last executing test programs: 10m56.38954616s ago: executing program 1 (id=2027): prlimit64(0x0, 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000bc0)={0x2, 0xfec, "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"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x9) gettid() openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xc03, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r2, 0x8010aebc, &(0x7f0000000040)={0x3000, 0xa000}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 10m54.081925397s ago: executing program 1 (id=2035): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 10m52.617040283s ago: executing program 1 (id=2044): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x2}, {}, {0x0, 0x3}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x200}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xa1}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x10, 0x9b8a}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0xc}, {}, {0x0, 0x0, 0x0, 0x74a8}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {0x4, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x7}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffc}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {0xd5a0}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x0, 0x0, 0x8}, {0xe}, {0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {0x40000000}, {}, {}, {0x0, 0x0, 0x0, 0x8, 0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x30d}], [{}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) mount$afs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x4, &(0x7f0000000040)={[{@dyn}, {}]}) r3 = socket(0x10, 0x803, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$peeksig(0x1a, r4, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="120100006e383a10d00701415cec0102030109022400010000000009042300020070400009058a03080004030e09050e03"], 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socket(0x2000000015, 0x80005, 0x0) socket(0x15, 0x5, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12001, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r6, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 10m47.581344944s ago: executing program 1 (id=2058): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffe45, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r1 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x10000004, 0x3c8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f0000000000)='./file0\x00', 0x80) mount$bind(&(0x7f0000002cc0)='./file0\x00', &(0x7f0000002d00)='./file0\x00', 0x0, 0x81001, 0x0) stat(&(0x7f0000003480)='./file0\x00', &(0x7f00000034c0)) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r3) getpeername$qrtr(r4, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r4, 0x4) write$selinux_attr(r2, &(0x7f0000000140)='system_u:object_r:wtmp_t:s0\x00', 0x1c) r5 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r6 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) r7 = syz_clone(0x23100000, 0x0, 0x0, 0x0, 0x0, 0x0) setresuid(0x0, 0xee00, 0xee00) tkill(r7, 0xf) io_uring_enter(r6, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) 10m46.500231626s ago: executing program 1 (id=2060): r0 = socket$pppoe(0x18, 0x1, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) removexattr(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000002c0)=@known='com.apple.FinderInfo\x00') symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00') pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x40001043, r2, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r4, 0x2, 0xa) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'}) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000300)={0x10, 0xfffffffffffffffe}, 0x10) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmmsg(r0, &(0x7f0000007180)=[{{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f00000025c0)="3dc7", 0x2}], 0x1}}], 0x1, 0x4000) 10m42.819406315s ago: executing program 1 (id=2071): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000540)={'pcl818\x00', [0xcf7, 0x3, 0x1, 0x0, 0xa, 0x7, 0xc, 0x7, 0x5, 0x800, 0x6b5b, 0x2, 0x3d, 0x403, 0x7, 0x1, 0x1, 0x0, 0x7, 0x40400003, 0x8c, 0x1007fff, 0x200006, 0xd, 0x8004, 0x8, 0x2, 0x8, 0xb, 0x1]}) 10m42.366585154s ago: executing program 32 (id=2071): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000540)={'pcl818\x00', [0xcf7, 0x3, 0x1, 0x0, 0xa, 0x7, 0xc, 0x7, 0x5, 0x800, 0x6b5b, 0x2, 0x3d, 0x403, 0x7, 0x1, 0x1, 0x0, 0x7, 0x40400003, 0x8c, 0x1007fff, 0x200006, 0xd, 0x8004, 0x8, 0x2, 0x8, 0xb, 0x1]}) 8m45.829730173s ago: executing program 3 (id=2437): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={0x1fc, r1, 0x1, 0x70bd2b, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x1b4, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b061f7e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27f48f9f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x89df}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x30a1}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b3c83db}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c7d6e08}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x559e553e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x997d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x749fd114}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1425}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xac37}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d54}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa870}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a73f6e5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbfee}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ff3981c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6777d33a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3732082e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1694}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x88c}]}, {0x4}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4bf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x70b5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x561b747e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x803e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x649f86d1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e334f52}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b71d4ca}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9c49}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe728}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc9aa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe6d5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc0bf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17eb2339}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5fafb62}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5065}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3884}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc5a3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xffca}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7754fa2f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7d56}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x396e}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x24d2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x23d2ea59}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41c4dbe7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x218e5d43}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xee6e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x909ca3d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe1b7}]}, {0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1fc}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x24}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r4, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mlockall(0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 8m44.63345062s ago: executing program 3 (id=2442): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x9a}, @empty}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 8m44.556561593s ago: executing program 3 (id=2443): r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x2400c0c0}, 0x4040080) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000600)="b9ed29d8fe490a060b48", 0xa}], 0x1}, 0x0) 8m44.544819481s ago: executing program 3 (id=2444): r0 = gettid() r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="0000089500000071de000000000006000000"], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = add_key(&(0x7f0000003300)='cifs.spnego\x00', &(0x7f0000003340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, r2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000040)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = syz_io_uring_setup(0xedf, &(0x7f00000000c0)={0x0, 0x2ae4, 0x80, 0x2, 0x1a6}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) r5 = io_uring_setup(0x68f6, &(0x7f0000001980)={0x0, 0x48c7, 0x8, 0x0, 0x246}) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x4, @multicast, 'veth0_to_bond\x00'}}) r6 = syz_open_dev$midi(&(0x7f0000000200), 0x1, 0x208600) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r7 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r7, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000240)=[r3, r5, r6, r3, r3, r3, r3, r3, r3], 0x9) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) vmsplice(r8, &(0x7f0000000340)=[{&(0x7f0000000ac0)='+', 0x1}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m44.267085281s ago: executing program 3 (id=2448): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x9080) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x4, 0x8009, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x5, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x1ff, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x8, 0xf6, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0xfffffffe, 0x2, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x80000001, 0x0, 0x0, 0x8, 0x3, 0x5, 0x59eb, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x87, 0x22e2, 0x4, 0xffffffff, 0x7, 0x1fd, 0x6, 0x10001, 0x10000, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0x7, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffb, 0x3, 0x4, 0x2000, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x2], [0x8, 0x7, 0xffffffff, 0xfffffffc, 0x8000, 0x2, 0x74d6, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x0, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a0, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x6, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x7ffffffd, 0x8, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) listen(r1, 0x90004) syz_emit_vhci(&(0x7f0000001180)=ANY=[@ANYBLOB="043e130100c900", @ANYRESHEX], 0x16) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="3f9d00000000fddbdf251700000008000300", @ANYRES32=r7, @ANYBLOB="3800308014000400403a050c5baee2004ef2b6d713459a7a180001800800010003865bdd36c8e216c53b320000000c000500000000000600"], 0x54}}, 0x0) r8 = msgget(0x1, 0x101) msgrcv(r8, &(0x7f00000001c0)={0x0, ""/143}, 0x97, 0x2, 0x1800) r9 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r9, 0x4068aea3, &(0x7f00000000c0)) 8m44.06779644s ago: executing program 3 (id=2449): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = getpid() getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4205, r5, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r6, 0x0, 0x0, 0x20004041, 0x0, 0x0) setsockopt$inet6_tcp_int(r6, 0x1f, 0x6, &(0x7f0000000080)=0x2, 0x4) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1810039000000000bf0ffffff00000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0xc810) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r8 = fanotify_init(0x200, 0x0) syz_open_dev$vim2m(&(0x7f0000000280), 0x4eb36, 0x2) fdatasync(0xffffffffffffffff) fanotify_mark(r8, 0x2, 0x48002026, 0xffffffffffffffff, 0x0) 8m43.823284229s ago: executing program 33 (id=2449): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = getpid() getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4205, r5, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r6, 0x0, 0x0, 0x20004041, 0x0, 0x0) setsockopt$inet6_tcp_int(r6, 0x1f, 0x6, &(0x7f0000000080)=0x2, 0x4) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1810039000000000bf0ffffff00000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0xc810) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r8 = fanotify_init(0x200, 0x0) syz_open_dev$vim2m(&(0x7f0000000280), 0x4eb36, 0x2) fdatasync(0xffffffffffffffff) fanotify_mark(r8, 0x2, 0x48002026, 0xffffffffffffffff, 0x0) 7m10.236324156s ago: executing program 4 (id=2734): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000052c0)={&(0x7f0000003fc0)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000070000008608ffff"], 0x18}, 0x40) (fail_nth: 2) 7m9.946236368s ago: executing program 4 (id=2737): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 7m8.423056103s ago: executing program 4 (id=2740): sendmsg$key(0xffffffffffffffff, 0x0, 0x4) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x15, &(0x7f0000000140), 0x1}, 0x408a4) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x3d6d9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 7m4.712113301s ago: executing program 4 (id=2756): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x3c, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x5}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) 7m4.160104128s ago: executing program 4 (id=2757): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x20) (fail_nth: 2) 7m3.688011569s ago: executing program 4 (id=2760): r0 = socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x20) 6m47.648371246s ago: executing program 34 (id=2760): r0 = socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x20) 14.760814023s ago: executing program 5 (id=3982): openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100003052abd70000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006a800001400128009000100a163"], 0x3c}}, 0x440b0) setsockopt$packet_buf(r0, 0x107, 0x2, &(0x7f0000000200)="bfa24abbcf0b73f2a2107730f36cb51c42dcca10e40c024b2ce920f93c4a65ce59bdf09031c28804fa6854725a999f8c69e08ec0ec597f8d102eb310ab0f4ef7d49516878b98389fd941636aff6376b5f717cd", 0x53) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f00000023c0)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r2, 0x0, 0x0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone3(&(0x7f0000000240)={0x100202000, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x9}, &(0x7f0000000340)=""/233, 0xe9, &(0x7f0000000140)=""/73, &(0x7f0000000200)=[0x0]}, 0x58) sched_setaffinity(r4, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0x2, 0x4000000000000001, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000214010028bda4b51bc4f84b99c94400", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x40) read$FUSE(r6, &(0x7f0000000200)={0x2020}, 0x16a2) ioctl$KVM_GET_MSRS_sys(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0000082, 0x0, 0x1}]}) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 14.643016735s ago: executing program 7 (id=3983): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndctrl(0x0, 0x84, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) epoll_create(0x7) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, &(0x7f0000000300), 0x5005) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r1, 0x0, 0x0, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 14.111478513s ago: executing program 5 (id=3987): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a8004000f8ff070006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a", 0xd5}], 0x1}, 0x0) r1 = memfd_secret(0x80000) r2 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x28101) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) ftruncate(r1, 0x51a9497) set_mempolicy(0x3, &(0x7f0000000080)=0x1fe, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000980), 0xfdef) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r6, 0x1, 0x3e, 0x0, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r8, 0x6, 0x21, 0x0, 0x0) read$msr(r7, &(0x7f0000000300)=""/102400, 0x19000) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x74}}, 0x0) r10 = dup(r5) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r4, &(0x7f0000000300)={@void, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x1, 0x1, 0x1}, {0x8100, 0x7, 0x1, 0x1}}, {@ipv4={0x6558, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0x42) 13.401025619s ago: executing program 6 (id=3989): syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x40402) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x0, 0x3}) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xb32, 0xc000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010001fff001f00000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r5, @ANYRES64=r1], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r7 = socket$kcm(0x10, 0x2, 0x10) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0x7, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x2000005}, 0x1c) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) 11.583368814s ago: executing program 6 (id=3992): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsopen(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x50}}, 0x890) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000040)={0x1, 0x3, 0xc3, 0x3, 0x7f}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r2, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$ptp0(0xffffffffffffff9c, 0x0, 0x60442, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x2, 0x0, 0x70bd2d}, 0x10}}, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000200)={@dev, @loopback, @private}, &(0x7f00000002c0)=0xc) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500000000120800030043000000a80016000400dfbfdb2d47782a462c9c801f298225c506000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3", 0xd8}], 0x1}, 0x8040) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) 11.064656332s ago: executing program 6 (id=3994): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r0, 0x708, 0xb8f7) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000100)={0x1, 0x4, 0x3, &(0x7f0000000080)={0x10, "14a6c62707dab7299602abd83463604d70b41d4008e300"}}) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000001c0)='io.pressure\x00', 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x54}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000240)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x1210, 0x2c, 0xd27, 0x8030bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x11e0, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xe, 0x2}}, @TCA_ROUTE4_ACT={0x260, 0x6, [@m_sample={0x90, 0x3, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x7fffffff, 0x0, 0x9, 0x6}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x76ee3561}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffff229}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x37c5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x100, 0x0, 0xc98, 0x3}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x81}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0x98, 0x11, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x1}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0x4684c}, @TCA_MPLS_LABEL={0x8, 0x5, 0x44c42}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x3a, 0x6, "35009eea5728e1ccc62684cd190ad09e3e022f90412955acd3c0dbd581b8004eaa8180600f4a1565ea8151366e61c730a9c078c241e6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x4}}}}, @m_gact={0x134, 0x6, 0x0, 0x0, {{0x9}, {0x94, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xb03, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x186}}, @TCA_GACT_PARMS={0x18, 0x2, {0x80000, 0x0, 0x0, 0x0, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x237f, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1c73, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x10001, 0x4, 0x8, 0x81, 0xfffffffc}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x2, 0x10000000, 0x7, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x101, 0x10000000, 0x1f, 0xc6f}}]}, {0x75, 0x6, "2ccc6282bc8bac4447822da0d0531178774955f84bab8b87e551656def4084ba2ddad9a23a23028f3236b0f0b7d5e85b61e9ca14cb39f2b5a8d7e31217917e97b71587a9c53555a9bd7c79a550cf0053b56cb8554eb9da1defa7e337a4db48379019a8e0be89e81bee4e0f87c397b82512"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_ROUTE4_ACT={0xf74, 0x6, [@m_pedit={0xf40, 0x4, 0x0, 0x0, {{0xa}, {0xf14, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x90, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0xf, 0xa5, 0x8, 0x7fff, 0x60}, 0xf0, 0x0, [{0xffffffff, 0x4, 0x5, 0x2, 0x2, 0x5}, {0x4, 0xa757, 0x3ff, 0x7, 0xb, 0x2}, {0x80, 0x6, 0x7fffffff, 0xe, 0x3, 0xd}, {0x81, 0x0, 0x7fff, 0x61, 0x90f, 0x35}]}, [{0x5b6, 0x7, 0x8, 0x9, 0x8, 0x5}, {0x80000001, 0x6, 0x0, 0x4e12, 0x9, 0xed}, {0x7, 0x9, 0x3, 0x4, 0xfffffffa, 0x93a7}, {0x0, 0x9, 0x9, 0x5, 0x1, 0x4}, {0x4, 0x8, 0x4, 0x65, 0x401}, {0x767370b2, 0x4, 0xb526, 0x4, 0x2, 0x6b5d}, {0x8001, 0x8, 0x80e0, 0x6ab, 0x2, 0x6}, {0x80000001, 0xfffff800, 0x2, 0x100, 0x0, 0x80}, {0xa, 0x3, 0x5, 0x4, 0x92, 0x1}, {0x728f, 0x5, 0x5, 0x1, 0x3, 0x80000000}, {0x81, 0x6, 0x0, 0xc7, 0xffff, 0x50}, {0xfffffffa, 0x9, 0x10, 0xfffffffb, 0x13, 0x7}, {0xfff, 0x4, 0x3, 0xfff, 0x18000000}, {0x8, 0x9, 0x3, 0x10000, 0xfff, 0xffff8001}, {0x9, 0x80000001, 0x101, 0x5, 0xe}, {0x5, 0x1a, 0x0, 0x7fff, 0x8, 0x1}, {0x1, 0x9, 0x8, 0x1ff, 0x8, 0xb}, {0xea89, 0x0, 0x1, 0x6, 0x6, 0x10001}, {0x1, 0x1, 0xf3c, 0x101, 0x7, 0x2}, {0x5, 0x7fff, 0x2, 0xffffff4c, 0x8, 0x5}, {0x0, 0x8, 0x6, 0x3, 0x3, 0x8}, {0x3, 0xdcc0, 0xe, 0x6, 0x3, 0x8}, {0x31bee70a, 0x80000001, 0xee, 0x200, 0x9a91, 0x5}, {0xbdc, 0x4, 0xf, 0x20c9, 0xe6c8, 0x1}, {0x7fff, 0xe, 0x4, 0xff, 0xc0000000, 0x3}, {0x0, 0x400, 0x25, 0xffffffff, 0x3, 0xffffffff}, {0x6, 0x9, 0x1, 0x3, 0xa}, {0x81, 0x2, 0x7f, 0x93, 0x0, 0x9}, {0x1, 0x7, 0x1, 0x0, 0x101, 0x200}, {0x9, 0x40, 0x4, 0x5, 0xb882, 0x2}, {0xcaf, 0x23fb, 0xe, 0xffffff3f, 0xc32, 0x2}, {0xf, 0x3, 0x0, 0x8, 0x6, 0x3}, {0xcfdc, 0x8, 0x3ff, 0x1, 0x200000, 0x5}, {0x2, 0x0, 0x401, 0x4, 0x8, 0x4}, {0x81, 0x8, 0xff, 0x4, 0x7, 0x6}, {0x9, 0x8, 0x7fffffff, 0x2, 0x8, 0x34}, {0x80, 0x5, 0x1c, 0x10, 0x10000000, 0x3}, {0x81, 0x0, 0x2, 0x6ef7, 0xfffffffc, 0x89}, {0x9, 0x7, 0x6, 0x5, 0x8, 0x10001}, {0x7, 0x6, 0x8, 0x1, 0xffff39db, 0x6}, {0x6, 0x7, 0x1000, 0x7, 0x9, 0x6}, {0x3, 0x9, 0x4, 0x1000, 0x2, 0x4e9}, {0x3, 0x5e15, 0x87, 0x1, 0x9, 0x10001}, {0x7f, 0x5, 0x1ff, 0x1000, 0xfffffffa, 0x3}, {0xbe, 0xfffffff1, 0x2, 0x534f, 0x9, 0x3ff}, {0xd24, 0xe, 0x7, 0x32d, 0x7, 0x2}, {0xbe9, 0x2, 0x1, 0x9, 0x5, 0x6}, {0x9, 0x2, 0x0, 0x401, 0x6, 0x2}, {0xc, 0x3, 0xfff, 0x80000000, 0x8, 0x200}, {0x3ff, 0x7f, 0x4, 0x49f, 0x1, 0xc}, {0x2, 0x1, 0x1, 0x0, 0x8, 0x9}, {0x100, 0x400, 0x5, 0x81, 0x5, 0x7}, {0x2, 0x7, 0x986d, 0x3ad2, 0x7ff, 0x6e}, {0xfffffffd, 0x2, 0x1c00000, 0x5, 0x7, 0x5}, {0x0, 0x800, 0x6, 0x827b, 0x8, 0xfb6}, {0x4, 0x6c3, 0x4, 0xc16a, 0x8, 0x9}, {0x9, 0x1, 0x9, 0x9, 0x2663, 0x8}, {0x8824, 0x91d1, 0x62a, 0x8, 0x5, 0x4}, {0x0, 0x4, 0x9, 0x1, 0xfff, 0xd0}, {0x7fffffff, 0x800, 0x1b6, 0x250, 0x0, 0xf}, {0x45f5, 0x5, 0x25, 0x3, 0x5, 0x7}, {0x0, 0x3, 0x2, 0x400, 0x40, 0xb2880000}, {0x5, 0xd95, 