurD67NZfu7q8tJC9eqpubS2UKwszRZnq4tXivPV6nw5Lc5WK1v9vXK1emVqOpauTdbTWn2ytrxyoVJduly/cKlSmk8vpGPPpVUAAAAAAAAAAAAAAAAAAADwYqktryyUyuV0UUJiW4nRwTgNiT4ndntkAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBH/gsAAP//sQI4ww==") sendto$packet(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) fallocate(r0, 0x0, 0xb7d4, 0x1001f0) 1.942287895s ago: executing program 4 (id=33): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109024c00010106a00009040000ff02020000052406000005240002000d240f01000000000600000800042401"], 0x0) 1.785372405s ago: executing program 1 (id=35): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2, 0x300}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 1.615077584s ago: executing program 0 (id=36): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0xd646, 0x7, 0xf, 0x120000, 0x1fe, 0x0, 0x58, 0x8000000000000001, 0x2, 0x10003, 0x101, 0x5, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.612547924s ago: executing program 1 (id=37): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x14, 0x0, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) 1.588703504s ago: executing program 1 (id=38): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x769}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ppoll(&(0x7f0000001400)=[{r0, 0x4047, 0x700}], 0x1, 0x0, 0x0, 0x0) close(r0) munmap(&(0x7f0000954000/0x1000)=nil, 0x1000) 1.566884374s ago: executing program 1 (id=39): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000000000)=0x8000, 0x4) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}, {&(0x7f0000000300)=""/78, 0x4e}, {&(0x7f0000000400)=""/133}], 0x9}, 0x40020000) read$FUSE(0xffffffffffffffff, &(0x7f00000024c0)={0x2020}, 0x2020) lseek(0xffffffffffffffff, 0x4, 0x1) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/25, 0x19) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x840004, &(0x7f0000002080), 0x1, 0x57d, &(0x7f00000018c0)="$eJzs3c9vFFUcAPDvm/6gULSFGBUP2sQYSJSWFjDEeIA7Ifjj5sVKC0GWH6E12moiJHgxMV48mHjyIN79A5To1ZM3D148GRJiDEcTa2Y7Uxa6W9qy7bTM55NMO2/ebr5vdvPdN/P2zWwAtTWS/8ki9kXElRQx1FLXG0XlyOLj7v7zyZl8SbGw8NbfKVKxrXx8Kv4PFk8eiIjffk6xt2d53Jm5+QuTjcb01aI8NnvxytjM3PzB8xcnz02fm7408erEfJf39eSN9z8c+vzUO999828a//6PUymOx+6irnU/umUkRpZek1b563qs28Eq0lPsT+tbnHorbBBrUr5/fRHxTAxFT9x784biszcqbRywoRZSxAJQU0n+Q02VxwHluf1GnAcDW9OdE4sDAMvzv3dxbDAGmmMDu+6maB3WSRFxqAvx8xi//nLqRr7EBo3DAe1dux4Rz7bL/9TMzeHmKH6e/9l9+Z9FxOnif779zXXGH3mgLP9h8zxK/r/bkv/vrTO+/AcAAAAAAIDuuXUiIl5p9/1ftjT/J9rM/xmMiONdiP/w7/+y210IA7Rx50TE623n/2blQ4Z7itITzfkAfens+cb0oYh4MiIORN+OvDy+QoyDX+z9ulNd6/y/fMnjl3MBi3bc7t1x/3OmJmcnH2WfgUV3rkc813b+b1rq/1Ob/j//PLiyyhh7X7p5ulPdw/Mf2CgL30bsb9v/37tzRepwf45jR48cPTZ+aKx5PDBWHhUs9/zHX/7YKb78h+rk/f+ulfN/OLXer2dm7TEOz/UudKpb7/F/f3q7ecuZ/mLbR5Ozs1fHI/rTyeXbJ9beZngclflQ5kue/wdeXHn8r93x/86IuLbKmE//N/hnpzr9P1Qnz/+pNfX/a1+ZuDn8U6f4q+v/jzT79APFFuN/sLLVJmjV7QQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7SiLiN2RstGl9SwbHY0YjIinYlfWuDwz+/LZyx9cmsrrmr//n5W/9Du0WE7l7/8Pt5QnHigfjog9EfFVz85mefTM5cZU1TsPAAAAAAAAAAAAAAAAAAAAW8Rgh+v/c3/1VN06YMP1Vt0AoDLL8z9V0g5g8+n/ob7kP9SX/If6kv9QX/IfausH+Q/1Jf+hvlbIf1MAAQAAAABg+9nzwq3fU0Rce21nc8n1F3V9lbYM2GjZjnZbP938hgCbzvf7UF+m/kF9OccHHnbDr4F1PxMAAAAAAAAAAAAA6Jb9+1z/D3WVVd0AoDKu/4f6cv0/1JdzfMD1/wAAAAAAAAAAAACw9c3MzV+YbDSmrz62KwMRsQWaYcXKtlqp+pMJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAo/R8AAP//cioirw==") 1.479036444s ago: executing program 0 (id=40): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = userfaultfd(0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000600)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f00002b3000/0x2000)=nil, 0x800000}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) 1.478832774s ago: executing program 0 (id=41): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0xc0505405, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c00000010000304002000003c0e77897399f655", @ANYRES32=0x0, @ANYBLOB="15020000000000003c0012800b00010067726574617000002c00028006000f000700000006000f0000800000060011004e220000080007007f000001050013000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x6c}, 0x1, 0xba01}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 1.122714363s ago: executing program 3 (id=42): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f00000002c0)='pagemap\x00') syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902"], 0x0) read$msr(r2, 0x0, 0x0) 694.622902ms ago: executing program 1 (id=43): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x101080, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000180)={0x79, 0x41, "7b4354159ad56614eda2e0bd8081c48a998e64bb821b9a5ecbd36312c142016cfb82713a5ed29e9af7292ca0790447b5cee490ec5470d167fd727cbc54d53884a7"}) 646.922822ms ago: executing program 1 (id=44): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000180000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) pipe2(0x0, 0x2100) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r5, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000040), 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1c, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4689, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x3, 0x35, &(0x7f00000006c0)=""/53, 0x41000, 0x41, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x1, 