last executing test programs: 5m49.152458835s ago: executing program 2 (id=508): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) recvmsg$unix(r0, &(0x7f0000000600)={&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000340)=""/160, 0xa0}, {&(0x7f0000000400)=""/135, 0x87}, {&(0x7f00000004c0)=""/14, 0xe}], 0x3, &(0x7f0000000540)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x100) r2 = openat(r1, &(0x7f0000000100)='./file0\x00', 0x30a46, 0x12) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000000c0)={0x0, 0x0}, 0x8) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x30, &(0x7f0000000180)=""/217, &(0x7f0000000280)=0xd9) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7a, &(0x7f0000000080), &(0x7f0000000000)=0x8) 5m48.862887607s ago: executing program 2 (id=510): syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(&(0x7f0000000d00)=@cell={0x25, '', 'syz0'}, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) 5m48.789564719s ago: executing program 2 (id=512): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1000000004000000040000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000005d00000000000000000089057f9434cde4fafa2f9c43850fd3f780798060b9cd5f2b07e993cb8d277f2d76f53ff3c4249620b3c9ef4e31773153226b6cfddf44f5cd5b54b5"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000002018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0x4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="18050000000004000000000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev/kmsg\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='<1>', 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000400)={0x0, @private, @empty}, &(0x7f0000000580)=0xc) r7 = getuid() getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000005c0)={@remote, @private, 0x0}, &(0x7f0000000600)=0xc) sendmsg$nl_xfrm(r4, &(0x7f0000000b00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000640)=ANY=[@ANYBLOB="800400001600000225bd7000fbdbdf25fc020000000000000000000000000001fc0200000000000000000000000000014e2100084e2200000a00804089000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="00000000000000000000ffffac141436000004d233000000e000000100000000000000000000000000000000000000005b900000000000004600000000000000a55ab30f000000000900000000000000960000000000000008000000000000000900000000000000070000000000000005000000000000000300000000000000ff7f00000000000010000000090000000700000025bd7000053500000a00040180000000010000000700000008000b0002000000e00006010a010101000000000000000000000000fe80000000000000000000000000001e4e208c794e2200000a0020103a000000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="030000000c000f00ffff000000000000"], 0x480}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r9 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r9, &(0x7f0000000080)='L\x00', 0x2, 0x0, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r1, r0}, 0xc) read$FUSE(r10, &(0x7f0000002540)={0x2020}, 0x2020) 5m48.680915469s ago: executing program 2 (id=513): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e22, 0x5, @local, 0xca}}, [0x0, 0x8, 0x7, 0x0, 0xffff, 0x2, 0x4, 0x9, 0x1435, 0x5, 0x7, 0x9, 0x3, 0x8, 0x6]}, &(0x7f0000000300)=0xfc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002dbd7000ffdbdf08000800e0000002"], 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x4000080) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xa0, r4, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xd, 0x1f}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="98687cfaff22"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="71e4c1f0305b"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="f6bf7ad5a723"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x8004) 5m48.680576903s ago: executing program 2 (id=514): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x55}, 0x40000) r2 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0x8a42) r3 = dup(r2) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="b7000000001f0000bfa30000000000000703000018feffff620af0fff8ffffff71a4f0ff00000000ae04020000000000be400300000000006504030001ed00007b130000000000004d44000000000000630a00fe000000007933000000000000b504fdff000000009500000000000000023bc065b7a379d17cf9333379fc05000000912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50bec919bc461e91a7168c5181554d1b583c587e436fe275daf51efd601b6bf01c8e8b1b526375ec5dd6fcd82e4fee5bef7af9a0200000000000000e3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f645679c294392cf538b07ce2646cb7798b3e6440c2fbdb00a3e35208b0bb1d2cd871c5548930be3835f2554b4a28610643a98d9ec21ead2ed51b104d4d91af25b84550a7925c3109b151b8b9f75d80000000eda88c658d42ecbf28bf7076c15b463bebc72f526d8e4a9e231d512381e7a78afcb913466aae7f6df70252e79166d858fc152b659da074e1320060d0b11008e59a5923906f88b53987ad1714e72ba7a5b74f0c33d39000d06a59ff61622cfd9aa58fe8d485ae2c0cc65c2a36aaec2477584b6a89adaf17b0a6041bde4cc3ed54d27f777e92b87496e6649cf728d236619074d6ebdf098bc908c423d228a40f9411fe7226a40409d6e37c4f46756d31cb46761bade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18de0ae564162a27afea62d84f3a10746443d64364f56e24e6d21053d901204a1deeed41556175cbd4041b7d301bcb72652d950ad31928b0b093778b68e2e9853c02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f98928d5e9b94ff9ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cff538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595bcf50ab32d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063b59261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6f8c3a13596c2ea3e2e04cfdce669e51731b2875353193f82ade69d0540059fe6c7fe7c00fb7502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abd47b64a1b304502dda787343ce3c95300000000010000003baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022af46667cf25c5d3038816106dec28eaeb88343261a48a18f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfeff59d54d1f92ecc4e95dd2d18383117c03987d198899b212c55318294270a1ad10d30fef7c24b78b29d83238273f4fc87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead8eaf68b0c5dda0467d35a3807000000b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ea1e717d29135753208165b9cdbae037f315c7d951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d7012c1b45f6ada1ee7baa5b6a686b50f09b7f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac4d73a008364e0602a594817031fc2ff2c32a1989e00f52f8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a3c3e6e4fd2e016820f78b796a825b3dad9ce7b37507e0b83c3ecd01549bca6a016b3e18a00c748894dc3bfe5efda8b0a477d6a6562fdee45eb16e276dee992094ba9830f6c164179e7d532d86060bea930118d3cae1b8f916b9671b7000000000040f4bee5ad2dea2d14e195265504c05bba38b095e1679f96ddef65ba5de9c8cfb6465ae4165c0689a314a6eb6b36aa705b957edef3035e14b879d4e7dc00624708042e00bf9a7f7ae5f308744770759558e4fcb99c0dc957521ef255362bf2f3966f3754e81fb9bdef22c19f5a49147b85343f9f36bcda9f64b7a5c5b2f5452f5b1de02e6f15c5640bf89d4a74d51dc233dee628c1dfbb5566b98478c174b34eb234481547e484c6af101396b6977dd668b401391c1dc54f2edccf1cabe6be9868d383eb937efdfd9ade018106f544f04fc07ad525497f65fbad3cf145396acf3b0d38e6b46e28d86880fd6f62c373000000000000000000005d194c27cd4d8f6727de79be80fb4493a0ee2e85f59c71dc84311c0f1fb6c87081c7be9355288610c32c2d8c18bf2027212182903687f48262aea54c5f8a315c9aa4a5af1aa2c4007d1baae38c270012b7eb9411ae451204dba30f8321b07a18db97c3e0cf6a15170e515b1cc463a67a5b2b23ec5662ccfa898b8d5075647bdfb390cde56efb8fd42df12c5c8f66bdc58449ec2b38bf12f5f0a49dcbcf4e6f11c47d23fa34793a0000a1cbb1e06e9a8d2449451d7a05ec0a0d3c9716f505ddeba488c60ebf44cac05c2739694359c925148137376dd3f1330ed0e9211f73ee279cc0b5c298422395ce438f48a39ff569375e609f9e904aacc3d8011326d5e4d654c74501cf16bbf72d3984f9b4ef000000003a8a3d49fc837001e4622e58e3a4ef6b55a8dd0680d951cdb6e54ed92a9a6a0e5e494b7b7b0ef4b4bafc5d964551b2a22bfd12b0761ef07a103e51e84917ee44f860b9785e264343f6a80e9318edecf73df6940856cd56c56eb3831445833c701044aaa49439a44a624267580b3c0980d7f87437bf498f6e1915450400000000000000564a02552c0a5fedbcf4da0db6ed03b9dbc224ee76d20aaf1ac74bcb7eb6f202209e64cc4d130dcf6ab3df8ae4911deb4bb5c7df97fc348d151e834be73915f854272f69d88123f666448b6a8e73322b04fffea9cc05e4129debf311c73b4d1a244b1e5b9943028745a0b6477686740ab877315e35624d791e6f71adb1acd3e22cf472ff7e048b16c11c84da9a3b16b92665912132a4dba680052919c20e191311d8092a09f3c609823fed1bd651ce1c34de105790ba2ca3afa26647f66efbf97b109e7226c74e32beb14ff3fd6918e255fc9b42f86b0188cf885afcc9bb77a7fc3ca7ec1015af494add960f8a11422ca005f24006867cd156e0350022943e301b2c07f4d37d07b05ac2fa1f1d5a0d6eb7e992b076bd77509c26034d2a740d578476410b413591884136259693effaf27e7bcfb58efa92625fb9bd68ecca42047f6e7d24b0446ea16a310073c163d1c6aa3ba1fe76b4e88d5f98cc05c6d033e2c28b4990892230d6b4e5c083a601a25145eb22f4f77313117f8147810d95c64fb78b0a000000000000000000000000e92ba8b066e4bd82bb6003d5da8791d838bcd6eefb13000000000000000000000000000000b652ff6fbad82da75114742bc6a27cba894ef490531be709a3a3c81b267dfafa55e6f855200b4e7518682c30f40808cd5bb8f00beb63b4989cc01d8e75a182337b9f9e08430ccec9bda0134d07a9f54b60033182f5d2bb61fd130d65e68bf148d26470060c707a8cf750ca954ee63c78cd975c7f565783383f02edcb7ce4a9ed0c511d18fe32352276d72eefe0d566f97ccae16b3492f60b96574aac4f1862fb6e4932c181dbf8c68ca16b765de9edba0bf5bfb9c4950d19c0bc31db02f374ce62141160436639d4b6cb0033a47ffdc54d55f1136743b1b26946f200000000000000007590ab8f29c7accd9d11786c4ca1271cd2293b572f14a3dfcaa3467f2783fc09e3eee3fa4b82b7b6ce904e05fa797a2f7ff63e4f874bd870821f6460904e05d7a3f8295a9a5fd21e3587b9d9e878c86ba9b66c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x7, @empty, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)="5881e6d9e7d585ce7c6121d01cb789ef08121238f8f8c97d467cb0a0cdb1079e65b4fabf61f3e0b0aad44c6974547356160f6bf5c005f8b03e6820c22900c65531e4eabef278a3eb53ecede91f1a589d7733c181865bedb680071bc75baa292e0fe61613cad05f5fee3e092d6993bc2942c172dbb981ee70af304370feb876bd5e2e6495ee9111ae9e9ddae01b5dc290d482c44a725a8bcbc830aee15f1866545c93604d6836c8f88e575907c5c4c9964ce733704e322182fe61bd8e9e5a6095", 0xc0, 0x8e0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @private0, 0x7}, 0x1c) 5m48.304411315s ago: executing program 2 (id=516): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x73}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040da}, 0x8080) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000015) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0xa00, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x40, 0x17}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000440), r3) sendmsg$NLBL_CIPSOV4_C_REMOVE(r3, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2200}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x8c, r6, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x78, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x49b19034}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x591aad72}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44e28568}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67b9cfb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x99}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x82}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d2a8f7e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5004bf5f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d86f273}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5fe4244d}]}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000005) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000600)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x64, r4, 0x16, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x64}, 0x1, 0x0, 0x0, 0x240080c1}, 0xc1) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x80, r5, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x5a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x10010) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r3) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r3, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x4c, r8, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x4c}}, 0x44010) r9 = openat$ndctl0(0xffffff9c, &(0x7f0000000a00), 0x80, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000ac0)={r9, &(0x7f0000000a40)="f4f610da62f2", &(0x7f0000000a80), 0x4}, 0x1c) syz_open_dev$sndmidi(&(0x7f0000000b00), 0x3, 0x448600) sendmsg$NL80211_CMD_GET_WOWLAN(r9, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x30, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x1d}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x60}}}}, ["", ""]}, 0x30}}, 0x20040905) openat$vicodec1(0xffffff9c, &(0x7f0000000c40), 0x2, 0x0) r10 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000cc0), r3) sendmsg$NET_DM_CMD_START(r3, &(0x7f0000000d80)={&(0x7f0000000c80), 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, r10, 0x10, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x4040010) r11 = openat$binderfs(0xffffff9c, &(0x7f0000000dc0)='./binderfs2/custom0\x00', 0x4, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r11, 0xc00c6211, &(0x7f0000000e00)) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_QOS_MAP(r12, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e80)={0xec, r1, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x1b}}}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x6, 0x5}, {0x5, 0x7}, {0x4, 0x3}, {0x1, 0x7}, {0x0, 0x6}, {0x3, 0x5}], "7fe49907e4e6203d"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x7}, {0xc, 0x5}], "6881d7b1fcf9eebc"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0xc, 0x3}, {0x7, 0x7}, {0x9, 0x5}, {0x0, 0x2}, {0xe, 0x1}, {0xfc, 0x3}, {0x40}, {0x2, 0x7}, {0x16, 0x3}, {0x4, 0x4}, {0x6, 0x2}, {0x7, 0x7}, {0x3, 0x1}, {0x6, 0x7}, {0x5, 0x4}, {0x9, 0x1}, {0x1, 0x2}], "3dbde78670bec992"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x6, 0x4}, {0xfa, 0x4}, {0x6}, {0x15}, {0x7, 0x2}, {0x4, 0x4}, {0x6, 0x4}, {0x0, 0x2}, {0x7, 0x4}, {0x0, 0x3}, {0x6, 0x5}, {0x4, 0x3}, {0x6, 0x3}, {0xfd, 0x4}], "850086a4a2e71d18"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x5, 0x6}, {0xe, 0x7}, {0x7, 0x6}, {0xb5, 0x1}, {0x4, 0x4}, {0x5, 0x4}, {0x6, 0x3}, {0x9, 0x1}, {0x6, 0x3}, {0x3}, {0x1, 0x2}, {0xff, 0x4}, {0x5, 0x3}, {0x28, 0x7}, {0x5, 0x4}, {}, {0x8, 0x4}, {0x6, 0x4}, {0xfa, 0x3}, {0x4, 0x6}], "8aea04d83cc3481b"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x3, 0x3}, {0x5, 0x1}, {0xfd, 0x7}, {0x2, 0x3}, {0x4, 0x1}], "fb56dfe7cb514cc4"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40085}, 0x20048005) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001000), r3) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000001040)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r9, &(0x7f0000001180)={&(0x7f0000001080)={0x1d, r13}, 0x10, &(0x7f0000001140)={&(0x7f0000001100)={0x2, 0x0, 0x3, {}, {}, {0x3}, 0x1, @can={{0x3, 0x0, 0x0, 0x1}, 0x3, 0x2, 0x0, 0x0, "d4d63532dbdf33ba"}}, 0x34}, 0x1, 0x0, 0x0, 0x20000181}, 0x40) 5m48.279300647s ago: executing program 32 (id=516): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x73}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040da}, 0x8080) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000015) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0xa00, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x40, 0x17}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000440), r3) sendmsg$NLBL_CIPSOV4_C_REMOVE(r3, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2200}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x8c, r6, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x78, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x49b19034}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x591aad72}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44e28568}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67b9cfb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x99}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x82}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d2a8f7e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5004bf5f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d86f273}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5fe4244d}]}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000005) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000600)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x64, r4, 0x16, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x64}, 0x1, 0x0, 0x0, 0x240080c1}, 0xc1) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x80, r5, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x5a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x10010) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r3) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r3, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x4c, r8, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x4c}}, 0x44010) r9 = openat$ndctl0(0xffffff9c, &(0x7f0000000a00), 0x80, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000ac0)={r9, &(0x7f0000000a40)="f4f610da62f2", &(0x7f0000000a80), 0x4}, 0x1c) syz_open_dev$sndmidi(&(0x7f0000000b00), 0x3, 0x448600) sendmsg$NL80211_CMD_GET_WOWLAN(r9, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x30, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x1d}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x60}}}}, ["", ""]}, 0x30}}, 0x20040905) openat$vicodec1(0xffffff9c, &(0x7f0000000c40), 0x2, 0x0) r10 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000cc0), r3) sendmsg$NET_DM_CMD_START(r3, &(0x7f0000000d80)={&(0x7f0000000c80), 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, r10, 0x10, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x4040010) r11 = openat$binderfs(0xffffff9c, &(0x7f0000000dc0)='./binderfs2/custom0\x00', 0x4, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r11, 0xc00c6211, &(0x7f0000000e00)) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_QOS_MAP(r12, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e80)={0xec, r1, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x1b}}}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x6, 0x5}, {0x5, 0x7}, {0x4, 0x3}, {0x1, 0x7}, {0x0, 0x6}, {0x3, 0x5}], "7fe49907e4e6203d"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x7}, {0xc, 0x5}], "6881d7b1fcf9eebc"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0xc, 0x3}, {0x7, 0x7}, {0x9, 0x5}, {0x0, 0x2}, {0xe, 0x1}, {0xfc, 0x3}, {0x40}, {0x2, 0x7}, {0x16, 0x3}, {0x4, 0x4}, {0x6, 0x2}, {0x7, 0x7}, {0x3, 0x1}, {0x6, 0x7}, {0x5, 0x4}, {0x9, 0x1}, {0x1, 0x2}], "3dbde78670bec992"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x6, 0x4}, {0xfa, 0x4}, {0x6}, {0x15}, {0x7, 0x2}, {0x4, 0x4}, {0x6, 0x4}, {0x0, 0x2}, {0x7, 0x4}, {0x0, 0x3}, {0x6, 0x5}, {0x4, 0x3}, {0x6, 0x3}, {0xfd, 0x4}], "850086a4a2e71d18"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x5, 0x6}, {0xe, 0x7}, {0x7, 0x6}, {0xb5, 0x1}, {0x4, 0x4}, {0x5, 0x4}, {0x6, 0x3}, {0x9, 0x1}, {0x6, 0x3}, {0x3}, {0x1, 0x2}, {0xff, 0x4}, {0x5, 0x3}, {0x28, 0x7}, {0x5, 0x4}, {}, {0x8, 0x4}, {0x6, 0x4}, {0xfa, 0x3}, {0x4, 0x6}], "8aea04d83cc3481b"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x3, 0x3}, {0x5, 0x1}, {0xfd, 0x7}, {0x2, 0x3}, {0x4, 0x1}], "fb56dfe7cb514cc4"}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40085}, 0x20048005) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001000), r3) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000001040)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r9, &(0x7f0000001180)={&(0x7f0000001080)={0x1d, r13}, 0x10, &(0x7f0000001140)={&(0x7f0000001100)={0x2, 0x0, 0x3, {}, {}, {0x3}, 0x1, @can={{0x3, 0x0, 0x0, 0x1}, 0x3, 0x2, 0x0, 0x0, "d4d63532dbdf33ba"}}, 0x34}, 0x1, 0x0, 0x0, 0x20000181}, 0x40) 3m18.607653138s ago: executing program 4 (id=1264): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/kernel/mm/transparent_hugepage/shmem_enabled\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='\x00', 0x1) 3m18.557537549s ago: executing program 4 (id=1265): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x109002, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000000180), 0xc8302, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'syztnl0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0x8000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10002, 