last executing test programs: 15m41.901184461s ago: executing program 2 (id=763): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{0x0}], 0x1, 0x1bf, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) socket$xdp(0x2c, 0x3, 0x0) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', 0x0, 0x1008840, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffd, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) 15m38.372600535s ago: executing program 2 (id=773): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x34b8, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x4d2c11947fe9151f, {0x0, r6}}) syz_ublk_setup_queues(r0, 0x0, &(0x7f0000019080)={0x0, 0x597f, 0x1, 0x2, 0x10d, 0x0, r0}, &(0x7f0000019180)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2067, 0x8000, 0x3, 0x17, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xce5e, 0x10, 0x2, 0x2c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xecae, 0x200, 0x3, 0x11a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88d9, 0x800, 0x0, 0x3bd, 0x0, r0}}], 0x4, &(0x7f000001a400)={0x2e, 0x20, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x44}, 0x0, r6, '\x00', {0x4, 0x32d, 0x0, &(0x7f0000019400)=@buf_max_buf="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"}}, &(0x7f000001a480)) r7 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x1c) 15m36.708112318s ago: executing program 2 (id=776): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x100, 0x42004}, [@IFLA_MTU={0x8, 0x4, 0xffcd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884) r1 = socket(0x9, 0x3, 0x8) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC(r4, 0x4068aea3, &(0x7f0000000280)) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9) syz_open_dev$vim2m(0x0, 0x800, 0x2) r5 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}}) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r6, &(0x7f0000000940)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40400d4) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000a00)) getsockopt(r1, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) 15m34.877836574s ago: executing program 2 (id=782): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) mount$9p_virtio(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0), 0x8017, 0x0) lstat(&(0x7f0000000000)='./file0/file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, 0x0) write(r1, 0x0, 0x0) write$binfmt_register(r1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYRES8=0x0], 0x0, 0xb1fe, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x25, r1}, 0x94) socket$inet(0x2, 0xa, 0x400) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prlimit64(r4, 0xd, 0x0, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) fstat(r0, 0x0) 15m34.671094328s ago: executing program 2 (id=784): r0 = socket$inet6(0xa, 0x800, 0x2000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bind$rxrpc(r2, &(0x7f0000000080)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, 0xd69}}, 0x24) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f0000000140), &(0x7f0000000180)=0x8) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) keyctl$clear(0x11, 0xfffffffffffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x20c001, 0x0) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendfile(r5, r5, 0x0, 0x1002000ff) 15m34.329446386s ago: executing program 2 (id=785): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000b00)=ANY=[@ANYBLOB="1201000000000008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000012c0)=ANY=[@ANYBLOB="400305"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x41) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x42583) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r6}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 15m34.083689022s ago: executing program 32 (id=785): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000b00)=ANY=[@ANYBLOB="1201000000000008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000012c0)=ANY=[@ANYBLOB="400305"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x41) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x42583) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r6}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 13m40.085975142s ago: executing program 0 (id=1047): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r1, &(0x7f0000000080)="df0cb0909452d22c4af97c08d179025cf6bbddb1631518dd057c00a7ddaa87c393172d", &(0x7f00000001c0)=""/89, 0x4}, 0x1c) write$uinput_user_dev(r2, &(0x7f0000000a80)={'syz1\x00', {0x5, 0x1, 0x0, 0x1000}, 0x0, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x4001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x200, 0x0, 0x0, 0x0, 0x6, 0xd127, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x816, 0x8, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x5, 0x0, 0x2000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1001f, 0x0, 0x4, 0x0, 0x4, 0x0, 0x42ac, 0x10, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xe43, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4], [0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x200000, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x4418, 0x8, 0x0, 0x7c45, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x81, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x526d, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x956, 0x0, 0x1]}, 0x45c) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f0000005840)="00000001", 0x0) getpeername$netlink(r0, &(0x7f0000000780), &(0x7f00000007c0)=0xc) add_key$user(&(0x7f00000000c0), &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000003c0)="1b4deec58ff8d755a0df235449fbd2cda72c863b54ba1d1b202fd774bf67b8501a94836ed0c280ba9c3ed2a3b84b4a160b5c52f1ee1c9f3d88be20ff714a6c2226e9f4ca88c594fd520c858acb16fc47b7f716cbbb6bcbddf1af801355ed67b09e8d52ac428cc3e6305a6265658c1fd9a724c70d06babc3100b14e97b687afc50a4bdad13d95f420be269c827242a1a2c0936d702543638d02986d53aa42effdacc4e4fa17dd7a048d44fc7d", 0xac, 0x0) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x8) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r3 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000180)=0xd0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x2) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000000)=0xf22) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0x3) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, "ed906b", 0x8, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r2, 0x5501) bind$tipc(r0, &(0x7f0000000800)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x1, 0x1}}, 0x10) 13m38.215819545s ago: executing program 0 (id=1050): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r3) write(r4, &(0x7f00000000c0)='1\x00', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f00000001c0)='1\x00', 0x1) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x90) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 13m34.484352124s ago: executing program 0 (id=1055): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./debug/ieee80211/phy0/netdev:wlan0/active_links\x00', 0x434083, 0x0) write$FUSE_CREATE_OPEN(r1, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) unshare(0x2c060000) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x80400, 0x0) r2 = openat$comedi(0xffffff9c, &(0x7f0000000280)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000640)={'das16m1\x00', [0xc, 0x4, 0x18c, 0x2, 0x7a23fb2a, 0x9, 0x4, 0x2, 0xd6, 0xffc, 0x101, 0x8, 0x1, 0x2, 0xb, 0x0, 0xc724, 0x5, 0x8, 0x9, 0x80, 0x0, 0x200, 0x4acb, 0x40, 0x3885ed69, 0x286, 0x7, 0x2, 0x3, 0x1ff]}) socket$netlink(0x10, 0x3, 0x0) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x9) r3 = userfaultfd(0x801) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='sys\x00', &(0x7f00000007e0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0) write(r4, &(0x7f0000000880)='3', 0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) pread64(r2, &(0x7f00000008c0)=""/127, 0x7f, 0x5) 13m33.351971355s ago: executing program 0 (id=1057): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x18, &(0x7f0000000680)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffe}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x87000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)="dd9e41", 0x3}], 0x1, &(0x7f00000003c0), 0x0, 0x20000041}}], 0x1, 0xc004) recvmmsg(r4, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 13m30.52202395s ago: executing program 0 (id=1059): r0 = socket(0x10, 0x803, 0x0) r1 = syz_io_uring_setup(0x141c, &(0x7f0000000200)={0x0, 0x2af2, 0x1, 0x1, 0x139}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x10000) io_uring_enter(r1, 0x4119, 0x869e, 0xc, 0x0, 0x0) io_uring_enter(r1, 0x7f9d, 0xf427, 0x8, 0x0, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000340)={0x2e, 0x52, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x2, 0xda4, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0xde}}}, 0x0) syz_io_uring_complete(r2, r3) io_uring_enter(r1, 0x20, 0x20, 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$packet(0x11, 0x3, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r5, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r8, 0x84, 