0x4, 0x3, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x47, @void, @value}, 0x94) read$FUSE(0xffffffffffffffff, &(0x7f0000001740)={0x2020}, 0x2020) fstat(0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r3, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000340)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4dc, &(0x7f0000000d80)="$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") 551.920031ms ago: executing program 0 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x800, 0x1d7) setxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000100)=@v3={0x3000000, [{0xfffffff8, 0xc}, {0x7, 0x1}], 0xee00}, 0x18, 0x0) openat(r0, &(0x7f00000001c0)='./file1\x00', 0x5, 0x0) 377.365181ms ago: executing program 2 (id=46): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0x2, 0x4) 90.87955ms ago: executing program 0 (id=47): setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "0000000108653904030405ffffff09c56a3000", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 78.151519ms ago: executing program 2 (id=48): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0x1, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 0s ago: executing program 4 (id=49): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@u, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x81) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000f80)="5791bd5c3c0b4b4e0c7429b7c818", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.91' (ED25519) to the list of known hosts. [ 22.539714][ T23] audit: type=1400 audit(1737848034.979:66): avc: denied { mounton } for pid=344 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.541289][ T344] cgroup1: Unknown subsys name 'net' [ 22.562154][ T23] audit: type=1400 audit(1737848034.979:67): avc: denied { mount } for pid=344 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.567960][ T344] cgroup1: Unknown subsys name 'net_prio' [ 22.589134][ T23] audit: type=1400 audit(1737848035.009:68): avc: denied { read } for pid=146 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 22.595101][ T344] cgroup1: Unknown subsys name 'devices' [ 22.623208][ T23] audit: type=1400 audit(1737848035.069:69): avc: denied { unmount } for pid=344 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.789490][ T344] cgroup1: Unknown subsys name 'hugetlb' [ 22.795079][ T344] cgroup1: Unknown subsys name 'rlimit' [ 22.966063][ T23] audit: type=1400 audit(1737848035.399:70): avc: denied { setattr } for pid=344 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=10816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.989265][ T23] audit: type=1400 audit(1737848035.399:71): avc: denied { mounton } for pid=344 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.995354][ T348] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.014071][ T23] audit: type=1400 audit(1737848035.399:72): avc: denied { mount } for pid=344 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.045077][ T23] audit: type=1400 audit(1737848035.469:73): avc: denied { relabelto } for pid=348 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.070339][ T23] audit: type=1400 audit(1737848035.469:74): avc: denied { write } for pid=348 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.098730][ T23] audit: type=1400 audit(1737848035.539:75): avc: denied { read } for pid=344 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.125613][ T344] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.629395][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.636240][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.643702][ T356] device bridge_slave_0 entered promiscuous mode [ 23.652067][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.658912][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.666237][ T356] device bridge_slave_1 entered promiscuous mode [ 23.760432][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.767414][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.774530][ T354] device bridge_slave_0 entered promiscuous mode [ 23.784669][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.791545][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.798709][ T354] device bridge_slave_1 entered promiscuous mode [ 23.820986][ T359] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.827833][ T359] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.834998][ T359] device bridge_slave_0 entered promiscuous mode [ 23.863898][ T359] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.870912][ T359] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.878283][ T359] device bridge_slave_1 entered promiscuous mode [ 23.909786][ T358] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.916619][ T358] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.924022][ T358] device bridge_slave_0 entered promiscuous mode [ 23.946822][ T358] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.953930][ T358] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.961180][ T358] device bridge_slave_1 entered promiscuous mode [ 23.989532][ T357] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.996360][ T357] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.003999][ T357] device bridge_slave_0 entered promiscuous