last executing test programs: 3m23.895816976s ago: executing program 2 (id=1910): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r3, 0xc00c6211, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000008c0)={'syztnl2\x00', r7, 0x7800, 0x22b384db60457e3a, 0x9, 0x6, {{0x5, 0x4, 0x1, 0x36, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @broadcast, @rand_addr=0x64010100}}}}) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x2000002, 0x2, 0x2, 0x0, 0x3}) close(r5) capset(0x0, &(0x7f0000000040)={0x240000, 0x200000, 0x4}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000001c0)={0x0, 0x80000, 0x0, 0x2, 0x18, "00000000000700000000fffe00"}) write(r0, &(0x7f0000000100)="60000000100001000100000000000000000000000000000000000000000000000900030063616e3000000000340012800800010063616e00280002802400010020a10700"/96, 0x60) 3m22.815025266s ago: executing program 2 (id=1912): openat$rtc(0xffffff9c, &(0x7f0000000140), 0x101000, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)={0x32, @multicast1, 0x4e22, 0x1, 'nq\x00', 0x21, 0x4, 0x65}, 0x2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) chdir(&(0x7f0000000280)='./file0/file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r7, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) write$tun(r4, &(0x7f0000000840)=ANY=[], 0x11b0) 3m20.986005191s ago: executing program 3 (id=1918): openat$rtc(0xffffff9c, &(0x7f0000000140), 0x101000, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)={0x32, @multicast1, 0x4e22, 0x1, 'nq\x00', 0x21, 0x4, 0x65}, 0x2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) chdir(&(0x7f0000000280)='./file0/file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r6, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) write$tun(r4, &(0x7f0000000840)=ANY=[], 0x11b0) 3m20.816890182s ago: executing program 1 (id=1919): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nl80211(0x0, r0) userfaultfd(0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111, 0x6}}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x4, 0x5000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x4000000000, r4}) syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) clock_gettime(0x0, &(0x7f0000005900)={0x0, 0x0}) recvmmsg$unix(r5, &(0x7f00000057c0)=[{{&(0x7f0000000400)=@abs, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000500)=""/130, 0x82}, {&(0x7f0000000740)=""/235, 0xeb}], 0x2, &(0x7f00000008c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0xbc}}, {{&(0x7f0000000980)=@abs, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000a00)=""/188, 0xbc}, {&(0x7f0000000ac0)}, {&(0x7f0000000b00)=""/61, 0x3d}, {&(0x7f0000000b40)=""/72, 0x48}, {0x0}], 0x5, &(0x7f0000000cc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x7c}}, {{0x0, 0x0, &(0x7f00000011c0)=[{0x0}, {&(0x7f0000000ec0)=""/148, 0x94}, {&(0x7f0000000f80)=""/142, 0x8e}, {&(0x7f0000001040)=""/76, 0x4c}, {&(0x7f00000010c0)=""/41, 0x29}, {&(0x7f0000001100)=""/126, 0x7e}, {&(0x7f0000001180)=""/50, 0x32}], 0x7, &(0x7f0000001200)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0xac}}, {{&(0x7f00000012c0), 0x6e, &(0x7f0000002440)=[{&(0x7f0000001340)=""/66, 0x42}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/67, 0x43}], 0x3, &(0x7f0000002480)=[@cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x28}}, {{&(0x7f00000024c0)=@abs, 0x6e, &(0x7f00000037c0)=[{&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/206, 0xce}, {&(0x7f0000003640)=""/91, 0x5b}, {&(0x7f00000036c0)=""/216, 0xd8}], 0x4, &(0x7f0000003800)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}, {{&(0x7f0000003900), 0x6e, &(0x7f0000003ac0)=[{&(0x7f00000039c0)=""/48, 0x30}, {&(0x7f0000003a00)=""/166, 0xa6}], 0x2, &(0x7f0000003b00)=[@rights={{0xc}}, @cred={{0x18}}], 0x24}}, {{&(0x7f0000003b40), 0x6e, &(0x7f0000003d40)=[{0x0}, {&(0x7f0000003c00)=""/120, 0x78}, {&(0x7f0000003c80)=""/147, 0x93}], 0x3}}, {{&(0x7f0000003d80)=@abs, 0x6e, &(0x7f0000003e80)=[{&(0x7f0000003e00)=""/71, 0x47}], 0x1, &(0x7f0000003ec0)=[@rights={{0xc}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x3c}}, {{&(0x7f0000003f40)=@abs, 0x6e, &(0x7f0000005500), 0x0, &(0x7f0000005540)=[@cred={{0x18}}], 0x18}}, {{0x0, 0x0, &(0x7f0000005700)=[{&(0x7f0000005580)=""/233, 0xe9}, {&(0x7f0000005680)=""/128, 0x80}], 0x2, &(0x7f0000005740)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0xc}}], 0x54}}], 0xa, 0x22, &(0x7f0000005940)={r6, r7+60000000}) syz_io_uring_setup(0x5f38, &(0x7f0000000640)={0x0, 0x2, 0x800, 0x3, 0x395}, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x50, 0x0, 0x0, 0x800000000000002, &(0x7f00000001c0)={0x0, 0x989680}}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x34, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) 3m20.27995972s ago: executing program 2 (id=1920): socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat(0xffffffffffffff9c, 0x0, 0x320800d, 0x31) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@TCA_RATE={0x6, 0x5, {0xff, 0x8}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x34}}, 0x0) read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0xffffffffffffff7e) bind$inet6(r1, &(0x7f0000000440)={0xa, 0x4e23, 0x7, @remote, 0x63}, 0x1c) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="080001000300"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x140, 0x1f, 0x9, 0x2, 0x10000007, 0x1, 0x7fff, 0x30000002, 0x7, 0xc72d, 0x0, 0x7, 0x3, 0x400008, 0x29, 0x72f0, 0x101, 0x6, 0x6, 0x401, 0x4, 0x484, 0xa2dc, 0x9, 0x1000, 0x80000001, 0xa, 0x0, 0x383, 0x8001, 0x4]}) writev(r6, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000180)="29e3e5864ceda68155960e4b20eb0403a71898733f0dcb64c38849be0185191621d8d87c521201593212da719d600d9262d4ac59dfb5ec2b503053b465b55ae5c7ca58b82c73ad9aa7872d1e4060a6112879a7afe128f10bf20cfd", 0x5b}, {&(0x7f0000000300)="ac3d900278bc4f673648008b3fd9dafb", 0x10}, {&(0x7f0000000340)="79baf7c80af72c6d074d7aa55d18c2b3f92fb55d09041ffa4b66a0ed18f71e54cc0a5bc1461a6d07e6d4f31058721987ab90040f06c98df9afdd7c6614915beee9a0bea8187c6315a4be760ebc06c000bbe9a766f3752ff9ed8b304d3378bfd1a88dfc510d611a8c13259173a7c957bdd73f4bc320391f6d862cfdd58f6c09abefc7302f22bf6795474455a958f56a17d1551e", 0x93}, {0x0}, {&(0x7f00000004c0)="a407d58cecfb1369d434cee2363e2e667262a9fda651de7eb280ec8ff5087e0036af2fef7939cac0a06e6169aa6caa951a4a9b35e608532fafaa74692296b26bf7525aefeadde445128254deda33cb8622aad1f5aa0ab3ba8a81949805c4de7209102f463431fb613efae16477340300ad74baf9e9dcf19667797369fdeb42", 0x7f}, {&(0x7f00000005c0)}], 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r7, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3m19.679563314s ago: executing program 0 (id=1921): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="430b29bd7000fbdbdf250400001e"], 0x14}, 0x1, 0x0, 0x0, 0x2400c846}, 0x4004004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7) openat$binderfs(0xffffff9c, &(0x7f0000000180)='./binderfs/custom0\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x18, 0xb, &(0x7f0000000000)=ANY=[@ANYRESDEC=r6], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) splice(r4, 0x0, r6, 0x0, 0x3ff, 0x8) write$FUSE_INIT(r5, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x1, 0x4000000, 0x2, 0x80, 0x10000, 0xa79, 0x0, 0x0, 0x100}}, 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, &(0x7f0000000000)={0x77359400}, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r9, 0x1) accept4$x25(r9, 0x0, 0x0, 0x80800) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r10 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$SIOCX25GCALLUSERDATA(r4, 0x89e4, &(0x7f00000003c0)={0x2e, "9bba14a574f790d4825264976cc28848a6393a71a97b19b8a1f300c839efc88240b5c3916fdcc718ddad084b3369df9dfa0c55ad06525bab148dfce0c6aaa10b0a2ce9c8dea4b67e383a5f30613b6cdb019558585761c28807273bd8729fc78e035ccb7669bb5e304ebbc3f76d50922ecced439b393c2311961fe6bfbc8d5d39"}) write$apparmor_current(r10, &(0x7f0000000240)=ANY=[@ANYRES16=r1], 0x17) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f00000002c0)='/dev/nbd') write$cgroup_pid(r3, &(0x7f0000000240), 0x12) 3m19.476263921s ago: executing program 3 (id=1922): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) setreuid(r2, 0x0) setreuid(0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) clock_getres(0x7, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x9e8, 0x7, 0x0, 0x7, 0x0, 0x5a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, &(0x7f0000000600)=0xfc) sendfile(r4, r4, 0x0, 0x23) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000640)=ANY=[@ANYBLOB="50010000100001000000000000000000ff0200000000000000000000000000010000000000700fd8890cf906e0cd9e43f64e4e990000000000ffffffffffff020000002000"/79, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000000006c000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080ffff00000000000000000200020000000000480003006c7a7300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000027bd700028bd700025bd700028bd700001000000"], 0x150}}, 0x0) 3m18.659638255s ago: executing program 0 (id=1923): socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40), 0x20341, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x3, 0x407, 0x8, 0x801003e, 0x80, '\v\b\x00', 0x9, 0xfffffff5}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x12) dup(r1) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xc100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000000145802, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x103381) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) r3 = socket(0x2c, 0x803, 0xffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000005b80)={'ip6gre0\x00', 0x0}) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$cont(0x21, r4, 0x8, 0xffff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000480)={{0x6, 0x6, 0x4a7, 0x6, 'syz1\x00', 0x6}, 0x5, 0x3, 0xb4, r4, 0x6, 0x3, 'syz1\x00', &(0x7f0000000180)=['\x00z\x05c\xeap\xeb\x029\xf4\xfd\tocQ;\xfa\xf4\x19\xe2\xdd@NTg\xe8\xd1\xa4\xcf<*\xd8\x98Q>\x97Q*7\xaa\xb9\xee\x95\x96\xbf\f\"\xbdE%\xed\xe6\xb8\x05\x80\x9d\xb2\x87n\xd5\xd8\x10\xcc<\xb1\x19\xce\xe0;\x85\x06\xa9(\xa1\a\xd1\xe3\r\xaa\f\xca#\x93+\xd7~\x9fI\x82h\xcb\xd6\x9a\xd3\x12\xfd\xfb/@\xd3\b\xdf\xc0\xe4ry\x81\xfdX\xa2\xa4\xa3})\x7f\xf3\'\xd3PeY\xd8Zp', '^\x00', '#\x00', '\x00', ':]))', '\x00\x00\x01\x00\x00\x00\x00\x00\x00'], 0x8e}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xffffffdb) timer_create(0x0, 0x0, 0x0) mprotect(&(0x7f000088f000/0x3000)=nil, 0x3000, 0x0) setpriority(0x2, 0x0, 0x8) socket$pppoe(0x18, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3m18.471803286s ago: executing program 0 (id=1924): openat$rtc(0xffffff9c, &(0x7f0000000140), 0x101000, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)={0x32, @multicast1, 0x4e22, 0x1, 'nq\x00', 0x21, 0x4, 0x65}, 0x2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) chdir(&(0x7f0000000280)='./file0/file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r6, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) write$tun(r4, &(0x7f0000000840)=ANY=[], 0x11b0) 3m18.453632439s ago: executing program 2 (id=1925): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8c40, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)="26eba9fdb4cbab48929e1af151000000000000000500000000000100", 0x1c}], 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x80000) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f00000001c0)={0x10, 0x2}) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xc, 0x143182) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000002c0)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e1c, 0x3, 'wrr\x00', 0x5, 0x80, 0x1b}, 0x2c) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000300)={{0x84, @dev={0xac, 0x14, 0x14, 0x1b}, 0x4e21, 0x3, 'wrr\x00', 0x3b, 0x9, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x2, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x40004) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) flock(r7, 0xe) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r9, r10, 0x25, 0x2, @val=@perf_event={0x429}}, 0x18) close_range(r7, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="10000000530400082bbd9200ffdbdf25"], 0x20000}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080) 3m18.38316938s ago: executing program 3 (id=1926): openat$rtc(0xffffff9c, &(0x7f0000000140), 0x101000, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)={0x32, @multicast1, 0x4e22, 0x1, 'nq\x00', 0x21, 0x4, 0x65}, 0x2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) chdir(&(0x7f0000000280)='./file0/file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r6, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) write$tun(r4, &(0x7f0000000840)=ANY=[], 0x11b0) 3m18.235098511s ago: executing program 1 (id=1927): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) setreuid(r2, 0x0) setreuid(0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) clock_getres(0x7, &(0x7f0000000040)) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x9e8, 0x7, 0x0, 0x7, 0x0, 0x5a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, &(0x7f0000000600)=0xfc) sendfile(r3, r3, 0x0, 0x23) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000640)=ANY=[@ANYBLOB="50010000100001000000000000000000ff0200000000000000000000000000010000000000700fd8890cf906e0cd9e43f64e4e990000000000ffffffffffff020000002000"/79, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000000006c000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080ffff00000000000000000200020000000000480003006c7a7300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000027bd700028bd700025bd700028bd700001000000"], 0x150}}, 0x0) 3m18.106974877s ago: executing program 2 (id=1928): r0 = add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000080)={'rti800\x00', [0x0, 0x80008000, 0x1, 0xa, 0x0, 0x0, 0x1, 0xf, 0x1000, 0x1, 0x8, 0x1, 0x6, 0x4, 0xffff, 0x6, 0xffffffa7, 0x9, 0xfffffffd, 0x5, 0x3ff, 0x10000, 0x800, 0xe2df, 0x9, 0x1, 0x4, 0x3, 0x7, 0x5, 0x5, 0x4]}) r2 = socket$rds(0x15, 0x5, 0x0) r3 = openat$full(0xffffff9c, &(0x7f0000000140), 0x101, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x80c0) prlimit64(0x0, 0xe, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d0001000060000904008002030000000921060400012205000905810320000908070905020340"], 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x81) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780)='rpc_pipefs\x00', 0x1000000, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000500)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r6, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000844}, 0x14) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x414, 0x0, 0x9403, 0x0, 0x240, 0x2c0, 0x34c, 0x3d8, 0x3d8, 0x34c, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x218, 0x240, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x4}}, @common=@inet=@hashlimit2={{0x150}, {'syz_tun\x00', {0x100, 0xffffffff, 0x2, 0x56, 0x1000000, 0x1, 0x800, 0x40, 0x8}, {0xffff0001}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x1}}}, {{@uncond, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x3, 0x40a, 0x6, 'snmp_trap\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x470) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) syz_usb_ep_read(r4, 0x2, 0x0, 0x0) bind$rds(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r9 = socket(0x40000000015, 0x5, 0x0) getsockopt(r9, 0x200000000114, 0x2716, 0x0, &(0x7f0000000240)) keyctl$KEYCTL_MOVE(0x4, r0, r0, r0, 0x0) 3m17.367157781s ago: executing program 1 (id=1929): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x0, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x5, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0xbd5, 0x3, 0xe, 0xfffffffc, 0x90008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0xe, 0xfffffffe, 0x5], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x8001, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x7, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbcc5, 0x48c93690, 0x42, 0x3], [0xa, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x400005, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e4, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x80000001, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0xa, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0xfffffffa, 0x3, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x3, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x41, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x7, 0x9, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000040)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd70f2b30000259700000008000300", @ANYRES32=r5, @ANYBLOB="0a0006"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0xfffffffffffffffd]}, 0x8, 0x800) io_setup(0x1, &(0x7f00000001c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000300)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x406, r6, 0x0, 0x0, 0x0, 0x0, 0x2}]) io_cancel(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x6, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x0, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x7, 0x0, 0x40, 0x4, 0x0, @local, @loopback}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x0, 0x0, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x6, 0x14, 0xffff, 0x0, 0x0, 0x4, 0x0, @local, @empty}}}}) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) connect$inet(0xffffffffffffffff, 0x0, 0x0) 3m16.877498241s ago: executing program 0 (id=1930): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)="3c5c583ecd2d036a2762bb626c65640a", 0x10) openat(r0, 0x0, 0xc2802, 0x1a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000200), 0x4) r2 = openat2$dir(0xffffff9c, &(0x7f0000000040)='./debug/failslab/times\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000000)='./debug\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd3d, 0x25cfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0xfd0a, 0x2c, 0x42f, 0x870bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x7}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x62000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xa, 0x8, "ff000000000000000000000000000200"}) r6 = syz_open_pts(r5, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000002c0)=0x11) write$binfmt_elf64(r4, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x4, 0x9, 0x6, 0x2, 0x3, 0x3, 0x6, 0xb3, 0x40, 0x248, 0x7fff, 0x4, 0x38, 0x1, 0x8, 0x6, 0x1ff}, [{0x7, 0x5, 0x81, 0x200, 0x3, 0xffffffffffffffff, 0x0, 0x100000000}], "919fe5258697eb83817cc640b2f9a092c8b81ba47dcc74cfa365ec52a74abd1177", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa99) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000180)={r7, 0x1, r4, 0x1000, 0x80000}) futex(0x0, 0x36bf51381f43f77, 0x1, 0x0, 0x0, 0x1) r8 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r8, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x0, 0x700, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2063569a"}, 0x700}) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000000)=0x2) 3m16.513546284s ago: executing program 1 (id=1931): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x88c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000340)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x4c1d, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0300000000002cd5ed96143ef204c8a58a128eb18ed97cc511492f028c981ae20f6d1cd430184d23b14050ef77ab20ea0b39fe4038c6109dfd952b042710ddadbdc5c5abcaa23f0d776332f07a46ee1eb4f268be2cea7f7361ffa9634f6bd9cad0e306158e36978ab6b1912c7cac34505c77d19c52cad78e6dbec77487aad8bd0e53748d4fa6c9f8688d5bf60363e9723918286c44835d61f7b7571c61b07db1dd482cf0de088efd55", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) read$FUSE(0xffffffffffffffff, &(0x7f0000002300)={0x2020}, 0x2020) syz_genetlink_get_family_id$ethtool(0x0, r2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket(0x2b, 0x1, 0x1) 3m16.513265434s ago: executing program 3 (id=1932): socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40), 0x20341, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x3, 0x407, 0x8, 0x801003e, 0x80, '\v\b\x00', 0x9, 0xfffffff5}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x12) dup(r1) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xc100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000000145802, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x103381) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) r3 = socket(0x2c, 0x803, 0xffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000005b80)={'ip6gre0\x00', 0x0}) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$cont(0x21, r4, 0x8, 0xffff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000480)={{0x6, 0x6, 0x4a7, 0x6, 'syz1\x00', 0x6}, 0x5, 0x3, 0xb4, r4, 0x6, 0x3, 'syz1\x00', &(0x7f0000000180)=['\x00z\x05c\xeap\xeb\x029\xf4\xfd\tocQ;\xfa\xf4\x19\xe2\xdd@NTg\xe8\xd1\xa4\xcf<*\xd8\x98Q>\x97Q*7\xaa\xb9\xee\x95\x96\xbf\f\"\xbdE%\xed\xe6\xb8\x05\x80\x9d\xb2\x87n\xd5\xd8\x10\xcc<\xb1\x19\xce\xe0;\x85\x06\xa9(\xa1\a\xd1\xe3\r\xaa\f\xca#\x93+\xd7~\x9fI\x82h\xcb\xd6\x9a\xd3\x12\xfd\xfb/@\xd3\b\xdf\xc0\xe4ry\x81\xfdX\xa2\xa4\xa3})\x7f\xf3\'\xd3PeY\xd8Zp', '^\x00', '#\x00', '\x00', ':]))', '\x00\x00\x01\x00\x00\x00\x00\x00\x00'], 0x8e}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xffffffdb) timer_create(0x0, 0x0, 0x0) mprotect(&(0x7f000088f000/0x3000)=nil, 0x3000, 0x0) setpriority(0x2, 0x0, 0x8) socket$pppoe(0x18, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3m16.510796539s ago: executing program 0 (id=1939): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x10, 0x572, 0x8000, 0x9, "ff000d00009a468e0cd912098d00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000100)={0xfffe, 0x2, 0x8, 0x3, 0x1b, "0000000000001f00"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0x50) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) socket(0x840000000002, 0x3, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x11) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSCTTY(r3, 0x540e, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_DELTABLE={0x208, 0x2, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xe8, 0x6, "fa5d76fb3b3de2b36d296478992603b751f7fed87ee59f6df75df9d5f22b600f36cf1a2598a6e767b650836954598c92ebea5830c40642fe969a4c1c6ee74a2aa579daf5258234c67aa456fd20f84b9e00a4b50391c1673a850006c5a7fcaf7eaff52b5afbf8149ac49dcf54679c3d816f8ae75c8f58f4324fc10b249f476be0c0735da1fdb88d44400963d985ca85694b0816cfd9b33c1678b2e008ba5433892a8246282c637ca5bb009de888213a068d041ae121aca02b8ea76be1d39c0bb6f15627c6231f75bfce6ac7a090a2c5888454c94e481419c72b9f276f7e522679c8a0d251"}, @NFTA_TABLE_USERDATA={0x104, 0x6, "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"}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0x230}, 0x1, 0x0, 0x0, 0x4404c810}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r7 = openat$nci(0xffffff9c, &(0x7f00000005c0), 0x2, 0x0) lseek(r7, 0xc18, 0x4) syz_usb_disconnect(r6) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r8, 0xc03864bc, &(0x7f0000000380)={0x701, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0x10, 0x1, "", [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x5, 0x4, 0x1a}}}}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r6, 0x4004550d, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00\n'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 3m16.00026229s ago: executing program 3 (id=1933): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$video(0x0, 0xfffffffd, 0x10bd00) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x48}}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffe51) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[], [], 0x2f}) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5407000044000701fefffffffcdbdf25037c0000040045803c0701"], 0x754}, 0x1, 0x0, 0x0, 0x4000010}, 