last executing test programs: 47m55.501222582s ago: executing program 0 (id=601): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b000000000000000000"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x30) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$inet6(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r7}, 0x18) sendto$inet6(r5, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) 47m53.921302128s ago: executing program 0 (id=605): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000380)={r5, r6+60000000}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900"], 0x48) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) 47m51.502831546s ago: executing program 0 (id=610): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x5, 0x8, 0x0, '\x00', {0x10000, 0xffff, 0x4, 0xff, 0x0, r2, 0x6000, '\x00', 0x4, 0x1, 0x8, 0x3, {0xbd7e, 0x709b}, {0x200, 0x3}, {0x7f, 0x7}, {0x9, 0x7}, 0x0, 0x10000, 0xfffffff7, 0x9}}}, 0x130) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680), &(0x7f00000006c0), 0x9, r1}, 0x38) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) sendto$inet(r0, &(0x7f0000000140)="f52027e688f2bad05dfe91c16a6f6788d6701aec26fba4535d20b68f6950248a14fc7e6a202037467c9d41621b2b9cb0ea7db3daabf7073424229495298985d391ba04207960ef11851f70b91f70f1db989b6e40619f1b83fea803ecc0abe4505a6e591dcdce34e921bf890a1dd932dae552077a751bfebfb2b9295b3355cc435d7a4485e9f1902b5422945b6479145b5e98a79a0db62378a25df7a300b197180854402de64139621df1ee37f029", 0xae, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000014c0)=@base={0x9, 0x4, 0x8, 0xacc, 0x0, 0x1}, 0x50) 47m50.642513221s ago: executing program 0 (id=616): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x45, 0x1, 0xa, [{@rand_addr=0x64010102, 0x7}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x70}, 0x0) setresgid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) read$FUSE(0xffffffffffffffff, &(0x7f00000041c0)={0x2020}, 0x2020) sendmsg$netlink(r5, 0x0, 0x881) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 47m49.53244908s ago: executing program 0 (id=621): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000380)={r5, r6+60000000}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900"], 0x48) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) 47m48.094263622s ago: executing program 0 (id=626): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400), 0xc, &(0x7f0000000480)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="e00000001b00000226bd7000fbdbdf250a010102000000000000000000000000ac1414bb0000000000000000000000004e2400084e24f999020000203c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000008000000000000000010000000000000000000000fffffffffffffffffffffffff6ffffffffffffff050000000000000075d4000000000000030000000000000008000000000000005a1600000000000009000000000000000400000000000000000001010000000000000000000000000a001000000000000000000014000d00200100003a4700"/152], 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x80001, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r4, 0x5608, 0x3) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0xc73f, 0x81, 0x1}) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x310) unshare(0x64000600) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) 47m32.58631518s ago: executing program 32 (id=626): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400), 0xc, &(0x7f0000000480)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="e00000001b00000226bd7000fbdbdf250a010102000000000000000000000000ac1414bb0000000000000000000000004e2400084e24f999020000203c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000008000000000000000010000000000000000000000fffffffffffffffffffffffff6ffffffffffffff050000000000000075d4000000000000030000000000000008000000000000005a1600000000000009000000000000000400000000000000000001010000000000000000000000000a001000000000000000000014000d00200100003a4700"/152], 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x80001, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r4, 0x5608, 0x3) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$eJzs3U9oHNUfAPDvzCb59U9+JhURWxQDHipIt9larHpqe7GHggU9iHhoaDc1dNOEJAUTemjBi1BB1KuHXgTP3iV3byKoN48iVJGIJyEyu7PJmuwmIWSdJPP5wOy+N2+T9747vMx7M/NIAKU1lr2kEScj4noSMdJRNhB54Vjrcyt/3LuRbUmsrr71exJJvq/9+SR/P55njkTEd5cjnqxsrnd+cen2RKNRn8vzZxemZ8/OLy6dmZqeuFW/Vb9TO/fq+Qvjr9XO1/Ys1odfffbLlatvPvvxh++/Mvl940wSF2M4L+uMY6+Mxdjad9Ip+14v7HVlBRroOPYcLJX8+A1GxNMxEpW812dGYuphoY0D+mq1ErEKlFSi/0NJtccB7bl9P+bB+9njS60J0Ob4B1rXRuJIc250bCXpmBm15ruje1B/Vsff9059kW3Rp+sQW7n/ICKe6RZ/0mzbaPMqThZ/+q/404gYz9+z/ed2Wf/YhvxBiv9iR/yXd1l/0fEDUE7Ll1on8s3nv3Rt/BNdxj/DXc5du1H0+a/3+G89/kqP8d+1Hdbx80dXPu1V1jn+y7as/vZY8L/w+EHEqa7xJ2vxJ13iz8Y913dYxxs//HalV1nR8a8+ijjddf6zfkcr2fr+5NnJqUZ9vPXatY5vvn3vy171Fx1/dvyP9Yh/q+Of7ZvdYR1fX3s03ats+/jTX4eSt5upoXzPBxMLC3O1iKHk6ub920xE2p9p/44s/hdf2Lr/d4v/aDZ32GH8s+/cXtl9/P2VxX9zl8f/kx3W8de7d5/rVVZ0/AAAAAAAAHCYpM1nOZK0upZO02q1tYb3qTiWNmbmF16anLl752brmY/RGEzbd7pHWvkky9fy52Hb+XMb8i9HxImI+LxytJmv3php3Cw6eAAAAAAAAAAAAAAAAAAAANgnjm9Y//9npbX+HyiJgaIbABRG/4fy0v+hvPR/KC/9H8pL/4fy0v+hvPR/KC/9H8pL/4fy0v8BAAAA4FA68fzyT0lE3H/9aHPLDOVlg4W2DOi3tOgGAIWpFN0AoDBu/UN5meMDyTblR3oVLG/3kwAAAAAAAAAAAADAXjl90vp/KCvr/6G8rP+H8rL+H8rLHB+w/h8AAAAAAAAAAAAA9r/h5pak1Xwt8HCkabUa8f+IGI3BZHKqUR+PiCci4sfK4P+yfK3oRgMAAAAAAAAAAAAAAAAAAMAhM7+4dHui0ajPSUhISKwliv7LBAAAAAAAAAAAAAAAAAAA5bO+6LfolgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAcdb//3//EkXHCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcTP8EAAD//wugIGI=") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0xc73f, 0x81, 0x1}) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x310) unshare(0x64000600) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.817285774s ago: executing program 3 (id=12156): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06"], 0x48) 8.882781726s ago: executing program 4 (id=12161): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_emit_ethernet(0x2a, &(0x7f00000006c0)={@random="5b4af5dd3aa5", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @local, @remote, @remote}}}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x2c, 0x65, 0x0, 0x7, 0x6, 0x0, @multicast2, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x10, 0x6071, 0x0, 0xe7, {[@sack={0x5, 0x2}]}}}}}}}, 0x0) sendto$inet(r1, &(0x7f0000000580)="14", 0xfffffffffffffe96, 0x10008095, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) prlimit64(0x0, 0xb, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.52000211s ago: executing program 4 (id=12165): socket$inet6(0xa, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() (async) r1 = inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000021) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="ba7e344f9a9bbaf049cfe22a448d4cd344f1d9a1e2d347bf67a7a2df7aee1d473f37da2acca9add115ad616427942b72ca7844b6c11a8f689575199c2cbca7286055410e239eb6780b1f291e9141bffb5be11b15683f1a2dd625bace7ad99bbf2ab371aef64363aa38ab4b123fd3cad4e7c4edf034b7914497a843ed3df0b8494812a09412abb9a100c6bcb9685f3b8d696ae9a81b67416f9ef8ba5f159ab12f0221ed020bd91ac2dc585860bc88d14d7201bf03995a58f42e0d062489e7428d77ba466524be75e679f0fa6828fbc273b67b74d1e80f", @ANYRES8=r1, @ANYRES32=r1, @ANYBLOB="a075fe5c6daf64ffc1d6ab7819a6f8572f93945e0ed56abf84f2ddf4bb28df265df81fb4c0ef0986129dffdbe76ef05fa691d0c85744deb527a9716db6", @ANYRESOCT=r1, @ANYRES64, @ANYRESDEC], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0}, 0x94) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r2, 0x0, 0xe, 0x0, &(0x7f0000000ac0)="ddc937981007901a80379c3e0800", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6708c9d301ee9bb1fc0697c51b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008100000083000000bf0900000065000055090100000000009500000000e00000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 7.233863868s ago: executing program 4 (id=12167): socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x1000003, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0xffffffffffffffe0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x6}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a", 0xc8}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c", 0x66}], 0x8, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x50) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x20000004) sendto$packet(r8, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5088a8", 0x5b2, 0x0, &(0x7f0000000140)={0x11, 0x86dd, r10, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x3b, 0x7, 0x0, 0x987, 0x9, @remote, @local, 0x0, 0x700, 0x2, 0x4}}) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r11, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) 7.032473318s ago: executing program 1 (id=12169): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000100)={{0x2c, @rand_addr=0x64010101, 0x4e22, 0x0, 'dh\x00', 0x1c, 0x0, 0x4a}, {@empty, 0x4e24, 0x4b46c3d66a719c4, 0x18, 0x610, 0x9}}, 0x44) (async) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xe, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0xfffffffb}]}}]}, 0x38}}, 0x4048000) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0xfa, 0x3}, 0x2) (async) r2 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x38, &(0x7f00000000c0)=0x86, 0x4) (async) syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002240)=""/17, 0x15}, 0x8e0f}], 0x400029c, 0x40010142, 0x0) 6.986404312s ago: executing program 5 (id=12170): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x16, &(0x7f0000000580)=ANY=[], 0x0, 0xae, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0xfffffd00, &(0x7f0000000000)='}\x00') madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) syz_open_procfs(0xffffffffffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180)) 4.135972913s ago: executing program 1 (id=12173): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_emit_ethernet(0x2a, &(0x7f00000006c0)={@random="5b4af5dd3aa5", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @local, @remote, @remote}}}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x2c, 0x65, 0x0, 0x7, 0x6, 0x0, @multicast2, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x10, 0x6071, 0x0, 0xe7, {[@sack={0x5, 0x2}]}}}}}}}, 0x0) sendto$inet(r1, &(0x7f0000000580)="14", 0xfffffffffffffe96, 0x10008095, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) prlimit64(0x0, 0xb, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.107695106s ago: executing program 5 (id=12174): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x18) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs2/custom1\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) (async) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000001c00)={0xffffffffffffffce, 0x0}, 0xfffffffffffffe04) (async) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002580)={0x1c, 0xc, &(0x7f0000002540)=ANY=[@ANYBLOB="180000000000007e2c786d00000000000098a59549cb64730432f4dde870119c00000007000000", @ANYRES32=r8, @ANYRES32=r2, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa045}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvfrom$unix(r5, &(0x7f0000000300)=""/213, 0xd5, 0x40010042, &(0x7f00000024c0)=@abs={0x1, 0x0, 0x8004}, 0x6e) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000440)='afs_make_fs_call1\x00', 0xffffffffffffffff, 0x0, 0x14c88f55}, 0x18) r9 = socket$inet(0x2, 0x80000, 0x80004) setsockopt$sock_int(r9, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$FUSE(r10, &(0x7f0000000480)={0x2020}, 0x1784) ioctl$UI_DEV_CREATE(r10, 0x5501) 4.106341736s ago: executing program 2 (id=12175): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000040)) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x30, 0x25, 0x2, 0x70ff}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0xfe, 0x0, 0xa1a}]}, 0x10) (async) sendmmsg(r0, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b40)="97a797c5", 0x4}], 0x1}}], 0x1, 0x4000000) 4.038569662s ago: executing program 2 (id=12176): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) getgid() lstat(0x0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000018c0)="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", 0x2000, &(0x7f0000001640)={&(0x7f0000000640)={0x50, 0x0, 0x2, {0x7, 0x2b, 0xffffff00, 0x1400, 0x1, 0x0, 0x5d846443, 0xd1ef, 0x0, 0x0, 0x1, 0xfffffffc}}, 0x0, &(0x7f00000006c0)={0x18, 0x0, 0x9, {0xffffffffffffbc01}}, 0x0, 0x0, &(0x7f0000000780)={0x28, 0x0, 0x10, {{0x101, 0x0, 0x2, r1}}}, &(0x7f00000007c0)={0x60, 0x0, 0x67b6, {{0xd072, 0xfffffffffffffffa, 0x4, 0x100, 0xc, 0xfffffffe, 0x149, 0x8391}}}, &(0x7f0000000840)={0x18, 0xfffffffffffffff5, 0x0, {0x8}}, 0x0, &(0x7f00000008c0)={0x20, 0x0, 0x0, {0x0, 0x12}}, &(0x7f0000000940)={0x78, 0x0, 0xffffffffffff8001, {0x7, 0x7, 0x0, {0x1, 0x4fe, 0x5, 0x2, 0x100000001, 0x1800000000, 0x9, 0x5, 0x100, 0xa000, 0x1, 0x0, 0x0, 0xffffffff, 0x6}}}, 0x0, 0x0, &(0x7f00000038c0)=ANY=[], 0x0, 0x0, &(0x7f0000001500)={0x130, 0x0, 0xfffffffffffffffb, {0x2, 0x2, 0x0, '\x00', {0x10000, 0x6, 0x8, 0x2, 0x0, r3, 0x2000, '\x00', 0x800, 0xffffffffffffffff, 0x2, 0xd, {0x3, 0x3}, {0x80, 0x7}, {0x10001, 0x10007fff}, {0x2, 0x1ff}, 0x9, 0x1000, 0x3, 0x3ff}}}}) (fail_nth: 1) 4.038222242s ago: executing program 3 (id=12158): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000009d"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r2}, &(0x7f00000003c0), &(0x7f0000000500)='%pB \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r2, &(0x7f0000000080), 0x0}, 0x20) 4.037898262s ago: executing program 5 (id=12177): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x4, 0x8}) readv(r0, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x1000}], 0x1) socket$nl_audit(0x10, 0x3, 0x9) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) syz_io_uring_setup(0x1515, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x0, 0x4000018}, &(0x7f0000000100), 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) socket(0xa, 0x3, 0xf2c) r2 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000140)={0xffffffffffffffff, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000940)=@newtaction={0x224, 0x30, 0x9, 0x1000000, 0x0, {}, [{0x210, 0x1, [@m_tunnel_key={0xdc, 0xd, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0xa4, 0x6, "1edf909a27677688fa834dda08bbda53eaf3a142a014630a6c173d3bde43bbcad1829f4e4ab351c353451ff4fc6e1af91be8a940ab9de33c1a2e2409e29abf676540a73d003e6780b094689ba0fa4e1b55223569ffdeb07c59708d7d7568315dcbb75506dac1e99ba27e461554bd2d004e91bc522ef6e441328c2b9d2cc42af9070e97f140da7de81e3a98fda96761a1b84bbd09bf1cde91cc08105f911ba1f4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_connmark={0x130, 0x16, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x8, 0x1, 0xe7}, 0x2000}}]}, {0xe1, 0x6, "f8655f15b7753e953fcd719c0abf430c0c3cde6bff1c698edf8c59b3d158b8f98f5f4dc186ed0cccdbeacaa08d935b45f9c61ddc580be092d3bcc02cf15670ffe3680c26a271e83b7cc64994c5f7466502547bf270b312ad7672f152a32ad0ada5b4eb149f995d749250b2f022c5fe182052ce8bd6860ef5ebef764901a051b713d817d55423ee68ea9ca9e7da5386bfece8cb27ffc203d730c1e0ce619f9acd146d420dea83b45ae32c2fe16e4c58332ebeeba606ad6ed56e2d023d532fc90cdd6f174466cc34e2eba0fb9e665c398a34d6c813aacd1dab3765667097"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x224}, 0x1, 0x0, 0x0, 0xf0}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x4, &(0x7f0000000240)=0x8002, 0x4) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x380002, @dev={0xfe, 0x80, '\x00', 0x34}, 0x692}, 0x1c) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000700000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 4.037468713s ago: executing program 4 (id=12178): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x2, &(0x7f0000000240)=[{0x3, 0x1, 0x8, 0x6}, {0x7ff, 0xcb, 0x81, 0x6}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x100000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0xfd, 0x4, 0xb753, 0x20, @loopback, @mcast2={0xff, 0x3}, 0x8000, 0xba08, 0x0, 0x1004}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000900", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="18e379cdcc23aca21c04ea5069f36c2e8a25d5c7a2660000", @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_emit_ethernet(0x6e, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r7 = syz_open_pts(r6, 0x28101) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000100)) 3.787311967s ago: executing program 2 (id=12179): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x0, 0x1, [{0xa, 0x3, 0x6}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x61, 0x61, 0x2e, 0x61, 0x0, 0x5f]}}, 0x0, 0x64}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="ce010000159a698865360c5e86dd", 0x0, 0x21fe4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000c00)=ANY=[@ANYBLOB="9feb0100180000000000029a00000000000000000200000000000000000000030000000002000000020000000000000000000000000000010500000010000000000000000000dfbea250e2b6cd135cde191227591e5afdcc3b1304fc914ade3dad9c342fc1e30ef4998ac83212790d5b64403e9a43bd36ac1b6be0f8e2524fe60b325b56464afaa67698a22eebc5247e6affdf9d5287e2ce88f7f053f3580ab8e018d16183ef5a40e65ad6e89d1cd397683fa1eafb661c88c7486d88ef37a79f43a729b635cf8dbfcfe6f4379e2bc096ce9c50aa860559d984e4a76727b3f481"], 0x0, 0x56}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0f00000004000000040000000e00000008200000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000a63f9282fd0593a208000000000000000000f22500000000000000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000680), 0x400, 0x0) setpriority(0x2, 0x0, 0x3) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{}, 0x0, &(0x7f0000000500)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00'}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x10, 0x7800, 0x8, 0x6, {{0x18, 0x4, 0x2, 0x2, 0x60, 0x65, 0x0, 0x5a, 0x2f, 0x0, @multicast1, @private=0xa010100, {[@cipso={0x86, 0x19, 0x3, [{0x1, 0xa, "d4ebf3d6aba8bcd3"}, {0x6, 0x9, "3af572f35b8df6"}]}, @timestamp={0x44, 0x10, 0x6a, 0x0, 0x3, [0x6, 0xac5, 0x2]}, @ssrr={0x89, 0xb, 0x8e, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x3, 0xc5}, @timestamp={0x44, 0x10, 0x3c, 0x0, 0x0, [0x2, 0x8, 0x0]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_EEE_GET(r6, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="48010000", @ANYRES16=r7, @ANYBLOB="000425bd7000fddbdf251700000028000180140002007465616d5f736c6176655f310000000008070000f8ee550b53547d0b5b5fdf1a65fb6e32cf211bb2b6e94b9fd401c584dc94f7d8d50d1aa60aa7599418940968a929dc450ca1bec2653426bf08ccb5707d06e9fa7fff4c2e07cd09747831050a9309ce7895a8c5023e87447e2df1eb781e003bef76b1e21a59", @ANYRES32=r8, @ANYBLOB="08000300020000003c000180140002007767310000000000000000000000000014000200766972745f77696669300000000000000800030003000000080003000100000038000180080003000100000014000200776c616e3000000000000000000000000800030007000000080003000300000008000300020000004c00018008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030000000000140002006c6f0000000000000000000000000000140002006d61637365633000000000000000000008000300000000004c000180140002006970766c616e3000000000000000000008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRESHEX=r1, @ANYBLOB="0800030001000000140002006272696467655f736c6176655f3000000800030003000000"], 