0x1000000008000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8004, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r5, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x800000000000000, 0x0, 0x0, 0x5, 0x0, 0x8100000}, 0x0, &(0x7f0000000080)={0x1f, 0x2000000000, 0x0, 0x0, 0x0, 0x5, 0x6a9, 0x3ac8}, &(0x7f0000000280), 0x0) modify_ldt$read(0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000140)=""/60) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x2000002, 0x2, 0x2, 0x0, 0x3}) 3m17.39659391s ago: executing program 4 (id=1268): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004}, &(0x7f0000bbdffc)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000080)={r4, 0x80000000, 0x10}, &(0x7f00000000c0)=0xc) 3m15.382176005s ago: executing program 4 (id=1275): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000680)='/dev/comedi0\x00', 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b700000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688890687", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 3m14.433518225s ago: executing program 4 (id=1277): prlimit64(0x0, 0x3, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async) r0 = getpgrp(0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/sctp/auth_enable\x00', 0x1, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000500)="d9070000005523ff5577bb7be5757034acd9803314ccd475c9d34ea927b3b57c45b69acc6c0aa6f1106bcbf72acfacb9c4bf17dde5348b9ab3e83159cb6eb851c003e231b5710302569a352c3d6bbad96ad2ef7824b6e774a2cfc67cfb39c5093f7bef7017774048afa055fa050f678562011e987ce679518578801d7593d1452611a180399ea3a5cdabf9526b06cd85cfd8ca9c1d432122f41256a42284", 0x9e}], 0x1) (async) syz_ublk_setup_io_uring(0x345b, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x1, 0x376}, &(0x7f0000000000), &(0x7f0000000040), 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000240), 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) (async) prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) (rerun: 64) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="30fcb4de91437ffd15a894fc8f24000000200060dc28bd700003000000020000000000004b5c4753"], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x40804) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async, rerun: 32) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) (async) r6 = socket(0x21, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r5], 0x50}}, 0x0) 3m14.183110955s ago: executing program 4 (id=1280): mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) write(r0, &(0x7f0000000500)='1\n', 0x2) 2m58.618025818s ago: executing program 33 (id=1280): mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) write(r0, &(0x7f0000000500)='1\n', 0x2) 8.025913302s ago: executing program 3 (id=2070): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a, 0x0, '\x00', [@pad1]}]}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x28, &(0x7f0000000200)=ANY=[@ANYBLOB='max=0000000000040000000']) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014}) listen(r0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x4003}, {0x6}]}) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r4, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x41}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x18000000000002a0, 0x11, 0x0, &(0x7f00000002c0)="000000952ba300"/17, 0x0, 0x6639, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x24, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x31}, 0x2002888c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180200000800000000000000000000008500000027000000850000000500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e02742e8681985ff97b8745e9bd4", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r9, 0x0, 0xd0, &(0x7f0000000300), &(0x7f0000000340)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1100000004000000040000020700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="3f733eec0832bed598c2"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r10, r7, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000002180)=ANY=[@ANYBLOB="bbbb3bbbbbbbaaaaaaaaaa2886dd60361db300002b00fe80000000000000000000000006000000000000000000000000000000000001"], 0x0) 7.819830264s ago: executing program 3 (id=2074): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) syz_usb_connect$uac3(0x0, 0x135, &(0x7f0000000580)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x644, 0x800e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x123, 0x3, 0x1, 0x7, 0x10, 0xf8, {0x8, 0xb, 0x0, 0x0, 0x1, 0x0, 0x30, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x4c, 0x9}, [@extension_unit={0x9, 0x24, 0xa, 0x4, 0x3, [0x2]}, @power_domain={0x9, 0x24, 0x10, 0x3, 0xfff8, 0x81, 0x6}, @feature_unit={0x19, 0x24, 0x7, 0x2, 0x4, [0x5, 0xa, 0x6, 0x4, 0xe]}, @extension_unit={0x11, 0x24, 0xa, 0x2, 0x1, [0x6, 0x3, 0x2]}, @cluster_info_segment={0x6, 0x20, 0x1, 0x12, 0xc8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x81, 0x3, 0xba, 0x1}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xc, 0x2, 0x7, 0x11, '('}, @as_header={0x17, 0x24, 0x1, 0x3, 0x0, 0xa, 0x3, 0x3, 0x7a, 0x1, 0x29}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xf5, 0x1, 0x0, {0xa, 0x25, 0x25, 0x3, 0x2, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x0, 0xfa, 0x1, 0xff}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x8a, 0x4, 0x22, 0x9, "87a2"}, @as_header={0x17, 0x24, 0x1, 0xf6, 0xfffffeff, 0x5, 0x1, 0xc4, 0xfd, 0x9, 0x4}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x6, 0x3, 0x4, 0x1, "f0"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x1, 0x1, 0x71, 0x3b, "5428fe803f"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x2, 0x9, 0x2, 0x93}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xf1, 0xf4, 0xca, {0xa, 0x25, 0x25, 0x2}}}}}}}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x110, 0x86, 0x3, 0x7f, 0x78, 0x7}, 0xe1, &(0x7f0000000740)={0x5, 0xf, 0xe1, 0x4, [@ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x79, 0x0, 0xa, 0xf, 0xeb5}, @generic={0xc2, 0x10, 0x4, "f69f731f53f6bb915b05d590d05291d3da592c7e376a6133fe447535eff6d7407a1194f40a06382bc406924ed22cb50744aa53a7e2be87a9ecaddd9d134f6edb428e294fc487f27ce3246f0a06d12f54122c77c11616582321edddbfe9dfb6265759df74936e738d70b0cc52d644e7ee22433975bfc4cfccbca42793d289f4337eaf76ce9d2f229b85b15331e982b11eb08e56a37c29c876c0235a88a1ad7292c8510a9119d67a7643035241012da8ec4af40c80bb4ab3b41597eedb4bc16f"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0xa4, 0x2, 0x9, 0xa}]}}) 7.060317576s ago: executing program 0 (id=2079): sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x50010) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000140)={0x6c1, 0xffffffffffffffff, 0x80000}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x7f) syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), r0) ioctl$COMEDI_CMDTEST(r0, 0x8040640a, &(0x7f0000000280)={0x1, 0x40, 0x10, 0xe, 0x4, 0x800, 0xffffffff, 0x5, 0x100, 0x7a68, 0x10, 0x7, &(0x7f0000000200)=[0x4, 0x1, 0x3], 0x3, &(0x7f0000000240)="fa66289b1cc8f235e20c98", 0xb}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r1, 0xa1a, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x58800}, 0x24008004) sendto$inet_nvme_pdu(r0, &(0x7f0000000480)=@rsp={{0x5, 0x1, 0x18, 0x0, 0x3}, {@u32=0x3, 0x3, 0x9, 0x1602, 0x5}}, 0x80, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000500)) sendmsg$NFT_BATCH(r0, &(0x7f0000000800)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELCHAIN={0xd8, 0x5, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x80, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5e72cc82}, @NFTA_HOOK_DEV={0x14, 0x3, 'syz_tun\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'team0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'vlan1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6c560d0d}, @NFTA_HOOK_DEV={0x14, 0x3, 'pimreg0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'geneve0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2bb68ac}]}]}, @NFT_MSG_DELRULE={0xb4, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x3}]}}}, {0x20, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffc}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x54, 0x5, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xd9a5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x208}, 0x1, 0x0, 0x0, 0x4004044}, 0x81) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r0, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000008c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0], 0x0, 0x88, &(0x7f0000000980)=[{}], 0x8, 0x0, 0x0, &(0x7f0000000a00), 0x8, 0xa8, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) pipe(&(0x7f0000000bc0)={0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_ext={0x1c, 0x5, &(0x7f0000000840)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000880)='GPL\x00', 0x3580, 0x0, 0x0, 0x41000, 0x5, '\x00', r2, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x26ba7, r3, 0x3, 0x0, &(0x7f0000000c00)=[{0x2, 0x1, 0x5, 0x9}, {0x4, 0x3, 0x0, 0x2}, {0x2, 0x2, 0x2, 0x6}], 0x10, 0x4}, 0x94) syz_open_dev$vim2m(&(0x7f0000000d00), 0x4, 0x2) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000d80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0xbc, r4, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x810}, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000f00)={@empty, 0x11}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001040)={@fallback=r3, 0xf, 0x1, 0x71c7dae6, &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001000)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001080)={r3, r2, 0x25, 0x1c, @val=@tcx={@void, @value, @void, @void, r6}}, 0x1c) socket$netlink(0x10, 0x3, 0xc) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x3, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000010c0)={@fallback=r3, r0, 0x8, 0x203d, r5, @void, @void, @value=r7, @void, r6}, 0x20) openat(r5, &(0x7f0000001140)='./file0\x00', 0xc001, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001200)={'syztnl1\x00', &(0x7f0000001180)={'syztnl2\x00', r2, 0x700, 0x10, 0xec9, 0x6, {{0xc, 0x4, 0x1, 0x1b, 0x30, 0x65, 0x0, 0x8, 0x2d, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x14, 0xa9, 0x0, 0x2, [0x5, 0x57, 0x820, 0x6]}, @ssrr={0x89, 0x7, 0xd3, [@broadcast]}]}}}}}) r8 = syz_open_dev$dri(&(0x7f0000001240), 0xfffff339, 0x10000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r8, 0xc01064c8, &(0x7f00000012c0)={0x2, 0x0, &(0x7f0000001280)=[0x0, 0x0]}) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000fff000/0x1000)=nil) 7.050472486s ago: executing program 0 (id=2080): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x9, 0xd75, 0x1, {0x1, @vbi={0x8, 0x8000, 0x3, 0x41416770, [0x82, 0x7], [0xc153], 0x1}}, 0xd3}) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r1 = epoll_create(0x5) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x11}) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x17) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000000a64000000060a0b1600000000000000000200000838000480340001800b0001006e756d67656e000024000280080004400000000b08000340001c0000080001400000001608000340089dd3850900010073797a31000000000900020073797a22000000001400000011000100000000000a00000000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x440400c1) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) close(0x3) openat$qrtrtun(0xffffff9c, &(0x7f0000000000), 0x100) syz_open_dev$ttys(0xc, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) 5.994436781s ago: executing program 0 (id=2083): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002bbd70007bdbdf3502000000050001000000000060d2f24b992779a106328c63c7c8d267e67ae2a3bec97eeceb3397d22481e0af7906a7a2b1f3a5adcccda2245a100c989bbdc883e9b5836720b87f818bab7930011516000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4044005}, 0x840) 5.891592845s ago: executing program 5 (id=2085): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000180)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}, {0xc0000001, 0xbe4b, 0x4, 0x5, 0xee, 0x80, 0x7}]}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [{0x1b, 0x0, 0xfee00d00}, {0x832, 0x0, 0x40000}]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 5.812560366s ago: executing program 0 (id=2086): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_open_procfs(0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004}, &(0x7f0000bbdffc)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000080)={r4, 0x80000000, 0x10}, &(0x7f00000000c0)=0xc) 5.812063929s ago: executing program 5 (id=2087): socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) ptrace$poke(0x5, r0, &(0x7f00000000c0), 0x7) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="3c3f47f4f66f", 0x6}], 0x1, 0x0, 0x0, 0x4040055}], 0x1, 0x0) r5 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x129d01, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000180)) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x7}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r0], 0x48) openat(r1, &(0x7f0000000300)='./file0\x00', 0x600200, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) 5.647166109s ago: executing program 1 (id=2089): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x50000, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r5, r5, 0x0, 0x20003f) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x8d, 0x8000, 0x0, 0x11030, 0xffffffffffffffff, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x9, @void, @value, @value=r3}, 0x50) sendfile(r6, r6, 0x0, 0x1002000ff) r7 = dup(r2) syz_ublk_setup_queues(r7, r1, &(0x7f00000002c0)={0x0, 0xfb87, 0x400, 0x3, 0x32c}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x40, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r0, '\x00', {0x0, 0xd3, 0x0, 0x0}}, 0x0) 4.91460932s ago: executing program 5 (id=2090): syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x28, &(0x7f0000000200)=ANY=[@ANYBLOB='max=0000000000040000000']) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x4003}, {0x6}]}) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r2, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x41}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x18000000000002a0, 0x11, 0x0, &(0x7f00000002c0)="000000952ba300"/17, 0x0, 0x6639, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) 4.690424417s ago: executing program 5 (id=2091): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) syz_usb_connect$uac3(0x0, 0x135, &(0x7f0000000580)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x644, 0x800e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x123, 0x3, 0x1, 0x7, 0x10, 0xf8, {0x8, 0xb, 0x0, 0x0, 0x1, 0x0, 0x30, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x4c, 0x9}, [@extension_unit={0x9, 0x24, 0xa, 0x4, 0x3, [0x2]}, @power_domain={0x9, 0x24, 0x10, 0x3, 0xfff8, 0x81, 0x6}, @feature_unit={0x19, 0x24, 0x7, 0x2, 0x4, [0x5, 0xa, 0x6, 0x4, 0xe]}, @extension_unit={0x11, 0x24, 0xa, 0x2, 0x1, [0x6, 0x3, 0x2]}, @cluster_info_segment={0x6, 0x20, 0x1, 0x12, 0xc8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x81, 0x3, 0xba, 0x1}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xc, 0x2, 0x7, 0x11, '('}, @as_header={0x17, 0x24, 0x1, 0x3, 0x0, 0xa, 0x3, 0x3, 0x7a, 0x1, 0x29}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xf5, 0x1, 0x0, {0xa, 0x25, 0x25, 0x3, 0x2, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x0, 0xfa, 0x1, 0xff}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x8a, 0x4, 0x22, 0x9, "87a2"}, @as_header={0x17, 0x24, 0x1, 0xf6, 0xfffffeff, 0x5, 0x1, 0xc4, 0xfd, 0x9, 0x4}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x6, 0x3, 0x4, 0x1, "f0"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x1, 0x1, 0x71, 0x3b, "5428fe803f"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x2, 0x9, 0x2, 0x93}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xf1, 0xf4, 0xca, {0xa, 0x25, 0x25, 0x2}}}}}}}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x110, 0x86, 0x3, 0x7f, 0x78, 0x7}, 0xe1, &(0x7f0000000740)={0x5, 0xf, 0xe1, 0x4, [@ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x79, 0x0, 0xa, 0xf, 0xeb5}, @generic={0xc2, 0x10, 0x4, "f69f731f53f6bb915b05d590d05291d3da592c7e376a6133fe447535eff6d7407a1194f40a06382bc406924ed22cb50744aa53a7e2be87a9ecaddd9d134f6edb428e294fc487f27ce3246f0a06d12f54122c77c11616582321edddbfe9dfb6265759df74936e738d70b0cc52d644e7ee22433975bfc4cfccbca42793d289f4337eaf76ce9d2f229b85b15331e982b11eb08e56a37c29c876c0235a88a1ad7292c8510a9119d67a7643035241012da8ec4af40c80bb4ab3b41597eedb4bc16f"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0xa4, 0x2, 0x9, 0xa}]}}) 4.339406073s ago: executing program 3 (id=2092): fsopen(&(0x7f00000005c0)='befs\x00', 0x1) syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) syz_io_uring_setup(0x278, &(0x7f0000000340)={0x0, 0x0, 0x13580}, &(0x7f0000000100), 0x0, &(0x7f0000000000)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0x80000003) r3 = dup2(r2, r2) read$FUSE(r3, &(0x7f00000063c0)={0x2020}, 0x2020) 3.500917877s ago: executing program 5 (id=2093): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x9, 0xd75, 0x1, {0x1, @vbi={0x8, 0x8000, 0x3, 0x41416770, [0x82, 0x7], [0xc153], 0x1}}, 0xd3}) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r1 = epoll_create(0x5) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x11}) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x17) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000000a64000000060a0b1600000000000000000200000838000480340001800b0001006e756d67656e000024000280080004400000000b08000340001c0000080001400000001608000340089dd3850900010073797a31000000000900020073797a22000000001400000011000100000000000a00000000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x440400c1) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x8, 0x9, 0x0, 0x600, 0x80, 0x89, 0x8, 0x8, 0x8d], 0x100000, 0x240246}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) close(0x3) openat$qrtrtun(0xffffff9c, &(0x7f0000000000), 0x100) syz_open_dev$ttys(0xc, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) 3.232203738s ago: executing program 0 (id=2094): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/dev_snmp6\x00') fchdir(r2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01320136b1ff"}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_dev$vcsn(0x0, 0xffffffffffff8001, 0x40) r3 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) lseek(r3, 0x6, 0x1) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40440, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x66b9, 0x2, 0xfffffff8, 0x3, 0x10001}, 0xb1, 0x0, 0x7ff, 0x10, 0xffff49cd, 0x9, 0x7, 0xf, 0x7, 0x3ff, {0x5, 0x7, 0x8, 0x5, 0xc, 0x8}}}}]}, 0x78}}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="12010003a92e0c10ba110310c2140102030109021200c20a3dd10525005814010a07e040"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x7, 0x3}, {0x0, 0x2}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8810}, 0x40004) 2.9826073s ago: executing program 1 (id=2095): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000180)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}, {0xc0000001, 0xbe4b, 0x4, 0x5, 0xee, 0x80, 0x7}]}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [{0x1b, 0x0, 0xfee00d00}, {0x832, 0x0, 0x40000}]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 2.982302349s ago: executing program 1 (id=2096): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x23) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x702, 0x72, 0x0, &(0x7f0000000040)="e460334400005000eb00c15286ddea7b03c6b8564a1ef1cef05bdaa5958a2cb1087dad203447dba73666d209bd02246fe3e0f3be78a37ba851da39f7594a66e7ab3666ee250fa7d5595238df44f22828d26e2591592d02f875b0cea9b4cbbf37fcd33bb7c668e43a945608d8ea0da812d7c7", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.024662218s ago: executing program 1 (id=2097): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000280)={0x0, 0xd601, 0x0, 0x0, 0x391}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbc22, 0x1, 0x1, 0x26, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x285e, 0x4, 0x2, 0x121, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x63fe, 0x2, 