0xc000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4003) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x450c03, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000040)='a,\x00') mremap(&(0x7f0000ff1000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz0\x00', {0x6ec9, 0x8007, 0x5, 0x5}, 0x3e, [0xfffffff3, 0x20005, 0x8, 0x2, 0x533b, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x2, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x400001ff, 0x8000, 0xfff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x1, 0x5], [0x391, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x800, 0x4, 0x104, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x11, 0xfffffff9, 0x0, 0x7, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x5, 0x4, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x11, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x0, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x7, 0x7, 0x100, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x6, 0xa, 0xffffffff, 0x40004, 0x3, 0x6, 0x100fffe, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3a, 0x2, 0x4, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0xf, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0x0, 0x135, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 3m15.498410696s ago: executing program 1 (id=1934): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) setreuid(r2, 0x0) setreuid(0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) clock_getres(0x7, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x9e8, 0x7, 0x0, 0x7, 0x0, 0x5a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, &(0x7f0000000600)=0xfc) sendfile(r4, r4, 0x0, 0x23) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000640)=ANY=[@ANYBLOB="50010000100001000000000000000000ff0200000000000000000000000000010000000000700fd8890cf906e0cd9e43f64e4e990000000000ffffffffffff020000002000"/79, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000000006c000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080ffff00000000000000000200020000000000480003006c7a7300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000027bd700028bd700025bd700028bd700001000000"], 0x150}}, 0x0) 3m15.326359919s ago: executing program 0 (id=1935): creat(&(0x7f0000000540)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)}], 0x1}, 0x4000841) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, &(0x7f0000000100)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47, 0x2f}, {&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/124, 0x7c}, {&(0x7f0000001280)=""/60, 0x3c}], 0x5}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149, 0x95}, {&(0x7f0000001b00)=""/118, 0x76}, {&(0x7f0000001540)=""/188, 0xbc}, {&(0x7f0000001600)=""/57, 0x39}, {&(0x7f0000001640)=""/135, 0x87}, {&(0x7f00000014c0)=""/101, 0x65}, {&(0x7f0000001780)=""/171, 0xab}], 0x7, &(0x7f00000018c0)=""/176, 0xb0}}], 0x2, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x40000000000007b, 0x4004) 3m15.044104982s ago: executing program 3 (id=1936): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nl80211(0x0, r0) userfaultfd(0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111, 0x6}}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x4, 0x5000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x4000000000, r4}) syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) clock_gettime(0x0, &(0x7f0000005900)={0x0, 0x0}) recvmmsg$unix(r5, &(0x7f00000057c0)=[{{&(0x7f0000000400)=@abs, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000500)=""/130, 0x82}, {&(0x7f0000000740)=""/235, 0xeb}], 0x2, &(0x7f00000008c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0xbc}}, {{&(0x7f0000000980)=@abs, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000a00)=""/188, 0xbc}, {&(0x7f0000000ac0)}, {&(0x7f0000000b00)=""/61, 0x3d}, {&(0x7f0000000b40)=""/72, 0x48}, {0x0}], 0x5, &(0x7f0000000cc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x7c}}, {{0x0, 0x0, &(0x7f00000011c0)=[{0x0}, {&(0x7f0000000ec0)=""/148, 0x94}, {&(0x7f0000000f80)=""/142, 0x8e}, {&(0x7f0000001040)=""/76, 0x4c}, {&(0x7f00000010c0)=""/41, 0x29}, {&(0x7f0000001100)=""/126, 0x7e}, {&(0x7f0000001180)=""/50, 0x32}], 0x7, &(0x7f0000001200)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0xac}}, {{&(0x7f00000012c0), 0x6e, &(0x7f0000002440)=[{&(0x7f0000001340)=""/66, 0x42}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/67, 0x43}], 0x3, &(0x7f0000002480)=[@cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x28}}, {{&(0x7f00000024c0)=@abs, 0x6e, &(0x7f00000037c0)=[{&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/206, 0xce}, {&(0x7f0000003640)=""/91, 0x5b}, {&(0x7f00000036c0)=""/216, 0xd8}], 0x4, &(0x7f0000003800)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}, {{&(0x7f0000003900), 0x6e, &(0x7f0000003ac0)=[{&(0x7f00000039c0)=""/48, 0x30}, {&(0x7f0000003a00)=""/166, 0xa6}], 0x2, &(0x7f0000003b00)=[@rights={{0xc}}, @cred={{0x18}}], 0x24}}, {{&(0x7f0000003b40), 0x6e, &(0x7f0000003d40)=[{0x0}, {&(0x7f0000003c00)=""/120, 0x78}, {&(0x7f0000003c80)=""/147, 0x93}], 0x3}}, {{&(0x7f0000003d80)=@abs, 0x6e, &(0x7f0000003e80)=[{&(0x7f0000003e00)=""/71, 0x47}], 0x1, &(0x7f0000003ec0)=[@rights={{0xc}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x3c}}, {{&(0x7f0000003f40)=@abs, 0x6e, &(0x7f0000005500), 0x0, &(0x7f0000005540)=[@cred={{0x18}}], 0x18}}, {{0x0, 0x0, &(0x7f0000005700)=[{&(0x7f0000005580)=""/233, 0xe9}, {&(0x7f0000005680)=""/128, 0x80}], 0x2, &(0x7f0000005740)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0xc}}], 0x54}}], 0xa, 0x22, &(0x7f0000005940)={r6, r7+60000000}) syz_io_uring_setup(0x5f38, &(0x7f0000000640)={0x0, 0x2, 0x800, 0x3, 0x395}, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x50, 0x0, 0x0, 0x800000000000002, &(0x7f00000001c0)={0x0, 0x989680}}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x34, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) 3m14.724885002s ago: executing program 2 (id=1937): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) setreuid(r2, 0x0) setreuid(0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) clock_getres(0x7, &(0x7f0000000040)) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x9e8, 0x7, 0x0, 0x7, 0x0, 0x5a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, &(0x7f0000000600)=0xfc) sendfile(r3, r3, 0x0, 0x23) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000640)=ANY=[@ANYBLOB="50010000100001000000000000000000ff0200000000000000000000000000010000000000700fd8890cf906e0cd9e43f64e4e990000000000ffffffffffff020000002000"/79, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000000006c000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080ffff00000000000000000200020000000000480003006c7a7300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000027bd700028bd700025bd700028bd700001000000"], 0x150}}, 0x0) 3m14.629620683s ago: executing program 1 (id=1938): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000100)=0xbe, 0x12) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000540)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0xfffffdce) sendto$inet6(r3, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffb, 0x20000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r5, 0x80045530, &(0x7f0000000180)=""/220) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x20, 0x2, {{0x1, [0x0, 0x0, 0xe, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10], 0x0, [0x1, 0x36, 0xfffe, 0x0, 0x0, 0x1, 0x16, 0x8, 0x0, 0x5c4, 0xda8c, 0x0, 0x0, 0x3dc, 0x4], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xfff, 0x0, 0x0, 0xfffc, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x24008810}, 0x20000000) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0xb4, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x48}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0x0, 0x8, 0xff}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40001}, 0x10) close(r6) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x727, 0x7ffffd, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x10000, 0x10000000, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe2, 0x0) socket(0x10, 0x803, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f00000000c0)=0xfffffb6c, 0x4) r11 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r11, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r11, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) 2m44.475089529s ago: executing program 32 (id=1935): creat(&(0x7f0000000540)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)}], 0x1}, 0x4000841) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, &(0x7f0000000100)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47, 0x2f}, {&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/124, 0x7c}, {&(0x7f0000001280)=""/60, 0x3c}], 0x5}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149, 0x95}, {&(0x7f0000001b00)=""/118, 0x76}, {&(0x7f0000001540)=""/188, 0xbc}, {&(0x7f0000001600)=""/57, 0x39}, {&(0x7f0000001640)=""/135, 0x87}, {&(0x7f00000014c0)=""/101, 0x65}, {&(0x7f0000001780)=""/171, 0xab}], 0x7, &(0x7f00000018c0)=""/176, 0xb0}}], 0x2, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x40000000000007b, 0x4004) 2m44.430951408s ago: executing program 33 (id=1938): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000100)=0xbe, 0x12) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000540)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0xfffffdce) sendto$inet6(r3, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffb, 0x20000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r5, 0x80045530, &(0x7f0000000180)=""/220) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x20, 0x2, {{0x1, [0x0, 0x0, 0xe, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10], 0x0, [0x1, 0x36, 0xfffe, 0x0, 0x0, 0x1, 0x16, 0x8, 0x0, 0x5c4, 0xda8c, 0x0, 0x0, 0x3dc, 0x4], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xfff, 0x0, 0x0, 0xfffc, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x24008810}, 0x20000000) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0xb4, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x48}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0x0, 0x8, 0xff}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40001}, 0x10) close(r6) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x727, 0x7ffffd, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x10000, 0x10000000, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe2, 0x0) socket(0x10, 0x803, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f00000000c0)=0xfffffb6c, 0x4) r11 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r11, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r11, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) 2m44.390886997s ago: executing program 34 (id=1937): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) setreuid(r2, 0x0) setreuid(0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) clock_getres(0x7, &(0x7f0000000040)) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x9e8, 0x7, 0x0, 0x7, 0x0, 0x5a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, &(0x7f0000000600)=0xfc) sendfile(r3, r3, 0x0, 0x23) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000640)=ANY=[@ANYBLOB="50010000100001000000000000000000ff0200000000000000000000000000010000000000700fd8890cf906e0cd9e43f64e4e990000000000ffffffffffff020000002000"/79, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000000006c000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080ffff00000000000000000200020000000000480003006c7a7300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000027bd700028bd700025bd700028bd700001000000"], 0x150}}, 0x0) 2m44.34570242s ago: executing program 35 (id=1936): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nl80211(0x0, r0) userfaultfd(0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111, 0x6}}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x4, 0x5000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x4000000000, r4}) syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) clock_gettime(0x0, &(0x7f0000005900)={0x0, 0x0}) recvmmsg$unix(r5, &(0x7f00000057c0)=[{{&(0x7f0000000400)=@abs, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000500)=""/130, 0x82}, {&(0x7f0000000740)=""/235, 0xeb}], 0x2, &(0x7f00000008c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0xbc}}, {{&(0x7f0000000980)=@abs, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000a00)=""/188, 0xbc}, {&(0x7f0000000ac0)}, {&(0x7f0000000b00)=""/61, 0x3d}, {&(0x7f0000000b40)=""/72, 0x48}, {0x0}], 0x5, &(0x7f0000000cc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x7c}}, {{0x0, 0x0, &(0x7f00000011c0)=[{0x0}, {&(0x7f0000000ec0)=""/148, 0x94}, {&(0x7f0000000f80)=""/142, 0x8e}, {&(0x7f0000001040)=""/76, 0x4c}, {&(0x7f00000010c0)=""/41, 0x29}, {&(0x7f0000001100)=""/126, 0x7e}, {&(0x7f0000001180)=""/50, 0x32}], 0x7, &(0x7f0000001200)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0xac}}, {{&(0x7f00000012c0), 0x6e, &(0x7f0000002440)=[{&(0x7f0000001340)=""/66, 0x42}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/67, 0x43}], 0x3, &(0x7f0000002480)=[@cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x28}}, {{&(0x7f00000024c0)=@abs, 0x6e, &(0x7f00000037c0)=[{&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/206, 0xce}, {&(0x7f0000003640)=""/91, 0x5b}, {&(0x7f00000036c0)=""/216, 0xd8}], 0x4, &(0x7f0000003800)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}, {{&(0x7f0000003900), 0x6e, &(0x7f0000003ac0)=[{&(0x7f00000039c0)=""/48, 0x30}, {&(0x7f0000003a00)=""/166, 0xa6}], 0x2, &(0x7f0000003b00)=[@rights={{0xc}}, @cred={{0x18}}], 0x24}}, {{&(0x7f0000003b40), 0x6e, &(0x7f0000003d40)=[{0x0}, {&(0x7f0000003c00)=""/120, 0x78}, {&(0x7f0000003c80)=""/147, 0x93}], 0x3}}, {{&(0x7f0000003d80)=@abs, 0x6e, &(0x7f0000003e80)=[{&(0x7f0000003e00)=""/71, 0x47}], 0x1, &(0x7f0000003ec0)=[@rights={{0xc}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x3c}}, {{&(0x7f0000003f40)=@abs, 0x6e, &(0x7f0000005500), 0x0, &(0x7f0000005540)=[@cred={{0x18}}], 0x18}}, {{0x0, 0x0, &(0x7f0000005700)=[{&(0x7f0000005580)=""/233, 0xe9}, {&(0x7f0000005680)=""/128, 0x80}], 0x2, &(0x7f0000005740)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0xc}}], 0x54}}], 0xa, 0x22, &(0x7f0000005940)={r6, r7+60000000}) syz_io_uring_setup(0x5f38, &(0x7f0000000640)={0x0, 0x2, 0x800, 0x3, 0x395}, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x50, 0x0, 0x0, 0x800000000000002, &(0x7f00000001c0)={0x0, 0x989680}}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x34, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) 7.593931917s ago: executing program 4 (id=2637): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e000000140002"], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180"], 0x2c}}, 0x0) 7.535152366s ago: executing program 4 (id=2638): r0 = add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000080)={'rti800\x00', [0x0, 0x80008000, 0x1, 0xa, 0x0, 0x0, 0x1, 0xf, 0x1000, 0x1, 0x8, 0x1, 0x6, 0x4, 0xffff, 0x6, 0xffffffa7, 0x9, 0xfffffffd, 0x5, 0x3ff, 0x10000, 0x800, 0xe2df, 0x9, 0x1, 0x4, 0x3, 0x7, 0x5, 0x5, 0x4]}) r2 = socket$rds(0x15, 0x5, 0x0) r3 = openat$full(0xffffff9c, &(0x7f0000000140), 0x101, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="680000007423786542265c531ba0934bfe6fdbc0d42570", @ANYBLOB="200027bd7000fedbdf250100000008000500020000001c0003800500080000000000060007004e24000008000100010000000800040004000000080004000500000008000500000000001800038014000200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x80c0) prlimit64(0x0, 0xe, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d0001000060000904008002030000000921060400012205000905810320000908070905020340"], 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x81) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780)='rpc_pipefs\x00', 0x1000000, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000500)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r6, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000844}, 0x14) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x414, 0x0, 0x9403, 0x0, 0x240, 0x2c0, 0x34c, 0x3d8, 0x3d8, 0x34c, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x218, 0x240, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x4}}, @common=@inet=@hashlimit2={{0x150}, {'syz_tun\x00', {0x100, 0xffffffff, 0x2, 0x56, 0x1000000, 0x1, 0x800, 0x40, 0x8}, {0xffff0001}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x1}}}, {{@uncond, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x3, 0x40a, 0x6, 'snmp_trap\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x470) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) syz_usb_ep_read(r4, 0x2, 0x0, 0x0) bind$rds(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r9 = socket(0x40000000015, 0x5, 0x0) getsockopt(r9, 0x200000000114, 0x2716, 0x0, &(0x7f0000000240)) keyctl$KEYCTL_MOVE(0x4, r0, r0, r0, 0x0) 5.364815021s ago: executing program 6 (id=2652): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) setreuid(r2, 0x0) setreuid(0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[], 0x2c}}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) clock_getres(0x7, &(0x7f0000000040)) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x9e8, 0x7, 0x0, 0x7, 0x0, 0x5a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, &(0x7f0000000600)=0xfc) sendfile(r4, r4, 0x0, 0x23) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000640)=ANY=[@ANYBLOB="50010000100001000000000000000000ff0200000000000000000000000000010000000000700fd8890cf906e0cd9e43f64e4e990000000000ffffffffffff020000002000"/79, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000000006c000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080ffff00000000000000000200020000000000480003006c7a7300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000027bd700028bd700025bd700028bd700001000000"], 0x150}}, 0x0) 5.292139314s ago: executing program 7 (id=2654): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) setreuid(r2, 0x0) setreuid(0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[], 0x2c}}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) clock_getres(0x7, &(0x7f0000000040)) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x9e8, 0x7, 0x0, 0x7, 0x0, 0x5a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, &(0x7f0000000600)=0xfc) sendfile(r4, r4, 0x0, 0x23) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000640)=ANY=[@ANYBLOB="50010000100001000000000000000000ff0200000000000000000000000000010000000000700fd8890cf906e0cd9e43f64e4e990000000000ffffffffffff020000002000"/79, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000000006c000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080ffff00000000000000000200020000000000480003006c7a7300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000027bd700028bd700025bd700028bd700001000000"], 0x150}}, 0x0) 4.393030031s ago: executing program 4 (id=2655): r0 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a45352, &(0x7f0000000180)={{0x80}, 'port1\x00', 0xc1, 0x10, 0x1, 0xfffff801, 0x8, 0x15, 0xff, 0x0, 0x3, 0xf}) 4.392618815s ago: executing program 7 (id=2656): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x2050) 4.383958174s ago: executing program 6 (id=2657): socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40), 0x20341, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x3, 0x407, 0x8, 0x801003e, 0x80, '\v\b\x00', 0x9, 0xfffffff5}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x12) dup(r1) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xc100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000000145802, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x103381) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) r4 = socket(0x2c, 0x803, 0xffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000005b80)={'ip6gre0\x00', 0x0}) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$cont(0x21, r5, 0x8, 0xffff) r6 = dup(r3) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000480)={{0x6, 0x6, 0x4a7, 0x6, 'syz1\x00', 0x6}, 0x5, 0x3, 0xb4, r5, 0x0, 0x3, 'syz1\x00', &(0x7f0000000180)}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r6, 0x0, 0xffffffdb) timer_create(0x0, 0x0, 0x0) mprotect(&(0x7f000088f000/0x3000)=nil, 0x3000, 0x0) setpriority(0x2, 0x0, 0x8) socket$pppoe(0x18, 0x1, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 4.28002855s ago: executing program 4 (id=2658): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000010000000080007000000020018000180140002006e657464657673696d300000000000000800060000020000080008"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4.265969523s ago: executing program 7 (id=2659): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) setreuid(r2, 0x0) setreuid(0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) clock_getres(0x7, &(0x7f0000000040)) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x9e8, 0x7, 0x0, 0x7, 0x0, 0x5a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, &(0x7f0000000600)=0xfc) sendfile(r4, r4, 0x0, 0x23) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000640)=ANY=[@ANYBLOB="50010000100001000000000000000000ff0200000000000000000000000000010000000000700fd8890cf906e0cd9e43f64e4e990000000000ffffffffffff020000002000"/79, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000000006c000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080ffff00000000000000000200020000000000480003006c7a7300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000027bd700028bd700025bd700028bd700001000000"], 0x150}}, 0x0) 4.109242947s ago: executing program 4 (id=2660): r0 = add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000080)={'rti800\x00', [0x0, 0x80008000, 0x1, 0xa, 0x0, 0x0, 0x1, 0xf, 0x1000, 0x1, 0x8, 0x1, 0x6, 0x4, 0xffff, 0x6, 0xffffffa7, 0x9, 0xfffffffd, 0x5, 0x3ff, 0x10000, 0x800, 0xe2df, 0x9, 0x1, 0x4, 0x3, 0x7, 0x5, 0x5, 0x4]}) r2 = socket$rds(0x15, 0x5, 0x0) r3 = openat$full(0xffffff9c, &(0x7f0000000140), 0x101, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00t#xeB&\\S', @ANYRES16=r4, @ANYBLOB="200027bd7000fedbdf250100000008000500020000001c0003800500080000000000060007004e24000008000100010000000800040004000000080004000500000008000500000000001800038014000200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x80c0) prlimit64(0x0, 0xe, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r5 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d0001000060000904008002030000000921060400012205000905810320000908070905020340"], 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x81) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780)='rpc_pipefs\x00', 0x1000000, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000500)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r7, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000844}, 0x14) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x414, 0x0, 0x9403, 0x0, 0x240, 0x2c0, 0x34c, 0x3d8, 0x3d8, 0x34c, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x218, 0x240, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x4}}, @common=@inet=@hashlimit2={{0x150}, {'syz_tun\x00', {0x100, 0xffffffff, 0x2, 0x56, 0x1000000, 0x1, 0x800, 0x40, 0x8}, {0xffff0001}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x1}}}, {{@uncond, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x3, 0x40a, 0x6, 'snmp_trap\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x470) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r9, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) syz_usb_ep_read(r5, 0x2, 0x0, 0x0) bind$rds(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r10 = socket(0x40000000015, 0x5, 0x0) getsockopt(r10, 0x200000000114, 0x2716, 0x0, &(0x7f0000000240)) keyctl$KEYCTL_MOVE(0x4, r0, r0, r0, 0x0) 3.365159361s