0x148}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'netpci0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 3.734719412s ago: executing program 3 (id=12180): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000100037040100"/20, @ANYRES32=r2, @ANYBLOB="83000500000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 3.678539028s ago: executing program 2 (id=12181): r0 = socket$netlink(0x10, 0x3, 0x0) io_pgetevents(0x0, 0x9, 0x1, &(0x7f0000000000)=[{}], &(0x7f00000012c0), 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000ae000000b703000007000000850000000e000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYRES64=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001340)='mm_page_alloc\x00', r1}, 0x18) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000fcffffff000000000000000085000000bc00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f00000001c0)="465a92528e30dd2f843139d2fff6", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x18) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x71, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0x0) readv(r8, &(0x7f0000001240)=[{0x0}, {&(0x7f0000000080)=""/4096, 0x1000}], 0x2) ioctl$VHOST_VSOCK_SET_GUEST_CID(r7, 0x4008af60, 0x0) close(r7) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r9, @ANYBLOB="01980000000000001800128008000100677265000c000280e82ad2792c8cb88f"], 0x38}}, 0x40890) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002f40)=ANY=[@ANYBLOB="900000001000390400000000fddbdf2500000000", @ANYRES32=r9, @ANYBLOB="000000001061000070001a806c000a8014000700ff01000000000000000000000000000105000800f300000014000700000000000000000000000000000000011400070020010000000000000000000000000002050008000300000014000700fc0100000008000d0000003b9f530f02b28c349cff16640ba8357fbff6762f3525eb0434d3827f63b3212b5e966f079b"], 0x90}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) 3.641412272s ago: executing program 3 (id=12182): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x100000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaaaa86dd6000000000383a0008880000000000000000000000000001ff02000000000000000000000000000103"], 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r7 = syz_open_pts(r6, 0x28101) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000100)) 2.895573765s ago: executing program 1 (id=12183): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x16, &(0x7f0000000580)=ANY=[], 0x0, 0xae, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0xfffffd00, &(0x7f0000000000)='}\x00') madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) syz_open_procfs(0xffffffffffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180)) 2.894463755s ago: executing program 4 (id=12184): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0xa7ded31e492000fc}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x275a, 0x0) fchmod(r1, 0x20049549e2a2d659) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0xa, 0x3, 0x87) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0xb, r8}) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="d40000001f0020002bbd7000fbdbdf25ff0200000000000000000000000000012e709336d7d5bfde00000000000000000000ffff0a0101010b000000003500000a00100000000000000000002c001300ac1e000100000000000000000000000000000000000000000000000000000000000000000a00000028001700030000002cbd700029bd700028bd70002dbd70002100000007000000000000000400000014000d002001000000000000000000000000000114000e00200100000000000000000000000000010c000f000700000000000000"], 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0x8884) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x8936, &(0x7f0000000000)) read$FUSE(r2, &(0x7f0000002c00)={0x2020}, 0x2020) 1.855055887s ago: executing program 3 (id=12185): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0xa7ded31e492000fc}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x275a, 0x0) fchmod(r1, 0x20049549e2a2d659) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket(0xa, 0x3, 0x87) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0xb, r9}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000d0000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r10, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r11}, &(0x7f0000000300), &(0x7f0000000400)}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="d40000001f0020002bbd7000fbdbdf25ff0200000000000000000000000000012e709336d7d5bfde00000000000000000000ffff0a0101010b000000003500000a00100000000000000000002c001300ac1e000100000000000000000000000000000000000000000000000000000000000000000a00000028001700030000002cbd700029bd700028bd70002dbd70002100000007000000000000000400000014000d002001000000000000000000000000000114000e00200100000000000000000000000000010c000f000700000000000000"], 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0x8884) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x8936, &(0x7f0000000000)) read$FUSE(r3, &(0x7f0000002c00)={0x2020}, 0x2020) 1.849865508s ago: executing program 1 (id=12186): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x2, &(0x7f0000000240)=[{0x3, 0x1, 0x8, 0x6}, {0x7ff, 0xcb, 0x81, 0x6}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x100000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000900", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaaaa86dd6000000000383a0008880000000000000000000000000001ff02000000000000000000000000000103"], 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r7 = syz_open_pts(r6, 0x28101) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000100)) 1.785891465s ago: executing program 4 (id=12187): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x90000004}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$unix(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="c364d27bd4743ac252d00f634b7b", @ANYRES16, @ANYBLOB="91f895dd7ebcc2b83a83fb121e4e844e5d7a09e7d4a4979f3fdfe200b83e593144c1cf15b5624e3448b3b40065bc381005ed653b2e5aeafdfb38eeddb8c08b04fb2e46eba33d22f32db6a9608832f35ee976140648653030c5dd9306f90fc9f46534c6d9f2b37f945ba052c7197494046b00916b8f07b5b9f05f77f79225aa0700a01e414c5352def7a6078229384108c95320a4abf33afd65548efaf0b3dc54c4c10995d3e08a9017ae0c8828c59983d23cf29ff4ff4a16908f199ba7", @ANYBLOB="3873213ccef277e2", @ANYRESHEX], 0x1, 0x5581, &(0x7f000000bbc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) 1.781233085s ago: executing program 2 (id=12188): r0 = socket$netlink(0x10, 0x3, 0x0) io_pgetevents(0x0, 0x9, 0x1, &(0x7f0000000000)=[{}], &(0x7f00000012c0), 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000ae000000b703000007000000850000000e000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYRES64=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001340)='mm_page_alloc\x00', r1}, 0x18) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000fcffffff000000000000000085000000bc00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f00000001c0)="465a92528e30dd2f843139d2fff6", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x18) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x71, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0x0) readv(r8, &(0x7f0000001240)=[{0x0}, {&(0x7f0000000080)=""/4096, 0x1000}], 0x2) ioctl$VHOST_VSOCK_SET_GUEST_CID(r7, 0x4008af60, 0x0) close(r7) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r9, @ANYBLOB="01980000000000001800128008000100677265000c000280e82ad2792c8cb88f"], 0x38}}, 0x40890) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002f40)=ANY=[@ANYBLOB="900000001000390400000000fddbdf2500000000", @ANYRES32=r9, @ANYBLOB="000000001061000070001a806c000a8014000700ff01000000000000000000000000000105000800f300000014000700000000000000000000000000000000011400070020010000000000000000000000000002050008000300000014000700fc0100000008000d0000003b9f530f02b28c349cff16640ba8357fbff6762f3525eb0434d3827f63b3212b5e966f079b"], 0x90}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) 911.11248ms ago: executing program 3 (id=12189): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) sendto$inet(r0, &(0x7f0000000580)="14", 0xfffffffffffffe96, 0x10008095, 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file2\x00', 0x71283578ac7c5cd) ftruncate(r2, 0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) prlimit64(0x0, 0xb, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 602.306291ms ago: executing program 5 (id=12190): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000700000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x6, 0xa) socket$packet(0x11, 0x2, 0x300) close_range(r0, 0xffffffffffffffff, 0x0) 591.970782ms ago: executing program 5 (id=12191): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x0, 0x1, [{0xa, 0x3, 0x6}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x61, 0x61, 0x2e, 0x61, 0x0, 0x5f]}}, 0x0, 0x64}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="ce010000159a698865360c5e86dd", 0x0, 0x21fe4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000c00)=ANY=[@ANYBLOB="9feb0100180000000000029a00000000000000000200000000000000000000030000000002000000020000000000000000000000000000010500000010000000000000000000dfbea250e2b6cd135cde191227591e5afdcc3b1304fc914ade3dad9c342fc1e30ef4998ac83212790d5b64403e9a43bd36ac1b6be0f8e2524fe60b325b56464afaa67698a22eebc5247e6affdf9d5287e2ce88f7f053f3580ab8e018d16183ef5a40e65ad6e89d1cd397683fa1eafb661c88c7486d88ef37a79f43a729b635cf8dbfcfe6f4379e2bc096ce9c50aa860559d984e4a76727b3f481"], 0x0, 0x56}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0f00000004000000040000000e00000008200000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000a63f9282fd0593a208000000000000000000f22500000000000000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000680), 0x400, 0x0) setpriority(0x2, 0x0, 0x3) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{}, 0x0, &(0x7f0000000500)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00'}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x10, 0x7800, 0x8, 0x6, {{0x18, 0x4, 0x2, 0x2, 0x60, 0x65, 0x0, 0x5a, 0x2f, 0x0, @multicast1, @private=0xa010100, {[@cipso={0x86, 0x19, 0x3, [{0x1, 0xa, "d4ebf3d6aba8bcd3"}, {0x6, 0x9, "3af572f35b8df6"}]}, @timestamp={0x44, 0x10, 0x6a, 0x0, 0x3, [0x6, 0xac5, 0x2]}, @ssrr={0x89, 0xb, 0x8e, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x3, 0xc5}, @timestamp={0x44, 0x10, 0x3c, 0x0, 0x0, [0x2, 0x8, 0x0]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_EEE_GET(r6, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="48010000", @ANYRES16=r7, @ANYBLOB="000425bd7000fddbdf251700000028000180140002007465616d5f736c6176655f310000000008070000f8ee550b53547d0b5b5fdf1a65fb6e32cf211bb2b6e94b9fd401c584dc94f7d8d50d1aa60aa7599418940968a929dc450ca1bec2653426bf08ccb5707d06e9fa7fff4c2e07cd09747831050a9309ce7895a8c5023e87447e2df1eb781e003bef76b1e21a59", @ANYRES32=r8, @ANYBLOB="08000300020000003c000180140002007767310000000000000000000000000014000200766972745f77696669300000000000000800030003000000080003000100000038000180080003000100000014000200776c616e3000000000000000000000000800030007000000080003000300000008000300020000004c00018008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030000000000140002006c6f0000000000000000000000000000140002006d61637365633000000000000000000008000300000000004c000180140002006970766c616e3000000000000000000008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRESHEX=r1, @ANYBLOB="0800030001000000140002006272696467655f736c6176655f3000000800030003000000"], 0x148}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'netpci0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 515.897249ms ago: executing program 1 (id=12192): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000700000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x6, 0xa) socket$packet(0x11, 0x2, 0x300) close_range(r0, 0xffffffffffffffff, 0x0) (fail_nth: 1) 210.725119ms ago: executing program 5 (id=12193): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_emit_ethernet(0x2a, &(0x7f00000006c0)={@random="5b4af5dd3aa5", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @local, @remote, @remote}}}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x2c, 0x65, 0x0, 0x7, 0x6, 0x0, @multicast2, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x10, 0x6071, 0x0, 0xe7, {[@sack={0x5, 0x2}]}}}}}}}, 0x0) sendto$inet(r1, &(0x7f0000000580)="14", 0xfffffffffffffe96, 0x10008095, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) prlimit64(0x0, 0xb, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 921.79µs ago: executing program 1 (id=12194): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x6, 0xa) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) (fail_nth: 1) 0s ago: executing program 2 (id=12195): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x4000081, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) sendmsg$inet(r7, 0x0, 0x0) setresgid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_ethernet(0xda, &(0x7f0000000540)=ANY=[@ANYBLOB="000000000000aaaaaaaaaa410011f0d69f217de03833c70933f4671a5d777d425c1a7a29b518a77b4fc962c71483b909822b51f58a9952a91af236ff6c0cdb7442aea566365d04d808f854561e24b635681da3a5ceb7ccd78d21ecb52f536ecec7316456307bd4efb5cc4f7175ae2e9a743ef15abacc49ca03e7fa616291c0091de9948192471b370d1a2bcd2fe993fd920723a8060c4077ce534e7db9611076dae3c80af51a60e3bc57070c25a22895ea64e8bfbd70e577e9c0e224293c74e3e17190c6bed4aa70d0823313631722d6967f00440faf686f6fdfc650450fad3e9c9c5029e15eb2d14bbede0fed754fd194"], &(0x7f0000000000)={0x1, 0x2, [0x548, 0xc31, 0xb75, 0x68b]}) read$FUSE(0xffffffffffffffff, &(0x7f00000041c0)={0x2020}, 0x2020) sendmsg$netlink(r7, 0x0, 0x881) kernel console output (not intermixed with test programs): g 'lowerdir' [ 2817.721124][ T7646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11118'. [ 2817.759558][ T7646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11118'. [ 2817.826438][ T7646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7646 comm=syz.2.11118 [ 2821.136961][ T7708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11133'. [ 2821.195833][ T7708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11133'. [ 2821.282069][ T7708] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7708 comm=syz.4.11133 [ 2821.379377][T23898] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 2821.571729][T23898] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2821.583645][T23898] usb 3-1: not running at top speed; connect to a high speed hub [ 2821.604748][T23898] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2821.621191][T23898] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2821.665783][T23898] usb 3-1: string descriptor 0 read error: -22 [ 2821.679923][T23898] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2821.689101][T23898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2821.699089][T23898] usb 3-1: 0:2 : does not exist [ 2821.935267][T23898] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 2821.958401][T23898] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 2822.423961][ T7728] overlayfs: missing 'lowerdir' [ 2822.811720][T23898] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2822.831594][T23898] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 2822.853656][T23898] usb 3-1: USB disconnect, device number 89 [ 2822.934479][ T7736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11140'. [ 2822.971141][ T7736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11140'. [ 2822.981774][ T7736] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7736 comm=syz.4.11140 [ 2827.728255][ T7815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11161'. [ 2827.743938][ T7815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11161'. [ 2827.763058][ T7815] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7815 comm=syz.5.11161 [ 2828.728644][ T7834] fuse: Unknown parameter 'û敹 ðîT¦|Wn2´9l}¯@ß [ 2828.728644][ T7834] ÌqþühZ&ô½Ä̇ÎXöâ­' [ 2830.884556][ T7920] netlink: 'syz.3.11206': attribute type 28 has an invalid length. [ 2830.897368][ T7920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11206'. [ 2830.975120][ T7944] tmpfs: Unknown parameter 'Ô' [ 2831.080853][ T28] audit: type=1400 audit(1760076240.655:15430): avc: denied { unmount } for pid=449 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2832.698311][ T7987] netlink: 'syz.1.11237': attribute type 16 has an invalid length. [ 2832.775643][ T7987] bridge0: port 2(bridge_slave_1) entered disabled state [ 2832.782903][ T7987] bridge0: port 1(bridge_slave_0) entered disabled state [ 2835.193520][ T8022] usb 6-1: new full-speed USB device number 77 using dummy_hcd [ 2836.255990][ T8056] overlayfs: missing 'lowerdir' [ 2836.489286][ T8022] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2836.565616][ T8022] usb 6-1: not running at top speed; connect to a high speed hub [ 2836.590892][ T8022] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2836.602291][ T8022] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2836.643225][ T8022] usb 6-1: string descriptor 0 read error: -22 [ 2836.651591][ T8022] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2836.668836][ T8022] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2836.692171][ T8065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11261'. [ 2836.701426][ T8022] usb 6-1: 0:2 : does not exist [ 2836.718585][ T8065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11261'. [ 2836.738693][ T8065] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8065 comm=syz.4.11261 [ 2836.754094][ T8066] fuse: Unknown parameter 'rootJ ñ™-§Èmode' [ 2836.894150][ T8022] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 2836.910634][ T8022] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 2836.936392][ T8022] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2836.971516][ T8022] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 2836.993807][ T8022] usb 6-1: USB disconnect, device number 77 [ 2837.503760][ T8084] fuse: Unknown parameter 'û敹 ðîT¦|Wn2´9l}¯@ß [ 2837.503760][ T8084] ÌqþühZ&ô½Ä̇ÎXöâ­' [ 2838.033495][ T8087] overlayfs: missing 'lowerdir' [ 2840.796405][ T8129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11277'. [ 2840.825914][ T8129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11277'. [ 2841.125575][ T8135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8135 comm=syz.2.11277 [ 2841.652243][ T8142] overlayfs: missing 'lowerdir' [ 2844.388782][ T8179] overlayfs: missing 'lowerdir' [ 2844.412901][ T8172] fuse: Unknown parameter 'rootJ ñ™-§Èmode' [ 2844.509267][ T8189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11291'. [ 2844.540089][ T8189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11291'. [ 2844.553756][ T8189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8189 comm=syz.3.11291 [ 2845.939974][ T8209] overlayfs: missing 'lowerdir' [ 2848.535153][ T8237] fuse: Unknown parameter 'û敹 ðîT¦|Wn2´9l}¯@ß [ 2848.535153][ T8237] ÌqþühZ&ô½Ä̇ÎXöâ­' [ 2848.908443][ T8239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11303'. [ 2849.045760][ T8244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11303'. [ 2849.129437][ T8239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8239 comm=syz.3.11303 [ 2849.491085][ T8252] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11305'. [ 2849.507822][ T8251] fuse: Unknown parameter 'rootJ ñ™-§Èmode' [ 2850.124285][ T8257] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11307'. [ 2850.147598][ T8257] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11307'. [ 2850.187551][ T8257] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8257 comm=syz.5.11307 [ 2852.059662][ T8275] overlayfs: missing 'lowerdir' [ 2852.927012][ T8696] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 2853.513746][ T8696] usb 3-1: device descriptor read/all, error -71 [ 2853.945288][ T8296] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11315'. [ 2854.459144][ T8306] overlayfs: missing 'lowerdir' [ 2854.963079][ T8309] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11319'. [ 2855.137961][ T8303] overlayfs: missing 'lowerdir' [ 2855.970256][ T8324] netlink: 'syz.1.11325': attribute type 4 has an invalid length. [ 2858.678708][ T8357] fuse: Unknown parameter 'rootJ ñ™-§Èmode' [ 2858.747908][ T8356] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11332'. [ 2860.085598][ T8389] binder: 8388:8389 ioctl 400c620e 0 returned -14 [ 2863.308077][ T8432] netlink: 44 bytes leftover after parsing attributes in process `syz.5.11352'. [ 2863.684101][ T8443] fuse: Unknown parameter 'rootJ ñ™-§Èmode' [ 2863.908347][ T8449] fuse: Unknown parameter 'rootJ ñ™-§Èmode' [ 2866.470807][ T8484] overlayfs: missing 'lowerdir' [ 2867.206471][ T8494] netlink: 44 bytes leftover after parsing attributes in process `syz.5.11367'. [ 2870.948346][ T8539] overlayfs: missing 'lowerdir' [ 2871.961221][ T8549] binder: 8548:8549 ioctl 400c620e 0 returned -14 [ 2874.031466][ T8594] overlayfs: missing 'lowerdir' [ 2876.235632][ T8627] fuse: Unknown parameter 'û敹 ðîT¦|Wn2´9l}¯@ß [ 2876.235632][ T8627] ÌqþühZ&ô½Ä̇ÎXöâ­' [ 2876.453864][ T8637] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11403'. [ 2877.976732][ T8666] overlayfs: missing 'lowerdir' [ 2878.729352][T26964] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 2878.922195][ T8686] fuse: Unknown parameter 'û敹 ðîT¦|Wn2´9l}¯@ß [ 2878.922195][ T8686] ÌqþühZ&ô½Ä̇ÎXöâ­' [ 2878.930935][T26964] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2878.941162][T26964] usb 2-1: not running at top speed; connect to a high speed hub [ 2878.950216][T26964] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2878.961407][T26964] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2878.976450][T26964] usb 2-1: string descriptor 0 read error: -22 [ 2878.984320][T26964] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2878.995505][T26964] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2879.030619][T26964] usb 2-1: 0:2 : does not exist [ 2879.262239][T26964] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 2879.347023][T26964] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 2879.357254][T26964] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2879.368129][T26964] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 2879.380524][T26964] usb 2-1: USB disconnect, device number 92 [ 2879.475072][ T8699] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11419'. [ 2879.822770][ T8693] fuse: Unknown parameter 'rootJ ñ™-§Èmode' [ 2882.314990][ T8696] usb 6-1: new full-speed USB device number 78 using dummy_hcd [ 2882.409119][ T8737] fuse: Unknown parameter 'û敹 ðîT¦|Wn2´9l}¯@ß [ 2882.409119][ T8737] ÌqþühZ&ô½Ä̇ÎXöâ­' [ 2882.627683][ T8696] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2882.635978][ T8696] usb 6-1: not running at top speed; connect to a high speed hub [ 2882.645249][ T8696] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2882.655628][ T8696] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2882.667424][ T8696] usb 6-1: string descriptor 0 read error: -22 [ 2882.673745][ T8696] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2882.683369][ T8696] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2883.494233][ T8696] usb 6-1: 0:2 : does not exist [ 2883.559076][ T8750] binder: 8748:8750 ioctl 400c620e 0 returned -14 [ 2883.741518][ T8696] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 2883.757421][ T8696] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 2884.669378][ T8696] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2884.679880][ T8696] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 2884.697185][ T8696] usb 6-1: USB disconnect, device number 78 [ 2884.789233][ T8769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11439'. [ 2884.809099][ T8769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11439'. [ 2884.826596][ T8769] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8769 comm=syz.1.11439 [ 2887.155729][ T8801] overlayfs: missing 'lowerdir' [ 2888.944131][ T8826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11454'. [ 2888.955265][ T8826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11454'. [ 2888.964905][ T8826] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8826 comm=syz.3.11454 [ 2889.776675][ T8831] overlayfs: missing 'lowerdir' [ 2890.220107][ T8024] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 2890.650689][ T8024] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2890.661681][ T8024] usb 2-1: not running at top speed; connect to a high speed hub [ 2890.670491][ T8024] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2890.681639][ T8024] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2890.692992][ T8024] usb 2-1: string descriptor 0 read error: -22 [ 2890.699507][ T8024] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2890.708956][ T8024] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2890.719974][ T8024] usb 2-1: 0:2 : does not exist [ 2890.950837][ T8024] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 2890.964131][ T8024] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 2890.974299][ T8024] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2890.985514][ T8024] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 2891.010788][ T8024] usb 2-1: USB disconnect, device number 93 [ 2892.378030][ T8875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11467'. [ 2892.433757][ T8875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11467'. [ 2892.443225][ T8875] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8875 comm=syz.2.11467 [ 2892.479361][ T8024] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 2892.660834][ T8024] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2892.671540][ T8024] usb 4-1: not running at top speed; connect to a high speed hub [ 2892.686831][ T8024] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2892.705282][ T8024] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2892.723150][ T8024] usb 4-1: string descriptor 0 read error: -22 [ 2892.731079][ T8024] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2892.741480][ T8024] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2892.752033][ T8024] usb 4-1: 0:2 : does not exist [ 2892.987581][ T8024] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 2892.989826][ T8889] binder: 8888:8889 ioctl c00c620f 200000000140 returned -22 [ 2893.000521][ T8024] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 2893.266617][ T8024] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2893.270147][ T357] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 2893.276669][ T8024] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 2893.293694][ T8024] usb 4-1: USB disconnect, device number 92 [ 2893.461398][ T357] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2893.518644][ T357] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 2893.527937][ T357] usb 3-1: config 220 interface 0 has no altsetting 0 [ 2893.536844][ T357] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2893.545985][ T357] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2893.554694][ T357] usb 3-1: Product: syz [ 2893.558943][ T357] usb 3-1: Manufacturer: syz [ 2893.563722][ T357] usb 3-1: SerialNumber: syz [ 2893.787074][ T357] usb 3-1: Found UVC 0.00 device syz (8086:0b07) [ 2893.796813][ T357] usb 3-1: No valid video chain found. [ 2893.803516][ T357] usb 3-1: USB disconnect, device number 92 [ 2896.001801][ T8931] binder: 8930:8931 ioctl c00c620f 200000000140 returned -22 [ 2896.339349][ T357] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 2896.530717][ T357] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2896.541885][ T357] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 2896.598343][ T357] usb 5-1: config 220 interface 0 has no altsetting 0 [ 2896.633572][ T357] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2896.642824][ T357] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2896.651767][ T357] usb 5-1: Product: syz [ 2896.662056][ T357] usb 5-1: Manufacturer: syz [ 2896.666707][ T357] usb 5-1: SerialNumber: syz [ 2896.736809][ T8940] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11483'. [ 2897.122608][ T357] usb 5-1: Found UVC 0.00 device syz (8086:0b07) [ 2897.176732][ T357] usb 5-1: No valid video chain found. [ 2897.186259][ T357] usb 5-1: USB disconnect, device number 75 [ 2897.487965][ T8952] fuse: Unknown parameter 'rootJ ñ™-§Èmode' [ 2897.803363][ T8957] binder: 8956:8957 ioctl c00c620f 200000000140 returned -22 [ 2899.537858][ T357] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 2900.580511][ T357] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2900.591700][ T357] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 2900.630434][ T357] usb 5-1: config 220 interface 0 has no altsetting 0 [ 2900.650891][ T357] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2900.670244][ T357] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2900.678364][ T357] usb 5-1: Product: syz [ 2900.689722][ T357] usb 5-1: Manufacturer: syz [ 2900.690880][ T8020] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 2900.729912][ T357] usb 5-1: SerialNumber: syz [ 2900.827830][ T357] usb 5-1: Found UVC 0.00 device syz (8086:0b07) [ 2900.836315][ T357] usb 5-1: No valid video chain found. [ 2901.273885][ T357] usb 5-1: USB disconnect, device number 76 [ 2901.507372][ T8020] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2901.575219][ T8020] usb 3-1: not running at top speed; connect to a high speed hub [ 2901.730598][ T8020] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2901.795977][ T8020] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2901.811038][ T8020] usb 3-1: string descriptor 0 read error: -22 [ 2901.820325][ T8020] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2901.835766][ T8020] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2901.873552][ T8020] usb 3-1: 0:2 : does not exist [ 2902.994136][ T8020] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 2903.076085][ T8020] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 2903.093247][ T8020] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2903.112243][ T8020] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 2903.138883][ T8020] usb 3-1: USB disconnect, device number 93 [ 2904.035954][ T9035] fuse: Unknown parameter 'û敹 ðîT¦|Wn2´9l}¯@ß [ 2904.035954][ T9035] ÌqþühZ&ô½Ä̇ÎXöâ­' [ 2905.945567][ T9054] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11512'. [ 2906.432149][ T9061] overlayfs: missing 'lowerdir' [ 2907.936317][ T9093] fuse: Unknown parameter 'û敹 ðîT¦|Wn2´9l}¯@ß [ 2907.936317][ T9093] ÌqþühZ&ô½Ä̇ÎXöâ­' [ 2908.990244][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11526'. [ 2909.006650][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11526'. [ 2909.020284][ T9108] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9108 comm=syz.2.11526 [ 2909.284022][ T9117] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11528'. [ 2911.120401][ T9138] overlayfs: missing 'lowerdir' [ 2912.987441][ T9156] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11536'. [ 2914.171519][ T9171] fuse: Unknown parameter 'û敹 ðîT¦|Wn2´9l}¯@ß [ 2914.171519][ T9171] ÌqþühZ&ô½Ä̇ÎXöâ­' [ 2914.207735][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11544'. [ 2914.221202][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11544'. [ 2914.240054][ T9174] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9174 comm=syz.5.11544 [ 2914.323901][ T9176] overlayfs: missing 'lowerdir' [ 2914.679015][ T9179] fuse: Unknown parameter 'û敹 ðîT¦|Wn2´9l}¯@ß [ 2914.679015][ T9179] ÌqþühZ&ô½Ä̇ÎXöâ­' [ 2917.147277][ T9199] binder: 9195:9199 ioctl 400c620e 0 returned -14 [ 2917.299882][ T9215] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11553'. [ 2918.131606][ T9224] fuse: Unknown parameter 'û敹 ðîT¦|Wn2´9l}¯@ß [ 2918.131606][ T9224] ÌqþühZ&ô½Ä̇ÎXöâ­' [ 2918.251851][ T9232] binder: 9231:9232 ioctl c00c620f 200000000140 returned -22 [ 2918.352009][ T9239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11559'. [ 2918.371846][ T9239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11559'. [ 2918.392723][ T9239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9239 comm=syz.4.11559 [ 2918.656009][ T9244] overlayfs: missing 'lowerdir' [ 2918.844264][ T8024] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 2919.220367][ T8024] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2919.235699][ T8024] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 2919.251956][ T8024] usb 2-1: config 220 interface 0 has no altsetting 0 [ 2920.610221][ T8024] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2920.671313][ T8024] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2920.689626][ T8024] usb 2-1: Product: syz [ 2921.852610][ T8024] usb 2-1: Manufacturer: syz [ 2921.856367][ T9279] fuse: Unknown parameter 'û敹 ðîT¦|Wn2´9l}¯@ß [ 2921.856367][ T9279] ÌqþühZ&ô½Ä̇ÎXöâ­' [ 2921.857547][ T8024] usb 2-1: SerialNumber: syz [ 2921.945631][ T8024] usb 2-1: can't set config #220, error -71 [ 2921.955171][ T8024] usb 2-1: USB disconnect, device number 94 [ 2922.798844][ T9290] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11574'. [ 2922.860142][ T9290] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11574'. [ 2922.956314][ T9290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9290 comm=syz.5.11574 [ 2923.158247][ T9304] overlayfs: missing 'lowerdir' [ 2924.272155][ T9319] binder: 9317:9319 ioctl c00c620f 200000000140 returned -22 [ 2924.831380][ T9324] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11580'. [ 2925.152806][ T8696] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 2925.192520][ T9331] binder: 9330:9331 ioctl c00c620f 200000000140 returned -22 [ 2925.203708][ T9332] fuse: Unknown parameter 'û敹 ðîT¦|Wn2´9l}¯@ß [ 2925.203708][ T9332] ÌqþühZ&ô½Ä̇ÎXöâ­' [ 2925.302383][ T9338] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11586'. [ 2925.312592][ T9338] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11586'. [ 2925.365040][ T9340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9340 comm=syz.5.11586 [ 2925.397373][ T8696] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2925.537065][ T8696] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 2925.565817][ T8696] usb 3-1: config 220 interface 0 has no altsetting 0 [ 2925.578509][ T8696] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2925.589013][ T8696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2925.597704][ T8696] usb 3-1: Product: syz [ 2925.602190][ T8696] usb 3-1: Manufacturer: syz [ 2925.606873][ T8696] usb 3-1: SerialNumber: syz [ 2925.617326][ T9344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11588'. [ 2925.627015][ T9344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11588'. [ 2925.637267][ T9344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9344 comm=syz.1.11588 [ 2925.740224][ T8024] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 2925.817155][ T8696] usb 3-1: Found UVC 0.00 device syz (8086:0b07) [ 2925.823877][ T8696] usb 3-1: No valid video chain found. [ 2925.830820][ T8696] usb 3-1: USB disconnect, device number 94 [ 2925.921071][ T8024] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2925.931575][ T8024] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 2925.941097][ T8024] usb 5-1: config 220 interface 0 has no altsetting 0 [ 2925.949555][ T8024] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2925.958696][ T8024] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2925.967243][ T8024] usb 5-1: Product: syz [ 2925.971570][ T8024] usb 5-1: Manufacturer: syz [ 2925.976186][ T8024] usb 5-1: SerialNumber: syz [ 2926.478531][ T9353] overlayfs: missing 'lowerdir' [ 2926.752419][ T9356] fuse: Unknown parameter 'û敹 ðîT¦|Wn2´9l}¯@ß [ 2926.752419][ T9356] ÌqþühZ&ô½Ä̇ÎXöâ­' [ 2926.771343][ T8024] usb 5-1: Found UVC 0.00 device syz (8086:0b07) [ 2926.777796][ T8024] usb 5-1: No valid video chain found. [ 2926.785051][ T8024] usb 5-1: USB disconnect, device number 77 [ 2928.613802][ T9374] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11596'. [ 2929.321231][ T9393] binder: 9392:9393 ioctl c00c620f 200000000140 returned -22 [ 2929.459132][ T9396] overlayfs: missing 'lowerdir' [ 2929.600067][ T8026] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 2929.791250][ T8026] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2929.810451][ T8026] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 2929.821412][ T8026] usb 2-1: config 220 interface 0 has no altsetting 0 [ 2929.834638][ T8026] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2929.844789][ T8026] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2929.853111][ T8026] usb 2-1: Product: syz [ 2929.857447][ T8026] usb 2-1: Manufacturer: syz [ 2929.862386][ T8026] usb 2-1: SerialNumber: syz [ 2929.876954][ T9405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11604'. [ 2929.905417][ T9405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11604'. [ 2929.915208][ T9405] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9405 comm=syz.3.11604 [ 2929.968624][ T9409] fuse: Unknown parameter 'û敹 ðîT¦|Wn2´9l}¯@ß [ 2929.968624][ T9409] ÌqþühZ&ô½Ä̇ÎXöâ­' [ 2929.989416][ T9410] overlayfs: missing 'lowerdir' [ 2930.693501][ T8026] usb 2-1: Found UVC 0.00 device syz (8086:0b07) [ 2930.704090][ T8026] usb 2-1: No valid video chain found. [ 2930.720228][ T8026] usb 2-1: USB disconnect, device number 95 [ 2932.876084][ T9447] overlayfs: missing 'lowerdir' [ 2933.616209][ T9461] binder: 9459:9461 ioctl c00c620f 