0x8, 0x2, 0x7f, 0x38}, {0xffffffff, 0x9, 0x9, 0x9, 0x0, 0x7}, {0xffffff7f, 0x0, 0x40, 0x401, 0x2, 0x401}, {0x2, 0x1, 0x1, 0x9b, 0x40, 0x5}, {0x1, 0x1000, 0x7, 0xffffffff, 0x2}, {0x59b7, 0x1ff, 0x8e4c, 0x401, 0x7, 0x100}, {0x8001, 0x4, 0x5f, 0x4, 0x7ff, 0x7}, {0x6, 0x6, 0xef6e, 0x2, 0x1, 0x1}, {0xd, 0xf, 0x1, 0x4, 0x101, 0xe}, {0x0, 0x3, 0x5, 0xa, 0x400, 0x2}, {0xf0, 0xffffffff, 0x5, 0x8, 0x7039, 0x8}, {0x5, 0x7, 0x8001, 0x4, 0x6, 0x6}, {0x5, 0x2, 0x2f85, 0x1, 0x7af, 0x1000000}, {0x9, 0xc2d, 0x0, 0x2, 0x81, 0x3ff}, {0x5, 0xfffffffe, 0x30af, 0x2c, 0x6, 0x8}, {0x8, 0x25b6, 0x6, 0x0, 0x8000, 0x7}, {0x2, 0xb2f2, 0x3, 0x100, 0x514d, 0x13}, {0x81, 0x9, 0x3, 0x2, 0xec, 0xffff}, {0x7fff, 0x5, 0x94e, 0x1000, 0x9, 0x9}, {0x3, 0x0, 0x7ff, 0xfffffff7, 0x2, 0x8000000}, {0xffff0001, 0x3, 0x3, 0x800, 0x5, 0x2}, {0x200, 0x3, 0x9, 0x8, 0x6919, 0x81}, {0x4, 0x8, 0x4ce0746f, 0x7, 0x4, 0x2800}, {0xac9b5b6c, 0x0, 0x9, 0x6af, 0xffffffff, 0x124}, {0x8, 0xfff, 0x1, 0x3ac, 0x800}, {0x9, 0xfffff800, 0x2, 0x0, 0x7, 0x5}, {0x7, 0x6, 0x3, 0xa, 0x8, 0x4cb2}, {0x7, 0x4, 0x7f, 0x3, 0x2, 0xffffffff}, {0x3, 0x5, 0x0, 0x40, 0x2, 0xff}, {0x81, 0x2, 0x4, 0x6, 0x9, 0x4}, {0x7, 0x7, 0xffffffff, 0x4, 0x6}, {0xfffe00, 0x5, 0x1, 0xd57, 0xb593, 0x80000001}, {0x40, 0x81, 0xeb, 0x1, 0x4d, 0x6}, {0x6, 0x6, 0xf, 0xf, 0x9, 0x8c}, {0x1, 0xfffffc1f, 0x10, 0x80, 0x100, 0x3}, {0xfffffffe, 0x9, 0x8, 0x8, 0x5, 0x6}, {0x9, 0x3, 0x1, 0x1, 0x9, 0x80000000}, {0x8, 0xfffffffc, 0xe67, 0x800, 0x9, 0x4}, {0x3, 0x4, 0x7, 0x6, 0x0, 0x40}, {0x39d, 0xfff, 0x5, 0xa8, 0x8, 0x1000}, {0xfff, 0xffffffff, 0x7, 0x5, 0x8, 0xf}, {0xfffffff7, 0x7fffffff, 0x9, 0x8, 0x5, 0x2}, {0x5, 0x800, 0x2, 0x7, 0x2d91, 0x3}, {0x5, 0x1ff, 0x1, 0xaeca, 0x4, 0x3}, {0x3, 0x5, 0x5, 0x7, 0x1000, 0x8}, {0x7, 0xfff, 0x9, 0x0, 0xb, 0x1}, {0x1, 0x74b4, 0x3ff, 0x4, 0x12288, 0x3ff}, {0x2, 0x48, 0x1ff, 0x10000, 0x1000, 0x6}, {0x7, 0x3, 0x5, 0xc126, 0x2854}, {0x3ff, 0xe, 0xcbe6, 0x1, 0xc, 0x3}, {0x1, 0xfc, 0xc, 0xc, 0x899, 0x10}, {0x40, 0x10c, 0x7fffffff, 0x255, 0x8, 0x9}, {0xc, 0x81, 0x4, 0x0, 0x8e, 0x80000000}, {0x9, 0x10000, 0x0, 0x5, 0x2}, {0x5, 0x9, 0x1, 0x7fff, 0x4, 0x6}, {0x3ff, 0xecb, 0x2, 0xa, 0x1ea, 0x1}, {0x89a7, 0x9, 0x1, 0x2, 0x8001}, {0x5, 0x101, 0x1, 0x0, 0xffff0000, 0x39e}, {0x7, 0x9, 0xa6, 0x7ff, 0x9, 0x6}, {0x7, 0x94, 0xb, 0x3, 0x4, 0x4}, {0x2, 0x401, 0xbd0, 0x8, 0xfffff000, 0xfffffffc}, {0xfffffffc, 0x80, 0x922, 0x2, 0x3, 0x72d0}, {0x6, 0x0, 0x5, 0x1000, 0xc, 0x9}, {0x9, 0x4, 0xfffffffb, 0x6, 0x3, 0x361c}, {0x0, 0x72b1, 0xffffffff, 0x4, 0x9, 0x4308a152}, {0x0, 0x4, 0x7, 0x1, 0x7, 0x9}], [{0x3}, {}, {0x0, 0x1}, {0x6}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x2, 0xff19c58e9ed047c1}, {}, {0x3}, {}, {0x4}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x5}, {0x2}, {0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x1}, {0x3}, {0x4}, {0x3}, {0x2}, {0x0, 0x1}, {0x5, 0x4aa9d00536de7dcf}, {0x2, 0x1}, {}, {0x2}, {0x5}, {0x0, 0x1}, {0x3, 0x6e311ce735ecd314}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x5, 0x3}, {0x2}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x7}, {0x3, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x30, 0x19, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}}]}, 0x1210}}, 0x0) io_uring_enter(r5, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 9.69868845s ago: executing program 6 (id=3999): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.259852387s ago: executing program 2 (id=4000): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) lsm_get_self_attr(0x66, 0x0, &(0x7f0000000240), 0x1) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000680)=0xe8) sendmsg$unix(r4, &(0x7f0000000880)={&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000440)=[{&(0x7f00000000c0)}, {&(0x7f0000000300)="fed2fe62a864bbdaa98200526ac5c2ad2617e784e1672497778fbd682aca9e64cfcd85cf48ca3e283e99250f8b83d31c2c95259543e651ad008fac8955100804f3612d6ebdbd2e05b1a15f22138e383103da32316d7aae93ce00950f9caeba776c440e8b7be7fb5709b65c298b1e791e8dbbaf799455a9b94f5052ae5312bc6d580af9b8f74b6d3c2c7b2fb96a5857deee87a839d30f0068de54ecba14a3ca06d10cd32a7115ec906dc44350b9b8ce91e63f154c3436307d6cb124b8d457f039bcc77666ba2ba399fede5915dade74", 0xcf}], 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=r0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000e9ff1f006cc0ce5000000100000001000d06", @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r5, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xc8, 0x20000800}, 0x4800) sendmmsg$inet6(r5, &(0x7f00000016c0)=[{{&(0x7f00000004c0)={0xa, 0x4e23, 0x0, @loopback, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="28000000000000002900000039000000ff0202fe0000000000000000000001"], 0x28}}], 0x1, 0x4040084) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_submit(r7, 0x2, &(0x7f0000000400)=[0x0, 0x0]) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_ifindex, @remote}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a00", @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4048030}, 0xc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) 8.580492978s ago: executing program 5 (id=4002): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = fsopen(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x50}}, 0x890) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000040)={0x1, 0x3, 0xc3, 0x3, 0x7f}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r3, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$ptp0(0xffffffffffffff9c, 0x0, 0x60442, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r4, 0x2}) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x2, 0x0, 0x70bd2d}, 0x10}}, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = dup3(r0, r1, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000200)={@dev, @loopback, @private}, &(0x7f00000002c0)=0xc) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500000000120800030043000000a80016000400dfbfdb2d47782a462c9c801f298225c506000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3", 0xd8}], 0x1}, 0x8040) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e23, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) 7.65545589s ago: executing program 2 (id=4004): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r0, 0x708, 0xb8f7) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000001c0)='io.pressure\x00', 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x54}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x1210, 0x2c, 0xd27, 0x8030bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x11e0, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xe, 0x2}}, @TCA_ROUTE4_ACT={0x260, 0x6, [@m_sample={0x90, 0x3, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x7fffffff, 0x0, 0x9, 0x6}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x76ee3561}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffff229}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x37c5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x100, 0x0, 0xc98, 0x3}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x81}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0x98, 0x11, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x1}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0x4684c}, @TCA_MPLS_LABEL={0x8, 0x5, 0x44c42}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x3a, 0x6, "35009eea5728e1ccc62684cd190ad09e3e022f90412955acd3c0dbd581b8004eaa8180600f4a1565ea8151366e61c730a9c078c241e6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x4}}}}, @m_gact={0x134, 0x6, 0x0, 0x0, {{0x9}, {0x94, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xb03, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x186}}, @TCA_GACT_PARMS={0x18, 0x2, {0x80000, 0x0, 0x0, 0x0, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x237f, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1c73, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x10001, 0x4, 0x8, 0x81, 0xfffffffc}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x2, 0x10000000, 0x7, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x101, 0x10000000, 0x1f, 0xc6f}}]}, {0x75, 0x6, "2ccc6282bc8bac4447822da0d0531178774955f84bab8b87e551656def4084ba2ddad9a23a23028f3236b0f0b7d5e85b61e9ca14cb39f2b5a8d7e31217917e97b71587a9c53555a9bd7c79a550cf0053b56cb8554eb9da1defa7e337a4db48379019a8e0be89e81bee4e0f87c397b82512"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_ROUTE4_ACT={0xf74, 0x6, [@m_pedit={0xf40, 0x4, 0x0, 0x0, {{0xa}, {0xf14, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x90, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0xf, 0xa5, 0x8, 0x7fff, 0x60}, 0xf0, 0x0, [{0xffffffff, 0x4, 0x5, 0x2, 0x2, 0x5}, {0x4, 0xa757, 0x3ff, 0x7, 0xb, 0x2}, {0x80, 0x6, 0x7fffffff, 0xe, 0x3, 0xd}, {0x81, 0x0, 0x7fff, 0x61, 0x90f, 0x35}]}, [{0x5b6, 0x7, 0x8, 0x9, 0x8, 0x5}, {0x80000001, 0x6, 0x0, 0x4e12, 0x9, 0xed}, {0x7, 0x9, 0x3, 0x4, 0xfffffffa, 0x93a7}, {0x0, 0x9, 0x9, 0x5, 0x1, 0x4}, {0x4, 0x8, 0x4, 0x65, 0x401}, {0x767370b2, 0x4, 0xb526, 0x4, 0x2, 0x6b5d}, {0x8001, 0x8, 0x80e0, 0x6ab, 0x2, 0x6}, {0x80000001, 0xfffff800, 0x2, 0x100, 0x0, 0x80}, {0xa, 0x3, 0x5, 0x4, 0x92, 0x1}, {0x728f, 0x5, 0x5, 0x1, 0x3, 0x80000000}, {0x81, 0x6, 0x0, 0xc7, 0xffff, 0x50}, {0xfffffffa, 0x9, 0x10, 0xfffffffb, 0x13, 0x7}, {0xfff, 0x4, 0x3, 0xfff, 0x18000000}, {0x8, 0x9, 0x3, 0x10000, 0xfff, 0xffff8001}, {0x9, 0x80000001, 0x101, 0x5, 0xe}, {0x5, 0x1a, 0x0, 0x7fff, 0x8, 0x1}, {0x1, 0x9, 0x8, 0x1ff, 0x8, 0xb}, {0xea89, 0x0, 0x1, 0x6, 0x6, 0x10001}, {0x1, 0x1, 0xf3c, 0x101, 0x7, 0x2}, {0x5, 0x7fff, 0x2, 0xffffff4c, 0x8, 0x5}, {0x0, 0x8, 0x6, 0x3, 0x3, 0x8}, {0x3, 0xdcc0, 0xe, 0x6, 0x3, 0x8}, {0x31bee70a, 0x80000001, 0xee, 0x200, 0x9a91, 0x5}, {0xbdc, 0x4, 0xf, 0x20c9, 0xe6c8, 0x1}, {0x7fff, 0xe, 0x4, 0xff, 0xc0000000, 0x3}, {0x0, 0x400, 0x25, 0xffffffff, 0x3, 0xffffffff}, {0x6, 0x9, 0x1, 0x3, 0xa}, {0x81, 0x2, 0x7f, 0x93, 0x0, 0x9}, {0x1, 0x7, 0x1, 0x0, 0x101, 0x200}, {0x9, 0x40, 0x4, 0x5, 0xb882, 0x2}, {0xcaf, 0x23fb, 0xe, 0xffffff3f, 0xc32, 0x2}, {0xf, 0x3, 0x0, 0x8, 0x6, 0x3}, {0xcfdc, 0x8, 0x3ff, 0x1, 0x200000, 0x5}, {0x2, 0x0, 0x401, 0x4, 0x8, 0x4}, {0x81, 0x8, 0xff, 0x4, 0x7, 0x6}, {0x9, 0x8, 0x7fffffff, 0x2, 0x8, 0x34}, {0x80, 0x5, 0x1c, 0x10, 0x10000000, 0x3}, {0x81, 0x0, 0x2, 0x6ef7, 0xfffffffc, 0x89}, {0x9, 0x7, 0x6, 0x5, 0x8, 0x10001}, {0x7, 0x6, 0x8, 0x1, 0xffff39db, 0x6}, {0x6, 0x7, 0x1000, 0x7, 0x9, 0x6}, {0x3, 0x9, 0x4, 0x1000, 0x2, 0x4e9}, {0x3, 0x5e15, 0x87, 0x1, 0x9, 0x10001}, {0x7f, 0x5, 0x1ff, 0x1000, 0xfffffffa, 0x3}, {0xbe, 0xfffffff1, 0x2, 0x534f, 0x9, 0x3ff}, {0xd24, 0xe, 0x7, 0x32d, 0x7, 0x2}, {0xbe9, 0x2, 0x1, 0x9, 0x5, 0x6}, {0x9, 0x2, 0x0, 0x401, 0x6, 0x2}, {0xc, 0x3, 0xfff, 0x80000000, 0x8, 0x200}, {0x3ff, 0x7f, 0x4, 0x49f, 0x1, 0xc}, {0x2, 0x1, 0x1, 0x0, 0x8, 0x9}, {0x100, 0x400, 0x5, 0x81, 0x5, 0x7}, {0x2, 0x7, 0x986d, 0x3ad2, 0x7ff, 0x6e}, {0xfffffffd, 0x2, 0x1c00000, 0x5, 0x7, 0x5}, {0x0, 0x800, 0x6, 0x827b, 0x8, 0xfb6}, {0x4, 0x6c3, 0x4, 0xc16a, 0x8, 0x9}, {0x9, 0x1, 0x9, 0x9, 0x2663, 0x8}, {0x8824, 0x91d1, 0x62a, 0x8, 0x5, 0x4}, {0x0, 0x4, 0x9, 0x1, 0xfff, 0xd0}, {0x7fffffff, 0x800, 0x1b6, 0x250, 0x0, 0xf}, {0x45f5, 0x5, 0x25, 0x3, 0x5, 0x7}, {0x0, 0x3, 0x2, 0x400, 0x40, 0xb2880000}, {0x5, 0xd95, 0x8, 0x2, 0x7f, 0x38}, {0xffffffff, 0x9, 0x9, 0x9, 0x0, 0x7}, {0xffffff7f, 0x0, 0x40, 0x401, 0x2, 0x401}, {0x2, 0x1, 0x1, 0x9b, 0x40, 0x5}, {0x1, 0x1000, 0x7, 0xffffffff, 0x2}, {0x59b7, 0x1ff, 0x8e4c, 0x401, 0x7, 0x100}, {0x8001, 0x4, 0x5f, 0x4, 0x7ff, 0x7}, {0x6, 0x6, 0xef6e, 0x2, 0x1, 0x1}, {0xd, 0xf, 0x1, 0x4, 0x101, 0xe}, {0x0, 0x3, 0x5, 0xa, 0x400, 0x2}, {0xf0, 0xffffffff, 0x5, 0x8, 0x7039, 0x8}, {0x5, 0x7, 0x8001, 0x4, 0x6, 0x6}, {0x5, 0x2, 0x2f85, 0x1, 0x7af, 0x1000000}, {0x9, 0xc2d, 0x0, 0x2, 0x81, 0x3ff}, {0x5, 0xfffffffe, 0x30af, 0x2c, 0x6, 0x8}, {0x8, 0x25b6, 0x6, 0x0, 0x8000, 0x7}, {0x2, 0xb2f2, 0x3, 0x100, 0x514d, 0x13}, {0x81, 0x9, 0x3, 0x2, 0xec, 0xffff}, {0x7fff, 0x5, 0x94e, 0x1000, 0x9, 0x9}, {0x3, 0x0, 0x7ff, 0xfffffff7, 0x2, 0x8000000}, {0xffff0001, 0x3, 0x3, 0x800, 0x5, 0x2}, {0x200, 0x3, 0x9, 0x8, 0x6919, 0x81}, {0x4, 0x8, 0x4ce0746f, 0x7, 0x4, 0x2800}, {0xac9b5b6c, 0x0, 0x9, 0x6af, 0xffffffff, 0x124}, {0x8, 0xfff, 0x1, 0x3ac, 0x800}, {0x9, 0xfffff800, 0x2, 0x0, 0x7, 0x5}, {0x7, 0x6, 0x3, 0xa, 0x8, 0x4cb2}, {0x7, 0x4, 0x7f, 0x3, 0x2, 0xffffffff}, {0x3, 0x5, 0x0, 0x40, 0x2, 0xff}, {0x81, 0x2, 0x4, 0x6, 0x9, 0x4}, {0x7, 0x7, 0xffffffff, 0x4, 0x6}, {0xfffe00, 0x5, 0x1, 0xd57, 0xb593, 0x80000001}, {0x40, 0x81, 0xeb, 0x1, 0x4d, 0x6}, {0x6, 0x6, 0xf, 0xf, 0x9, 0x8c}, {0x1, 0xfffffc1f, 0x10, 0x80, 0x100, 0x3}, {0xfffffffe, 0x9, 0x8, 0x8, 0x5, 0x6}, {0x9, 0x3, 0x1, 0x1, 0x9, 0x80000000}, {0x8, 0xfffffffc, 0xe67, 0x800, 0x9, 0x4}, {0x3, 0x4, 0x7, 0x6, 0x0, 0x40}, {0x39d, 0xfff, 0x5, 0xa8, 0x8, 0x1000}, {0xfff, 0xffffffff, 0x7, 0x5, 0x8, 0xf}, {0xfffffff7, 0x7fffffff, 0x9, 0x8, 0x5, 0x2}, {0x5, 0x800, 0x2, 0x7, 0x2d91, 0x3}, {0x5, 0x1ff, 0x1, 0xaeca, 0x4, 0x3}, {0x3, 0x5, 0x5, 0x7, 0x1000, 0x8}, {0x7, 0xfff, 0x9, 0x0, 0xb, 0x1}, {0x1, 0x74b4, 0x3ff, 0x4, 0x12288, 0x3ff}, {0x2, 0x48, 0x1ff, 0x10000, 0x1000, 0x6}, {0x7, 0x3, 0x5, 0xc126, 0x2854}, {0x3ff, 0xe, 0xcbe6, 0x1, 0xc, 0x3}, {0x1, 0xfc, 0xc, 0xc, 0x899, 0x10}, {0x40, 0x10c, 0x7fffffff, 0x255, 0x8, 0x9}, {0xc, 0x81, 0x4, 0x0, 0x8e, 0x80000000}, {0x9, 0x10000, 0x0, 0x5, 0x2}, {0x5, 0x9, 0x1, 0x7fff, 0x4, 0x6}, {0x3ff, 0xecb, 0x2, 0xa, 0x1ea, 0x1}, {0x89a7, 0x9, 0x1, 0x2, 0x8001}, {0x5, 0x101, 0x1, 0x0, 0xffff0000, 0x39e}, {0x7, 0x9, 0xa6, 0x7ff, 0x9, 0x6}, {0x7, 0x94, 0xb, 0x3, 0x4, 0x4}, {0x2, 0x401, 0xbd0, 0x8, 0xfffff000, 0xfffffffc}, {0xfffffffc, 0x80, 0x922, 0x2, 0x3, 0x72d0}, {0x6, 0x0, 0x5, 0x1000, 0xc, 0x9}, {0x9, 0x4, 0xfffffffb, 0x6, 0x3, 0x361c}, {0x0, 0x72b1, 0xffffffff, 0x4, 0x9, 0x4308a152}, {0x0, 0x4, 0x7, 0x1, 0x7, 0x9}], [{0x3}, {}, {0x0, 0x1}, {0x6}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x2, 0xff19c58e9ed047c1}, {}, {0x3}, {}, {0x4}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x5}, {0x2}, {0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x1}, {0x3}, {0x4}, {0x3}, {0x2}, {0x0, 0x1}, {0x5, 0x4aa9d00536de7dcf}, {0x2, 0x1}, {}, {0x2}, {0x5}, {0x0, 0x1}, {0x3, 0x6e311ce735ecd314}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x5, 0x3}, {0x2}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x7}, {0x3, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x30, 0x19, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}}]}, 0x1210}}, 0x0) io_uring_enter(r5, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 7.614707619s ago: executing program 5 (id=4005): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r0, 0x708, 0xb8f7) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000100)={0x1, 0x4, 0x3, &(0x7f0000000080)={0x10, "14a6c62707dab7299602abd83463604d70b41d4008e300"}}) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000001c0)='io.pressure\x00', 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x54}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x1210, 0x2c, 0xd27, 0x8030bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x11e0, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xe, 0x2}}, @TCA_ROUTE4_ACT={0x260, 0x6, [@m_sample={0x90, 0x3, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x7fffffff, 0x0, 0x9, 0x6}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x76ee3561}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffff229}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x37c5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x100, 0x0, 0xc98, 0x3}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x81}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0x98, 0x11, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x1}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0x4684c}, @TCA_MPLS_LABEL={0x8, 0x5, 0x44c42}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x3a, 0x6, "35009eea5728e1ccc62684cd190ad09e3e022f90412955acd3c0dbd581b8004eaa8180600f4a1565ea8151366e61c730a9c078c241e6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x4}}}}, @m_gact={0x134, 0x6, 0x0, 0x0, {{0x9}, {0x94, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xb03, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x186}}, @TCA_GACT_PARMS={0x18, 0x2, {0x80000, 0x0, 0x0, 0x0, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x237f, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1c73, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x10001, 0x4, 0x8, 0x81, 0xfffffffc}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x2, 0x10000000, 0x7, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x101, 0x10000000, 0x1f, 0xc6f}}]}, {0x75, 0x6, "2ccc6282bc8bac4447822da0d0531178774955f84bab8b87e551656def4084ba2ddad9a23a23028f3236b0f0b7d5e85b61e9ca14cb39f2b5a8d7e31217917e97b71587a9c53555a9bd7c79a550cf0053b56cb8554eb9da1defa7e337a4db48379019a8e0be89e81bee4e0f87c397b82512"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_ROUTE4_ACT={0xf74, 0x6, [@m_pedit={0xf40, 0x4, 0x0, 0x0, {{0xa}, {0xf14, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x90, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0xf, 0xa5, 0x8, 0x7fff, 0x60}, 0xf0, 0x0, [{0xffffffff, 0x4, 0x5, 0x2, 0x2, 0x5}, {0x4, 0xa757, 0x3ff, 0x7, 0xb, 0x2}, {0x80, 0x6, 0x7fffffff, 0xe, 0x3, 0xd}, {0x81, 0x0, 0x7fff, 0x61, 0x90f, 0x35}]}, [{0x5b6, 0x7, 0x8, 0x9, 0x8, 0x5}, {0x80000001, 0x6, 0x0, 0x4e12, 0x9, 0xed}, {0x7, 0x9, 0x3, 0x4, 0xfffffffa, 0x93a7}, {0x0, 0x9, 0x9, 0x5, 0x1, 0x4}, {0x4, 0x8, 0x4, 0x65, 0x401}, {0x767370b2, 0x4, 0xb526, 0x4, 0x2, 0x6b5d}, {0x8001, 0x8, 0x80e0, 0x6ab, 0x2, 0x6}, {0x80000001, 0xfffff800, 0x2, 0x100, 0x0, 0x80}, {0xa, 0x3, 0x5, 0x4, 0x92, 0x1}, {0x728f, 0x5, 0x5, 0x1, 0x3, 0x80000000}, {0x81, 0x6, 0x0, 0xc7, 0xffff, 0x50}, {0xfffffffa, 0x9, 0x10, 0xfffffffb, 0x13, 0x7}, {0xfff, 0x4, 0x3, 0xfff, 0x18000000}, {0x8, 0x9, 0x3, 0x10000, 0xfff, 0xffff8001}, {0x9, 0x80000001, 0x101, 0x5, 0xe}, {0x5, 0x1a, 0x0, 0x7fff, 0x8, 0x1}, {0x1, 0x9, 0x8, 0x1ff, 0x8, 0xb}, {0xea89, 0x0, 0x1, 0x6, 0x6, 0x10001}, {0x1, 0x1, 0xf3c, 0x101, 0x7, 0x2}, {0x5, 0x7fff, 0x2, 0xffffff4c, 0x8, 0x5}, {0x0, 0x8, 0x6, 0x3, 0x3, 0x8}, {0x3, 0xdcc0, 0xe, 0x6, 0x3, 0x8}, {0x31bee70a, 0x80000001, 0xee, 0x200, 0x9a91, 0x5}, {0xbdc, 0x4, 0xf, 0x20c9, 0xe6c8, 0x1}, {0x7fff, 0xe, 0x4, 0xff, 0xc0000000, 0x3}, {0x0, 0x400, 0x25, 0xffffffff, 0x3, 0xffffffff}, {0x6, 0x9, 0x1, 0x3, 0xa}, {0x81, 0x2, 0x7f, 0x93, 0x0, 0x9}, {0x1, 0x7, 0x1, 0x0, 0x101, 0x200}, {0x9, 0x40, 0x4, 0x5, 0xb882, 0x2}, {0xcaf, 0x23fb, 0xe, 0xffffff3f, 0xc32, 0x2}, {0xf, 0x3, 0x0, 0x8, 0x6, 0x3}, {0xcfdc, 0x8, 0x3ff, 0x1, 0x200000, 0x5}, {0x2, 0x0, 0x401, 0x4, 0x8, 0x4}, {0x81, 0x8, 0xff, 0x4, 0x7, 0x6}, {0x9, 0x8, 0x7fffffff, 0x2, 0x8, 0x34}, {0x80, 0x5, 0x1c, 0x10, 0x10000000, 0x3}, {0x81, 0x0, 0x2, 0x6ef7, 0xfffffffc, 0x89}, {0x9, 0x7, 0x6, 0x5, 0x8, 0x10001}, {0x7, 0x6, 0x8, 0x1, 0xffff39db, 0x6}, {0x6, 0x7, 0x1000, 0x7, 0x9, 0x6}, {0x3, 0x9, 0x4, 0x1000, 0x2, 0x4e9}, {0x3, 0x5e15, 0x87, 0x1, 0x9, 0x10001}, {0x7f, 0x5, 0x1ff, 0x1000, 0xfffffffa, 0x3}, {0xbe, 0xfffffff1, 0x2, 0x534f, 0x9, 0x3ff}, {0xd24, 0xe, 0x7, 0x32d, 0x7, 0x2}, {0xbe9, 0x2, 0x1, 0x9, 0x5, 0x6}, {0x9, 0x2, 0x0, 0x401, 0x6, 0x2}, {0xc, 0x3, 0xfff, 0x80000000, 0x8, 0x200}, {0x3ff, 0x7f, 0x4, 0x49f, 0x1, 0xc}, {0x2, 0x1, 0x1, 0x0, 0x8, 0x9}, {0x100, 0x400, 0x5, 0x81, 0x5, 0x7}, {0x2, 0x7, 0x986d, 0x3ad2, 0x7ff, 0x6e}, {0xfffffffd, 0x2, 0x1c00000, 0x5, 0x7, 0x5}, {0x0, 0x800, 0x6, 0x827b, 0x8, 0xfb6}, {0x4, 0x6c3, 0x4, 0xc16a, 0x8, 0x9}, {0x9, 0x1, 0x9, 0x9, 0x2663, 0x8}, {0x8824, 0x91d1, 0x62a, 0x8, 0x5, 0x4}, {0x0, 0x4, 0x9, 0x1, 0xfff, 0xd0}, {0x7fffffff, 0x800, 0x1b6, 0x250, 0x0, 0xf}, {0x45f5, 0x5, 0x25, 0x3, 0x5, 0x7}, {0x0, 0x3, 0x2, 0x400, 0x40, 0xb2880000}, {0x5, 0xd95, 0x8, 0x2, 0x7f, 0x38}, {0xffffffff, 0x9, 0x9, 0x9, 0x0, 0x7}, {0xffffff7f, 0x0, 0x40, 0x401, 0x2, 0x401}, {0x2, 0x1, 0x1, 0x9b, 0x40, 0x5}, {0x1, 0x1000, 0x7, 0xffffffff, 0x2}, {0x59b7, 0x1ff, 0x8e4c, 0x401, 0x7, 0x100}, {0x8001, 0x4, 0x5f, 0x4, 0x7ff, 0x7}, {0x6, 0x6, 0xef6e, 0x2, 0x1, 0x1}, {0xd, 0xf, 0x1, 0x4, 0x101, 0xe}, {0x0, 0x3, 0x5, 0xa, 0x400, 0x2}, {0xf0, 0xffffffff, 0x5, 0x8, 0x7039, 0x8}, {0x5, 0x7, 0x8001, 0x4, 0x6, 0x6}, {0x5, 0x2, 0x2f85, 0x1, 0x7af, 0x1000000}, {0x9, 0xc2d, 0x0, 0x2, 0x81, 0x3ff}, {0x5, 0xfffffffe, 0x30af, 0x2c, 0x6, 0x8}, {0x8, 0x25b6, 0x6, 0x0, 0x8000, 0x7}, {0x2, 0xb2f2, 0x3, 0x100, 0x514d, 0x13}, {0x81, 0x9, 0x3, 0x2, 0xec, 0xffff}, {0x7fff, 0x5, 0x94e, 0x1000, 0x9, 0x9}, {0x3, 0x0, 0x7ff, 0xfffffff7, 0x2, 0x8000000}, {0xffff0001, 0x3, 0x3, 0x800, 0x5, 0x2}, {0x200, 0x3, 0x9, 0x8, 0x6919, 0x81}, {0x4, 0x8, 0x4ce0746f, 0x7, 0x4, 0x2800}, {0xac9b5b6c, 0x0, 0x9, 0x6af, 0xffffffff, 0x124}, {0x8, 0xfff, 0x1, 0x3ac, 0x800}, {0x9, 0xfffff800, 0x2, 0x0, 0x7, 0x5}, {0x7, 0x6, 0x3, 0xa, 0x8, 0x4cb2}, {0x7, 0x4, 0x7f, 0x3, 0x2, 0xffffffff}, {0x3, 0x5, 0x0, 0x40, 0x2, 0xff}, {0x81, 0x2, 0x4, 0x6, 0x9, 0x4}, {0x7, 0x7, 0xffffffff, 0x4, 0x6}, {0xfffe00, 0x5, 0x1, 0xd57, 0xb593, 0x80000001}, {0x40, 0x81, 0xeb, 0x1, 0x4d, 0x6}, {0x6, 0x6, 0xf, 0xf, 0x9, 0x8c}, {0x1, 0xfffffc1f, 0x10, 0x80, 0x100, 0x3}, {0xfffffffe, 0x9, 0x8, 0x8, 0x5, 0x6}, {0x9, 0x3, 0x1, 0x1, 0x9, 0x80000000}, {0x8, 0xfffffffc, 0xe67, 0x800, 0x9, 0x4}, {0x3, 0x4, 0x7, 0x6, 0x0, 0x40}, {0x39d, 0xfff, 0x5, 0xa8, 0x8, 0x1000}, {0xfff, 0xffffffff, 0x7, 0x5, 0x8, 0xf}, {0xfffffff7, 0x7fffffff, 0x9, 0x8, 0x5, 0x2}, {0x5, 0x800, 0x2, 0x7, 0x2d91, 0x3}, {0x5, 0x1ff, 0x1, 0xaeca, 0x4, 0x3}, {0x3, 0x5, 0x5, 0x7, 0x1000, 0x8}, {0x7, 0xfff, 0x9, 0x0, 0xb, 0x1}, {0x1, 0x74b4, 0x3ff, 0x4, 0x12288, 0x3ff}, {0x2, 0x48, 0x1ff, 0x10000, 0x1000, 0x6}, {0x7, 0x3, 0x5, 0xc126, 0x2854}, {0x3ff, 0xe, 0xcbe6, 0x1, 0xc, 0x3}, {0x1, 0xfc, 0xc, 0xc, 0x899, 0x10}, {0x40, 0x10c, 0x7fffffff, 0x255, 0x8, 0x9}, {0xc, 0x81, 0x4, 0x0, 0x8e, 0x80000000}, {0x9, 0x10000, 0x0, 0x5, 0x2}, {0x5, 0x9, 0x1, 0x7fff, 0x4, 0x6}, {0x3ff, 0xecb, 0x2, 0xa, 0x1ea, 0x1}, {0x89a7, 0x9, 0x1, 0x2, 0x8001}, {0x5, 0x101, 0x1, 0x0, 0xffff0000, 0x39e}, {0x7, 0x9, 0xa6, 0x7ff, 0x9, 0x6}, {0x7, 0x94, 0xb, 0x3, 0x4, 0x4}, {0x2, 0x401, 0xbd0, 0x8, 0xfffff000, 0xfffffffc}, {0xfffffffc, 0x80, 0x922, 0x2, 0x3, 0x72d0}, {0x6, 0x0, 0x5, 0x1000, 0xc, 0x9}, {0x9, 0x4, 0xfffffffb, 0x6, 0x3, 0x361c}, {0x0, 0x72b1, 0xffffffff, 0x4, 0x9, 0x4308a152}, {0x0, 0x4, 0x7, 0x1, 0x7, 0x9}], [{0x3}, {}, {0x0, 0x1}, {0x6}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x2, 0xff19c58e9ed047c1}, {}, {0x3}, {}, {0x4}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x5}, {0x2}, {0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x1}, {0x3}, {0x4}, {0x3}, {0x2}, {0x0, 0x1}, {0x5, 0x4aa9d00536de7dcf}, {0x2, 0x1}, {}, {0x2}, {0x5}, {0x0, 0x1}, {0x3, 0x6e311ce735ecd314}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x5, 0x3}, {0x2}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x7}, {0x3, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x30, 0x19, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}}]}, 0x1210}}, 0x0) io_uring_enter(r5, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 7.392752729s ago: executing program 7 (id=4006): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f00000233c0)={0x0, 0x0, &(0x7f0000023380)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40840}, 0x20048054) recvmmsg(0xffffffffffffffff, &(0x7f000000a140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001980)=""/109, 0x6d}], 0x1}, 0x8}], 0x1, 0x40010061, 0x0) 