0x2, 0x175, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8b7, 0x40000, 0x2, 0x87, 0x0, r1}}], 0x4, 0x0, &(0x7f0000003100)) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800)=[{}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5a46}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x10000}}], 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, &(0x7f0000000b00)) 1.952840717s ago: executing program 1 (id=2098): socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) ptrace$poke(0x5, r0, &(0x7f00000000c0), 0x7) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="3c3f47f4f66f", 0x6}], 0x1, 0x0, 0x0, 0x4040055}], 0x1, 0x0) r5 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x129d01, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000180)) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x7}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r0], 0x48) openat(r1, &(0x7f0000000300)='./file0\x00', 0x600200, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) 1.012415826s ago: executing program 1 (id=2099): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x40080) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x50000, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r5, r5, 0x0, 0x20003f) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x8d, 0x8000, 0x0, 0x11030, 0xffffffffffffffff, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x9, @void, @value, @value=r3}, 0x50) sendfile(r6, r6, 0x0, 0x1002000ff) r7 = dup(r2) syz_ublk_setup_queues(r7, r1, &(0x7f00000002c0)={0x0, 0xfb87, 0x400, 0x3, 0x32c}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x40, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r0, '\x00', {0x0, 0xd3, 0x0, 0x0}}, 0x0) 940.624161ms ago: executing program 3 (id=2100): socket(0x10, 0x80002, 0x0) io_destroy(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xcf, &(0x7f0000000000)=0x42c8, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r5}, 0xc) r6 = dup(r3) syz_ublk_setup_queues(r6, 0x0, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x1, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) 936.360284ms ago: executing program 3 (id=2101): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x40080) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x50000, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x20003f) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x8d, 0x8000, 0x0, 0x11030, 0xffffffffffffffff, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x9}, 0x50) sendfile(r5, r5, 0x0, 0x1002000ff) r6 = dup(r2) syz_ublk_setup_queues(r6, r1, &(0x7f00000002c0)={0x0, 0xfb87, 0x400, 0x3, 0x32c}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x40, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r0, '\x00', {0x0, 0xd3, 0x0, 0x0}}, 0x0) 412.663545ms ago: executing program 5 (id=2102): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_open_procfs(0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004}, &(0x7f0000bbdffc)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000080)={r4, 0x80000000, 0x10}, &(0x7f00000000c0)=0xc) 182.886406ms ago: executing program 0 (id=2103): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x50000, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r5, r5, 0x0, 0x20003f) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x8d, 0x8000, 0x0, 0x11030, 0xffffffffffffffff, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x9, @void, @value, @value=r3}, 0x50) sendfile(r6, r6, 0x0, 0x1002000ff) r7 = dup(r2) syz_ublk_setup_queues(r7, r1, &(0x7f00000002c0)={0x0, 0xfb87, 0x400, 0x3, 0x32c}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x40, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r0, '\x00', {0x0, 0xd3, 0x0, 0x0}}, 0x0) 0s ago: executing program 3 (id=2104): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r0 = openat$dir(0xffffff9c, &(0x7f0000000100)='./file0\x00', 0x200, 0x12) r1 = open_tree(r0, &(0x7f00000002c0)='./file0\x00', 0x0) recvmsg$can_j1939(r1, &(0x7f00000007c0)={&(0x7f0000000300)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000380)=""/113, 0x71}, {&(0x7f0000000400)=""/12, 0xc}, {&(0x7f0000000440)=""/74, 0x4a}, {&(0x7f00000004c0)=""/70, 0x46}], 0x4, &(0x7f0000000680)=""/240, 0xf0}, 0x12000) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/nvmet/subsystems/subsys1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/nvmet/subsystems/subsys1/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000002200)='./config\x00', 0x2042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/nvmet/subsystems/subsys1/namespaces/1/device_path\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='./file0\x00', 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/nvmet/subsystems/subsys1/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='1\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/nvmet/subsystems/subsys1/namespaces/1/enable\x00', 0x1, 0x0) write(r5, &(0x7f0000000200)='1\x00', 0x2) write(r5, &(0x7f0000000200)='0\x00', 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000180)=@qipcrtr={0x2a, 0x4, 0x7ffe}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000016c0)="27031c00160014000000001106afacf706e105400000894f00050003ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c36505968f28a4894f", 0x3a}, {&(0x7f0000000200)="22ea7e01f370d458bc5f5da8f814e3ba81f4d19edcce18b75bf5034bb80875257d68b199f247eac81ab52f03e698103d9d1cf70127eda16f2c7017285d0e1b1dabc9ec2db03ed73c3145e66741edb84de748c1341f383840698a3fb95e9b1aaf2bb8cb0191e7e392db050fa06124f73d1c9276bad26884d4208acc499b17a4d62f2bbb14db3e0007478df45cff3aa28b8e92621be927ca29819deea491e2b0b1a275e2c1ac4ff8c3", 0xa8}], 0x2}, 0x8eec3816282631eb) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_NESTED_STATE(r9, 0x4080aebf, &(0x7f0000000080)=@vmx={0x86, 0x0, 0x2080, {0x2000, 0x58000, {0x2}, 0x0, 0x9}, {"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", "7f964030bf888197d65414276eba1e19c0a82cfb0d6cf9990a12900bc08c564f1b109f5135eda4021ee6f0fcf834ee1482b25123a8d629a3e06b02d72f72786394f6b07ef2c02d4cedd91c1da8b6f7e3fd1f8b168073f79df2591fe73e07cadc7d0a69cdbfe3165e145a6a41b5cab79dde1c854bb78279db2b5d7b45382e9023a29c0162a7db94528b7fec12b12948b070ce7dff07674616e0249aeef378579fb3a4084a3da6e9fab3449e4645ef91e79b6381b97570ebb38fbc6e9ffbb3048d98b61e4c45dbdcde719a73e8c0a075fd853b0fd6fa271d4a6ca585471599d2198d7ab5d5bda8600cb238386482c1674cacaed9aab43f2702e1e9b7c91c4e020a35ee635a2e48732e3beea670f5753ec83723b783dff33151a7f9d109ec2d2ce17cb1d761efb9a0d0460799af32c28306a44f87b4f6608e4c18cbd0407f59b5a4d60f10cc5c7cfb1e0b768bf314a1923597956977723dd02d362faea73d9a1739014b0a0fd1d9ddd2bef1c64cd1e1c13cb1806aa770be193eda9c4916f055fbed77d0773695cc7440aeaa7842847d9d29e66028a93c9f28127232c9b8ffd931ca4f72fc67b724aa332397bc222b209b3aba1bb83df0d05e34d3d5cbaa3c72f7948159c24edcb8bcda79ca7270cf8b99c18b2fe244bcefb59cb2209d80a0bf3ddaf3b6f43b36239d0c4f066b76c38195635a5cef4410e930798d04615ca33edd85a061e170c3e20c364f0d48742576e0b4281345a75309e67d6d8ba6adf6b7c4a3d9938cbaec0bb5d527e0b9f6cc3e69ad73b777f1bc303a1a87731c74da8bcd8279a1c5de46d14464e910af77e4ea601739a78f4ba73b93985ca08a0a9569f712ccd8c529fff3d4a6814b571d615bb3d8e22e46177bca72e8e44ffd86d82831dd4c50d19f9515c13824cb99414bde697e9fc8f31f0dbe6f54abb181a7b5fce1322097df1b6a6aeb16eb8e50716ff7bc2fe9da887ddaafc19d8d427ffa2af6fc184424e97821072f728f3d168075f30fd5b107a47ad05594e838f410ab9e60af3c5e8d928a205041401c9e334eaae96faea970b6fca37c3a7e31eaf45eee1a21490862a72deaf9e3e3bd2b4ba74b342678e8211b57e1ae959cf3bead43282a04796a47608a822fe75718e073664e6cb449dee86986e10a56227bad28cf909f58f728298d359a1d3cec53c0d89f3642d77a30534b7a1e6dd3264da0d9ccc6e7f495059d01bd941b69ce8703107f7fd3322f36835ba51c31447b9f5354434b8e3d3089ba8f36d11c9bb9ef7eff2f485c2ed52cd305c8002362da03f40c189a0082408db095509c09dd7bcb36a49548473278c78a0f51583a9722469a358d0c8731be7af3e95956b8817f8f538f50dceb33ae98afcc5a363a45090fd85306d670e086a6283e3a4644964292b03794283c89969d8636ce294863b473e5573328dcb3bf20a5d86d204eb05d15ed0c207e8955db65c0a098fe492eb7b889d6871943c8a7d1aa6ff7109d890e66652e7ccec2ec90a94d8b1c7a37cc9a78b66114258c46a800d324a0aa7f16a629e723eb512602b353176d9d1eca97c9f1b41c7bde14c777db12c40e5c2ba422349615ff43a69b1da94b4455c67a99d6592db0073744760bc3c23d48b0d2066c5c59492182b43bb1e701ab4c660c36222d0cf3d9bb15dfa876f2b24b9944874ceab36cf103fa18bce71cfb3c8b2fa1391b554139fe405afe518db30f442ce0186d9db897e9bf5f14edc10b6524c9a166cf8cd968790dc87ffe6a4e616ff8726ad5a9199ee440ee804e9a484bf8b69941f31457ec91096ea92d7ca1a038155f4f42c357c62ae50c9c99a922b31de2eb3da094e836177ba19aff4e39c19f2dbbbef4cf0a4b7a29187aaf76253f4da486c1037610cddc7efe4a1d3bd7ac6dbc78e838ab040cfd953af019b6cfc71de4fe48901d451105726f0b16fb44589702ae55f43d5c67af048cb099f769a5bdf2c797e0e1d93d294820056409d6c785aed1b1b7cd93fe73ec8d55f42c481f5307f582198429d9c0dbab63da7436456aa2f98ae205ab2a1c92900ffbc26cd1b86c6bd5ecc48032d8f7901e59e9da8f57f5fd283d2cd5c00d306f9081ad32cf4089a8806cc2e1032526efe9ce7cf7dc81bf8390e5cebc22c4a7e3f55303324e84d2d2765fe1c1b49f67807c31e4eae454d531657897a99f34c38236333ccdfadbcf37a5ea7750634e5ba386908303796b9e627a9030e5c5224a2a3a49cba970fce537cb9748d5e0bb5bafbfa2edb06b84e3e619723b0a390a66149cd0530a00f5d070eccd8fde2ce8b0555a95f124f015cd4213359d3ec49b5a4ed4ccb79343a2c6b967decbc476ab78ac5e5b08ee794347012efd0f5ea80015d8c952f02651fe5148496719e1b98aba958d2818cdf39f6aad1e693d707affc28eff7a48125510016cea3eff808a3ee30a6c21c0d0c9fc5d8f9f6b02c3c3d973153a699d3fa10af1cb5756ed330d04843c3253bff5e2a147f505dab5e364b860d8d7eb7ac95de8b8e2b09dd8a87738a34f5ae7064ecb930c1ebc2acbd2c4afb72468982c207613f60f4cbbb9d1a8e08fc1d3c3e74c1127bce8a543a20f3923ad6f90489be827430c0531076a985ed2eaca28a4972c18686f500c74b1e7ba21aadcfe59eb38a9221e25d92dc9279b43790f421872f44215541fb2af25560912f54dee04b8a441d2000ae3a81dd356403cf44d23057832705d84ad36e9163f9fc4f25bd480483c1dc90905a40ddc3a26ff60f5052a9d930d773981f56c25df4fc4aaae44f8e0ead79db23e3baf4e75ed6fcea4fabfa1aa57bf5761279b67308eca94a3638b658ebcc4f470814540ed0cfa797a434065c44fdba28325e9eca7fa92d9305f9cde49ea96c90f8a038fa33f64c3b24c22c03300e142c5b64802c40ac8b34b1c54d70738ffe20b81aafeaabc3fd57d5273bc786b111f4d789079ded94f1f4281f5b68c9bd03c556724a6346012973e0d3f786ae7c69deaffc38c5d06b6e01d2cd7e6b1eb3ae6afed36658622a2260de243cf8d7f53839d71d7695c5ec5af437ee66dcf124df9092a0089a464b57bdd72073210e0347a9b138ee2f6a16a773e19cc757517a7291bf60ccad29b4e83954884eccc2003e37b40af46e7a13a9b30490f2a92637d630710d3990e90a41f40a068e8f5b81ab1e7db7a74ead03b449a5b8d0243701027352cec1112a83a28efac5204a9d5bdf2f17fe0ed4003e4c4cb6b6991631698250a9c06a37761902002492d8f7eb398b4324cfa7d8f66ce643efb5e77d0356dcc81c437d340a71534d50bed1dd365c89e4e0d456ed81dd27a3f1b9114c6693768753aac9e7e621682730276d857d391d5160a4a895f9438ea83b8d79d6022ca763ac2a73bc4015610c7247ba37abe09f7107bc0fa143d460abf3a03bae2838ea03e56428049eb2099722acaf8948bfbf23cac3939ac52d446c3795b2e751ce5668105abedb5e16b931cd546e5dde567b49dccddc6eb7c784cdc80812e0eea45dd1044684b8960b17cb4a33e5240e6832f132d67ddab03dd9323f945aabbf6c3fd5a05afd0b427c58968a0d4c073a1f4be5d1f432bb1d69b95fd6ff48e2272dec396ff5c1b133f63dac9f508fd9edb4f191b76c2e6f33c0c3e64fa2917671b65d6f0e19b706bfe34735efe9d08ce908ccef41c2b67610b3bb99760717bda98593920934e337ad2974cbd7f805564a20cba8d5f275499103c46e20fe1c0c2ee9ca05f1a9aedc9c458eb36a5780a9e42648f2d83c56b468db4a22c1cfb83dc79a01478ba7a6ab75412c35c32f77b25f3a3dc19cfd02159990b621a68e1579364c8505961536d9abeea125403f1c5163bbad065459209f46cc189c0f3bcf7d018cb17a2d33263e88da2852f204f0ead616ee24ee8aec5a94f10f5fb9a110d648ddf8d5913b60b41617fbb062a2b558bef715e10e9e7a5721f9e03a335164ad71bca10b46ae915c7ff5931de825bc1ae25565a03464644bc4eda9423d9209a601c3f572aee10d076975c4cdecde21fd081cc4cb26b558641a742cfcfec00e078dfb7c2fbe02e3e109c342b65e9641a51988a4bb900808e365f9662b72711e46bfdc8165794039eb529313e900f9e5f735aa2ceed5a972953982896e7941c49400b0fe554645606135cc18aad193acfe8a518ef22be2852888ace51dfed47bde55c5c1817c56e4e846f1c7e649140392a243adf5ba3eab302d2a96dca2ba052e7e0b2f4930d81560a4a7c89ad3b9737b5da0fdb9262ce46a02e9862c032da32923c01ac389168f8b0cae9821fc692a599607f1c3a924c625e16a843346159a0727056f364bcd69d87ddb3bad9e91bf4303fcf67dd9130d5913f4c36b15fb069abf403669f6c91d0a46dca8e38612b6080e44b528591ccbbd4532b7f4623779d15937e2652623c0aad0630ab6fa4ac74826d9d14e13e0cdf14ac31329b5a78868d305b214b151b94ce9a395f58bf24b0c0bb16e38d197af6dac2689538b927057ad83193b089ca0327880b8794849debd9ccda030280cbb8124f1559ea1f95146742de398270f1a2241fd68cd15f43ac60f117e9783e19075fc0b6fe8d45510227c6c599f9f591b4775abedf1243363e944c70df785979c8e4bfeca9a5a9bf74b056ef88960ccd869bb3f2f594b7aeff2635181a7c09b2c191bb2c03eb011d260a62b0d97d8d00e7214828fc4626266fdc2c41bb38f6c6cb09486773ae96e0eb0cfb56713b0ff5196234c57c56016e5dcb1ad6524e4d313b20b562c629496f90ee6071a5653b9d0d1c530f31aa7179028d86f28f103908ae2a4b0ad3e085ef838f4c7d527fca54d3df6edd10b4f61b27ace38a5f679259d7e2a92f5c39795a85ccff1341d29deaf18d360f47631bd8f7874725e3fe060f0baa6a57db73956516ca908ed5e331bedc54467b7b424f3ae7acf28e973903ff2701bb828eb4e344afa929086f7e7bdccf3190fe460e2ca5c55dca95b3f4911ee44c9ff1a5732f8c764aa432c443cf5f8d24a5499ac3df78a719c9451146be5e56106a05d2e3dc75935c824e2fe0ea573631ad3a91952b3a474a44420c7c684002b9cab6f327e7780d508e21d4c9ba4dd01586d115af46cd96c61cd7e9d409569648fb9685ae30330099cdc70fe4b645e2050938828cbbef09f06e7cac38b29efc23c59644920411eb73e379564ce7d78f8cdd06e4bcfb7a1fc35fb45be4af9fe5122ca48e6f6560c71bb04a29cbf862fe44ad3867be64dadb6a185298d39e59be45b9b6556adbb9ee8b066e77453a11bc12da15c77f1f09e78368a57014ef11d388867816d5bbd6c7170713d9ad5598cdc23b1bdb4ed894046ac00c9589f971b7929926360035321f9d8e5e463cbe94466c57268629111a654324a734440f8771dd3afe33ba59f4e0e9f702c88237618376e7f7d7312688d685746cc66dfaf2b7f6e8acc8d7e72e620e10de3b010d1cb85d77a9c8375e260d59c06d9a2d4382318f022f77be6eba7eedb5a46df5a18ff14a3af02b3d5d2f5a36b1e843199678d79e320d2383aae2f96ca147fa393999bf454cc1dd6ab874ee18b59fb24d12b2e0d7f350b47a9de7861a19d1ef6adac9021ad8a9fa90ddc22ce1f2039877fd3383b3a77361b12ef4c83bdcbeb8d471ac761254ea61c6e4dd47747e957eb14de83b081daef64d6fa3993401bb243b68c3f14165962d0cf0e283aaa2667b6c072c7a77f1985455a85e61037e01df3374eaffeea1e08952d92db967c3715c4c4cca3eb0c4339a1c8f27e5f6d2f98a6603ebdcb858b54183"}}) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000180)={r1, 0x0, 0xe5, 0x0, &(0x7f0000000000)="070d2de48e2f1ee5d7a6abd624d75512c42f9ea929fe12fef49dafc28747fd255b66873401de302a70ca3642d35ee24618107293478c6b97554ea1bc473e417203ba7959d3f81d84020dd3b8e41c284ddb1aaceb2c047fd6e3ab865b3b291b1ee2f5962e65f9cfaadddcc7af01d24ef108f0ee3cce1d4b31dc0a2fc2412ab2df7c655ab24a73179821eb155e7dac5fe7cefdc42ae4792eb4ee5c50474af0a42c9c9ba4681b67dde3766f2be01ce827b7fc382c89b3495cec547e8690ee6996254c09ca315f131e18923bd9bd781ed80eb65c19207c4883926dbff6fb0ca3fbe96e35b5dea5", 0x0, 0x1, 0x0, 0x57, 0x0, &(0x7f0000000200)="60b70533be3efe1c4330af25f4bd2e8762330600000094cffbad904f70aa2db1caffb4e5eaba708288003bcbd8a1c338afe31cf6c7fe3e3bf7555430ff2e3d761fed4849731b009db0d7049300"/87, 0x0, 0x2, 0x0, 0x6}, 0x4c) syz_io_uring_setup(0xf00, &(0x7f0000000300)={0x0, 0x5961, 0x80, 0x2, 0x3c9, 0x0, r2}, &(0x7f0000000100)=0x0, &(0x7f0000002240)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000280)=@IORING_OP_SYMLINKAT={0x26, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, r12, &(0x7f0000002180)=@IORING_OP_BIND=@ipv6={0x38, 0x54, 0x0, r4, 0x1c, &(0x7f0000002100)={{0xa, 0x4e22, 0x0, @remote, 0x4}}, 0x0, 0x0, 0x1, {0x0, r13}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): [T11659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1463'. [ 357.252554][T11659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1463'. [ 357.261307][T11659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1463'. [ 357.266628][T11659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1463'. [ 357.271722][T11659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1463'. [ 357.566372][ T5842] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 357.757921][ T5842] usb 6-1: device descriptor read/64, error -71 [ 358.035997][ T5842] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 358.186132][ T5842] usb 6-1: device descriptor read/64, error -71 [ 358.300021][T11664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1464'. [ 358.316424][ T5842] usb usb6-port1: attempt power cycle [ 358.544514][ T42] audit: type=1800 audit(1785903253.133:6789): pid=11669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1465" name="mem_sleep" dev="sysfs" ino=581 res=0 errno=0 [ 358.625309][ T42] audit: type=1800 audit(1785903253.223:6790): pid=11669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1465" name="remove" dev="sysfs" ino=2467 res=0 errno=0 [ 358.676146][ T5842] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 358.826042][ T42] audit: type=1800 audit(1785903253.423:6791): pid=11670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1465" name="rescan" dev="sysfs" ino=820 res=0 errno=0 [ 358.926422][ T5842] usb 6-1: device descriptor read/8, error -71 [ 358.965644][ T42] audit: type=1800 audit(1785903253.563:6792): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=2465 res=0 errno=0 [ 359.046175][ T42] audit: type=1800 audit(1785903253.653:6793): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 359.176001][ T5842] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 359.206399][ T5842] usb 6-1: device descriptor read/8, error -71 [ 359.316952][ T5842] usb usb6-port1: unable to enumerate USB device [ 359.469727][T11681] usb usb8: usbfs: process 11681 (syz.3.1468) did not claim interface 0 before use [ 359.921299][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 359.921312][ T42] audit: type=1800 audit(1785903254.523:6797): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 360.032148][ T42] audit: type=1800 audit(1785903254.633:6798): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34969 res=0 errno=0 [ 360.062170][ T42] audit: type=1800 audit(1785903254.663:6799): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 360.254432][ T42] audit: type=1800 audit(1785903254.853:6800): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 360.790853][ T42] audit: type=1800 audit(1785903255.393:6801): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 360.830571][T11696] team0: Port device dummy0 removed [ 360.834332][T11696] bridge_slave_0: left allmulticast mode [ 360.837683][T11696] bridge_slave_0: left promiscuous mode [ 360.839740][T11696] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.887036][T11696] bridge_slave_1: left allmulticast mode [ 360.889549][T11696] bridge_slave_1: left promiscuous mode [ 360.891775][T11696] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.899996][T11696] bond0: (slave bond_slave_0): Releasing backup interface [ 360.923506][T11696] team0: Port device team_slave_0 removed [ 360.924211][ T42] audit: type=1800 audit(1785903255.523:6802): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=156336 res=0 errno=0 [ 360.935383][T11696] team0: Port device team_slave_1 removed [ 360.940039][T11696] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.943227][T11696] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.988320][T11696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.990939][T11696] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.996521][T11696] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 361.040921][T11685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.619699][ T42] audit: type=1800 audit(1785903256.213:6803): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 361.681463][T11703] usb usb8: usbfs: process 11703 (syz.0.1475) did not claim interface 0 before use [ 361.698277][ T42] audit: type=1800 audit(1785903256.303:6804): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 361.706393][ T42] audit: type=1800 audit(1785903256.313:6805): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34919 res=0 errno=0 [ 361.775986][ T42] audit: type=1800 audit(1785903256.373:6806): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 361.926300][ T29] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 362.089450][ T29] usb 5-1: not running at top speed; connect to a high speed hub [ 362.094574][ T29] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 