200000000140 returned -22 [ 2934.117836][ T8024] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 2934.306629][ T8024] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2934.319769][ T8024] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 2934.330228][ T8024] usb 3-1: config 220 interface 0 has no altsetting 0 [ 2934.366657][ T8024] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2934.376152][ T8024] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2934.385605][ T8024] usb 3-1: Product: syz [ 2934.390798][ T8024] usb 3-1: Manufacturer: syz [ 2934.396045][ T8024] usb 3-1: SerialNumber: syz [ 2934.683981][ T8024] usb 3-1: Found UVC 0.00 device syz (8086:0b07) [ 2934.691562][ T8024] usb 3-1: No valid video chain found. [ 2934.699639][ T8024] usb 3-1: USB disconnect, device number 95 [ 2935.614206][ T9494] fuse: Unknown parameter 'rootJ ñ™-§Èmode' [ 2936.043661][ T9498] overlayfs: missing 'lowerdir' [ 2936.489332][ T8024] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 2936.680709][ T8024] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2936.696685][ T8024] usb 5-1: not running at top speed; connect to a high speed hub [ 2936.728268][ T8024] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2936.756569][ T8024] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2936.777327][ T8024] usb 5-1: string descriptor 0 read error: -22 [ 2936.789359][ T8024] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2936.799994][ T8024] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2936.825212][ T8024] usb 5-1: 0:2 : does not exist [ 2937.173308][ T8024] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 2937.184968][ T8024] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 2937.205953][ T8024] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2937.216897][ T8024] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 2937.238274][ T8024] usb 5-1: USB disconnect, device number 78 [ 2937.455872][ T9526] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11636'. [ 2938.539331][T14099] usb 6-1: new full-speed USB device number 79 using dummy_hcd [ 2938.575797][ T9547] binder: 9546:9547 ioctl c00c620f 200000000140 returned -22 [ 2938.751808][T14099] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2938.779804][T14099] usb 6-1: not running at top speed; connect to a high speed hub [ 2938.792121][T14099] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2938.811606][T14099] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2938.825003][T14099] usb 6-1: string descriptor 0 read error: -22 [ 2938.840247][T14099] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2938.849562][T14099] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2938.859642][T14099] usb 6-1: 0:2 : does not exist [ 2938.860347][ T8020] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 2938.875247][ T9551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11644'. [ 2938.891274][ T9551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11644'. [ 2938.910700][ T9551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9551 comm=syz.2.11644 [ 2939.050415][ T8020] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2939.063948][T14099] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 2939.069322][ T8020] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 2939.078417][T14099] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 2939.089323][ T8020] usb 2-1: config 220 interface 0 has no altsetting 0 [ 2939.094048][T14099] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2939.105267][ T8020] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2939.106974][T14099] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 2939.126520][ T8020] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2939.127825][T14099] usb 6-1: USB disconnect, device number 79 [ 2939.148029][ T8020] usb 2-1: Product: syz [ 2939.152435][ T8020] usb 2-1: Manufacturer: syz [ 2939.157058][ T8020] usb 2-1: SerialNumber: syz [ 2939.343643][ T9555] overlayfs: missing 'lowerdir' [ 2939.369095][ T8020] usb 2-1: Found UVC 0.00 device syz (8086:0b07) [ 2939.375520][ T8020] usb 2-1: No valid video chain found. [ 2939.390092][ T8020] usb 2-1: USB disconnect, device number 96 [ 2940.583177][ T9579] overlayfs: missing 'lowerdir' [ 2940.949374][ T8020] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 2941.044494][ T9589] binder: 9588:9589 ioctl c00c620f 200000000140 returned -22 [ 2941.675067][ T8020] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2941.811594][ T8020] usb 4-1: not running at top speed; connect to a high speed hub [ 2941.832413][ T8020] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2941.885026][ T8020] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2941.892553][T14099] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 2941.911565][ T8020] usb 4-1: string descriptor 0 read error: -22 [ 2941.928059][ T8020] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2941.947516][ T8020] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2942.018445][ T8020] usb 4-1: 0:2 : does not exist [ 2942.961372][ T8020] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 2942.968866][T14099] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2942.974556][ T8020] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 2942.985533][T14099] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 2943.041780][ T9610] overlayfs: missing 'lowerdir' [ 2943.067880][T14099] usb 5-1: config 220 interface 0 has no altsetting 0 [ 2943.125330][T14099] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2943.302523][ T8020] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2943.312334][ T8020] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 2943.324510][ T8020] usb 4-1: USB disconnect, device number 93 [ 2943.439329][T14099] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2943.447365][T14099] usb 5-1: Product: syz [ 2943.467156][T14099] usb 5-1: Manufacturer: syz [ 2943.584748][ T9617] overlayfs: missing 'lowerdir' [ 2943.590805][T14099] usb 5-1: SerialNumber: syz [ 2943.851666][T14099] usb 5-1: Found UVC 0.00 device syz (8086:0b07) [ 2943.864792][T14099] usb 5-1: No valid video chain found. [ 2943.893349][T14099] usb 5-1: USB disconnect, device number 79 [ 2944.777504][ T9645] overlayfs: missing 'lowerdir' [ 2947.738787][ T9662] overlayfs: missing 'lowerdir' [ 2947.924211][ T9673] binder: 9672:9673 ioctl c00c620f 200000000140 returned -22 [ 2948.209302][ T8020] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 2948.400368][ T8020] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2948.415626][ T8020] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 2948.434147][ T8020] usb 4-1: config 220 interface 0 has no altsetting 0 [ 2948.449959][ T8020] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2948.467796][ T8020] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2948.484653][ T8020] usb 4-1: Product: syz [ 2948.493008][ T8020] usb 4-1: Manufacturer: syz [ 2948.502793][ T8020] usb 4-1: SerialNumber: syz [ 2948.721571][ T8020] usb 4-1: Found UVC 0.00 device syz (8086:0b07) [ 2948.734076][ T8020] usb 4-1: No valid video chain found. [ 2948.747858][ T8020] usb 4-1: USB disconnect, device number 94 [ 2949.138027][ T9694] overlayfs: missing 'lowerdir' [ 2949.499482][T26832] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 2949.780721][T26832] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2949.828057][ T9699] fuse: Unknown parameter 'û敹 ðîT¦|Wn2´9l}¯@ß [ 2949.828057][ T9699] ÌqþühZ&ô½Ä̇ÎXöâ­' [ 2949.852777][T26832] usb 2-1: not running at top speed; connect to a high speed hub [ 2949.862010][T26832] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2949.873042][T26832] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2949.888228][T26832] usb 2-1: string descriptor 0 read error: -22 [ 2950.959342][T26832] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2951.028492][T26832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2951.048280][T26832] usb 2-1: 0:2 : does not exist [ 2951.331934][T26832] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 2951.344865][T26832] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 2951.424201][T26832] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2951.443468][T26832] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 2951.546923][T26832] usb 2-1: USB disconnect, device number 97 [ 2953.130372][ T9733] overlayfs: missing 'lowerdir' [ 2953.926375][ T9745] binder: 9744:9745 ioctl c00c620f 200000000140 returned -22 [ 2954.323261][ T9749] overlayfs: missing 'lowerdir' [ 2954.669337][ T8022] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 2954.871315][ T8022] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2954.887102][ T8022] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 2954.909591][ T8022] usb 3-1: config 220 interface 0 has no altsetting 0 [ 2954.929060][ T8022] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2954.953559][ T8022] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2954.976789][ T8022] usb 3-1: Product: syz [ 2954.989749][ T8022] usb 3-1: Manufacturer: syz [ 2955.002046][ T8022] usb 3-1: SerialNumber: syz [ 2955.070175][ T8024] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 2955.218488][ T8022] usb 3-1: Found UVC 0.00 device syz (8086:0b07) [ 2955.233687][ T8022] usb 3-1: No valid video chain found. [ 2955.264098][ T8022] usb 3-1: USB disconnect, device number 96 [ 2955.271009][ T8024] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2955.279694][ T8024] usb 5-1: not running at top speed; connect to a high speed hub [ 2955.289926][ T8024] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2955.307240][ T8024] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2955.613098][ T8024] usb 5-1: string descriptor 0 read error: -22 [ 2955.622037][ T8024] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2955.631211][ T8024] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2955.641261][ T8024] usb 5-1: 0:2 : does not exist [ 2955.843793][ T8024] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 2955.856716][ T8024] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 2955.866973][ T8024] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2955.878419][ T8024] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 2956.765611][T26832] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 2956.812310][ T8024] usb 5-1: USB disconnect, device number 80 [ 2957.093772][T26832] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2957.200891][T26832] usb 4-1: not running at top speed; connect to a high speed hub [ 2957.209948][T26832] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2957.223262][T26832] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2957.240691][T26832] usb 4-1: string descriptor 0 read error: -22 [ 2957.250191][T26832] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2957.269311][T26832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2957.279601][T26832] usb 4-1: 0:2 : does not exist [ 2957.503018][T26832] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 2957.589040][T26832] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 2957.654347][T26832] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2957.841807][T26832] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 2957.863692][T26832] usb 4-1: USB disconnect, device number 95 [ 2959.559417][ T9813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11709'. [ 2959.779787][ T9814] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11711'. [ 2960.653300][ T9830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11716'. [ 2960.680106][ T9830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11716'. [ 2960.699563][ T9830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9830 comm=syz.4.11716 [ 2961.583404][ T9843] fuse: Unknown parameter 'û敹 ðîT¦|Wn2´9l}¯@ß [ 2961.583404][ T9843] ÌqþühZ&ô½Ä̇ÎXöâ­' [ 2962.462194][ T9855] binder: 9854:9855 ioctl c00c620f 200000000140 returned -22 [ 2963.349068][ T8024] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 2963.550393][ T8024] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2963.568425][ T8024] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 2963.918439][ T8024] usb 4-1: config 220 interface 0 has no altsetting 0 [ 2963.935962][ T8024] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2963.952488][ T8024] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2963.969307][ T8024] usb 4-1: Product: syz [ 2963.979437][ T8024] usb 4-1: Manufacturer: syz [ 2963.987276][ T8024] usb 4-1: SerialNumber: syz [ 2964.065307][ T9884] fuse: Unknown parameter 'û敹 ðîT¦|Wn2´9l}¯@ß [ 2964.065307][ T9884] ÌqþühZ&ô½Ä̇ÎXöâ­' [ 2964.482269][ T8024] usb 4-1: Found UVC 0.00 device syz (8086:0b07) [ 2964.488741][ T8024] usb 4-1: No valid video chain found. [ 2964.496152][ T8024] usb 4-1: USB disconnect, device number 96 [ 2964.976761][ T9903] overlayfs: missing 'lowerdir' [ 2966.414691][ T9924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11736'. [ 2966.444890][ T9924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11736'. [ 2966.471506][ T9924] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9924 comm=syz.1.11736 [ 2966.744248][ T9931] fuse: Unknown parameter 'û敹 ðîT¦|Wn2´9l}¯@ß [ 2966.744248][ T9931] ÌqþühZ&ô½Ä̇ÎXöâ­' [ 2966.909721][ T8024] usb 6-1: new full-speed USB device number 80 using dummy_hcd [ 2967.941611][ T8024] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2967.951590][ T8024] usb 6-1: not running at top speed; connect to a high speed hub [ 2967.970328][ T8024] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2968.000489][ T9946] binder: 9945:9946 ioctl c00c620f 200000000140 returned -22 [ 2968.069324][ T8024] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2968.080458][ T8024] usb 6-1: string descriptor 0 read error: -22 [ 2968.086691][ T8024] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2968.106924][ T8024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2968.141710][ T8024] usb 6-1: 0:2 : does not exist [ 2968.344397][ T8024] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 2968.356014][ T8024] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 2968.366460][ T8024] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2968.376235][ T8024] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 2968.388367][ T8024] usb 6-1: USB disconnect, device number 80 [ 2968.389513][ T8696] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 2968.581159][ T8696] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2968.591538][ T8696] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 2968.601229][ T8696] usb 4-1: config 220 interface 0 has no altsetting 0 [ 2968.609573][ T8696] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2968.618791][ T8696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2968.627482][ T8696] usb 4-1: Product: syz [ 2968.631718][ T8696] usb 4-1: Manufacturer: syz [ 2968.636335][ T8696] usb 4-1: SerialNumber: syz [ 2969.188527][ T8696] usb 4-1: Found UVC 0.00 device syz (8086:0b07) [ 2969.387204][ T8696] usb 4-1: No valid video chain found. [ 2969.393619][ T8696] usb 4-1: USB disconnect, device number 97 [ 2969.831177][ T9972] fuse: Unknown parameter 'û敹 ðîT¦|Wn2´9l}¯@ß [ 2969.831177][ T9972] ÌqþühZ&ô½Ä̇ÎXöâ­' [ 2969.878062][ T9975] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11751'. [ 2969.887661][ T9975] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11751'. [ 2969.898405][ T9975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9975 comm=syz.5.11751 [ 2969.969369][ T9978] fuse: Unknown parameter 'rootJ ñ™-§Èmode' [ 2972.261973][T10004] overlayfs: missing 'lowerdir' [ 2973.227608][T10011] bridge0: port 1(bridge_slave_0) entered blocking state [ 2973.234887][T10011] bridge0: port 1(bridge_slave_0) entered disabled state [ 2973.243989][T10011] device bridge_slave_0 entered promiscuous mode [ 2973.251346][T10011] bridge0: port 2(bridge_slave_1) entered blocking state [ 2973.258400][T10011] bridge0: port 2(bridge_slave_1) entered disabled state [ 2973.267669][T10011] device bridge_slave_1 entered promiscuous mode [ 2974.412209][ T8347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2974.426847][ T8347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2974.451503][ T8347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2974.467250][ T8347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2974.476498][ T8347] bridge0: port 1(bridge_slave_0) entered blocking state [ 2974.483708][ T8347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2974.502396][ T8347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2974.511778][ T8347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2974.520497][ T8347] bridge0: port 2(bridge_slave_1) entered blocking state [ 2974.527605][ T8347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2974.654493][ T8347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2974.665122][ T8347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2974.822520][ T8347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2974.832417][ T8347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2974.840850][ T8347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2975.077825][ T8347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2975.092116][T10011] device veth0_vlan entered promiscuous mode [ 2975.108518][ T8347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2975.117644][ T8347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2975.144315][T15867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2975.154830][T10011] device veth1_macvtap entered promiscuous mode [ 2975.167945][T15867] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2975.177863][T15867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2975.191186][T15867] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2975.199840][T15867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2975.478240][T30880] device bridge_slave_1 left promiscuous mode [ 2975.484967][T30880] bridge0: port 2(bridge_slave_1) entered disabled state [ 2975.498320][T30880] device bridge_slave_0 left promiscuous mode [ 2975.505394][T10063] overlayfs: missing 'lowerdir' [ 2975.510702][T30880] bridge0: port 1(bridge_slave_0) entered disabled state [ 2975.529178][T30880] device veth1_macvtap left promiscuous mode [ 2976.546426][T30880] device veth0_vlan left promiscuous mode [ 2976.696519][T10075] overlayfs: missing 'lowerdir' [ 2979.756819][T10102] overlayfs: missing 'lowerdir' [ 2983.937931][T10142] overlayfs: missing 'lowerdir' [ 2987.832006][ T4060] usb 6-1: new full-speed USB device number 81 using dummy_hcd [ 2987.970071][T10176] binder: 10175:10176 ioctl c00c620f 200000000140 returned -22 [ 2988.312314][ T4060] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2988.328733][ T4060] usb 6-1: not running