0x23, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000580)=""/4096, 0x1000, 0x10000, &(0x7f0000001580)={0xa, 0x0, 0x0, @remote}, 0x20) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newlink={0x68, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r5, 0x42024, 0x8d85}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x1}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) 13m29.295868841s ago: executing program 0 (id=1062): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, 0x0) setns(0xc9, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) socket(0x8, 0x5, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0xb645, 0x9, 0x10, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x2, 0x1000, 0x0, 0x81, 0x7, 0x3}) setns(0xc9, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x70bd40, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000007}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc048aec8, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 13m13.91974757s ago: executing program 33 (id=1062): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, 0x0) setns(0xc9, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) socket(0x8, 0x5, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0xb645, 0x9, 0x10, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x2, 0x1000, 0x0, 0x81, 0x7, 0x3}) setns(0xc9, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x70bd40, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000007}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc048aec8, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 7m25.939814725s ago: executing program 1 (id=1679): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0xffff}, {0x0, 0x9, 0xff, 0x7fff0000}]}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001d00070f", @ANYRES32=r1, @ANYBLOB="00005200060005000100000008000800", @ANYRES32=r1], 0x2c}}, 0x40080) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000480)={0x0, 0x0}) prlimit64(r5, 0x7, 0x0, &(0x7f00000002c0)) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB='B\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0d022bbd7000fedbdf250100000005000600020000000500050004000000080003000600000004000400"], 0x30}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) write(r2, &(0x7f0000000200)='md0', 0x3) close(r2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r6, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a00000000040000020000000200000000000000") r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x181440, 0x0) ioctl$FIONREAD(r7, 0x541b, &(0x7f0000002300)) ioctl(r6, 0x40140921, 0x0) ioctl(r6, 0x40140921, &(0x7f0000000420)="010000000100000001000000010000000600") ioctl(r6, 0x400c0930, &(0x7f0000000500)='\x00'/12) ioctl(r6, 0x40140921, &(0x7f0000000440)="02000000010000000200") r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r8, &(0x7f0000000600)='3\n', 0x2) r9 = memfd_create(&(0x7f00000001c0)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA/h\xea\xab\xa9\x02l\"\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10\xfce\xf1z$\xcd\xf8\xe1\xff\xe6\nQ=\x99\xb7\xe7Ab\f\x80\xde\x91H\xf8+\xf3\xf8Q\xd0\xe2\xc2\x1a\xa1\xac\xc8i\xd6\xabv\x11H\xb9\xef\xe7\x81:C{\xaa\xb4\xf5\xef\x8e\xd2dc$\r!c\xdfel\xdf\xcc\nU\xecC\x19[\x82\xc0\x97\xa3c\xdfz\xea\xeer\x81c\x8b\x15o+\x03U\x04-RN\x95\\|jy\nj', 0x6) fcntl$addseals(r9, 0x409, 0xe) ftruncate(r9, 0x8000000) 7m23.929312336s ago: executing program 1 (id=1681): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x18, &(0x7f0000000680)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffe}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x87000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)="dd9e41", 0x3}], 0x1, &(0x7f00000003c0), 0x0, 0x20000041}}], 0x1, 0xc004) recvmmsg(0xffffffffffffffff, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 7m22.809344668s ago: executing program 1 (id=1684): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) r2 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') read$midi(r7, &(0x7f00000001c0)=""/70, 0xffffffd8) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 7m21.834471491s ago: executing program 1 (id=1687): r0 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4544f0fffcff30c000"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000300)=""/30, 0x82b0ad10b47e480a, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) r5 = dup(0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000180)=0x1, 0x4) write$uinput_user_dev(r5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314230c2dbd7000ffdbdf250900020073797a32000f00000800410072786500140033007767320000000000000000000000000066129cbdaaf92ea305126427a766b1c085924cd6ad57b03cfe9655f622d77d2aeea86454e08d702ca2d6392ca31ef21b722d78da5d90886bb0db32b0e33c89a5e901bb4e0379f25665d395238e6730ad37288567b268fe7f1586d588e526e7d727ec73b81279a75e879dd960e5107507609756ec582a8032a0ae41beb16ed972c66cc59029b79ace6666660cde28316ee23ff7ea64e39ae6d39b5f45f5ccf2adaffee80cc44776710ba5c2a2e806dcb0a1fd133d11902dea4f"], 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) pipe(0x0) 7m17.058099739s ago: executing program 1 (id=1698): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0xe0042, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x2, r4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000280)=0x655e, 0x4) r6 = dup2(r5, r5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x61, 0x7, 0x0, 0x8000}]}) recvmmsg(r6, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x3ff}], 0x1, 0x2000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r7, &(0x7f0000000300)='!:*', 0x3) pipe(&(0x7f0000000000)={0xffffffffffffffff}) readv(r8, &(0x7f0000000080)=[{&(0x7f0000000400)=""/124, 0x7c}], 0x1) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$kcm(0x29, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c6bc135", @ANYRES16=r3, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x22200, 0x0) 7m10.833042676s ago: executing program 1 (id=1706): sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x4000) mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x403, 0x0) syz_io_uring_setup(0xf03, &(0x7f0000000240)={0x0, 0x8097, 0x20, 0x0, 0x51}, &(0x7f0000000100), 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408d0}], 0x1, 0x20048805) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="737461636b203aae86ad47aa0d9495e6d80f7bde2d18ffb36cf152aed2d408fb58e305fc8e2f2f7d91f81b621cc4214d4a27e1614fbee0beac8f4a045070b770212d46d4a2df096b791f2a4ba218e12cb76aa24945b70a7c9dd5edeac52b5a876f73cfbe66371a72f11f3d9544d6b59b4a5541dcef5cbf11ffff37dfd147cca3e5098a207be806ea7167101f8c1b5c8fe41e170fd0c775dbc5be0b6d3ab625ab702e5b1dc15f9c4b3d09be812f340e681e0694f5badf640da3fdfc2f929b4c2beb9a592c577287b6021bfeec24146c7f95608bb60a736207a09d9f47e89c4044eadde57cdefd15f25b822d2eaf2205df0d6b71b63ee0b63cb598f26509af36983578f6f4198a0843cc1b1bd780015007ab9709cc6211e3b5c685b972b5c5e95f054a7a9fe149282f679c8466b9734e3850ec98419dd0c887715902f9e7802842085bc606f30c2654869e9e3701fd0fc69137fe165592689465eebd5cafad7c29de2adadec42a818d8ee389ca1fe33a1ef23617c89116a3a458b56612e4c36c43a9150d5331adbb0beb01a062b1f1349fc2ecea76cb7c40cdfe378185f3099b1d71414d0fda5a47f8593260cc0bd723a4cca81435f041321635f91bcb15aac48883a9617fb4e58c19b18cf3a7e1299a07f45325fcd05a7c30f47e77073dcc584f7e0516cb74c55a0a2a30dc9f3163868f7c233ad1fff87a2c3ad0fb71cc6433e9bd7c3209de0cba9552f5c7c04f24eccf206bdb745564539dd62d655a33d40a507660668c30f7720280c86c104e58d30d6cb65814e00b55ff9a33f3ed375dfb4b47d89a599f31a0d612827a8f6e2a73eb376e11160ddbc0d79e3a11d5a99fa9c98f559efeb1e0a196d6da225f8c145334989fae4eafc05bbad0dc880e923d6b2ed2890eed8255bd2f8296b8d689762aa02e1399045bc0cbec07ec937f2e6dfac960460574e2e00dc39221a4a0c31dbbfa4973e8b056afe87bdfe6bc1405d9ae867d05316247465aceddf5c95825d73a9b119dab89ac982fff04e5d140a8391bd6f1831a9b7519ba86abc94993fe918a1b640d57e276027d9ef490065235935407f7eda36490d0c96a16"], 0x564) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000050}, 0x24000890) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040991100b00000000000010902200001010080320904000002000000000705810200020007050202"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) open(&(0x7f0000000880)='./dev/gnss0\x00', 0x0, 0xfc559a7289ff8d5e) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/gnss0\x00', 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./debug\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/netdevsim/netdevsim0/ports/0/queue_reset\x00', 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x3, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x10004, 0x3, 0x80a0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f08c40f009b27000000f2e10a8e690f3271008000c90f30b80e0000000f23d80f215035800000a0c9b9490300000f60b932c00a00b9730200000f32328fe8587db660602fb92dbf0002e6e6006880000000000000000f30", 0x64}], 0x4dd17ed7c0be0334, 0x0, 0x0, 0x0) 7m10.802969854s ago: executing program 34 (id=1706): sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x4000) mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x403, 0x0) syz_io_uring_setup(0xf03, &(0x7f0000000240)={0x0, 0x8097, 0x20, 0x0, 0x51}, &(0x7f0000000100), 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408d0}], 