222, changing to 4 [ 362.099056][ T29] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 362.103947][ T29] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 139, changing to 4 [ 362.113251][ T29] usb 5-1: New USB device found, idVendor=0499, idProduct=1055, bcdDevice= 0.40 [ 362.117306][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.120821][ T29] usb 5-1: Product: 䥼ꩌ擁ゔ菈⥳⻮⴪ᥩࢄ놙踾㽎骡氀ﬔ㭾撼㲺镗㊀ꥅ斲䃦逯Ꙁ୞䁇枞핖㐈穸⍿㫡騣뗓贒怑稓╰᪥ホ験狞ޠ荈㑴螹ᢙ쒪┛慁᳹ᡳٛﮈఢ㶎琚낱蒡ㆬ⺳劂䎷ꉦી필슗冻㔠毪阰ϸ珸따㌎䊮ࠩ㥺ㅼ罅☠憐銌痚㐒桸娬ᠼ崕⢪ࢩ롧豠뻰窦胱׾ﵑ➑֛썓吏㮶掽⇫₝ [ 362.134910][ T29] usb 5-1: Manufacturer: 쵑㳖헩杞尷䦎꜓묛။Є尔ⷄහ⡰Ꮝᴥﱘ뉲볥㨿ꁏ㯎ዚ䄐숳匟㵕鿚苋卲嬵및爡싻ᑋ孭ԏ᲋ᯂ谛⁆◐᧶ȃ쟮谱⇿侤ꌂ [ 362.142830][ T29] usb 5-1: SerialNumber: 盧ࡸ䞳ꤠ陵豰뒱㱤ت珰壱떄६몢佝ꎓ偸䨃԰攷팪渋㦎ꠝ烨ࣷࡈ蒇㳚坖ك秙⇇弓绮삊ᶜ소냼鉒Ŋ顢૓弦䂪볐Ǭ刔ᦃ⊳읔电뷱巓筣㰿欬썆槙ỿⒸ嵳᫡쭵듗ꊑ驷쮂㶽␈䖋꭯坑뙬羊甊ﵔ塩 [ 362.296068][ T5823] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 362.416755][ T29] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 362.419372][ T29] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 362.424774][ T29] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 362.427309][ T29] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 362.432485][ T29] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 362.456431][ T29] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 362.460403][ T29] usb 5-1: USB disconnect, device number 39 [ 362.468098][ T5823] usb 10-1: config 0 has an invalid interface number: 69 but max is 0 [ 362.475508][ T5823] usb 10-1: config 0 has no interface number 0 [ 362.479484][T11033] udevd[11033]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 362.481086][ T5823] usb 10-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 362.493707][ T5823] usb 10-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 362.500471][ T5823] usb 10-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 362.504099][ T5823] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.507584][ T5823] usb 10-1: Product: syz [ 362.509282][ T5823] usb 10-1: Manufacturer: syz [ 362.511248][ T5823] usb 10-1: SerialNumber: syz [ 362.515273][ T5823] usb 10-1: config 0 descriptor?? [ 362.519782][T11710] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 362.525182][ T5823] cyberjack 10-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 362.541945][ T5823] usb 10-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 362.726174][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 362.846088][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 362.958111][T11729] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1484'. [ 364.254369][T11742] IPv6: NLM_F_CREATE should be specified when creating new route [ 364.258042][T11742] IPv6: Can't replace route, no match found [ 364.268425][T11742] mmap: syz.0.1487 (11742) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 364.349087][T11746] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1488'. [ 364.901896][ T10] usb 10-1: USB disconnect, device number 7 [ 364.927827][ T42] kauditd_printk_skb: 33 callbacks suppressed [ 364.927846][ T42] audit: type=1800 audit(1785903259.533:6840): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 364.936997][ T10] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 364.952512][ T10] cyberjack 10-1:0.69: device disconnected [ 365.136563][ T42] audit: type=1800 audit(1785903259.743:6841): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 365.338522][ T42] audit: type=1800 audit(1785903259.943:6842): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 365.487769][ T42] audit: type=1804 audit(1785903260.083:6843): pid=11764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1492" name=2F6E6577726F6F742F14 dev="tmpfs" ino=1505 res=1 errno=0 [ 366.721991][ T42] audit: type=1800 audit(1785903261.323:6844): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 366.897261][ T42] audit: type=1804 audit(1785903261.503:6845): pid=11771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1494" name=2F6E6577726F6F742F14 dev="tmpfs" ino=1592 res=1 errno=0 [ 367.413910][ T42] audit: type=1800 audit(1785903262.013:6846): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 367.537849][ T42] audit: type=1800 audit(1785903262.143:6847): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 367.539616][ T42] audit: type=1800 audit(1785903262.143:6848): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 367.636444][ T42] audit: type=1800 audit(1785903262.243:6849): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 370.242991][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 370.243010][ T42] audit: type=1800 audit(1785903264.843:6853): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 370.427300][ T42] audit: type=1800 audit(1785903265.033:6854): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 370.481376][ T42] audit: type=1800 audit(1785903265.083:6855): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 370.556782][ T42] audit: type=1800 audit(1785903265.163:6856): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 370.625040][ T42] audit: type=1800 audit(1785903265.223:6857): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 370.975997][ T42] audit: type=1800 audit(1785903265.253:6858): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 370.982124][ T42] audit: type=1800 audit(1785903265.553:6859): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34919 res=0 errno=0 [ 371.093080][ T42] audit: type=1800 audit(1785903265.693:6860): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 371.186066][ T34] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 371.307733][ T42] audit: type=1800 audit(1785903265.913:6861): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 371.326003][ T34] usb 5-1: device descriptor read/64, error -71 [ 371.575953][ T34] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 371.736010][ T34] usb 5-1: device descriptor read/64, error -71 [ 371.782707][T11825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.846620][ T34] usb usb5-port1: attempt power cycle [ 371.882854][T11833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1513'. [ 371.891194][T11833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1513'. [ 371.895530][T11833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1513'. [ 371.900606][T11833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1513'. [ 372.069621][T11837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1515'. [ 372.076662][T11837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1515'. [ 372.080422][T11837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1515'. [ 372.083969][T11837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1515'. [ 372.196010][ T34] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 372.217979][ T34] usb 5-1: device descriptor read/8, error -71 [ 372.484462][ T34] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 372.507012][ T34] usb 5-1: device descriptor read/8, error -71 [ 372.617600][ T34] usb usb5-port1: unable to enumerate USB device [ 372.677862][ T42] audit: type=1800 audit(1785903267.263:6862): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 373.119637][T11844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1518'. [ 375.922660][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 375.922675][ T42] audit: type=1800 audit(1785903270.523:6871): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 376.082443][ T42] audit: type=1800 audit(1785903270.683:6872): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 376.217942][ T42] audit: type=1800 audit(1785903270.823:6873): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 376.295976][ T42] audit: type=1800 audit(1785903270.893:6874): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 376.381457][T11924] max out of range [ 376.590552][T11934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1538'. [ 376.918547][ T42] audit: type=1800 audit(1785903271.513:6875): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 376.969698][ T42] audit: type=1800 audit(1785903271.553:6876): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 377.017881][ T42] audit: type=1800 audit(1785903271.593:6877): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 377.043907][ T42] audit: type=1800 audit(1785903271.623:6878): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 377.075070][T11940] __nla_validate_parse: 3 callbacks suppressed [ 377.075119][T11940] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1542'. [ 377.086886][T11940] capability: warning: `syz.5.1542' uses 32-bit capabilities (legacy support in use) [ 377.105715][ T42] audit: type=1800 audit(1785903271.703:6879): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=157051 res=0 errno=0 [ 377.237431][ T42] audit: type=1800 audit(1785903271.843:6880): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 377.745983][ T5839] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 377.925356][ T5839] usb 10-1: Using ep0 maxpacket: 8 [ 377.940396][ T5839] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 245, changing to 7 [ 377.949271][ T5839] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 241, changing to 7 [ 377.961789][ T5839] usb 10-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 377.965985][ T5839] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.969512][ T5839] usb 10-1: Product: syz [ 377.971371][ T5839] usb 10-1: Manufacturer: syz [ 377.973466][ T5839] usb 10-1: SerialNumber: syz [ 378.227740][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.230449][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.268857][ T5839] usb 10-1: Audio class v2/v3 interfaces need an interface association [ 378.300386][T11973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1550'. [ 378.387924][ T5839] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 378.396643][ T5839] snd-usb-us122l 10-1:1.1: usb_set_interface error [ 378.399743][ T5839] snd-usb-us122l 10-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 378.410678][ T5839] usb 10-1: USB disconnect, device number 8 [ 378.447434][T11033] udevd[11033]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 378.780888][T11977] usb usb8: usbfs: process 11977 (syz.1.1553) did not claim interface 0 before use [ 379.026030][ T29] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 379.231384][ T29] usb 6-1: not running at top speed; connect to a high speed hub [ 379.236663][ T29] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 222, changing to 4 [ 379.242215][ T29] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 379.247720][ T29] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 139, changing to 4 [ 379.270080][ T29] usb 6-1: New USB device found, idVendor=0499, idProduct=1055, bcdDevice= 0.40 [ 379.281758][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.288633][ T29] usb 6-1: Product: 䥼ꩌ擁ゔ菈⥳⻮⴪ᥩࢄ놙踾㽎骡氀ﬔ㭾撼㲺镗㊀ꥅ斲䃦逯Ꙁ୞䁇枞핖㐈穸⍿㫡騣뗓贒怑稓╰᪥ホ験狞ޠ荈㑴螹ᢙ쒪┛慁᳹ᡳٛﮈఢ㶎琚낱蒡ㆬ⺳劂䎷ꉦી필슗冻㔠毪阰ϸ珸따㌎䊮ࠩ㥺ㅼ罅☠憐銌痚㐒桸娬ᠼ崕⢪ࢩ롧豠뻰窦胱׾ﵑ➑֛썓吏㮶掽⇫₝ [ 379.311994][ T29] usb 6-1: Manufacturer: 쵑㳖헩杞尷䦎꜓묛။Є尔ⷄහ⡰Ꮝᴥﱘ뉲볥㨿ꁏ㯎ዚ䄐숳匟㵕鿚苋卲嬵및爡싻ᑋ孭ԏ᲋ᯂ谛⁆◐᧶ȃ쟮谱⇿侤ꌂ [ 379.325092][ T29] usb 6-1: SerialNumber: 盧ࡸ䞳ꤠ陵豰뒱㱤ت珰壱떄६몢佝ꎓ偸䨃԰攷팪渋㦎ꠝ烨ࣷࡈ蒇㳚坖ك秙⇇弓绮삊ᶜ소냼鉒Ŋ顢૓弦䂪볐Ǭ刔ᦃ⊳읔电뷱巓筣㰿欬썆槙ỿⒸ嵳᫡쭵듗ꊑ驷쮂㶽␈䖋꭯坑뙬羊甊ﵔ塩 [ 379.654311][ T29] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 379.658508][ T29] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 379.670797][ T29] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 379.675145][ T29] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 379.688435][ T29] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 379.757156][ T29] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 379.772028][ T29] usb 6-1: USB disconnect, device number 46 [ 379.796624][T11033] udevd[11033]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 380.740548][T12013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1564'. [ 380.863846][T12017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1568'. [ 381.007409][T12020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1569'. [ 381.024865][ T42] kauditd_printk_skb: 35 callbacks suppressed [ 381.024882][ T42] audit: type=1800 audit(1785903275.623:6916): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=157492 res=0 errno=0 [ 381.046946][T12005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 381.052379][ T42] audit: type=1800 audit(1785903275.643:6917): pid=11033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=157496 res=0 errno=0 [ 381.587752][ T42] audit: type=1800 audit(1785903276.183:6918): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 381.631932][ T42] audit: type=1800 audit(1785903276.223:6919): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 381.743613][ T42] audit: type=1800 audit(1785903276.343:6920): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35069 res=0 errno=0 [ 381.862939][T12040] program syz.5.1573 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 381.868462][T12040] netlink: 'syz.5.1573': attribute type 6 has an invalid length. [ 382.074538][ T42] audit: type=1800 audit(1785903276.673:6921): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 382.176139][ T42] audit: type=1800 audit(1785903276.773:6922): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 382.264658][ T42] audit: type=1800 audit(1785903276.863:6923): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 383.242301][ T42] audit: type=1800 audit(1785903277.843:6924): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 383.311868][ T42] audit: type=1800 audit(1785903277.913:6925): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 384.767143][T12091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1591'. [ 385.254286][T12102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1594'. [ 386.217589][T12118] 9pnet: p9_errstr2errno: server reported unknown error [ 386.266038][ T42] kauditd_printk_skb: 16 callbacks suppressed [ 386.266122][ T42] audit: type=1800 audit(1785903280.823:6942): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=157665 res=0 errno=0 [ 386.367129][ T42] audit: type=1800 audit(1785903280.973:6943): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 386.391915][ T42] audit: type=1800 audit(1785903280.993:6944): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 386.429809][T12121] syzkaller0: entered promiscuous mode [ 386.432492][T12121] syzkaller0: entered allmulticast mode [ 386.533488][ T42] audit: type=1800 audit(1785903281.133:6945): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 386.623802][ T42] audit: type=1800 audit(1785903281.223:6946): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 386.704339][ T42] audit: type=1800 audit(1785903281.303:6947): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 386.821041][T12133] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1603'. [ 386.867055][ T42] audit: type=1800 audit(1785903281.473:6948): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 387.081094][ T42] audit: type=1800 audit(1785903281.683:6949): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 387.107804][T12122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.231485][ T42] audit: type=1800 audit(1785903281.833:6950): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 387.263655][T12152] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 387.270181][T12152] batadv_slave_1: entered promiscuous mode [ 387.288538][ T42] audit: type=1800 audit(1785903281.893:6951): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=157761 res=0 errno=0 [ 387.392788][T12155] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1609'. [ 387.827106][T12165] overlay: ./file2 is not a directory [ 388.680765][T12172] max out of range [ 390.132363][T12205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1621'. [ 390.137922][T12205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1621'. [ 390.141389][T12205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1621'. [ 390.145452][T12205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1621'. [ 390.596219][T12192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.632924][ T1166] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 390.638801][T12209] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 390.865959][ T845] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 391.003928][ T1166] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 391.014658][T12213] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 391.018910][ T845] usb 10-1: Using ep0 maxpacket: 8 [ 391.023557][ T845] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.028339][ T845] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 391.032149][ T845] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 391.039520][ T845] usb 10-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 391.043301][ T845] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.046784][ T845] usb 10-1: Product: syz [ 391.048538][ T845] usb 10-1: Manufacturer: syz [ 391.050574][ T845] usb 10-1: SerialNumber: syz [ 391.266637][ T5843] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 391.292483][T12219] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1625'. [ 391.426091][ T5843] usb 5-1: Using ep0 maxpacket: 8 [ 391.437163][ T5843] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.444922][ T5843] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 391.449107][ T5843] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 391.456347][ T5843] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 391.460333][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.466960][ T5843] usb 5-1: Product: syz [ 391.468772][ T5843] usb 5-1: Manufacturer: syz [ 391.473842][ T5843] usb 5-1: SerialNumber: syz [ 391.484318][ T42] kauditd_printk_skb: 80 callbacks suppressed [ 391.484334][ T42] audit: type=1800 audit(1785903286.083:7032): pid=11033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=158702 res=0 errno=0 [ 391.495631][ T42] audit: type=1800 audit(1785903286.093:7033): pid=11033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=158734 res=0 errno=0 [ 391.507168][ T42] audit: type=1800 audit(1785903286.093:7034): pid=11033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=158709 res=0 errno=0 [ 391.515511][ T42] audit: type=1800 audit(1785903286.093:7035): pid=11033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=158710 res=0 errno=0 [ 391.870524][T12209] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 391.894821][ T845] usb 10-1: 1:1: cannot get freq (v2/v3): err -71 [ 391.897782][ T845] usb 10-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 391.957929][ T42] audit: type=1800 audit(1785903286.563:7036): pid=12158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=158661 res=0 errno=0 [ 391.964655][ T845] usb 10-1: USB disconnect, device number 9 [ 391.968553][ T42] audit: type=1800 audit(1785903286.563:7037): pid=12158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=158662 res=0 errno=0 [ 391.974625][ T42] audit: type=1800 audit(1785903286.563:7038): pid=12158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=158641 res=0 errno=0 [ 391.981792][ T42] audit: type=1800 audit(1785903286.563:7039): pid=12158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=158663 res=0 errno=0 [ 391.989999][ T42] audit: type=1800 audit(1785903286.573:7040): pid=10941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=159633 res=0 errno=0 [ 391.999432][ T42] audit: type=1800 audit(1785903286.573:7041): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=159526 res=0 errno=0 [ 392.382754][T12213] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 392.415927][ T5843] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 392.418381][ T5843] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 392.492714][ T5843] usb 5-1: USB disconnect, device number 44 [ 392.585172][T12154] udevd[12154]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 392.619998][T12233] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1629'. [ 392.629710][T12233] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1629'. [ 392.633632][T12233] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1629'. [ 392.640007][T12233] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1629'. [ 393.668423][T12242] FAULT_INJECTION: forcing a