at top speed; connect to a high speed hub [ 2988.531796][ T4060] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2988.555530][ T4060] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2988.575990][ T4060] usb 6-1: string descriptor 0 read error: -22 [ 2988.584920][ T4060] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2988.604031][ T4060] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2988.621018][ T4060] usb 6-1: 0:2 : does not exist [ 2988.789313][ T8022] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 2988.844850][ T4060] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 2988.866326][ T4060] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 2988.882061][ T4060] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2988.965116][ T4060] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 2988.983331][ T4060] usb 6-1: USB disconnect, device number 81 [ 2989.020899][ T8022] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2989.039641][ T8022] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 2989.104970][T10196] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11800'. [ 2989.339333][ T8022] usb 2-1: config 220 interface 0 has no altsetting 0 [ 2989.351319][ T8022] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2989.362823][ T8022] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2989.375372][ T8022] usb 2-1: Product: syz [ 2989.380008][ T8022] usb 2-1: Manufacturer: syz [ 2989.388288][T10199] overlayfs: missing 'lowerdir' [ 2989.395233][ T8022] usb 2-1: SerialNumber: syz [ 2989.876162][ T8022] usb 2-1: Found UVC 0.00 device syz (8086:0b07) [ 2989.883335][T10204] binder: 10203:10204 ioctl c00c620f 200000000140 returned -22 [ 2989.891497][ T8022] usb 2-1: No valid video chain found. [ 2989.899574][ T8022] usb 2-1: USB disconnect, device number 98 [ 2990.479344][ T3795] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 2991.310910][ T3795] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2991.349358][ T3795] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 2991.386092][ T3795] usb 6-1: config 220 interface 0 has no altsetting 0 [ 2991.405625][ T3795] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2991.424538][ T3795] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2991.438658][ T3795] usb 6-1: Product: syz [ 2991.449302][ T3795] usb 6-1: Manufacturer: syz [ 2991.453982][ T3795] usb 6-1: SerialNumber: syz [ 2991.490574][T10234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11811'. [ 2991.509883][T10234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11811'. [ 2991.542215][T10234] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10234 comm=syz.3.11811 [ 2991.683189][ T3795] usb 6-1: Found UVC 0.00 device syz (8086:0b07) [ 2991.692180][ T3795] usb 6-1: No valid video chain found. [ 2991.705375][ T3795] usb 6-1: USB disconnect, device number 82 [ 2991.865250][T10237] bridge0: port 1(bridge_slave_0) entered blocking state [ 2991.873179][T10237] bridge0: port 1(bridge_slave_0) entered disabled state [ 2991.881075][T10237] device bridge_slave_0 entered promiscuous mode [ 2991.892893][T10237] bridge0: port 2(bridge_slave_1) entered blocking state [ 2991.900089][T10237] bridge0: port 2(bridge_slave_1) entered disabled state [ 2991.907559][T10237] device bridge_slave_1 entered promiscuous mode [ 2991.967630][T10237] bridge0: port 2(bridge_slave_1) entered blocking state [ 2991.974749][T10237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2991.982208][T10237] bridge0: port 1(bridge_slave_0) entered blocking state [ 2991.989290][T10237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2992.017249][T15867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2992.025658][T15867] bridge0: port 1(bridge_slave_0) entered disabled state [ 2992.033628][T15867] bridge0: port 2(bridge_slave_1) entered disabled state [ 2992.053083][T15867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2992.061372][T15867] bridge0: port 1(bridge_slave_0) entered blocking state [ 2992.068485][T15867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2992.076565][T15867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2992.085016][T15867] bridge0: port 2(bridge_slave_1) entered blocking state [ 2992.092177][T15867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2992.100135][T15867] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2992.112965][T15867] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2992.156603][T10237] device veth0_vlan entered promiscuous mode [ 2992.175334][T15867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2992.187610][T15867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2992.206207][T15867] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2992.222580][T15867] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2992.298788][T10237] device veth1_macvtap entered promiscuous mode [ 2992.331214][T15867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2992.472537][T15867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2992.481228][T15867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2993.280433][T10266] fuse: Unknown parameter 'rootJ ñ™-§Èmode' [ 2994.610079][T30880] device bridge_slave_1 left promiscuous mode [ 2994.616339][T30880] bridge0: port 2(bridge_slave_1) entered disabled state [ 2994.649708][T30880] device bridge_slave_0 left promiscuous mode [ 2994.666079][T30880] bridge0: port 1(bridge_slave_0) entered disabled state [ 2994.681025][T30880] device veth1_macvtap left promiscuous mode [ 2994.697244][T30880] device veth0_vlan left promiscuous mode [ 2995.339699][ T8022] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 2995.521402][ T8022] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2995.530533][ T8022] usb 4-1: not running at top speed; connect to a high speed hub [ 2995.540604][ T8022] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2995.551285][ T8022] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2995.564125][ T8022] usb 4-1: string descriptor 0 read error: -22 [ 2995.571809][ T8022] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2995.582035][ T8022] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2995.596294][ T8022] usb 4-1: 0:2 : does not exist [ 2997.650556][ T8022] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 2997.692067][ T8022] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 2997.746434][ T8022] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2997.765870][ T8022] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 2997.787037][ T8022] usb 4-1: USB disconnect, device number 98 [ 2997.896503][T10302] fuse: Unknown parameter 'rootJ ñ™-§Èmode' [ 2998.721154][T10325] fuse: Unknown parameter 'û敹 ðîT¦|Wn2´9l}¯@ß [ 2998.721154][T10325] ÌqþühZ&ô½Ä̇ÎXöâ­' [ 3003.720967][ T8026] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 3004.080539][T10376] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11843'. [ 3004.095395][T10376] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11843'. [ 3004.106197][T10376] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10376 comm=syz.5.11843 [ 3004.344173][T10383] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11845'. [ 3004.540649][T10385] overlayfs: overlapping lowerdir path [ 3004.810466][ T8026] usb 5-1: unable to get BOS descriptor or descriptor too short [ 3004.825423][ T8026] usb 5-1: not running at top speed; connect to a high speed hub [ 3004.854883][ T8026] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3004.866169][ T8026] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3005.036006][ T8026] usb 5-1: string descriptor 0 read error: -22 [ 3005.780174][ T8026] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3005.789570][ T8026] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3005.810859][ T8026] usb 5-1: 0:2 : does not exist [ 3007.046731][ T8026] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 3007.249871][ T8026] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 3007.260449][ T8026] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 3007.270452][ T8026] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 3007.281659][ T8026] usb 5-1: USB disconnect, device number 81 [ 3009.542254][T10426] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11854'. [ 3010.836117][T10450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11860'. [ 3010.852416][T10450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11860'. [ 3010.877732][T10450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10450 comm=syz.3.11860 [ 3014.500686][T10485] overlayfs: missing 'lowerdir' [ 3015.529749][ T8022] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 3015.732923][ T8022] usb 2-1: unable to get BOS descriptor or descriptor too short [ 3015.747727][ T8022] usb 2-1: not running at top speed; connect to a high speed hub [ 3015.769099][ T8022] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3015.785513][ T8022] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3015.803511][ T8022] usb 2-1: string descriptor 0 read error: -22 [ 3015.811986][ T8022] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3015.827204][ T8022] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3015.880435][ T8022] usb 2-1: 0:2 : does not exist [ 3016.185174][ T8022] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 3016.199419][ T8022] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 3016.213814][ T8022] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 3016.228185][ T8022] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 3016.243213][ T8022] usb 2-1: USB disconnect, device number 99 [ 3016.417578][T10512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11875'. [ 3016.427909][T10512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11875'. [ 3016.437488][T10512] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10512 comm=syz.3.11875 [ 3016.540139][T10516] overlayfs: missing 'lowerdir' [ 3018.423703][T10539] overlayfs: overlapping lowerdir path [ 3018.543951][T10541] overlayfs: missing 'lowerdir' [ 3020.461423][T10571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11890'. [ 3020.483489][T10571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11890'. [ 3020.511380][T10571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10571 comm=syz.2.11890 [ 3021.536711][T10583] binder: 10582:10583 ioctl c00c620f 200000000140 returned -22 [ 3021.624949][T10587] overlayfs: missing 'lowerdir' [ 3023.656135][T10601] overlayfs: missing 'lowerdir' [ 3023.701116][T10603] overlayfs: missing 'lowerdir' [ 3023.739427][ T8696] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 3023.864483][T10609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11899'. [ 3023.886798][T10609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11899'. [ 3023.907385][T10609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10609 comm=syz.2.11899 [ 3023.950356][ T8696] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 3023.967120][ T8696] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 3023.981821][ T8696] usb 6-1: config 220 interface 0 has no altsetting 0 [ 3023.996953][ T8696] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 3024.019392][ T8696] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3024.037141][ T8696] usb 6-1: Product: syz [ 3024.048000][ T8696] usb 6-1: Manufacturer: syz [ 3024.055003][ T8696] usb 6-1: SerialNumber: syz [ 3024.270209][ T8696] usb 6-1: Found UVC 0.00 device syz (8086:0b07) [ 3024.276712][ T8696] usb 6-1: No valid video chain found. [ 3024.299945][ T8696] usb 6-1: USB disconnect, device number 83 [ 3024.776416][T10630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11904'. [ 3024.805268][T10630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11904'. [ 3024.828419][T10630] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10630 comm=syz.1.11904 [ 3026.291465][T10644] binder: 10643:10644 ioctl c00c620f 200000000140 returned -22 [ 3027.609327][ T8022] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 3027.691167][T10665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11913'. [ 3027.709480][T10665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11913'. [ 3027.730652][T10665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10665 comm=syz.3.11913 [ 3027.800944][ T8022] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 3027.816854][ T8022] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 3027.834909][ T8022] usb 3-1: config 220 interface 0 has no altsetting 0 [ 3027.850629][ T8022] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 3027.862371][ T8022] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3027.874972][ T8022] usb 3-1: Product: syz [ 3027.882451][ T8022] usb 3-1: Manufacturer: syz [ 3027.889458][ T8022] usb 3-1: SerialNumber: syz [ 3028.099552][T10644] IPv6: NLM_F_CREATE should be specified when creating new route [ 3028.111310][ T8022] usb 3-1: Found UVC 0.00 device syz (8086:0b07) [ 3028.117762][ T8022] usb 3-1: No valid video chain found. [ 3028.123925][ T8022] usb 3-1: USB disconnect, device number 97 [ 3029.374058][T10688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11919'. [ 3029.390499][T10688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11919'. [ 3029.409943][T10688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10688 comm=syz.2.11919 [ 3030.229154][T10697] binder: 10696:10697 ioctl c00c620f 200000000140 returned -22 [ 3030.829268][ T8026] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 3031.030610][ T8026] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 3031.041545][ T8026] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 3031.052329][ T8026] usb 6-1: config 220 interface 0 has no altsetting 0 [ 3031.102801][ T8026] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 3031.120723][ T8026] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3031.142617][T10717] binder: 10716:10717 ioctl c00c620f 200000000140 returned -22 [ 3031.156931][ T8026] usb 6-1: Product: syz [ 3031.166746][ T8026] usb 6-1: Manufacturer: syz [ 3031.177934][ T8026] usb 6-1: SerialNumber: syz [ 3031.395196][ T8026] usb 6-1: Found UVC 0.00 device syz (8086:0b07) [ 3031.401756][ T8026] usb 6-1: No valid video chain found. [ 3031.408052][ T8026] usb 6-1: USB disconnect, device number 84 [ 3031.508610][T10724] overlayfs: missing 'lowerdir' [ 3031.725791][ T8020] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 3031.920446][ T8020] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 3031.931289][ T8020] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 3031.972328][ T8020] usb 3-1: config 220 interface 0 has no altsetting 0 [ 3031.980871][ T8020] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 3031.990411][ T8020] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3031.998660][ T8020] usb 3-1: Product: syz [ 3032.003516][ T8020] usb 3-1: Manufacturer: syz [ 3032.008215][ T8020] usb 3-1: SerialNumber: syz [ 3032.409799][ T8020] usb 3-1: Found UVC 0.00 device syz (8086:0b07) [ 3032.418055][ T8020] usb 3-1: No valid video chain found. [ 3032.424965][ T8020] usb 3-1: USB disconnect, device number 98 [ 3032.432562][T10734] binder: 10733:10734 ioctl c00c620f 200000000140 returned -22 [ 3032.449128][T10735] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11930'. [ 3032.459382][T10735] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11930'. [ 3032.468738][T10735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10735 comm=syz.5.11930 [ 3032.989309][ T8022] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 3033.008336][T10743] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11933'. [ 3033.034344][T10743] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11933'. [ 3033.068194][T10743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10743 comm=syz.5.11933 [ 3033.191233][ T8022] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 3033.202103][ T8022] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 3033.211982][ T8022] usb 4-1: config 220 interface 0 has no altsetting 0 [ 3033.220639][ T8022] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 3033.230806][ T8022] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3033.274077][ T8022] usb 4-1: Product: syz [ 3033.278356][ T8022] usb 4-1: Manufacturer: syz [ 3033.283537][ T8022] usb 4-1: SerialNumber: syz [ 3033.766495][ T8022] usb 4-1: Found UVC 0.00 device syz (8086:0b07) [ 3033.779526][ T8022] usb 4-1: No valid video chain found. [ 3033.785787][ T8022] usb 4-1: USB disconnect, device number 99 [ 3033.933722][T10762] fuse: Bad value for 'fd' [ 3035.154780][T10776] overlayfs: missing 'lowerdir' [ 3035.492350][T10784] overlayfs: missing 'lowerdir' [ 3035.586893][T10786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11944'. [ 3035.600679][T10786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11944'. [ 3035.613803][T10786] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10786 comm=syz.1.11944 [ 3038.134768][T10806] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11948'. [ 3038.155070][T10806] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11948'. [ 3038.220593][T10810] binder: 10809:10810 ioctl c00c620f 200000000140 returned -22 [ 3038.238790][T10806] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10806 comm=syz.5.11948 [ 3039.765880][ T8022] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 3040.250538][ T8022] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 3040.261131][ T8022] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 3040.270422][ T8022] usb 4-1: config 220 interface 0 has no altsetting 0 [ 3040.278734][ T8022] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 3040.287903][ T8022] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3040.296675][ T8022] usb 4-1: Product: syz [ 3040.300933][ T8022] usb 4-1: Manufacturer: syz [ 3040.305572][ T8022] usb 4-1: SerialNumber: syz [ 3040.574124][ T8022] usb 4-1: Found UVC 0.00 device syz (8086:0b07) [ 3040.581425][ T8022] usb 4-1: No valid video chain found. [ 3040.587700][ T8022] usb 4-1: USB disconnect, device number 100 [ 3041.182396][T10853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11961'. [ 3041.202756][T10853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11961'. [ 3041.244323][T10853] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10853 comm=syz.3.11961 [ 3043.065104][T10872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11965'. [ 3043.074691][T10876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11965'. [ 3043.154983][T23898] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 3043.176744][T10872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10872 comm=syz.3.11965 [ 3044.851262][T23898] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3044.859573][T23898] usb 3-1: not running at top speed; connect to a high speed hub [ 