0x1, 0x20048805) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x564) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000050}, 0x24000890) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040991100b00000000000010902200001010080320904000002000000000705810200020007050202"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) open(&(0x7f0000000880)='./dev/gnss0\x00', 0x0, 0xfc559a7289ff8d5e) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/gnss0\x00', 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./debug\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/netdevsim/netdevsim0/ports/0/queue_reset\x00', 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x3, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x10004, 0x3, 0x80a0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f08c40f009b27000000f2e10a8e690f3271008000c90f30b80e0000000f23d80f215035800000a0c9b9490300000f60b932c00a00b9730200000f32328fe8587db660602fb92dbf0002e6e6006880000000000000000f30", 0x64}], 0x4dd17ed7c0be0334, 0x0, 0x0, 0x0) 10.600833147s ago: executing program 6 (id=3681): syz_usb_connect(0x6, 0x371, &(0x7f0000000140)=ANY=[@ANYBLOB="79514180090000000000007a8000be14baf6cdd29b363ccd0467b0ac576adb5f74c60513ea95caadeefe"], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x48885) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000400)='./sys/bus/pci/rescan\x00', 0x1f7) r2 = syz_open_dev$usbfs(0x0, 0x80, 0x1b3401) read$usbfs(r2, &(0x7f0000000600)=""/234, 0xea) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) write(r3, &(0x7f00000000c0)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4d5c3af2d283279ca35f820d073a1f7a0e134b89c8a9433c78e6698004ab5f3584de90135190d323bf6d75843821518979868ae7c7734c0", 0xc8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x103000, 0x0) ioctl$KVM_GET_MSRS_sys(r5, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0x8b, 0x0, 0x8}]}) 7.381945755s ago: executing program 5 (id=3688): r0 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4544f0fffcff30c000"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000300)=""/30, 0x82b0ad10b47e480a, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) r5 = dup(0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000180)=0x1, 0x4) write$uinput_user_dev(r5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314230c2dbd7000ffdbdf250900020073797a32000f00000800410072786500140033007767320000000000000000000000000066129cbdaaf92ea305126427a766b1c085924cd6ad57b03cfe9655f622d77d2aeea86454e08d702ca2d6392ca31ef21b722d78da5d90886bb0db32b0e33c89a5e901bb4e0379f25665d395238e6730ad37288567b268fe7f1586d588e526e7d727ec73b81279a75e879dd960e5107507609756ec582a8032a0ae41beb16ed972c66cc59029b79ace6666660cde28316ee23ff7ea64e39ae6d39b5f45f5ccf2adaffee80cc44776710ba5c2a2e806dcb0a1fd133d11902dea4f"], 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) pipe(0x0) 7.169246393s ago: executing program 6 (id=3689): r0 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000300)=""/30, 0x82b0ad10b47e480a, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) r5 = dup(0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000180)=0x1, 0x4) write$uinput_user_dev(r5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314230c2dbd7000ffdbdf250900020073797a32000f00000800410072786500140033007767320000000000000000000000000066129cbdaaf92ea305126427a766b1c085924cd6ad57b03cfe9655f622d77d2aeea86454e08d702ca2d6392ca31ef21b722d78da5d90886bb0db32b0e33c89a5e901bb4e0379f25665d395238e6730ad37288567b268fe7f1586d588e526e7d727ec73b81279a75e879dd960e5107507609756ec582a8032a0ae41beb16ed972c66cc59029b79ace6666660cde28316ee23ff7ea64e39ae6d39b5f45f5ccf2adaffee80cc44776710ba5c2a2e806dcb0a1fd133d11902dea4f"], 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) pipe(0x0) 5.315537807s ago: executing program 5 (id=3694): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x18, &(0x7f0000000680)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffe}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x87000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f00000003c0), 0x0, 0x20000041}}], 0x1, 0xc004) recvmmsg(r4, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 4.85558429s ago: executing program 6 (id=3695): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000140)=[{0x7ff, 0x9, 0x2, 0x7ff}]}) r2 = io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x0, 0x10000000}) io_uring_enter(r2, 0x0, 0x200002, 0xf, &(0x7f0000000000)={[0x0, 0x4]}, 0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0xa068}}, './file0\x00'}) connect$inet(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000380)=ANY=[@ANYBLOB="d0000000", @ANYRES16=0x0, @ANYBLOB="000127fd4845929cdf2501000000d0830100c6e7a67f9cb7351d6815ffff0000000000002adcdd8ce489c95d7da9daa076117b06f52dfe0ca8e78602d36ca762df6c", @ANYRES32=r4, @ANYBLOB="b400028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400cc0a000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004006864000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400070000000800070000000000"], 0xd0}, 0x1, 0x0, 0x0, 0x4000401}, 0x48d0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x440b0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000000b0601080000000000000000020000000900020073797a310000000005000100070000002c000780060004404e21000005000700110000000c000180080001407f0000010c000280"], 0x54}, 0x1, 0x0, 0x0, 0x1000c893}, 0x4080) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r9, 0x6, 0x1a, 0x0, 0x20000000) setsockopt$inet_tcp_int(r9, 0x6, 0x5, &(0x7f00000000c0)=0x3ff, 0x4) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000023c0)="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", 0x11b}], 0x1}, 0x8000) 4.854808118s ago: executing program 4 (id=3696): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x18, &(0x7f0000000680)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffe}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x87000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0), 0x0, 0x20000041}}], 0x1, 0xc004) recvmmsg(r4, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 4.599473918s ago: executing program 5 (id=3699): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x18, &(0x7f0000000680)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffe}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x87000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)="dd9e41", 0x3}], 0x1, &(0x7f00000003c0), 0x0, 0x20000041}}], 0x1, 0xc004) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 3.896960896s ago: executing program 4 (id=3700): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000600)="98", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) sendmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="070f28", 0x3}], 0x1}}], 0x1, 0x810) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 3.40282197s ago: executing program 5 (id=3701): r0 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000300)=""/30, 0x82b0ad10b47e480a, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) r5 = dup(0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000180)=0x1, 0x4) write$uinput_user_dev(r5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314230c2dbd7000ffdbdf250900020073797a32000f00000800410072786500140033007767320000000000000000000000000066129cbdaaf92ea305126427a766b1c085924cd6ad57b03cfe9655f622d77d2aeea86454e08d702ca2d6392ca31ef21b722d78da5d90886bb0db32b0e33c89a5e901bb4e0379f25665d395238e6730ad37288567b268fe7f1586d588e526e7d727ec73b81279a75e879dd960e5107507609756ec582a8032a0ae41beb16ed972c66cc59029b79ace6666660cde28316ee23ff7ea64e39ae6d39b5f45f5ccf2adaffee80cc44776710ba5c2a2e806dcb0a1fd133d11902dea4f"], 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) pipe(0x0) 3.400673326s ago: executing program 4 (id=3702): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000840)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "038d08", 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x4, {[@mss={0x2, 0x4, 0xec22}]}}}}}}}}, 0x0) 3.399983958s ago: executing program 3 (id=3703): r0 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4544f0fffcff30c000"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000300)=""/30, 0x82b0ad10b47e480a, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) r5 = dup(0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000180)=0x1, 0x4) write$uinput_user_dev(r5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314230c2dbd7000ffdbdf250900020073797a32000f00000800410072786500140033007767320000000000000000000000000066129cbdaaf92ea305126427a766b1c085924cd6ad57b03cfe9655f622d77d2aeea86454e08d702ca2d6392ca31ef21b722d78da5d90886bb0db32b0e33c89a5e901bb4e0379f25665d395238e6730ad37288567b268fe7f1586d588e526e7d727ec73b81279a75e879dd960e5107507609756ec582a8032a0ae41beb16ed972c66cc59029b79ace6666660cde28316ee23ff7ea64e39ae6d39b5f45f5ccf2adaffee80cc44776710ba5c2a2e806dcb0a1fd133d11902dea4f"], 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) pipe(0x0) 3.281340089s ago: executing program 4 (id=3704): r0 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000300)=""/30, 0x82b0ad10b47e480a, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) r5 = dup(0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000180)=0x1, 0x4) write$uinput_user_dev(r5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314230c2dbd7000ffdbdf250900020073797a32000f00000800410072786500140033007767320000000000000000000000000066129cbdaaf92ea305126427a766b1c085924cd6ad57b03cfe9655f622d77d2aeea86454e08d702ca2d6392ca31ef21b722d78da5d90886bb0db32b0e33c89a5e901bb4e0379f25665d395238e6730ad37288567b268fe7f1586d588e526e7d727ec73b81279a75e879dd960e5107507609756ec582a8032a0ae41beb16ed972c66cc59029b79ace6666660cde28316ee23ff7ea64e39ae6d39b5f45f5ccf2adaffee80cc44776710ba5c2a2e806dcb0a1fd133d11902dea4f"], 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) pipe(0x0) 2.991810022s ago: executing program 6 (id=3705): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x18, &(0x7f0000000680)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffe}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x87000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f000000bbc0), 0x0, 0xc004) recvmmsg(r4, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 2.45106274s ago: executing program 3 (id=3706): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000140)=[{0x7ff, 0x9, 0x2, 0x7ff}]}) r3 = io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x0, 0x10000000}) io_uring_enter(r3, 0x0, 0x200002, 0xf, &(0x7f0000000000)={[0x0, 0x4]}, 0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0xa068}}, './file0\x00'}) connect$inet(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000380)=ANY=[@ANYBLOB="d0000000", @ANYRES16=0x0, @ANYBLOB="000127fd4845929cdf2501000000d0830100c6e7a67f9cb7351d6815ffff0000000000002adcdd8ce489c95d7da9daa076117b06f52dfe0ca8e78602d36ca762df6c", @ANYRES32=r5, @ANYBLOB="b400028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400cc0a000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004006864000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400070000000800070000000000"], 0xd0}, 0x1, 0x0, 0x0, 0x4000401}, 0x48d0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x440b0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000000b0601080000000000000000020000000900020073797a310000000005000100070000002c000780060004404e21000005000700110000000c000180080001407f0000010c000280"], 0x54}, 0x1, 0x0, 0x0, 0x1000c893}, 0x4080) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r10, 0x6, 0x1a, 0x0, 0x20000000) setsockopt$inet_tcp_int(r10, 0x6, 0x5, &(0x7f00000000c0)=0x3ff, 0x4) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000023c0)="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", 0x11b}], 0x1}, 0x8000) 1.611864583s ago: executing program 6 (id=3707): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000300)=0x3, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x8) socket$pptp(0x18, 0x1, 0x2) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2c, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002f00090027bd9f0000000000040000000c00180002ac0f000bac0f"], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003a00290200800000fadbdf2502"], 0x1c}, 0x1, 0x0, 0x0, 0x24000800}, 0x8000) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1) 1.536632992s ago: executing program 3 (id=3708): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x18, &(0x7f0000000680)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffe}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x87000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0), 0x0, 0x20000041}}], 0x1, 0xc004) recvmmsg(r4, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1.180120878s ago: executing program 5 (id=3709): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x18, &(0x7f0000000680)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffe}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x87000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)="dd9e41", 0x3}], 0x1, &(0x7f00000003c0), 0x0, 0x20000041}}], 0x1, 0xc004) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1.150801835s ago: executing program 6 (id=3710): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/scsi_device/0:0:0:0/device/delete\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='- - -\x00', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/scsi_host/host1/scan\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='- - -\x00', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/scsi_host/host2/scan\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='- - -\x00', 0x5) 919.196974ms ago: executing program 4 (id=3711): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x18, &(0x7f0000000680)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffe}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x87000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0), 0x0, 0x20000041}}], 0x1, 0xc004) recvmmsg(r4, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 457.044743ms ago: executing program 3 (id=3712): openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) capset(0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x143102) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='kyber', 0x5) 1.66628ms ago: executing program 3 (id=3713): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000140)=[{0x7ff, 0x9, 0x2, 0x7ff}]}) r2 = io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x0, 0x10000000}) io_uring_enter(r2, 0x0, 0x200002, 0xf, &(0x7f0000000000)={[0x0, 0x4]}, 0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0xa068}}, './file0\x00'}) connect$inet(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000380)=ANY=[@ANYBLOB="d0000000", @ANYRES16=0x0, @ANYBLOB="000127fd4845929cdf2501000000d0830100c6e7a67f9cb7351d6815ffff0000000000002adcdd8ce489c95d7da9daa076117b06f52dfe0ca8e78602d36ca762df6c", @ANYRES32=r4, @ANYBLOB="b400028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400cc0a000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004006864000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400070000000800070000000000"], 0xd0}, 0x1, 0x0, 0x0, 0x4000401}, 0x48d0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x440b0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000000b0601080000000000000000020000000900020073797a310000000005000100070000002c000780060004404e21000005000700110000000c000180080001407f0000010c000280"], 0x54}, 0x1, 0x0, 0x0, 0x1000c893}, 0x4080) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r9, 0x6, 0x1a, 0x0, 0x20000000) setsockopt$inet_tcp_int(r9, 0x6, 0x5, &(0x7f00000000c0)=0x3ff, 0x4) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000023c0)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f2c51e82825f9d9762cd3241cca51e9757f3ad1179cba8dd428d591c1f2dcc599111dc4c57418cbc99c078a3d10c19e0cd944f19212daba5dd27c2552f5dd06d4c63b11aed7135a941eb7e8176b3314508de2130b60ddfb90ef4bcc594c2c2b63531329b48f79af2343614b69b17ddfae682299aebf82f24222193faab85c84e21b2938a025984cf72bbccecb74234c6916a789aba88c052c5643ca18f01a100c0e12ed4fd2d997f8cb05bf2ede0b7e2120f9a3ddd79388df129e91aedcb1de1d87a56b12ad5f577512fd1aa307eea4a11de5b706c654abe806851a636a55a24404851834f94816797d40dbd17a", 0x11b}], 0x1}, 0x8000) 780.329µs ago: executing program 5 (id=3714): r0 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4544f0fffcff30c000"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000300)=""/30, 0x82b0ad10b47e480a, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) r5 = dup(0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000180)=0x1, 0x4) write$uinput_user_dev(r5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314230c2dbd7000ffdbdf250900020073797a32000f00000800410072786500140033007767320000000000000000000000000066129cbdaaf92ea305126427a766b1c085924cd6ad57b03cfe9655f622d77d2aeea86454e08d702ca2d6392ca31ef21b722d78da5d90886bb0db32b0e33c89a5e901bb4e0379f25665d395238e6730ad37288567b268fe7f1586d588e526e7d727ec73b81279a75e879dd960e5107507609756ec582a8032a0ae41beb16ed972c66cc59029b79ace6666660cde28316ee23ff7ea64e39ae6d39b5f45f5ccf2adaffee80cc44776710ba5c2a2e806dcb0a1fd133d11902dea4f"], 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) pipe(0x0) 358.236µs ago: executing program 4 (id=3715): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x18, &(0x7f0000000680)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffe}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x87000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f000000bbc0), 0x0, 0xc004) recvmmsg(r4, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 0s ago: executing program 3 (id=3716): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000140)=[{0x7ff, 0x9, 0x2, 0x7ff}]}) r3 = io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x0, 0x10000000}) io_uring_enter(r3, 0x0, 0x200002, 0xf, &(0x7f0000000000)={[0x0, 0x4]}, 0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0xa068}}, './file0\x00'}) connect$inet(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000380)=ANY=[@ANYBLOB="d0000000", @ANYRES16=0x0, @ANYBLOB="000127fd4845929cdf2501000000d0830100c6e7a67f9cb7351d6815ffff0000000000002adcdd8ce489c95d7da9daa076117b06f52dfe0ca8e78602d36ca762df6c", @ANYRES32=r5, @ANYBLOB="b400028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400cc0a000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004006864000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400070000000800070000000000"], 