5.9161378s ago: executing program 0 (id=4007): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 4.990520738s ago: executing program 0 (id=4008): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009b40)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x4, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x5, 0x2, 0xc, 0x8, 0x9, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x103, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x4c}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x0, 0xffb, 0x9}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x8000, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0xad, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0xffffff81, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xfd, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x4030, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b5}, {0xa24b, 0x947d, 0x3, 0x4, 0x80000000, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x6}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x0, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b2}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x400004, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0x7, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x4, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x5}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r5, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r3, 0x10c, 0x20}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x4000880) 4.988462047s ago: executing program 5 (id=4009): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xa, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="89a000fe000000006910ac000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x800) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r5, 0xd01c4813, &(0x7f0000000100)={0x2, 0x100, 0x0, 0x100002, 0x7, 0x1}) 4.988287124s ago: executing program 7 (id=4010): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010038bd7000fddbdf250700000008000300", @ANYRES32=r4, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000000000000008000500070000000a0018"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socket$packet(0x11, 0x3, 0x300) 4.770099377s ago: executing program 7 (id=4011): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010038bd7000fddbdf250700000008000300", @ANYRES32=r4, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000000000000008000500070000000a0018"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$packet(0x11, 0x3, 0x300) 4.676788346s ago: executing program 2 (id=4012): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2, 0x100, 0x0, 0x100002, 0x7, 0x1}) 4.595380923s ago: executing program 6 (id=4013): openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100003052abd70000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006a800001400128009000100a163"], 0x3c}}, 0x440b0) setsockopt$packet_buf(r0, 0x107, 0x2, &(0x7f0000000200)="bfa24abbcf0b73f2a2107730f36cb51c42dcca10e40c024b2ce920f93c4a65ce59bdf09031c28804fa6854725a999f8c69e08ec0ec597f8d102eb310ab0f4ef7d49516878b98389fd941636aff6376b5f717cd", 0x53) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f00000023c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff000000008950dc5bc934b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400f2decd7508e6b95830a7b2000000000007040000f0ffffffb70200000800bb886be312e795bf464093f4ad5fb0a89022b3088f7a9e7afb4a576bc8f5d647c9698f0c03bdb6d83fdfb45a7dae0cd025caa86564eb38eef1956ed8424bb2e23ae4b02bcddf2110fcde26a8d72229bd89d96beab60a991dc4080d4b4d79319b5d7341ecb3334880945d75ede93e40fe983e443733348c5962e30195bf8953f512dc5934f19971c6d156bd2d133e213bac47147e831f2f0f540eeaf852d2ac200a0affdd4044157de4df0419d3d39e6468f71eef9a836191ec4e14691cbd0bf97519453b284ceb285a6b29cef543", @ANYRES64=0x0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r2, 0x0, 0x0}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone3(&(0x7f0000000240)={0x100202000, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x9}, &(0x7f0000000340)=""/233, 0xe9, &(0x7f0000000140)=""/73, &(0x7f0000000200)=[0x0]}, 0x58) sched_setaffinity(r4, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0x2, 0x4000000000000001, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000214010028bda4b51bc4f84b99c94400", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x40) read$FUSE(r6, &(0x7f0000000200)={0x2020}, 0x16a2) ioctl$KVM_GET_MSRS_sys(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0000082, 0x0, 0x1}]}) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 2.700526981s ago: executing program 2 (id=4014): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = fsopen(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x50}}, 0x890) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000040)={0x1, 0x3, 0xc3, 0x3, 0x7f}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r3, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$ptp0(0xffffffffffffff9c, 0x0, 0x60442, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r4, 0x2}) syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x2, 0x0, 0x70bd2d}, 0x10}}, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = dup3(r0, r1, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000200)={@dev, @loopback, @private}, &(0x7f00000002c0)=0xc) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500000000120800030043000000a80016000400dfbfdb2d47782a462c9c801f298225c506000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3", 0xd8}], 0x1}, 0x8040) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e23, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) 1.809050009s ago: executing program 0 (id=4015): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) lsm_get_self_attr(0x66, 0x0, &(0x7f0000000240), 0x1) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000680)=0xe8) sendmsg$unix(r4, &(0x7f0000000880)={&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000440)=[{&(0x7f00000000c0)}, {&(0x7f0000000300)="fed2fe62a864bbdaa98200526ac5c2ad2617e784e1672497778fbd682aca9e64cfcd85cf48ca3e283e99250f8b83d31c2c95259543e651ad008fac8955100804f3612d6ebdbd2e05b1a15f22138e383103da32316d7aae93ce00950f9caeba776c440e8b7be7fb5709b65c298b1e791e8dbbaf799455a9b94f5052ae5312bc6d580af9b8f74b6d3c2c7b2fb96a5857deee87a839d30f0068de54ecba14a3ca06d10cd32a7115ec906dc44350b9b8ce91e63f154c3436307d6cb124b8d457f039bcc77666ba2ba399fede5915dade74", 0xcf}], 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=r0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000e9ff1f006cc0ce5000000100000001000d06", @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r5, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xc8, 0x20000800}, 0x4800) sendmmsg$inet6(r5, &(0x7f00000016c0)=[{{&(0x7f00000004c0)={0xa, 0x4e23, 0x0, @loopback, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="28000000000000002900000039000000ff0202fe0000000000000000000001"], 0x28}}], 0x1, 0x4040084) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_submit(r7, 0x2, &(0x7f0000000400)=[0x0, 0x0]) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_ifindex, @remote}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a00", @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4048030}, 0xc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) 1.798016739s ago: executing program 6 (id=4016): prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndctrl(0x0, 0x84, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) epoll_create(0x7) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, &(0x7f0000000300), 0x5005) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r1, 0x0, 0x0, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.74632983s ago: executing program 5 (id=4017): prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndctrl(0x0, 0x84, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) epoll_create(0x7) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, 0x0, 0x5005) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r1, 0x0, 0x0, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.72491028s ago: executing program 7 (id=4018): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00006d3000/0x4000)=nil, 0x4000, 0x66) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x2fff) write$sequencer(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="940e181be9f7cdf0557000000c0f1c3fd29ce234940222030a9db26d089209e00805fcffffffffffffff42e942"], 0x2d) io_submit(0x0, 0x0, 0x0) setrlimit(0x7, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000003c0)}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x4, &(0x7f0000001180)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.556851769s ago: executing program 2 (id=4019): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001a"], 0x34}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 750.486134ms ago: executing program 0 (id=4020): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = fsopen(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x50}}, 0x890) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000040)={0x1, 0x3, 0xc3, 0x3, 0x7f}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r3, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$ptp0(0xffffffffffffff9c, 0x0, 0x60442, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r4, 0x2}) syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x2, 0x0, 0x70bd2d}, 0x10}}, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = dup3(r0, r1, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000200)={@dev, @loopback, @private}, &(0x7f00000002c0)=0xc) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500000000120800030043000000a80016000400dfbfdb2d47782a462c9c801f298225c506000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3", 0xd8}], 0x1}, 0x8040) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e23, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) 290.845647ms ago: executing program 0 (id=4021): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010038bd7000fddbdf250700000008000300", @ANYRES32=r4, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000000000000008000500070000000a0018"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) 124.384027ms ago: executing program 2 (id=4022): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r0, 0x708, 0xb8f7) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000100)={0x1, 0x4, 0x3, &(0x7f0000000080)={0x10, "14a6c62707dab7299602abd83463604d70b41d4008e300"}}) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000001c0)='io.pressure\x00', 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r2, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x54}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x1210, 0x2c, 0xd27, 0x8030bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x11e0, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xe, 0x2}}, @TCA_ROUTE4_ACT={0x260, 0x6, [@m_sample={0x90, 0x3, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x7fffffff, 0x0, 0x9, 0x6}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x76ee3561}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffff229}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x37c5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x100, 0x0, 0xc98, 0x3}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x81}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0x98, 0x11, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x1}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0x4684c}, @TCA_MPLS_LABEL={0x8, 0x5, 0x44c42}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x3a, 0x6, "35009eea5728e1ccc62684cd190ad09e3e022f90412955acd3c0dbd581b8004eaa8180600f4a1565ea8151366e61c730a9c078c241e6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x4}}}}, @m_gact={0x134, 0x6, 0x0, 0x0, {{0x9}, {0x94, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xb03, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x186}}, @TCA_GACT_PARMS={0x18, 0x2, {0x80000, 0x0, 0x0, 0x0, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x237f, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1c73, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x10001, 0x4, 0x8, 0x81, 0xfffffffc}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x2, 0x10000000, 0x7, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x101, 0x10000000, 0x1f, 0xc6f}}]}, {0x75, 0x6, "2ccc6282bc8bac4447822da0d0531178774955f84bab8b87e551656def4084ba2ddad9a23a23028f3236b0f0b7d5e85b61e9ca14cb39f2b5a8d7e31217917e97b71587a9c53555a9bd7c79a550cf0053b56cb8554eb9da1defa7e337a4db48379019a8e0be89e81bee4e0f87c397b82512"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_ROUTE4_ACT={0xf74, 0x6, [@m_pedit={0xf40, 0x4, 0x0, 0x0, {{0xa}, {0xf14, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x90, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0xf, 0xa5, 0x8, 0x7fff, 0x60}, 0xf0, 0x0, [{0xffffffff, 0x4, 0x5, 0x2, 0x2, 0x5}, {0x4, 0xa757, 0x3ff, 0x7, 0xb, 0x2}, {0x80, 0x6, 0x7fffffff, 0xe, 0x3, 0xd}, {0x81, 0x0, 0x7fff, 0x61, 0x90f, 0x35}]}, [{0x5b6, 0x7, 0x8, 0x9, 0x8, 0x5}, {0x80000001, 0x6, 0x0, 0x4e12, 0x9, 0xed}, {0x7, 0x9, 0x3, 0x4, 0xfffffffa, 0x93a7}, {0x0, 0x9, 0x9, 0x5, 0x1, 0x4}, {0x4, 0x8, 0x4, 0x65, 0x401}, {0x767370b2, 0x4, 0xb526, 0x4, 0x2, 0x6b5d}, {0x8001, 0x8, 0x80e0, 0x6ab, 0x2, 0x6}, {0x80000001, 0xfffff800, 0x2, 0x100, 0x0, 0x80}, {0xa, 0x3, 0x5, 0x4, 0x92, 0x1}, {0x728f, 0x5, 0x5, 0x1, 0x3, 0x80000000}, {0x81, 0x6, 0x0, 0xc7, 0xffff, 0x50}, {0xfffffffa, 0x9, 0x10, 0xfffffffb, 0x13, 0x7}, {0xfff, 0x4, 0x3, 0xfff, 0x18000000}, {0x8, 0x9, 0x3, 0x10000, 0xfff, 0xffff8001}, {0x9, 0x80000001, 0x101, 0x5, 0xe}, {0x5, 0x1a, 0x0, 0x7fff, 0x8, 0x1}, {0x1, 0x9, 0x8, 0x1ff, 0x8, 0xb}, {0xea89, 0x0, 0x1, 0x6, 0x6, 0x10001}, {0x1, 0x1, 0xf3c, 0x101, 0x7, 0x2}, {0x5, 0x7fff, 0x2, 0xffffff4c, 0x8, 0x5}, {0x0, 0x8, 0x6, 0x3, 0x3, 0x8}, {0x3, 0xdcc0, 0xe, 0x6, 0x3, 0x8}, {0x31bee70a, 0x80000001, 0xee, 0x200, 0x9a91, 0x5}, {0xbdc, 0x4, 0xf, 0x20c9, 0xe6c8, 0x1}, {0x7fff, 0xe, 0x4, 0xff, 0xc0000000, 0x3}, {0x0, 0x400, 0x25, 0xffffffff, 0x3, 0xffffffff}, {0x6, 0x9, 0x1, 0x3, 0xa}, {0x81, 0x2, 0x7f, 0x93, 0x0, 0x9}, {0x1, 0x7, 0x1, 0x0, 0x101, 0x200}, {0x9, 0x40, 0x4, 0x5, 0xb882, 0x2}, {0xcaf, 0x23fb, 0xe, 0xffffff3f, 0xc32, 0x2}, {0xf, 0x3, 0x0, 0x8, 0x6, 0x3}, {0xcfdc, 0x8, 0x3ff, 0x1, 0x200000, 0x5}, {0x2, 0x0, 0x401, 0x4, 0x8, 0x4}, {0x81, 0x8, 0xff, 0x4, 0x7, 0x6}, {0x9, 0x8, 0x7fffffff, 0x2, 0x8, 0x34}, {0x80, 0x5, 0x1c, 0x10, 0x10000000, 0x3}, {0x81, 0x0, 0x2, 0x6ef7, 0xfffffffc, 0x89}, {0x9, 0x7, 0x6, 0x5, 0x8, 0x10001}, {0x7, 0x6, 0x8, 0x1, 0xffff39db, 0x6}, {0x6, 0x7, 0x1000, 0x7, 0x9, 0x6}, {0x3, 0x9, 0x4, 0x1000, 0x2, 0x4e9}, {0x3, 0x5e15, 0x87, 0x1, 0x9, 0x10001}, {0x7f, 0x5, 0x1ff, 0x1000, 0xfffffffa, 0x3}, {0xbe, 0xfffffff1, 0x2, 0x534f, 0x9, 0x3ff}, {0xd24, 0xe, 0x7, 0x32d, 0x7, 0x2}, {0xbe9, 0x2, 0x1, 0x9, 0x5, 0x6}, {0x9, 0x2, 0x0, 0x401, 0x6, 0x2}, {0xc, 0x3, 0xfff, 0x80000000, 0x8, 0x200}, {0x3ff, 0x7f, 0x4, 0x49f, 0x1, 0xc}, {0x2, 0x1, 0x1, 0x0, 0x8, 0x9}, {0x100, 0x400, 0x5, 0x81, 0x5, 0x7}, {0x2, 0x7, 0x986d, 0x3ad2, 0x7ff, 0x6e}, {0xfffffffd, 0x2, 0x1c00000, 0x5, 0x7, 0x5}, {0x0, 0x800, 0x6, 0x827b, 0x8, 0xfb6}, {0x4, 0x6c3, 0x4, 0xc16a, 0x8, 0x9}, {0x9, 0x1, 0x9, 0x9, 0x2663, 0x8}, {0x8824, 0x91d1, 0x62a, 0x8, 0x5, 0x4}, {0x0, 0x4, 0x9, 0x1, 0xfff, 0xd0}, {0x7fffffff, 0x800, 0x1b6, 0x250, 0x0, 0xf}, {0x45f5, 0x5, 0x25, 0x3, 0x5, 0x7}, {0x0, 0x3, 0x2, 0x400, 0x40, 0xb2880000}, {0x5, 0xd95, 0x8, 0x2, 0x7f, 0x38}, {0xffffffff, 0x9, 0x9, 0x9, 0x0, 0x7}, {0xffffff7f, 0x0, 0x40, 0x401, 0x2, 0x401}, {0x2, 0x1, 0x1, 0x9b, 0x40, 0x5}, {0x1, 0x1000, 0x7, 0xffffffff, 0x2}, {0x59b7, 0x1ff, 0x8e4c, 0x401, 0x7, 0x100}, {0x8001, 0x4, 0x5f, 0x4, 0x7ff, 0x7}, {0x6, 0x6, 0xef6e, 0x2, 0x1, 0x1}, {0xd, 0xf, 0x1, 0x4, 0x101, 0xe}, {0x0, 0x3, 0x5, 0xa, 0x400, 0x2}, {0xf0, 0xffffffff, 0x5, 0x8, 0x7039, 0x8}, {0x5, 0x7, 0x8001, 0x4, 0x6, 0x6}, {0x5, 0x2, 0x2f85, 0x1, 0x7af, 0x1000000}, {0x9, 0xc2d, 0x0, 0x2, 0x81, 0x3ff}, {0x5, 0xfffffffe, 0x30af, 0x2c, 0x6, 0x8}, {0x8, 0x25b6, 0x6, 0x0, 0x8000, 0x7}, {0x2, 0xb2f2, 0x3, 0x100, 0x514d, 0x13}, {0x81, 0x9, 0x3, 0x2, 0xec, 0xffff}, {0x7fff, 0x5, 0x94e, 0x1000, 0x9, 0x9}, {0x3, 0x0, 0x7ff, 0xfffffff7, 0x2, 0x8000000}, {0xffff0001, 0x3, 0x3, 0x800, 0x5, 0x2}, {0x200, 0x3, 0x9, 0x8, 0x6919, 0x81}, {0x4, 0x8, 0x4ce0746f, 0x7, 0x4, 0x2800}, {0xac9b5b6c, 0x0, 0x9, 0x6af, 0xffffffff, 0x124}, {0x8, 0xfff, 0x1, 0x3ac, 0x800}, {0x9, 0xfffff800, 0x2, 0x0, 0x7, 0x5}, {0x7, 0x6, 0x3, 0xa, 0x8, 0x4cb2}, {0x7, 0x4, 0x7f, 0x3, 0x2, 0xffffffff}, {0x3, 0x5, 0x0, 0x40, 0x2, 0xff}, {0x81, 0x2, 0x4, 0x6, 0x9, 0x4}, {0x7, 0x7, 0xffffffff, 0x4, 0x6}, {0xfffe00, 0x5, 0x1, 0xd57, 0xb593, 0x80000001}, {0x40, 0x81, 0xeb, 0x1, 0x4d, 0x6}, {0x6, 0x6, 0xf, 0xf, 0x9, 0x8c}, {0x1, 0xfffffc1f, 0x10, 0x80, 0x100, 0x3}, {0xfffffffe, 0x9, 0x8, 0x8, 0x5, 0x6}, {0x9, 0x3, 0x1, 0x1, 0x9, 0x80000000}, {0x8, 0xfffffffc, 0xe67, 0x800, 0x9, 0x4}, {0x3, 0x4, 0x7, 0x6, 0x0, 0x40}, {0x39d, 0xfff, 0x5, 0xa8, 0x8, 0x1000}, {0xfff, 0xffffffff, 0x7, 0x5, 0x8, 0xf}, {0xfffffff7, 0x7fffffff, 0x9, 0x8, 0x5, 0x2}, {0x5, 0x800, 0x2, 0x7, 0x2d91, 0x3}, {0x5, 0x1ff, 0x1, 0xaeca, 0x4, 0x3}, {0x3, 0x5, 0x5, 0x7, 0x1000, 0x8}, {0x7, 0xfff, 0x9, 0x0, 0xb, 0x1}, {0x1, 0x74b4, 0x3ff, 0x4, 0x12288, 0x3ff}, {0x2, 0x48, 0x1ff, 0x10000, 0x1000, 0x6}, {0x7, 0x3, 0x5, 0xc126, 0x2854}, {0x3ff, 0xe, 0xcbe6, 0x1, 0xc, 0x3}, {0x1, 0xfc, 0xc, 0xc, 0x899, 0x10}, {0x40, 0x10c, 0x7fffffff, 0x255, 0x8, 0x9}, {0xc, 0x81, 0x4, 0x0, 0x8e, 0x80000000}, {0x9, 0x10000, 0x0, 0x5, 0x2}, {0x5, 0x9, 0x1, 0x7fff, 0x4, 0x6}, {0x3ff, 0xecb, 0x2, 0xa, 0x1ea, 0x1}, {0x89a7, 0x9, 0x1, 0x2, 0x8001}, {0x5, 0x101, 0x1, 0x0, 0xffff0000, 0x39e}, {0x7, 0x9, 0xa6, 0x7ff, 0x9, 0x6}, {0x7, 0x94, 0xb, 0x3, 0x4, 0x4}, {0x2, 0x401, 0xbd0, 0x8, 0xfffff000, 0xfffffffc}, {0xfffffffc, 0x80, 0x922, 0x2, 0x3, 0x72d0}, {0x6, 0x0, 0x5, 0x1000, 0xc, 0x9}, {0x9, 0x4, 0xfffffffb, 0x6, 0x3, 0x361c}, {0x0, 0x72b1, 0xffffffff, 0x4, 0x9, 0x4308a152}, {0x0, 0x4, 0x7, 0x1, 0x7, 0x9}], [{0x3}, {}, {0x0, 0x1}, {0x6}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x2, 0xff19c58e9ed047c1}, {}, {0x3}, {}, {0x4}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x5}, {0x2}, {0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x1}, {0x3}, {0x4}, {0x3}, {0x2}, {0x0, 0x1}, {0x5, 0x4aa9d00536de7dcf}, {0x2, 0x1}, {}, {0x2}, {0x5}, {0x0, 0x1}, {0x3, 0x6e311ce735ecd314}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x5, 0x3}, {0x2}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x7}, {0x3, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x30, 0x19, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}}]}, 0x1210}}, 0x0) io_uring_enter(r4, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 372.466µs ago: executing program 7 (id=4023): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndctrl(0x0, 0x84, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) epoll_create(0x7) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, &(0x7f0000000300), 0x5005) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x4dc8aa39}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0b5bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000040)={@local}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'erspan0\x00', &(0x7f00000004c0)={'gretap0\x00', 0x0, 0x8, 0x7800, 0x1, 0x8, {{0x11, 0x4, 0x2, 0x7, 0x44, 0x67, 0x0, 0x7, 0x4, 0x0, @empty, @local, {[@lsrr={0x83, 0x17, 0x4a, [@loopback, @empty, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102]}, @end, @timestamp_prespec={0x44, 0xc, 0xa9, 0x3, 0x4, [{@multicast1, 0x5}]}, @generic={0x82, 0x9, "94e2ffeb550595"}]}}}}}) r3 = socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r3) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 0 (id=4024): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00') prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x20, 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x38, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x109141, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000440)=ANY=[@ANYRESHEX], 0x110) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f000001e600)='./file1\x00', 0x44000162) dup(r6) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) kernel console output (not intermixed with test programs): raw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1252.184224][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 1252.255511][ T7081] usb 6-1: Using ep0 maxpacket: 8 [ 1252.263774][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 1252.280337][ T7081] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1252.305396][ T7081] usb 6-1: config 4 interface 0 has no altsetting 0 [ 1252.343805][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 1252.357045][ T7081] usb 6-1: string descriptor 0 read error: -22 [ 1252.364077][ T7081] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1252.373677][ T7081] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1252.393379][ T7081] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1252.405360][ T9363] usb 8-1: USB disconnect, device number 16 [ 1252.412258][ T7081] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1252.423214][ T7081] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1252.431060][ T7081] usb 6-1: media controller created [ 1252.457056][ T7081] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1252.505226][T25363] FAULT_INJECTION: forcing a failure. [ 1252.505226][T25363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1252.519287][T25363] CPU: 0 UID: 0 PID: 25363 Comm: syz.2.3299 Tainted: G L syzkaller #0 PREEMPT(full) [ 1252.519314][T25363] Tainted: [L]=SOFTLOCKUP [ 1252.519320][T25363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1252.519330][T25363] Call Trace: [ 1252.519337][T25363] [ 1252.519343][T25363] dump_stack_lvl+0x100/0x190 [ 1252.519370][T25363] should_fail_ex.cold+0x5/0xa [ 1252.519400][T25363] _copy_from_iter+0x1f4/0x1690 [ 1252.519426][T25363] ? __asan_memset+0x23/0x50 [ 1252.519450][T25363] ? __pfx__copy_from_iter+0x10/0x10 [ 1252.519473][T25363] ? __pfx___alloc_skb+0x10/0x10 [ 1252.519509][T25363] netlink_sendmsg+0x808/0xda0 [ 1252.519534][T25363] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1252.519552][T25363] ? __might_fault+0x30/0x140 [ 1252.519586][T25363] ____sys_sendmsg+0x9e1/0xb70 [ 1252.519605][T25363] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1252.519627][T25363] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1252.519657][T25363] ___sys_sendmsg+0x190/0x1e0 [ 1252.519686][T25363] ? __pfx____sys_sendmsg+0x10/0x10 [ 1252.519738][T25363] __sys_sendmsg+0x170/0x220 [ 1252.519763][T25363] ? __pfx___sys_sendmsg+0x10/0x10 [ 1252.519804][T25363] ? rcu_is_watching+0x12/0xc0 [ 1252.519833][T25363] do_syscall_64+0x10b/0xf80 [ 1252.519857][T25363] ? clear_bhb_loop+0x40/0x90 [ 1252.519880][T25363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.519899][T25363] RIP: 0033:0x7f6f7a19c819 [ 1252.519914][T25363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1252.519937][T25363] RSP: 002b:00007f6f783f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1252.519956][T25363] RAX: ffffffffffffffda RBX: 00007f6f7a415fa0 RCX: 00007f6f7a19c819 [ 1252.519967][T25363] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1252.519978][T25363] RBP: 