3044.868114][T23898] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3044.878999][T23898] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3044.890677][T23898] usb 3-1: string descriptor 0 read error: -22 [ 3044.897029][T23898] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3044.906783][T23898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3044.924063][T10889] binder: 10888:10889 ioctl c00c620f 200000000140 returned -22 [ 3044.946510][T23898] usb 3-1: can't set config #1, error -71 [ 3044.970107][T23898] usb 3-1: USB disconnect, device number 99 [ 3045.047865][ T28] audit: type=1400 audit(1760076454.685:15431): avc: denied { ioctl } for pid=10894 comm="syz.5.11974" path="socket:[183860]" dev="sockfs" ino=183860 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 3045.154074][T10906] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11975'. [ 3045.173270][T10906] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11975'. [ 3045.199629][T10906] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10906 comm=syz.5.11975 [ 3045.269936][ T8026] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 3045.470543][ T8026] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 3045.481176][ T8026] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 3045.490268][ T8026] usb 5-1: config 220 interface 0 has no altsetting 0 [ 3045.498850][ T8026] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 3045.507997][ T8026] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3045.516386][ T8026] usb 5-1: Product: syz [ 3045.520895][ T8026] usb 5-1: Manufacturer: syz [ 3045.525516][ T8026] usb 5-1: SerialNumber: syz [ 3045.732050][T10889] IPv6: NLM_F_CREATE should be specified when creating new route [ 3045.742007][T10909] FAULT_INJECTION: forcing a failure. [ 3045.742007][T10909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3045.756041][T10909] CPU: 1 PID: 10909 Comm: syz.3.11976 Tainted: G W syzkaller #0 [ 3045.765189][T10909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3045.775274][T10909] Call Trace: [ 3045.778569][T10909] [ 3045.781541][T10909] __dump_stack+0x21/0x24 [ 3045.785982][T10909] dump_stack_lvl+0xee/0x150 [ 3045.790581][T10909] ? __cfi_dump_stack_lvl+0x8/0x8 [ 3045.795617][T10909] ? _parse_integer+0x2a/0x40 [ 3045.800331][T10909] dump_stack+0x15/0x24 [ 3045.804772][T10909] should_fail_ex+0x3d4/0x520 [ 3045.809481][T10909] should_fail+0xb/0x10 [ 3045.813652][T10909] should_fail_usercopy+0x1a/0x20 [ 3045.818692][T10909] _copy_from_user+0x1e/0xc0 [ 3045.823305][T10909] ___sys_sendmsg+0x155/0x290 [ 3045.827990][T10909] ? __sys_sendmsg+0x270/0x270 [ 3045.832765][T10909] ? __kasan_check_write+0x14/0x20 [ 3045.837885][T10909] ? proc_fail_nth_write+0x17a/0x1f0 [ 3045.843178][T10909] ? vfs_write+0x9d6/0xca0 [ 3045.847624][T10909] ? __fdget+0x19c/0x220 [ 3045.851886][T10909] __x64_sys_sendmsg+0x1f0/0x2c0 [ 3045.856847][T10909] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 3045.862328][T10909] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 3045.868495][T10909] x64_sys_call+0x171/0x9a0 [ 3045.873006][T10909] do_syscall_64+0x4c/0xa0 [ 3045.877448][T10909] ? clear_bhb_loop+0x30/0x80 [ 3045.882142][T10909] ? clear_bhb_loop+0x30/0x80 [ 3045.886828][T10909] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3045.892730][T10909] RIP: 0033:0x7f7b65b8eec9 [ 3045.897160][T10909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3045.916869][T10909] RSP: 002b:00007f7b669af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3045.925316][T10909] RAX: ffffffffffffffda RBX: 00007f7b65de6090 RCX: 00007f7b65b8eec9 [ 3045.933309][T10909] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000009 [ 3045.941560][T10909] RBP: 00007f7b669af090 R08: 0000000000000000 R09: 0000000000000000 [ 3045.949627][T10909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3045.957703][T10909] R13: 00007f7b65de6128 R14: 00007f7b65de6090 R15: 00007fffe506e748 [ 3045.965693][T10909] [ 3045.984736][ T8026] usb 5-1: Found UVC 0.00 device syz (8086:0b07) [ 3045.996280][ T8026] usb 5-1: No valid video chain found. [ 3046.006788][ T8026] usb 5-1: USB disconnect, device number 82 [ 3046.627332][T10927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11981'. [ 3046.641077][T10927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11981'. [ 3046.652971][T10927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10927 comm=syz.3.11981 [ 3048.292252][ T2010] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 3048.571371][T10962] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11989'. [ 3048.602160][T10964] binder: 10963:10964 ioctl c00c620f 200000000140 returned -22 [ 3048.614578][T10962] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11989'. [ 3048.634514][T10962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10962 comm=syz.5.11989 [ 3048.760764][ T2010] usb 5-1: unable to get BOS descriptor or descriptor too short [ 3048.768893][ T2010] usb 5-1: not running at top speed; connect to a high speed hub [ 3048.777809][ T2010] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3048.788075][ T2010] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3048.799506][ T2010] usb 5-1: string descriptor 0 read error: -22 [ 3048.805801][ T2010] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3048.815330][ T2010] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3048.854616][ T2010] usb 5-1: 0:2 : does not exist [ 3049.001675][T10885] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 3049.362143][ T2010] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 3049.393502][ T2010] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 3049.404712][T10885] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 3049.417664][T10885] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 3049.429641][T10885] usb 4-1: config 220 interface 0 has no altsetting 0 [ 3049.440800][ T2010] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 3049.473252][T10885] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 3049.483025][T10885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3049.491454][T10885] usb 4-1: Product: syz [ 3049.495996][T10885] usb 4-1: Manufacturer: syz [ 3049.500970][T10885] usb 4-1: SerialNumber: syz [ 3049.507111][ T2010] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 3049.519735][ T2010] usb 5-1: USB disconnect, device number 83 [ 3049.748578][T10885] usb 4-1: Found UVC 0.00 device syz (8086:0b07) [ 3049.755316][T10885] usb 4-1: No valid video chain found. [ 3049.764138][T10885] usb 4-1: USB disconnect, device number 101 [ 3051.340209][T11007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12003'. [ 3051.370627][T11007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12003'. [ 3052.214487][T11016] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11016 comm=syz.3.12003 [ 3052.461094][T11031] binder: 11030:11031 ioctl c00c620f 200000000140 returned -22 [ 3052.739988][T10885] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 3052.868145][T11039] binder: 11038:11039 ioctl c00c620f 200000000140 returned -22 [ 3052.950408][T10885] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 3052.961149][T10885] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 3052.970352][T10885] usb 3-1: config 220 interface 0 has no altsetting 0 [ 3052.978771][T10885] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 3052.988075][T10885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3052.996633][T10885] usb 3-1: Product: syz [ 3053.000975][T10885] usb 3-1: Manufacturer: syz [ 3053.005623][T10885] usb 3-1: SerialNumber: syz [ 3053.139665][T23898] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 3053.265448][T10885] usb 3-1: Found UVC 0.00 device syz (8086:0b07) [ 3053.272296][T10885] usb 3-1: No valid video chain found. [ 3053.279881][T10885] usb 3-1: USB disconnect, device number 100 [ 3055.086736][T23898] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 3055.097506][T23898] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 3055.107150][T23898] usb 5-1: config 220 interface 0 has no altsetting 0 [ 3055.116901][T23898] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 3055.126303][T23898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3055.216888][T11057] 8021q: VLANs not supported on ip_vti0 [ 3055.841470][ T28] audit: type=1400 audit(1760076465.045:15432): avc: denied { create } for pid=11056 comm="syz.3.12015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 3055.891022][T23898] usb 5-1: Product: syz [ 3055.898346][T23898] usb 5-1: Manufacturer: syz [ 3055.904072][T23898] usb 5-1: SerialNumber: syz [ 3056.020171][ T28] audit: type=1400 audit(1760076465.045:15433): avc: denied { write } for pid=11056 comm="syz.3.12015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 3056.034999][T23898] usb 5-1: can't set config #220, error -71 [ 3056.096884][T23898] usb 5-1: USB disconnect, device number 84 [ 3056.235693][T11069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12016'. [ 3057.018547][T11079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12016'. [ 3057.050471][T11069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11069 comm=syz.3.12016 [ 3057.125385][ T28] audit: type=1400 audit(1760076466.765:15434): avc: denied { setopt } for pid=11083 comm="syz.2.12021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 3057.171866][ T28] audit: type=1400 audit(1760076466.795:15435): avc: denied { getopt } for pid=11083 comm="syz.2.12021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 3058.688965][T11107] binder: 11106:11107 ioctl c00c620f 200000000140 returned -22 [ 3058.928519][T11116] FAULT_INJECTION: forcing a failure. [ 3058.928519][T11116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3058.941671][T11116] CPU: 1 PID: 11116 Comm: syz.2.12028 Tainted: G W syzkaller #0 [ 3058.950748][T11116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3058.960821][T11116] Call Trace: [ 3058.964103][T11116] [ 3058.967033][T11116] __dump_stack+0x21/0x24 [ 3058.971372][T11116] dump_stack_lvl+0xee/0x150 [ 3058.976084][T11116] ? __cfi_dump_stack_lvl+0x8/0x8 [ 3058.981287][T11116] ? _parse_integer+0x2a/0x40 [ 3058.986077][T11116] dump_stack+0x15/0x24 [ 3058.990260][T11116] should_fail_ex+0x3d4/0x520 [ 3058.994968][T11116] should_fail+0xb/0x10 [ 3058.999141][T11116] should_fail_usercopy+0x1a/0x20 [ 3059.004384][T11116] _copy_from_user+0x1e/0xc0 [ 3059.009076][T11116] ___sys_sendmsg+0x155/0x290 [ 3059.013765][T11116] ? __sys_sendmsg+0x270/0x270 [ 3059.018626][T11116] ? __kasan_check_write+0x14/0x20 [ 3059.023754][T11116] ? proc_fail_nth_write+0x17a/0x1f0 [ 3059.029069][T11116] ? vfs_write+0x9d6/0xca0 [ 3059.033588][T11116] ? __fdget+0x19c/0x220 [ 3059.037845][T11116] __x64_sys_sendmsg+0x1f0/0x2c0 [ 3059.042835][T11116] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 3059.048574][T11116] ? __kasan_check_write+0x14/0x20 [ 3059.053693][T11116] ? fpregs_restore_userregs+0x128/0x260 [ 3059.059433][T11116] ? switch_fpu_return+0xe/0x10 [ 3059.064393][T11116] x64_sys_call+0x171/0x9a0 [ 3059.068994][T11116] do_syscall_64+0x4c/0xa0 [ 3059.073415][T11116] ? clear_bhb_loop+0x30/0x80 [ 3059.078103][T11116] ? clear_bhb_loop+0x30/0x80 [ 3059.082783][T11116] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3059.088689][T11116] RIP: 0033:0x7f0cbff8eec9 [ 3059.093108][T11116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3059.113001][T11116] RSP: 002b:00007f0cc0e1a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3059.121685][T11116] RAX: ffffffffffffffda RBX: 00007f0cc01e6180 RCX: 00007f0cbff8eec9 [ 3059.129670][T11116] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000009 [ 3059.137749][T11116] RBP: 00007f0cc0e1a090 R08: 0000000000000000 R09: 0000000000000000 [ 3059.145732][T11116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3059.153703][T11116] R13: 00007f0cc01e6218 R14: 00007f0cc01e6180 R15: 00007ffc36ecd288 [ 3059.161689][T11116] [ 3060.059274][T23898] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 3060.088885][T11127] FAULT_INJECTION: forcing a failure. [ 3060.088885][T11127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3060.119280][T11127] CPU: 0 PID: 11127 Comm: syz.1.12033 Tainted: G W syzkaller #0 [ 3060.128538][T11127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3060.138739][T11127] Call Trace: [ 3060.142062][T11127] [ 3060.145020][T11127] __dump_stack+0x21/0x24 [ 3060.149576][T11127] dump_stack_lvl+0xee/0x150 [ 3060.154193][T11127] ? __cfi_dump_stack_lvl+0x8/0x8 [ 3060.159255][T11127] dump_stack+0x15/0x24 [ 3060.163422][T11127] should_fail_ex+0x3d4/0x520 [ 3060.168118][T11127] should_fail+0xb/0x10 [ 3060.172452][T11127] should_fail_usercopy+0x1a/0x20 [ 3060.177510][T11127] _copy_from_user+0x1e/0xc0 [ 3060.182120][T11127] __sys_bpf+0x277/0x780 [ 3060.186395][T11127] ? bpf_link_show_fdinfo+0x320/0x320 [ 3060.191810][T11127] ? __cfi_ksys_write+0x10/0x10 [ 3060.196706][T11127] ? debug_smp_processor_id+0x17/0x20 [ 3060.202109][T11127] __x64_sys_bpf+0x7c/0x90 [ 3060.206658][T11127] x64_sys_call+0x488/0x9a0 [ 3060.211229][T11127] do_syscall_64+0x4c/0xa0 [ 3060.215668][T11127] ? clear_bhb_loop+0x30/0x80 [ 3060.220377][T11127] ? clear_bhb_loop+0x30/0x80 [ 3060.225080][T11127] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3060.230995][T11127] RIP: 0033:0x7ffb6258eec9 [ 3060.235428][T11127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3060.255175][T11127] RSP: 002b:00007ffb63364038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3060.263622][T11127] RAX: ffffffffffffffda RBX: 00007ffb627e5fa0 RCX: 00007ffb6258eec9 [ 3060.271759][T11127] RDX: 0000000000000020 RSI: 0000200000000180 RDI: 0000000000000002 [ 3060.279766][T11127] RBP: 00007ffb63364090 R08: 0000000000000000 R09: 0000000000000000 [ 3060.287761][T11127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3060.295753][T11127] R13: 00007ffb627e6038 R14: 00007ffb627e5fa0 R15: 00007fffe4f6d968 [ 3060.303749][T11127] [ 3061.348915][T11137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12034'. [ 3061.365293][T11137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12034'. [ 3061.376445][T11137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11137 comm=syz.1.12034 [ 3061.474088][T23898] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 3061.484665][T23898] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 3061.494311][T23898] usb 4-1: config 220 interface 0 has no altsetting 0 [ 3061.503134][T23898] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 3061.512565][T23898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3062.161135][T10885] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 3062.180512][T23898] usb 4-1: Product: syz [ 3062.184792][T23898] usb 4-1: Manufacturer: syz [ 3062.189442][T23898] usb 4-1: SerialNumber: syz [ 3062.373423][T11146] overlayfs: missing 'lowerdir' [ 3062.597035][T10885] usb 5-1: device descriptor read/64, error -71 [ 3062.640977][T23898] usb 4-1: can't set config #220, error -71 [ 3062.745934][T23898] usb 4-1: USB disconnect, device number 102 [ 3065.459970][T11182] overlayfs: unrecognized mount option "uuid=auto" or missing value [ 3065.472331][T11182] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3065.667941][T11186] fuse: Unknown parameter 'rootJ ñ™-§Èmode' [ 3066.113931][T11194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12048'. [ 3066.124118][T11194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12048'. [ 3066.143754][T11194] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11194 comm=syz.1.12048 [ 3066.469283][ T28] audit: type=1326 audit(1760076476.095:15436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11187 comm="syz.2.12047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbff8eec9 code=0x7ffc0000 [ 3066.500517][T11195] SELinux: Context system_u:object_r:tmp_t:s0 is not valid (left unmapped). [ 3066.541331][ T28] audit: type=1326 audit(1760076476.105:15437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11187 comm="syz.2.12047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0cbff8eec9 code=0x7ffc0000 [ 3066.616324][ T28] audit: type=1326 audit(1760076476.105:15438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11187 comm="syz.2.12047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbff8eec9 code=0x7ffc0000 [ 3066.668333][ T28] audit: type=1326 audit(1760076476.125:15439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11187 comm="syz.2.12047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbff8eec9 code=0x7ffc0000 [ 3066.700068][ T28] audit: type=1326 audit(1760076476.145:15440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11187 comm="syz.2.12047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0cbff8eec9 code=0x7ffc0000 [ 3066.725694][ T28] audit: type=1326 audit(1760076476.145:15441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11187 comm="syz.2.12047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbff8eec9 code=0x7ffc0000 [ 3066.751714][ T28] audit: type=1326 audit(1760076476.145:15442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11187 comm="syz.2.12047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbff8eec9 code=0x7ffc0000 [ 3066.778051][ T28] audit: type=1326 audit(1760076476.145:15443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11187 comm="syz.2.12047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0cbff8eec9 code=0x7ffc0000 [ 3066.815699][ T28] audit: type=1326 audit(1760076476.145:15444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11187 comm="syz.2.12047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbff8eec9 code=0x7ffc0000 [ 3066.854613][ T28] audit: type=1326 audit(1760076476.145:15445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11187 comm="syz.2.12047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbff8eec9 code=0x7ffc0000 [ 3068.638299][T11218] binder: 11217:11218 ioctl c00c620f 200000000140 returned -22 [ 3068.913756][T11228] fuse: Unknown parameter 'rootJ ñ™-§Èmode' [ 3068.929428][T26832] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 3069.120333][T26832] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 3069.138534][T26832] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 3069.164626][T26832] usb 6-1: config 220 interface 0 has no altsetting 0 [ 3069.185615][T26832] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 3069.195069][T26832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3069.203705][T26832] usb 6-1: Product: syz [ 3069.208167][T26832] usb 6-1: Manufacturer: syz [ 3069.220688][T26832] usb 6-1: SerialNumber: syz [ 3069.266105][T11234] overlayfs: unrecognized mount option "uuid=auto" or missing value [ 3069.281796][T11234] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3069.289138][T11234] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3069.312563][T14768] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 