0xd0}, 0x1, 0x0, 0x0, 0x4000401}, 0x48d0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x440b0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000000b0601080000000000000000020000000900020073797a310000000005000100070000002c000780060004404e21000005000700110000000c000180080001407f0000010c000280"], 0x54}, 0x1, 0x0, 0x0, 0x1000c893}, 0x4080) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r10, 0x6, 0x1a, 0x0, 0x20000000) setsockopt$inet_tcp_int(r10, 0x6, 0x5, &(0x7f00000000c0)=0x3ff, 0x4) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000023c0)="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", 0x11b}], 0x1}, 0x8000) kernel console output (not intermixed with test programs): axPacketSize 0 [ 1067.883666][ T9] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1067.883698][ T9] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.888164][ T9] usb 11-1: config 0 descriptor?? [ 1068.302034][ T9] plantronics 0003:047F:FFFF.000D: reserved main item tag 0xd [ 1068.323415][ T9] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1068.577786][T10895] usb 11-1: USB disconnect, device number 55 [ 1068.600901][T18712] netlink: 'syz.3.3242': attribute type 10 has an invalid length. [ 1068.803853][T18715] rdma_rxe: rxe_newlink: failed to add wg2 [ 1069.351607][T18724] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 1069.351650][T18724] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1069.351806][T18724] vhci_hcd vhci_hcd.0: Device attached [ 1069.416032][T18724] rdma_rxe: rxe_newlink: failed to add wg2 [ 1069.420973][T18726] vhci_hcd: connection closed [ 1069.421315][ T5837] vhci_hcd vhci_hcd.6: stop threads [ 1069.421373][ T5837] vhci_hcd vhci_hcd.6: release socket [ 1069.421394][ T5837] vhci_hcd vhci_hcd.6: disconnect device [ 1069.438927][T15392] usb 10-1: new high-speed USB device number 81 using dummy_hcd [ 1069.589986][T15392] usb 10-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 1069.591555][T15392] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1069.591581][T15392] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1069.591615][T15392] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.804954][T15392] usb 10-1: USB disconnect, device number 81 [ 1070.299206][ T9] usb 11-1: new high-speed USB device number 56 using dummy_hcd [ 1070.469445][ T9] usb 11-1: Using ep0 maxpacket: 8 [ 1070.473688][ T9] usb 11-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1070.481720][ T9] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.489015][ T43] audit: type=1400 audit(1788484377.556:5404): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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pid=18736 comm="syz.5.3254" [ 1070.527208][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1070.527245][ T9] pvrusb2: ********** [ 1070.527271][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1070.527291][ T9] pvrusb2: Important functionality might not be entirely working. [ 1070.527331][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1070.527350][ T9] pvrusb2: ********** [ 1070.733493][ T2509] pvrusb2: Invalid write control endpoint [ 1070.759184][T18703] usb 10-1: new high-speed USB device number 82 using dummy_hcd [ 1070.824489][ T2509] pvrusb2: Invalid write control endpoint [ 1070.824541][ T2509] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1070.824584][ T2509] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1070.824602][ T2509] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1070.824620][ T2509] pvrusb2: Device being rendered inoperable [ 1070.827920][ T2509] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1070.827951][ T2509] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1070.843626][ T2509] pvrusb2: Attached sub-driver cx25840 [ 1070.843641][ T2509] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1070.843646][ T2509] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1070.940262][T18703] usb 10-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 1070.941703][T18703] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1070.941728][T18703] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1070.941762][T18703] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.960084][T18733] pvrusb2: Attempted to execute control transfer when device not ok [ 1070.998791][ T5797] usb 11-1: USB disconnect, device number 56 [ 1071.170074][T18703] usb 10-1: USB disconnect, device number 82 [ 1071.829737][T18752] netlink: 'syz.5.3258': attribute type 10 has an invalid length. [ 1072.254260][T18756] rdma_rxe: rxe_newlink: failed to add wg2 [ 1072.634948][T18764] netlink: 'syz.4.3261': attribute type 10 has an invalid length. [ 1072.880825][T18768] Console: switching to colour dummy device 80x25 [ 1073.017096][T18769] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1073.031479][T18769] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref] [ 1073.035107][T18769] pci 0000:00:01.0: BAR 2 [mem 0x80286000-0x80286fff] [ 1073.038814][T18769] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1073.045377][T18769] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1073.063420][T18769] pci 0000:00:01.0: Adding to iommu group 1 [ 1073.082473][T18769] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1073.082515][T18769] pci 0000:00:01.0: vgaarb: bridge control possible [ 1073.082533][T18769] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1073.109481][T18769] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref]: assigned [ 1073.109687][T18769] pci 0000:00:01.0: BAR 2 [mem 0x80286000-0x80286fff]: assigned [ 1073.115878][T18769] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1073.138973][T18769] [drm] Found bochs VGA, ID 0xb0c5. [ 1073.139073][T18769] [drm] Framebuffer size 16384 kB @ 0x81000000, mmio @ 0x80286000. [ 1073.178864][T18769] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1073.379356][T18769] Console: switching to colour frame buffer device 160x50 [ 1073.428353][T18769] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1074.277994][T18788] netlink: 'syz.5.3268': attribute type 10 has an invalid length. [ 1074.624989][T18794] netlink: 'syz.6.3272': attribute type 10 has an invalid length. [ 1075.372858][T18798] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1075.372897][T18798] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1075.373024][T18798] vhci_hcd vhci_hcd.0: Device attached [ 1075.478648][T18798] rdma_rxe: rxe_newlink: failed to add wg2 [ 1075.485100][ T43] audit: type=1400 audit(1788484382.546:5405): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 48-1: SetAddress Request (88) to port 0 [ 1075.649794][T10895] usb 48-1: new SuperSpeed USB device number 88 using vhci_hcd [ 1075.728654][ T42] usb 11-1: new high-speed USB device number 57 using dummy_hcd [ 1075.799223][T18799] vhci_hcd: connection reset by peer [ 1075.800763][ T5837] vhci_hcd vhci_hcd.5: stop threads [ 1075.800791][ T5837] vhci_hcd vhci_hcd.5: release socket [ 1075.800835][ T5837] vhci_hcd vhci_hcd.5: disconnect device [ 1075.889536][ T42] usb 11-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 1075.890942][ T42] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1075.890964][ T42] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1075.890996][ T42] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.112297][T18703] usb 11-1: USB disconnect, device number 57 [ 1076.426201][ T43] audit: type=1400 audit(1788484383.486:5406): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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audit: type=1400 audit(1788484383.696:5407): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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pid=18810 comm="syz.3.3277" [ 1076.668438][T15392] usb 10-1: new high-speed USB device number 83 using dummy_hcd [ 1076.784920][T18815] Console: switching to colour dummy device 80x25 [ 1076.832384][T15392] usb 10-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 1076.835201][T15392] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1076.835227][T15392] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1076.835258][T15392] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.847120][T18816] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1076.865453][T18816] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref] [ 1076.869025][T18816] pci 0000:00:01.0: BAR 2 [mem 0x80286000-0x80286fff] [ 1076.872348][T18816] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1076.876639][T18816] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1076.891338][T18816] pci 0000:00:01.0: Adding to iommu group 1 [ 1076.905689][T18816] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1076.905732][T18816] pci 0000:00:01.0: vgaarb: bridge control possible [ 1076.905748][T18816] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1076.924930][T18816] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref]: assigned [ 1076.928801][T18816] pci 0000:00:01.0: BAR 2 [mem 0x80286000-0x80286fff]: assigned [ 