failure. [ 393.668423][T12242] name failslab, interval 1, probability 0, space 0, times 0 [ 393.676191][T12242] CPU: 0 UID: 0 PID: 12242 Comm: syz.5.1633 Tainted: G L syzkaller #0 PREEMPT(full) [ 393.676221][T12242] Tainted: [L]=SOFTLOCKUP [ 393.676227][T12242] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 393.676237][T12242] Call Trace: [ 393.676243][T12242] [ 393.676250][T12242] dump_stack_lvl+0x100/0x190 [ 393.676280][T12242] should_fail_ex.cold+0x5/0xa [ 393.676298][T12242] should_failslab+0xc2/0x120 [ 393.676322][T12242] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 393.676347][T12242] ? kstrdup_const+0x63/0x80 [ 393.676373][T12242] kstrdup+0x51/0xe0 [ 393.676389][T12242] kstrdup_const+0x63/0x80 [ 393.676407][T12242] kvasprintf_const+0x10f/0x1a0 [ 393.676429][T12242] kobject_set_name_vargs+0x5a/0x140 [ 393.676457][T12242] kobject_init_and_add+0xe7/0x180 [ 393.676475][T12242] ? __pfx_kobject_init_and_add+0x10/0x10 [ 393.676494][T12242] ? __kasan_kmalloc+0xaa/0xb0 [ 393.676512][T12242] ? lockdep_init_map_type+0x5c/0x250 [ 393.676530][T12242] ? __raw_spin_lock_init+0x3a/0x110 [ 393.676553][T12242] bus_add_driver+0x186/0x5b0 [ 393.676603][T12242] driver_register+0x1e2/0x360 [ 393.676631][T12242] usb_gadget_register_driver_owner+0x132/0x210 [ 393.676673][T12242] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 393.676699][T12242] configfs_write_iter+0x302/0x4e0 [ 393.676730][T12242] vfs_write+0x6ac/0x1050 [ 393.676748][T12242] ? __pfx_configfs_write_iter+0x10/0x10 [ 393.676767][T12242] ? __pfx_vfs_write+0x10/0x10 [ 393.676781][T12242] ? find_held_lock+0x2b/0x80 [ 393.676815][T12242] ksys_write+0x12a/0x250 [ 393.676845][T12242] ? __pfx_ksys_write+0x10/0x10 [ 393.676862][T12242] ? ksys_write+0x1ac/0x250 [ 393.676877][T12242] ? __pfx_ksys_write+0x10/0x10 [ 393.676895][T12242] __do_fast_syscall_32+0xe7/0x970 [ 393.676919][T12242] ? lockdep_hardirqs_on+0x78/0x100 [ 393.676943][T12242] do_fast_syscall_32+0x32/0x70 [ 393.676966][T12242] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 393.676987][T12242] RIP: 0023:0xf7fb7fec [ 393.677004][T12242] Code: Unable to access opcode bytes at 0xf7fb7fc2. [ 393.677012][T12242] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 393.677029][T12242] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000640 [ 393.677039][T12242] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 393.677049][T12242] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 393.677058][T12242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.677068][T12242] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 393.677092][T12242] [ 393.677202][T12242] kobject: can not set name properly! [ 393.737937][T12236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.760181][T12242] UDC core: g1: driver registration failed: -12 [ 393.828674][T12243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1632'. [ 394.770946][T12264] netlink: 'syz.3.1639': attribute type 2 has an invalid length. [ 394.800924][T12264] : entered promiscuous mode [ 394.845116][T12264] syzkaller0: entered promiscuous mode [ 394.847646][T12264] syzkaller0: entered allmulticast mode [ 395.754203][T12280] FAULT_INJECTION: forcing a failure. [ 395.754203][T12280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.761070][T12280] CPU: 3 UID: 0 PID: 12280 Comm: syz.5.1644 Tainted: G L syzkaller #0 PREEMPT(full) [ 395.761094][T12280] Tainted: [L]=SOFTLOCKUP [ 395.761098][T12280] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 395.761105][T12280] Call Trace: [ 395.761109][T12280] [ 395.761114][T12280] dump_stack_lvl+0x100/0x190 [ 395.761131][T12280] should_fail_ex.cold+0x5/0xa [ 395.761144][T12280] _copy_from_user+0x2e/0xd0 [ 395.761164][T12280] kvm_arch_vcpu_ioctl+0xf4d/0x57a0 [ 395.761181][T12280] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 395.761198][T12280] ? is_bpf_text_address+0x94/0x1a0 [ 395.761217][T12280] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 395.761233][T12280] ? arch_stack_walk+0xa6/0xf0 [ 395.761256][T12280] ? __lock_acquire+0x49f/0x1a40 [ 395.761275][T12280] ? stack_depot_save_flags+0x27/0x9d0 [ 395.761310][T12280] ? __lock_acquire+0x49f/0x1a40 [ 395.761331][T12280] ? lock_acquire+0x1b9/0x370 [ 395.761353][T12280] ? trace_contention_end+0x126/0x160 [ 395.761365][T12280] ? __mutex_lock+0x26d/0x1bd0 [ 395.761381][T12280] ? kvm_vcpu_ioctl+0x322/0x1700 [ 395.761395][T12280] ? __pfx___mutex_lock+0x10/0x10 [ 395.761421][T12280] ? kvm_vcpu_ioctl+0x8a0/0x1700 [ 395.761431][T12280] kvm_vcpu_ioctl+0x8a0/0x1700 [ 395.761444][T12280] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 395.761456][T12280] ? tomoyo_path_number_perm+0x188/0x580 [ 395.761473][T12280] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 395.761489][T12280] ? get_pid_task+0x106/0x250 [ 395.761507][T12280] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 395.761525][T12280] ? do_vfs_ioctl+0x226/0x13e0 [ 395.761542][T12280] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 395.761565][T12280] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 395.761577][T12280] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 395.761589][T12280] ? __fget_files+0x21f/0x3d0 [ 395.761603][T12280] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 395.761615][T12280] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 395.761646][T12280] __do_fast_syscall_32+0xe7/0x970 [ 395.761663][T12280] ? lockdep_hardirqs_on+0x78/0x100 [ 395.761679][T12280] do_fast_syscall_32+0x32/0x70 [ 395.761695][T12280] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 395.761709][T12280] RIP: 0023:0xf7fb7fec [ 395.761724][T12280] Code: Unable to access opcode bytes at 0xf7fb7fc2. [ 395.761729][T12280] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 395.761747][T12280] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000004048aecb [ 395.761754][T12280] RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 395.761760][T12280] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 395.761766][T12280] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 395.761773][T12280] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 395.761789][T12280] [ 395.996004][ T845] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 396.136044][ T845] usb 5-1: device descriptor read/64, error -71 [ 396.375978][ T845] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 396.519612][ T845] usb 5-1: device descriptor read/64, error -71 [ 396.638761][ T845] usb usb5-port1: attempt power cycle [ 396.983758][ T845] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 397.021586][ T845] usb 5-1: device descriptor read/8, error -71 [ 397.255941][ T845] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 397.276467][ T845] usb 5-1: device descriptor read/8, error -71 [ 397.311092][T12284] __nla_validate_parse: 4 callbacks suppressed [ 397.311106][T12284] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1645'. [ 397.340035][ T42] kauditd_printk_skb: 25 callbacks suppressed [ 397.340051][ T42] audit: type=1800 audit(1785903291.943:7067): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 397.359696][T12295] max out of range [ 397.386690][ T845] usb usb5-port1: unable to enumerate USB device [ 397.555184][T12290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.571317][ T42] audit: type=1800 audit(1785903292.173:7068): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 398.511857][ T42] audit: type=1800 audit(1785903293.113:7069): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 398.560789][ T42] audit: type=1800 audit(1785903293.163:7070): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 398.723263][ T42] audit: type=1800 audit(1785903293.323:7071): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 398.763340][ T42] audit: type=1800 audit(1785903293.363:7072): pid=12317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1653" name="scheduler" dev="sysfs" ino=15968 res=0 errno=0 [ 399.536298][ T42] audit: type=1800 audit(1785903294.133:7073): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 399.628235][T12334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1658'. [ 399.632833][T12334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1658'. [ 399.636828][T12334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1658'. [ 399.640888][T12334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1658'. [ 399.700952][ T42] audit: type=1800 audit(1785903294.303:7074): pid=12337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1659" name="unbind" dev="sysfs" ino=28497 res=0 errno=0 [ 399.707475][T12337] uhci_hcd 0000:00:1d.0: remove, state 4 [ 399.761728][T12337] usb usb2: USB disconnect, device number 1 [ 399.810907][T12325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.175427][ T42] audit: type=1804 audit(1785903294.773:7075): pid=12343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1660" name=2F6E6577726F6F742F14 dev="tmpfs" ino=1592 res=1 errno=0 [ 400.410183][ T42] audit: type=1800 audit(1785903295.013:7076): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 401.153500][T12337] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered [ 401.560114][T12357] ALSA: mixer_oss: invalid OSS volume '' [ 402.386416][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 402.386434][ T42] audit: type=1800 audit(1785903296.973:7082): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 402.410452][ T42] audit: type=1800 audit(1785903297.013:7083): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 402.426460][ T42] audit: type=1800 audit(1785903297.023:7084): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 402.465066][ T42] audit: type=1800 audit(1785903297.063:7085): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 402.608827][ T42] audit: type=1804 audit(1785903297.213:7086): pid=12377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1668" name=2F6E6577726F6F742F14 dev="tmpfs" ino=1505 res=1 errno=0 [ 402.618403][ T42] audit: type=1800 audit(1785903297.213:7087): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 402.684015][T12380] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1670'. [ 402.688167][T12380] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1670'. [ 402.691206][T12380] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1670'. [ 402.694094][T12380] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1670'. [ 403.188137][T12385] ALSA: mixer_oss: invalid OSS volume '' [ 403.397223][ T42] audit: type=1800 audit(1785903298.003:7088): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=160066 res=0 errno=0 [ 403.494331][ T42] audit: type=1800 audit(1785903298.093:7089): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 404.773981][ T42] audit: type=1800 audit(1785903299.373:7090): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 404.927326][T12403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1678'. [ 404.951572][ T42] audit: type=1800 audit(1785903299.553:7091): pid=12408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1679" name="p_srate" dev="configfs" ino=43802 res=0 errno=0 [ 404.955032][T12408] Need at least one configuration in g1. [ 404.964272][T12408] udc usbip-vudc.0: failed to start g1: -22 [ 404.986144][T12408] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 404.999972][T12408] UDC core: g1: couldn't find an available UDC or it's busy [ 405.089497][T12413] ALSA: mixer_oss: invalid OSS volume '' [ 405.689520][T12423] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.143553][T12423] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.299874][T12433] ALSA: mixer_oss: invalid OSS volume '' [ 406.320080][T12423] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.537834][T12423] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.625385][T12425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.868810][T12439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1688'. [ 407.151794][ T5794] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.236182][ T5794] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.239753][ T5794] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.246387][ T5794] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.414224][T12449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1696'. [ 407.474567][ T42] kauditd_printk_skb: 13 callbacks suppressed [ 407.474580][ T42] audit: type=1326 audit(1785903302.073:7105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12456 comm="syz.1.1697" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe7fec code=0x0 [ 407.578112][ T42] audit: type=1326 audit(1785903302.183:7106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12456 comm="syz.1.1697" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe7fec code=0x0 [ 407.624632][T12463] max out of range [ 407.695747][T12465] max out of range [ 407.818133][ T42] audit: type=1800 audit(1785903302.423:7107): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=160624 res=0 errno=0 [ 408.071752][ T42] audit: type=1800 audit(1785903302.673:7108): pid=12469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1701" name="attach" dev="sysfs" ino=36642 res=0 errno=0 [ 408.081401][T12469] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 408.084235][T12469] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 408.089027][T12469] vhci_hcd vhci_hcd.0: Device attached [ 408.095441][ T42] audit: type=1800 audit(1785903302.693:7109): pid=12469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1701" name="attach" dev="sysfs" ino=36642 res=0 errno=0 [ 408.106427][T12469] vhci_hcd vhci_hcd.0: port 0 already used [ 408.137363][T12470] vhci_hcd: connection closed [ 408.138510][ T5844] vhci_hcd vhci_hcd.1: stop threads [ 408.143047][ T5844] vhci_hcd vhci_hcd.1: release socket [ 408.145481][ T5844] vhci_hcd vhci_hcd.1: disconnect device [ 408.193083][ T42] audit: type=1800 audit(1785903302.793:7110): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 409.084432][T12474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.788421][T12487] max out of range [ 409.792404][ T42] audit: type=1800 audit(1785903304.393:7111): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 409.829868][ T42] audit: type=1800 audit(1785903304.433:7112): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34969 res=0 errno=0 [ 410.012706][ T42] audit: type=1800 audit(1785903304.613:7113): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=160684 res=0 errno=0 [ 410.066200][ T5823] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 410.195956][ T5823] usb 6-1: device descriptor read/64, error -71 [ 410.343134][ T42] audit: type=1800 audit(1785903304.943:7114): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 410.435989][ T5823] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 410.477247][T12503] max out of range [ 410.566980][ T5823] usb 6-1: device descriptor read/64, error -71 [ 410.677807][ T5823] usb usb6-port1: attempt power cycle [ 411.026137][ T5823] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 411.049292][ T5823] usb 6-1: device descriptor read/8, error -71 [ 411.335997][ T5823] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 411.671630][T12521] 9pnet_fd: Insufficient options for proto=fd [ 411.864881][ T5823] usb 6-1: device descriptor read/8, error -71 [ 411.942605][T12530] max out of range [ 412.064212][T12511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 412.498934][ T5823] usb usb6-port1: unable to enumerate USB device [ 412.632254][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 412.632266][ T42] audit: type=1800 audit(1785903307.233:7122): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 412.919833][T12542] fuse: Unknown parameter '' [ 412.957342][T12544] nvmet: adding nsid 1 to subsystem testnqn [ 412.984955][ T42] audit: type=1800 audit(1785903307.583:7123): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 413.032672][ T42] audit: type=1800 audit(1785903307.633:7124): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 413.050557][ T42] audit: type=1800 audit(1785903307.643:7125): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=160788 res=0 errno=0 [ 413.985783][ T42] audit: type=1804 audit(1785903308.583:7126): pid=12558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1731" name="/newroot/436/file0" dev="tmpfs" ino=2330 res=1 errno=0 [ 414.099476][T12561] max out of range [ 414.120079][ T42] audit: type=1800 audit(1785903308.723:7127): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 414.203792][T12566] max out of range [ 414.228426][ T42] audit: type=1800 audit(1785903308.833:7128): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=160807 res=0 errno=0 [ 414.378275][ T42] audit: type=1800 audit(1785903308.983:7129): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=160933 res=0 errno=0 [ 414.419359][ T42] audit: type=1800 audit(1785903309.023:7130): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 414.463285][ T42] audit: type=1800 audit(1785903309.063:7131): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 415.466501][T12592] max out of range [ 415.498748][T12595] faux_driver vgem: [drm] Unknown color mode 55545; guessing buffer size. [ 415.759591][T12602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1743'. [ 416.525977][ T5905] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 416.573955][T12616] max out of range [ 416.692904][ T5905] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 416.698021][ T5905] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 416.702888][ T5905] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 416.706969][ T5905] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 416.711564][ T5905] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 416.715476][ T5905] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.721435][ T5905] usb 10-1: config 0 descriptor?? [ 417.464017][ T5905] plantronics 0003:047F:FFFF.0003: ignoring exceeding usage max [ 417.668236][ T42] kauditd_printk_skb: 21 callbacks suppressed [ 417.668248][ T42] audit: type=1800 audit(1785903312.273:7153): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=161887 res=0 errno=0 [ 417.706574][ T5905] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 417.814079][T12620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.820405][ T42] audit: type=1800 audit(1785903312.423:7154): pid=12624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="fido_id" name="report_descriptor" dev="sysfs" ino=161858 res=0 errno=0 [ 418.369017][ T42] audit: type=1800 audit(1785903312.963:7155): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 418.437779][ T42] audit: type=1800 audit(1785903313.043:7156): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 418.450502][T12632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1752'. [ 419.013340][ T5905] usb 10-1: reset high-speed USB device number 10 using dummy_hcd [ 419.057462][T12632] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.416038][T12632] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.795078][T12632] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.829917][T12645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1755'. [ 420.861801][ T42] audit: type=1800 audit(1785903315.463:7157): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 421.565952][ T1487] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 421.696341][ T1487] usb 6-1: device descriptor read/64, error -71 [ 421.793297][T12632] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.845614][ T42] audit: type=1800 audit(1785903316.443:7158): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 421.965972][ T1487] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 422.095971][ T1487] usb 6-1: device descriptor read/64, error -71 [ 422.116081][ T5844] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.119583][ T5844] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.122831][ T5844] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.126813][ T5844] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.201715][ T42] audit: type=1800 audit(1785903316.803:7159): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 