3069.357887][T14768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3069.377604][T14768] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 3069.398459][T14768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3069.420498][T14768] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3069.434571][T14768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3069.443070][T14768] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3069.452883][T14768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3069.468351][T26832] usb 6-1: Found UVC 0.00 device syz (8086:0b07) [ 3069.487327][T26832] usb 6-1: No valid video chain found. [ 3069.505593][T26832] usb 6-1: USB disconnect, device number 85 [ 3072.556551][T11397] overlayfs: './file1' not a directory [ 3073.441399][T11413] overlayfs: missing 'lowerdir' [ 3074.135801][T11428] binder: 11427:11428 ioctl c00c620f 200000000140 returned -22 [ 3074.499799][ T3795] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 3074.680858][ T3795] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 3074.696517][ T3795] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 3074.720107][ T3795] usb 4-1: config 220 interface 0 has no altsetting 0 [ 3074.746142][ T3795] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 3074.769544][ T3795] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3074.782947][ T3795] usb 4-1: Product: syz [ 3074.791386][ T3795] usb 4-1: Manufacturer: syz [ 3074.798078][ T3795] usb 4-1: SerialNumber: syz [ 3074.867518][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 3074.867535][ T28] audit: type=1400 audit(1760076484.505:15486): avc: denied { read } for pid=11435 comm="syz.1.12075" name="usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 3074.951681][ T28] audit: type=1400 audit(1760076484.535:15487): avc: denied { open } for pid=11435 comm="syz.1.12075" path="/dev/usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 3074.978529][ T28] audit: type=1400 audit(1760076484.545:15488): avc: denied { ioctl } for pid=11435 comm="syz.1.12075" path="/dev/usbmon0" dev="devtmpfs" ino=159 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 3075.278374][ T28] audit: type=1400 audit(1760076484.895:15489): avc: denied { write } for pid=11435 comm="syz.1.12075" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 3075.334094][ T3795] usb 4-1: Found UVC 0.00 device syz (8086:0b07) [ 3075.340792][ T3795] usb 4-1: No valid video chain found. [ 3075.347083][ T3795] usb 4-1: USB disconnect, device number 103 [ 3075.448111][T11457] FAULT_INJECTION: forcing a failure. [ 3075.448111][T11457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3075.461618][T11457] CPU: 1 PID: 11457 Comm: syz.2.12080 Tainted: G W syzkaller #0 [ 3075.470747][T11457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3075.480891][T11457] Call Trace: [ 3075.484178][T11457] [ 3075.487196][T11457] __dump_stack+0x21/0x24 [ 3075.491542][T11457] dump_stack_lvl+0xee/0x150 [ 3075.496181][T11457] ? __cfi_dump_stack_lvl+0x8/0x8 [ 3075.501371][T11457] dump_stack+0x15/0x24 [ 3075.505539][T11457] should_fail_ex+0x3d4/0x520 [ 3075.510224][T11457] should_fail+0xb/0x10 [ 3075.514482][T11457] should_fail_usercopy+0x1a/0x20 [ 3075.519515][T11457] _copy_from_user+0x1e/0xc0 [ 3075.524130][T11457] __sys_bpf+0x277/0x780 [ 3075.528385][T11457] ? bpf_link_show_fdinfo+0x320/0x320 [ 3075.533770][T11457] ? __cfi_ksys_write+0x10/0x10 [ 3075.538721][T11457] ? debug_smp_processor_id+0x17/0x20 [ 3075.544253][T11457] __x64_sys_bpf+0x7c/0x90 [ 3075.548777][T11457] x64_sys_call+0x488/0x9a0 [ 3075.553314][T11457] do_syscall_64+0x4c/0xa0 [ 3075.557747][T11457] ? clear_bhb_loop+0x30/0x80 [ 3075.562440][T11457] ? clear_bhb_loop+0x30/0x80 [ 3075.567157][T11457] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3075.573149][T11457] RIP: 0033:0x7f0cbff8eec9 [ 3075.577652][T11457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3075.597435][T11457] RSP: 002b:00007f0cc0e5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3075.605866][T11457] RAX: ffffffffffffffda RBX: 00007f0cc01e5fa0 RCX: 00007f0cbff8eec9 [ 3075.613890][T11457] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 0000000000000000 [ 3075.621916][T11457] RBP: 00007f0cc0e5c090 R08: 0000000000000000 R09: 0000000000000000 [ 3075.630084][T11457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3075.638089][T11457] R13: 00007f0cc01e6038 R14: 00007f0cc01e5fa0 R15: 00007ffc36ecd288 [ 3075.646075][T11457] [ 3076.135787][ T28] audit: type=1400 audit(1760076485.535:15490): avc: denied { bind } for pid=11459 comm="syz.1.12081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 3076.174051][ T28] audit: type=1400 audit(1760076485.535:15491): avc: denied { name_bind } for pid=11459 comm="syz.1.12081" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 3076.256314][T11470] overlayfs: missing 'lowerdir' [ 3076.810144][ T28] audit: type=1400 audit(1760076485.535:15492): avc: denied { node_bind } for pid=11459 comm="syz.1.12081" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 3076.833151][ T28] audit: type=1326 audit(1760076486.415:15493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11469 comm="syz.2.12084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbff8eec9 code=0x7ffc0000 [ 3076.858017][ T28] audit: type=1326 audit(1760076486.415:15494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11469 comm="syz.2.12084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cbff8eec9 code=0x7ffc0000 [ 3076.981630][T11483] FAULT_INJECTION: forcing a failure. [ 3076.981630][T11483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3076.994910][T11483] CPU: 1 PID: 11483 Comm: syz.3.12086 Tainted: G W syzkaller #0 [ 3077.004137][T11483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3077.014221][T11483] Call Trace: [ 3077.017530][T11483] [ 3077.020470][T11483] __dump_stack+0x21/0x24 [ 3077.024810][T11483] dump_stack_lvl+0xee/0x150 [ 3077.029498][T11483] ? __cfi_dump_stack_lvl+0x8/0x8 [ 3077.034525][T11483] ? __schedule+0xb8f/0x14e0 [ 3077.039124][T11483] dump_stack+0x15/0x24 [ 3077.043288][T11483] should_fail_ex+0x3d4/0x520 [ 3077.048065][T11483] should_fail+0xb/0x10 [ 3077.052238][T11483] should_fail_usercopy+0x1a/0x20 [ 3077.057358][T11483] _copy_from_user+0x1e/0xc0 [ 3077.061971][T11483] ___sys_sendmsg+0x155/0x290 [ 3077.066740][T11483] ? __sys_sendmsg+0x270/0x270 [ 3077.071614][T11483] ? __fdget+0x19c/0x220 [ 3077.075936][T11483] __x64_sys_sendmsg+0x1f0/0x2c0 [ 3077.080912][T11483] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 3077.086381][T11483] ? __kasan_check_write+0x14/0x20 [ 3077.091498][T11483] ? fpregs_restore_userregs+0x128/0x260 [ 3077.097227][T11483] ? switch_fpu_return+0xe/0x10 [ 3077.102261][T11483] x64_sys_call+0x171/0x9a0 [ 3077.106784][T11483] do_syscall_64+0x4c/0xa0 [ 3077.111213][T11483] ? clear_bhb_loop+0x30/0x80 [ 3077.115898][T11483] ? clear_bhb_loop+0x30/0x80 [ 3077.120604][T11483] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3077.126504][T11483] RIP: 0033:0x7f7b65b8eec9 [ 3077.130920][T11483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3077.150716][T11483] RSP: 002b:00007f7b6698e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3077.159224][T11483] RAX: ffffffffffffffda RBX: 00007f7b65de6180 RCX: 00007f7b65b8eec9 [ 3077.167203][T11483] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 000000000000000b [ 3077.175267][T11483] RBP: 00007f7b6698e090 R08: 0000000000000000 R09: 0000000000000000 [ 3077.183360][T11483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3077.191609][T11483] R13: 00007f7b65de6218 R14: 00007f7b65de6180 R15: 00007fffe506e748 [ 3077.199686][T11483] [ 3077.684365][ T28] audit: type=1326 audit(1760076486.415:15495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11469 comm="syz.2.12084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f0cbff8eec9 code=0x7ffc0000 [ 3077.874148][T11497] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3077.890300][T11497] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 3077.951506][T11499] overlayfs: failed to resolve './file0': -2 [ 3078.073223][T11332] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 3078.355761][T11332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3078.368161][T11332] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 3078.381389][T11332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3078.390752][T11332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3078.400740][T11332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3078.409790][T11332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3078.425972][T11332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3078.491741][T11508] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12094'. [ 3078.504467][T11508] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12094'. [ 3078.516391][T11508] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11508 comm=syz.5.12094 [ 3078.547468][T11509] overlayfs: missing 'lowerdir' [ 3082.781549][T11553] netlink: 96 bytes leftover after parsing attributes in process `syz.3.12105'. [ 3082.806867][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 3083.152014][T11555] netlink: 96 bytes leftover after parsing attributes in process `syz.5.12107'. [ 3083.164774][ T28] audit: type=1400 audit(1760076492.502:15538): avc: denied { map } for pid=11545 comm="syz.3.12105" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 3083.543070][ T28] audit: type=1400 audit(1760076493.242:15539): avc: denied { write } for pid=11566 comm="syz.4.12111" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 3083.682804][ T28] audit: type=1400 audit(1760076493.282:15540): avc: denied { set_context_mgr } for pid=11566 comm="syz.4.12111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 3084.722791][T11582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12114'. [ 3084.733385][T11582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12114'. [ 3084.841616][T11582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11582 comm=syz.3.12114 [ 3086.216784][T11598] FAULT_INJECTION: forcing a failure. [ 3086.216784][T11598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3086.239631][T11598] CPU: 1 PID: 11598 Comm: syz.3.12119 Tainted: G W syzkaller #0 [ 3086.248794][T11598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3086.258962][T11598] Call Trace: [ 3086.262262][T11598] [ 3086.265206][T11598] __dump_stack+0x21/0x24 [ 3086.269561][T11598] dump_stack_lvl+0xee/0x150 [ 3086.274189][T11598] ? __cfi_dump_stack_lvl+0x8/0x8 [ 3086.279332][T11598] dump_stack+0x15/0x24 [ 3086.283518][T11598] should_fail_ex+0x3d4/0x520 [ 3086.288235][T11598] should_fail+0xb/0x10 [ 3086.292435][T11598] should_fail_usercopy+0x1a/0x20 [ 3086.297519][T11598] _copy_from_user+0x1e/0xc0 [ 3086.302162][T11598] __sys_bpf+0x277/0x780 [ 3086.306437][T11598] ? bpf_link_show_fdinfo+0x320/0x320 [ 3086.311848][T11598] ? __cfi_ksys_write+0x10/0x10 [ 3086.316922][T11598] ? debug_smp_processor_id+0x17/0x20 [ 3086.322338][T11598] __x64_sys_bpf+0x7c/0x90 [ 3086.326795][T11598] x64_sys_call+0x488/0x9a0 [ 3086.331374][T11598] do_syscall_64+0x4c/0xa0 [ 3086.335823][T11598] ? clear_bhb_loop+0x30/0x80 [ 3086.340553][T11598] ? clear_bhb_loop+0x30/0x80 [ 3086.345271][T11598] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3086.351298][T11598] RIP: 0033:0x7f7b65b8eec9 [ 3086.355737][T11598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3086.375378][T11598] RSP: 002b:00007f7b669d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3086.383828][T11598] RAX: ffffffffffffffda RBX: 00007f7b65de5fa0 RCX: 00007f7b65b8eec9 [ 3086.391839][T11598] RDX: 0000000000000050 RSI: 0000200000000c80 RDI: 000000000000000a [ 3086.399936][T11598] RBP: 00007f7b669d0090 R08: 0000000000000000 R09: 0000000000000000 [ 3086.400592][T11601] FAULT_INJECTION: forcing a failure. [ 3086.400592][T11601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3086.407989][T11598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3086.408007][T11598] R13: 00007f7b65de6038 R14: 00007f7b65de5fa0 R15: 00007fffe506e748 [ 3086.408028][T11598] [ 3086.451000][ T28] audit: type=1326 audit(1760076496.152:15541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11592 comm="syz.1.12117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6258eec9 code=0x7ffc0000 [ 3086.484656][ T28] audit: type=1326 audit(1760076496.152:15542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11592 comm="syz.1.12117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6258eec9 code=0x7ffc0000 [ 3086.509673][T11601] CPU: 0 PID: 11601 Comm: syz.2.12124 Tainted: G W syzkaller #0 [ 3086.518746][T11601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3086.528828][T11601] Call Trace: [ 3086.532220][T11601] [ 3086.535166][T11601] __dump_stack+0x21/0x24 [ 3086.539518][T11601] dump_stack_lvl+0xee/0x150 [ 3086.544128][T11601] ? __cfi_dump_stack_lvl+0x8/0x8 [ 3086.549160][T11601] dump_stack+0x15/0x24 [ 3086.553406][T11601] should_fail_ex+0x3d4/0x520 [ 3086.558102][T11601] should_fail+0xb/0x10 [ 3086.562260][T11601] should_fail_usercopy+0x1a/0x20 [ 3086.567304][T11601] _copy_to_user+0x1e/0x90 [ 3086.571727][T11601] simple_read_from_buffer+0xe9/0x160 [ 3086.577115][T11601] proc_fail_nth_read+0x19a/0x210 [ 3086.582232][T11601] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 3086.587780][T11601] ? security_file_permission+0x94/0xb0 [ 3086.593335][T11601] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 3086.598897][T11601] vfs_read+0x26e/0x8c0 [ 3086.603064][T11601] ? __cfi_vfs_read+0x10/0x10 [ 3086.607842][T11601] ? __kasan_check_write+0x14/0x20 [ 3086.612964][T11601] ? mutex_lock+0x8d/0x1a0 [ 3086.617392][T11601] ? __cfi_mutex_lock+0x10/0x10 [ 3086.622251][T11601] ? __fdget_pos+0x2cd/0x380 [ 3086.626939][T11601] ? ksys_read+0x71/0x240 [ 3086.631283][T11601] ksys_read+0x140/0x240 [ 3086.635540][T11601] ? __cfi_ksys_read+0x10/0x10 [ 3086.640319][T11601] ? fpregs_restore_userregs+0x128/0x260 [ 3086.646043][T11601] __x64_sys_read+0x7b/0x90 [ 3086.650739][T11601] x64_sys_call+0x2f/0x9a0 [ 3086.655163][T11601] do_syscall_64+0x4c/0xa0 [ 3086.659584][T11601] ? clear_bhb_loop+0x30/0x80 [ 3086.664267][T11601] ? clear_bhb_loop+0x30/0x80 [ 3086.668967][T11601] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3086.674865][T11601] RIP: 0033:0x7f0cbff8d8dc [ 3086.679286][T11601] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 3086.698949][T11601] RSP: 002b:00007f0cc0e1a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3086.707450][T11601] RAX: ffffffffffffffda RBX: 00007f0cc01e6180 RCX: 00007f0cbff8d8dc [ 3086.715422][T11601] RDX: 000000000000000f RSI: 00007f0cc0e1a0a0 RDI: 0000000000000008 [ 3086.723404][T11601] RBP: 00007f0cc0e1a090 R08: 0000000000000000 R09: 0000000000000000 [ 3086.731377][T11601] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 3086.739438][T11601] R13: 00007f0cc01e6218 R14: 00007f0cc01e6180 R15: 00007ffc36ecd288 [ 3086.747425][T11601] [ 3086.787705][ T28] audit: type=1326 audit(1760076496.152:15543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11592 comm="syz.1.12117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffb6258eec9 code=0x7ffc0000 [ 3086.838727][ T28] audit: type=1326 audit(1760076496.152:15544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11592 comm="syz.1.12117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6258eec9 code=0x7ffc0000 [ 3086.897479][ T28] audit: type=1326 audit(1760076496.152:15545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11592 comm="syz.1.12117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6258eec9 code=0x7ffc0000 [ 3086.956258][ T28] audit: type=1326 audit(1760076496.152:15546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11592 comm="syz.1.12117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ffb6258eec9 code=0x7ffc0000 [ 3087.014035][ T28] audit: type=1326 audit(1760076496.152:15547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11592 comm="syz.1.12117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6258eec9 code=0x7ffc0000 [ 3087.386364][T11620] tipc: Failed to remove unknown binding: 66,1,1/0:3837568577/3837568579 [ 3087.418646][T11620] tipc: Failed to remove unknown binding: 66,1,1/0:3837568577/3837568579 [ 3087.459296][T11620] tipc: Failed to remove unknown binding: 66,1,1/0:3837568577/3837568579 [ 3087.489591][T11620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1040 sclass=netlink_route_socket pid=11620 comm=syz.2.12122 [ 3089.262253][T11631] input: syz0 as /devices/virtual/input/input93 [ 3091.054585][T11654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12133'. [ 3091.064870][T11654] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11654 comm=syz.2.12133 [ 3091.862924][T11671] binder: 11670:11671 ioctl c00c620f 200000000140 returned -22 [ 3092.839315][T23898] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 3093.370823][T23898] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 3093.389572][T23898] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 3093.398898][T23898] usb 2-1: config 220 interface 0 has no altsetting 0 [ 3093.426569][T23898] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 3093.441170][T23898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3093.449639][T23898] usb 2-1: Product: syz [ 3093.454149][T23898] usb 2-1: Manufacturer: syz [ 3093.458810][T23898] usb 2-1: SerialNumber: syz [ 3093.564734][T11699] fuse: Unknown parameter 'rootJ ñ™-§Èmode' [ 3095.328629][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 3095.328651][ T28] audit: type=1400 audit(1760076503.492:15571): avc: denied { create } for pid=11695 comm="syz.5.12145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 3095.366457][ T28] audit: type=1400 audit(1760076503.552:15572): avc: denied { bind } for pid=11695 comm="syz.5.12145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 3095.376097][T23898] usb 2-1: Found UVC 0.00 device syz (8086:0b07) [ 3095.409802][T23898] usb 2-1: No valid video chain found. [ 3095.419488][ T28] audit: type=1400 audit(1760076504.092:15573): avc: denied { connect } for pid=11695 comm="syz.5.12145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 3095.450595][T23898] usb 2-1: USB disconnect, device number 100 [ 3095.483676][ T28] audit: type=1400 audit(1760076504.212:15574): avc: denied { write } for pid=11695 comm="syz.5.12145" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 3095.618217][T11718] FAULT_INJECTION: forcing a failure. [ 3095.618217][T11718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3095.631370][T11718] CPU: 1 PID: 11718 Comm: syz.2.12148 Tainted: G W syzkaller #0 [ 3095.640449][T11718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3095.650694][T11718] Call Trace: [ 3095.653991][T11718] [ 3095.656933][T11718] __dump_stack+0x21/0x24 [ 3095.661288][T11718] dump_stack_lvl+0xee/0x150 [ 