1076.933629][T18816] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1076.945743][T18816] [drm] Found bochs VGA, ID 0xb0c5. [ 1076.948658][T18816] [drm] Framebuffer size 16384 kB @ 0x81000000, mmio @ 0x80286000. [ 1076.960563][T18816] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1077.072812][T13915] usb 10-1: USB disconnect, device number 83 [ 1077.122084][T18816] Console: switching to colour frame buffer device 160x50 [ 1077.141117][T18816] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1077.478135][T18826] netlink: 'syz.4.3282': attribute type 10 has an invalid length. [ 1077.938913][T14776] usb 10-1: new high-speed USB device number 84 using dummy_hcd [ 1077.949791][T18832] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 1077.949839][T18832] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1077.957076][T18832] vhci_hcd vhci_hcd.0: Device attached [ 1078.089798][T14776] usb 10-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 1078.097648][T14776] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1078.097751][T14776] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1078.097800][T14776] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.278424][T18832] rdma_rxe: rxe_newlink: failed to add wg2 [ 1078.278597][ T5836] usb 50-1: SetAddress Request (62) to port 0 [ 1078.278632][ T5836] usb 50-1: new SuperSpeed USB device number 62 using vhci_hcd [ 1078.366118][ T5797] usb 10-1: USB disconnect, device number 84 [ 1078.551057][T18833] vhci_hcd: connection reset by peer [ 1078.554196][ T13] vhci_hcd vhci_hcd.6: stop threads [ 1078.556280][ T13] vhci_hcd vhci_hcd.6: release socket [ 1078.558750][ T13] vhci_hcd vhci_hcd.6: disconnect device [ 1078.914304][T18842] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3286'. [ 1079.087425][T18846] netlink: 'syz.5.3287': attribute type 10 has an invalid length. [ 1079.316718][T18852] netlink: 'syz.6.3289': attribute type 10 has an invalid length. [ 1080.124645][T18866] netlink: 'syz.5.3295': attribute type 10 has an invalid length. [ 1080.169783][T18868] netlink: 'syz.6.3296': attribute type 10 has an invalid length. [ 1080.184380][T18868] team0: Port device dummy0 added [ 1080.542080][T18872] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 1080.542129][T18872] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1080.544273][T18872] vhci_hcd vhci_hcd.0: Device attached [ 1080.592802][T18872] rdma_rxe: rxe_newlink: failed to add wg2 [ 1080.748346][T10895] usb 48-1: device descriptor read/8, error -110 [ 1081.125289][T18873] vhci_hcd: connection closed [ 1081.126585][ T5837] vhci_hcd vhci_hcd.6: stop threads [ 1081.126661][ T5837] vhci_hcd vhci_hcd.6: release socket [ 1081.126729][ T5837] vhci_hcd vhci_hcd.6: disconnect device [ 1081.139532][T10895] usb usb48-port1: attempt power cycle [ 1081.711816][T10895] usb usb48-port1: unable to enumerate USB device [ 1081.962860][ T43] audit: type=1400 audit(1788484389.016:5408): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F0 [ 1082.122007][T18888] netlink: 'syz.5.3302': attribute type 10 has an invalid length. [ 1082.198191][ T42] usb 11-1: new high-speed USB device number 58 using dummy_hcd [ 1082.359082][ T42] usb 11-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 1082.360464][ T42] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1082.360487][ T42] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1082.360518][ T42] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.446551][T18894] netlink: 'syz.4.3304': attribute type 10 has an invalid length. [ 1082.578143][ T76] usb 11-1: USB disconnect, device number 58 [ 1083.138880][T13915] usb 10-1: new high-speed USB device number 85 using dummy_hcd [ 1083.323964][ T5836] usb 50-1: device descriptor read/8, error -110 [ 1083.400023][T13915] usb 10-1: Using ep0 maxpacket: 8 [ 1083.401000][T13915] usb 10-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1083.402525][T13915] usb 10-1: config index 0 descriptor too short (expected 5924, got 36) [ 1083.402548][T13915] usb 10-1: config 250 has an invalid interface number: 228 but max is -1 [ 1083.402566][T13915] usb 10-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1083.402581][T13915] usb 10-1: config 250 has no interface number 0 [ 1083.402615][T13915] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1083.402638][T13915] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1083.402654][T13915] usb 10-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 1083.402671][T13915] usb 10-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1083.402687][T13915] usb 10-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1083.402706][T13915] usb 10-1: config 250 interface 228 has no altsetting 0 [ 1083.404806][T13915] usb 10-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1083.404829][T13915] usb 10-1: Product: syz [ 1083.404843][T13915] usb 10-1: SerialNumber: syz [ 1083.421599][T13915] hub 10-1:250.228: bad descriptor, ignoring hub [ 1083.421625][T13915] hub 10-1:250.228: probe with driver hub failed with error -5 [ 1083.448933][T18900] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 1083.448964][T18900] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1083.449073][T18900] vhci_hcd vhci_hcd.0: Device attached [ 1083.511239][T18900] rdma_rxe: rxe_newlink: failed to add wg2 [ 1083.516481][T18906] vhci_hcd: connection closed [ 1083.517627][ T5837] vhci_hcd vhci_hcd.6: stop threads [ 1083.517707][ T5837] vhci_hcd vhci_hcd.6: release socket [ 1083.517778][ T5837] vhci_hcd vhci_hcd.6: disconnect device [ 1083.659977][T13915] usblp 10-1:250.228: usblp0: USB Bidirectional printer dev 85 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1083.836972][T18925] netlink: 'syz.4.3314': attribute type 10 has an invalid length. [ 1084.321403][T18930] Console: switching to colour dummy device 80x25 [ 1084.389833][T18896] usb 10-1: reset high-speed USB device number 85 using dummy_hcd [ 1084.438980][T18933] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1084.463421][T18933] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref] [ 1084.464559][T18933] pci 0000:00:01.0: BAR 2 [mem 0x80286000-0x80286fff] [ 1084.464871][T18933] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1084.476443][T18933] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1084.476508][T18933] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 11017 usecs [ 1084.500678][T18933] pci 0000:00:01.0: Adding to iommu group 1 [ 1084.507019][T18933] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1084.507060][T18933] pci 0000:00:01.0: vgaarb: bridge control possible [ 1084.507075][T18933] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1084.529443][T18933] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref]: assigned [ 1084.536185][T18933] pci 0000:00:01.0: BAR 2 [mem 0x80286000-0x80286fff]: assigned [ 1084.540762][T18933] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1084.564783][T18933] [drm] Found bochs VGA, ID 0xb0c5. [ 1084.567338][T18933] [drm] Framebuffer size 16384 kB @ 0x81000000, mmio @ 0x80286000. [ 1084.629208][T18933] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1084.679309][T18941] netlink: 'syz.4.3322': attribute type 10 has an invalid length. [ 1084.729356][T18939] rdma_rxe: rxe_newlink: failed to add wg2 [ 1084.927654][ C2] usblp0: nonzero read bulk status received: -71 [ 1084.978692][T18933] Console: switching to colour frame buffer device 160x50 [ 1085.015286][T18933] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1085.173357][ T5836] usb 10-1: USB disconnect, device number 85 [ 1085.208934][ T5836] usblp0: removed [ 1085.654415][T18955] syzkaller1: entered promiscuous mode [ 1085.654472][T18955] syzkaller1: entered allmulticast mode [ 1085.735793][T18960] netlink: 'syz.4.3331': attribute type 10 has an invalid length. [ 1085.825552][T18963] netlink: 'syz.6.3329': attribute type 10 has an invalid length. [ 1086.075072][T18972] netlink: 'syz.5.3334': attribute type 10 has an invalid length. [ 1086.720610][T18975] netlink: 'syz.6.3335': attribute type 10 has an invalid length. [ 1086.850717][T18979] Console: switching to colour dummy device 80x25 [ 1086.896339][T18986] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1086.910089][T18986] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref] [ 1086.910273][T18986] pci 0000:00:01.0: BAR 2 [mem 0x80286000-0x80286fff] [ 1086.910742][T18986] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1086.911725][T18986] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1086.918332][T18986] pci 0000:00:01.0: Adding to iommu group 1 [ 1086.923058][T18986] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1086.923078][T18986] pci 0000:00:01.0: vgaarb: bridge control possible [ 1086.923090][T18986] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1086.932229][T18986] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref]: assigned [ 1086.933049][T18986] pci 0000:00:01.0: BAR 2 [mem 0x80286000-0x80286fff]: assigned [ 1086.934527][T18986] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1086.948241][T18986] [drm] Found bochs VGA, ID 0xb0c5. [ 1086.948350][T18986] [drm] Framebuffer