422.216508][ T1487] usb usb6-port1: attempt power cycle [ 422.586056][ T1487] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 422.618953][ T1487] usb 6-1: device descriptor read/8, error -71 [ 422.661485][T12677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1762'. [ 422.743718][T12662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.797296][T12678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1762'. [ 422.802066][T12678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1762'. [ 422.805794][T12678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1762'. [ 422.855926][ T1487] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 422.876675][ T1487] usb 6-1: device descriptor read/8, error -71 [ 422.987061][ T1487] usb usb6-port1: unable to enumerate USB device [ 423.311232][ T42] audit: type=1800 audit(1785903317.913:7160): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 423.311494][ T1043] usb 10-1: USB disconnect, device number 10 [ 423.372457][ T42] audit: type=1800 audit(1785903317.973:7161): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=22745 res=0 errno=0 [ 423.396245][ T42] audit: type=1800 audit(1785903317.993:7162): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=22745 res=0 errno=0 [ 423.531388][T12685] max out of range [ 423.619421][T12689] max out of range [ 423.713937][ T42] audit: type=1800 audit(1785903318.313:7163): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 423.944489][ T42] audit: type=1800 audit(1785903318.543:7164): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 424.026307][ T42] audit: type=1800 audit(1785903318.633:7165): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34919 res=0 errno=0 [ 424.275970][ T5839] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 424.466051][ T5839] usb 5-1: Using ep0 maxpacket: 8 [ 424.472980][ T5839] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 245, changing to 7 [ 424.476241][ T42] audit: type=1800 audit(1785903319.083:7166): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 424.481312][ T5839] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 241, changing to 7 [ 424.499979][ T5839] usb 5-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 424.503511][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.511400][ T5839] usb 5-1: Product: syz [ 424.513272][ T5839] usb 5-1: Manufacturer: syz [ 424.515071][ T5839] usb 5-1: SerialNumber: syz [ 424.522061][ T42] audit: type=1800 audit(1785903319.123:7167): pid=12158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=163134 res=0 errno=0 [ 424.545799][ T42] audit: type=1800 audit(1785903319.133:7168): pid=12158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=163166 res=0 errno=0 [ 424.559858][ T42] audit: type=1800 audit(1785903319.133:7169): pid=12158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=163141 res=0 errno=0 [ 424.701042][T12704] openvswitch: netlink: Tunnel attr 12812 out of range max 16 [ 424.714885][T12706] loop5: detected capacity change from 0 to 7 [ 424.722862][T12706] Dev loop5: unable to read RDB block 7 [ 424.725118][T12706] loop5: unable to read partition table [ 424.730376][T12706] loop5: partition table beyond EOD, truncated [ 424.733190][T12706] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 424.890813][ T5839] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 424.980106][T12712] xt_connbytes: Forcing CT accounting to be enabled [ 424.983022][T12712] xt_TPROXY: Can be used only with -p tcp or -p udp [ 425.212782][ T5839] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 425.284630][ T5839] snd-usb-us122l 5-1:1.1: usb_set_interface error [ 425.290470][ T5839] snd-usb-us122l 5-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 425.369578][ T5839] usb 5-1: USB disconnect, device number 49 [ 425.625958][ T5823] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 425.644809][T12158] udevd[12158]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 425.780365][ T5823] usb 6-1: unable to get BOS descriptor or descriptor too short [ 425.797733][ T5823] usb 6-1: not running at top speed; connect to a high speed hub [ 425.804508][T12710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 425.813604][ T5823] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 425.822808][ T5823] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 425.946370][ T5823] usb 6-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 425.950425][ T5823] usb 6-1: config 14 has no interface number 0 [ 425.952926][ T5823] usb 6-1: config 14 has no interface number 1 [ 425.955476][ T5823] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 425.961811][ T5823] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 425.965501][ T5823] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 425.969478][ T5823] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 425.973481][ T5823] usb 6-1: config 14 interface 57 has no altsetting 0 [ 425.976095][ T5823] usb 6-1: config 14 interface 228 has no altsetting 0 [ 425.983279][ T5823] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 425.986581][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.989256][ T5823] usb 6-1: Product: syz [ 425.990782][ T5823] usb 6-1: Manufacturer: syz [ 425.992272][ T5823] usb 6-1: SerialNumber: syz [ 426.717150][ T10] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 426.847683][ T10] usb 5-1: device descriptor read/64, error -71 [ 426.865300][ T5823] legousbtower 6-1:14.57: interrupt endpoints not found [ 427.067006][T12717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1775'. [ 427.086245][ T10] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 427.216061][ T10] usb 5-1: device descriptor read/64, error -71 [ 427.327781][ T10] usb usb5-port1: attempt power cycle [ 427.609198][ T5823] legousbtower 6-1:14.228: get version request failed: -71 [ 427.618088][ T5823] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -71 [ 427.627606][ T5823] usb 6-1: USB disconnect, device number 55 [ 427.665971][ T10] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 427.686713][ T10] usb 5-1: device descriptor read/8, error -71 [ 427.938333][ T10] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 427.958390][ T10] usb 5-1: device descriptor read/8, error -71 [ 428.068953][ T10] usb usb5-port1: unable to enumerate USB device [ 428.737940][ T42] kauditd_printk_skb: 27 callbacks suppressed [ 428.737957][ T42] audit: type=1800 audit(1785903323.323:7197): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 428.753907][ T42] audit: type=1800 audit(1785903323.333:7198): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 428.755106][T12758] Mass Storage Function, version: 2009/09/11 [ 428.765778][T12758] LUN: removable file: (no medium) [ 428.772451][ T42] audit: type=1800 audit(1785903323.373:7199): pid=12758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1788" name="nofua" dev="configfs" ino=47334 res=0 errno=0 [ 428.845776][T12764] binder: 12757:12764 ioctl c0306201 800001c0 returned -14 [ 428.852368][T12764] binder: 12757:12764 ioctl c0306201 80000180 returned -14 [ 428.912595][T12769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1793'. [ 428.946793][T12771] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1789'. [ 428.966571][T12771] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1789'. [ 429.055729][T12772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1792'. [ 429.058829][ T42] audit: type=1800 audit(1785903322.542:7200): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=163787 res=0 errno=0 [ 429.072857][ T42] audit: type=1800 audit(1785903322.542:7201): pid=12158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=163791 res=0 errno=0 [ 429.079329][ T42] audit: type=1800 audit(1785903322.562:7202): pid=5453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="tun_flags" dev="sysfs" ino=163819 res=0 errno=0 [ 429.603860][ T42] audit: type=1800 audit(1785903323.202:7203): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 429.764365][ T42] audit: type=1800 audit(1785903323.362:7204): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 430.056148][T12811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1798'. [ 430.130379][ T1043] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 430.183499][ T42] audit: type=1800 audit(1785903323.782:7205): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=164071 res=0 errno=0 [ 430.196786][ T42] audit: type=1800 audit(1785903323.782:7206): pid=12158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=164075 res=0 errno=0 [ 430.256075][ T1043] usb 10-1: device descriptor read/64, error -71 [ 430.495954][ T1043] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 430.625995][ T1043] usb 10-1: device descriptor read/64, error -71 [ 430.736354][ T1043] usb usb10-port1: attempt power cycle [ 431.030357][ T5842] kernel write not supported for file [eventfd] (pid: 5842 comm: kworker/1:3) [ 431.049120][T12838] netlink: 'syz.1.1804': attribute type 8 has an invalid length. [ 431.096331][ T1043] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 431.117574][ T1043] usb 10-1: device descriptor read/8, error -71 [ 431.140881][T12840] max out of range [ 431.355997][ T1043] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 431.376993][ T1043] usb 10-1: device descriptor read/8, error -71 [ 431.486395][ T1043] usb usb10-port1: unable to enumerate USB device [ 431.892749][T12850] tipc: Enabling of bearer rejected, failed to enable media [ 432.172077][T12855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1809'. [ 432.179280][T12855] bridge: RTM_NEWNEIGH with invalid ether address [ 433.002942][T12870] max out of range [ 433.243303][T12878] usb usb8: usbfs: process 12878 (syz.0.1817) did not claim interface 0 before use [ 433.496115][ T5843] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 433.649234][ T5843] usb 5-1: not running at top speed; connect to a high speed hub [ 433.654411][ T5843] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 222, changing to 4 [ 433.658331][ T5843] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 433.662498][ T5843] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 139, changing to 4 [ 433.672606][ T5843] usb 5-1: New USB device found, idVendor=0499, idProduct=1055, bcdDevice= 0.40 [ 433.676694][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.680188][ T5843] usb 5-1: Product: 䥼ꩌ擁ゔ菈⥳⻮⴪ᥩࢄ놙踾㽎骡氀ﬔ㭾撼㲺镗㊀ꥅ斲䃦逯Ꙁ୞䁇枞핖㐈穸⍿㫡騣뗓贒怑稓╰᪥ホ験狞ޠ荈㑴螹ᢙ쒪┛慁᳹ᡳٛﮈఢ㶎琚낱蒡ㆬ⺳劂䎷ꉦી필슗冻㔠毪阰ϸ珸따㌎䊮ࠩ㥺ㅼ罅☠憐銌痚㐒桸娬ᠼ崕⢪ࢩ롧豠뻰窦胱׾ﵑ➑֛썓吏㮶掽⇫₝ [ 433.698020][ T5843] usb 5-1: Manufacturer: 쵑㳖헩杞尷䦎꜓묛။Є尔ⷄහ⡰Ꮝᴥﱘ뉲볥㨿ꁏ㯎ዚ䄐숳匟㵕鿚苋卲嬵및爡싻ᑋ孭ԏ᲋ᯂ谛⁆◐᧶ȃ쟮谱⇿侤ꌂ [ 433.704481][ T5843] usb 5-1: SerialNumber: 盧ࡸ䞳ꤠ陵豰뒱㱤ت珰壱떄६몢佝ꎓ偸䨃԰攷팪渋㦎ꠝ烨ࣷࡈ蒇㳚坖ك秙⇇弓绮삊ᶜ소냼鉒Ŋ顢૓弦䂪볐Ǭ刔ᦃ⊳읔电뷱巓筣㰿欬썆槙ỿⒸ嵳᫡쭵듗ꊑ驷쮂㶽␈䖋꭯坑뙬羊甊ﵔ塩 [ 434.002063][ T5843] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 434.009795][ T5843] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 434.014606][ T5843] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 434.017728][ T5843] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 434.022590][ T5843] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 434.065585][ T42] kauditd_printk_skb: 14 callbacks suppressed [ 434.065599][ T42] audit: type=1800 audit(1785903327.662:7221): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 434.102435][ T5843] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 434.107662][ T42] audit: type=1800 audit(1785903327.712:7222): pid=12158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=164449 res=0 errno=0 [ 434.116176][ T42] audit: type=1800 audit(1785903327.712:7223): pid=12158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=164450 res=0 errno=0 [ 434.116406][ T5843] usb 5-1: USB disconnect, device number 54 [ 434.122343][ T42] audit: type=1800 audit(1785903327.712:7224): pid=12158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=164429 res=0 errno=0 [ 434.131000][ T42] audit: type=1800 audit(1785903327.712:7225): pid=12158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=164451 res=0 errno=0 [ 434.137286][ T42] audit: type=1800 audit(1785903327.742:7226): pid=10947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=164518 res=0 errno=0 [ 434.143432][ T42] audit: type=1800 audit(1785903327.742:7227): pid=12158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=164482 res=0 errno=0 [ 434.144664][T12158] udevd[12158]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 434.154772][ T42] audit: type=1800 audit(1785903327.742:7228): pid=11033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=164500 res=0 errno=0 [ 434.224695][ T42] audit: type=1800 audit(1785903327.822:7229): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 434.253713][T12895] max out of range [ 434.300743][ T42] audit: type=1800 audit(1785903327.902:7230): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 434.319686][T12897] overlayfs: failed to resolve './cgroup': -2 [ 434.394275][T12899] CacheFiles: Empty directory specified [ 434.554880][T12901] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 435.495788][T12918] max out of range [ 436.233665][T12935] No control pipe specified [ 437.052840][T12937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.154823][ T65] block nbd3: Receive control failed (result -32) [ 437.206034][T12942] nbd3: detected capacity change from 0 to 8 [ 437.214889][T12943] block nbd3: shutting down sockets [ 437.218883][T11658] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 437.224147][T11658] Buffer I/O error on dev nbd3, logical block 0, async page read [ 437.248425][ T1307] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 437.251481][ T1307] Buffer I/O error on dev nbd3, logical block 0, async page read [ 437.254381][T11658] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 437.257942][T11658] Buffer I/O error on dev nbd3, logical block 0, async page read [ 437.260902][T11658] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 437.263956][T11658] Buffer I/O error on dev nbd3, logical block 0, async page read [ 437.268427][T11658] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 437.272770][T11658] Buffer I/O error on dev nbd3, logical block 0, async page read [ 437.275380][T11658] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 437.278700][T11658] Buffer I/O error on dev nbd3, logical block 0, async page read [ 437.282209][T11658] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 437.285649][T11658] Buffer I/O error on dev nbd3, logical block 0, async page read [ 437.289301][T11658] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 437.292348][T11658] Buffer I/O error on dev nbd3, logical block 0, async page read [ 437.294815][T12158] ldm_validate_partition_table(): Disk read failed. [ 437.297260][T11658] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 437.300269][T11658] Buffer I/O error on dev nbd3, logical block 0, async page read [ 437.302876][T11658] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 437.307137][T11658] Buffer I/O error on dev nbd3, logical block 0, async page read [ 437.310669][T12158] Dev nbd3: unable to read RDB block 0 [ 437.313282][T12158] nbd3: unable to read partition table [ 437.316020][T12158] nbd3: partition table beyond EOD, truncated [ 437.321393][T12158] ldm_validate_partition_table(): Disk read failed. [ 437.324251][T12158] Dev nbd3: unable to read RDB block 0 [ 437.326210][T12158] nbd3: unable to read partition table [ 437.328190][T12158] nbd3: partition table beyond EOD, truncated [ 437.338499][ T5151] ldm_validate_partition_table(): Disk read failed. [ 437.341388][ T5151] Dev nbd3: unable to read RDB block 0 [ 437.343287][ T5151] nbd3: unable to read partition table [ 437.348965][ T5151] nbd3: partition table beyond EOD, truncated [ 439.278669][ T42] kauditd_printk_skb: 16 callbacks suppressed [ 439.278681][ T42] audit: type=1800 audit(1785903332.882:7247): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 439.581564][ T42] audit: type=1800 audit(1785903333.172:7248): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 439.667982][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.670051][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.719746][ T42] audit: type=1800 audit(1785903333.322:7249): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 439.862078][ T42] audit: type=1800 audit(1785903333.462:7250): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 440.176143][ T10] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 440.261632][T12997] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1853'. [ 440.267111][T12997] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1853'. [ 440.271184][T12997] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1853'. [ 440.275183][T12997] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1853'. [ 440.357010][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 440.767704][ T42] audit: type=1800 audit(1785903334.372:7251): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 441.055070][T12998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 441.586159][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 245, changing to 7 [ 441.590022][ T10] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 241, changing to 7 [ 441.595326][ T10] usb 5-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 441.598558][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.601796][ T10] usb 5-1: Product: syz [ 441.604370][ T10] usb 5-1: Manufacturer: syz [ 441.605959][ T10] usb 5-1: SerialNumber: syz [ 441.610912][ T42] audit: type=1800 audit(1785903335.212:7252): pid=12158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=164708 res=0 errno=0 [ 441.627998][ T42] audit: type=1800 audit(1785903335.222:7253): pid=12158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=164740 res=0 errno=0 [ 441.645977][ T42] audit: type=1800 audit(1785903335.222:7254): pid=12158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=164715 res=0 errno=0 [ 441.653277][ T42] audit: type=1800 audit(1785903335.222:7255): pid=12158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=164716 res=0 errno=0 [ 441.702649][ T42] audit: type=1800 audit(1785903335.302:7256): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 442.092438][T13018] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1857'. [ 442.102963][T13018] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1857'. [ 442.234568][T13020] max out of range [ 442.611018][ T10] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 442.696060][ T10] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 442.704042][ T10] snd-usb-us122l 5-1:1.1: usb_set_interface error [ 442.707731][ T10] snd-usb-us122l 5-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 442.717749][ T10] usb 5-1: USB disconnect, device number 55 [ 442.773930][T12158] udevd[12158]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 442.964981][T13036] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1867'. [ 443.215986][ T10] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 443.385917][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 443.391059][ T10] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.394883][ T10] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.401553][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 443.403774][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 443.409935][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.416345][ T10] usb 5-1: config 0 descriptor?? [ 443.786519][T13054] Invalid logical block size (4) [ 443.870377][T13060] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1876'. [ 444.321135][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 444.323097][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 444.338024][ T10] usb 5-1: USB disconnect, device number 56 [ 444.503350][ T42] kauditd_printk_skb: 23 callbacks suppressed [ 444.503367][ T42] audit: type=1800 audit(1785903338.102:7280): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 444.527780][ T42] audit: type=1800 audit(1785903338.132:7281): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16910 res=0 errno=0 [ 444.547923][ T42] audit: type=1800 