ago: executing program 7 (id=2662): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)="3c5c583ecd2d036a2762bb626c65640a", 0x10) openat(r0, 0x0, 0xc2802, 0x1a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x10, 0x0, 0x0) r2 = openat2$dir(0xffffff9c, &(0x7f0000000040)='./debug/failslab/times\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000000)='./debug\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd3d, 0x25cfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0xfd0a, 0x2c, 0x42f, 0x870bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x7}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x62000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xa, 0x8, "ff000000000000000000000000000200"}) r7 = syz_open_pts(r6, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000002c0)=0x11) write$binfmt_elf64(r5, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x4, 0x9, 0x6, 0x2, 0x3, 0x3, 0x6, 0xb3, 0x40, 0x248, 0x7fff, 0x4, 0x38, 0x1, 0x8, 0x6, 0x1ff}, [{0x7, 0x5, 0x81, 0x200, 0x3, 0xffffffffffffffff, 0x0, 0x100000000}], "919fe5258697eb83817cc640b2f9a092c8b81ba47dcc74cfa365ec52a74abd1177", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa99) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000180)={r8, 0x1, r5, 0x1000, 0x80000}) futex(0x0, 0x36bf51381f43f77, 0x1, 0x0, 0x0, 0x1) r9 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r9, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x0, 0x700, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2063569a"}, 0x700}) ioctl$vim2m_VIDIOC_STREAMOFF(r9, 0x40045612, &(0x7f0000000000)=0x2) 3.247305929s ago: executing program 6 (id=2663): socket$netlink(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x11, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) 3.147817635s ago: executing program 5 (id=2664): r0 = eventfd2(0x8, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfffffffffffffffc, 0x8) read(r0, &(0x7f0000000980)=""/81, 0x51) 3.110341884s ago: executing program 7 (id=2665): r0 = add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000080)={'rti800\x00', [0x0, 0x80008000, 0x1, 0xa, 0x0, 0x0, 0x1, 0xf, 0x1000, 0x1, 0x8, 0x1, 0x6, 0x4, 0xffff, 0x6, 0xffffffa7, 0x9, 0xfffffffd, 0x5, 0x3ff, 0x10000, 0x800, 0xe2df, 0x9, 0x1, 0x4, 0x3, 0x7, 0x5, 0x5, 0x4]}) r2 = socket$rds(0x15, 0x5, 0x0) r3 = openat$full(0xffffff9c, &(0x7f0000000140), 0x101, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYRES16=r4, @ANYBLOB="200027bd7000fedbdf250100000008000500020000001c0003800500080000000000060007004e24000008000100010000000800040004000000080004000500000008000500000000001800038014000200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x80c0) prlimit64(0x0, 0xe, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r5 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d0001000060000904008002030000000921060400012205000905810320000908070905020340"], 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x81) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780)='rpc_pipefs\x00', 0x1000000, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000500)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r7, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000844}, 0x14) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x414, 0x0, 0x9403, 0x0, 0x240, 0x2c0, 0x34c, 0x3d8, 0x3d8, 0x34c, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x218, 0x240, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x4}}, @common=@inet=@hashlimit2={{0x150}, {'syz_tun\x00', {0x100, 0xffffffff, 0x2, 0x56, 0x1000000, 0x1, 0x800, 0x40, 0x8}, {0xffff0001}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x1}}}, {{@uncond, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x3, 0x40a, 0x6, 'snmp_trap\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x470) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r9, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) syz_usb_ep_read(r5, 0x2, 0x0, 0x0) bind$rds(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r10 = socket(0x40000000015, 0x5, 0x0) getsockopt(r10, 0x200000000114, 0x2716, 0x0, &(0x7f0000000240)) keyctl$KEYCTL_MOVE(0x4, r0, r0, r0, 0x0) 3.088957875s ago: executing program 6 (id=2666): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) setreuid(r2, 0x0) setreuid(0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[], 0x2c}}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) clock_getres(0x7, &(0x7f0000000040)) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x9e8, 0x7, 0x0, 0x7, 0x0, 0x5a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, &(0x7f0000000600)=0xfc) sendfile(r4, r4, 0x0, 0x23) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000640)=ANY=[@ANYBLOB="50010000100001000000000000000000ff0200000000000000000000000000010000000000700fd8890cf906e0cd9e43f64e4e990000000000ffffffffffff020000002000"/79, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000000006c000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080ffff00000000000000000200020000000000480003006c7a7300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000027bd700028bd700025bd700028bd700001000000"], 0x150}}, 0x0) 2.759744841s ago: executing program 5 (id=2667): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) setreuid(r2, 0x0) setreuid(0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[], 0x2c}}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) clock_getres(0x7, &(0x7f0000000040)) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x9e8, 0x7, 0x0, 0x7, 0x0, 0x5a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, &(0x7f0000000600)=0xfc) sendfile(r4, r4, 0x0, 0x23) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000640)=ANY=[@ANYBLOB="50010000100001000000000000000000ff0200000000000000000000000000010000000000700fd8890cf906e0cd9e43f64e4e990000000000ffffffffffff020000002000"/79, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000000006c000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080ffff00000000000000000200020000000000480003006c7a7300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000027bd700028bd700025bd700028bd700001000000"], 0x150}}, 0x0) 2.202755386s ago: executing program 6 (id=2668): openat$rtc(0xffffff9c, &(0x7f0000000140), 0x101000, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)={0x32, @multicast1, 0x4e22, 0x1, 'nq\x00', 0x21, 0x4, 0x65}, 0x2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) chdir(&(0x7f0000000280)='./file0/file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r7, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) write$tun(r4, &(0x7f0000000840)=ANY=[], 0x11b0) 1.87106134s ago: executing program 5 (id=2669): socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40), 0x20341, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x3, 0x407, 0x8, 0x801003e, 0x80, '\v\b\x00', 0x9, 0xfffffff5}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x12) dup(r1) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xc100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000000145802, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x103381) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) r4 = socket(0x2c, 0x803, 0xffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000005b80)={'ip6gre0\x00', 0x0}) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$cont(0x21, r5, 0x8, 0xffff) r6 = dup(r3) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000480)={{0x6, 0x6, 0x4a7, 0x6, 'syz1\x00', 0x6}, 0x5, 0x3, 0xb4, r5, 0x5, 0x3, 'syz1\x00', &(0x7f0000000180)=['\x00z\x05c\xeap\xeb\x029\xf4\xfd\tocQ;\xfa\xf4\x19\xe2\xdd@NTg\xe8\xd1\xa4\xcf<*\xd8\x98Q>\x97Q*7\xaa\xb9\xee\x95\x96\xbf\f\"\xbdE%\xed\xe6\xb8\x05\x80\x9d\xb2\x87n\xd5\xd8\x10\xcc<\xb1\x19\xce\xe0;\x85\x06\xa9(\xa1\a\xd1\xe3\r\xaa\f\xca#\x93+\xd7~\x9fI\x82h\xcb\xd6\x9a\xd3\x12\xfd\xfb/@\xd3\b\xdf\xc0\xe4ry\x81\xfdX\xa2\xa4\xa3})\x7f\xf3\'\xd3PeY\xd8Zp', '^\x00', '#\x00', ':]))', '\x00\x00\x01\x00\x00\x00\x00\x00\x00'], 0x8d}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r6, 0x0, 0xffffffdb) timer_create(0x0, 0x0, 0x0) mprotect(&(0x7f000088f000/0x3000)=nil, 0x3000, 0x0) setpriority(0x2, 0x0, 0x8) socket$pppoe(0x18, 0x1, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.511527626s ago: executing program 5 (id=2670): openat$rtc(0xffffff9c, &(0x7f0000000140), 0x101000, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)={0x32, @multicast1, 0x4e22, 0x1, 'nq\x00', 0x21, 0x4, 0x65}, 0x2c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) chdir(&(0x7f0000000280)='./file0/file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r7, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) write$tun(r4, &(0x7f0000000840)=ANY=[], 0x11b0) 1.003318445s ago: executing program 4 (id=2671): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000108117980800000000000109024100010000000009040000020308000009210000010122290a0905", @ANYRES64], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000400), 0x40, 0x8000) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f00000000c0)=""/200) 485.945628ms ago: executing program 6 (id=2672): syz_usb_connect(0x3, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010102d1a05e20cd0c02010e8901fc03010902120001085440010904"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) pwrite64(r0, &(0x7f0000000040)="f0afb6b43b3b05d81fd73f2343cee5bb735cafb50601546ad2e217f8c50b949a201d849d742241cc37f8f6771f8e075a676c6e5a940560d24ba4182fea63ffc667e44a2f280e", 0x46, 0x6) 107.595086ms ago: executing program 5 (id=2673): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)="3c5c583ecd2d036a2762bb626c65640a", 0x10) openat(r0, 0x0, 0xc2802, 0x1a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000200), 0x4) r2 = openat2$dir(0xffffff9c, 0x0, 0x0, 0x0) mkdirat(r2, &(0x7f0000000000)='./debug\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd3d, 0x25cfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0xfd0a, 0x2c, 0x42f, 0x870bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x7}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x62000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xa, 0x8, "ff000000000000000000000000000200"}) r7 = syz_open_pts(r6, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000002c0)=0x11) write$binfmt_elf64(r5, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x4, 0x9, 0x6, 0x2, 0x3, 0x3, 0x6, 0xb3, 0x40, 0x248, 0x7fff, 0x4, 0x38, 0x1, 0x8, 0x6, 0x1ff}, [{0x7, 0x5, 0x81, 0x200, 0x3, 0xffffffffffffffff, 0x0, 0x100000000}], "919fe5258697eb83817cc640b2f9a092c8b81ba47dcc74cfa365ec52a74abd1177", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa99) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000180)={r8, 0x1, r5, 0x1000, 0x80000}) futex(0x0, 0x36bf51381f43f77, 0x1, 0x0, 0x0, 0x1) r9 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r9, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x0, 0x700, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2063569a"}, 0x700}) ioctl$vim2m_VIDIOC_STREAMOFF(r9, 0x40045612, &(0x7f0000000000)=0x2) 53.760677ms ago: executing program 7 (id=2674): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) setuid(0xee01) write$cgroup_int(r0, &(0x7f0000000180)=0xfe5f, 0x12) 0s ago: executing program 5 (id=2675): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x100, 0x80000000, 0x2, 0xc, 0xe, 0x5, 0x79, 0x3, 0x80008, 0x0, 0x2, 0x1, 0x7, 0x1, 0x1000, 0xfd, 0x0, 0x8, 0x40003, 0x80000000, 0x8, 0x2, 0x0, 0x20001e58, 0x1, 0x0, 0x7, 0xffffffff, 0xa6b5, 0x24a05ffd, 0xffffffff]}) kernel console output (not intermixed with test programs): family 0 port 6081 - 0 [ 791.531802][ T1132] ata1.00: status: { DRDY } [ 791.536417][ T1132] ata1.00: error: { ABRT } [ 791.538764][ T1132] ata1.00: configured for UDMA/100 [ 791.540896][ T1132] sd 0:0:0:0: [sda] tag#30 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 791.544602][ T1132] sd 0:0:0:0: [sda] tag#30 Sense Key : Aborted Command [current] [ 791.547857][ T1132] sd 0:0:0:0: [sda] tag#30 Add. Sense: No additional sense information [ 791.550757][T15400] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.551068][ T1132] sd 0:0:0:0: [sda] tag#30 CDB: Read(10) 28 00 00 03 7b 3e 00 06 30 00 [ 791.557075][ T1132] I/O error, dev sda, sector 228158 op 0x0:(READ) flags 0x80700 phys_seg 63 prio class 2 [ 791.560282][ T1132] ata1: EH complete [ 791.593412][ T5459] 8021q: adding VLAN 0 to HW filter on device eth7 [ 791.658039][T15400] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.730037][ T42] kauditd_printk_skb: 24 callbacks suppressed [ 791.730054][ T42] audit: type=1326 audit(1785457257.529:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15439 comm="syz.5.1948" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f87fec code=0x0 [ 791.957713][ T24] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 792.043822][ T5459] 8021q: adding VLAN 0 to HW filter on device eth8 [ 792.108112][ T24] usb 12-1: Using ep0 maxpacket: 32 [ 792.115740][ T24] usb 12-1: config 0 has no interfaces? [ 792.123418][ T24] usb 12-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 792.136924][ T24] usb 12-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 792.139655][ T24] usb 12-1: Product: syz [ 792.141033][ T24] usb 12-1: Manufacturer: syz [ 792.142550][ T24] usb 12-1: SerialNumber: syz [ 792.160982][ T24] usb 12-1: config 0 descriptor?? [ 792.457101][T15199] Bluetooth: hci4: command tx timeout [ 792.516245][T15040] hsr_slave_0: left promiscuous mode [ 792.523925][T15040] hsr_slave_1: left promiscuous mode [ 792.527075][T15040] batman_adv: batadv0: Removing interface: macvlan2 [ 792.533738][T15040] batman_adv: batadv0: Removing interface: macvlan3 [ 792.616949][T15199] Bluetooth: hci5: command tx timeout [ 792.696963][T15199] Bluetooth: hci6: command tx timeout [ 792.699340][ T5761] Bluetooth: hci0: command tx timeout [ 792.993184][T15461] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input26 [ 793.607921][ T5459] 8021q: adding VLAN 0 to HW filter on device eth9 [ 793.842503][T15461] can0: slcan on ttyS3. [ 793.920786][T15483] JFS: discard option not supported on device [ 793.963461][T15483] Mount JFS Failure: -22 [ 793.966300][T15483] jfs_mount failed w/return code = -22 [ 794.192369][T15040] IPVS: stop unused estimator thread 0... [ 794.431829][ T5459] 8021q: adding VLAN 0 to HW filter on device eth10 [ 794.636422][T15464] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 794.639409][T15464] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 794.872139][T15464] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 794.880282][T15464] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 794.909762][T15464] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 794.912245][T15464] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 794.934483][T15464] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 794.942036][T15464] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 795.207518][T15490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 795.320244][ T5932] usb 12-1: USB disconnect, device number 2 [ 795.658334][T15442] can0 (unregistered): slcan off ttyS3. [ 795.761938][T15542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1956'. [ 795.766885][T15542] bridge_slave_1: left allmulticast mode [ 795.777162][T15542] bridge_slave_1: left promiscuous mode [ 795.782086][T15542] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.919607][T14014] usb 46-1: device descriptor read/8, error -110 [ 796.027611][T15548] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1957'. [ 796.228460][T15542] bridge_slave_0: left allmulticast mode [ 796.230426][T15542] bridge_slave_0: left promiscuous mode [ 796.233241][T15542] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.198129][T14014] usb usb46-port1: attempt power cycle [ 797.233073][T15578] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 797.235175][T15578] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 797.357738][T15578] vhci_hcd vhci_hcd.0: Device attached [ 797.390942][T15585] syz_tun: entered allmulticast mode [ 797.572134][T15586] syz_tun: left allmulticast mode [ 797.739434][T15578] rdma_rxe: rxe_newlink: failed to add wg2 [ 797.753283][ T29] usb 50-1: SetAddress Request (2) to port 0 [ 797.763234][ T29] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd [ 797.851686][T14014] usb usb46-port1: unable to enumerate USB device [ 797.971529][T15594] fuse: Bad value for 'fd' [ 797.977658][T15535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 798.077658][T15579] vhci_hcd: connection reset by peer [ 798.079614][ T5824] vhci_hcd vhci_hcd.6: stop threads [ 798.081300][ T5824] vhci_hcd vhci_hcd.6: release socket [ 798.083103][ T5824] vhci_hcd vhci_hcd.6: disconnect device [ 798.292395][T15591] xt_CT: You must specify a L4 protocol and not use inversions on it [ 798.751728][T15600] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1963'. [ 798.754713][T15600] bridge_slave_1: left allmulticast mode [ 798.756590][T15600] bridge_slave_1: left promiscuous mode [ 798.758810][T15600] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.007088][T15602] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 799.009274][T15602] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 799.012714][T15602] vhci_hcd vhci_hcd.0: Device attached [ 799.035807][T15600] bridge_slave_0: left allmulticast mode [ 799.038639][T15600] bridge_slave_0: left promiscuous mode [ 799.041302][T15600] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.085407][T15607] efs: cannot read volume header [ 799.180171][T15609] gfs2: error -5 reading superblock [ 799.287105][ T5831] usb 46-1: SetAddress Request (6) to port 0 [ 799.294183][ T5831] usb 46-1: new SuperSpeed USB device number 6 using vhci_hcd [ 799.801668][T15620] 9p: Bad value for 'rfdno' [ 799.959090][T15603] vhci_hcd: connection reset by peer [ 799.961011][T15040] vhci_hcd vhci_hcd.4: stop threads [ 799.962702][T15040] vhci_hcd vhci_hcd.4: release socket [ 799.968622][T15040] vhci_hcd vhci_hcd.4: disconnect device [ 800.111959][T14014] usb 11-1: new full-speed USB device number 2 using dummy_hcd [ 800.271247][T14014] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 800.285051][T14014] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 800.301259][T14014] usb 11-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 800.318066][T14014] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.333857][T15638] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 800.335971][T15638] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 800.344974][T14014] usb 11-1: config 0 descriptor?? [ 800.358726][T14014] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 800.360991][T15638] vhci_hcd vhci_hcd.0: Device attached [ 800.391080][T14014] dvb-usb: bulk message failed: -22 (3/0) [ 800.587888][T15616] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1966'. [ 800.657402][ T6734] usb 48-1: SetAddress Request (2) to port 0 [ 800.660207][ T6734] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 800.756450][T14014] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 800.771849][T14014] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 800.781692][T14014] usb 11-1: media controller created [ 800.795169][T14014] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 800.902867][T14014] dvb-usb: bulk message failed: -22 (6/0) [ 800.906223][T14014] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 800.916327][T14014] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb11/11-1/input/input27 [ 800.921228][T14014] dvb-usb: schedule remote query interval to 150 msecs. [ 800.924734][T14014] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 801.071952][T15639] vhci_hcd: connection reset by peer [ 801.077204][T15400] vhci_hcd vhci_hcd.5: stop threads [ 801.082018][T15400] vhci_hcd vhci_hcd.5: release socket [ 801.086716][T15400] vhci_hcd vhci_hcd.5: disconnect device [ 801.101087][T14014] dvb-usb: bulk message failed: -22 (1/0) [ 801.109823][T14014] dvb-usb: error while querying for an remote control event. [ 801.287071][T14014] dvb-usb: bulk message failed: -22 (1/0) [ 801.291363][T14014] dvb-usb: error while querying for an remote control event. [ 801.456889][T14014] dvb-usb: bulk message failed: -22 (1/0) [ 801.458846][T14014] dvb-usb: error while querying for an remote control event. [ 801.626879][T14014] dvb-usb: bulk message failed: -22 (1/0) [ 801.630936][T14014] dvb-usb: error while querying for an remote control event. [ 801.786896][T14014] dvb-usb: bulk message failed: -22 (1/0) [ 801.791006][T14014] dvb-usb: error while querying for an remote control event. [ 801.958318][T14014] dvb-usb: bulk message failed: -22 (1/0) [ 801.963428][T14014] dvb-usb: error while querying for an remote control event. [ 802.007730][T15684] input: syz1 as /devices/virtual/input/input28 [ 802.127067][T14014] dvb-usb: bulk message failed: -22 (1/0) [ 802.129461][T14014] dvb-usb: error while querying for an remote control event. [ 802.243598][ T42] audit: type=1326 audit(1785457268.039:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15683 comm="syz.5.1970" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87fec code=0x7ffc0000 [ 802.281654][ T42] audit: type=1326 audit(1785457268.039:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15683 comm="syz.5.1970" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87fec code=0x7ffc0000 [ 802.297178][ T5898] dvb-usb: bulk message failed: -22 (1/0) [ 802.315957][ T42] audit: type=1326 audit(1785457268.039:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15683 comm="syz.5.1970" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f87fec code=0x7ffc0000 [ 802.324451][ T42] audit: type=1326 audit(1785457268.079:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15683 comm="syz.5.1970" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87fec code=0x7ffc0000 [ 802.331472][ T42] audit: type=1326 audit(1785457268.079:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15683 comm="syz.5.1970" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87fec code=0x7ffc0000 [ 802.338434][ T42] audit: type=1326 audit(1785457268.089:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15683 comm="syz.5.1970" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f87fec code=0x7ffc0000 [ 802.345363][ T42] audit: type=1326 audit(1785457268.089:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15683 comm="syz.5.1970" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87fec code=0x7ffc0000 [ 802.352172][ T42] audit: type=1326 audit(1785457268.089:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15683 comm="syz.5.1970" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87fec code=0x7ffc0000 [ 802.359318][ T42] audit: type=1326 audit(1785457268.089:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15683 comm="syz.5.1970" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f87fec code=0x7ffc0000 [ 802.366097][ T42] audit: type=1326 audit(1785457268.089:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15683 comm="syz.5.1970" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87fec code=0x7ffc0000 [ 802.566567][T15695] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1972'. [ 802.584359][ T5898] dvb-usb: error while querying for an remote control event. [ 802.590597][ T9878] usb 11-1: USB disconnect, device number 2 [ 802.855162][ T9878] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 802.858395][ T29] usb 50-1: device descriptor read/8, error -110 [ 803.049124][T15701] TCP: TCP_TX_DELAY enabled [ 803.086305][T15701] e1000e 0000:00:02.0 eth1: removed PHC [ 803.192756][T15714] fuse: Bad value for 'fd' [ 803.290569][ T29] usb usb50-port1: attempt power cycle [ 803.353160][T15701] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 803.641288][T15703] xt_CT: You must specify a L4 protocol and not use inversions on it [ 803.899039][ T29] usb usb50-port1: unable to enumerate USB device [ 804.277569][T15736] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 804.280243][T15736] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 804.284693][T15736] vhci_hcd vhci_hcd.0: Device attached [ 804.293395][T15742] netlink: 'syz.4.1977': attribute type 16 has an invalid length. [ 804.295943][T15742] netlink: 'syz.4.1977': attribute type 3 has an invalid length. [ 804.298503][T15742] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1977'. [ 804.304336][T15742] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1977'. [ 804.314742][T15742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1977'. [ 804.353713][T15742] veth3: entered allmulticast mode [ 804.377039][ T5831] usb 46-1: device descriptor read/8, error -110 [ 804.486321][T15753] 0x000000008a42-0x000000018a42 : "" [ 804.510580][T15753] ftl_cs: FTL header not found. [ 804.697325][ T29] usb 52-1: SetAddress Request (2) to port 0 [ 804.729167][ T29] usb 52-1: new SuperSpeed USB device number 2 using vhci_hcd [ 804.784692][T15738] vhci_hcd: connection reset by peer [ 804.791758][T15400] vhci_hcd vhci_hcd.7: stop threads [ 804.793633][T15400] vhci_hcd vhci_hcd.7: release socket [ 804.795530][T15400] vhci_hcd vhci_hcd.7: disconnect device [ 804.849599][ T5831] usb usb46-port1: attempt power cycle [ 805.112108][T15775] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 805.114232][T15775] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 805.168380][T15775] vhci_hcd vhci_hcd.0: Device attached [ 805.509940][ T5831] usb usb46-port1: unable to enumerate USB device [ 806.017064][ T61] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 806.166909][ T61] usb 11-1: Using ep0 maxpacket: 32 [ 806.173411][ T61] usb 11-1: config 0 has no interfaces? [ 806.180538][ T61] usb 11-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 806.184230][ T61] usb 11-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 806.190879][ T61] usb 11-1: Product: syz [ 806.192267][ T61] usb 11-1: Manufacturer: syz [ 806.193880][ T61] usb 11-1: SerialNumber: syz [ 806.240795][ T61] usb 11-1: config 0 descriptor?? [ 806.307555][T15777] vhci_hcd: connection reset by peer [ 806.313422][ T5824] vhci_hcd vhci_hcd.5: stop threads [ 806.315722][ T5824] vhci_hcd vhci_hcd.5: release socket [ 806.318268][ T5824] vhci_hcd vhci_hcd.5: disconnect device [ 806.318337][ T6734] usb 48-1: device descriptor read/8, error -110 [ 806.375859][T15810] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 806.377984][T15810] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 806.387057][T15810] vhci_hcd vhci_hcd.0: Device attached [ 806.706817][ T5831] usb 46-1: SetAddress Request (10) to port 0 [ 806.709208][ T5831] usb 46-1: new SuperSpeed USB device number 10 using vhci_hcd [ 806.717488][ T6734] usb usb48-port1: attempt power cycle [ 807.180829][T15811] vhci_hcd: connection reset by peer [ 807.183013][T15040] vhci_hcd vhci_hcd.4: stop threads [ 807.184982][T15040] vhci_hcd vhci_hcd.4: release socket [ 807.186931][T15040] vhci_hcd vhci_hcd.4: disconnect device [ 807.763974][ T6734] usb usb48-port1: unable to enumerate USB device [ 807.797596][T15842] 9p: Bad value for 'rfdno' [ 807.827370][T15849] input: syz1 as /devices/virtual/input/input29 [ 808.036847][ T61] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 808.089185][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 808.089204][ T42] audit: type=1326 audit(1785457273.889:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15848 comm="syz.7.1988" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 808.099836][ T42] audit: type=1326 audit(1785457273.889:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15848 comm="syz.7.1988" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 808.108624][ T42] audit: type=1326 audit(1785457273.889:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15848 comm="syz.7.1988" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 808.171020][ T42] audit: type=1326 audit(1785457273.969:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15848 comm="syz.7.1988" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 808.179315][ T42] audit: type=1326 audit(1785457273.969:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15848 comm="syz.7.1988" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fec code=0x7ffc0000 [ 808.199290][ T61] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 808.203443][ T61] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 808.207275][ T61] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 808.211037][ T61] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.217480][ T61] usb 10-1: config 0 descriptor?? [ 808.223857][ T61] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 808.226562][ T61] dvb-usb: bulk message failed: -22 (3/0) [ 808.229671][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.231041][ T61] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 808.235934][ T61] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 808.238734][ T61] usb 10-1: media controller created [ 808.241195][ T61] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 808.254864][ T61] dvb-usb: bulk message failed: -22 (6/0) [ 808.259075][ T61] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 808.264988][ T61] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb10/10-1/input/input30 [ 808.277112][ T61] dvb-usb: schedule remote query interval to 150 msecs. [ 808.279406][ T61] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 808.427560][T15842] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1987'. [ 808.436922][ T61] dvb-usb: bulk message failed: -22 (1/0) [ 808.438819][ T61] dvb-usb: error while querying for an remote control event. [ 808.607350][ T61] dvb-usb: bulk message failed: -22 (1/0) [ 808.609696][ T61] dvb-usb: error while querying for an remote control event. [ 808.618031][ T24] usb 11-1: USB disconnect, device number 3 [ 808.767625][ T61] dvb-usb: bulk message failed: -22 (1/0) [ 808.769937][ T61] dvb-usb: error while querying for an remote control event. [ 808.937077][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 808.938912][ T24] dvb-usb: error while querying for an remote control event. [ 809.096980][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 809.098891][ T24] dvb-usb: error while querying for an remote control event. [ 809.155939][T15884] blktrace: Concurrent blktraces are not allowed on sg0 [ 809.257744][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 809.259642][ T24] dvb-usb: error while querying for an remote control event. [ 809.417061][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 809.418915][ T24] dvb-usb: error while querying for an remote control event. [ 809.425721][T15888] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 809.427806][T15888] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 809.431011][T15888] vhci_hcd vhci_hcd.0: Device attached [ 809.474717][T15891] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 809.476822][T15891] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 809.496461][T15891] vhci_hcd vhci_hcd.0: Device attached [ 809.576935][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 809.579381][ T24] dvb-usb: error while querying for an remote control event. [ 809.739414][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 809.744997][ T24] dvb-usb: error while querying for an remote control event. [ 809.749964][T15889] vhci_hcd: connection closed [ 809.750174][T15040] vhci_hcd vhci_hcd.4: stop threads [ 809.809453][ T9878] usb 50-1: SetAddress Request (6) to port 0 [ 809.811817][ T9878] usb 50-1: new SuperSpeed USB device number 6 using vhci_hcd [ 809.826876][ T29] usb 52-1: device descriptor read/8, error -110 [ 809.907574][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 809.910256][ T24] dvb-usb: error while querying for an remote control event. [ 809.969979][T15892] vhci_hcd: connection reset by peer [ 810.086943][ T61] dvb-usb: bulk message failed: -22 (1/0) [ 810.089771][ T61] dvb-usb: error while querying for an remote control event. [ 810.180457][T15040] vhci_hcd vhci_hcd.4: release socket [ 810.227744][ T29] usb usb52-port1: attempt power cycle [ 810.246912][T15040] vhci_hcd vhci_hcd.4: disconnect device [ 810.248948][T15040] vhci_hcd vhci_hcd.6: stop threads [ 810.250783][T15040] vhci_hcd vhci_hcd.6: release socket [ 810.252642][T15040] vhci_hcd vhci_hcd.6: disconnect device [ 810.257550][ T61] dvb-usb: bulk message failed: -22 (1/0) [ 810.263550][ T61] dvb-usb: error while querying for an remote control event. [ 810.730154][ T61] dvb-usb: bulk message failed: -22 (1/0) [ 810.732241][ T61] dvb-usb: error while querying for an remote control event. [ 810.759149][ T61] usb 10-1: USB disconnect, device number 2 [ 810.867304][ T29] usb usb52-port1: unable to enumerate USB device [ 810.931251][ T61] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 811.050422][T15913] Invalid ELF header magic: != ELF [ 811.193059][T15917] fuse: Bad value for 'fd' [ 811.370635][T15916] xt_CT: You must specify a L4 protocol and not use inversions on it [ 811.528071][T15918] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 811.530905][T15918] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 811.539390][T15918] vhci_hcd vhci_hcd.0: Device attached [ 811.582725][T15922] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 811.585303][T15922] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 811.680363][T15922] vhci_hcd vhci_hcd.0: Device attached [ 811.785367][T15920] vhci_hcd: connection closed [ 811.786052][T15040] vhci_hcd vhci_hcd.4: stop threads [ 811.790475][T15040] vhci_hcd vhci_hcd.4: release socket [ 811.792902][T15040] vhci_hcd vhci_hcd.4: disconnect device [ 811.817132][ T5831] usb 46-1: device descriptor read/8, error -110 [ 811.946970][ T29] usb 52-1: SetAddress Request (6) to port 0 [ 811.950372][T15923] vhci_hcd: connection closed [ 811.950929][T15040] vhci_hcd vhci_hcd.7: stop threads [ 811.951394][ T29] usb 52-1: new SuperSpeed USB device number 6 using vhci_hcd [ 811.952500][T15040] vhci_hcd vhci_hcd.7: release socket [ 811.960601][T15040] vhci_hcd vhci_hcd.7: disconnect device [ 811.976967][ T29] usb 52-1: enqueue for inactive port 0 [ 812.023594][T15934] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2003'. [ 812.025041][T15936] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2002'. [ 812.207734][ T5831] usb usb46-port1: attempt power cycle [ 812.473494][ T29] usb usb52-port1: attempt power cycle [ 812.594622][T15943] IPv6: NLM_F_CREATE should be specified when creating new route [ 812.602378][T15943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2006'. [ 812.627359][T15945] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 812.629367][T15945] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 812.642261][T15945] vhci_hcd vhci_hcd.0: Device attached [ 812.768054][ T5831] usb usb46-port1: unable to enumerate USB device [ 812.965935][T15953] netlink: 'syz.7.2007': attribute type 2 has an invalid length. [ 812.974020][T15953] netlink: 'syz.7.2007': attribute type 2 has an invalid length. [ 813.047820][ T29] usb usb52-port1: unable to enumerate USB device [ 813.329970][T15946] vhci_hcd: connection closed [ 813.330287][ T5824] vhci_hcd vhci_hcd.6: stop threads [ 813.334766][ T5824] vhci_hcd vhci_hcd.6: release socket [ 813.337649][ T5824] vhci_hcd vhci_hcd.6: disconnect device [ 814.621280][T15988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2013'. [ 814.867935][ T9878] usb 50-1: device descriptor read/8, error -110 [ 815.198760][T16000] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 815.200847][T16000] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 815.216025][T16000] vhci_hcd vhci_hcd.0: Device attached [ 815.427890][ T9878] usb usb50-port1: attempt power cycle [ 815.488882][ T5831] usb 48-1: SetAddress Request (6) to port 0 [ 815.490891][ T5831] usb 48-1: new SuperSpeed USB device number 6 using vhci_hcd [ 815.586963][T16010] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2017'. [ 815.599596][T16010] batadv0: entered promiscuous mode [ 815.605946][T16010] macsec1: entered promiscuous mode [ 815.608500][T16010] macsec1: entered allmulticast mode [ 815.610461][T16010] batadv0: entered allmulticast mode [ 815.613679][T16010] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 815.637150][T16010] batadv0: left allmulticast mode [ 815.638957][T16010] batadv0: left promiscuous mode [ 815.808756][T16001] vhci_hcd: connection reset by peer [ 815.811386][T15400] vhci_hcd vhci_hcd.5: stop threads [ 815.813930][T15400] vhci_hcd vhci_hcd.5: release socket [ 815.816591][T15400] vhci_hcd vhci_hcd.5: disconnect device [ 816.007976][ T9878] usb usb50-port1: unable to enumerate USB device [ 816.519607][T16024] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 816.521834][T16024] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 816.539041][T16024] vhci_hcd vhci_hcd.0: Device attached [ 816.807178][T15697] usb 50-1: SetAddress Request (10) to port 0 [ 816.810050][T15697] usb 50-1: new SuperSpeed USB device number 10 using vhci_hcd [ 817.064199][T16038] Bluetooth: MGMT ver 1.23 [ 817.083299][T16039] netlink: 'syz.7.2024': attribute type 10 has an invalid length. [ 817.136600][T16039] team0: Port device dummy0 added [ 817.260122][T16025] vhci_hcd: connection reset by peer [ 817.262522][T15040] vhci_hcd vhci_hcd.6: stop threads [ 817.264539][T15040] vhci_hcd vhci_hcd.6: release socket [ 817.266517][T15040] vhci_hcd vhci_hcd.6: disconnect device [ 817.635282][T16048] comedi comedi3: comedi_config --init_data is deprecated [ 817.876873][ T29] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 818.036191][T16057] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2028'. [ 818.046857][ T29] usb 10-1: Using ep0 maxpacket: 32 [ 818.050239][ T29] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 818.054353][ T29] usb 10-1: config 0 interface 0 has no altsetting 0 [ 818.058569][ T29] usb 10-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 818.062193][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.068540][ T29] usb 10-1: config 0 descriptor?? [ 818.418265][T16048] xt_hashlimit: max too large, truncated to 1048576 [ 819.292563][T16085] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10) [ 819.294746][T16085] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 819.298336][T16085] vhci_hcd vhci_hcd.0: Device attached [ 819.382432][T16092] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 819.384511][T16092] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 819.387713][T16092] vhci_hcd vhci_hcd.0: Device attached [ 819.566871][ T846] usb 52-1: SetAddress Request (10) to port 0 [ 819.568839][ T846] usb 52-1: new SuperSpeed USB device number 10 using vhci_hcd [ 819.945688][T16087] vhci_hcd: connection reset by peer [ 819.948181][ T5824] vhci_hcd vhci_hcd.7: stop threads [ 819.949783][ T5824] vhci_hcd vhci_hcd.7: release socket [ 819.951794][ T5824] vhci_hcd vhci_hcd.7: disconnect device [ 820.019901][T16093] vhci_hcd: connection closed [ 820.020228][ T5824] vhci_hcd vhci_hcd.6: stop threads [ 820.024621][ T5824] vhci_hcd vhci_hcd.6: release socket [ 820.027387][ T5824] vhci_hcd vhci_hcd.6: disconnect device [ 820.536883][ T5831] usb 48-1: device descriptor read/8, error -110 [ 820.668266][ T29] usbhid 10-1:0.0: can't add hid device: -71 [ 820.670249][ T29] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 820.682249][ T29] usb 10-1: USB disconnect, device number 3 [ 820.825112][T16110] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2041'. [ 820.937520][ T5831] usb usb48-port1: attempt power cycle [ 821.554769][ T5831] usb usb48-port1: unable to enumerate USB device [ 821.897102][T15697] usb 50-1: device descriptor read/8, error -110 [ 822.444548][T16107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 823.236175][T15697] usb usb50-port1: attempt power cycle [ 824.085883][T16151] comedi comedi3: comedi_config --init_data is deprecated [ 824.263813][T16158] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 824.266275][T16158] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 824.269206][T16158] vhci_hcd vhci_hcd.0: Device attached [ 824.414631][T16162] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 824.417431][T16162] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 824.423075][T16162] vhci_hcd vhci_hcd.0: Device attached [ 824.447095][ T5832] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 824.457039][T15697] usb 50-1: SetAddress Request (13) to port 0 [ 824.478297][T15697] usb 50-1: new SuperSpeed USB device number 13 using vhci_hcd [ 824.636811][ T5832] usb 9-1: Using ep0 maxpacket: 32 [ 824.640117][ T5832] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 824.643867][ T5832] usb 9-1: config 0 interface 0 has no altsetting 0 [ 824.646527][ T5832] usb 9-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 824.650341][ T5832] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.657058][ T5832] usb 9-1: config 0 descriptor?? [ 824.671816][T16171] netlink: 'syz.5.2054': attribute type 10 has an invalid length. [ 824.707904][T16171] team0: Port device dummy0 added [ 824.743045][T16171] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2054'. [ 824.891552][T16151] xt_hashlimit: max too large, truncated to 1048576 [ 824.926984][T16159] vhci_hcd: connection reset by peer [ 824.929266][T15040] vhci_hcd vhci_hcd.6: stop threads [ 824.931955][T15040] vhci_hcd vhci_hcd.6: release socket [ 824.933821][T15040] vhci_hcd vhci_hcd.6: disconnect device [ 824.961668][T16165] vhci_hcd: connection reset by peer [ 824.966683][T15040] vhci_hcd vhci_hcd.7: stop threads [ 824.968996][T15040] vhci_hcd vhci_hcd.7: release socket [ 824.970856][T15040] vhci_hcd vhci_hcd.7: disconnect device [ 824.996815][ T846] usb 52-1: device descriptor read/8, error -110 [ 825.525398][T16177] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 825.527501][T16177] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 825.528042][ T846] usb usb52-port1: attempt power cycle [ 825.530386][T16177] vhci_hcd vhci_hcd.0: Device attached [ 825.826988][ T5841] usb 48-1: SetAddress Request (10) to port 0 [ 825.828981][ T5841] usb 48-1: new SuperSpeed USB device number 10 using vhci_hcd [ 825.851252][T16186] evm: overlay not supported [ 825.898525][ T42] audit: type=1804 audit(1785457291.689:502): pid=16186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2057" name="/newroot/26/file0/file1" dev="overlay" ino=170 res=1 errno=0 [ 826.204672][T16179] vhci_hcd: connection reset by peer [ 826.208230][T15040] vhci_hcd vhci_hcd.5: stop threads [ 826.210173][T15040] vhci_hcd vhci_hcd.5: release socket [ 826.212211][T15040] vhci_hcd vhci_hcd.5: disconnect device [ 826.267960][ T846] usb usb52-port1: unable to enumerate USB device [ 826.702793][T16199] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 826.704908][T16199] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 826.708597][T16199] vhci_hcd vhci_hcd.0: Device attached [ 826.956552][T16198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 826.989255][ T29] usb 52-1: SetAddress Request (14) to port 0 [ 826.991301][ T29] usb 52-1: new SuperSpeed USB device number 14 using vhci_hcd [ 827.144410][ T5832] usbhid 9-1:0.0: can't add hid device: -71 [ 827.147718][ T5832] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 827.155601][ T5832] usb 9-1: USB disconnect, device number 2 [ 827.408651][T16200] vhci_hcd: connection reset by peer [ 827.415236][T15040] vhci_hcd vhci_hcd.7: stop threads [ 827.417881][T15040] vhci_hcd vhci_hcd.7: release socket [ 827.419865][T15040] vhci_hcd vhci_hcd.7: disconnect device [ 827.422059][T16213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2064'. [ 828.067708][T16218] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 828.069795][T16218] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 828.079348][T16218] vhci_hcd vhci_hcd.0: Device attached [ 828.416890][ T5831] usb 46-1: SetAddress Request (14) to port 0 [ 828.422985][ T5831] usb 46-1: new SuperSpeed USB device number 14 using vhci_hcd [ 828.429371][T16228] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 828.432117][T16228] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 828.443036][T16228] vhci_hcd vhci_hcd.0: Device attached [ 828.721970][T16219] vhci_hcd: connection reset by peer [ 828.723898][ T5824] vhci_hcd vhci_hcd.4: stop threads [ 828.725633][ T5824] vhci_hcd vhci_hcd.4: release socket [ 828.727498][ T5824] vhci_hcd vhci_hcd.4: disconnect device [ 829.000755][T16229] vhci_hcd: connection closed [ 829.001251][ T5824] vhci_hcd vhci_hcd.7: stop threads [ 829.007122][ T5824] vhci_hcd vhci_hcd.7: release socket [ 829.009910][ T5824] vhci_hcd vhci_hcd.7: disconnect device [ 829.074550][T16239] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 829.077086][T16239] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 829.086811][T16239] vhci_hcd vhci_hcd.0: Device attached [ 829.127714][ T3938] IPVS: starting estimator thread 0... [ 829.216836][T16245] IPVS: using max 45 ests per chain, 108000 per kthread [ 829.493900][T16249] comedi comedi3: comedi_config --init_data is deprecated [ 829.600184][T16251] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2072'. [ 829.707626][T16242] vhci_hcd: connection reset by peer [ 829.710364][ T5824] vhci_hcd vhci_hcd.6: stop threads [ 829.712055][ T5824] vhci_hcd vhci_hcd.6: release socket [ 829.713865][T15697] usb 50-1: device descriptor read/8, error -110 [ 829.713877][ T5824] vhci_hcd vhci_hcd.6: disconnect device [ 829.736943][ T5932] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 829.817295][T15697] usb usb50-port1: unable to enumerate USB device [ 829.860083][T16260] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2074'. [ 829.896981][ T5932] usb 9-1: Using ep0 maxpacket: 32 [ 829.905774][ T5932] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 829.910404][ T5932] usb 9-1: config 0 interface 0 has no altsetting 0 [ 829.913058][ T5932] usb 9-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 829.917338][ T5932] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.924559][ T5932] usb 9-1: config 0 descriptor?? [ 830.133787][T16249] xt_hashlimit: max too large, truncated to 1048576 [ 830.192642][T16264] netlink: 'syz.5.2076': attribute type 1 has an invalid length. [ 830.196608][T16264] netlink: 232 bytes leftover after parsing attributes in process `syz.5.2076'. [ 830.200165][T16264] netlink: 'syz.5.2076': attribute type 1 has an invalid length. [ 830.342264][T16269] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2078'. [ 830.763291][T16278] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 830.765413][T16278] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 830.772057][T16278] vhci_hcd vhci_hcd.0: Device attached [ 830.843292][T16282] comedi comedi3: comedi_config --init_data is deprecated [ 830.866966][ T5841] usb 48-1: device descriptor read/8, error -110 [ 831.069479][T16285] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2082'. [ 831.106879][ T3938] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 831.256912][ T3938] usb 11-1: Using ep0 maxpacket: 32 [ 831.260041][ T3938] usb 11-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 831.263597][ T3938] usb 11-1: config 0 interface 0 has no altsetting 0 [ 831.265915][ T3938] usb 11-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 831.269070][ T3938] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.273614][ T3938] usb 11-1: config 0 descriptor?? [ 831.277596][ T5841] usb usb48-port1: attempt power cycle [ 831.370634][T16290] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2084'. [ 831.391241][T16279] vhci_hcd: connection closed [ 831.391630][ T5824] vhci_hcd vhci_hcd.7: stop threads [ 831.395179][ T5824] vhci_hcd vhci_hcd.7: release socket [ 831.397242][ T5824] vhci_hcd vhci_hcd.7: disconnect device [ 831.489493][T16282] xt_hashlimit: max too large, truncated to 1048576 [ 831.808032][T16293] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 831.810097][T16293] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 831.812884][T16293] vhci_hcd vhci_hcd.0: Device attached [ 832.007046][ T5841] usb 48-1: SetAddress Request (13) to port 0 [ 832.012491][ T5841] usb 48-1: new SuperSpeed USB device number 13 using vhci_hcd [ 832.171786][ T29] usb 52-1: device descriptor read/8, error -110 [ 832.354424][T16301] x_tables: duplicate underflow at hook 1 [ 832.365398][T16301] hub 8-0:1.0: USB hub found [ 832.368429][T16301] hub 8-0:1.0: 1 port detected [ 832.465017][T16294] vhci_hcd: connection reset by peer [ 832.469026][T15040] vhci_hcd vhci_hcd.5: stop threads [ 832.470782][T15040] vhci_hcd vhci_hcd.5: release socket [ 832.472672][T15040] vhci_hcd vhci_hcd.5: disconnect device [ 832.507471][ T5932] usbhid 9-1:0.0: can't add hid device: -71 [ 832.509747][ T5932] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 832.526188][ T5932] usb 9-1: USB disconnect, device number 3 [ 832.557426][ T29] usb usb52-port1: attempt power cycle [ 832.571867][T16303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2087'. [ 833.217343][ T29] usb usb52-port1: unable to enumerate USB device [ 833.368288][T16315] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 833.370378][T16315] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 833.373694][T16315] vhci_hcd vhci_hcd.0: Device attached [ 833.496959][ T5831] usb 46-1: device descriptor read/8, error -110 [ 833.652108][T16323] binder: 16322:16323 ioctl c00c6211 0 returned -14 [ 833.657211][ T29] usb 52-1: SetAddress Request (18) to port 0 [ 833.660862][ T29] usb 52-1: new SuperSpeed USB device number 18 using vhci_hcd [ 833.919284][ T5831] usb usb46-port1: attempt power cycle [ 834.161783][ T3938] usbhid 11-1:0.0: can't add hid device: -71 [ 834.168910][ T3938] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 834.207993][ T3938] usb 11-1: USB disconnect, device number 4 [ 834.539881][T16316] vhci_hcd: connection reset by peer [ 834.542546][ T5824] vhci_hcd vhci_hcd.7: stop threads [ 834.544493][ T5824] vhci_hcd vhci_hcd.7: release socket [ 834.546566][ T5824] vhci_hcd vhci_hcd.7: disconnect device [ 834.577942][T16329] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2093'. [ 834.742506][ T5831] usb usb46-port1: unable to enumerate USB device [ 834.933459][T16338] comedi comedi3: comedi_config --init_data is deprecated [ 835.144432][T16340] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 835.147223][T16340] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 835.151159][T16340] vhci_hcd vhci_hcd.0: Device attached [ 835.177070][ T5932] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 835.327576][ T5932] usb 9-1: Using ep0 maxpacket: 32 [ 835.330605][ T5932] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 835.334107][ T5932] usb 9-1: config 0 interface 0 has no altsetting 0 [ 835.336587][ T5932] usb 9-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 835.340108][ T5932] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.344070][ T5932] usb 9-1: config 0 descriptor?? [ 835.528308][T16347] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 835.530312][T16347] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 835.533458][T16347] vhci_hcd vhci_hcd.0: Device attached [ 835.561627][T16338] xt_hashlimit: max too large, truncated to 1048576 [ 835.708526][T16341] vhci_hcd: connection closed [ 835.708962][ T5824] vhci_hcd vhci_hcd.5: stop threads [ 835.712528][ T5824] vhci_hcd vhci_hcd.5: release socket [ 835.714522][ T5824] vhci_hcd vhci_hcd.5: disconnect device [ 835.808101][ T5831] usb 50-1: SetAddress Request (14) to port 0 [ 835.810276][ T5831] usb 50-1: new SuperSpeed USB device number 14 using vhci_hcd [ 836.135184][T16348] vhci_hcd: connection reset by peer [ 836.138612][ T5824] vhci_hcd vhci_hcd.6: stop threads [ 836.140724][ T5824] vhci_hcd vhci_hcd.6: release socket [ 836.143705][ T5824] vhci_hcd vhci_hcd.6: disconnect device [ 836.694311][T16358] x_tables: duplicate underflow at hook 1 [ 836.718184][T16358] hub 8-0:1.0: USB hub found [ 836.727572][T16358] hub 8-0:1.0: 1 port detected [ 837.169944][ T5841] usb 48-1: device descriptor read/8, error -110 [ 837.279799][ T5841] usb usb48-port1: unable to enumerate USB device [ 837.285673][T16370] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2102'. [ 837.331728][T16371] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 837.333987][T16371] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 837.352050][T16374] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 837.356608][T16374] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 837.362562][T16374] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 837.368876][T16371] vhci_hcd vhci_hcd.0: Device attached [ 837.411016][T16374] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 837.958819][T16372] vhci_hcd: connection closed [ 837.961586][T15040] vhci_hcd vhci_hcd.6: stop threads [ 837.965137][T15040] vhci_hcd vhci_hcd.6: release socket [ 837.967589][T15040] vhci_hcd vhci_hcd.6: disconnect device [ 837.992232][T16381] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1022815425 (2045630850 ns) > initial count (1125894 ns). Using initial count to start timer. [ 838.228403][ T5932] usbhid 9-1:0.0: can't add hid device: -71 [ 838.429700][T16388] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2107'. [ 838.439023][T16389] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 838.441109][T16389] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 838.445419][T16389] vhci_hcd vhci_hcd.0: Device attached [ 838.649280][ T5932] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 838.697973][ T29] usb 52-1: device descriptor read/8, error -110 [ 838.738374][T15697] usb 46-1: SetAddress Request (18) to port 0 [ 838.740819][T15697] usb 46-1: new SuperSpeed USB device number 18 using vhci_hcd [ 839.112266][ T29] usb usb52-port1: attempt power cycle [ 839.202141][ T5932] usb 9-1: USB disconnect, device number 4 [ 839.399915][T16390] vhci_hcd: connection reset by peer [ 839.477377][ T5824] vhci_hcd vhci_hcd.4: stop threads [ 839.479778][ T5824] vhci_hcd vhci_hcd.4: release socket [ 839.482403][ T5824] vhci_hcd vhci_hcd.4: disconnect device [ 839.641337][T16406] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 839.643420][T16406] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 839.646149][T16406] vhci_hcd vhci_hcd.0: Device attached [ 839.777430][ T29] usb usb52-port1: unable to enumerate USB device [ 839.923694][ T5832] usb 48-1: SetAddress Request (14) to port 0 [ 839.925809][ T5832] usb 48-1: new SuperSpeed USB device number 14 using vhci_hcd [ 840.280585][T16420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2113'. [ 840.489592][T16407] vhci_hcd: connection reset by peer [ 840.492935][T15040] vhci_hcd vhci_hcd.5: stop threads [ 840.496149][T15040] vhci_hcd vhci_hcd.5: release socket [ 840.498139][T15040] vhci_hcd vhci_hcd.5: disconnect device [ 840.867569][ T5831] usb 50-1: device descriptor read/8, error -110 [ 841.260059][ T5831] usb usb50-port1: attempt power cycle [ 841.473080][T16423] comedi comedi3: comedi_config --init_data is deprecated [ 841.716898][ T61] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 841.837432][ T5831] usb usb50-port1: unable to enumerate USB device [ 841.867737][ T61] usb 9-1: Using ep0 maxpacket: 32 [ 841.882759][ T61] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 841.887784][ T61] usb 9-1: config 0 interface 0 has no altsetting 0 [ 841.889954][ T61] usb 9-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 841.892831][ T61] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.924310][ T61] usb 9-1: config 0 descriptor?? [ 842.004072][T16429] siw: device registration error -23 [ 842.223669][T16423] xt_hashlimit: max too large, truncated to 1048576 [ 842.793779][T16434] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2117'. [ 842.797536][T16434] bridge_slave_1: left allmulticast mode [ 842.799550][T16434] bridge_slave_1: left promiscuous mode [ 842.803696][T16434] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.987491][T16434] bridge_slave_0: left allmulticast mode [ 843.015450][T16434] bridge_slave_0: left promiscuous mode [ 843.020545][T16434] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.020875][T16439] efs: cannot read volume header [ 843.290977][ T846] IPVS: starting estimator thread 0... [ 843.407625][T16444] IPVS: using max 21 ests per chain, 50400 per kthread [ 843.816944][T15697] usb 46-1: device descriptor read/8, error -110 [ 844.038740][T16453] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 844.041311][T16453] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 844.054758][T16453] vhci_hcd vhci_hcd.0: Device attached [ 844.220187][T15697] usb usb46-port1: attempt power cycle [ 844.317464][ T5831] usb 52-1: SetAddress Request (22) to port 0 [ 844.320816][ T5831] usb 52-1: new SuperSpeed USB device number 22 using vhci_hcd [ 844.483747][ T61] usbhid 9-1:0.0: can't add hid device: -71 [ 844.487908][ T61] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 844.501117][ T61] usb 9-1: USB disconnect, device number 5 [ 844.584842][T16462] netlink: 'syz.6.2124': attribute type 10 has an invalid length. [ 844.613808][T16462] team0: Port device dummy0 added [ 844.653057][T16462] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2124'. [ 844.799628][T16468] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 844.802271][T16468] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 844.807508][T16468] vhci_hcd vhci_hcd.0: Device attached [ 844.897081][T15697] usb 46-1: SetAddress Request (21) to port 0 [ 844.899671][T15697] usb 46-1: new SuperSpeed USB device number 21 using vhci_hcd [ 845.017891][ T5832] usb 48-1: device descriptor read/8, error -110 [ 845.405753][T16469] vhci_hcd: connection reset by peer [ 845.409227][ T5832] usb usb48-port1: attempt power cycle [ 845.411866][T15400] vhci_hcd vhci_hcd.4: stop threads [ 845.414685][T15400] vhci_hcd vhci_hcd.4: release socket [ 845.417303][T15400] vhci_hcd vhci_hcd.4: disconnect device [ 845.482511][T16454] vhci_hcd: connection reset by peer [ 845.488496][T15040] vhci_hcd vhci_hcd.7: stop threads [ 845.490592][T15040] vhci_hcd vhci_hcd.7: release socket [ 845.493471][T15040] vhci_hcd vhci_hcd.7: disconnect device [ 845.985455][ T5832] usb usb48-port1: unable to enumerate USB device [ 846.069472][T16481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2126'. [ 846.486166][T16489] netlink: 'syz.4.2127': attribute type 10 has an invalid length. [ 846.609324][T16489] team0: Port device dummy0 added [ 846.848906][T16495] comedi comedi3: comedi_config --init_data is deprecated [ 846.990071][T16493] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2129'. [ 846.993955][T16493] bridge_slave_1: left allmulticast mode [ 846.995801][T16493] bridge_slave_1: left promiscuous mode [ 847.000145][T16493] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.009765][T16493] bridge_slave_0: left allmulticast mode [ 847.011706][T16493] bridge_slave_0: left promiscuous mode [ 847.014018][T16493] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.149393][ T29] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 847.153308][T16499] efs: cannot read volume header [ 847.306888][ T29] usb 12-1: Using ep0 maxpacket: 32 [ 847.340644][ T29] usb 12-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 847.345358][ T29] usb 12-1: config 0 interface 0 has no altsetting 0 [ 847.352331][ T29] usb 12-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 847.365359][ T29] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.416634][ T29] usb 12-1: config 0 descriptor?? [ 847.688882][T16507] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 847.691683][T16507] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 847.701319][T16507] vhci_hcd vhci_hcd.0: Device attached [ 847.781668][T16495] xt_hashlimit: max too large, truncated to 1048576 [ 847.997328][ T3938] usb 48-1: SetAddress Request (18) to port 0 [ 847.999420][ T3938] usb 48-1: new SuperSpeed USB device number 18 using vhci_hcd [ 848.130424][T16515] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 848.133049][T16515] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 848.140732][T16515] vhci_hcd vhci_hcd.0: Device attached [ 848.196225][T16516] x_tables: duplicate underflow at hook 1 [ 848.213893][T16516] hub 8-0:1.0: USB hub found [ 848.216145][T16516] hub 8-0:1.0: 1 port detected [ 848.399045][T16508] vhci_hcd: connection reset by peer [ 848.401737][T15400] vhci_hcd vhci_hcd.5: stop threads [ 848.405882][T15400] vhci_hcd vhci_hcd.5: release socket [ 848.408531][T15400] vhci_hcd vhci_hcd.5: disconnect device [ 848.437163][ T5832] usb 50-1: SetAddress Request (18) to port 0 [ 848.439237][ T5832] usb 50-1: new SuperSpeed USB device number 18 using vhci_hcd [ 848.750926][T16517] vhci_hcd: connection reset by peer [ 848.753180][T15400] vhci_hcd vhci_hcd.6: stop threads [ 848.754983][T15400] vhci_hcd vhci_hcd.6: release socket [ 848.756948][T15400] vhci_hcd vhci_hcd.6: disconnect device [ 849.426994][ T5831] usb 52-1: device descriptor read/8, error -110 [ 849.833196][ T29] usbhid 12-1:0.0: can't add hid device: -71 [ 849.835438][ T29] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 849.840638][ T5831] usb usb52-port1: attempt power cycle [ 849.848269][ T29] usb 12-1: USB disconnect, device number 3 [ 849.860681][T16522] comedi comedi3: comedi_config --init_data is deprecated [ 849.880386][T16523] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2136'. [ 849.988327][T15697] usb 46-1: device descriptor read/8, error -110 [ 850.107126][T15697] usb usb46-port1: unable to enumerate USB device [ 850.127782][ T846] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 850.148078][T16534] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 850.150168][T16534] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 850.153212][T16534] vhci_hcd vhci_hcd.0: Device attached [ 850.236940][ T5831] usb 52-1: SetAddress Request (24) to port 0 [ 850.236997][ T5831] usb 52-1: new SuperSpeed USB device number 24 using vhci_hcd [ 850.287687][ T846] usb 9-1: Using ep0 maxpacket: 32 [ 850.296124][ T846] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 850.303060][ T846] usb 9-1: config 0 interface 0 has no altsetting 0 [ 850.305898][ T846] usb 9-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 850.310374][ T846] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.328271][ T846] usb 9-1: config 0 descriptor?? [ 850.586563][T16522] xt_hashlimit: max too large, truncated to 1048576 [ 850.917220][T16535] vhci_hcd: connection reset by peer [ 850.920642][T15400] vhci_hcd vhci_hcd.7: stop threads [ 850.922965][T15400] vhci_hcd vhci_hcd.7: release socket [ 850.925564][T15400] vhci_hcd vhci_hcd.7: disconnect device [ 852.884373][ T846] usbhid 9-1:0.0: can't add hid device: -71 [ 852.886350][ T846] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 852.890648][ T846] usb 9-1: USB disconnect, device number 6 [ 853.106918][ T3938] usb 48-1: device descriptor read/8, error -110 [ 853.517473][ T3938] usb usb48-port1: attempt power cycle [ 853.566760][ T5832] usb 50-1: device descriptor read/8, error -110 [ 854.107475][ T3938] usb usb48-port1: unable to enumerate USB device [ 854.352350][T16571] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2147'. [ 854.716714][ T5832] usb usb50-port1: attempt power cycle [ 855.637018][ T5831] usb 52-1: device descriptor read/8, error -110 [ 855.977701][ T5832] usb usb50-port1: unable to enumerate USB device [ 856.027884][ T5831] usb usb52-port1: unable to enumerate USB device [ 856.671458][T16589] comedi comedi3: comedi_config --init_data is deprecated [ 857.014468][T16593] siw: device registration error -23 [ 857.847336][T16587] bridge0: entered promiscuous mode [ 857.906924][T15391] udevd[15391]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 858.086870][T15318] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 858.119884][ T5831] IPVS: starting estimator thread 0... [ 858.246533][T16609] IPVS: using max 45 ests per chain, 108000 per kthread [ 858.256817][T15318] usb 10-1: Using ep0 maxpacket: 32 [ 858.260772][T15318] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 858.265503][T15318] usb 10-1: config 0 interface 0 has no altsetting 0 [ 858.270694][T15318] usb 10-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 858.273459][T15318] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.281302][T15318] usb 10-1: config 0 descriptor?? [ 858.336413][T16612] netlink: 'syz.6.2155': attribute type 1 has an invalid length. [ 858.343150][T16612] netlink: 232 bytes leftover after parsing attributes in process `syz.6.2155'. [ 858.346285][T16612] netlink: 'syz.6.2155': attribute type 1 has an invalid length. [ 858.517474][T16589] xt_hashlimit: max too large, truncated to 1048576 [ 859.482597][T16620] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 859.484690][T16620] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 859.487331][T16620] vhci_hcd vhci_hcd.0: Device attached [ 859.756905][ T29] usb 52-1: SetAddress Request (26) to port 0 [ 859.759009][ T29] usb 52-1: new SuperSpeed USB device number 26 using vhci_hcd [ 859.888613][T16626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 859.926706][T16628] vhci_hcd: connection reset by peer [ 859.929746][ T5824] vhci_hcd vhci_hcd.7: stop threads [ 859.935721][ T5824] vhci_hcd vhci_hcd.7: release socket [ 859.939791][ T5824] vhci_hcd vhci_hcd.7: disconnect device [ 860.280632][T15318] usbhid 10-1:0.0: can't add hid device: -71 [ 860.282624][T15318] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 860.327643][T15318] usb 10-1: USB disconnect, device number 4 [ 860.550288][T16639] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2160'. [ 860.764940][T16642] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1022815425 (2045630850 ns) > initial count (1125894 ns). Using initial count to start timer. [ 861.756070][T16648] bridge0: entered promiscuous mode [ 863.116814][T16673] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 863.118971][T16673] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 863.121685][T16673] vhci_hcd vhci_hcd.0: Device attached [ 863.161150][T16679] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 863.163259][T16679] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 863.165978][T16679] vhci_hcd vhci_hcd.0: Device attached [ 863.446945][ T5831] usb 48-1: SetAddress Request (22) to port 0 [ 863.448991][ T5831] usb 48-1: new SuperSpeed USB device number 22 using vhci_hcd [ 863.467311][ T9878] usb 46-1: SetAddress Request (22) to port 0 [ 863.469423][ T9878] usb 46-1: new SuperSpeed USB device number 22 using vhci_hcd [ 863.535427][T16682] vhci_hcd: connection reset by peer [ 863.538992][T15040] vhci_hcd vhci_hcd.5: stop threads [ 863.540873][T15040] vhci_hcd vhci_hcd.5: release socket [ 863.543022][T15040] vhci_hcd vhci_hcd.5: disconnect device [ 863.751965][T16689] vhci_hcd: connection reset by peer [ 863.756531][T15040] vhci_hcd vhci_hcd.4: stop threads [ 863.760453][T15040] vhci_hcd vhci_hcd.4: release socket [ 863.765143][T15040] vhci_hcd vhci_hcd.4: disconnect device [ 863.801124][T16703] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2170'. [ 864.276064][T16714] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2173'. [ 864.857555][ T29] usb 52-1: device descriptor read/8, error -110 [ 865.226027][T16720] siw: device registration error -23 [ 865.258975][ T29] usb usb52-port1: attempt power cycle [ 865.858170][T16727] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 865.860377][T16727] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 865.863152][T16727] vhci_hcd vhci_hcd.0: Device attached [ 866.047381][ T29] usb usb52-port1: unable to enumerate USB device [ 866.137209][T15697] usb 50-1: SetAddress Request (22) to port 0 [ 866.139276][T15697] usb 50-1: new SuperSpeed USB device number 22 using vhci_hcd [ 866.353170][T16730] vhci_hcd: connection reset by peer [ 866.356135][T15040] vhci_hcd vhci_hcd.6: stop threads [ 866.358788][T15040] vhci_hcd vhci_hcd.6: release socket [ 866.361056][T15040] vhci_hcd vhci_hcd.6: disconnect device [ 866.451400][T16744] ./bus: Can't lookup blockdev [ 866.497311][T15318] IPVS: starting estimator thread 0... [ 866.587206][T16745] IPVS: using max 45 ests per chain, 108000 per kthread [ 867.731053][T16757] siw: device registration error -23 [ 867.824489][T16759] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2183'. [ 868.537003][ T5831] usb 48-1: device descriptor read/8, error -110 [ 868.599416][ T9878] usb 46-1: device descriptor read/8, error -110 [ 868.784183][T16764] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 868.786933][T16764] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 868.789891][T16764] vhci_hcd vhci_hcd.0: Device attached [ 868.936969][ T5831] usb 48-1: SetAddress Request (23) to port 0 [ 868.952998][T16782] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2189'. [ 869.585757][ T5831] usb 48-1: new SuperSpeed USB device number 23 using vhci_hcd [ 869.657928][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.789429][ T9878] usb usb46-port1: attempt power cycle [ 869.872403][T16774] vhci_hcd: connection closed [ 869.872820][T15400] vhci_hcd vhci_hcd.5: stop threads [ 869.877190][T15400] vhci_hcd vhci_hcd.5: release socket [ 869.879296][T15400] vhci_hcd vhci_hcd.5: disconnect device [ 869.896874][ T5831] usb 48-1: enqueue for inactive port 0 [ 869.912408][T16788] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 869.914514][T16788] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 869.921407][T16788] vhci_hcd vhci_hcd.0: Device attached [ 869.923939][T16786] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 869.926039][T16786] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 869.929881][T16786] vhci_hcd vhci_hcd.0: Device attached [ 870.007014][ T9878] usb 46-1: SetAddress Request (24) to port 0 [ 870.009961][ T9878] usb 46-1: new SuperSpeed USB device number 24 using vhci_hcd [ 870.027403][ T5831] usb usb48-port1: attempt power cycle [ 870.107855][T16793] vhci_hcd: connection closed [ 870.108109][T15400] vhci_hcd vhci_hcd.7: stop threads [ 870.111400][T15400] vhci_hcd vhci_hcd.7: release socket [ 870.113207][T15400] vhci_hcd vhci_hcd.7: disconnect device [ 870.232377][T16790] vhci_hcd: connection reset by peer [ 870.235377][T15400] vhci_hcd vhci_hcd.4: stop threads [ 870.237224][T15400] vhci_hcd vhci_hcd.4: release socket [ 870.239782][T15400] vhci_hcd vhci_hcd.4: disconnect device [ 870.597400][ T5831] usb usb48-port1: unable to enumerate USB device [ 870.603845][T16810] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2195'. [ 870.746863][ T29] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 870.896841][ T29] usb 10-1: Using ep0 maxpacket: 32 [ 870.900066][ T29] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 870.903194][ T29] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 870.906053][ T29] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 870.909436][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 870.912580][ T29] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 870.915780][ T29] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 