mode [ 24.010883][ T357] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.017799][ T357] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.025547][ T357] device bridge_slave_1 entered promiscuous mode [ 24.132274][ T359] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.139129][ T359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.146235][ T359] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.153030][ T359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.170806][ T358] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.177655][ T358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.184778][ T358] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.191555][ T358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.229211][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.236031][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.243186][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.249940][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.277922][ T103] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.285332][ T103] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.292307][ T103] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.299312][ T103] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.306227][ T103] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.313178][ T103] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.321842][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.329119][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.336270][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.344391][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.352309][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.359137][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.366293][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.395587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.403041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.411235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.419575][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.426386][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.444248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.452018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.459817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.468050][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.474857][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.498136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.506076][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.512913][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.520344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.537142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.544863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.553528][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.560360][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.568128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.576076][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.582916][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.610921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.618695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.626397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.634809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.643392][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.650228][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.660535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.668388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.676319][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.683152][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.696467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.703852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.725017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.733890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.742177][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.749011][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.767199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.774784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.783227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.791835][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.798670][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.806466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.814627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.822417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.830673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.838875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.846911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.855116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.862893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.884661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.892912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.901193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.909356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.917200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.925005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.947406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.955196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.962970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.972538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.980615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.989068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.997217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.005097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.016616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.025132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.045537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.053755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.062158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.070414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.078236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.086181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.102300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.110306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.118538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.126513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.134850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.143366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.153423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.161298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.186579][ T359] request_module fs-gadgetfs succeeded, but still no fs? [ 25.195826][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.215496][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.258145][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.266384][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.285849][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.295644][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.313982][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.322096][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.330464][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.340917][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.058215][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.066402][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.110764][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.122102][ T393] attempt to access beyond end of device [ 26.122102][ T393] loop0: rw=0, want=1041, limit=128 [ 26.122367][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.141930][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.156222][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.192543][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.206565][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.228401][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.241823][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.364089][ T383] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.837231][ T383] usb 2-1: Using ep0 maxpacket: 32 [ 26.930465][ T432] UHID_CREATE from different security context by process 9 (syz.0.18), this is not allowed. [ 27.333965][ T383] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 27.364963][ T383] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.378825][ T383] usb 2-1: Product: syz [ 27.382798][ T383] usb 2-1: Manufacturer: syz [ 27.387525][ T383] usb 2-1: SerialNumber: syz [ 27.393797][ T383] usb 2-1: config 0 descriptor?? [ 27.495758][ T439] EXT4-fs (loop0): Ignoring removed orlov option [ 27.501980][ T439] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 27.553869][ T439] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 27.579693][ T23] kauditd_printk_skb: 48 callbacks suppressed [ 27.579709][ T23] audit: type=1400 audit(1737848040.019:124): avc: denied { mount } for pid=438 comm="syz.0.21" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.689797][ T23] audit: type=1400 audit(1737848040.079:125): avc: denied { write } for pid=442 comm="syz.4.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 27.711651][ T23] audit: type=1400 audit(1737848040.079:126): avc: denied { write } for pid=442 comm="syz.4.23" name="ip6_tables_matches" dev="proc" ino=4026532641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 27.735732][ T23] audit: type=1400 audit(1737848040.129:127): avc: denied { write } for pid=438 comm="syz.0.21" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.757670][ T23] audit: type=1400 audit(1737848040.129:128): avc: denied { add_name } for pid=438 comm="syz.0.21" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.779874][ T23] audit: type=1400 audit(1737848040.129:129): avc: denied { create } for pid=438 comm="syz.0.21" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 27.790511][ T18] usb 2-1: USB disconnect, device number 2 [ 27.799975][ T23] audit: type=1400 audit(1737848040.129:130): avc: denied { read write open } for pid=438 comm="syz.0.21" path="/3/file1/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 27.827868][ T347] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.835110][ T23] audit: type=1400 audit(1737848040.129:131): avc: denied { remove_name } for pid=438 comm="syz.0.21" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.857171][ T23] audit: type=1400 audit(1737848040.129:132): avc: denied { unlink } for pid=438 comm="syz.0.21" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 27.902451][ T23] audit: type=1400 audit(1737848040.339:133): avc: denied { create } for pid=456 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.035669][ T466] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 28.210092][ T466] syz.0.26 (466) used greatest stack depth: 20312 bytes left [ 28.217347][ T347] usb 3-1: Using ep0 maxpacket: 32 [ 28.337049][ T347] usb 3-1: config 0 has an invalid interface number: 138 but max is 0 [ 28.377427][ T347] usb 3-1: config 0 has no interface number 0 [ 28.384289][ T472] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000003,nodelalloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,nodiscard,jqfmt=vfsv1,,errors=continue [ 28.479276][ T482] [ 28.481486][ T482] ********************************************************** [ 28.489471][ T482] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 28.496707][ T482] ** ** [ 28.504386][ T482] ** trace_printk() being used. Allocating extra memory. ** [ 28.511709][ T482] ** ** [ 28.519338][ T482] ** This means that this is a DEBUG kernel and it is ** [ 28.526511][ T482] ** unsafe for production use. ** [ 28.534409][ T482] ** ** [ 28.541804][ T347] usb 3-1: New USB device found, idVendor=07c4, idProduct=a002, bcdDevice=c0.dd [ 28.544844][ T472] syz.0.32 (472) used greatest stack depth: 19064 bytes left [ 28.550858][ T347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.557877][ T482] ** If you see this message and you are not debugging ** [ 28.566103][ T347] usb 3-1: Product: syz [ 28.575246][ T482] ** the kernel, report this immediately to your vendor! ** [ 28.577206][ T347] usb 3-1: Manufacturer: syz [ 28.586768][ T482] ** ** [ 28.589112][ T347] usb 3-1: SerialNumber: syz [ 28.597511][ T482] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 28.607487][ T482] ********************************************************** [ 28.618310][ T347] usb 3-1: config 0 descriptor?? [ 28.647694][ T486] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.667615][ T347] ums-datafab 3-1:0.138: USB Mass Storage device detected [ 28.691304][ T347] ums-datafab 3-1:0.138: Quirks match for vid 07c4 pid a002: 1 [ 28.698865][ T486] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 28.744492][ T497] mmap: syz.0.40 (497) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 28.747815][ T18] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 29.017993][ T503] device bridge_slave_0 left promiscuous mode [ 29.023965][ T503] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.201531][ T503] device bridge_slave_1 left promiscuous mode [ 29.207721][ T503] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.214480][ T74] usb 3-1: USB disconnect, device number 2 [ 29.297007][ T18] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.307001][ T18] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 29.317591][ T18] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 29.407063][ T18] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 29.415980][ T18] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 29.423976][ T18] usb 5-1: SerialNumber: syz [ 29.544744][ T347] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 29.768637][ T514] ====================================================== [ 29.768637][ T514] WARNING: the mand mount option is being deprecated and [ 29.768637][ T514] will be removed in v5.15! [ 29.768637][ T514] ====================================================== [ 29.857179][ T347] usb 4-1: Using ep0 maxpacket: 8 [ 29.936115][ T514] EXT4-fs (loop1): 1 orphan inode deleted [ 29.941824][ T514] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 29.960636][ T514] ext4 filesystem being mounted at /8/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 30.017233][ T347] usb 4-1: config 0 has no interfaces? [ 30.137354][ T347] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 30.199258][ T347] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 30.347308][ T347] usb 4-1: Product: syz [ 30.396183][ T347] usb 4-1: SerialNumber: syz [ 30.405952][ T530] kasan: CONFIG_KASAN_INLINE enabled [ 30.411201][ T530] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 30.419110][ T530] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 30.425835][ T530] CPU: 0 PID: 530 Comm: syz.4.49 Not tainted 5.4.289-syzkaller-00025-g49530c73f82d #0 [ 30.435201][ T530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 30.445127][ T530] RIP: 0010:bpf_skb_ancestor_cgroup_id+0x114/0x270 [ 30.451444][ T530] Code: 02 00 00 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 5d c6 0a fe 48 8b 1b 48 8d bb 1c 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 2f 01 00 00 8b ab 1c 01 00 00 89 ef 44 [ 30.470879][ T530] RSP: 0000:ffff8881e7087630 EFLAGS: 00010203 [ 30.476775][ T530] RAX: 0000000000000023 RBX: 0000000000000000 RCX: 0000000000000002 [ 30.484589][ T530] RDX: ffffc90002547000 RSI: 0000000000000080 RDI: 000000000000011c [ 30.492409][ T530] RBP: 0000000000000080 R08: ffffffff83896e1a R09: ffff8881e7087760 [ 30.497535][ T18] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 30.500211][ T530] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 30.500218][ T530] R13: fffffff8ecac9070 R14: 0000000000000003 R15: ffff8881e7541812 [ 30.500225][ T530] FS: 00007f86238f96c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 30.500231][ T530] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.500242][ T530] CR2: 000000110c2ea01b CR3: 00000001eaba0000 CR4: 00000000003406b0 [ 30.510170][ T18] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 30.515664][ T530] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.524237][ T18] cdc_acm: probe of 5-1:1.0 failed with error -22 [ 30.532237][ T530] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.532241][ T530] Call Trace: [ 30.532259][ T530] ? __die+0xb4/0x100 [ 30.532265][ T530] ? die+0x26/0x50 [ 30.532274][ T530] ? do_general_protection+0x266/0x3c0 [ 30.532280][ T530] ? do_trap+0x340/0x340 [ 30.532295][ T530] ? preempt_schedule_irq+0xe7/0x140 [ 30.544742][ T18] usb 5-1: USB disconnect, device number 2 [ 30.546481][ T530] ? general_protection+0x28/0x30 [ 30.546492][ T530] ? bpf_skb_ancestor_cgroup_id+0xda/0x270 [ 30.546501][ T530] ? bpf_skb_ancestor_cgroup_id+0x114/0x270 [ 30.546521][ T530] bpf_prog_87d68679e0500b66+0xde3/0x1000 [ 30.546537][ T530] bpf_test_run+0x2ae/0x6c0 [ 30.631405][ T530] ? bpf_ctx_init+0x1a0/0x1a0 [ 30.635875][ T530] ? bpf_prog_test_run_skb+0x716/0xf00 [ 30.641173][ T530] bpf_prog_test_run_skb+0x73c/0xf00 [ 30.646290][ T530] ? __bpf_trace_bpf_test_finish+0x20/0x20 [ 30.651924][ T530] ? __bpf_prog_get+0x296/0x310 [ 30.656615][ T530] ? __bpf_trace_bpf_test_finish+0x20/0x20 [ 30.662252][ T530] __se_sys_bpf+0x2e37/0xbcb0 [ 30.666767][ T530] ? plist_check_list+0x20d/0x220 [ 30.671621][ T530] ? plist_del+0x3bf/0x3e0 [ 30.675882][ T530] ? _raw_spin_trylock_bh+0x190/0x190 [ 30.681083][ T530] ? wake_up_q+0xa8/0xf0 [ 30.685160][ T530] ? futex_wake+0x6ce/0x840 [ 30.689502][ T530] ? __x64_sys_bpf+0x80/0x80 [ 30.693927][ T530] ? futex_wait+0x890/0x890 [ 30.698271][ T530] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 30.703564][ T530] ? _raw_spin_lock+0x1b0/0x1b0 [ 30.708360][ T530] ? check_preemption_disabled+0x9f/0x320 [ 30.713913][ T530] ? do_futex+0x13fe/0x19f0 [ 30.718252][ T530] ? debug_smp_processor_id+0x20/0x20 [ 30.723460][ T530] ? _raw_spin_unlock_irqrestore+0x57/0x80 [ 30.729104][ T530] ? queue_map_peek_elem+0x1e0/0x280 [ 30.734222][ T530] ? check_preemption_disabled+0x9f/0x320 [ 30.739775][ T530] ? queue_map_pop_elem+0x390/0x390 [ 30.744809][ T530] ? check_preemption_disabled+0x9f/0x320 [ 30.750365][ T530] ? debug_smp_processor_id+0x20/0x20 [ 30.755571][ T530] ? check_preemption_disabled+0x9f/0x320 [ 30.761126][ T530] ? check_preemption_disabled+0x9f/0x320 [ 30.766682][ T530] ? debug_smp_processor_id+0x20/0x20 [ 30.771888][ T530] ? debug_smp_processor_id+0x20/0x20 [ 30.777099][ T530] ? switch_mm_irqs_off+0x6b5/0xab0 [ 30.782131][ T530] ? _raw_spin_unlock_irq+0x4a/0x60 [ 30.787163][ T530] ? finish_task_switch+0x130/0x590 [ 30.792198][ T530] ? check_preemption_disabled+0x153/0x320 [ 30.797841][ T530] ? debug_smp_processor_id+0x20/0x20 [ 30.803050][ T530] ? schedule+0x143/0x1d0 [ 30.807217][ T530] do_syscall_64+0xca/0x1c0 [ 30.811555][ T530] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 30.817281][ T530] RIP: 0033:0x7f862528ed29 [ 30.821534][ T530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 30.840975][ T530] RSP: 002b:00007f86238f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 30.849221][ T530] RAX: ffffffffffffffda RBX: 00007f86254a7fa0 RCX: 00007f862528ed29 [ 30.857028][ T530] RDX: 0000000000000050 RSI: 00000000200005c0 RDI: 000000000000000a [ 30.864842][ T530] RBP: 00007f86253102a0 R08: 0000000000000000 R09: 0000000000000000 [ 30.872658][ T530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.880469][ T530] R13: 0000000000000000 R14: 00007f86254a7fa0 R15: 00007ffdc3322b28 [ 30.888281][ T530] Modules linked in: [ 30.892084][ T530] ---[ end trace 347e51815162921f ]--- [ 30.897345][ T530] RIP: 0010:bpf_skb_ancestor_cgroup_id+0x114/0x270 [ 30.903650][ T530] Code: 02 00 00 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 5d c6 0a fe 48 8b 1b 48 8d bb 1c 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 2f 01 00 00 8b ab 1c 01 00 00 89 ef 44 [ 30.923120][ T530] RSP: 0000:ffff8881e7087630 EFLAGS: 00010203 [ 30.929006][ T530] RAX: 0000000000000023 RBX: 0000000000000000 RCX: 0000000000000002 [ 30.936801][ T530] RDX: ffffc90002547000 RSI: 0000000000000080 RDI: 000000000000011c [ 30.944632][ T530] RBP: 0000000000000080 R08: ffffffff83896e1a R09: ffff8881e7087760 [ 30.952437][ T530] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 30.960248][ T530] R13: fffffff8ecac9070 R14: 0000000000000003 R15: ffff8881e7541812 [ 30.968065][ T530] FS: 00007f86238f96c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 30.976828][ T530] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.983252][ T530] CR2: 000000110c2ea01b CR3: 00000001eaba0000 CR4: 00000000003406b0 [ 30.991062][ T530] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.998885][ T530] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.006662][ T530] Kernel panic - not syncing: Fatal exception [ 31.012786][ T530] Kernel Offset: disabled [ 31.016913][ T530] Rebooting in 86400 seconds..