3095.665900][T11718] ? __cfi_dump_stack_lvl+0x8/0x8 [ 3095.670941][T11718] ? __switch_to_asm+0x3a/0x60 [ 3095.675731][T11718] dump_stack+0x15/0x24 [ 3095.679906][T11718] should_fail_ex+0x3d4/0x520 [ 3095.684614][T11718] should_fail+0xb/0x10 [ 3095.688787][T11718] should_fail_usercopy+0x1a/0x20 [ 3095.693831][T11718] _copy_from_user+0x1e/0xc0 [ 3095.698443][T11718] __sys_bpf+0x277/0x780 [ 3095.702699][T11718] ? bpf_link_show_fdinfo+0x320/0x320 [ 3095.708181][T11718] ? preempt_schedule_irq+0xbb/0x110 [ 3095.713722][T11718] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 3095.719832][T11718] ? fpregs_restore_userregs+0x128/0x260 [ 3095.725491][T11718] __x64_sys_bpf+0x7c/0x90 [ 3095.730026][T11718] x64_sys_call+0x488/0x9a0 [ 3095.734562][T11718] do_syscall_64+0x4c/0xa0 [ 3095.739004][T11718] ? clear_bhb_loop+0x30/0x80 [ 3095.743809][T11718] ? clear_bhb_loop+0x30/0x80 [ 3095.748603][T11718] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3095.754521][T11718] RIP: 0033:0x7f0cbff8eec9 [ 3095.758961][T11718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3095.778859][T11718] RSP: 002b:00007f0cc0e1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3095.787456][T11718] RAX: ffffffffffffffda RBX: 00007f0cc01e6180 RCX: 00007f0cbff8eec9 [ 3095.795475][T11718] RDX: 0000000000000094 RSI: 0000200000000380 RDI: 0000000000000005 [ 3095.803480][T11718] RBP: 00007f0cc0e1a090 R08: 0000000000000000 R09: 0000000000000000 [ 3095.811478][T11718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3095.819562][T11718] R13: 00007f0cc01e6218 R14: 00007f0cc01e6180 R15: 00007ffc36ecd288 [ 3095.827565][T11718] [ 3098.667297][T11764] bridge0: port 1(bridge_slave_0) entered blocking state [ 3098.683418][T11764] bridge0: port 1(bridge_slave_0) entered disabled state [ 3098.700805][T11764] device bridge_slave_0 entered promiscuous mode [ 3098.722527][T11764] bridge0: port 2(bridge_slave_1) entered blocking state [ 3098.747077][T11764] bridge0: port 2(bridge_slave_1) entered disabled state [ 3098.768952][T11764] device bridge_slave_1 entered promiscuous mode [ 3098.994807][T11764] bridge0: port 2(bridge_slave_1) entered blocking state [ 3099.001932][T11764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3099.009346][T11764] bridge0: port 1(bridge_slave_0) entered blocking state [ 3099.016476][T11764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3099.071219][T11332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3099.082182][T11332] bridge0: port 1(bridge_slave_0) entered disabled state [ 3099.097340][T11332] bridge0: port 2(bridge_slave_1) entered disabled state [ 3099.116012][T11332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3099.133119][T11332] bridge0: port 1(bridge_slave_0) entered blocking state [ 3099.140237][T11332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3099.161106][T11332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3099.175044][T11332] bridge0: port 2(bridge_slave_1) entered blocking state [ 3099.182232][T11332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3099.210633][T11332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3099.222269][T11332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3099.272375][T11332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3099.297379][T11764] device veth0_vlan entered promiscuous mode [ 3099.311669][T11332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3099.321017][T11332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3099.328668][T11332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3099.349478][T11332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3099.370918][T11764] device veth1_macvtap entered promiscuous mode [ 3099.383006][T11332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3099.532622][T11336] device bridge_slave_1 left promiscuous mode [ 3099.538956][T11336] bridge0: port 2(bridge_slave_1) entered disabled state [ 3099.546797][T11336] device bridge_slave_0 left promiscuous mode [ 3099.553473][T11336] bridge0: port 1(bridge_slave_0) entered disabled state [ 3099.561938][T11336] device veth1_macvtap left promiscuous mode [ 3099.568233][T11336] device veth0_vlan left promiscuous mode [ 3100.579637][ T5393] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 3100.760593][ T5393] usb 3-1: config 0 has an invalid interface number: 92 but max is 0 [ 3100.768795][ T5393] usb 3-1: config 0 has no interface number 0 [ 3100.775092][ T5393] usb 3-1: config 0 interface 92 altsetting 5 bulk endpoint 0xB has invalid maxpacket 64 [ 3100.785314][ T5393] usb 3-1: config 0 interface 92 altsetting 5 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 3100.796253][ T5393] usb 3-1: config 0 interface 92 has no altsetting 0 [ 3100.804444][ T5393] usb 3-1: New USB device found, idVendor=1f32, idProduct=938e, bcdDevice=c8.23 [ 3100.813684][ T5393] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3100.822020][ T5393] usb 3-1: Product: syz [ 3100.826180][ T5393] usb 3-1: Manufacturer: syz [ 3100.830804][ T5393] usb 3-1: SerialNumber: syz [ 3100.836077][ T5393] usb 3-1: config 0 descriptor?? [ 3100.841410][T11813] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3101.051340][ T5393] usb-storage 3-1:0.92: USB Mass Storage device detected [ 3101.090719][ T5393] usb 3-1: USB disconnect, device number 101 [ 3102.422279][T11332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3102.432308][T11332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3102.493677][T11834] FAULT_INJECTION: forcing a failure. [ 3102.493677][T11834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3102.520308][T11834] CPU: 0 PID: 11834 Comm: syz.2.12176 Tainted: G W syzkaller #0 [ 3102.529486][T11834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3102.539662][T11834] Call Trace: [ 3102.542962][T11834] [ 3102.545909][T11834] __dump_stack+0x21/0x24 [ 3102.550250][T11834] dump_stack_lvl+0xee/0x150 [ 3102.554845][T11834] ? __cfi_dump_stack_lvl+0x8/0x8 [ 3102.559898][T11834] dump_stack+0x15/0x24 [ 3102.564059][T11834] should_fail_ex+0x3d4/0x520 [ 3102.568749][T11834] should_fail+0xb/0x10 [ 3102.572925][T11834] should_fail_usercopy+0x1a/0x20 [ 3102.577964][T11834] copy_fpstate_to_sigframe+0x849/0xaa0 [ 3102.583554][T11834] ? copy_fpstate_to_sigframe+0x17c/0xaa0 [ 3102.589818][T11834] ? __cfi_copy_fpstate_to_sigframe+0x10/0x10 [ 3102.595989][T11834] ? get_signal+0x124b/0x1520 [ 3102.600690][T11834] ? fpu__alloc_mathframe+0xb3/0x130 [ 3102.605983][T11834] arch_do_signal_or_restart+0x5bd/0x1030 [ 3102.611807][T11834] ? __fget_files+0x2d5/0x330 [ 3102.616487][T11834] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 3102.622650][T11834] ? __kasan_check_write+0x14/0x20 [ 3102.627768][T11834] ? __cfi_ksys_read+0x10/0x10 [ 3102.632562][T11834] exit_to_user_mode_loop+0x7a/0xb0 [ 3102.637763][T11834] exit_to_user_mode_prepare+0x5a/0xa0 [ 3102.643229][T11834] syscall_exit_to_user_mode+0x1a/0x30 [ 3102.648723][T11834] do_syscall_64+0x58/0xa0 [ 3102.653146][T11834] ? clear_bhb_loop+0x30/0x80 [ 3102.657834][T11834] ? clear_bhb_loop+0x30/0x80 [ 3102.662516][T11834] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3102.668416][T11834] RIP: 0033:0x7f0cbff8d8da [ 3102.672854][T11834] Code: 48 83 ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 <0f> 05 48 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 [ 3102.692474][T11834] RSP: 002b:00007f0cc0e5bfb0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3102.700912][T11834] RAX: 0000000000000000 RBX: 00002000000018c0 RCX: 00007f0cbff8d8dc [ 3102.709067][T11834] RDX: 0000000000002000 RSI: 00002000000018c0 RDI: 0000000000000004 [ 3102.717051][T11834] RBP: 00007f0cc0e5c090 R08: 0000000000000000 R09: 0000000000000000 [ 3102.725064][T11834] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000004 [ 3102.733036][T11834] R13: 0000200000001640 R14: 00007f0cc01e5fa0 R15: 00007ffc36ecd288 [ 3102.741106][T11834] [ 3102.916787][ T28] audit: type=1400 audit(1760076512.612:15575): avc: denied { connect } for pid=11837 comm="syz.5.12177" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 3102.991664][T11857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12181'. [ 3103.015790][T11857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12181'. [ 3103.049414][T11857] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11857 comm=syz.2.12181 [ 3105.465921][T11879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12188'. [ 3105.926522][T11887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12188'. [ 3105.951295][T11879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11879 comm=syz.2.12188 [ 3106.093730][T11894] FAULT_INJECTION: forcing a failure. [ 3106.093730][T11894] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3106.119261][T11894] CPU: 0 PID: 11894 Comm: syz.1.12192 Tainted: G W syzkaller #0 [ 3106.128523][T11894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3106.138889][T11894] Call Trace: [ 3106.142199][T11894] [ 3106.145255][T11894] __dump_stack+0x21/0x24 [ 3106.149707][T11894] dump_stack_lvl+0xee/0x150 [ 3106.154340][T11894] ? __cfi_dump_stack_lvl+0x8/0x8 [ 3106.159412][T11894] ? kasan_save_stack+0x4c/0x60 [ 3106.164276][T11894] ? kasan_save_stack+0x3a/0x60 [ 3106.169132][T11894] ? __kasan_record_aux_stack+0xb6/0xc0 [ 3106.174745][T11894] dump_stack+0x15/0x24 [ 3106.178918][T11894] should_fail_ex+0x3d4/0x520 [ 3106.183661][T11894] should_fail_alloc_page+0x61/0x90 [ 3106.188878][T11894] prepare_alloc_pages+0x148/0x5f0 [ 3106.194045][T11894] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 3106.199294][T11894] __alloc_pages+0x124/0x450 [ 3106.203909][T11894] ? __cfi___alloc_pages+0x10/0x10 [ 3106.209122][T11894] ? __kasan_check_read+0x11/0x20 [ 3106.214168][T11894] ? call_rcu+0xb83/0xf90 [ 3106.218593][T11894] __folio_alloc+0x12/0x40 [ 3106.223042][T11894] handle_mm_fault+0x18ef/0x2640 [ 3106.228178][T11894] ? __cfi_handle_mm_fault+0x10/0x10 [ 3106.233577][T11894] ? lock_vma_under_rcu+0x3eb/0x4d0 [ 3106.238794][T11894] ? ksys_read+0x71/0x240 [ 3106.243154][T11894] ? ksys_read+0x110/0x240 [ 3106.247589][T11894] do_user_addr_fault+0x905/0x1050 [ 3106.252719][T11894] exc_page_fault+0x51/0xb0 [ 3106.257231][T11894] asm_exc_page_fault+0x27/0x30 [ 3106.262089][T11894] RIP: 0033:0x7ffb6253c3ab [ 3106.266508][T11894] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 3106.286290][T11894] RSP: 002b:00007ffb63361e10 EFLAGS: 00010246 [ 3106.292375][T11894] RAX: 00007ffb63363f30 RBX: 00007ffb627b7640 RCX: 0000000000000000 [ 3106.300358][T11894] RDX: 00007ffb63363f78 RSI: 00007ffb625eedf8 RDI: 00007ffb63361e30 [ 3106.308854][T11894] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 3106.316833][T11894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3106.324816][T11894] R13: 00007ffb627e6038 R14: 00007ffb627e5fa0 R15: 00007fffe4f6d968 [ 3106.332799][T11894] [ 3106.516903][T11894] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 3106.519938][ T28] audit: type=1400 audit(1760076516.222:15576): avc: denied { unlink } for pid=11874 comm="syz.4.12187" name="#13f" dev="tmpfs" ino=463 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 3106.562628][T11903] FAULT_INJECTION: forcing a failure. [ 3106.562628][T11903] name failslab, interval 1, probability 0, space 0, times 0 [ 3106.575770][T11903] CPU: 0 PID: 11903 Comm: syz.1.12194 Tainted: G W syzkaller #0 [ 3106.584919][T11903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3106.594999][T11903] Call Trace: [ 3106.598303][T11903] [ 3106.601256][T11903] __dump_stack+0x21/0x24 [ 3106.605600][T11903] dump_stack_lvl+0xee/0x150 [ 3106.610229][T11903] ? __cfi_dump_stack_lvl+0x8/0x8 [ 3106.615266][T11903] ? ____fput+0x15/0x20 [ 3106.619612][T11903] ? exit_to_user_mode_loop+0x9b/0xb0 [ 3106.624994][T11903] ? exit_to_user_mode_prepare+0x5a/0xa0 [ 3106.630640][T11903] ? syscall_exit_to_user_mode+0x1a/0x30 [ 3106.636303][T11903] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3106.642397][T11903] dump_stack+0x15/0x24 [ 3106.646565][T11903] should_fail_ex+0x3d4/0x520 [ 3106.651255][T11903] __should_failslab+0xac/0xf0 [ 3106.656117][T11903] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 3106.662199][T11903] should_failslab+0x9/0x20 [ 3106.666734][T11903] __kmem_cache_alloc_node+0x3d/0x2c0 [ 3106.672288][T11903] ? __cfi_mutex_lock+0x10/0x10 [ 3106.677142][T11903] ? delete_node+0x2f4/0xa60 [ 3106.681736][T11903] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 3106.687808][T11903] __kmalloc+0xa1/0x1e0 [ 3106.691975][T11903] ? __cfi___bpf_trace_sched_switch+0x10/0x10 [ 3106.698240][T11903] tracepoint_probe_unregister+0x1e6/0x8b0 [ 3106.704229][T11903] bpf_probe_unregister+0x61/0x70 [ 3106.709379][T11903] bpf_raw_tp_link_release+0x63/0x90 [ 3106.714937][T11903] bpf_link_free+0x13a/0x390 [ 3106.719651][T11903] ? bpf_link_put_deferred+0x20/0x20 [ 3106.725139][T11903] ? security_file_free+0xd8/0xf0 [ 3106.730179][T11903] bpf_link_release+0x15f/0x170 [ 3106.735035][T11903] ? __cfi_bpf_link_release+0x10/0x10 [ 3106.740444][T11903] __fput+0x1fc/0x8f0 [ 3106.744435][T11903] ? _raw_spin_unlock+0x4c/0x70 [ 3106.749294][T11903] ____fput+0x15/0x20 [ 3106.753285][T11903] task_work_run+0x1db/0x240 [ 3106.757879][T11903] ? __cfi_task_work_run+0x10/0x10 [ 3106.763016][T11903] ? __cfi___close_range+0x10/0x10 [ 3106.768218][T11903] exit_to_user_mode_loop+0x9b/0xb0 [ 3106.773427][T11903] exit_to_user_mode_prepare+0x5a/0xa0 [ 3106.779167][T11903] syscall_exit_to_user_mode+0x1a/0x30 [ 3106.784662][T11903] do_syscall_64+0x58/0xa0 [ 3106.789092][T11903] ? clear_bhb_loop+0x30/0x80 [ 3106.793787][T11903] ? clear_bhb_loop+0x30/0x80 [ 3106.798563][T11903] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3106.804554][T11903] RIP: 0033:0x7ffb6258eec9 [ 3106.808972][T11903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3106.828579][T11903] RSP: 002b:00007ffb63364038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 3106.836995][T11903] RAX: 0000000000000000 RBX: 00007ffb627e5fa0 RCX: 00007ffb6258eec9 [ 3106.845054][T11903] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000004 [ 3106.853045][T11903] RBP: 00007ffb63364090 R08: 0000000000000000 R09: 0000000000000000 [ 3106.861036][T11903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3106.869108][T11903] R13: 00007ffb627e6038 R14: 00007ffb627e5fa0 R15: 00007fffe4f6d968 [ 3106.877190][T11903] [ 3106.954820][T11884] CFI failure at __traceiter_sched_switch+0x9b/0xd0 (target: tp_stub_func+0x0/0x10; expected type: 0xee1f7a69) [ 3106.966631][T11884] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 3106.972806][T11884] CPU: 0 PID: 11884 Comm: syz.3.12189 Tainted: G W syzkaller #0 [ 3106.981831][T11884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3106.991972][T11884] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 3106.998162][T11884] Code: 80 3c 30 00 74 05 e8 04 74 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 3107.017856][T11884] RSP: 0000:ffffc90001e77d30 EFLAGS: 00010096 [ 3107.023931][T11884] RAX: 1ffff11023d8b096 RBX: ffff88811ec584a8 RCX: ffff888134462880 [ 3107.031917][T11884] RDX: ffff8881134e3cc0 RSI: 0000000000000000 RDI: ffffc9000111d000 [ 3107.040020][T11884] RBP: ffffc90001e77d70 R08: 0000000000000000 R09: fffffbfff0ee4dce [ 3107.048005][T11884] R10: 00000000b720eca3 R11: 1ffffffff0ee4dcd R12: 0000000000000000 [ 3107.055973][T11884] R13: ffff88811ec584a8 R14: dffffc0000000000 R15: ffffffff81713a50 [ 3107.063940][T11884] FS: 000055558aaa6500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 3107.072862][T11884] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3107.079441][T11884] CR2: 0000000000000000 CR3: 0000000155720000 CR4: 00000000003526b0 [ 3107.087407][T11884] DR0: 0000000000000000 DR1: 000000007a6abd94 DR2: 0000000000000000 [ 3107.095464][T11884] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3107.103429][T11884] Call Trace: [ 3107.106816][T11884] [ 3107.109745][T11884] __schedule+0x1263/0x14e0 [ 3107.114254][T11884] ? release_firmware_map_entry+0x194/0x194 [ 3107.120139][T11884] ? __this_cpu_preempt_check+0x13/0x20 [ 3107.125775][T11884] ? xfd_validate_state+0x70/0x150 [ 3107.130887][T11884] schedule+0xbd/0x170 [ 3107.134964][T11884] exit_to_user_mode_loop+0x51/0xb0 [ 3107.140156][T11884] exit_to_user_mode_prepare+0x5a/0xa0 [ 3107.145618][T11884] irqentry_exit_to_user_mode+0x9/0x10 [ 3107.151080][T11884] irqentry_exit+0x12/0x40 [ 3107.155499][T11884] sysvec_reschedule_ipi+0x78/0x80 [ 3107.160604][T11884] asm_sysvec_reschedule_ipi+0x1b/0x20 [ 3107.166060][T11884] RIP: 0033:0x7fd9aea681c0 [ 3107.170470][T11884] Code: c3 08 48 39 d1 72 f3 48 83 e8 08 48 39 f2 73 17 66 2e 0f 1f 84 00 00 00 00 00 48 8b 70 f8 48 83 e8 08 48 39 f2 72 f3 48 39 c3 <73> 3e 48 89 33 48 83 c3 08 48 8b 70 f8 48 89 08 48 8b 0b 49 8b 14 [ 3107.190272][T11884] RSP: 002b:00007ffc5b2060a0 EFLAGS: 00000293 [ 3107.196954][T11884] RAX: 00007fd9ae3933f8 RBX: 00007fd9ae38cf50 RCX: ffffffff84198ccb [ 3107.204986][T11884] RDX: ffffffff84198911 RSI: ffffffff84198911 RDI: 00007fd9ae393ed8 [ 3107.213264][T11884] RBP: 00007fd9ae38c8a0 R08: 00007fd9ae3903b8 R09: 00007fd9aedd2000 [ 3107.221267][T11884] R10: 00007fd9ae1fd008 R11: 0000000000000009 R12: 00007fd9ae38c898 [ 3107.229495][T11884] R13: 0000000000000014 R14: ffffffffffffffff R15: 00007fd9ae1fd008 [ 3107.237470][T11884] ? nf_nat_ipv4_local_fn+0x2b/0x520 [ 3107.242852][T11884] ? nf_nat_ipv4_out+0x181/0x500 [ 3107.247802][T11884] ? nf_nat_ipv4_out+0x181/0x500 [ 3107.252751][T11884] [ 3107.255769][T11884] Modules linked in: [ 3107.259679][T11884] ---[ end trace 0000000000000000 ]--- [ 3107.265141][T11884] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 3107.271396][T11884] Code: 80 3c 30 00 74 05 e8 04 74 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 3107.291039][T11884] RSP: 0000:ffffc90001e77d30 EFLAGS: 00010096 [ 3107.297172][T11884] RAX: 1ffff11023d8b096 RBX: ffff88811ec584a8 RCX: ffff888134462880 [ 3107.305291][T11884] RDX: ffff8881134e3cc0 RSI: 0000000000000000 RDI: ffffc9000111d000 [ 3107.313554][T11884] RBP: ffffc90001e77d70 R08: 0000000000000000 R09: fffffbfff0ee4dce [ 3107.321617][T11884] R10: 00000000b720eca3 R11: 1ffffffff0ee4dcd R12: 0000000000000000 [ 3107.329617][T11884] R13: ffff88811ec584a8 R14: dffffc0000000000 R15: ffffffff81713a50 [ 3107.337588][T11884] FS: 000055558aaa6500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 3107.346605][T11884] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3107.353205][T11884] CR2: 0000000000000000 CR3: 0000000155720000 CR4: 00000000003526b0 [ 3107.361217][T11884] DR0: 0000000000000000 DR1: 000000007a6abd94 DR2: 0000000000000000 [ 3107.369363][T11884] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3107.377481][T11884] Kernel panic - not syncing: Fatal exception [ 3108.533808][T11884] Shutting down cpus with NMI [ 3108.538861][T11884] Kernel Offset: disabled [ 3108.543192][T11884] Rebooting in 86400 seconds..