870.920408][ T29] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 870.923181][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.927652][ T29] usb 10-1: config 0 descriptor?? [ 871.139994][ T29] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 871.187954][T15697] usb 50-1: device descriptor read/8, error -110 [ 871.530866][T16816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2204'. [ 871.540271][T16816] Cache volume key already in use (9p,syz,) [ 871.608788][T15697] usb usb50-port1: attempt power cycle [ 871.637353][T16814] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 871.639436][T16814] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 871.642075][T16814] vhci_hcd vhci_hcd.0: Device attached [ 871.830512][ T5831] usb 10-1: USB disconnect, device number 5 [ 871.834269][ T5831] usblp0: removed [ 871.927803][ T29] usb 52-1: SetAddress Request (31) to port 0 [ 871.932666][ T29] usb 52-1: new SuperSpeed USB device number 31 using vhci_hcd [ 871.975683][T16824] netlink: 'syz.6.2196': attribute type 10 has an invalid length. [ 872.202227][T15697] usb usb50-port1: unable to enumerate USB device [ 872.301912][T16819] vhci_hcd: connection reset by peer [ 872.306305][T15040] vhci_hcd vhci_hcd.7: stop threads [ 872.323372][T15040] vhci_hcd vhci_hcd.7: release socket [ 872.330289][T15040] vhci_hcd vhci_hcd.7: disconnect device [ 872.755089][T16828] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2199'. [ 875.156899][ T9878] usb 46-1: device descriptor read/8, error -110 [ 875.847516][T16880] siw: device registration error -23 [ 875.903775][ T9878] usb usb46-port1: unable to enumerate USB device [ 876.337943][T16881] x_tables: duplicate underflow at hook 1 [ 876.342912][T16881] hub 8-0:1.0: USB hub found [ 876.345033][T16881] hub 8-0:1.0: 1 port detected [ 876.682320][T16886] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 876.684491][T16886] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 876.687434][T16886] vhci_hcd vhci_hcd.0: Device attached [ 877.413271][T16888] vhci_hcd: connection reset by peer [ 877.416075][T15400] vhci_hcd vhci_hcd.7: stop threads [ 877.418708][T15400] vhci_hcd vhci_hcd.7: release socket [ 877.421244][T15400] vhci_hcd vhci_hcd.7: disconnect device [ 877.421283][ T29] usb 52-1: device descriptor read/8, error -110 [ 877.817584][ T29] usb usb52-port1: attempt power cycle [ 878.277736][T16919] siw: device registration error -23 [ 878.437414][ T29] usb usb52-port1: unable to enumerate USB device [ 879.237303][ T846] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 879.388315][ T846] usb 9-1: config 6 has an invalid interface number: 7 but max is 0 [ 879.390950][ T846] usb 9-1: config 6 has no interface number 0 [ 879.393371][ T846] usb 9-1: config 6 interface 7 has no altsetting 0 [ 879.398565][ T846] usb 9-1: New USB device found, idVendor=05c6, idProduct=9055, bcdDevice=62.d8 [ 879.402901][ T846] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.407745][ T846] usb 9-1: Product: syz [ 879.409118][ T846] usb 9-1: Manufacturer: syz [ 879.415158][ T846] usb 9-1: SerialNumber: syz [ 879.653763][T16955] netlink: 'syz.5.2227': attribute type 10 has an invalid length. [ 880.321185][T16951] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 880.324201][T16951] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 880.328591][T16951] vhci_hcd vhci_hcd.0: Device attached [ 880.544626][T16959] vhci_hcd: connection closed [ 880.545162][T15400] vhci_hcd vhci_hcd.7: stop threads [ 880.563271][T15400] vhci_hcd vhci_hcd.7: release socket [ 880.567907][T15400] vhci_hcd vhci_hcd.7: disconnect device [ 880.607645][ T29] usb 52-1: enqueue for inactive port 0 [ 880.935219][ T846] usb 9-1: USB disconnect, device number 7 [ 881.107775][ T29] usb usb52-port1: attempt power cycle [ 881.193890][T16979] netlink: 'syz.7.2235': attribute type 10 has an invalid length. [ 881.272752][T16979] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2235'. [ 881.846348][ T29] usb usb52-port1: unable to enumerate USB device [ 881.959639][T16989] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2239'. [ 882.107889][T16993] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 882.109969][T16993] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 882.112442][T16993] vhci_hcd vhci_hcd.0: Device attached [ 882.185462][T17005] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 882.187474][T17005] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 882.190095][T17005] vhci_hcd vhci_hcd.0: Device attached [ 882.397189][T15697] usb 46-1: SetAddress Request (26) to port 0 [ 882.399865][T15697] usb 46-1: new SuperSpeed USB device number 26 using vhci_hcd [ 882.476898][ T29] usb 52-1: SetAddress Request (39) to port 0 [ 882.478975][ T29] usb 52-1: new SuperSpeed USB device number 39 using vhci_hcd [ 882.956819][T17000] vhci_hcd: connection closed [ 882.957147][ T5824] vhci_hcd vhci_hcd.4: stop threads [ 882.963837][ T5824] vhci_hcd vhci_hcd.4: release socket [ 882.967535][ T5824] vhci_hcd vhci_hcd.4: disconnect device [ 883.108141][T15697] usb 46-1: enqueue for inactive port 0 [ 883.302010][T17006] vhci_hcd: connection reset by peer [ 883.304226][T15040] vhci_hcd vhci_hcd.7: stop threads [ 883.309969][T15040] vhci_hcd vhci_hcd.7: release socket [ 883.311985][T15040] vhci_hcd vhci_hcd.7: disconnect device [ 883.480809][T17029] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2250'. [ 883.607416][T15697] usb usb46-port1: attempt power cycle [ 883.754642][T17036] netlink: 'syz.4.2252': attribute type 10 has an invalid length. [ 883.757824][ T6400] usb 11-1: new full-speed USB device number 5 using dummy_hcd [ 883.821429][T17036] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2252'. [ 883.902845][T17039] siw: device registration error -23 [ 883.931948][ T6400] usb 11-1: config 6 has an invalid interface number: 7 but max is 0 [ 883.936004][ T6400] usb 11-1: config 6 has no interface number 0 [ 883.939461][ T6400] usb 11-1: config 6 interface 7 has no altsetting 0 [ 883.956414][ T6400] usb 11-1: New USB device found, idVendor=05c6, idProduct=9055, bcdDevice=62.d8 [ 883.960828][ T6400] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.964456][ T6400] usb 11-1: Product: syz [ 883.969587][ T6400] usb 11-1: Manufacturer: syz [ 883.971657][ T6400] usb 11-1: SerialNumber: syz [ 884.333474][T15697] usb usb46-port1: unable to enumerate USB device [ 884.940416][T17046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 885.012357][T17049] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2253'. [ 885.136032][T17052] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 885.138213][T17052] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 885.141317][T17052] vhci_hcd vhci_hcd.0: Device attached [ 885.406950][ T9878] usb 48-1: SetAddress Request (26) to port 0 [ 885.409188][ T9878] usb 48-1: new SuperSpeed USB device number 26 using vhci_hcd [ 885.799168][ T6400] usb 11-1: USB disconnect, device number 5 [ 885.914264][T17053] vhci_hcd: connection reset by peer [ 885.916176][T15040] vhci_hcd vhci_hcd.5: stop threads [ 885.918559][T15040] vhci_hcd vhci_hcd.5: release socket [ 885.920865][T15040] vhci_hcd vhci_hcd.5: disconnect device [ 886.130464][T17065] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 886.132678][T17065] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 886.135354][T17065] vhci_hcd vhci_hcd.0: Device attached [ 886.200523][T17071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2262'. [ 886.855110][T17069] vhci_hcd: connection closed [ 886.858653][T17080] siw: device registration error -23 [ 886.891023][T15040] vhci_hcd vhci_hcd.7: stop threads [ 886.895249][T17079] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2265'. [ 886.899130][T15040] vhci_hcd vhci_hcd.7: release socket [ 886.899485][T15040] vhci_hcd vhci_hcd.7: disconnect device [ 886.998530][T17079] 9pnet_virtio: no channels available for device syz [ 887.263721][T17082] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 887.265964][T17082] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 887.268501][T17082] vhci_hcd vhci_hcd.0: Device attached [ 887.542289][T15697] usb 50-1: SetAddress Request (26) to port 0 [ 887.601026][T17088] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2268'. [ 887.878267][ T29] usb 52-1: device descriptor read/8, error -110 [ 888.144219][T15697] usb 50-1: new SuperSpeed USB device number 26 using vhci_hcd [ 888.357576][T17084] vhci_hcd: connection closed [ 888.358803][T15400] vhci_hcd vhci_hcd.6: stop threads [ 888.363439][T15400] vhci_hcd vhci_hcd.6: release socket [ 888.365963][T15400] vhci_hcd vhci_hcd.6: disconnect device [ 888.416859][T15697] usb 50-1: enqueue for inactive port 0 [ 888.688079][ T29] usb usb52-port1: attempt power cycle [ 888.818618][T15697] usb usb50-port1: attempt power cycle [ 888.965992][T17109] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2274'. [ 889.546497][T15697] usb usb50-port1: unable to enumerate USB device [ 889.756331][ T29] usb usb52-port1: unable to enumerate USB device [ 889.956336][T17120] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 889.959120][T17120] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 889.969509][T17120] vhci_hcd vhci_hcd.0: Device attached [ 890.009778][T17124] comedi comedi3: comedi_config --init_data is deprecated [ 890.246872][T15697] usb 46-1: SetAddress Request (30) to port 0 [ 890.249292][T15697] usb 46-1: new SuperSpeed USB device number 30 using vhci_hcd [ 890.286911][ T29] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 890.392885][T17134] ./bus: Can't lookup blockdev [ 890.447054][ T29] usb 11-1: Using ep0 maxpacket: 32 [ 890.459709][ T29] usb 11-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 890.464133][ T29] usb 11-1: config 0 interface 0 has no altsetting 0 [ 890.466684][ T29] usb 11-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 890.470347][ T9878] usb 48-1: device descriptor read/8, error -110 [ 890.472474][ T29] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.484997][ T29] usb 11-1: config 0 descriptor?? [ 890.699244][T17124] xt_hashlimit: max too large, truncated to 1048576 [ 890.728164][T17121] vhci_hcd: connection reset by peer [ 890.731289][T15400] vhci_hcd vhci_hcd.4: stop threads [ 890.733243][T15400] vhci_hcd vhci_hcd.4: release socket [ 890.735170][T15400] vhci_hcd vhci_hcd.4: disconnect device [ 890.790740][T17142] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2283'. [ 890.899589][ T9878] usb usb48-port1: attempt power cycle [ 891.230544][T17147] netlink: 'syz.7.2284': attribute type 10 has an invalid length. [ 892.150382][ T9878] usb usb48-port1: unable to enumerate USB device [ 892.509620][T17152] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 892.511717][T17152] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 892.514390][T17152] vhci_hcd vhci_hcd.0: Device attached [ 892.797022][ T9892] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 892.946854][ T9892] usb 12-1: Using ep0 maxpacket: 32 [ 892.950554][ T9892] usb 12-1: config index 0 descriptor too short (expected 29220, got 36) [ 892.954128][ T9892] usb 12-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 892.957755][ T9892] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 892.961469][ T9892] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 892.965361][ T9892] usb 12-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 892.969688][ T9892] usb 12-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 892.974928][ T9892] usb 12-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 892.978632][ T9892] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.985080][ T9892] usb 12-1: config 0 descriptor?? [ 893.217969][ T9892] usblp 12-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 893.262840][ T29] usbhid 11-1:0.0: can't add hid device: -71 [ 893.338585][T17177] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2293'. [ 893.730301][ T29] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 893.853582][T17157] vhci_hcd: connection closed [ 893.853860][T15040] vhci_hcd vhci_hcd.4: stop threads [ 893.855581][ T29] usb 11-1: USB disconnect, device number 6 [ 893.857689][T15040] vhci_hcd vhci_hcd.4: release socket [ 893.860938][T15040] vhci_hcd vhci_hcd.4: disconnect device [ 894.104249][T17185] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 894.107068][T17185] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 894.111236][T17185] vhci_hcd vhci_hcd.0: Device attached [ 894.215789][ T6400] usb 12-1: USB disconnect, device number 4 [ 894.221269][ T6400] usblp0: removed [ 894.406885][ T29] usb 48-1: SetAddress Request (30) to port 0 [ 894.409399][ T29] usb 48-1: new SuperSpeed USB device number 30 using vhci_hcd [ 895.128956][T17186] vhci_hcd: connection reset by peer [ 895.131737][ T5824] vhci_hcd vhci_hcd.5: stop threads [ 895.133485][ T5824] vhci_hcd vhci_hcd.5: release socket [ 895.135406][ T5824] vhci_hcd vhci_hcd.5: disconnect device [ 895.240882][T17220] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2304'. [ 895.336894][T15697] usb 46-1: device descriptor read/8, error -110 [ 895.739581][T15697] usb usb46-port1: attempt power cycle [ 896.243830][T17255] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 896.246070][T17255] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 896.248919][T17255] vhci_hcd vhci_hcd.0: Device attached [ 896.296954][ T9892] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 896.308995][T15697] usb usb46-port1: unable to enumerate USB device [ 896.448434][ T9892] usb 9-1: Using ep0 maxpacket: 32 [ 896.452299][ T9892] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 896.455352][ T9892] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 896.462848][ T9892] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 896.473078][ T9892] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 896.485630][ T9892] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 896.493380][ T9892] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 896.507962][ T9892] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 896.512398][ T9892] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.533390][ T9892] usb 9-1: config 0 descriptor?? [ 896.631956][T17262] comedi comedi3: comedi_config --init_data is deprecated [ 896.752041][ T9892] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 896.797929][ T9878] usb 52-1: SetAddress Request (43) to port 0 [ 896.800497][ T9878] usb 52-1: new SuperSpeed USB device number 43 using vhci_hcd [ 896.876842][T15318] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 896.931685][T17256] vhci_hcd: connection reset by peer [ 896.934249][ T5824] vhci_hcd vhci_hcd.7: stop threads [ 896.935973][ T5824] vhci_hcd vhci_hcd.7: release socket [ 896.938153][ T5824] vhci_hcd vhci_hcd.7: disconnect device [ 897.026973][T15318] usb 11-1: Using ep0 maxpacket: 32 [ 897.030166][T15318] usb 11-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 897.033838][T15318] usb 11-1: config 0 interface 0 has no altsetting 0 [ 897.036083][T15318] usb 11-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 897.039196][T15318] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.043259][T15318] usb 11-1: config 0 descriptor?? [ 897.262971][T17262] xt_hashlimit: max too large, truncated to 1048576 [ 897.496498][ T9892] usb 9-1: USB disconnect, device number 8 [ 897.504316][ T9892] usblp0: removed [ 897.676452][T17283] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2321'. [ 898.279275][T17286] x_tables: duplicate underflow at hook 1 [ 898.285752][T17286] hub 8-0:1.0: USB hub found [ 898.292559][T17286] hub 8-0:1.0: 1 port detected [ 899.106108][T17322] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2332'. [ 899.497437][ T29] usb 48-1: device descriptor read/8, error -110 [ 899.735073][T15318] usbhid 11-1:0.0: can't add hid device: -71 [ 899.739891][T15318] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 899.750989][T15318] usb 11-1: USB disconnect, device number 7 [ 899.865008][T17333] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2336'. [ 899.880057][T17333] Cache volume key already in use (9p,syz,) [ 899.947922][ T29] usb usb48-port1: attempt power cycle [ 900.004845][T17338] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 900.007655][T17338] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 900.011097][T17338] vhci_hcd vhci_hcd.0: Device attached [ 900.286944][ T5831] usb 50-1: SetAddress Request (30) to port 0 [ 900.290024][ T5831] usb 50-1: new SuperSpeed USB device number 30 using vhci_hcd [ 900.517986][ T29] usb usb48-port1: unable to enumerate USB device [ 900.643746][T17339] vhci_hcd: connection reset by peer [ 900.645930][T15040] vhci_hcd vhci_hcd.6: stop threads [ 900.648985][T15040] vhci_hcd vhci_hcd.6: release socket [ 900.651488][T15040] vhci_hcd vhci_hcd.6: disconnect device [ 900.760508][T17359] comedi comedi3: comedi_config --init_data is deprecated [ 901.006883][ T6400] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 901.084168][T17380] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2345'. [ 901.366886][T17379] comedi comedi2: bad chanlist[0]=0x00000001 chan=1 range length=1 [ 901.386833][ T6400] usb 10-1: Using ep0 maxpacket: 32 [ 901.660114][ T6400] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 901.694192][T17396] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2355'. [ 901.701103][T17396] 9pnet_virtio: no channels available for device syz [ 901.892614][ T6400] usb 10-1: config 0 interface 0 has no altsetting 0 [ 901.894825][ T6400] usb 10-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 901.897953][ T6400] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.902644][ T6400] usb 10-1: config 0 descriptor?? [ 901.913479][ T9878] usb 52-1: device descriptor read/8, error -110 [ 902.112585][T17359] xt_hashlimit: max too large, truncated to 1048576 [ 902.686433][T17416] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 902.688546][T17416] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 902.720617][T17416] vhci_hcd vhci_hcd.0: Device attached [ 902.810946][T17425] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 902.813035][T17425] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 902.815976][T17425] vhci_hcd vhci_hcd.0: Device attached [ 902.872466][ T9878] usb usb52-port1: attempt power cycle [ 902.987080][ T29] usb 46-1: SetAddress Request (34) to port 0 [ 902.989389][ T29] usb 46-1: new SuperSpeed USB device number 34 using vhci_hcd [ 903.225374][T17422] vhci_hcd: connection reset by peer [ 903.228649][T15040] vhci_hcd vhci_hcd.4: stop threads [ 903.231360][T15040] vhci_hcd vhci_hcd.4: release socket [ 903.233891][T15040] vhci_hcd vhci_hcd.4: disconnect device [ 903.416685][T17426] vhci_hcd: connection closed [ 903.421657][T15040] vhci_hcd vhci_hcd.6: stop threads [ 903.424821][T15040] vhci_hcd vhci_hcd.6: release socket [ 903.426579][T15040] vhci_hcd vhci_hcd.6: disconnect device [ 903.437975][ T9878] usb usb52-port1: unable to enumerate USB device [ 903.549289][T17439] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2365'. [ 903.796218][ T6400] usbhid 10-1:0.0: can't add hid device: -71 [ 903.812202][ T6400] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 903.887595][ T6400] usb 10-1: USB disconnect, device number 6 [ 904.020963][T17444] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2368'. [ 904.032766][T17444] 9pnet_virtio: no channels available for device syz [ 904.579366][T17450] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 904.581467][T17450] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 904.584356][T17450] vhci_hcd vhci_hcd.0: Device attached [ 904.933876][T17462] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 904.935988][T17462] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 904.940371][T17465] comedi comedi3: comedi_config --init_data is deprecated [ 904.943660][T17462] vhci_hcd vhci_hcd.0: Device attached [ 904.972746][T17466] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 904.974738][T17466] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 904.981072][T17466] vhci_hcd vhci_hcd.0: Device attached [ 905.207757][ T9878] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 905.229254][T17451] vhci_hcd: connection closed [ 905.229680][ T5824] vhci_hcd vhci_hcd.6: stop threads [ 905.233902][ T5824] vhci_hcd vhci_hcd.6: release socket [ 905.236318][ T5824] vhci_hcd vhci_hcd.6: disconnect device [ 905.237008][ T6734] usb 52-1: SetAddress Request (47) to port 0 [ 905.240924][ T6734] usb 52-1: new SuperSpeed USB device number 47 using vhci_hcd [ 905.347049][ T5831] usb 50-1: device descriptor read/8, error -110 [ 905.366824][ T9878] usb 10-1: Using ep0 maxpacket: 32 [ 905.371275][ T9878] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 905.376113][ T9878] usb 10-1: config 0 interface 0 has no altsetting 0 [ 905.379764][ T9878] usb 10-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 905.383906][ T9878] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.391240][ T9878] usb 10-1: config 0 descriptor?? [ 905.464058][T17463] vhci_hcd: connection reset by peer [ 905.466303][T15040] vhci_hcd vhci_hcd.7: stop threads [ 905.468389][T15040] vhci_hcd vhci_hcd.7: release socket [ 905.470416][T15040] vhci_hcd vhci_hcd.7: disconnect device [ 905.593300][T17467] vhci_hcd: connection closed [ 905.593726][T15040] vhci_hcd vhci_hcd.4: stop threads [ 905.598241][T15040] vhci_hcd vhci_hcd.4: release socket [ 905.600784][T15040] vhci_hcd vhci_hcd.4: disconnect device [ 905.602768][T17465] xt_hashlimit: max too large, truncated to 1048576 [ 905.760180][ T5831] usb usb50-port1: attempt power cycle [ 906.364750][T17482] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2374'. [ 906.381943][T17484] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 906.384007][T17484] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 906.392297][T17484] vhci_hcd vhci_hcd.0: Device attached [ 906.507083][ T5831] usb 50-1: SetAddress Request (33) to port 0 [ 906.509907][ T5831] usb 50-1: new SuperSpeed USB device number 33 using vhci_hcd [ 906.797272][T17491] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 906.799353][T17491] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 906.802654][T17491] vhci_hcd vhci_hcd.0: Device attached [ 906.989469][T17485] vhci_hcd: connection reset by peer [ 906.992719][ T5824] vhci_hcd vhci_hcd.6: stop threads [ 906.994460][ T5824] vhci_hcd vhci_hcd.6: release socket [ 906.996421][ T5824] vhci_hcd vhci_hcd.6: disconnect device [ 907.382145][T17492] vhci_hcd: connection closed [ 907.382889][T15400] vhci_hcd vhci_hcd.4: stop threads [ 907.386081][T15400] vhci_hcd vhci_hcd.4: release socket [ 907.388006][T15400] vhci_hcd vhci_hcd.4: disconnect device [ 907.590706][T17497] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2378'. [ 907.928518][T17501] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 907.930597][T17501] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 907.941700][T17501] vhci_hcd vhci_hcd.0: Device attached [ 908.057070][ T29] usb 46-1: device descriptor read/8, error -110 [ 908.065086][ T9878] usbhid 10-1:0.0: can't add hid device: -71 [ 908.067120][ T9878] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 908.074898][ T9878] usb 10-1: USB disconnect, device number 7 [ 908.162111][T17509] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2380'. [ 908.448047][ T29] usb usb46-port1: attempt power cycle [ 908.535077][T17502] vhci_hcd: connection closed [ 908.535524][T15400] vhci_hcd vhci_hcd.6: stop threads [ 908.541672][T15400] vhci_hcd vhci_hcd.6: release socket [ 908.543476][T15400] vhci_hcd vhci_hcd.6: disconnect device [ 909.046453][ T29] usb