audit(1785903338.152:7282): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 444.603861][T13074] netlink: 'syz.5.1879': attribute type 1 has an invalid length. [ 444.678163][ T42] audit: type=1800 audit(1785903338.282:7283): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 444.853073][ T42] audit: type=1800 audit(1785903338.452:7284): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 445.294508][ T42] audit: type=1800 audit(1785903338.892:7285): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 445.344973][T13087] max out of range [ 445.541315][ T42] audit: type=1800 audit(1785903339.142:7286): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 445.576157][ T42] audit: type=1800 audit(1785903339.162:7287): pid=13091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1885" name="scheduler" dev="sysfs" ino=15968 res=0 errno=0 [ 445.633738][ T42] audit: type=1800 audit(1785903339.232:7288): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 445.664126][ T42] audit: type=1800 audit(1785903339.262:7289): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 446.036514][ T5839] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 446.167131][ T5839] usb 10-1: device descriptor read/64, error -71 [ 446.415935][ T5839] usb 10-1: new full-speed USB device number 16 using dummy_hcd [ 446.546257][ T5839] usb 10-1: device descriptor read/64, error -71 [ 446.579288][T13116] max out of range [ 446.656188][ T5839] usb usb10-port1: attempt power cycle [ 447.005956][ T5839] usb 10-1: new full-speed USB device number 17 using dummy_hcd [ 447.028068][ T5839] usb 10-1: device descriptor read/8, error -71 [ 447.276158][ T5839] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 447.298292][ T5839] usb 10-1: device descriptor read/8, error -71 [ 447.408697][ T5839] usb usb10-port1: unable to enumerate USB device [ 447.463244][T13143] max out of range [ 450.171927][ T42] kauditd_printk_skb: 14 callbacks suppressed [ 450.171940][ T42] audit: type=1800 audit(1785903343.772:7304): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 450.226103][ T42] audit: type=1800 audit(1785903343.832:7305): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 450.288673][ T42] audit: type=1800 audit(1785903343.892:7306): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 450.313897][T13189] fuse: Bad value for 'group_id' [ 450.320540][T13189] fuse: Bad value for 'group_id' [ 450.325572][T13189] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 450.385922][ T5823] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 450.421027][ T42] audit: type=1800 audit(1785903344.022:7307): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 450.450014][ T42] audit: type=1800 audit(1785903344.052:7308): pid=13194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1920" name="resources" dev="sysfs" ino=4028 res=0 errno=0 [ 450.468895][T13196] max out of range [ 450.490660][ T42] audit: type=1800 audit(1785903344.092:7309): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 450.514628][ T42] audit: type=1800 audit(1785903344.112:7310): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=165248 res=0 errno=0 [ 450.525971][ T5823] usb 6-1: device descriptor read/64, error -71 [ 450.736910][ T42] audit: type=1800 audit(1785903344.342:7311): pid=13203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1922" name="/" dev="fuse" ino=1 res=0 errno=0 [ 450.815975][ T5823] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 451.015154][ T42] audit: type=1800 audit(1785903344.612:7312): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 451.338619][ T42] audit: type=1326 audit(1785903344.942:7313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13204 comm="syz.0.1924" exe="/syz-executor" sig=9 arch=40000003 syscall=20 compat=1 ip=0xf70cefec code=0x0 [ 451.470719][T13209] No control pipe specified [ 451.555945][ T5823] usb 6-1: device descriptor read/64, error -71 [ 451.666610][ T5823] usb usb6-port1: attempt power cycle [ 452.035984][ T5823] usb 6-1: new full-speed USB device number 58 using dummy_hcd [ 452.066366][ T5823] usb 6-1: device descriptor read/8, error -71 [ 452.477674][ T5823] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 452.525985][T13224] max out of range [ 452.939402][ T5823] usb 6-1: device descriptor read/8, error -71 [ 452.999796][T13229] FAULT_INJECTION: forcing a failure. [ 452.999796][T13229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.008051][T13229] CPU: 2 UID: 0 PID: 13229 Comm: syz.3.1932 Tainted: G L syzkaller #0 PREEMPT(full) [ 453.008070][T13229] Tainted: [L]=SOFTLOCKUP [ 453.008075][T13229] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 453.008082][T13229] Call Trace: [ 453.008086][T13229] [ 453.008091][T13229] dump_stack_lvl+0x100/0x190 [ 453.008121][T13229] should_fail_ex.cold+0x5/0xa [ 453.008137][T13229] _copy_to_user+0x32/0xd0 [ 453.008158][T13229] simple_read_from_buffer+0xcb/0x170 [ 453.008179][T13229] proc_fail_nth_read+0x1af/0x230 [ 453.008196][T13229] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 453.008213][T13229] ? rw_verify_area+0xce/0x6d0 [ 453.008230][T13229] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 453.008245][T13229] vfs_read+0x1e4/0xb40 [ 453.008258][T13229] ? __pfx_vfs_read+0x10/0x10 [ 453.008267][T13229] ? find_held_lock+0x2b/0x80 [ 453.008282][T13229] ? __fget_files+0x215/0x3d0 [ 453.008296][T13229] ? __fget_files+0x21f/0x3d0 [ 453.008310][T13229] ksys_read+0x12a/0x250 [ 453.008321][T13229] ? __pfx_ksys_read+0x10/0x10 [ 453.008336][T13229] do_int80_emulation+0x14b/0x720 [ 453.008355][T13229] asm_int80_emulation+0x1a/0x20 [ 453.008367][T13229] RIP: 0023:0xf71273eb [ 453.008377][T13229] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 453.008387][T13229] RSP: 002b:00000000f53dd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 453.008399][T13229] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f53dd5d0 [ 453.008406][T13229] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 453.008413][T13229] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 453.008419][T13229] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 453.008425][T13229] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 453.008441][T13229] [ 453.418534][ T5823] usb usb6-port1: unable to enumerate USB device [ 453.449894][T13232] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 470.715889][T13246] No control pipe specified [ 470.732745][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 470.732757][ T42] audit: type=1800 audit(1785903364.332:7320): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 470.881046][ T42] audit: type=1800 audit(1785903364.482:7321): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=165267 res=0 errno=0 [ 470.918392][T13254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1939'. [ 470.937072][T13254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1939'. [ 470.940800][T13254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1939'. [ 470.943813][T13254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1939'. [ 471.729061][ T42] audit: type=1800 audit(1785903365.332:7322): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 471.883149][T13268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1943'. [ 471.888008][T13268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1943'. [ 471.891848][T13268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1943'. [ 471.896049][T13268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1943'. [ 472.543457][ T42] audit: type=1800 audit(1785903366.142:7323): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=165393 res=0 errno=0 [ 472.691911][ T42] audit: type=1800 audit(1785903366.292:7324): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 472.711978][T13274] max out of range [ 472.799016][ T42] audit: type=1800 audit(1785903366.402:7325): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 472.872455][ T42] audit: type=1800 audit(1785903366.472:7326): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=165412 res=0 errno=0 [ 473.005058][T13282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1946'. [ 473.009749][T13282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1946'. [ 473.195625][ T42] audit: type=1800 audit(1785903366.792:7327): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 473.814103][ T42] audit: type=1800 audit(1785903367.412:7328): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 474.094549][ T42] audit: type=1800 audit(1785903367.692:7329): pid=13300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1949" name="attach" dev="sysfs" ino=36642 res=0 errno=0 [ 474.136162][ T5839] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 474.136252][T13300] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 474.140862][T13300] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 474.168340][T13300] vhci_hcd vhci_hcd.0: Device attached [ 474.285981][ T5839] usb 10-1: Using ep0 maxpacket: 8 [ 474.290165][ T5839] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 245, changing to 7 [ 474.293623][ T5839] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 241, changing to 7 [ 474.299358][ T5839] usb 10-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 474.302243][ T5839] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.304800][ T5839] usb 10-1: Product: syz [ 474.307396][ T5839] usb 10-1: Manufacturer: syz [ 474.309043][ T5839] usb 10-1: SerialNumber: syz [ 474.426131][ T1043] usb 38-1: SetAddress Request (6) to port 0 [ 474.428371][ T1043] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 474.653548][ T5839] usb 10-1: Audio class v2/v3 interfaces need an interface association [ 474.688817][ T5839] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 474.695525][ T5839] snd-usb-us122l 10-1:1.1: usb_set_interface error [ 474.698926][ T5839] snd-usb-us122l 10-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 474.706873][ T5839] usb 10-1: USB disconnect, device number 19 [ 474.723593][T13319] udevd[13319]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 474.764626][T13322] max out of range [ 474.961476][T13301] vhci_hcd: connection reset by peer [ 474.967499][ T5844] vhci_hcd vhci_hcd.0: stop threads [ 474.969309][ T5844] vhci_hcd vhci_hcd.0: release socket [ 474.971175][ T5844] vhci_hcd vhci_hcd.0: disconnect device [ 475.591251][T13341] netlink: 'syz.0.1962': attribute type 2 has an invalid length. [ 475.600880][T13341] : entered promiscuous mode [ 475.612210][T13341] syzkaller0: entered promiscuous mode [ 475.614397][T13341] syzkaller0: entered allmulticast mode [ 476.481813][ T42] kauditd_printk_skb: 14 callbacks suppressed [ 476.481830][ T42] audit: type=1800 audit(1785903370.082:7344): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 476.509575][ T42] audit: type=1800 audit(1785903370.112:7345): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 476.523024][T13354] max out of range [ 476.585646][T13359] netlink: 'syz.1.1967': attribute type 2 has an invalid length. [ 476.619659][ T42] audit: type=1800 audit(1785903370.222:7346): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=166137 res=0 errno=0 [ 476.631535][T13359] : entered promiscuous mode [ 476.657611][ T42] audit: type=1800 audit(1785903370.262:7347): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 476.686454][T13359] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 476.689720][T13359] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 476.697647][T13359] __nla_validate_parse: 3 callbacks suppressed [ 476.697708][T13359] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1967'. [ 476.796251][ T5823] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 476.956258][ T5823] usb 5-1: Using ep0 maxpacket: 8 [ 476.967865][ T5823] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 245, changing to 7 [ 476.976531][ T5823] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 241, changing to 7 [ 476.990387][ T5823] usb 5-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 476.995600][ T5823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.000981][ T5823] usb 5-1: Product: syz [ 477.003660][ T5823] usb 5-1: Manufacturer: syz [ 477.007641][ T5823] usb 5-1: SerialNumber: syz [ 477.034021][T13367] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1968'. [ 477.041148][ T42] audit: type=1800 audit(1785903370.642:7348): pid=13319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=166300 res=0 errno=0 [ 477.061640][ T42] audit: type=1800 audit(1785903370.662:7349): pid=13319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=166332 res=0 errno=0 [ 477.069834][ T42] audit: type=1800 audit(1785903370.672:7350): pid=13319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=166307 res=0 errno=0 [ 477.078101][ T42] audit: type=1800 audit(1785903370.672:7351): pid=13319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=166308 res=0 errno=0 [ 477.321323][ T5823] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 477.369904][ T5823] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 477.380020][ T5823] snd-usb-us122l 5-1:1.1: usb_set_interface error [ 477.383199][ T5823] snd-usb-us122l 5-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 477.392228][ T42] audit: type=1800 audit(1785903370.992:7352): pid=13319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=166329 res=0 errno=0 [ 477.393560][ T5823] usb 5-1: USB disconnect, device number 57 [ 477.402350][ T42] audit: type=1800 audit(1785903371.002:7353): pid=13319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=166330 res=0 errno=0 [ 477.427668][T13319] udevd[13319]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 477.837445][T13380] netlink: 'syz.3.1973': attribute type 2 has an invalid length. [ 477.868893][T13380] syzkaller0: entered promiscuous mode [ 477.870656][T13380] syzkaller0: entered allmulticast mode [ 477.879326][T13380] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1973'. [ 479.506092][ T1043] usb 38-1: device descriptor read/8, error -110 [ 479.913678][ T1043] usb usb38-port1: attempt power cycle [ 480.332264][T13399] syzkaller0: left promiscuous mode [ 480.334152][T13399] syzkaller0: left allmulticast mode [ 480.522684][ T1043] usb usb38-port1: unable to enumerate USB device [ 480.574472][T13404] No control pipe specified [ 481.177374][T13410] max out of range [ 481.494796][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 481.494816][ T42] audit: type=1800 audit(1785903375.092:7369): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 481.542090][T13421] netlink: 'syz.0.1987': attribute type 2 has an invalid length. [ 481.552524][T13421] syzkaller0: entered promiscuous mode [ 481.554418][T13421] syzkaller0: entered allmulticast mode [ 481.563557][T13421] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1987'. [ 481.610978][ T42] audit: type=1800 audit(1785903375.212:7370): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 481.785947][ T1487] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 481.935946][ T1487] usb 6-1: Using ep0 maxpacket: 8 [ 481.939751][ T1487] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 245, changing to 7 [ 481.943365][ T1487] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 241, changing to 7 [ 481.948738][ T1487] usb 6-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 481.951775][ T1487] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.954294][ T1487] usb 6-1: Product: syz [ 481.955640][ T1487] usb 6-1: Manufacturer: syz [ 481.957365][ T1487] usb 6-1: SerialNumber: syz [ 481.965776][ T42] audit: type=1800 audit(1785903375.562:7371): pid=13319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=166706 res=0 errno=0 [ 481.973304][ T42] audit: type=1800 audit(1785903375.562:7372): pid=13319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=166738 res=0 errno=0 [ 481.979789][ T42] audit: type=1800 audit(1785903375.562:7373): pid=13319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=166713 res=0 errno=0 [ 481.990217][ T42] audit: type=1800 audit(1785903375.572:7374): pid=13319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=166714 res=0 errno=0 [ 482.259192][ T1487] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 482.329627][ T1487] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 482.345989][ T1487] snd-usb-us122l 6-1:1.1: usb_set_interface error [ 482.350987][ T42] audit: type=1800 audit(1785903375.952:7375): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 482.360304][ T1487] snd-usb-us122l 6-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 482.376772][ T1487] usb 6-1: USB disconnect, device number 60 [ 482.382449][ T42] audit: type=1800 audit(1785903375.972:7376): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 482.405247][ T42] audit: type=1800 audit(1785903375.972:7377): pid=13319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=166735 res=0 errno=0 [ 482.425980][ T42] audit: type=1800 audit(1785903375.972:7378): pid=13319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=166736 res=0 errno=0 [ 482.431663][T13319] udevd[13319]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 483.245910][ T5842] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 483.406091][ T5842] usb 6-1: Using ep0 maxpacket: 8 [ 483.411435][ T5842] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 245, changing to 7 [ 483.415363][ T5842] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 241, changing to 7 [ 483.422078][ T5842] usb 6-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 483.426067][ T5842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.429424][ T5842] usb 6-1: Product: syz [ 483.431213][ T5842] usb 6-1: Manufacturer: syz [ 483.433270][ T5842] usb 6-1: SerialNumber: syz [ 483.451090][T13451] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1997'. [ 483.459498][T13451] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1997'. [ 483.463473][T13451] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1997'. [ 483.468913][T13451] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1997'. [ 483.472249][T13451] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1997'. [ 483.650631][ T5842] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 483.691717][ T5842] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 483.697747][ T5842] snd-usb-us122l 6-1:1.1: usb_set_interface error [ 483.700176][ T5842] snd-usb-us122l 6-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 483.709653][ T5842] usb 6-1: USB disconnect, device number 61 [ 483.732985][T13319] udevd[13319]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 484.985947][ T845] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 485.155877][ T845] usb 10-1: Using ep0 maxpacket: 8 [ 485.164205][ T845] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 245, changing to 7 [ 485.167962][ T845] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 241, changing to 7 [ 485.173566][ T845] usb 10-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 485.176660][ T845] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.200981][ T845] usb 10-1: Product: syz [ 485.208730][ T845] usb 10-1: Manufacturer: syz [ 485.210160][ T845] usb 10-1: SerialNumber: syz [ 485.445938][ T845] usb 10-1: Audio class v2/v3 interfaces need an interface association [ 485.524866][ T845] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 485.531492][ T845] snd-usb-us122l 10-1:1.1: usb_set_interface error [ 485.533637][ T845] snd-usb-us122l 10-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 485.543911][ T845] usb 10-1: USB disconnect, device number 20 [ 485.566983][T13319] udevd[13319]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 485.846051][ T5828] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 486.008741][ T5828] usb 5-1: Using ep0 maxpacket: 8 [ 486.013285][ T5828] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 245, changing to 7 [ 486.021669][ T5828] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 241, changing to 7 [ 486.031700][ T5828] usb 5-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 486.041281][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.043795][ T5828] usb 5-1: Product: syz [ 486.045220][ T5828] usb 5-1: Manufacturer: syz [ 486.049758][ T5828] usb 5-1: SerialNumber: syz [ 486.267794][ T5828] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 486.309038][ T5828] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 486.315870][ T5828] snd-usb-us122l 5-1:1.1: usb_set_interface error [ 486.318341][ T5828] snd-usb-us122l 5-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 486.327492][ T5828] usb 5-1: USB disconnect, device number 58 [ 486.360354][T13319] udevd[13319]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 487.048300][ T42] kauditd_printk_skb: 54 callbacks suppressed [ 487.048313][ T42] audit: type=1800 audit(1785903380.652:7433): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 487.097019][ T42] audit: type=1800 audit(1785903380.692:7434): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 487.165569][ T42] audit: type=1800 audit(1785903380.762:7435): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=167929 res=0 errno=0 [ 487.965937][ T42] audit: type=1800 audit(1785903381.562:7436): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 488.022508][ T42] audit: type=1800 audit(1785903381.622:7437): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 488.257211][ T1487] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 488.416345][ T1487] usb 10-1: Using ep0 maxpacket: 8 [ 488.436581][ T1487] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 245, changing to 7 [ 488.441581][ T1487] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 241, changing to 7 [ 488.458556][ T1487] usb 10-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 488.462682][ T1487] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.473645][ T1487] usb 10-1: Product: syz [ 488.479901][ T1487] usb 10-1: Manufacturer: syz [ 488.486630][ T1487] usb 10-1: SerialNumber: syz [ 488.495621][ T42] audit: type=1800 audit(1785903382.092:7438): pid=13319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=167950 res=0 errno=0 [ 488.559809][ T42] audit: type=1800 audit(1785903382.152:7439): pid=13319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=167982 res=0 errno=0 [ 488.578358][T13521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2020'. [ 488.584852][ T42] audit: type=1800 audit(1785903382.182:7440): pid=13319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=167957 res=0 errno=0 [ 488.601289][ T42] audit: type=1800 audit(1785903382.202:7441): pid=13319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=167958 res=0 errno=0 [ 488.630024][T13525] netlink: 'syz.3.2021': attribute type 2 has an invalid length. [ 488.651090][T13525] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2021'. [ 488.916931][ T1487] usb 10-1: Audio class v2/v3 interfaces need an interface association [ 489.008831][ T42] audit: type=1800 audit(1785903382.602:7442): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 489.024350][ T1487] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 489.031097][ T1487] snd-usb-us122l 10-1:1.1: usb_set_interface error [ 489.033818][ T1487] snd-usb-us122l 10-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 489.042743][ T1487] usb 10-1: USB disconnect, device number 21 [ 489.061218][T13319] udevd[13319]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 489.792621][T13551] netlink: 'syz.1.2030': attribute type 2 has an invalid length. [ 489.801249][T13551] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2030'. [ 490.295402][T13565] No control pipe specified [ 491.153916][T13570] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 491.157257][T13570] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 491.296831][T13572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2038'. [ 491.345664][T13579] netlink: 'syz.1.2040': attribute type 2 has an invalid length. [ 491.353863][T13579] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2040'. [ 492.049100][T13593] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2045'. [ 492.054680][T13593] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2045'. [ 492.059831][T13593] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2045'. [ 492.064861][T13593] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2045'. [ 492.070096][T13593] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2045'. [ 492.077600][ T42] kauditd_printk_skb: 18 callbacks suppressed [ 492.077976][ T42] audit: type=1800 audit(1785903385.682:7461): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 492.505573][T13597] No control pipe specified [ 492.871438][ T42] audit: type=1800 audit(1785903386.472:7462): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 492.933072][ T42] audit: type=1800 audit(1785903386.532:7463): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 493.228584][ T42] audit: type=1800 audit(1785903386.832:7464): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=168500 res=0 errno=0 [ 493.937018][ T42] audit: type=1800 audit(1785903387.542:7465): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 494.651587][T13634] __nla_validate_parse: 4 callbacks suppressed [ 494.651683][T13634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2058'. [ 494.663945][T13634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2058'. [ 494.669252][T13634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2058'. [ 494.675959][T13634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2058'. [ 495.022436][ T42] audit: type=1800 audit(1785903388.622:7466): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 495.081524][T13644] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2063'. [ 495.084305][T13644] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2063'. [ 495.170958][ T42] audit: type=1800 audit(1785903388.772:7467): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 495.176920][ T42] audit: type=1800 audit(1785903388.772:7468): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=168626 res=0 errno=0 [ 495.252769][ T42] audit: type=1800 audit(1785903388.852:7469): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 495.305989][ T42] audit: type=1800 audit(1785903388.882:7470): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=168639 res=0 errno=0 [ 496.188241][T13666] max out of range [ 497.103685][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 497.103699][ T42] audit: type=1800 audit(1785903390.702:7476): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 497.158228][ T42] audit: type=1800 audit(1785903390.762:7477): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 497.237037][ T42] audit: type=1800 audit(1785903390.842:7478): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=168786 res=0 errno=0 [ 497.513040][ T42] audit: type=1800 audit(1785903391.112:7479): pid=13699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2082" name="scheduler" dev="sysfs" ino=15968 res=0 errno=0 [ 498.200399][ T42] audit: type=1800 audit(1785903391.802:7480): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 498.245961][ T42] audit: type=1800 audit(1785903391.842:7481): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 498.306370][ T42] audit: type=1800 audit(1785903391.912:7482): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 498.342783][ T42] audit: type=1800 audit(1785903391.942:7483): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 498.362592][ T42] audit: type=1800 audit(1785903391.952:7484): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 498.480983][ T42] audit: type=1800 audit(1785903392.082:7485): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=168912 res=0 errno=0 [ 499.635986][ T7822] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 499.785981][ T7822] usb 10-1: Using ep0 maxpacket: 8 [ 499.791261][ T7822] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 245, changing to 7 [ 499.796252][ T7822] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 241, changing to 7 [ 499.803341][ T7822] usb 10-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 499.807652][ T7822] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.811128][ T7822] usb 10-1: Product: syz [ 499.813101][ T7822] usb 10-1: Manufacturer: syz [ 499.815149][ T7822] usb 10-1: SerialNumber: syz [ 500.043009][ T7822] usb 10-1: Audio class v2/v3 interfaces need an interface association [ 500.108827][ T7822] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 500.123316][ T7822] snd-usb-us122l 10-1:1.1: usb_set_interface error [ 500.126623][ T7822] snd-usb-us122l 10-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 500.142802][ T7822] usb 10-1: USB disconnect, device number 22 [ 500.334045][T13319] udevd[13319]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 501.110264][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.112498][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.241210][T13745] No control pipe specified [ 501.336451][ T5842] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 501.516180][ T5842] usb 5-1: device descriptor read/64, error -71 [ 501.766143][ T5842] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 501.915934][ T5842] usb 5-1: device descriptor read/64, error -71 [ 502.036937][ T5842] usb usb5-port1: attempt power cycle [ 502.180945][ T42] kauditd_printk_skb: 14 callbacks suppressed [ 502.180957][ T42] audit: type=1800 audit(1785903395.782:7500): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=169262 res=0 errno=0 [ 502.396479][ T5842] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 502.446962][ T5842] usb 5-1: device descriptor read/8, error -71 [ 502.706080][ T5842] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 502.736627][ T5842] usb 5-1: device descriptor read/8, error -71 [ 502.856355][ T5842] usb usb5-port1: unable to enumerate USB device [ 503.213546][ T42] audit: type=1804 audit(1785903396.812:7501): pid=13755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2099" name=2F6E6577726F6F742F14 dev="tmpfs" ino=1592 res=1 errno=0 [ 503.390273][ T42] audit: type=1804 audit(1785903396.992:7502): pid=13759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2101" name=2F6E6577726F6F742F14 dev="tmpfs" ino=2164 res=1 errno=0 [ 503.759580][ T42] audit: type=1800 audit(1785903397.362:7503): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0 [ 504.214713][T13767] nvmet: adding nsid 1 to subsystem subsys1 [ 504.217521][ T42] audit: type=1800 audit(1785903397.822:7504): pid=13767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2104" name="device_path" dev="configfs" ino=51847 res=0 errno=0 [ 504.228903][T13767] [ 504.229732][T13767] ====================================================== [ 504.231878][T13767] WARNING: possible circular locking dependency detected [ 504.234059][T13767] syzkaller #0 Tainted: G L [ 504.236297][T13767] ------------------------------------------------------ [ 504.238510][T13767] syz.3.2104/13767 is trying to acquire lock: [ 504.240489][T13767] ffff88806b460450 (sb_writers#5){.+.+}-{0:0}, at: path_openat+0xad9/0x4280 [ 504.243197][T13767] [ 504.243197][T13767] but task is already holding lock: [ 504.245465][T13767] ffff888013f4b068 (&subsys->lock){+.+.}-{4:4}, at: nvmet_ns_enable+0x4f/0x5d0 [ 504.248280][T13767] [ 504.248280][T13767] which lock already depends on the new lock. [ 504.248280][T13767] [ 504.251700][T13767] [ 504.251700][T13767] the existing dependency chain (in reverse order) is: [ 504.254452][T13767] [ 504.254452][T13767] -> #3 (&subsys->lock){+.+.}-{4:4}: [ 504.256756][T13767] lock_acquire+0x1b9/0x370 [ 504.258364][T13767] __mutex_lock+0x1a4/0x1bd0 [ 504.259969][T13767] nvmet_ns_device_path_store+0x57/0x1c0 [ 504.261949][T13767] configfs_write_iter+0x302/0x4e0 [ 504.263721][T13767] vfs_write+0x6ac/0x1050 [ 504.265443][T13767] ksys_write+0x12a/0x250 [ 504.267008][T13767] __do_fast_syscall_32+0xe7/0x970 [ 504.268767][T13767] do_fast_syscall_32+0x32/0x70 [ 504.270498][T13767] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 504.272987][T13767] [ 504.272987][T13767] -> #2 (&p->frag_sem){.+.+}-{4:4}: [ 504.275394][T13767] lock_acquire+0x1b9/0x370 [ 504.276983][T13767] down_read+0x99/0x4c0 [ 504.278520][T13767] __configfs_open_file+0xe8/0x9c0 [ 504.280260][T13767] do_dentry_open+0x6ab/0x14d0 [ 504.281936][T13767] vfs_open+0x82/0x3f0 [ 504.283394][T13767] dentry_open+0x71/0xd0 [ 504.284955][T13767] ima_calc_file_hash+0xe1/0x380 [ 504.286689][T13767] ima_collect_measurement+0x94f/0xb30 [ 504.288564][T13767] process_measurement+0xdfe/0x2350 [ 504.290362][T13767] ima_file_check+0xcc/0x120 [ 504.292486][T13767] security_file_post_open+0xc4/0x210 [ 504.294640][T13767] path_openat+0x985/0x4280 [ 504.296240][T13767] do_file_open+0x20e/0x430 [ 504.297828][T13767] do_sys_openat2+0x10f/0x1e0 [ 504.299461][T13767] __ia32_compat_sys_openat+0x12d/0x210 [ 504.301379][T13767] __do_fast_syscall_32+0xe7/0x970 [ 504.303132][T13767] do_fast_syscall_32+0x32/0x70 [ 504.304842][T13767] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 504.306988][T13767] [ 504.306988][T13767] -> #1 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 504.309668][T13767] lock_acquire+0x1b9/0x370 [ 504.311336][T13767] __mutex_lock+0x1a4/0x1bd0 [ 504.312957][T13767] process_measurement+0x5ab/0x2350 [ 504.314997][T13767] ima_file_check+0xcc/0x120 [ 504.317147][T13767] security_file_post_open+0xc4/0x210 [ 504.319603][T13767] path_openat+0x985/0x4280 [ 504.321683][T13767] do_file_open+0x20e/0x430 [ 504.323791][T13767] do_sys_openat2+0x10f/0x1e0 [ 504.325945][T13767] __x64_sys_openat+0x12d/0x210 [ 504.328212][T13767] do_syscall_64+0x115/0x840 [ 504.330352][T13767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.332966][T13767] [ 504.332966][T13767] -> #0 (sb_writers#5){.+.+}-{0:0}: [ 504.336004][T13767] check_prev_add+0xeb/0xe60 [ 504.338142][T13767] __lock_acquire+0x136c/0x1a40 [ 504.340400][T13767] lock_acquire+0x1b9/0x370 [ 504.342511][T13767] mnt_want_write+0x6f/0x410 [ 504.344646][T13767] path_openat+0xad9/0x4280 [ 504.346751][T13767] do_file_open+0x20e/0x430 [ 504.348849][T13767] file_open_name+0x1c3/0x3e0 [ 504.351018][T13767] filp_open+0x2e/0x50 [ 504.352950][T13767] nvmet_file_ns_enable+0x95/0x420 [ 504.355292][T13767] nvmet_ns_enable+0x35f/0x5d0 [ 504.357499][T13767] nvmet_ns_enable_store+0x11e/0x160 [ 504.359914][T13767] configfs_write_iter+0x302/0x4e0 [ 504.362240][T13767] vfs_write+0x6ac/0x1050 [ 504.364280][T13767] ksys_write+0x12a/0x250 [ 504.366308][T13767] __do_fast_syscall_32+0xe7/0x970 [ 504.368630][T13767] do_fast_syscall_32+0x32/0x70 [ 504.370886][T13767] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 504.373677][T13767] [ 504.373677][T13767] other info that might help us debug this: [ 504.373677][T13767] [ 504.377852][T13767] Chain exists of: [ 504.377852][T13767] sb_writers#5 --> &p->frag_sem --> &subsys->lock [ 504.377852][T13767] [ 504.382901][T13767] Possible unsafe locking scenario: [ 504.382901][T13767] [ 504.385942][T13767] CPU0 CPU1 [ 504.388183][T13767] ---- ---- [ 504.390417][T13767] lock(&subsys->lock); [ 504.392190][T13767] lock(&p->frag_sem); [ 504.394943][T13767] lock(&subsys->lock); [ 504.397710][T13767] rlock(sb_writers#5); [ 504.399462][T13767] [ 504.399462][T13767] *** DEADLOCK *** [ 504.399462][T13767] [ 504.402771][T13767] 6 locks held by syz.3.2104/13767: [ 504.404893][T13767] #0: ffff888024dc8ef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 504.408659][T13767] #1: ffff888021f28450 (sb_writers#22){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 504.412375][T13767] #2: ffff88804be3b880 (&buffer->mutex#2){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 504.416472][T13767] #3: ffff88806beb1170 (&p->frag_sem){.+.+}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 504.420466][T13767] #4: ffffffff8fd33748 (nvmet_config_sem){+.+.}-{4:4}, at: nvmet_ns_enable_store+0xa5/0x160 [ 504.424613][T13767] #5: ffff888013f4b068 (&subsys->lock){+.+.}-{4:4}, at: nvmet_ns_enable+0x4f/0x5d0 [ 504.428422][T13767] [ 504.428422][T13767] stack backtrace: [ 504.430861][T13767] CPU: 1 UID: 0 PID: 13767 Comm: syz.3.2104 Tainted: G L syzkaller #0 PREEMPT(full) [ 504.430895][T13767] Tainted: [L]=SOFTLOCKUP [ 504.430902][T13767] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 504.430912][T13767] Call Trace: [ 504.430921][T13767] [ 504.430930][T13767] dump_stack_lvl+0x100/0x190 [ 504.430955][T13767] print_circular_bug.cold+0x178/0x1c7 [ 504.430985][T13767] check_noncircular+0x146/0x160 [ 504.431009][T13767] ? __lock_acquire+0xd5b/0x1a40 [ 504.431037][T13767] check_prev_add+0xeb/0xe60 [ 504.431066][T13767] __lock_acquire+0x136c/0x1a40 [ 504.431096][T13767] ? try_to_unlazy+0x296/0x910 [ 504.431122][T13767] lock_acquire+0x1b9/0x370 [ 504.431146][T13767] ? path_openat+0xad9/0x4280 [ 504.431163][T13767] ? __pfx___might_resched+0x10/0x10 [ 504.431190][T13767] mnt_want_write+0x6f/0x410 [ 504.431217][T13767] ? path_openat+0xad9/0x4280 [ 504.431237][T13767] path_openat+0xad9/0x4280 [ 504.431261][T13767] ? __pfx_path_openat+0x10/0x10 [ 504.431276][T13767] ? kasan_save_stack+0x30/0x50 [ 504.431295][T13767] ? kasan_save_track+0x14/0x30 [ 504.431313][T13767] ? __kasan_slab_alloc+0x89/0x90 [ 504.431332][T13767] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 504.431352][T13767] ? do_getname_kernel+0x5d/0x250 [ 504.431370][T13767] ? filp_open+0x1d/0x50 [ 504.431390][T13767] ? nvmet_file_ns_enable+0x95/0x420 [ 504.431413][T13767] ? nvmet_ns_enable+0x35f/0x5d0 [ 504.431434][T13767] do_file_open+0x20e/0x430 [ 504.431451][T13767] ? __pfx_do_file_open+0x10/0x10 [ 504.431477][T13767] ? rcu_is_watching+0x12/0xc0 [ 504.431498][T13767] file_open_name+0x1c3/0x3e0 [ 504.431519][T13767] ? __pfx_file_open_name+0x10/0x10 [ 504.431538][T13767] ? do_getname_kernel+0x5d/0x250 [ 504.431559][T13767] ? __asan_memcpy+0x3c/0x60 [ 504.431575][T13767] ? do_getname_kernel+0x1be/0x250 [ 504.431593][T13767] filp_open+0x2e/0x50 [ 504.431612][T13767] nvmet_file_ns_enable+0x95/0x420 [ 504.431638][T13767] nvmet_ns_enable+0x35f/0x5d0 [ 504.431661][T13767] nvmet_ns_enable_store+0x11e/0x160 [ 504.431679][T13767] ? __pfx_nvmet_ns_enable_store+0x10/0x10 [ 504.431695][T13767] ? configfs_write_iter+0x388/0x4e0 [ 504.431710][T13767] configfs_write_iter+0x302/0x4e0 [ 504.431722][T13767] vfs_write+0x6ac/0x1050 [ 504.431732][T13767] ? __pfx_configfs_write_iter+0x10/0x10 [ 504.431743][T13767] ? __pfx_vfs_write+0x10/0x10 [ 504.431752][T13767] ? find_held_lock+0x2b/0x80 [ 504.431770][T13767] ksys_write+0x12a/0x250 [ 504.431780][T13767] ? __pfx_ksys_write+0x10/0x10 [ 504.431791][T13767] __do_fast_syscall_32+0xe7/0x970 [ 504.431810][T13767] do_fast_syscall_32+0x32/0x70 [ 504.431825][T13767] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 504.431840][T13767] RIP: 0023:0xf6feefec [ 504.431856][T13767] Code: Unable to access opcode bytes at 0xf6feefc2. [ 504.431862][T13767] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 504.431873][T13767] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000200 [ 504.431886][T13767] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 504.431892][T13767] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 504.431899][T13767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 504.431906][T13767] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 504.431919][T13767] [ 504.534373][ T42] audit: type=1800 audit(1785903397.822:7505): pid=13767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2104" name="buffered_io" dev="configfs" ino=51848 res=0 errno=0 [ 504.540859][ T42] audit: type=1800 audit(1785903397.832:7506): pid=13767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2104" name="enable" dev="configfs" ino=51849 res=0 errno=0 [ 504.547071][ T42] audit: type=1800 audit(1785903397.832:7507): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15878 res=0 errno=0 [ 504.555751][T13767] nvmet: failed to open file ./file0: (-2) [ 504.654782][ T42] audit: type=1804 audit(1785903398.252:7508): pid=13771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2103" name=2F6E6577726F6F742F14 dev="tmpfs" ino=1505 res=1 errno=0 [ 505.222654][ T42] audit: type=1800 audit(1785903398.822:7509): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16523 res=0 errno=0