00007f6f783f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1252.519988][T25363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1252.519998][T25363] R13: 00007f6f7a416038 R14: 00007f6f7a415fa0 R15: 00007ffec4a7dcd8 [ 1252.520023][T25363] [ 1252.783826][ T5897] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1252.810496][T25318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1252.820200][T25318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1253.134042][T25388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3300'. [ 1253.143026][T25388] openvswitch: netlink: Unknown nsh attribute 0 [ 1253.591696][T25387] netlink: 332 bytes leftover after parsing attributes in process `syz.6.3298'. [ 1253.664821][ T5898] usb 1-1: new full-speed USB device number 120 using dummy_hcd [ 1253.886272][ T7081] zl10353_read_register: readreg error (reg=127, ret==0) [ 1253.927206][T25387] netlink: 'syz.6.3298': attribute type 9 has an invalid length. [ 1254.195588][T25400] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3303'. [ 1254.209795][T25387] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3298'. [ 1254.246597][ T5898] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 1254.269416][ T5898] usb 1-1: config 0 has no interface number 0 [ 1254.292945][ T5898] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 1254.336595][ T5898] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1254.346424][T10851] Bluetooth: hci1: command 0x0406 tx timeout [ 1254.366273][ T5898] usb 1-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1254.375654][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.383769][ T5898] usb 1-1: Product: syz [ 1254.392646][ T5898] usb 1-1: Manufacturer: syz [ 1254.403764][ T5898] usb 1-1: SerialNumber: syz [ 1254.415823][ T5898] usb 1-1: config 0 descriptor?? [ 1254.424139][T10851] Bluetooth: hci0: command 0x0c1a tx timeout [ 1254.424263][ T5898] cypress_m8 1-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 1254.628451][T25376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3301'. [ 1254.733413][ T7081] usb 6-1: USB disconnect, device number 31 [ 1254.763786][ T5931] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1254.948785][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1254.984409][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1254.994430][ T5931] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1255.008308][ T5931] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1255.017903][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.032589][ T5931] usb 3-1: config 0 descriptor?? [ 1255.039058][ T5897] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1255.049166][ T5897] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1255.066825][ T5897] usb 7-1: can't read configurations, error -71 [ 1255.096765][ T5898] usb 1-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 1255.131004][ T5898] usb 1-1: USB disconnect, device number 120 [ 1255.162266][ T5898] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 1255.204611][ T5898] cypress_m8 1-1:0.35: device disconnected [ 1255.211306][ T30] audit: type=1400 audit(1776875983.950:1542): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=36846 daddr=10.128.1.55 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1255.544166][T10851] Bluetooth: hci5: command 0x0406 tx timeout [ 1255.589123][ T5931] plantronics 0003:047F:FFFF.001A: reserved main item tag 0xd [ 1255.773222][ T5931] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1256.141528][T25474] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3308'. [ 1256.257696][ T5931] usb 3-1: USB disconnect, device number 91 [ 1256.503711][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 1256.520661][T25474] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3308'. [ 1257.483840][T25501] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3312'. [ 1257.827165][T25501] nbd: socks must be embedded in a SOCK_ITEM attr [ 1258.590486][ T30] audit: type=1400 audit(1776875986.890:1543): avc: denied { associate } for pid=25505 comm="syz.0.3310" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1258.726667][T15681] udevd[15681]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1259.118112][T15681] udevd[15681]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1259.902812][T25545] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3314'. [ 1259.911787][T25545] openvswitch: netlink: Unknown nsh attribute 0 [ 1260.443725][ T9363] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 1260.599017][ T30] audit: type=1400 audit(1776875989.340:1544): avc: denied { create } for pid=25551 comm="syz.0.3316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1260.625993][ T9363] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 1260.637327][ T30] audit: type=1400 audit(1776875989.380:1545): avc: denied { connect } for pid=25551 comm="syz.0.3316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1260.657332][ T9363] usb 3-1: config 0 has no interface number 0 [ 1260.663778][ T9363] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 1260.687252][ T9363] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1260.697362][ T30] audit: type=1400 audit(1776875989.380:1546): avc: denied { setopt } for pid=25551 comm="syz.0.3316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1260.719289][ T9363] usb 3-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1260.737377][ T9363] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.796454][ T9363] usb 3-1: Product: syz [ 1260.855049][ T9363] usb 3-1: Manufacturer: syz [ 1260.908912][ T9363] usb 3-1: SerialNumber: syz [ 1261.050355][ T9363] usb 3-1: config 0 descriptor?? [ 1261.307718][ T9363] usb 3-1: can't set config #0, error -71 [ 1261.581230][ T9363] usb 3-1: USB disconnect, device number 92 [ 1261.613799][ T30] audit: type=1400 audit(1776875990.310:1547): avc: denied { create } for pid=25568 comm="syz.7.3318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1262.444384][T25587] netlink: 'syz.7.3322': attribute type 1 has an invalid length. [ 1262.470913][T25587] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1262.673961][ T5897] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1262.828726][T25587] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1262.859775][T25587] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1262.875356][ T5897] usb 7-1: Using ep0 maxpacket: 32 [ 1262.887666][T25587] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1262.913733][ T5897] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 1263.043113][ T5897] usb 7-1: config 0 has no interface number 0 [ 1263.056833][ T5897] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1263.073694][ T5897] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.096890][ T5897] usb 7-1: Product: syz [ 1263.105273][ T5897] usb 7-1: Manufacturer: syz [ 1263.120499][ T5897] usb 7-1: SerialNumber: syz [ 1263.129283][ T5897] usb 7-1: config 0 descriptor?? [ 1263.137897][ T5897] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1263.152221][T25658] syzkaller0: entered promiscuous mode [ 1263.158389][T25658] syzkaller0: entered allmulticast mode [ 1263.183713][ T7081] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 1263.344571][ T5931] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1263.357534][ T7081] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 1263.373325][ T7081] usb 3-1: config 0 has no interface number 0 [ 1263.396719][ T7081] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 1263.494878][ T5897] usb 7-1: qt2_attach - failed to power on unit: -71 [ 1263.495788][ T7081] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1263.511655][ T5897] quatech2 7-1:0.51: probe with driver quatech2 failed with error -71 [ 1263.557167][ T5897] usb 7-1: USB disconnect, device number 30 [ 1263.573513][ T30] audit: type=1400 audit(1776875992.310:1548): avc: denied { write } for pid=25657 comm="syz.7.3325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1263.576819][ T5931] usb 1-1: Using ep0 maxpacket: 32 [ 1263.722732][ T7081] usb 3-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1263.821294][ T7081] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.830941][ T7081] usb 3-1: Product: syz [ 1263.838390][ T7081] usb 3-1: Manufacturer: syz [ 1263.845829][ T5931] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1263.855172][ T5931] usb 1-1: config 0 has no interface number 0 [ 1263.887378][ T7081] usb 3-1: SerialNumber: syz [ 1263.897984][ T7081] usb 3-1: config 0 descriptor?? [ 1263.903040][ T5931] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1263.920561][ T7081] cypress_m8 3-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 1263.929036][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.943988][ T5931] usb 1-1: Product: syz [ 1263.949778][ T5931] usb 1-1: Manufacturer: syz [ 1263.954496][ T5931] usb 1-1: SerialNumber: syz [ 1264.068319][ T5931] usb 1-1: config 0 descriptor?? [ 1264.076778][ T5931] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1264.122327][T25631] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3321'. [ 1264.203795][T25696] FAULT_INJECTION: forcing a failure. [ 1264.203795][T25696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1264.313953][T25696] CPU: 1 UID: 0 PID: 25696 Comm: syz.5.3326 Tainted: G L syzkaller #0 PREEMPT(full) [ 1264.313987][T25696] Tainted: [L]=SOFTLOCKUP [ 1264.313994][T25696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1264.314004][T25696] Call Trace: [ 1264.314010][T25696] [ 1264.314017][T25696] dump_stack_lvl+0x100/0x190 [ 1264.314043][T25696] should_fail_ex.cold+0x5/0xa [ 1264.314069][T25696] _copy_to_user+0x32/0xd0 [ 1264.314100][T25696] snd_pcm_oss_read2+0x294/0x400 [ 1264.314127][T25696] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 1264.314148][T25696] ? snd_pcm_kernel_ioctl+0x14a/0x2e0 [ 1264.314175][T25696] ? snd_pcm_oss_prepare+0x11e/0x240 [ 1264.314200][T25696] snd_pcm_oss_read+0x5aa/0x730 [ 1264.314226][T25696] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 1264.314250][T25696] vfs_read+0x1e4/0xb30 [ 1264.314272][T25696] ? __pfx_vfs_read+0x10/0x10 [ 1264.314288][T25696] ? find_held_lock+0x2b/0x80 [ 1264.314305][T25696] ? __fget_files+0x215/0x3d0 [ 1264.314327][T25696] ? __fget_files+0x215/0x3d0 [ 1264.314352][T25696] ? __fget_files+0x21f/0x3d0 [ 1264.314382][T25696] ksys_read+0x12a/0x250 [ 1264.314401][T25696] ? __pfx_ksys_read+0x10/0x10 [ 1264.314421][T25696] ? rcu_is_watching+0x12/0xc0 [ 1264.314450][T25696] do_syscall_64+0x10b/0xf80 [ 1264.314475][T25696] ? clear_bhb_loop+0x40/0x90 [ 1264.314497][T25696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.314516][T25696] RIP: 0033:0x7fbba2d9c819 [ 1264.314532][T25696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1264.314548][T25696] RSP: 002b:00007fbba0fb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1264.314566][T25696] RAX: ffffffffffffffda RBX: 00007fbba3016180 RCX: 00007fbba2d9c819 [ 1264.314578][T25696] RDX: 0000000000002020 RSI: 00002000000063c0 RDI: 0000000000000005 [ 1264.314589][T25696] RBP: 00007fbba0fb4090 R08: 0000000000000000 R09: 0000000000000000 [ 1264.314600][T25696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1264.314610][T25696] R13: 00007fbba3016218 R14: 00007fbba3016180 R15: 00007ffc004305c8 [ 1264.314635][T25696] [ 1264.463363][T25699] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3327'. [ 1264.540876][T25699] openvswitch: netlink: Unknown nsh attribute 0 [ 1264.710278][ T5931] usb 1-1: qt2_attach - failed to power on unit: -71 [ 1264.848579][ T5931] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 1264.872854][ T5931] usb 1-1: USB disconnect, device number 121 [ 1264.968072][ T7081] usb 3-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 1265.012975][ T7081] usb 3-1: USB disconnect, device number 93 [ 1265.124663][ T7081] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 1265.143002][ T7081] cypress_m8 3-1:0.35: device disconnected [ 1265.243130][T25728] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3328'. [ 1265.256607][T25728] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3328'. [ 1267.093754][ T5898] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1267.283704][ T5898] usb 1-1: Using ep0 maxpacket: 32 [ 1267.319691][T25743] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3331'. [ 1267.328577][T25743] openvswitch: netlink: Flow actions attr not present in new flow. [ 1267.398302][T25746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3332'. [ 1267.634039][ T5897] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1267.845684][ T5897] usb 8-1: Using ep0 maxpacket: 32 [ 1267.892776][ T5897] usb 8-1: config 0 has an invalid descriptor of length 28, skipping remainder of the config [ 1268.036140][ T5897] usb 8-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1268.210563][ T5897] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1268.294207][ T5897] usb 8-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 1268.414937][ T5897] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.456168][T25746] nbd: socks must be embedded in a SOCK_ITEM attr [ 1268.471533][ T5898] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 1268.570278][ T5897] usb 8-1: config 0 descriptor?? [ 1268.709913][ T5897] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1268.977712][ T5898] usb 1-1: config 0 has no interface number 0 [ 1268.985016][ T5898] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1268.997466][ T5898] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1269.007683][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.015793][ T5898] usb 1-1: Product: syz [ 1269.020029][ T5898] usb 1-1: Manufacturer: syz [ 1269.024752][ T5898] usb 1-1: SerialNumber: syz [ 1269.037034][ T5898] usb 1-1: config 0 descriptor?? [ 1269.046683][T25735] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1269.261742][T25735] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1269.272721][T25780] lo speed is unknown, defaulting to 1000 [ 1269.299738][T18589] udevd[18589]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1269.481647][T25810] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3336'. [ 1269.494257][T25810] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3336'. [ 1270.138150][ T5898] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1270.164921][T23784] usb 8-1: USB disconnect, device number 17 [ 1270.193704][ T24] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 1270.213931][ T5898] asix 1-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 1270.228799][ T7081] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1270.239357][ T5898] asix 1-1:0.188: probe with driver asix failed with error -61 [ 1270.364934][ T24] usb 6-1: config index 0 descriptor too short (expected 100, got 36) [ 1270.373182][ T24] usb 6-1: config 2 has an invalid interface number: 174 but max is 0 [ 1270.381787][ T24] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1270.391931][ T24] usb 6-1: config 2 has no interface number 0 [ 1270.398047][ T24] usb 6-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 1270.405393][ T7081] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1270.409838][ T24] usb 6-1: config 2 interface 174 altsetting 0 endpoint 0x8E has invalid maxpacket 255, setting to 64 [ 1270.431590][ T24] usb 6-1: config 2 interface 174 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1270.451059][ T24] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 1270.492003][T25837] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3339'. [ 1270.500966][T25837] openvswitch: netlink: Unknown nsh attribute 0 [ 1270.843410][ T7081] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1270.854263][ T7081] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1270.867197][ T7081] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1270.872617][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.876256][ T7081] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.880570][ T7081] usb 3-1: config 0 descriptor?? [ 1270.897769][ T24] usb 6-1: Product: syz [ 1270.901998][ T24] usb 6-1: Manufacturer: syz [ 1270.912514][ T24] usb 6-1: SerialNumber: syz [ 1270.920958][T25780] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1271.241732][ T30] audit: type=1400 audit(1776875999.980:1549): avc: denied { getopt } for pid=25777 comm="syz.5.3335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1271.329932][ T7081] plantronics 0003:047F:FFFF.001B: reserved main item tag 0xd [ 1271.338441][T25849] futex_wake_op: syz.6.3340 tries to shift op by 144; fix this program [ 1271.362663][ T7081] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1271.390918][T25849] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25849 comm=syz.6.3340 [ 1271.446862][ T9363] usb 1-1: USB disconnect, device number 122 [ 1271.481673][T25852] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3341'. [ 1271.600387][ T24] usb 6-1: probing VID:PID(0424:012C) [ 1271.623265][ T24] usb 6-1: vub300 testing BULK IN EndPoint(0) 8E [ 1271.630372][ T24] usb 6-1: Could not find two sets of bulk-in/out endpoint pairs [ 1271.677167][ T24] vub300 6-1:2.174: probe with driver vub300 failed with error -22 [ 1271.702223][ T24] usb 6-1: USB disconnect, device number 32 [ 1271.798981][T23784] usb 3-1: USB disconnect, device number 94 [ 1271.916514][T25901] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3343'. [ 1271.929131][T25901] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3343'. [ 1272.003842][ T7081] usb 1-1: new full-speed USB device number 123 using dummy_hcd [ 1272.699039][ T7081] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 1272.743389][ T7081] usb 1-1: config 0 has no interface number 0 [ 1272.777170][ T7081] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 1272.843206][ T7081] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1272.908136][ T7081] usb 1-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1272.956048][ T7081] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.005965][ T7081] usb 1-1: Product: syz [ 1273.040660][ T7081] usb 1-1: Manufacturer: syz [ 1273.087264][ T7081] usb 1-1: SerialNumber: syz [ 1273.235888][ T7081] usb 1-1: config 0 descriptor?? [ 1273.286637][ T7081] cypress_m8 1-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 1273.495475][T25871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3342'. [ 1273.721638][T25917] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25917 comm=syz.5.3345 [ 1274.653815][ T24] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1275.084628][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 1275.569374][ T24] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1275.650475][ T24] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1275.712636][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1275.756602][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1275.788976][ T24] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1275.831711][ T24] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1275.860339][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.086509][ T7081] usb 1-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 1276.097852][ T7081] usb 1-1: USB disconnect, device number 123 [ 1276.118119][ T30] audit: type=1400 audit(1776876004.860:1550): avc: denied { read write } for pid=25926 comm="syz.6.3347" name="usbmon6" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1276.145569][ T30] audit: type=1400 audit(1776876004.860:1551): avc: denied { open } for pid=25926 comm="syz.6.3347" path="/dev/usbmon6" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1276.218253][ T7081] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 1276.320781][T25944] FAULT_INJECTION: forcing a failure. [ 1276.320781][T25944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1276.334075][T25944] CPU: 0 UID: 0 PID: 25944 Comm: syz.0.3348 Tainted: G L syzkaller #0 PREEMPT(full) [ 1276.334102][T25944] Tainted: [L]=SOFTLOCKUP [ 1276.334108][T25944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1276.334118][T25944] Call Trace: [ 1276.334129][T25944] [ 1276.334135][T25944] dump_stack_lvl+0x100/0x190 [ 1276.334155][T25944] should_fail_ex.cold+0x5/0xa [ 1276.334171][T25944] _copy_from_user+0x2e/0xd0 [ 1276.334190][T25944] io_uring_setup+0xc0/0x160 [ 1276.334214][T25944] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 1276.334238][T25944] ? __pfx_io_uring_setup+0x10/0x10 [ 1276.334259][T25944] ? rcu_is_watching+0x12/0xc0 [ 1276.334277][T25944] ? __rcu_read_unlock+0x27f/0x5e0 [ 1276.334302][T25944] __x64_sys_io_uring_setup+0xc2/0x170 [ 1276.334319][T25944] do_syscall_64+0x10b/0xf80 [ 1276.334334][T25944] ? clear_bhb_loop+0x40/0x90 [ 1276.334347][T25944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1276.334358][T25944] RIP: 0033:0x7f2023d9c819 [ 1276.334368][T25944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1276.334378][T25944] RSP: 002b:00007f2024c7efb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1276.334389][T25944] RAX: ffffffffffffffda RBX: 0000200000000080 RCX: 00007f2023d9c819 [ 1276.334396][T25944] RDX: 0000200000000180 RSI: 0000200000000080 RDI: 0000000000000f01 [ 1276.334403][T25944] RBP: 00007f2024c7f090 R08: 0000000000000000 R09: 0000000000000101 [ 1276.334409][T25944] R10: 00002000000001c0 R11: 0000000000000206 R12: 0000200000000180 [ 1276.334415][T25944] R13: 00002000000001c0 R14: 0000200000000100 R15: 00007ffd1b6c2138 [ 1276.334429][T25944] [ 1276.554739][ T7081] cypress_m8 1-1:0.35: device disconnected [ 1277.047258][T25974] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3351'. [ 1277.056327][T25974] openvswitch: netlink: Unknown nsh attribute 0 [ 1277.456401][T25972] usbtmc 8-1:16.0: simple usb_control_msg failed -32 [ 1277.472573][ T24] usb 8-1: USB disconnect, device number 18 [ 1280.515799][T26025] futex_wake_op: syz.0.3357 tries to shift op by 144; fix this program [ 1280.548528][T26026] futex_wake_op: syz.5.3358 tries to shift op by 144; fix this program [ 1280.570827][T26022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26022 comm=syz.0.3357 [ 1281.416509][T26033] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3360'. [ 1281.778525][T26033] nbd: socks must be embedded in a SOCK_ITEM attr [ 1282.892714][T15681] udevd[15681]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1282.951749][T18589] udevd[18589]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1284.049759][T26065] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3363'. [ 1284.058840][T26065] openvswitch: netlink: Unknown nsh attribute 0 [ 1284.578592][T23784] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1284.763696][T23784] usb 6-1: Using ep0 maxpacket: 8 [ 1284.784894][T23784] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1284.806469][T23784] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1284.818315][ T30] audit: type=1400 audit(1776876013.570:1552): avc: denied { getopt } for pid=26067 comm="syz.7.3365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1284.818384][T23784] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1284.862382][T23784] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1285.005392][T23784] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1285.035131][T23784] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1285.255168][ T30] audit: type=1400 audit(1776876013.840:1553): avc: denied { setopt } for pid=26067 comm="syz.7.3365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1285.296732][T23784] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.081944][T26087] usbtmc 6-1:16.0: simple usb_control_msg failed -32 [ 1286.090045][T23784] usb 6-1: USB disconnect, device number 33 [ 1286.505757][T26114] FAULT_INJECTION: forcing a failure. [ 1286.505757][T26114] name failslab, interval 1, probability 0, space 0, times 0 [ 1286.518590][T26114] CPU: 0 UID: 0 PID: 26114 Comm: syz.2.3370 Tainted: G L syzkaller #0 PREEMPT(full) [ 1286.518616][T26114] Tainted: [L]=SOFTLOCKUP [ 1286.518623][T26114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1286.518633][T26114] Call Trace: [ 1286.518640][T26114] [ 1286.518647][T26114] dump_stack_lvl+0x100/0x190 [ 1286.518674][T26114] should_fail_ex.cold+0x5/0xa [ 1286.518697][T26114] ? rcu_is_watching+0x12/0xc0 [ 1286.518726][T26114] should_failslab+0xc2/0x120 [ 1286.518746][T26114] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1286.518771][T26114] ? dst_alloc+0x99/0x1a0 [ 1286.518800][T26114] dst_alloc+0x99/0x1a0 [ 1286.518822][T26114] ? ip_route_output_key_hash_rcu+0x1f8e/0x2870 [ 1286.518858][T26114] rt_dst_alloc+0x35/0x3a0 [ 1286.518880][T26114] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 1286.518914][T26114] ip_route_output_key_hash+0x118/0x2b0 [ 1286.518941][T26114] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1286.518968][T26114] ? lockdep_hardirqs_on+0x78/0x100 [ 1286.518999][T26114] ? rcu_is_watching+0x12/0xc0 [ 1286.519029][T26114] ip_route_output_flow+0x27/0x150 [ 1286.519057][T26114] udp_sendmsg+0x198a/0x2720 [ 1286.519083][T26114] ? __pfx_udp_sendmsg+0x10/0x10 [ 1286.519103][T26114] ? trace_contention_end.constprop.0+0x141/0x1a0 [ 1286.519135][T26114] ? __lock_acquire+0x4a5/0x2630 [ 1286.519164][T26114] ? __lock_acquire+0x4a5/0x2630 [ 1286.519186][T26114] ? __lock_acquire+0x4a5/0x2630 [ 1286.519209][T26114] ? find_held_lock+0x2b/0x80 [ 1286.519232][T26114] ? lock_acquire+0x1b1/0x370 [ 1286.519253][T26114] ? find_held_lock+0x2b/0x80 [ 1286.519270][T26114] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 1286.519292][T26114] udpv6_sendmsg+0x1420/0x2c20 [ 1286.519317][T26114] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 1286.519335][T26114] ? lockdep_hardirqs_on+0x78/0x100 [ 1286.519366][T26114] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1286.519409][T26114] ? __pfx___schedule+0x10/0x10 [ 1286.519452][T26114] ? inet6_sendmsg+0x4e/0x140 [ 1286.519467][T26114] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1286.519496][T26114] ? inet6_sendmsg+0x105/0x140 [ 1286.519511][T26114] inet6_sendmsg+0x105/0x140 [ 1286.519530][T26114] ____sys_sendmsg+0x704/0xb70 [ 1286.519553][T26114] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1286.519579][T26114] ? __pfx__kstrtoull+0x10/0x10 [ 1286.519613][T26114] ___sys_sendmsg+0x190/0x1e0 [ 1286.519637][T26114] ? __pfx____sys_sendmsg+0x10/0x10 [ 1286.519659][T26114] ? trace_contention_end.constprop.0+0x141/0x1a0 [ 1286.519695][T26114] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 1286.519732][T26114] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 1286.519751][T26114] ? rcu_is_watching+0x12/0xc0 [ 1286.519781][T26114] __sys_sendmmsg+0x205/0x430 [ 1286.519811][T26114] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1286.519867][T26114] ? exit_to_user_mode_loop+0xdd/0x4a0 [ 1286.519891][T26114] ? rcu_is_watching+0x12/0xc0 [ 1286.519916][T26114] ? exit_to_user_mode_loop+0xdd/0x4a0 [ 1286.519942][T26114] __x64_sys_sendmmsg+0x9c/0x100 [ 1286.519969][T26114] ? lockdep_hardirqs_on+0x78/0x100 [ 1286.519993][T26114] do_syscall_64+0x10b/0xf80 [ 1286.520017][T26114] ? clear_bhb_loop+0x40/0x90 [ 1286.520040][T26114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.520059][T26114] RIP: 0033:0x7f6f7a19c819 [ 1286.520074][T26114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1286.520092][T26114] RSP: 002b:00007f6f783b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1286.520110][T26114] RAX: ffffffffffffffda RBX: 00007f6f7a416180 RCX: 00007f6f7a19c819 [ 1286.520122][T26114] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000003 [ 1286.520133][T26114] RBP: 00007f6f783b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1286.520144][T26114] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 1286.520155][T26114] R13: 00007f6f7a416218 R14: 00007f6f7a416180 R15: 00007ffec4a7dcd8 [ 1286.520180][T26114] [ 1287.083734][T23784] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1287.233780][T23784] usb 7-1: Using ep0 maxpacket: 32 [ 1287.243741][T23784] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1287.252821][T23784] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1287.264296][T23784] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1287.280710][T23784] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 1287.289788][T23784] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.301163][T23784] usb 7-1: Product: syz [ 1287.305445][T23784] usb 7-1: Manufacturer: syz [ 1287.310053][T23784] usb 7-1: SerialNumber: syz [ 1287.525504][ T9363] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 1287.663728][ T9363] usb 3-1: device descriptor read/64, error -71 [ 1287.821340][T26155] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1287.838640][T26155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1287.848159][T26155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1287.983731][ T9363] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 1288.353807][ T9363] usb 3-1: device descriptor read/64, error -71 [ 1288.367546][ T30] audit: type=1400 audit(1776876017.110:1554): avc: denied { connect } for pid=26163 comm="syz.5.3382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1288.407741][T26168] dvmrp0: entered allmulticast mode [ 1288.479730][ T9363] usb usb3-port1: attempt power cycle [ 1288.539902][T26177] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1288.561755][ T30] audit: type=1400 audit(1776876017.300:1555): avc: denied { set_context_mgr } for pid=26174 comm="syz.5.3384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1288.601406][T26176] binder: BINDER_SET_CONTEXT_MGR already set [ 1288.622367][ T30] audit: type=1400 audit(1776876017.340:1556): avc: denied { map } for pid=26174 comm="syz.5.3384" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1288.646635][T26176] binder: 26174:26176 ioctl 4018620d 200000004a80 returned -16 [ 1288.885285][ T9363] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 1288.924231][ T9363] usb 3-1: device descriptor read/8, error -71 [ 1289.193773][ T9363] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 1289.224476][ T9363] usb 3-1: device descriptor read/8, error -71 [ 1289.345633][ T9363] usb usb3-port1: unable to enumerate USB device [ 1289.384709][T23784] usb 7-1: 3:0: cannot get min/max values for control 2 (id 3) [ 1289.393426][T23784] usb 7-1: applying playback min mute quirk [ 1289.399396][T23784] usb 7-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1289.412542][T23784] usb 7-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1 [ 1289.421082][T23784] usb 7-1: 3:0: cannot get min/max values for control 5 (id 3) [ 1289.432400][T23784] usb 7-1: 3:0: cannot get min/max values for control 8 (id 3) [ 1289.444344][T23784] usb 7-1: 3:0: failed to get current value for ch 0 (-71) [ 1289.451949][T26209] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3392'. [ 1289.475386][T23784] usb 7-1: 3:0: cannot get min/max values for control 5 (id 3) [ 1289.503136][T26222] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3392'. [ 1289.529919][T23784] usb 7-1: USB disconnect, device number 31 [ 1289.607694][T18589] udevd[18589]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1289.823818][ T9363] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1289.993712][ T9363] usb 6-1: Using ep0 maxpacket: 8 [ 1290.000853][ T9363] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1290.014507][ T9363] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1290.024902][ T9363] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1290.031561][ T9363] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1290.042704][ T9363] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.056563][ T9363] usb 6-1: config 0 descriptor?? [ 1290.291215][ T30] audit: type=1400 audit(1776876019.030:1557): avc: denied { write } for pid=26278 comm="syz.6.3401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1290.301408][T26280] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1290.328420][T26280] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1290.348693][T26280] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1290.359999][T26282] syz_tun: entered allmulticast mode [ 1290.370402][T26282] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 1290.380028][T26282] mroute: pending queue full, dropping entries [ 1290.400917][T26282] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 1290.409468][T26282] mroute: pending queue full, dropping entries [ 1290.422030][T26280] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1290.437027][T26282] syz_tun: left allmulticast mode [ 1290.495056][ T9363] mcp2221 0003:04D8:00DD.001C: unknown main item tag 0x0 [ 1290.516224][ T9363] mcp2221 0003:04D8:00DD.001C: unknown main item tag 0x0 [ 1290.529841][T26283] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1290.531269][ T9363] mcp2221 0003:04D8:00DD.001C: unknown main item tag 0x0 [ 1290.551100][T26283] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1290.590616][ T9363] mcp2221 0003:04D8:00DD.001C: unknown main item tag 0x0 [ 1290.619714][T26283] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1290.622304][ T9363] mcp2221 0003:04D8:00DD.001C: unknown main item tag 0x0 [ 1290.652103][ T30] audit: type=1800 audit(1776876019.390:1558): pid=26263 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3396" name="/" dev="fuse" ino=2 res=0 errno=0 [ 1290.670252][ T9363] mcp2221 0003:04D8:00DD.001C: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 1290.738688][T26283] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1290.859750][ T9363] usb 6-1: USB disconnect, device number 34 [ 1291.085767][ T30] audit: type=1400 audit(1776876019.830:1559): avc: denied { create } for pid=26328 comm="syz.0.3406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 1291.360630][ T30] audit: type=1400 audit(1776876020.100:1560): avc: denied { create } for pid=26341 comm="syz.5.3408" name="#39" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1291.389930][ T30] audit: type=1400 audit(1776876020.130:1561): avc: denied { link } for pid=26341 comm="syz.5.3408" name="#39" dev="tmpfs" ino=1413 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1291.421901][T26345] can0: slcan on pty24. [ 1291.491972][ T30] audit: type=1400 audit(1776876020.130:1562): avc: denied { rename } for pid=26341 comm="syz.5.3408" name="#3a" dev="tmpfs" ino=1413 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1291.584430][T26343] can0 (unregistered): slcan off pty24. [ 1292.008554][T26386] vlan2: entered allmulticast mode [ 1292.028508][T26386] vlan1: entered allmulticast mode [ 1292.033849][T26386] veth0_vlan: entered allmulticast mode [ 1292.041201][T26386] bridge0: port 3(vlan2) entered blocking state [ 1292.045692][T26392] netlink: 'syz.2.3418': attribute type 16 has an invalid length. [ 1292.047791][T26386] bridge0: port 3(vlan2) entered disabled state [ 1292.062532][T26392] netlink: 'syz.2.3418': attribute type 17 has an invalid length. [ 1292.068716][T26386] vlan2: entered promiscuous mode [ 1292.079248][T26386] vlan1: entered promiscuous mode [ 1292.086657][T26386] bridge0: port 3(vlan2) entered blocking state [ 1292.094077][T26386] bridge0: port 3(vlan2) entered forwarding state [ 1292.106801][T26395] bridge0: port 4(syz_tun) entered blocking state [ 1292.115418][T26395] bridge0: port 4(syz_tun) entered disabled state [ 1292.127019][T26395] syz_tun: entered allmulticast mode [ 1292.176075][T26395] syz_tun: entered promiscuous mode [ 1292.204377][T26395] bridge0: port 4(syz_tun) entered blocking state [ 1292.212582][T26395] bridge0: port 4(syz_tun) entered forwarding state [ 1292.371819][ T30] audit: type=1400 audit(1776876021.110:1563): avc: denied { read write } for pid=26411 comm="syz.6.3420" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1292.435564][T26392] bridge0: port 2(bridge_slave_1) entered disabled state [ 1292.443083][T26392] bridge0: port 1(bridge_slave_0) entered disabled state [ 1292.464285][T26413] input: syz1 as /devices/virtual/input/input28 [ 1292.473144][ T30] audit: type=1400 audit(1776876021.110:1564): avc: denied { open } for pid=26411 comm="syz.6.3420" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1292.516995][ T30] audit: type=1400 audit(1776876021.160:1565): avc: denied { ioctl } for pid=26411 comm="syz.6.3420" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1292.677034][ T5838] Bluetooth: hci1: unexpected event for opcode 0x0c7a [ 1292.900626][ T30] audit: type=1400 audit(1776876021.640:1566): avc: denied { cmd } for pid=26439 comm="syz.6.3424" path="socket:[76849]" dev="sockfs" ino=76849 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1293.169180][T26392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1293.375450][T26392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1293.834944][ T57] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.865865][ T57] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.879321][ T57] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.907571][ T57] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.965183][T26487] lo speed is unknown, defaulting to 1000 [ 1294.586600][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1294.800248][ T5838] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 1295.138145][ T5931] IPVS: starting estimator thread 0... [ 1295.237837][T26582] IPVS: using max 46 ests per chain, 110400 per kthread [ 1295.482124][T26553] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1295.496276][T26559] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1295.522316][T26559] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1295.545242][T26559] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1295.581051][T26559] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1295.598124][T26559] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1296.510104][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1296.510121][ T30] audit: type=1400 audit(1776876025.250:1572): avc: denied { connect } for pid=26643 comm="syz.6.3462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1296.660161][T26655] netlink: 'syz.2.3465': attribute type 10 has an invalid length. [ 1296.673151][T26655] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1296.833519][ T30] audit: type=1400 audit(1776876025.570:1573): avc: denied { read } for pid=26664 comm="syz.2.3469" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1296.833695][ T5838] Bluetooth: hci5: command 0x0406 tx timeout [ 1296.869431][ T30] audit: type=1400 audit(1776876025.610:1574): avc: denied { open } for pid=26664 comm="syz.2.3469" path="/78/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1296.940816][ T30] audit: type=1400 audit(1776876025.610:1575): avc: denied { ioctl } for pid=26664 comm="syz.2.3469" path="/78/file0/file0" dev="fuse" ino=64 ioctlcmd=0x912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1296.978040][T26676] kvm: user requested TSC rate below hardware speed [ 1296.988031][ T30] audit: type=1400 audit(1776876025.660:1576): avc: denied { setopt } for pid=26673 comm="syz.2.3471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1297.280770][T26695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3475'. [ 1297.289765][T26695] openvswitch: netlink: Unknown nsh attribute 0 [ 1297.686706][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 1297.687599][T10851] Bluetooth: hci1: command 0x0406 tx timeout [ 1297.833703][ T9455] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1298.013853][ T9455] usb 1-1: Using ep0 maxpacket: 32 [ 1298.026695][ T9455] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1298.041855][ T9455] usb 1-1: config 0 has no interface number 0 [ 1298.073105][ T9455] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1298.098667][ T9455] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.122159][ T9455] usb 1-1: Product: syz [ 1298.137125][ T9455] usb 1-1: Manufacturer: syz [ 1298.146816][ T9455] usb 1-1: SerialNumber: syz [ 1298.168087][ T9455] usb 1-1: config 0 descriptor?? [ 1298.189938][ T9455] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1298.463774][ T9455] usb 1-1: qt2_attach - failed to power on unit: -71 [ 1298.502037][ T9455] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 1298.692581][ T9455] usb 1-1: USB disconnect, device number 124 [ 1299.976189][T10851] Bluetooth: hci4: command 0x0406 tx timeout [ 1301.185041][ T5931] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 1301.340351][ T30] audit: type=1400 audit(1776876030.080:1577): avc: denied { setopt } for pid=26782 comm="syz.6.3494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1301.381008][T26786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3491'. [ 1301.389992][T26786] openvswitch: netlink: Unknown nsh attribute 0 [ 1301.705550][ T5931] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 1301.713789][ T5931] usb 6-1: config 0 has no interface number 0 [ 1301.719882][ T5931] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 1301.755542][ T5931] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1301.787144][ T5931] usb 6-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1301.801273][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.839428][ T5931] usb 6-1: Product: syz [ 1301.853189][ T5931] usb 6-1: Manufacturer: syz [ 1301.867778][ T5931] usb 6-1: SerialNumber: syz [ 1301.942564][ T5931] usb 6-1: config 0 descriptor?? [ 1302.024210][ T5931] cypress_m8 6-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 1302.322369][T26750] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3485'. [ 1302.924503][ T5931] usb 6-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 1302.943455][ T5931] usb 6-1: USB disconnect, device number 35 [ 1302.970999][ T5931] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 1303.011149][ T5931] cypress_m8 6-1:0.35: device disconnected [ 1303.043911][ T9455] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1303.214127][ T9455] usb 3-1: Using ep0 maxpacket: 32 [ 1303.226309][ T9455] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1303.237877][ T9455] usb 3-1: config 0 has no interface number 0 [ 1303.250276][ T9455] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1303.265227][ T9455] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.289801][ T9455] usb 3-1: Product: syz [ 1303.298809][ T9455] usb 3-1: Manufacturer: syz [ 1303.304298][ T9455] usb 3-1: SerialNumber: syz [ 1303.314363][ T9455] usb 3-1: config 0 descriptor?? [ 1303.330511][ T9455] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1303.593129][ T9455] usb 3-1: qt2_attach - failed to power on unit: -71 [ 1303.808245][ T9455] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71 [ 1303.829599][ T9455] usb 3-1: USB disconnect, device number 99 [ 1304.093450][T10851] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 1305.136926][T26861] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1305.165637][T26864] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1305.216092][T26892] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3507'. [ 1305.225124][T26892] openvswitch: netlink: Unknown nsh attribute 0 [ 1305.649327][T26864] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1305.657836][T26871] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1305.673156][T26864] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1306.128874][T10851] Bluetooth: hci5: command 0x0406 tx timeout [ 1306.329750][T26908] netlink: 'syz.5.3513': attribute type 1 has an invalid length. [ 1306.653572][T26949] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3513'. [ 1306.825489][T26908] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1307.733867][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 1307.740019][T10851] Bluetooth: hci1: command 0x0406 tx timeout [ 1308.284817][T26911] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1308.308653][T26911] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1308.309400][T26911] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1308.843700][ T5931] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1309.933671][ T5931] usb 1-1: Using ep0 maxpacket: 32 [ 1309.986423][ T5931] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1309.996003][ T5931] usb 1-1: config 0 has no interface number 0 [ 1310.017795][ T5931] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1310.059170][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.080937][ T5931] usb 1-1: Product: syz [ 1310.095758][ T5931] usb 1-1: Manufacturer: syz [ 1310.115640][ T5931] usb 1-1: SerialNumber: syz [ 1310.123047][ T5931] usb 1-1: config 0 descriptor?? [ 1310.148986][ T5931] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1310.632235][ T5931] usb 1-1: qt2_attach - failed to power on unit: -71 [ 1310.648863][ T5931] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 1310.670447][ T5931] usb 1-1: USB disconnect, device number 125 [ 1311.078399][ T9455] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1311.305162][ T9455] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1311.316318][ T9455] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1311.326559][ T9455] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1311.340573][ T9455] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1311.350305][ T9455] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.387499][ T9455] usb 8-1: config 0 descriptor?? [ 1312.353242][ T9455] plantronics 0003:047F:FFFF.001D: reserved main item tag 0xd [ 1313.823027][ T9455] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1313.978158][T27078] futex_wake_op: syz.2.3531 tries to shift op by 144; fix this program [ 1313.994782][ T9455] usb 8-1: USB disconnect, device number 19 [ 1314.243989][ T5931] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1314.351290][T27091] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27091 comm=syz.2.3531 [ 1314.424280][ T5931] usb 6-1: Using ep0 maxpacket: 32 [ 1314.432301][ T5931] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1314.450182][ T5931] usb 6-1: config 0 has no interface number 0 [ 1314.475400][ T5931] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1314.499833][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.525643][ T5931] usb 6-1: Product: syz [ 1314.542633][ T5931] usb 6-1: Manufacturer: syz [ 1314.554931][ T5931] usb 6-1: SerialNumber: syz [ 1314.572941][ T5931] usb 6-1: config 0 descriptor?? [ 1314.588422][ T5931] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1314.844180][ T5931] usb 6-1: qt2_attach - failed to power on unit: -71 [ 1314.944535][ T5931] quatech2 6-1:0.51: probe with driver quatech2 failed with error -71 [ 1315.082220][ T9455] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1315.122275][ T5931] usb 6-1: USB disconnect, device number 36 [ 1315.264486][ T9455] usb 7-1: Using ep0 maxpacket: 32 [ 1315.279087][ T9455] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 1315.302776][ T9455] usb 7-1: config 0 has no interface number 0 [ 1315.325636][ T9455] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1315.355676][ T9455] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.382281][ T9455] usb 7-1: Product: syz [ 1315.397492][ T9455] usb 7-1: Manufacturer: syz [ 1315.482771][ T9455] usb 7-1: SerialNumber: syz [ 1315.526305][ T9455] usb 7-1: config 0 descriptor?? [ 1315.597285][ T9455] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1315.959232][ T9455] usb 7-1: qt2_attach - failed to power on unit: -71 [ 1316.186579][ T9455] quatech2 7-1:0.51: probe with driver quatech2 failed with error -71 [ 1316.379218][ T9455] usb 7-1: USB disconnect, device number 32 [ 1316.513663][T27152] netlink: 'syz.5.3540': attribute type 1 has an invalid length. [ 1316.687398][T27176] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3540'. [ 1316.703888][T27176] 9p: Bad value for 'wfdno' [ 1316.743137][T27152] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1316.902014][T27155] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1316.916435][T27155] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1316.930939][T27155] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1318.096877][T27215] futex_wake_op: syz.6.3544 tries to shift op by 144; fix this program [ 1318.263749][ T24] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1318.559036][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1318.649489][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1318.676669][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1318.709694][ T24] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1318.730503][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.832963][T27225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3550'. [ 1318.847683][ T24] usb 8-1: config 0 descriptor?? [ 1319.200960][T27243] futex_wake_op: syz.5.3553 tries to shift op by 144; fix this program [ 1319.221691][T27243] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27243 comm=syz.5.3553 [ 1319.490803][ T24] plantronics 0003:047F:FFFF.001E: reserved main item tag 0xd [ 1319.557816][T27225] nbd: socks must be embedded in a SOCK_ITEM attr [ 1320.390276][ T24] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1320.809378][ T24] usb 8-1: USB disconnect, device number 20 [ 1321.397604][T27279] fido_id[27279]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 1321.472739][T18589] udevd[18589]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1321.494296][T18589] udevd[18589]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1321.583887][ T9455] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1321.756739][ T9455] usb 6-1: Using ep0 maxpacket: 32 [ 1321.783479][ T9455] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1321.807875][ T9455] usb 6-1: config 0 has no interface number 0 [ 1321.841057][ T9455] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1321.872832][ T9455] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.912603][ T9455] usb 6-1: Product: syz [ 1321.928233][ T9455] usb 6-1: Manufacturer: syz [ 1321.949326][ T9455] usb 6-1: SerialNumber: syz [ 1322.026915][ T9455] usb 6-1: config 0 descriptor?? [ 1322.178230][ T9455] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1322.489935][ T9455] usb 6-1: qt2_attach - failed to power on unit: -71 [ 1322.683316][ T9455] quatech2 6-1:0.51: probe with driver quatech2 failed with error -71 [ 1323.048194][ T9455] usb 6-1: USB disconnect, device number 37 [ 1323.572345][T27313] futex_wake_op: syz.0.3557 tries to shift op by 144; fix this program [ 1323.908598][T27322] C: renamed from lo (while UP) [ 1324.527879][T27322] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1324.869022][T27343] futex_wake_op: syz.5.3564 tries to shift op by 144; fix this program [ 1324.922498][T27343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27343 comm=syz.5.3564 [ 1325.448157][T27371] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3569'. [ 1325.457194][T27371] openvswitch: netlink: Unknown nsh attribute 0 [ 1325.842960][ T9363] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1326.033723][ T9363] usb 6-1: Using ep0 maxpacket: 32 [ 1326.057109][ T9363] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1326.058384][ T5898] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1326.092863][ T9363] usb 6-1: config 0 has no interface number 0 [ 1326.127621][ T9363] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1326.246282][ T5898] usb 1-1: device descriptor read/64, error -71 [ 1326.246933][ T9363] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.281164][ T9363] usb 6-1: Product: syz [ 1326.286692][ T9363] usb 6-1: Manufacturer: syz [ 1326.291999][ T9363] usb 6-1: SerialNumber: syz [ 1326.312031][ T9363] usb 6-1: config 0 descriptor?? [ 1326.404494][ T9363] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1327.004129][ T5898] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1327.015099][ T9363] usb 6-1: qt2_attach - failed to power on unit: -71 [ 1327.085926][ T9363] quatech2 6-1:0.51: probe with driver quatech2 failed with error -71 [ 1327.313137][ T9363] usb 6-1: USB disconnect, device number 38 [ 1327.443946][ T5898] usb 1-1: device descriptor read/64, error -71 [ 1327.633801][ T7081] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1327.762993][T27420] overlayfs: failed to resolve './file1': -2 [ 1327.902456][ T5898] usb usb1-port1: attempt power cycle [ 1328.427451][T27431] netlink: 'syz.6.3581': attribute type 1 has an invalid length. [ 1328.589158][ T7081] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1328.699667][T27453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3583'. [ 1328.708727][T27453] openvswitch: netlink: Unknown nsh attribute 0 [ 1329.125831][ T7081] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1329.135649][ T7081] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1329.148757][ T7081] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1329.157934][ T7081] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.169714][ T7081] usb 8-1: config 0 descriptor?? [ 1329.219397][T27431] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1329.401685][T27474] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.3581'. [ 1329.417707][T27474] 9p: Bad value for 'wfdno' [ 1329.612832][T27446] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1329.631481][T27446] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1329.689680][T27446] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 1329.768091][ T7081] plantronics 0003:047F:FFFF.001F: reserved main item tag 0xd [ 1329.789934][ T7081] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1330.165046][ T7081] usb 8-1: USB disconnect, device number 21 [ 1330.410331][T27522] kAFS: No cell specified [ 1330.998499][T27522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3589'. [ 1331.093853][ T9363] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 1331.158488][ T7081] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1331.158488][ T9455] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1331.436050][T27559] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3595'. [ 1331.445037][T27559] openvswitch: netlink: Unknown nsh attribute 0 [ 1331.791029][ T9455] usb 7-1: device descriptor read/64, error -71 [ 1331.859235][ T7081] usb 3-1: Using ep0 maxpacket: 32 [ 1332.060007][ T9455] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1332.213776][ T9455] usb 7-1: device descriptor read/64, error -71 [ 1332.325012][ T9455] usb usb7-port1: attempt power cycle [ 1332.371155][ T7081] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1332.413818][ T7081] usb 3-1: config 0 has no interface number 0 [ 1332.422912][ T7081] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1332.435267][ T7081] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.443673][ T7081] usb 3-1: Product: syz [ 1332.448759][ T7081] usb 3-1: Manufacturer: syz [ 1332.453341][ T7081] usb 3-1: SerialNumber: syz [ 1332.465136][ T7081] usb 3-1: config 0 descriptor?? [ 1332.503087][ T7081] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1332.585379][T27568] futex_wake_op: syz.7.3596 tries to shift op by 144; fix this program [ 1332.880137][ T7081] usb 3-1: qt2_attach - failed to power on unit: -71 [ 1332.933768][ T9455] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1332.999483][ T7081] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71 [ 1333.014198][ T9455] usb 7-1: device descriptor read/8, error -71 [ 1333.031522][ T7081] usb 3-1: USB disconnect, device number 100 [ 1333.453778][ T9455] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1333.484174][ T9455] usb 7-1: device descriptor read/8, error -71 [ 1333.826055][ T9455] usb usb7-port1: unable to enumerate USB device [ 1334.630859][T27616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3606'. [ 1335.022130][T27624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3607'. [ 1335.031108][T27624] openvswitch: netlink: Unknown nsh attribute 0 [ 1335.556763][T27616] nbd: socks must be embedded in a SOCK_ITEM attr [ 1335.669592][T27641] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3610'. [ 1335.693756][ T5931] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1335.757913][T27641] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3610'. [ 1335.905286][ T5931] usb 8-1: device descriptor read/64, error -71 [ 1336.621368][ T5931] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1336.859613][ T5931] usb 8-1: device descriptor read/64, error -71 [ 1336.995805][ T5931] usb usb8-port1: attempt power cycle [ 1337.008761][T18589] udevd[18589]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1337.403979][ T9455] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1337.443786][ T5931] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1337.453687][ T24] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1337.472214][ T5931] usb 8-1: device descriptor read/8, error -71 [ 1337.548697][ T9455] usb 1-1: device descriptor read/64, error -71 [ 1337.576468][T27679] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3616'. [ 1337.619710][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1337.645643][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1337.662302][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1337.681239][ T24] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1337.691386][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.740069][T27679] nbd: socks must be embedded in a SOCK_ITEM attr [ 1337.769011][ T24] usb 7-1: config 0 descriptor?? [ 1337.804179][ T9455] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1337.994304][ T9455] usb 1-1: device descriptor read/64, error -71 [ 1338.003702][ T5931] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1338.199154][ T9455] usb usb1-port1: attempt power cycle [ 1338.471219][ T24] plantronics 0003:047F:FFFF.0020: reserved main item tag 0xd [ 1338.634884][ T9455] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1338.780064][ T9455] usb 1-1: device descriptor read/8, error -71 [ 1339.124729][ T9455] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1339.161202][ T24] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1339.319814][ T9455] usb 1-1: device descriptor read/8, error -71 [ 1339.526267][ T9455] usb usb1-port1: unable to enumerate USB device [ 1339.572495][ T24] usb 7-1: USB disconnect, device number 37 [ 1339.662853][T15681] udevd[15681]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1339.784789][T27725] futex_wake_op: syz.7.3618 tries to shift op by 144; fix this program [ 1339.833281][T27725] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27725 comm=syz.7.3618 [ 1339.876022][ T5931] usb 8-1: device not accepting address 25, error -71 [ 1340.006175][T27726] futex_wake_op: syz.6.3619 tries to shift op by 144; fix this program [ 1340.022924][ T5931] usb usb8-port1: unable to enumerate USB device [ 1340.030670][T18589] udevd[18589]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1340.332852][T27738] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3621'. [ 1340.342045][T27738] openvswitch: netlink: Unknown nsh attribute 0 [ 1341.794064][ T5931] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1341.973826][ T5931] usb 3-1: Using ep0 maxpacket: 8 [ 1341.990437][ T5931] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1342.001062][ T5931] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1342.012062][ T5931] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1342.023390][ T5931] usb 3-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1342.118464][ T5931] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1342.133180][ T5931] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1342.142841][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.581395][ T5931] usbtmc 3-1:16.0: bulk endpoints not found [ 1342.911364][ T9455] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1342.963692][ T9363] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1343.055412][ T9455] usb 6-1: device descriptor read/64, error -71 [ 1343.165040][ T9363] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1343.176013][ T9363] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1343.185966][ T9363] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1343.198876][ T9363] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1343.208007][ T9363] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.245356][ T9363] usb 1-1: config 0 descriptor?? [ 1343.268950][T27810] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3636'. [ 1343.277896][T27810] openvswitch: netlink: Unknown nsh attribute 0 [ 1343.297501][ T9455] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1343.703708][ T9455] usb 6-1: device descriptor read/64, error -71 [ 1343.816654][ T9455] usb usb6-port1: attempt power cycle [ 1344.055131][ T9363] plantronics 0003:047F:FFFF.0021: reserved main item tag 0xd [ 1344.085057][ T9363] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1344.153702][ T9455] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1344.195679][ T9455] usb 6-1: device descriptor read/8, error -71 [ 1344.328766][ T9363] usb 1-1: USB disconnect, device number 8 [ 1344.463780][ T9455] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1344.484409][ T9455] usb 6-1: device descriptor read/8, error -71 [ 1344.506317][ T24] usb 3-1: USB disconnect, device number 101 [ 1344.603992][ T9455] usb usb6-port1: unable to enumerate USB device [ 1345.386588][T27878] futex_wake_op: syz.0.3641 tries to shift op by 144; fix this program [ 1346.260105][T27909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3648'. [ 1346.269254][T27909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3648'. [ 1348.134036][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1348.587144][T27940] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1348.660860][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1348.759747][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1348.811014][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1348.915599][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1349.006761][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.972898][ T24] usb 1-1: config 0 descriptor?? [ 1350.330872][T27966] futex_wake_op: syz.5.3658 tries to shift op by 144; fix this program [ 1350.429269][ T24] plantronics 0003:047F:FFFF.0022: reserved main item tag 0xd [ 1350.447951][ T24] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1350.687167][ T5898] usb 1-1: USB disconnect, device number 9 [ 1350.978963][ T30] audit: type=1400 audit(1776876079.720:1578): avc: denied { load_policy } for pid=27970 comm="syz.2.3655" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1350.984895][T27981] SELinux: failed to load policy [ 1351.593789][ T24] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1351.783766][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 1351.874916][ T24] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 1351.893390][ T24] usb 8-1: config 0 has no interface number 0 [ 1351.932019][ T24] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1351.947193][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.972877][ T24] usb 8-1: Product: syz [ 1351.978075][ T24] usb 8-1: Manufacturer: syz [ 1351.994799][ T24] usb 8-1: SerialNumber: syz [ 1352.011010][ T24] usb 8-1: config 0 descriptor?? [ 1352.109196][ T24] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1352.475351][ T24] usb 8-1: qt2_attach - failed to power on unit: -71 [ 1352.617055][ T24] quatech2 8-1:0.51: probe with driver quatech2 failed with error -71 [ 1352.680277][ T24] usb 8-1: USB disconnect, device number 26 [ 1354.419296][T28181] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3672'. [ 1354.443293][T28181] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3672'. [ 1355.306911][ T24] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1355.504477][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1355.524952][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1355.561951][ T24] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1355.600997][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.647322][ T24] usb 7-1: Product: syz [ 1355.667383][ T24] usb 7-1: Manufacturer: syz [ 1355.691333][ T24] usb 7-1: SerialNumber: syz [ 1355.703758][ T9455] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1355.733077][ T24] usb 7-1: config 0 descriptor?? [ 1355.803473][ T24] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1355.906119][ T9455] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1356.001536][ T9455] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1356.026974][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1356.065127][ T9455] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1356.138164][ T9455] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1356.180121][ T9455] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.230183][ T9455] usb 8-1: config 0 descriptor?? [ 1356.668649][ T9455] plantronics 0003:047F:FFFF.0023: reserved main item tag 0xd [ 1356.728116][ T9455] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1356.826149][T28229] futex_wake_op: syz.0.3677 tries to shift op by 144; fix this program [ 1356.903893][ T13] usb 7-1: Failed to submit usb control message: -110 [ 1356.941067][ T9455] usb 8-1: USB disconnect, device number 27 [ 1356.950134][ T13] usb 7-1: unable to send the bmi data to the device: -110 [ 1356.984003][ T13] usb 7-1: unable to get target info from device [ 1357.012010][ T13] usb 7-1: could not get target info (-110) [ 1357.036920][ T13] usb 7-1: could not probe fw (-110) [ 1357.046564][T28223] fido_id[28223]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1357.386063][ T9455] usb 7-1: USB disconnect, device number 38 [ 1358.203768][ T5898] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1358.858755][ T9455] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1358.859750][ T5898] usb 6-1: Using ep0 maxpacket: 32 [ 1359.075616][ T9455] usb 1-1: Using ep0 maxpacket: 8 [ 1359.126249][ T9455] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1359.182211][ T9455] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1359.245382][ T9455] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1359.285780][ T5898] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1359.293921][ T5898] usb 6-1: config 0 has no interface number 0 [ 1359.309046][ T9455] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.309985][ T5898] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1359.327216][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.335242][ T5898] usb 6-1: Product: syz [ 1359.339633][ T5898] usb 6-1: Manufacturer: syz [ 1359.346776][ T5898] usb 6-1: SerialNumber: syz [ 1359.363016][ T5898] usb 6-1: config 0 descriptor?? [ 1359.372118][ T5898] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1359.821844][ T5898] usb 6-1: qt2_attach - failed to power on unit: -71 [ 1359.829073][ T5898] quatech2 6-1:0.51: probe with driver quatech2 failed with error -71 [ 1359.881015][ T5898] usb 6-1: USB disconnect, device number 43 [ 1361.297062][T28330] C: renamed from lo (while UP) [ 1361.393573][T28330] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1361.489378][ T7081] usb 1-1: USB disconnect, device number 10 [ 1361.793926][ T9455] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1361.945217][ T9455] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1361.991464][ T9455] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1362.042729][ T9455] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1362.114004][ T9455] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1362.159965][ T9455] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.223499][ T9455] usb 8-1: config 0 descriptor?? [ 1362.915003][ T9455] plantronics 0003:047F:FFFF.0024: reserved main item tag 0xd [ 1362.969664][ T9455] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1363.229505][ T9455] usb 8-1: USB disconnect, device number 28 [ 1363.652440][T28430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3701'. [ 1364.043688][ T7081] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1364.059439][T28430] nbd: socks must be embedded in a SOCK_ITEM attr [ 1365.413708][ T7081] usb 1-1: Using ep0 maxpacket: 32 [ 1365.458927][ T7081] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1365.467330][ T7081] usb 1-1: config 0 has no interface number 0 [ 1365.475488][ T7081] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1365.492262][ T7081] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.500375][ T7081] usb 1-1: Product: syz [ 1365.504704][ T7081] usb 1-1: Manufacturer: syz [ 1365.509337][ T7081] usb 1-1: SerialNumber: syz [ 1365.517579][ T7081] usb 1-1: config 0 descriptor?? [ 1365.525798][ T7081] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1366.025242][ T7081] usb 1-1: qt2_attach - failed to power on unit: -71 [ 1366.044063][ T7081] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 1366.323356][ T7081] usb 1-1: USB disconnect, device number 11 [ 1366.334234][T28465] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3703'. [ 1366.391145][T28465] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3703'. [ 1366.420604][T15681] udevd[15681]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1366.805344][T28488] futex_wake_op: syz.5.3707 tries to shift op by 144; fix this program [ 1367.762526][T28507] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3712'. [ 1367.781768][T28507] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3712'. [ 1369.148291][T28550] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3718'. [ 1369.579610][T28568] netlink: 'syz.0.3719': attribute type 1 has an invalid length. [ 1369.743704][ T7081] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1369.763940][T28550] nbd: socks must be embedded in a SOCK_ITEM attr [ 1369.784752][T28572] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3719'. [ 1370.148099][ T7081] usb 3-1: Using ep0 maxpacket: 32 [ 1370.976284][T28568] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1371.723165][ T7081] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1371.826423][T28570] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1371.991250][ T7081] usb 3-1: config 0 has no interface number 0 [ 1372.090813][T28570] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1372.275422][ T7081] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1372.344112][T28570] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1372.412743][ T7081] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.472516][ T7081] usb 3-1: Product: syz [ 1372.515703][ T7081] usb 3-1: Manufacturer: syz [ 1372.539415][ T7081] usb 3-1: SerialNumber: syz [ 1372.586621][ T7081] usb 3-1: config 0 descriptor?? [ 1372.596899][ T7081] usb 3-1: can't set config #0, error -71 [ 1372.642749][ T7081] usb 3-1: USB disconnect, device number 102 [ 1374.369449][T15681] udevd[15681]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1374.460754][T18589] udevd[18589]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1374.978206][T28680] futex_wake_op: syz.6.3728 tries to shift op by 144; fix this program [ 1375.936394][T28698] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3733'. [ 1376.220708][T28698] nbd: socks must be embedded in a SOCK_ITEM attr [ 1376.713658][ T9363] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1377.270849][T18589] udevd[18589]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1377.288808][T18589] udevd[18589]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1377.858403][ T5931] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1378.033674][ T5931] usb 8-1: Using ep0 maxpacket: 32 [ 1378.045207][ T5931] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 1378.053743][ T5931] usb 8-1: config 0 has no interface number 0 [ 1378.066529][ T5931] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1378.076195][ T5931] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.097935][ T5931] usb 8-1: Product: syz [ 1378.102369][ T5931] usb 8-1: Manufacturer: syz [ 1378.109416][ T5931] usb 8-1: SerialNumber: syz [ 1378.132493][ T5931] usb 8-1: config 0 descriptor?? [ 1378.215728][ T5931] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1378.273721][ T9363] usb 1-1: Using ep0 maxpacket: 16 [ 1378.281137][ T9363] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1378.359115][ T9363] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1378.628498][ T5931] usb 8-1: qt2_attach - failed to power on unit: -71 [ 1378.640132][ T9363] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.643680][ T5931] quatech2 8-1:0.51: probe with driver quatech2 failed with error -71 [ 1378.648275][ T9363] usb 1-1: Product: syz [ 1378.660630][ T9363] usb 1-1: Manufacturer: syz [ 1378.665886][ T9363] usb 1-1: SerialNumber: syz [ 1378.721695][ T9363] usb 1-1: config 0 descriptor?? [ 1378.754535][ T9363] usb 1-1: can't set config #0, error -71 [ 1378.763569][ T5931] usb 8-1: USB disconnect, device number 29 [ 1378.804744][ T9363] usb 1-1: USB disconnect, device number 12 [ 1379.249984][ T5898] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1379.278706][T28770] futex_wake_op: syz.0.3743 tries to shift op by 144; fix this program [ 1379.403673][ T5898] usb 7-1: Using ep0 maxpacket: 32 [ 1379.410069][ T5898] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 1379.423663][ T5898] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1379.433840][ T5898] usb 7-1: config 0 has no interface number 0 [ 1379.439912][ T5898] usb 7-1: config 0 interface 188 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1379.456444][ T5898] usb 7-1: config 0 interface 188 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1379.493525][ T5898] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1379.508981][ T5898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.527286][ T5898] usb 7-1: Product: syz [ 1379.535410][ T5898] usb 7-1: Manufacturer: syz [ 1379.550913][ T5898] usb 7-1: SerialNumber: syz [ 1379.576340][ T5898] usb 7-1: config 0 descriptor?? [ 1379.602014][ T5898] asix 7-1:0.188: probe with driver asix failed with error -22 [ 1380.387048][T28796] netlink: 'syz.2.3749': attribute type 1 has an invalid length. [ 1380.585891][T28806] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3749'. [ 1380.668226][T28796] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1381.311885][T28797] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1381.320680][T28797] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1381.338148][T28797] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1381.725591][T28857] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3755'. [ 1381.745696][T28857] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3755'. [ 1382.028187][ T9363] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1382.088366][ T9455] usb 7-1: USB disconnect, device number 39 [ 1382.171443][T28881] netlink: 'syz.6.3757': attribute type 16 has an invalid length. [ 1382.195374][T28881] netlink: 'syz.6.3757': attribute type 17 has an invalid length. [ 1382.224674][ T9363] usb 6-1: Using ep0 maxpacket: 32 [ 1382.242702][ T9363] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1382.271349][T28889] futex_wake_op: syz.2.3758 tries to shift op by 144; fix this program [ 1382.274463][ T9363] usb 6-1: config 0 has no interface number 0 [ 1382.371403][ T9363] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1382.398401][ T9363] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.467611][ T9363] usb 6-1: Product: syz [ 1382.485345][ T9363] usb 6-1: Manufacturer: syz [ 1382.526410][ T9363] usb 6-1: SerialNumber: syz [ 1382.591768][ T9363] usb 6-1: config 0 descriptor?? [ 1382.610121][ T9363] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1382.855236][T28881] bridge0: port 4(syz_tun) entered disabled state [ 1383.345221][ T9363] usb 6-1: qt2_attach - failed to power on unit: -71 [ 1383.353950][ T9363] quatech2 6-1:0.51: probe with driver quatech2 failed with error -71 [ 1383.456410][ T9363] usb 6-1: USB disconnect, device number 44 [ 1383.613982][T28881] bridge0: port 3(vlan2) entered disabled state [ 1383.620426][T28881] bridge0: port 2(bridge_slave_1) entered disabled state [ 1383.628513][T28881] bridge0: port 1(bridge_slave_0) entered disabled state [ 1383.871599][T28881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1383.887855][T28881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1383.922018][T28937] kAFS: No cell specified [ 1384.021045][ T5898] syz1: Port: 1 Link DOWN [ 1384.057027][T10978] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1384.075584][T10978] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.094899][T10978] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1384.106653][T10978] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.116533][T10978] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1384.125595][T10978] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.143754][T10978] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1384.160457][T10978] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.223756][ T9363] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 1384.390971][ T9363] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 1384.425224][ T9363] usb 3-1: config 0 has no interface number 0 [ 1384.439697][T28973] futex_wake_op: syz.7.3774 tries to shift op by 144; fix this program [ 1384.442756][ T9363] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 1384.519350][ T9363] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1384.572596][ T9363] usb 3-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1384.588202][ T9363] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.620095][ T9363] usb 3-1: Product: syz [ 1384.642900][ T9363] usb 3-1: Manufacturer: syz [ 1384.662245][ T9363] usb 3-1: SerialNumber: syz [ 1384.753054][ T9363] usb 3-1: config 0 descriptor?? [ 1384.763505][ T9363] cypress_m8 3-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 1384.966544][T28934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3769'. [ 1385.023693][ T5898] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 1385.186122][ T5898] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 1385.200902][ T9363] usb 3-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 1385.215325][ T9363] usb 3-1: USB disconnect, device number 103 [ 1385.215645][ T5898] usb 1-1: config 0 has no interface number 0 [ 1385.225166][ T9363] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 1385.238066][ T9363] cypress_m8 3-1:0.35: device disconnected [ 1385.251850][ T5898] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 1385.331041][T29013] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3779'. [ 1385.340030][T29013] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1385.738156][ T5898] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1385.765857][ T5898] usb 1-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1385.788649][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.805947][ T5898] usb 1-1: Product: syz [ 1385.812593][ T5898] usb 1-1: Manufacturer: syz [ 1385.819845][ T5898] usb 1-1: SerialNumber: syz [ 1385.831759][ T5898] usb 1-1: config 0 descriptor?? [ 1385.877703][ T5898] cypress_m8 1-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 1386.093949][T28962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3772'. [ 1386.185384][T29047] netlink: 'syz.5.3786': attribute type 10 has an invalid length. [ 1386.455196][ T9363] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1386.473288][T29059] futex_wake_op: syz.5.3787 tries to shift op by 144; fix this program [ 1386.754913][ T9363] usb 7-1: Using ep0 maxpacket: 32 [ 1386.763456][ T9363] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 1386.791677][ T9363] usb 7-1: config 0 has no interface number 0 [ 1386.808792][ T9363] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1386.827764][ T9363] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.839899][ T9363] usb 7-1: Product: syz [ 1386.854358][ T9363] usb 7-1: Manufacturer: syz [ 1386.854992][ T5898] usb 1-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 1386.868430][ T9363] usb 7-1: SerialNumber: syz [ 1386.891700][ T9363] usb 7-1: config 0 descriptor?? [ 1386.907336][ T5898] usb 1-1: USB disconnect, device number 13 [ 1386.925936][ T9363] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1386.938188][ T5898] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 1386.950964][ T5898] cypress_m8 1-1:0.35: device disconnected [ 1387.231775][T29096] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3793'. [ 1387.240748][T29096] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1387.550685][ T9363] usb 7-1: qt2_attach - failed to power on unit: -71 [ 1387.575756][ T9363] quatech2 7-1:0.51: probe with driver quatech2 failed with error -71 [ 1387.611608][ T9363] usb 7-1: USB disconnect, device number 40 [ 1388.273198][T29126] netlink: 'syz.7.3798': attribute type 10 has an invalid length. [ 1388.351866][T29126] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1388.414236][ T7081] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1389.018597][ T5838] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 1389.043415][T29144] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3802'. [ 1389.074504][ T7081] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1389.156392][ T7081] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1389.214819][ T7081] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1389.382706][ T7081] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1389.449910][ T7081] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.615002][ T7081] usb 6-1: config 0 descriptor?? [ 1390.022495][T29144] nbd: socks must be embedded in a SOCK_ITEM attr [ 1390.165085][T29173] netlink: 'syz.7.3805': attribute type 1 has an invalid length. [ 1390.238447][ T7081] plantronics 0003:047F:FFFF.0025: reserved main item tag 0xd [ 1390.351849][T29178] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.3805'. [ 1391.190845][ T7081] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1391.544136][ T7081] usb 6-1: USB disconnect, device number 45 [ 1392.363966][T29192] fido_id[29192]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1393.141388][T29173] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1393.375108][T17426] udevd[17426]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1393.377384][T18589] udevd[18589]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1393.652141][T29248] netlink: 'syz.7.3812': attribute type 10 has an invalid length. [ 1393.893829][ T7081] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1393.951069][T29263] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1394.053644][ T7081] usb 6-1: Using ep0 maxpacket: 8 [ 1394.060250][ T7081] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1394.060266][ T7081] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1394.060286][ T7081] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1394.060299][ T7081] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1394.060312][ T7081] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1394.060333][ T7081] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1394.060347][ T7081] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.064283][ T7081] usbtmc 6-1:16.0: bulk endpoints not found [ 1394.633721][ T9363] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1394.810850][ T9363] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1394.841958][ T9363] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1394.860288][ T9363] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1394.873323][ T9363] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1394.890116][ T9363] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.920081][ T9363] usb 7-1: config 0 descriptor?? [ 1395.346179][ T9363] plantronics 0003:047F:FFFF.0026: reserved main item tag 0xd [ 1395.387892][ T9363] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1395.712261][ T7081] usb 7-1: USB disconnect, device number 41 [ 1395.782174][T29302] overlayfs: failed to resolve './file0': -2 [ 1396.909114][T29301] fido_id[29301]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1397.015645][ T7081] usb 6-1: USB disconnect, device number 46 [ 1397.471270][T29339] netlink: 'syz.7.3823': attribute type 1 has an invalid length. [ 1397.623942][T29341] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.3823'. [ 1398.625546][T29361] futex_wake_op: syz.2.3827 tries to shift op by 144; fix this program [ 1398.894294][T29361] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29361 comm=syz.2.3827 [ 1400.601550][T29339] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1401.104252][T29416] netlink: 'syz.0.3833': attribute type 1 has an invalid length. [ 1401.651663][T29416] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1401.945344][T29457] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3833'. [ 1401.971710][T29457] 9p: Bad value for 'wfdno' [ 1402.168122][T29417] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1402.177027][T29417] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1402.190745][T29417] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1404.113656][ T7081] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1404.807843][ T7081] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1404.933920][ T7081] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1404.944000][ T7081] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1404.957087][ T7081] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1404.990815][ T7081] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1405.088821][ T7081] usb 7-1: config 0 descriptor?? [ 1405.833647][ T7081] plantronics 0003:047F:FFFF.0027: reserved main item tag 0xd [ 1405.897056][ T7081] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1406.115216][ T7081] usb 7-1: USB disconnect, device number 42 [ 1406.858795][ T5898] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1406.890427][T29562] futex_wake_op: syz.2.3851 tries to shift op by 144; fix this program [ 1406.949932][T29562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29562 comm=syz.2.3851 [ 1407.892546][ T5898] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1407.903764][ T5898] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1407.913545][ T5898] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1407.929774][ T5898] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1407.939555][ T5898] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.949900][T29569] netlink: 'syz.6.3853': attribute type 1 has an invalid length. [ 1407.995533][ T5898] usb 8-1: config 0 descriptor?? [ 1408.312147][T29569] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1408.547358][T29573] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1408.557338][T29573] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1408.582691][T29573] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 1409.232391][ T5898] usbhid 8-1:0.0: can't add hid device: -71 [ 1409.247218][ T5898] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1409.353733][ T5898] usb 8-1: USB disconnect, device number 30 [ 1409.512841][T29636] futex_wake_op: syz.2.3856 tries to shift op by 144; fix this program [ 1409.555270][T29636] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29636 comm=syz.2.3856 [ 1417.441339][ T155] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1417.466591][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1417.689177][T29701] futex_wake_op: syz.6.3870 tries to shift op by 144; fix this program [ 1418.038111][ T155] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1419.156412][T29747] futex_wake_op: syz.7.3877 tries to shift op by 144; fix this program [ 1419.165215][ T155] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1419.648785][T29751] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3879'. [ 1419.672364][T29751] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3879'. [ 1420.119272][ T155] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1421.104111][T29759] C: renamed from lo [ 1421.195273][T29759] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1422.547446][ T155] bridge_slave_1: left promiscuous mode [ 1422.567752][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1422.676975][ T155] bridge_slave_0: left allmulticast mode [ 1422.733499][ T155] bridge_slave_0: left promiscuous mode [ 1422.799209][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1423.469712][ T155] dvmrp1: left allmulticast mode [ 1423.553978][ T9455] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1424.201882][ T9455] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1424.289365][T29858] netlink: 'syz.7.3894': attribute type 1 has an invalid length. [ 1425.410032][ T9455] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1425.420346][ T9455] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1425.450959][ T9455] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1425.552379][ T9455] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1425.631533][ T9455] usb 1-1: config 0 descriptor?? [ 1425.795911][T29869] netlink: 'syz.2.3897': attribute type 1 has an invalid length. [ 1425.971371][T29871] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3897'. [ 1425.988244][T29871] 9p: Bad value for 'rfdno' [ 1426.783720][ T9455] usb 1-1: can't set config #0, error -71 [ 1426.819705][ T9455] usb 1-1: USB disconnect, device number 14 [ 1428.159032][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1428.219759][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1428.356236][ T155] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1428.406622][ T155] bond0 (unregistering): Released all slaves [ 1428.430398][T29899] netlink: 'syz.6.3902': attribute type 10 has an invalid length. [ 1428.464651][ T155] bond1 (unregistering): Released all slaves [ 1428.517019][ T155] bond2 (unregistering): Released all slaves [ 1428.601653][ T155] bond3 (unregistering): Released all slaves [ 1428.676379][ T155] bond4 (unregistering): Released all slaves [ 1428.713155][ T155] bond5 (unregistering): Released all slaves [ 1428.771249][ T155] bond6 (unregistering): Released all slaves [ 1428.818424][T29858] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1428.956058][T29869] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1429.112953][ T5490] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1429.175803][T29899] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1430.371848][T29959] netlink: 'syz.2.3908': attribute type 1 has an invalid length. [ 1431.147704][T29934] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1432.220006][T29959] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1432.557381][T29992] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1432.972515][T30003] netlink: 'syz.2.3915': attribute type 1 has an invalid length. [ 1433.118904][ T5838] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1433.131906][T30008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3914'. [ 1433.444572][T30027] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3915'. [ 1433.619653][T30007] 9p: Bad value for 'rfdno' [ 1434.447805][T30003] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1435.923655][T30008] nbd: socks must be embedded in a SOCK_ITEM attr [ 1436.381630][T30006] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1436.467158][T29944] udevd[29944]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1436.469926][T30006] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1436.556092][T29944] udevd[29944]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1436.574018][T30006] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1438.094454][ T155] hsr_slave_0: left promiscuous mode [ 1438.115242][ T155] hsr_slave_1: left promiscuous mode [ 1438.123371][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1438.140440][T30085] futex_wake_op: syz.0.3920 tries to shift op by 144; fix this program [ 1438.150369][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1438.179056][T30097] kAFS: No cell specified [ 1438.193364][T30085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30085 comm=syz.0.3920 [ 1438.789916][T30097] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3922'. [ 1438.893715][ T9363] usb 7-1: new full-speed USB device number 43 using dummy_hcd [ 1439.084893][ T155] team0 (unregistering): Port device team_slave_1 removed [ 1439.156346][ T155] team0 (unregistering): Port device team_slave_0 removed [ 1439.617764][T30133] netlink: 'syz.2.3931': attribute type 1 has an invalid length. [ 1439.762692][T30133] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1439.805990][T30133] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3931'. [ 1439.820064][T30133] 9p: Bad value for 'rfdno' [ 1440.455618][ T5490] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1440.838255][T30139] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1440.858455][T30139] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1440.912246][T30139] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1443.056893][T30213] futex_wake_op: syz.7.3934 tries to shift op by 144; fix this program [ 1443.361110][T30211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30211 comm=syz.7.3934 [ 1444.113828][ T9363] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1444.140370][ T5490] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1444.267707][ T9363] usb 7-1: Using ep0 maxpacket: 8 [ 1444.275123][ T9363] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1444.283362][ T9363] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1444.301106][ T9363] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1444.321062][ T9363] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1444.341884][ T9363] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1444.388907][ T9363] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1444.416249][T30258] futex_wake_op: syz.2.3943 tries to shift op by 144; fix this program [ 1444.426769][ T9363] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.443678][T12853] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 1444.584962][T12853] usb 1-1: device descriptor read/64, error -71 [ 1444.663924][ T9363] usb 7-1: GET_CAPABILITIES returned 0 [ 1444.677155][ T9363] usbtmc 7-1:16.0: can't read capabilities [ 1444.836625][T12853] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 1444.844865][T30273] netlink: 'syz.7.3944': attribute type 1 has an invalid length. [ 1444.956653][T23784] usb 7-1: USB disconnect, device number 44 [ 1445.001014][T30303] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.3944'. [ 1445.031237][T30273] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1445.078900][T12853] usb 1-1: device descriptor read/64, error -71 [ 1445.131101][T30315] 9p: Bad value for 'wfdno' [ 1445.235907][T30275] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1445.244651][T30275] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1445.258870][T30275] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1445.290632][T12853] usb usb1-port1: attempt power cycle [ 1445.822218][T12853] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 1445.875911][T12853] usb 1-1: device descriptor read/8, error -71 [ 1446.004042][T30334] netlink: 'syz.6.3945': attribute type 1 has an invalid length. [ 1446.123646][T12853] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 1446.202174][T30365] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.3945'. [ 1446.247938][T30334] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1446.452954][T30334] 9p: Bad value for 'wfdno' [ 1446.665531][T30339] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1446.674643][T30339] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1446.688936][T30339] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 1447.532708][T12853] usb 1-1: device descriptor read/8, error -71 [ 1447.534800][ T5490] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1447.662820][T12853] usb usb1-port1: unable to enumerate USB device [ 1447.849108][T30404] futex_wake_op: syz.6.3950 tries to shift op by 144; fix this program [ 1447.899473][T30404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30404 comm=syz.6.3950 [ 1448.141814][T30406] overlayfs: failed to resolve './file1': -2 [ 1448.430197][ T5838] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 1448.467079][T30414] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3952'. [ 1448.823506][T30414] nbd: socks must be embedded in a SOCK_ITEM attr [ 1449.985294][T30436] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3955'. [ 1450.027585][T30436] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3955'. [ 1450.772553][T29789] udevd[29789]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1450.788262][T29944] udevd[29944]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1450.953728][T12853] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1451.113623][T12853] usb 6-1: Using ep0 maxpacket: 8 [ 1451.119797][T12853] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1451.128225][T12853] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1451.138757][T12853] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1451.148751][T12853] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1451.159072][T12853] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1451.180997][T12853] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1451.190525][T12853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1451.233951][ T7081] usb 8-1: new full-speed USB device number 31 using dummy_hcd [ 1451.395277][ T7081] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1451.432556][ T7081] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1451.475802][ T7081] usb 8-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1451.488085][ T7081] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.504321][ T7081] usb 8-1: Product: syz [ 1451.512638][ T7081] usb 8-1: Manufacturer: syz [ 1451.517329][ T7081] usb 8-1: SerialNumber: syz [ 1451.520587][ T7081] usb 8-1: config 0 descriptor?? [ 1451.612493][ T7081] usb 6-1: USB disconnect, device number 47 [ 1451.728199][T30458] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3958'. [ 1451.816401][T30494] netlink: 'syz.2.3961': attribute type 1 has an invalid length. [ 1451.954496][T30496] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3961'. [ 1454.557636][T30510] futex_wake_op: syz.6.3963 tries to shift op by 144; fix this program [ 1454.567592][T30510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30510 comm=syz.6.3963 [ 1454.876345][T30521] netlink: 'syz.5.3966': attribute type 1 has an invalid length. [ 1455.018976][T30523] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3966'. [ 1457.900665][T30494] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1457.950054][T30521] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1458.049143][ T7081] usb 8-1: USB disconnect, device number 31 [ 1459.221314][T30594] futex_wake_op: syz.2.3975 tries to shift op by 144; fix this program [ 1459.232048][T30594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30594 comm=syz.2.3975 [ 1459.263837][T23784] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1459.435418][T23784] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1460.462309][T30612] netlink: 'syz.2.3979': attribute type 1 has an invalid length. [ 1460.751667][T30611] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3979'. [ 1461.093642][T30612] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1463.297082][T23784] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1463.350656][T23784] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1463.438929][T30614] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1463.447476][T30614] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1463.462090][T30614] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 1463.492651][T23784] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1463.654011][T23784] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.837277][T23784] usb 6-1: config 0 descriptor?? [ 1463.890657][T23784] usb 6-1: can't set config #0, error -71 [ 1463.908505][T30661] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3982'. [ 1463.925415][T23784] usb 6-1: USB disconnect, device number 48 [ 1463.934546][T30661] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3982'. [ 1464.505116][T30692] netlink: 'syz.6.3985': attribute type 10 has an invalid length. [ 1464.627983][T30699] futex_wake_op: syz.7.3983 tries to shift op by 144; fix this program [ 1464.636794][T23784] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1464.724892][T30702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3986'. [ 1464.733844][T30702] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 1465.166145][T30704] futex_wake_op: syz.6.3988 tries to shift op by 144; fix this program [ 1465.180062][T30704] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30704 comm=syz.6.3988 [ 1465.215108][T23784] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1465.238074][T23784] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1465.256763][T23784] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1465.295803][T23784] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1465.326872][T23784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.494342][T23784] usb 1-1: config 0 descriptor?? [ 1465.794003][T30725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3990'. [ 1465.802990][T30725] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1466.231657][T23784] plantronics 0003:047F:FFFF.0028: reserved main item tag 0xd [ 1466.308378][T30730] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.3989'. [ 1466.519916][T23784] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1466.758228][T12853] usb 1-1: USB disconnect, device number 19 [ 1466.827519][T30741] fido_id[30741]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1467.446345][T30769] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1467.500569][T30780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3993'. [ 1467.522527][T30780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3993'. [ 1468.879482][T30810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3997'. [ 1468.923054][T30813] netlink: 'syz.2.3998': attribute type 10 has an invalid length. [ 1468.942393][T30810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3997'. [ 1469.423834][T12853] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1469.615179][T30832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4000'. [ 1469.624167][T30832] openvswitch: netlink: Message has 8 unknown bytes. [ 1470.023624][T12853] usb 7-1: Using ep0 maxpacket: 8 [ 1470.129612][T12853] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1470.141740][T12853] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1470.163657][T12853] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1470.687963][T30839] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1470.870163][T12853] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1470.883720][T12853] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1470.958966][T12853] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1470.993098][T12853] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.627422][T12853] usb 7-1: GET_CAPABILITIES returned 0 [ 1472.636407][T12853] usbtmc 7-1:16.0: can't read capabilities [ 1472.919564][T12853] usb 7-1: USB disconnect, device number 45 [ 1473.733833][T30894] netlink: 'syz.7.4010': attribute type 10 has an invalid length. [ 1473.882966][T30909] netlink: 'syz.7.4011': attribute type 10 has an invalid length. [ 1473.999378][ T9455] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1474.035380][T30918] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4013'. [ 1474.044874][T30918] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4013'. [ 1474.168262][ T9455] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1474.180524][ T9455] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1474.191974][ T9455] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1474.213164][ T9455] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1474.222418][T12853] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1474.223244][ T9455] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.277543][ T9455] usb 6-1: config 0 descriptor?? [ 1474.449429][T12853] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1474.462938][T12853] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1474.488439][T12853] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1474.505644][T12853] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1474.532459][T12853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.574607][T12853] usb 3-1: config 0 descriptor?? [ 1474.804710][ T9455] plantronics 0003:047F:FFFF.0029: reserved main item tag 0xd [ 1474.875274][ T9455] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1475.069492][T12853] plantronics 0003:047F:FFFF.002A: reserved main item tag 0xd [ 1475.094802][T12853] plantronics 0003:047F:FFFF.002A: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1475.356443][ T9455] usb 3-1: USB disconnect, device number 104 [ 1476.699272][T30955] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1476.754043][ T5932] usb 6-1: USB disconnect, device number 49 [ 1477.117759][T30985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4015'. [ 1477.127027][T30985] openvswitch: netlink: Message has 8 unknown bytes. [ 1477.539995][T30986] futex_wake_op: syz.5.4017 tries to shift op by 144; fix this program [ 1477.560007][T30987] futex_wake_op: syz.6.4016 tries to shift op by 144; fix this program [ 1477.995901][T30996] C: renamed from lo [ 1478.086153][T30996] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1478.350784][T31004] netlink: 'syz.0.4021': attribute type 10 has an invalid length. [ 1478.384979][T31004] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1478.732268][T31018] futex_wake_op: syz.7.4023 tries to shift op by 144; fix this program [ 1478.913350][ C0] ------------[ cut here ]------------ [ 1478.920652][ C0] ODEBUG: free active (active state 0) object: ffff8880582ad890 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 1478.933587][ C0] WARNING: lib/debugobjects.c:629 at debug_print_object+0x18e/0x2a0, CPU#0: swapper/0/0 [ 1478.943375][ C0] Modules linked in: [ 1478.948553][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1478.959115][ C0] Tainted: [L]=SOFTLOCKUP [ 1478.963468][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1478.973583][ C0] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 1478.979452][ C0] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d f2 18 e4 0b 41 56 48 8b 14 dd c0 33 1c 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 0c c5 d9 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 1478.999121][ C0] RSP: 0018:ffffc90000007a28 EFLAGS: 00010246 [ 1479.005241][ C0] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1479.013250][ C0] RDX: ffffffff8c1c3300 RSI: ffffffff8c1c2f20 RDI: ffffffff90e6aac0 [ 1479.021272][ C0] RBP: 0000000000000001 R08: ffff8880582ad890 R09: ffffffff8bb2c6e0 [ 1479.029284][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1c2f20 [ 1479.037304][ C0] R13: ffffffff8bb2c720 R14: ffffffff8a84b230 R15: ffffc90000007b28 [ 1479.045369][ C0] FS: 0000000000000000(0000) GS:ffff8881242db000(0000) knlGS:0000000000000000 [ 1479.054372][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1479.061008][ C0] CR2: 00007f271bfe9f00 CR3: 000000003a2e2000 CR4: 00000000003526f0 [ 1479.069022][ C0] Call Trace: [ 1479.072328][ C0] [ 1479.075219][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1479.080867][ C0] ? _raw_spin_unlock_irqrestore+0x31/0x80 [ 1479.086722][ C0] debug_check_no_obj_freed+0x4da/0x630 [ 1479.092353][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1479.098463][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1479.103724][ C0] ? do_raw_spin_lock+0x128/0x260 [ 1479.108941][ C0] ? rose_timer_expiry+0x53f/0x630 [ 1479.114127][ C0] ? rose_timer_expiry+0x460/0x630 [ 1479.119259][ C0] kfree+0x3d0/0x6c0 [ 1479.123180][ C0] rose_timer_expiry+0x53f/0x630 [ 1479.128187][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1479.133679][ C0] call_timer_fn+0x19a/0x640 [ 1479.138282][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1479.144486][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1479.149634][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1479.155136][ C0] __run_timers+0x75f/0xaf0 [ 1479.159692][ C0] ? __pfx___run_timers+0x10/0x10 [ 1479.164781][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 1479.169827][ C0] run_timer_base+0x114/0x190 [ 1479.174551][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 1479.179786][ C0] ? rcu_is_watching+0x12/0xc0 [ 1479.184583][ C0] run_timer_softirq+0x1a/0x50 [ 1479.189367][ C0] handle_softirqs+0x1ea/0xa00 [ 1479.194209][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1479.199512][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1479.204402][ C0] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 1479.210080][ C0] __irq_exit_rcu+0x162/0x210 [ 1479.214801][ C0] irq_exit_rcu+0x9/0x30 [ 1479.219060][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1479.224742][ C0] [ 1479.227695][ C0] [ 1479.230646][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1479.236654][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 1479.242765][ C0] Code: 56 5b 5c 00 48 89 df 5b e9 7d e6 61 00 be 03 00 00 00 5b e9 e2 57 f0 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 8b 05 45 d5 0a 12 48 8b 34 24 65 48 8b 15 21 d5 0a [ 1479.262511][ C0] RSP: 0018:ffffffff8e407df8 EFLAGS: 00000293 [ 1479.268627][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fd2428 [ 1479.276638][ C0] RDX: ffffffff8e4955c0 RSI: ffffffff81fd2432 RDI: ffffffff8e4955c0 [ 1479.284643][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 1479.292637][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 1479.300644][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 000000000008b000 [ 1479.308690][ C0] ? flush_smp_call_function_queue+0x158/0x1f0 [ 1479.314886][ C0] ? flush_smp_call_function_queue+0x162/0x1f0 [ 1479.321060][ C0] flush_smp_call_function_queue+0x168/0x1f0 [ 1479.327094][ C0] do_idle+0x2d8/0x590 [ 1479.331175][ C0] ? __pfx_do_idle+0x10/0x10 [ 1479.335822][ C0] cpu_startup_entry+0x4f/0x60 [ 1479.340626][ C0] rest_init+0x251/0x260 [ 1479.344913][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1479.350473][ C0] start_kernel+0x484/0x490 [ 1479.355017][ C0] x86_64_start_reservations+0x24/0x30 [ 1479.360519][ C0] x86_64_start_kernel+0x12b/0x130 [ 1479.365669][ C0] common_startup_64+0x13e/0x148 [ 1479.370655][ C0] [ 1479.373724][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1479.380992][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1479.391462][ C0] Tainted: [L]=SOFTLOCKUP [ 1479.395755][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1479.405789][ C0] Call Trace: [ 1479.409042][ C0] [ 1479.411865][ C0] dump_stack_lvl+0x100/0x190 [ 1479.416516][ C0] vpanic+0x552/0x970 [ 1479.420469][ C0] ? __pfx_vpanic+0x10/0x10 [ 1479.424945][ C0] panic+0xd1/0xe0 [ 1479.428639][ C0] ? __pfx_panic+0x10/0x10 [ 1479.433027][ C0] ? check_panic_on_warn+0x1f/0x90 [ 1479.438111][ C0] check_panic_on_warn.cold+0x19/0x34 [ 1479.443454][ C0] ? debug_print_object+0x18e/0x2a0 [ 1479.448629][ C0] __warn.cold+0x191/0x328 [ 1479.453018][ C0] __report_bug+0x296/0x3d0 [ 1479.457502][ C0] ? debug_print_object+0x18e/0x2a0 [ 1479.462674][ C0] ? __pfx___report_bug+0x10/0x10 [ 1479.467677][ C0] ? find_held_lock+0x2b/0x80 [ 1479.472324][ C0] ? __flush_smp_call_function_queue+0x426/0x960 [ 1479.478622][ C0] ? __flush_smp_call_function_queue+0x426/0x960 [ 1479.484925][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1479.490185][ C0] report_bug_entry+0xe1/0x290 [ 1479.494923][ C0] ? debug_print_object+0x19b/0x2a0 [ 1479.500096][ C0] handle_bug+0x1cd/0x2a0 [ 1479.504396][ C0] exc_invalid_op+0x17/0x50 [ 1479.508871][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1479.513693][ C0] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 1479.519474][ C0] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d f2 18 e4 0b 41 56 48 8b 14 dd c0 33 1c 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 0c c5 d9 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 1479.539052][ C0] RSP: 0018:ffffc90000007a28 EFLAGS: 00010246 [ 1479.545098][ C0] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1479.553039][ C0] RDX: ffffffff8c1c3300 RSI: ffffffff8c1c2f20 RDI: ffffffff90e6aac0 [ 1479.560981][ C0] RBP: 0000000000000001 R08: ffff8880582ad890 R09: ffffffff8bb2c6e0 [ 1479.568923][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1c2f20 [ 1479.576872][ C0] R13: ffffffff8bb2c720 R14: ffffffff8a84b230 R15: ffffc90000007b28 [ 1479.584828][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1479.590456][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1479.596065][ C0] ? _raw_spin_unlock_irqrestore+0x31/0x80 [ 1479.601848][ C0] debug_check_no_obj_freed+0x4da/0x630 [ 1479.607378][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1479.613427][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1479.618609][ C0] ? do_raw_spin_lock+0x128/0x260 [ 1479.623619][ C0] ? rose_timer_expiry+0x53f/0x630 [ 1479.628725][ C0] ? rose_timer_expiry+0x460/0x630 [ 1479.633813][ C0] kfree+0x3d0/0x6c0 [ 1479.637688][ C0] rose_timer_expiry+0x53f/0x630 [ 1479.642604][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1479.648036][ C0] call_timer_fn+0x19a/0x640 [ 1479.652603][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1479.658731][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1479.663820][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1479.669253][ C0] __run_timers+0x75f/0xaf0 [ 1479.673734][ C0] ? __pfx___run_timers+0x10/0x10 [ 1479.678737][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 1479.683739][ C0] run_timer_base+0x114/0x190 [ 1479.688389][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 1479.693565][ C0] ? rcu_is_watching+0x12/0xc0 [ 1479.698324][ C0] run_timer_softirq+0x1a/0x50 [ 1479.703061][ C0] handle_softirqs+0x1ea/0xa00 [ 1479.707805][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1479.713064][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1479.717902][ C0] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 1479.723509][ C0] __irq_exit_rcu+0x162/0x210 [ 1479.728163][ C0] irq_exit_rcu+0x9/0x30 [ 1479.732383][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1479.737989][ C0] [ 1479.740894][ C0] [ 1479.743797][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1479.749750][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 1479.755790][ C0] Code: 56 5b 5c 00 48 89 df 5b e9 7d e6 61 00 be 03 00 00 00 5b e9 e2 57 f0 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 8b 05 45 d5 0a 12 48 8b 34 24 65 48 8b 15 21 d5 0a [ 1479.775368][ C0] RSP: 0018:ffffffff8e407df8 EFLAGS: 00000293 [ 1479.781411][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fd2428 [ 1479.789354][ C0] RDX: ffffffff8e4955c0 RSI: ffffffff81fd2432 RDI: ffffffff8e4955c0 [ 1479.797298][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 1479.805238][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 1479.813181][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 000000000008b000 [ 1479.821132][ C0] ? flush_smp_call_function_queue+0x158/0x1f0 [ 1479.827263][ C0] ? flush_smp_call_function_queue+0x162/0x1f0 [ 1479.833401][ C0] flush_smp_call_function_queue+0x168/0x1f0 [ 1479.839357][ C0] do_idle+0x2d8/0x590 [ 1479.843401][ C0] ? __pfx_do_idle+0x10/0x10 [ 1479.847963][ C0] cpu_startup_entry+0x4f/0x60 [ 1479.852699][ C0] rest_init+0x251/0x260 [ 1479.856915][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1479.862433][ C0] start_kernel+0x484/0x490 [ 1479.866913][ C0] x86_64_start_reservations+0x24/0x30 [ 1479.872356][ C0] x86_64_start_kernel+0x12b/0x130 [ 1479.877449][ C0] common_startup_64+0x13e/0x148 [ 1479.882375][ C0] [ 1479.885710][ C0] Kernel Offset: disabled [ 1479.890010][ C0] Rebooting in 86400 seconds..