usb46-port1: unable to enumerate USB device [ 909.148459][T17533] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 909.151269][T17533] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 909.167867][T17533] vhci_hcd vhci_hcd.0: Device attached [ 909.197022][T17536] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 909.199201][T17536] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 909.208678][T17536] vhci_hcd vhci_hcd.0: Device attached [ 909.447600][ T29] usb 48-1: SetAddress Request (34) to port 0 [ 909.449656][ T29] usb 48-1: new SuperSpeed USB device number 34 using vhci_hcd [ 909.507052][ T9878] usb 46-1: SetAddress Request (38) to port 0 [ 909.509954][ T9878] usb 46-1: new SuperSpeed USB device number 38 using vhci_hcd [ 909.511367][T17548] comedi comedi3: comedi_config --init_data is deprecated [ 909.777502][ T6400] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 909.806501][T17537] vhci_hcd: connection reset by peer [ 909.810494][ T5824] vhci_hcd vhci_hcd.4: stop threads [ 909.812792][ T5824] vhci_hcd vhci_hcd.4: release socket [ 909.815115][ T5824] vhci_hcd vhci_hcd.4: disconnect device [ 909.917595][T17534] vhci_hcd: connection reset by peer [ 909.919599][ T5824] vhci_hcd vhci_hcd.5: stop threads [ 909.921287][ T5824] vhci_hcd vhci_hcd.5: release socket [ 909.923106][ T5824] vhci_hcd vhci_hcd.5: disconnect device [ 909.927112][ T6400] usb 11-1: Using ep0 maxpacket: 32 [ 909.935638][ T6400] usb 11-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 909.939319][ T6400] usb 11-1: config 0 interface 0 has no altsetting 0 [ 909.942395][ T6400] usb 11-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 909.945613][ T6400] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.960661][ T6400] usb 11-1: config 0 descriptor?? [ 910.215225][T17548] xt_hashlimit: max too large, truncated to 1048576 [ 910.341733][ T6734] usb 52-1: device descriptor read/8, error -110 [ 910.469893][T17552] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 910.471984][T17552] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 910.475321][T17552] vhci_hcd vhci_hcd.0: Device attached [ 910.583797][T17563] netlink: 'syz.5.2403': attribute type 10 has an invalid length. [ 910.596910][ T6734] usb 52-1: SetAddress Request (48) to port 0 [ 910.598973][ T6734] usb 52-1: new SuperSpeed USB device number 48 using vhci_hcd [ 910.809563][T17563] 8021q: adding VLAN 0 to HW filter on device team0 [ 910.819217][T17563] bond0: (slave team0): Enslaving as an active interface with an up link [ 910.823034][T17565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2395'. [ 911.100307][T17553] vhci_hcd: connection reset by peer [ 911.102581][ T5824] vhci_hcd vhci_hcd.7: stop threads [ 911.104889][ T5824] vhci_hcd vhci_hcd.7: release socket [ 911.107811][ T5824] vhci_hcd vhci_hcd.7: disconnect device [ 911.578571][ T5831] usb 50-1: device descriptor read/8, error -110 [ 911.687103][ T5831] usb usb50-port1: unable to enumerate USB device [ 912.491413][ T6400] usbhid 11-1:0.0: can't add hid device: -71 [ 912.493408][ T6400] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 912.502860][ T6400] usb 11-1: USB disconnect, device number 8 [ 912.628256][T17582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2399'. [ 912.997033][T15318] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 913.012527][T17587] comedi comedi1: 8255: I/O base address not correctly aligned [ 913.051328][T17588] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 913.054087][T17588] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 913.067878][T17588] vhci_hcd vhci_hcd.0: Device attached [ 913.166878][T15318] usb 11-1: Using ep0 maxpacket: 32 [ 913.221992][T17597] comedi comedi3: comedi_config --init_data is deprecated [ 913.337934][T17593] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2407'. [ 913.400931][T15318] usb 11-1: config index 0 descriptor too short (expected 29220, got 36) [ 913.404352][T15318] usb 11-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 913.407785][T15318] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 913.411377][T15318] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 913.415256][T15318] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 913.419114][T15318] usb 11-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 913.424213][T15318] usb 11-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 913.427793][T15318] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.432326][T15318] usb 11-1: config 0 descriptor?? [ 913.462309][T17589] vhci_hcd: connection closed [ 913.462588][ T5824] vhci_hcd vhci_hcd.5: stop threads [ 913.466706][ T5824] vhci_hcd vhci_hcd.5: release socket [ 913.469001][ T5824] vhci_hcd vhci_hcd.5: disconnect device [ 913.526869][ T9877] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 913.644224][T15318] usblp 11-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 913.681949][ T9877] usb 9-1: Using ep0 maxpacket: 32 [ 913.682046][T17599] netlink: 'syz.7.2408': attribute type 4 has an invalid length. [ 913.687297][ T9877] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 913.693047][ T9877] usb 9-1: config 0 interface 0 has no altsetting 0 [ 913.697105][ T9877] usb 9-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 913.702513][ T9877] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.709940][ T9877] usb 9-1: config 0 descriptor?? [ 913.923004][T17597] xt_hashlimit: max too large, truncated to 1048576 [ 914.016208][T17610] comedi comedi1: board detection failed [ 914.125758][T17613] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2414'. [ 914.262830][T17621] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2416'. [ 914.271664][T17621] 9pnet_virtio: no channels available for device syz [ 914.537244][ T29] usb 48-1: device descriptor read/8, error -110 [ 914.619833][ T9878] usb 46-1: device descriptor read/8, error -110 [ 914.942269][ T29] usb usb48-port1: attempt power cycle [ 915.022671][ T9878] usb usb46-port1: attempt power cycle [ 915.025074][ T3938] usb 11-1: USB disconnect, device number 9 [ 915.036591][ T3938] usblp0: removed [ 915.330993][T17632] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 915.333091][T17632] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 915.338326][T17632] vhci_hcd vhci_hcd.0: Device attached [ 915.587124][ T29] usb 48-1: SetAddress Request (37) to port 0 [ 915.589604][ T29] usb 48-1: new SuperSpeed USB device number 37 using vhci_hcd [ 915.617908][ T9878] usb usb46-port1: unable to enumerate USB device [ 915.656931][ T6734] usb 52-1: device descriptor read/8, error -110 [ 915.773547][T17646] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2424'. [ 916.221618][ T9877] usbhid 9-1:0.0: can't add hid device: -71 [ 916.226496][ T9877] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 916.258124][ T9877] usb 9-1: USB disconnect, device number 9 [ 916.262938][ T6734] usb usb52-port1: attempt power cycle [ 916.314965][T17649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2425'. [ 916.319658][T17633] vhci_hcd: connection reset by peer [ 916.327017][T17649] 9pnet_virtio: no channels available for device syz [ 916.329912][T15400] vhci_hcd vhci_hcd.5: stop threads [ 916.331923][T15400] vhci_hcd vhci_hcd.5: release socket [ 916.334824][T15400] vhci_hcd vhci_hcd.5: disconnect device [ 917.055187][ T42] audit: type=1800 audit(1785457382.849:503): pid=17653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2426" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 917.163267][ T6734] usb usb52-port1: unable to enumerate USB device [ 917.261841][T17660] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2429'. [ 919.126184][T17681] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 919.128373][T17681] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 919.223755][T17681] vhci_hcd vhci_hcd.0: Device attached [ 919.367149][T17698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2440'. [ 919.631800][T17682] vhci_hcd: connection closed [ 919.632356][T15400] vhci_hcd vhci_hcd.7: stop threads [ 919.669113][T15400] vhci_hcd vhci_hcd.7: release socket [ 919.672707][T15400] vhci_hcd vhci_hcd.7: disconnect device [ 919.707669][ T9877] usb 52-1: enqueue for inactive port 0 [ 920.204531][ T9877] usb usb52-port1: attempt power cycle [ 920.266837][T15040] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.707181][ T29] usb 48-1: device descriptor read/8, error -110 [ 920.847108][ T29] usb usb48-port1: unable to enumerate USB device [ 920.973957][T17736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2452'. [ 921.146306][ T9877] usb usb52-port1: unable to enumerate USB device [ 921.400534][T17762] comedi comedi3: comedi_config --init_data is deprecated [ 921.499957][T17765] 9pnet_virtio: no channels available for device syz [ 921.638629][ T6400] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 921.829672][ T6400] usb 12-1: Using ep0 maxpacket: 32 [ 921.884348][ T6400] usb 12-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 921.889030][ T6400] usb 12-1: config 0 interface 0 has no altsetting 0 [ 921.916645][ T6400] usb 12-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 921.935031][ T6400] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.108843][ T6400] usb 12-1: config 0 descriptor?? [ 922.382334][T17788] comedi comedi3: comedi_config --init_data is deprecated [ 922.460998][T17762] xt_hashlimit: max too large, truncated to 1048576 [ 922.646842][T15424] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 922.816948][T15424] usb 10-1: Using ep0 maxpacket: 32 [ 922.821716][T15424] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 922.825254][T15424] usb 10-1: config 0 interface 0 has no altsetting 0 [ 922.827647][T15424] usb 10-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 922.832361][T15424] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.836221][T15424] usb 10-1: config 0 descriptor?? [ 923.050598][T17788] xt_hashlimit: max too large, truncated to 1048576 [ 923.120755][T17813] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 923.123344][T17813] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 923.129097][T17813] vhci_hcd vhci_hcd.0: Device attached [ 923.406924][ T6734] usb 46-1: SetAddress Request (42) to port 0 [ 923.412121][ T6734] usb 46-1: new SuperSpeed USB device number 42 using vhci_hcd [ 923.512224][T17819] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2482'. [ 923.559049][T17821] random: crng reseeded on system resumption [ 923.755855][T17814] vhci_hcd: connection reset by peer [ 923.757809][T15040] vhci_hcd vhci_hcd.4: stop threads [ 923.759626][T15040] vhci_hcd vhci_hcd.4: release socket [ 923.761688][T15040] vhci_hcd vhci_hcd.4: disconnect device [ 924.420144][ T6400] usbhid 12-1:0.0: can't add hid device: -71 [ 924.422175][ T6400] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 924.433191][ T6400] usb 12-1: USB disconnect, device number 5 [ 924.487088][T17833] comedi comedi3: comedi_config --init_data is deprecated [ 924.746878][ T29] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 925.118412][ T29] usb 9-1: Using ep0 maxpacket: 32 [ 925.625573][T15424] usbhid 10-1:0.0: can't add hid device: -71 [ 925.627913][T15424] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 925.646642][T15424] usb 10-1: USB disconnect, device number 8 [ 925.662960][ T29] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 925.667124][ T29] usb 9-1: config 0 interface 0 has no altsetting 0 [ 925.669226][ T29] usb 9-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 925.672645][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.676468][ T29] usb 9-1: config 0 descriptor?? [ 925.891129][T17833] xt_hashlimit: max too large, truncated to 1048576 [ 925.940268][T17851] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 925.942662][T17851] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 925.946033][T17851] vhci_hcd vhci_hcd.0: Device attached [ 926.236945][T15424] usb 48-1: SetAddress Request (38) to port 0 [ 926.239707][T15424] usb 48-1: new SuperSpeed USB device number 38 using vhci_hcd [ 926.253679][T17871] comedi comedi3: comedi_config --init_data is deprecated [ 926.452422][T17873] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 926.454554][T17873] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 926.463987][T17873] vhci_hcd vhci_hcd.0: Device attached [ 926.496946][ T3938] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 926.564548][T17852] vhci_hcd: connection reset by peer [ 926.566502][T15400] vhci_hcd vhci_hcd.5: stop threads [ 926.569011][T15400] vhci_hcd vhci_hcd.5: release socket [ 926.571399][T15400] vhci_hcd vhci_hcd.5: disconnect device [ 926.666884][ T3938] usb 12-1: Using ep0 maxpacket: 32 [ 926.672879][ T3938] usb 12-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 926.677549][ T3938] usb 12-1: config 0 interface 0 has no altsetting 0 [ 926.680437][ T3938] usb 12-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 926.684131][ T3938] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.693335][ T3938] usb 12-1: config 0 descriptor?? [ 926.736946][ T5898] usb 50-1: SetAddress Request (34) to port 0 [ 926.738986][ T5898] usb 50-1: new SuperSpeed USB device number 34 using vhci_hcd [ 926.768062][T17874] vhci_hcd: connection reset by peer [ 926.770490][T15400] vhci_hcd vhci_hcd.6: stop threads [ 926.772111][T15400] vhci_hcd vhci_hcd.6: release socket [ 926.773860][T15400] vhci_hcd vhci_hcd.6: disconnect device [ 926.907101][T17871] xt_hashlimit: max too large, truncated to 1048576 [ 927.617781][ T29] usbhid 9-1:0.0: can't add hid device: -71 [ 927.621588][ T29] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 927.628032][ T29] usb 9-1: USB disconnect, device number 10 [ 928.368649][T17911] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 928.371211][T17911] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 928.374523][T17911] vhci_hcd vhci_hcd.0: Device attached [ 928.438522][T17917] ieee802154 phy1 wpan1: encryption failed: -22 [ 928.456954][ T6734] usb 46-1: device descriptor read/8, error -110 [ 928.857971][ T6734] usb usb46-port1: attempt power cycle [ 928.872165][ T42] audit: type=1800 audit(1785457394.669:504): pid=17945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2525" name="use" dev="configfs" ino=62729 res=0 errno=0 [ 928.910686][T17948] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 928.912684][T17948] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 928.920821][T17948] vhci_hcd vhci_hcd.0: Device attached [ 929.019513][T17912] vhci_hcd: connection closed [ 929.019723][ T13] vhci_hcd vhci_hcd.6: stop threads [ 929.023071][ T13] vhci_hcd vhci_hcd.6: release socket [ 929.024856][ T13] vhci_hcd vhci_hcd.6: disconnect device [ 929.053235][ T42] audit: type=1326 audit(1785457394.849:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17956 comm="syz.4.2529" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 929.062740][ T42] audit: type=1326 audit(1785457394.849:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17956 comm="syz.4.2529" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 929.071905][ T42] audit: type=1326 audit(1785457394.849:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17956 comm="syz.4.2529" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 929.080991][ T42] audit: type=1326 audit(1785457394.849:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17956 comm="syz.4.2529" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 929.089969][ T42] audit: type=1326 audit(1785457394.849:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17956 comm="syz.4.2529" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf702efec code=0x7ffc0000 [ 929.099344][ T42] audit: type=1326 audit(1785457394.849:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17956 comm="syz.4.2529" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 929.108334][ T42] audit: type=1326 audit(1785457394.849:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17956 comm="syz.4.2529" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 929.117124][ T42] audit: type=1326 audit(1785457394.849:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17956 comm="syz.4.2529" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 929.126396][ T42] audit: type=1326 audit(1785457394.849:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17956 comm="syz.4.2529" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 929.285375][ T3938] usbhid 12-1:0.0: can't add hid device: -71 [ 929.290993][ T3938] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 929.298540][ T3938] usb 12-1: USB disconnect, device number 6 [ 929.339160][T17970] usb usb8: usbfs: process 17970 (syz.7.2533) did not claim interface 0 before use [ 929.352323][T17949] vhci_hcd: connection closed [ 929.352660][ T13] vhci_hcd vhci_hcd.5: stop threads [ 929.356510][ T13] vhci_hcd vhci_hcd.5: release socket [ 929.359107][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 929.437604][ T6734] usb usb46-port1: unable to enumerate USB device [ 929.682414][T17980] program syz.4.2536 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 930.001450][T17997] comedi comedi3: comedi_config --init_data is deprecated [ 930.225983][T18007] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 930.228116][T18007] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 930.234736][T18007] vhci_hcd vhci_hcd.0: Device attached [ 930.257160][ T6734] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 930.416842][ T6734] usb 12-1: Using ep0 maxpacket: 32 [ 930.420595][ T6734] usb 12-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 930.425246][ T6734] usb 12-1: config 0 interface 0 has no altsetting 0 [ 930.428385][ T6734] usb 12-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 930.432372][ T6734] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.441142][ T6734] usb 12-1: config 0 descriptor?? [ 930.499586][ T9877] usb 46-1: SetAddress Request (46) to port 0 [ 930.502785][ T9877] usb 46-1: new SuperSpeed USB device number 46 using vhci_hcd [ 930.662023][T17997] xt_hashlimit: max too large, truncated to 1048576 [ 930.863477][T18008] vhci_hcd: connection reset by peer [ 930.865829][T15400] vhci_hcd vhci_hcd.4: stop threads [ 930.871336][T15400] vhci_hcd vhci_hcd.4: release socket [ 930.874609][T15400] vhci_hcd vhci_hcd.4: disconnect device [ 931.108661][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.346976][T15424] usb 48-1: device descriptor read/8, error -110 [ 931.758771][ T9878] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 931.771399][T15424] usb usb48-port1: attempt power cycle [ 931.806833][ T9] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 931.817043][ T5898] usb 50-1: device descriptor read/8, error -110 [ 931.927597][ T9878] usb 9-1: Using ep0 maxpacket: 16 [ 931.931378][ T9878] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 931.935388][ T9878] usb 9-1: config 0 has no interface number 0 [ 931.937451][ T9878] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 931.941130][ T9878] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 931.947098][ T9878] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 931.952147][ T9878] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 931.954776][ T9878] usb 9-1: Product: syz [ 931.956152][ T9878] usb 9-1: SerialNumber: syz [ 931.959550][ T9878] usb 9-1: config 0 descriptor?? [ 931.967266][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 931.968599][ T9878] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 931.973366][ T9878] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input33 [ 931.973496][ T9] usb 10-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 931.984215][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.989561][ T9] usb 10-1: Product: syz [ 931.991010][ T9] usb 10-1: Manufacturer: syz [ 931.992509][ T9] usb 10-1: SerialNumber: syz [ 931.999839][ T9] usb 10-1: config 0 descriptor?? [ 932.006303][ T9] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 932.009703][ T9] pctv452e: pctv452e_power_ctrl: 1 [ 932.009703][ T9] [ 932.012868][ T9] usb 10-1: selecting invalid altsetting 3 [ 932.017453][ T9] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 932.017453][ T9] [ 932.021045][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 932.027834][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 932.034881][ T9] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 932.038239][ T9] usb 10-1: media controller created [ 932.047905][ T9] dvb-usb: bulk message failed: -22 (8/0) [ 932.050642][ T9] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 932.054113][ T9] dvb-usb: MAC address reading failed. [ 932.067525][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 932.118562][ T9] DVB: Unable to find symbol stb0899_attach() [ 932.120700][ T9] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 932.166917][ T9] rc_core: IR keymap rc-tt-1500 not found [ 932.168756][ T9] Registered IR keymap rc-empty [ 932.171998][ T9] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 932.178796][ T9] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input34 [ 932.185647][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 932.193872][ T9] pctv452e: pctv452e_power_ctrl: 0 [ 932.193872][ T9] [ 932.198315][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 932.200123][ T5832] usb 9-1: USB disconnect, device number 11 [ 932.200690][ C1] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 932.203115][ T9] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 932.207640][ T5898] usb usb50-port1: attempt power cycle [ 932.232559][ T5832] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 932.261371][ T9878] usb 10-1: USB disconnect, device number 9 [ 932.321288][ T9878] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 932.339899][T15424] usb usb48-port1: unable to enumerate USB device [ 932.797649][ T5898] usb usb50-port1: unable to enumerate USB device [ 933.010525][ T6734] usbhid 12-1:0.0: can't add hid device: -71 [ 933.012508][ T6734] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 933.023076][ T6734] usb 12-1: USB disconnect, device number 7 [ 933.111847][T18117] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 933.113692][T18117] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 933.116366][T18117] vhci_hcd vhci_hcd.0: Device attached [ 933.418984][T18134] comedi comedi3: comedi_config --init_data is deprecated [ 933.448329][T18135] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2585'. [ 933.609010][T18118] vhci_hcd: connection closed [ 933.609520][ T13] vhci_hcd vhci_hcd.4: stop threads [ 933.614532][ T13] vhci_hcd vhci_hcd.4: release socket [ 933.616367][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 933.677344][ T9892] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 933.856926][ T9892] usb 11-1: Using ep0 maxpacket: 32 [ 933.863937][ T9892] usb 11-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 933.870670][ T9892] usb 11-1: config 0 interface 0 has no altsetting 0 [ 933.873772][ T9892] usb 11-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 933.876941][ T9892] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.896877][ T9892] usb 11-1: config 0 descriptor?? [ 934.085743][T18143] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.2589'. [ 934.096212][T18143] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.2589'. [ 934.105227][T18134] xt_hashlimit: max too large, truncated to 1048576 [ 934.307275][T18148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2592'. [ 934.699756][T18168] netlink: 204 bytes leftover after parsing attributes in process `syz.5.2597'. [ 935.576925][ T9877] usb 46-1: device descriptor read/8, error -110 [ 935.967851][ T9877] usb usb46-port1: attempt power cycle [ 936.534551][ T9892] usbhid 11-1:0.0: can't add hid device: -71 [ 936.550868][ T9877] usb usb46-port1: unable to enumerate USB device [ 936.551680][ T9892] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 936.572234][ T9892] usb 11-1: USB disconnect, device number 10 [ 937.564805][T18244] Cache volume key already in use (9p,syz,) [ 937.915790][T18248] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 937.918370][T18248] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 937.926171][T18248] vhci_hcd vhci_hcd.0: Device attached [ 938.197796][ T6734] usb 48-1: SetAddress Request (42) to port 0 [ 938.201203][ T6734] usb 48-1: new SuperSpeed USB device number 42 using vhci_hcd [ 938.312824][T18257] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 938.314938][T18257] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 938.319143][T18257] vhci_hcd vhci_hcd.0: Device attached [ 938.326915][ T5832] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 938.499486][ T5832] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 938.503896][ T5832] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 938.507820][ T5832] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 938.510789][ T5832] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 938.514883][T18249] vhci_hcd: connection reset by peer [ 938.517599][ T5832] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 938.520306][T15400] vhci_hcd vhci_hcd.5: stop threads [ 938.520584][ T5832] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 938.523147][T15400] vhci_hcd vhci_hcd.5: release socket [ 938.525271][ T5832] usb 11-1: Product: syz [ 938.525281][ T5832] usb 11-1: Manufacturer: syz [ 938.531837][T15400] vhci_hcd vhci_hcd.5: disconnect device [ 938.532367][ T5832] cdc_wdm 11-1:1.0: skipping garbage [ 938.539139][ T5832] cdc_wdm 11-1:1.0: skipping garbage [ 938.546435][ T5832] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 938.548657][ T5832] cdc_wdm 11-1:1.0: Unknown control protocol [ 938.587006][ T5898] usb 46-1: SetAddress Request (50) to port 0 [ 938.590761][ T5898] usb 46-1: new SuperSpeed USB device number 50 using vhci_hcd [ 938.744058][ T5831] usb 11-1: USB disconnect, device number 11 [ 938.942660][T18258] vhci_hcd: connection reset by peer [ 938.945754][ T13] vhci_hcd vhci_hcd.4: stop threads [ 938.949144][ T13] vhci_hcd vhci_hcd.4: release socket [ 938.951846][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 939.466061][T18273] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2632'. [ 939.864794][T18287] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 939.866888][T18287] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 939.871222][T18287] vhci_hcd vhci_hcd.0: Device attached [ 940.282819][T18293] vivid-000: ================= START STATUS ================= [ 940.285547][T18293] vivid-000: Test Pattern: 75% Colorbar [ 940.290053][T18293] vivid-000: Fill Percentage of Frame: 100 [ 940.295476][T18293] vivid-000: Horizontal Movement: No Movement [ 940.298495][T18293] vivid-000: Vertical Movement: Move Up [ 940.302259][T18293] vivid-000: OSD Text Mode: All [ 940.304113][T18293] vivid-000: Show Border: false [ 940.306042][T18293] vivid-000: Show Square: false [ 940.311711][T18288] vhci_hcd: connection closed [ 940.312085][T15400] vhci_hcd vhci_hcd.5: stop threads [ 940.320906][T15400] vhci_hcd vhci_hcd.5: release socket [ 940.323292][T15400] vhci_hcd vhci_hcd.5: disconnect device [ 940.327615][T18293] vivid-000: Sensor Flipped Horizontally: true [ 940.347120][T18293] vivid-000: Sensor Flipped Vertically: true [ 940.373359][T18293] vivid-000: Insert SAV Code in Image: false [ 940.404462][T18293] vivid-000: Insert EAV Code in Image: false [ 940.421943][T18293] vivid-000: Insert Video Guard Band: false [ 940.427234][T18293] vivid-000: Reduced Framerate: false [ 940.431431][T18293] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 940.441590][T18293] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 940.446959][T18293] vivid-000: Enable Capture Cropping: true grabbed [ 940.456660][T18293] vivid-000: Enable Capture Composing: true grabbed [ 940.460516][T18293] vivid-000: Enable Capture Scaler: true grabbed [ 940.465720][T18293] vivid-000: Timestamp Source: End of Frame [ 940.470678][T18293] vivid-000: Colorspace: Rec. 709 [ 940.472777][T18293] vivid-000: Transfer Function: Default [ 940.480544][T18293] vivid-000: Y'CbCr Encoding: Default [ 940.485194][T18293] vivid-000: HSV Encoding: Hue 0-179 [ 940.490022][T18293] vivid-000: Quantization: Default [ 940.492047][T18293] vivid-000: Apply Alpha To Red Only: false [ 940.504864][T18293] vivid-000: Standard Aspect Ratio: 16x9 Anamorphic [ 940.507242][T18293] vivid-000: DV Timings Signal Mode: Current DV Timings [ 940.509603][T18293] vivid-000: DV Timings: 640x480p59 inactive [ 940.514107][T18293] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 940.520602][T18293] vivid-000: Maximum EDID Blocks: 2 [ 940.522310][T18293] vivid-000: Limited RGB Range (16-235): true [ 940.529111][T18293] vivid-000: Rx RGB Quantization Range: RGB Full Range (0-255) [ 940.533809][T18293] vivid-000: Power Present: 0x00000001 [ 940.535584][T18293] tpg source WxH: 1280x720 (R'G'B) [ 940.541749][T18293] tpg field: 1 [ 940.542858][T18293] tpg crop: (0,0)/64x64 [ 940.548269][T18293] tpg compose: (0,0)/16x16 [ 940.549855][T18293] tpg colorspace: 3 [ 940.553405][T18293] tpg transfer function: 0/1 [ 940.554922][T18293] tpg quantization: 0/1 [ 940.564879][T18293] tpg RGB range: 2/1 [ 940.566157][T18293] vivid-000: ================== END STATUS ================== [ 940.615267][T18296] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2637'. [ 940.672509][T18298] comedi comedi3: comedi_config --init_data is deprecated [ 940.917481][ T6400] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 941.086977][ T6400] usb 9-1: Using ep0 maxpacket: 32 [ 941.090934][ T6400] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 941.095453][ T6400] usb 9-1: config 0 interface 0 has no altsetting 0 [ 941.099240][ T6400] usb 9-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 941.102640][ T6400] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.108515][ T6400] usb 9-1: config 0 descriptor?? [ 941.366924][T18313] 9pnet_virtio: no channels available for device syz [ 941.403785][T18298] xt_hashlimit: max too large, truncated to 1048576 [ 941.778827][T18315] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2643'. [ 941.791750][T18315] 9pnet_virtio: no channels available for device syz [ 942.784720][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 942.784732][ T42] audit: type=1800 audit(2000000010.599:519): pid=18336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2650" name="bDeviceClass" dev="configfs" ino=64858 res=0 errno=0 [ 942.985403][T18346] 9pnet_virtio: no channels available for device syz [ 943.294926][ T6734] usb 48-1: device descriptor read/8, error -110 [ 943.656895][ T5898] usb 46-1: device descriptor read/8, error -110 [ 943.784268][ T6400] usbhid 9-1:0.0: can't add hid device: -71 [ 943.787349][ T6400] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 943.796091][T18350] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 943.798722][T18350] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 943.806406][ T6400] usb 9-1: USB disconnect, device number 12 [ 943.816837][T18350] vhci_hcd vhci_hcd.0: Device attached [ 943.976898][ T6734] usb 48-1: SetAddress Request (43) to port 0 [ 943.979699][ T6734] usb 48-1: new SuperSpeed USB device number 43 using vhci_hcd [ 944.051509][ T5898] usb usb46-port1: attempt power cycle [ 944.149076][T18351] vhci_hcd: connection reset by peer [ 944.151063][ T13] vhci_hcd vhci_hcd.5: stop threads [ 944.152695][ T13] vhci_hcd vhci_hcd.5: release socket [ 944.156416][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 944.168583][T18367] comedi comedi3: comedi_config --init_data is deprecated [ 944.427298][ T5832] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 944.577041][ T5832] usb 9-1: Using ep0 maxpacket: 32 [ 944.581008][ T5832] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 944.585778][ T5832] usb 9-1: config 0 interface 0 has no altsetting 0 [ 944.588698][ T5832] usb 9-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 944.592583][ T5832] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.604364][ T5832] usb 9-1: config 0 descriptor?? [ 944.647711][ T5898] usb usb46-port1: unable to enumerate USB device [ 944.820430][T18367] xt_hashlimit: max too large, truncated to 1048576 [ 945.100123][T18384] comedi comedi3: comedi_config --init_data is deprecated [ 945.356805][ T9877] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 945.511196][T18393] 9pnet_virtio: no channels available for device syz [ 945.708190][ T9877] usb 12-1: Using ep0 maxpacket: 32 [ 946.302771][ T9877] usb 12-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 946.306637][ T9877] usb 12-1: config 0 interface 0 has no altsetting 0 [ 946.309030][ T9877] usb 12-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 946.311985][ T9877] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.316496][ T9877] usb 12-1: config 0 descriptor?? [ 946.528391][T18384] xt_hashlimit: max too large, truncated to 1048576 [ 946.560618][T18401] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 946.563343][T18401] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 946.567583][T18401] vhci_hcd vhci_hcd.0: Device attached [ 946.912483][T18409] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 946.914576][T18409] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 946.917491][ T5898] usb 50-1: SetAddress Request (38) to port 0 [ 946.919570][ T5898] usb 50-1: new SuperSpeed USB device number 38 using vhci_hcd [ 946.930870][T18409] vhci_hcd vhci_hcd.0: Device attached [ 947.105346][T18402] vhci_hcd: connection reset by peer [ 947.110442][T15040] vhci_hcd vhci_hcd.6: stop threads [ 947.112130][T15040] vhci_hcd vhci_hcd.6: release socket [ 947.114944][T15040] vhci_hcd vhci_hcd.6: disconnect device [ 947.163037][ T5832] usbhid 9-1:0.0: can't add hid device: -71 [ 947.166885][ T5832] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 947.176895][ T5832] usb 9-1: USB disconnect, device number 13 [ 947.518884][T18410] vhci_hcd: connection closed [ 947.519195][T15040] vhci_hcd vhci_hcd.5: stop threads [ 947.523380][T15040] vhci_hcd vhci_hcd.5: release socket [ 947.525753][T15040] vhci_hcd vhci_hcd.5: disconnect device [ 947.527929][ T5832] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 947.696933][ T5832] usb 9-1: Using ep0 maxpacket: 16 [ 947.706800][ T5832] usb 9-1: config index 0 descriptor too short (expected 65, got 36) [ 947.709416][ T5832] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 947.713115][ T5832] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 947.716883][ T5832] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 947.722747][ T5832] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 947.727087][ T5832] usb 9-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 947.730001][ T5832] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.734401][ T5832] usb 9-1: config 0 descriptor?? [ 947.738966][T18414] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 947.748001][ T5832] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input35 [ 947.957447][ T5832] usb 9-1: USB disconnect, device number 14 [ 948.026962][ T3938] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 948.122100][ T9877] usbhid 12-1:0.0: can't add hid device: -71 [ 948.126991][ T9877] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 948.138435][ T9877] usb 12-1: USB disconnect, device number 8 [ 948.196521][T18422] [ 948.197574][T18422] ====================================================== [ 948.199869][T18422] WARNING: possible circular locking dependency detected [ 948.202162][T18422] syzkaller #0 Tainted: G L [ 948.204139][T18422] ------------------------------------------------------ [ 948.206325][T18422] syz.7.2674/18422 is trying to acquire lock: [ 948.208227][T18422] ffff8880215ccd40 ((wq_completion)md_misc){+.+.}-{0:0}, at: touch_wq_lockdep_map+0x9c/0x1c0 [ 948.211513][T18422] [ 948.211513][T18422] but task is already holding lock: [ 948.213903][T18422] ffffffff8f793d20 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x28/0x1e0 [ 948.216779][T18422] [ 948.216779][T18422] which lock already depends on the new lock. [ 948.216779][T18422] [ 948.220071][T18422] [ 948.220071][T18422] the existing dependency chain (in reverse order) is: [ 948.222918][T18422] [ 948.222918][T18422] -> #3 (major_names_lock){+.+.}-{4:4}: [ 948.225382][T18422] lock_acquire+0x1b9/0x370 [ 948.227086][T18422] __mutex_lock+0x1a4/0x1bd0 [ 948.228770][T18422] blk_probe_dev+0x28/0x1e0 [ 948.230431][T18422] blk_request_module+0x16/0xc0 [ 948.232096][T18422] blkdev_get_no_open+0x9b/0xf0 [ 948.233787][T18422] bdev_file_open_by_dev+0x70/0x210 [ 948.235649][T18422] md_import_device+0x120/0x360 [ 948.237467][T18422] md_add_new_disk+0x4b6/0x1820 [ 948.239178][T18422] md_ioctl+0x2b28/0x36b0 [ 948.241122][T18422] compat_blkdev_ioctl+0x682/0x7b0 [ 948.243315][T18422] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 948.245752][T18422] __do_fast_syscall_32+0xe7/0x970 [ 948.248135][T18422] do_fast_syscall_32+0x32/0x70 [ 948.250314][T18422] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 948.253090][T18422] [ 948.253090][T18422] -> #2 (&mddev->reconfig_mutex){+.+.}-{4:4}: [ 948.256441][T18422] lock_acquire+0x1b9/0x370 [ 948.258542][T18422] __mutex_lock+0x1a4/0x1bd0 [ 948.260676][T18422] md_start_sync+0x79/0xbe0 [ 948.262774][T18422] process_one_work+0xa23/0x1940 [ 948.265008][T18422] worker_thread+0x5ef/0xe50 [ 948.267118][T18422] kthread+0x370/0x450 [ 948.269048][T18422] ret_from_fork+0x72b/0xd50 [ 948.271152][T18422] ret_from_fork_asm+0x1a/0x30 [ 948.273292][T18422] [ 948.273292][T18422] -> #1 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}: [ 948.277003][T18422] lock_acquire+0x1b9/0x370 [ 948.279016][T18422] process_one_work+0x98e/0x1940 [ 948.281276][T18422] worker_thread+0x5ef/0xe50 [ 948.283378][T18422] kthread+0x370/0x450 [ 948.285337][T18422] ret_from_fork+0x72b/0xd50 [ 948.287473][T18422] ret_from_fork_asm+0x1a/0x30 [ 948.289573][T18422] [ 948.289573][T18422] -> #0 ((wq_completion)md_misc){+.+.}-{0:0}: [ 948.292595][T18422] check_prev_add+0xeb/0xe60 [ 948.294531][T18422] __lock_acquire+0x136c/0x1a40 [ 948.296521][T18422] lock_acquire+0x1b9/0x370 [ 948.298411][T18422] touch_wq_lockdep_map+0xad/0x1c0 [ 948.300295][T18422] __flush_workqueue+0x131/0x1200 [ 948.302048][T18422] md_alloc+0x30/0x10a0 [ 948.303531][T18422] md_probe+0x73/0xf0 [ 948.305035][T18422] blk_probe_dev+0x149/0x1e0 [ 948.306929][T18422] blk_request_module+0x16/0xc0 [ 948.308809][T18422] blkdev_get_no_open+0x9b/0xf0 [ 948.310486][T18422] bdev_file_open_by_dev+0x70/0x210 [ 948.312169][T18422] swsusp_check+0x72/0x470 [ 948.313673][T18422] software_resume+0x6f/0x330 [ 948.315195][T18422] resume_store+0x248/0x460 [ 948.316647][T18422] kobj_attr_store+0x58/0x80 [ 948.318279][T18422] sysfs_kf_write+0xf2/0x150 [ 948.319935][T18422] kernfs_fop_write_iter+0x3e0/0x5f0 [ 948.321763][T18422] vfs_write+0x6ac/0x1050 [ 948.323286][T18422] ksys_write+0x12a/0x250 [ 948.324845][T18422] __do_fast_syscall_32+0xe7/0x970 [ 948.326579][T18422] do_fast_syscall_32+0x32/0x70 [ 948.328246][T18422] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 948.330370][T18422] [ 948.330370][T18422] other info that might help us debug this: [ 948.330370][T18422] [ 948.333515][T18422] Chain exists of: [ 948.333515][T18422] (wq_completion)md_misc --> &mddev->reconfig_mutex --> major_names_lock [ 948.333515][T18422] [ 948.337882][T18422] Possible unsafe locking scenario: [ 948.337882][T18422] [ 948.340172][T18422] CPU0 CPU1 [ 948.341861][T18422] ---- ---- [ 948.343520][T18422] lock(major_names_lock); [ 948.344954][T18422] lock(&mddev->reconfig_mutex); [ 948.347270][T18422] lock(major_names_lock); [ 948.349425][T18422] lock((wq_completion)md_misc); [ 948.350991][T18422] [ 948.350991][T18422] *** DEADLOCK *** [ 948.350991][T18422] [ 948.353474][T18422] 6 locks held by syz.7.2674/18422: [ 948.355121][T18422] #0: ffff88802490e470 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 948.357903][T18422] #1: ffff88804beb6450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 948.360673][T18422] #2: ffff888025326880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 948.363661][T18422] #3: ffff88801cf8b5a8 (kn->active#78){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 948.366755][T18422] #4: ffffffff8ea9fa80 (system_transition_mutex){+.+.}-{4:4}, at: software_resume+0x65/0x330 [ 948.369928][T18422] #5: ffffffff8f793d20 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x28/0x1e0 [ 948.372830][T18422] [ 948.372830][T18422] stack backtrace: [ 948.374665][T18422] CPU: 3 UID: 60929 PID: 18422 Comm: syz.7.2674 Tainted: G L syzkaller #0 PREEMPT(full) [ 948.374682][T18422] Tainted: [L]=SOFTLOCKUP [ 948.374687][T18422] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 948.374695][T18422] Call Trace: [ 948.374701][T18422] [ 948.374708][T18422] dump_stack_lvl+0x100/0x190 [ 948.374723][T18422] print_circular_bug.cold+0x178/0x1c7 [ 948.374743][T18422] check_noncircular+0x146/0x160 [ 948.374764][T18422] check_prev_add+0xeb/0xe60 [ 948.374783][T18422] __lock_acquire+0x136c/0x1a40 [ 948.374802][T18422] lock_acquire+0x1b9/0x370 [ 948.374817][T18422] ? touch_wq_lockdep_map+0x9c/0x1c0 [ 948.374832][T18422] ? lockdep_init_map_type+0x5c/0x250 [ 948.374842][T18422] ? touch_wq_lockdep_map+0x9c/0x1c0 [ 948.374855][T18422] touch_wq_lockdep_map+0xad/0x1c0 [ 948.374868][T18422] ? touch_wq_lockdep_map+0x9c/0x1c0 [ 948.374881][T18422] __flush_workqueue+0x131/0x1200 [ 948.374897][T18422] ? rcu_is_watching+0x12/0xc0 [ 948.374924][T18422] ? trace_contention_end+0x126/0x160 [ 948.374937][T18422] ? __mutex_lock+0x26d/0x1bd0 [ 948.374954][T18422] ? __pfx___flush_workqueue+0x10/0x10 [ 948.374974][T18422] ? find_inode_fast+0x1fa/0xa30 [ 948.374993][T18422] md_alloc+0x30/0x10a0 [ 948.375009][T18422] md_probe+0x73/0xf0 [ 948.375023][T18422] ? __pfx_md_probe+0x10/0x10 [ 948.375037][T18422] blk_probe_dev+0x149/0x1e0 [ 948.375049][T18422] blk_request_module+0x16/0xc0 [ 948.375062][T18422] blkdev_get_no_open+0x9b/0xf0 [ 948.375082][T18422] bdev_file_open_by_dev+0x70/0x210 [ 948.375100][T18422] swsusp_check+0x72/0x470 [ 948.375115][T18422] software_resume+0x6f/0x330 [ 948.375127][T18422] resume_store+0x248/0x460 [ 948.375139][T18422] ? __pfx_resume_store+0x10/0x10 [ 948.375152][T18422] ? find_held_lock+0x2b/0x80 [ 948.375165][T18422] ? sysfs_file_kobj+0xe4/0x290 [ 948.375179][T18422] ? sysfs_file_kobj+0xe4/0x290 [ 948.375193][T18422] ? __pfx_resume_store+0x10/0x10 [ 948.375205][T18422] kobj_attr_store+0x58/0x80 [ 948.375221][T18422] ? __pfx_kobj_attr_store+0x10/0x10 [ 948.375236][T18422] sysfs_kf_write+0xf2/0x150 [ 948.375251][T18422] kernfs_fop_write_iter+0x3e0/0x5f0 [ 948.375263][T18422] ? __pfx_sysfs_kf_write+0x10/0x10 [ 948.375278][T18422] vfs_write+0x6ac/0x1050 [ 948.375288][T18422] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 948.375301][T18422] ? __pfx_vfs_write+0x10/0x10 [ 948.375310][T18422] ? find_held_lock+0x2b/0x80 [ 948.375327][T18422] ksys_write+0x12a/0x250 [ 948.375336][T18422] ? __pfx_ksys_write+0x10/0x10 [ 948.375348][T18422] __do_fast_syscall_32+0xe7/0x970 [ 948.375363][T18422] do_fast_syscall_32+0x32/0x70 [ 948.375378][T18422] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 948.375398][T18422] RIP: 0023:0xf7fc5fec [ 948.375417][T18422] Code: Unable to access opcode bytes at 0xf7fc5fc2. [ 948.375431][T18422] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 948.375444][T18422] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 948.375454][T18422] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 948.375462][T18422] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 948.375469][T18422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 948.375477][T18422] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 948.375489][T18422] [ 948.475432][ T3938] usb 11-1: Using ep0 maxpacket: 32 [ 948.483511][ T3938] usb 11-1: unable to get BOS descriptor or descriptor too short [ 948.486522][T18422] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 948.490413][T18422] PM: Image not found (code -6) [ 948.505981][ T3938] usb 11-1: string descriptor 0 read error: -22 [ 948.508090][ T3938] usb 11-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 948.510959][ T3938] usb 11-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 948.515538][ T3938] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 948.518156][ T3938] dw2102: su3000_power_ctrl: 1, initialized 0 [ 948.520069][ T3938] dvb-usb: bulk message failed: -22 (2/0) [ 948.522557][ T3938] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 948.525724][ T3938] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 948.528561][ T3938] usb 11-1: media controller created [ 948.530220][ T3938] dvb-usb: bulk message failed: -22 (6/0) [ 948.532030][ T3938] dw2102: i2c transfer failed. [ 948.533547][ T3938] dvb-usb: bulk message failed: -22 (6/0) [ 948.535351][ T3938] dw2102: i2c transfer failed. [ 948.536976][ T3938] dvb-usb: bulk message failed: -22 (6/0) [ 948.538757][ T3938] dw2102: i2c transfer failed. [ 948.540258][ T3938] dvb-usb: bulk message failed: -22 (6/0) [ 948.542024][ T3938] dw2102: i2c transfer failed. [ 948.543494][ T3938] dvb-usb: bulk message failed: -22 (6/0) [ 948.545321][ T3938] dw2102: i2c transfer failed. [ 948.546882][ T3938] dvb-usb: bulk message failed: -22 (6/0) [ 948.548636][ T3938] dw2102: i2c transfer failed. [ 948.550152][ T3938] dvb-usb: MAC address: 02:02:02:02:02:02 [ 948.554803][ T3938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 948.562127][ T3938] dvb-usb: bulk message failed: -22 (3/0) [ 948.563936][ T3938] dw2102: command 0x0e transfer failed. [ 948.565693][ T3938] dvb-usb: bulk message failed: -22 (3/0) [ 948.567447][ T3938] dw2102: command 0x0e transfer failed. [ 948.876987][ T3938] dvb-usb: bulk message failed: -22 (3/0) [ 948.878959][ T3938] dw2102: command 0x0e transfer failed. [ 948.880776][ T3938] dvb-usb: bulk message failed: -22 (3/0) [ 948.882568][ T3938] dw2102: command 0x0e transfer failed. [ 948.884285][ T3938] dvb-usb: bulk message failed: -22 (1/0) [ 948.886110][ T3938] dw2102: command 0x51 transfer failed. [ 948.888154][T18416] dw2102: i2c wr: len=70 is too big! [ 948.888154][T18416] [ 948.911615][ T3938] DVB: Unable to find symbol ds3000_attach() [ 948.914067][ T3938] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 948.956844][ T3938] rc_core: IR keymap rc-su3000 not found [ 948.959118][ T3938] Registered IR keymap rc-empty [ 948.962076][ T3938] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0 [ 948.972006][ T3938] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0/input36 [ 948.977779][ T3938] dvb-usb: schedule remote query interval to 150 msecs. [ 948.980049][ T3938] dw2102: su3000_power_ctrl: 0, initialized 1 [ 948.982105][ T3938] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 948.986601][ T3938] usb 11-1: USB disconnect, device number 12 [ 948.997082][ T3938] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 949.027378][ T6734] usb 48-1: device descriptor read/8, error -110 [ 949.137060][ T6734] usb usb48-port1: attempt power cycle [ 949.728250][ T6734] usb usb48-port1: unable to enumerate USB device [ 951.986967][ T5898] usb 50-1: device descriptor read/8, error -110 [ 952.378597][ T5898] usb usb50-port1: attempt power cycle [ 952.937872][ T5898] usb usb50-port1: unable to enumerate USB device