size 16384 kB @ 0x81000000, mmio @ 0x80286000. [ 1086.956906][T18986] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1087.068872][T18986] Console: switching to colour frame buffer device 160x50 [ 1087.091724][T18986] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1087.526430][T18991] netlink: 'syz.6.3341': attribute type 10 has an invalid length. [ 1087.773816][T18998] netlink: 'syz.3.3343': attribute type 10 has an invalid length. [ 1087.967865][ T5836] usb 11-1: new high-speed USB device number 59 using dummy_hcd [ 1088.127966][ T5836] usb 11-1: Using ep0 maxpacket: 8 [ 1088.133529][ T5836] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1088.140687][ T5836] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 1088.140770][ T5836] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1088.140808][ T5836] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1088.140847][ T5836] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1088.140885][ T5836] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1088.140937][ T5836] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.459523][ T5836] usb 11-1: usb_control_msg returned -32 [ 1088.462670][ T5836] usbtmc 11-1:16.0: can't read capabilities [ 1088.666771][T19012] netlink: 'syz.3.3349': attribute type 10 has an invalid length. [ 1088.814121][T19014] usbtmc 11-1:16.0: INITIATE_ABORT_BULK_IN returned 2 [ 1088.908222][T13915] usb 10-1: new high-speed USB device number 86 using dummy_hcd [ 1089.017197][T15392] usb 11-1: USB disconnect, device number 59 [ 1089.059192][T13915] usb 10-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 1089.060372][T13915] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1089.060390][T13915] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1089.060416][T13915] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.282877][ T42] usb 10-1: USB disconnect, device number 86 [ 1089.977941][T19034] netlink: 'syz.4.3357': attribute type 10 has an invalid length. [ 1090.460677][ T43] audit: type=1400 audit(1788484397.527:5409): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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netlink: 'syz.5.3360': attribute type 10 has an invalid length. [ 1090.936344][ C1] vcan0: j1939_tp_rxtimer: 0xffff888014132800: rx timeout, send abort [ 1090.936745][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888014132800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 1091.234352][T19051] netlink: 'syz.6.3363': attribute type 10 has an invalid length. [ 1092.113854][T19067] netlink: 'syz.6.3369': attribute type 10 has an invalid length. [ 1092.949344][T19078] netlink: 'syz.4.3374': attribute type 10 has an invalid length. [ 1092.972215][ T43] audit: type=1400 audit(1788484400.037:5410): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331 pid=19079 comm="syz.6.3375" [ 1093.194338][T19075] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1093.194381][T19075] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1093.194519][T19075] vhci_hcd vhci_hcd.0: Device attached [ 1093.218785][T15392] usb 11-1: new high-speed USB device number 60 using dummy_hcd [ 1093.258501][T19075] rdma_rxe: rxe_newlink: failed to add wg2 [ 1093.260768][T19082] vhci_hcd: connection closed [ 1093.261152][ T13] vhci_hcd vhci_hcd.5: stop threads [ 1093.261172][ T13] vhci_hcd vhci_hcd.5: release socket [ 1093.261185][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 1093.368328][T15392] usb 11-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 1093.369351][T15392] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1093.369366][T15392] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1093.369384][T15392] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.592361][T15392] usb 11-1: USB disconnect, device number 60 [ 1093.869539][T19089] netlink: 'syz.4.3377': attribute type 10 has an invalid length. [ 1094.041763][T19093] netlink: 'syz.5.3378': attribute type 10 has an invalid length. [ 1094.790675][T19105] netlink: 'syz.6.3383': attribute type 10 has an invalid length. [ 1094.807571][ T43] audit: type=1400 audit(1788484401.867:5411): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F0 [ 1095.048196][ T10] usb 10-1: new high-speed USB device number 87 using dummy_hcd [ 1095.199340][ T10] usb 10-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 1095.201468][ T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1095.201495][ T10] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1095.201526][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.425668][ T10] usb 10-1: USB disconnect, device number 87 [ 1095.626419][T19111] netlink: 'syz.4.3385': attribute type 10 has an invalid length. [ 1095.984555][T19113] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 1095.984599][T19113] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1095.984773][T19113] vhci_hcd vhci_hcd.0: Device attached [ 1096.032577][T19113] rdma_rxe: rxe_newlink: failed to add wg2 [ 1096.033925][T19115] vhci_hcd: connection closed [ 1096.034233][ T13] vhci_hcd vhci_hcd.6: stop threads [ 1096.034258][ T13] vhci_hcd vhci_hcd.6: release socket [ 1096.034271][ T13] vhci_hcd vhci_hcd.6: disconnect device [ 1096.120615][ T43] audit: type=1400 audit(1788484403.187:5412): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331 pid=19117 comm="syz.5.3387" [ 1096.357982][T15392] usb 10-1: new high-speed USB device number 88 using dummy_hcd [ 1096.518539][T15392] usb 10-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 1096.519630][T15392] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1096.519673][T15392] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1096.519703][T15392] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.745198][ T10] usb 10-1: USB disconnect, device number 88 [ 1096.759025][T19127] netlink: 'syz.3.3390': attribute type 10 has an invalid length. [ 1096.953509][T19133] netlink: 'syz.6.3392': attribute type 10 has an invalid length. [ 1097.376260][T19135] Console: switching to colour dummy device 80x25 [ 1097.450806][T19136] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1097.473910][T19136] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref] [ 1097.481159][T19136] pci 0000:00:01.0: BAR 2 [mem 0x80286000-0x80286fff] [ 1097.481494][T19136] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1097.490059][T19136] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1097.522398][T19136] pci 0000:00:01.0: Adding to iommu group 1 [ 1097.533866][T19136] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1097.533897][T19136] pci 0000:00:01.0: vgaarb: bridge control possible [ 1097.533908][T19136] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1097.567509][T19136] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref]: assigned [ 1097.572431][T19136] pci 0000:00:01.0: BAR 2 [mem 0x80286000-0x80286fff]: assigned [ 1097.578174][T19136] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1097.598306][ T43] audit: type=1400 audit(1788484404.667:5413): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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drm] Found bochs VGA, ID 0xb0c5. [ 1097.615929][T19136] [drm] Framebuffer size 16384 kB @ 0x81000000, mmio @ 0x80286000. [ 1097.651070][T19136] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1097.660048][T19142] netlink: 'syz.4.3394': attribute type 10 has an invalid length. [ 1097.901072][T19136] Console: switching to colour frame buffer device 160x50 [ 1097.947884][T19136] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1098.988476][T19159] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1098.988510][T19159] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1098.988639][T19159] vhci_hcd vhci_hcd.0: Device attached [ 1099.002554][T19166] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1099.037527][T19168] netlink: 'syz.4.3403': attribute type 10 has an invalid length. [ 1099.052159][T19159] rdma_rxe: rxe_newlink: failed to add wg2 [ 1099.056109][T19167] vhci_hcd: connection closed [ 1099.056852][T13503] vhci_hcd vhci_hcd.5: stop threads [ 1099.056931][T13503] vhci_hcd vhci_hcd.5: release socket [ 1099.056962][T13503] vhci_hcd vhci_hcd.5: disconnect device [ 1099.213920][T19173] netlink: 'syz.6.3404': attribute type 10 has an invalid length. [ 1100.110855][T19182] Console: switching to colour dummy device 80x25 [ 1100.121517][T19183] rdma_rxe: rxe_newlink: failed to add wg2 [ 1100.155314][T19184] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1100.168304][T19184] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref] [ 1100.171244][T19184] pci 0000:00:01.0: BAR 2 [mem 0x80286000-0x80286fff] [ 1100.173804][T19184] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1100.177283][T19184] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1100.196120][T19184] pci 0000:00:01.0: Adding to iommu group 1 [ 1100.202133][T19184] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1100.202179][T19184] pci 0000:00:01.0: vgaarb: bridge control possible [ 1100.202190][T19184] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1100.230057][T19184] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref]: assigned [ 1100.230388][T19184] pci 0000:00:01.0: BAR 2 [mem 0x80286000-0x80286fff]: assigned [ 1100.238230][T19184] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1100.270251][T19184] [drm] Found bochs VGA, ID 0xb0c5. [ 1100.270338][T19184] [drm] Framebuffer size 16384 kB @ 0x81000000, mmio @ 0x80286000. [ 1100.315314][T19184] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1100.576546][T19184] Console: switching to colour frame buffer device 160x50 [ 1100.614196][T19184] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1101.350287][T19205] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1101.350320][T19205] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1101.362758][T19205] vhci_hcd vhci_hcd.0: Device attached [ 1101.451960][T19209] rdma_rxe: rxe_newlink: failed to add wg2 [ 1101.630126][ T43] audit: type=1400 audit(1788484408.697:5414): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F0 [ 1101.637123][T18703] usb 48-1: SetAddress Request (92) to port 0 [ 1101.678562][T18703] usb 48-1: new SuperSpeed USB device number 92 using vhci_hcd [ 1101.829140][T19207] vhci_hcd: connection reset by peer [ 1101.829723][T13503] vhci_hcd vhci_hcd.5: stop threads [ 1101.829743][T13503] vhci_hcd vhci_hcd.5: release socket [ 1101.829824][T13503] vhci_hcd vhci_hcd.5: disconnect device [ 1101.887019][T13792] usb 11-1: new high-speed USB device number 61 using dummy_hcd [ 1102.037852][T13792] usb 11-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 1102.042094][T13792] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1102.045527][T13792] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1102.049364][T13792] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.273269][ T76] usb 11-1: USB disconnect, device number 61 [ 1103.510158][T19244] nbd6: detected capacity change from 0 to 1 [ 1103.521111][T13167] buffer_io_error: 320 callbacks suppressed [ 1103.525847][T13167] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1103.529263][T13167] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1103.529333][T13167] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1103.529384][T13167] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1103.529417][T13167] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1103.529441][T13167] ldm_validate_partition_table(): Disk read failed. [ 1103.529473][T13167] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1103.529503][T13167] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1103.529532][T13167] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1103.529561][T13167] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1103.529583][T13167] Dev nbd6: unable to read RDB block 0 [ 1103.529610][T13167] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1103.529647][T13167] nbd6: unable to read partition table [ 1103.529770][T13167] nbd6: partition table beyond EOD, truncated [ 1103.620471][T19247] block nbd6: shutting down sockets [ 1103.989660][T19262] netlink: 'syz.3.3431': attribute type 10 has an invalid length. [ 1104.195236][T19267] netlink: 'syz.4.3433': attribute type 10 has an invalid length. [ 1104.854252][T19273] Console: switching to colour dummy device 80x25 [ 1104.924696][T19275] netlink: 'syz.5.3434': attribute type 10 has an invalid length. [ 1104.946845][T19276] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1104.970514][T19276] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref] [ 1104.970687][T19276] pci 0000:00:01.0: BAR 2 [mem 0x80286000-0x80286fff] [ 1104.973699][T19276] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1104.974289][T19276] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1105.008773][T19276] pci 0000:00:01.0: Adding to iommu group 1 [ 1105.032212][T19276] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1105.032248][T19276] pci 0000:00:01.0: vgaarb: bridge control possible [ 1105.032263][T19276] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1105.064128][T19276] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref]: assigned [ 1105.065283][T19276] pci 0000:00:01.0: BAR 2 [mem 0x80286000-0x80286fff]: assigned [ 1105.081341][T19276] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1105.136668][T19276] [drm] Found bochs VGA, ID 0xb0c5. [ 1105.139013][T19276] [drm] Framebuffer size 16384 kB @ 0x81000000, mmio @ 0x80286000. [ 1105.191279][T19276] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1105.444312][T19276] Console: switching to colour frame buffer device 160x50 [ 1105.463180][T19276] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1105.685042][T19288] netlink: 'syz.4.3438': attribute type 10 has an invalid length. [ 1105.831860][ T43] audit: type=1400 audit(1788484412.897:5415): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F0 [ 1106.106960][ T5852] usb 10-1: new high-speed USB device number 89 using dummy_hcd [ 1106.708532][ T5852] usb 10-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 1106.747589][T18703] usb 48-1: device descriptor read/8, error -110 [ 1106.789290][ T5852] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1106.789448][ T5852] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1106.789515][ T5852] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.183676][T18703] usb usb48-port1: attempt power cycle [ 1107.604004][ T5852] usb 10-1: USB disconnect, device number 89 [ 1107.745203][ T43] audit: type=1400 audit(1788484414.808:5416): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331 pid=19311 comm="syz.6.3446" [ 1107.807094][T19314] netlink: 'syz.5.3448': attribute type 10 has an invalid length. [ 1107.847978][T18703] usb usb48-port1: unable to enumerate USB device [ 1107.986739][T18703] usb 11-1: new high-speed USB device number 62 using dummy_hcd [ 1108.138837][T18703] usb 11-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 1108.143124][T18703] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1108.143171][T18703] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1108.143205][T18703] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.266439][T19323] rdma_rxe: rxe_newlink: failed to add wg2 [ 1108.375237][T18703] usb 11-1: USB disconnect, device number 62 [ 1109.036851][ T5836] usb 10-1: new high-speed USB device number 90 using dummy_hcd [ 1109.186922][ T5836] usb 10-1: Using ep0 maxpacket: 8 [ 1109.188075][ T5836] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1109.189439][ T5836] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1109.189480][ T5836] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1109.189499][ T5836] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1109.189517][ T5836] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1109.189535][ T5836] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1109.189565][ T5836] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.406362][ T5836] usb 10-1: usb_control_msg returned -32 [ 1109.406591][ T5836] usbtmc 10-1:16.0: can't read capabilities [ 1109.985258][T19345] Console: switching to colour dummy device 80x25 [ 1110.039523][T19349] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1110.051460][T19349] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref] [ 1110.055011][T19349] pci 0000:00:01.0: BAR 2 [mem 0x80286000-0x80286fff] [ 1110.058928][T19349] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1110.062027][T19349] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1110.072868][T19349] pci 0000:00:01.0: Adding to iommu group 1 [ 1110.078180][T19349] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1110.078207][T19349] pci 0000:00:01.0: vgaarb: bridge control possible [ 1110.078217][T19349] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1110.098116][T19349] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref]: assigned [ 1110.101716][T19349] pci 0000:00:01.0: BAR 2 [mem 0x80286000-0x80286fff]: assigned [ 1110.105403][T19349] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1110.115643][T19352] usbtmc 10-1:16.0: usb_clear_halt returned -32 [ 1110.123176][T19349] [drm] Found bochs VGA, ID 0xb0c5. [ 1110.123262][T19349] [drm] Framebuffer size 16384 kB @ 0x81000000, mmio @ 0x80286000. [ 1110.135553][T19349] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1110.280490][T19349] Console: switching to colour frame buffer device 160x50 [ 1110.300474][T19349] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1110.318550][T14776] usb 10-1: USB disconnect, device number 90 [ 1111.060775][T19358] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1111.060836][T19358] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1111.060994][T19358] vhci_hcd vhci_hcd.0: Device attached [ 1111.152622][T19358] syz2: rxe_newlink: already configured on wg2 [ 1111.476056][T19379] rdma_rxe: rxe_newlink: failed to add wg2 [ 1111.479502][ T9] usb 44-1: SetAddress Request (90) to port 0 [ 1111.485065][ T9] usb 44-1: new SuperSpeed USB device number 90 using vhci_hcd [ 1111.638632][T19378] rdma_rxe: rxe_newlink: failed to add wg2 [ 1111.707414][T19367] vhci_hcd: connection reset by peer [ 1111.712781][T13503] vhci_hcd vhci_hcd.3: stop threads [ 1111.712837][T13503] vhci_hcd vhci_hcd.3: release socket [ 1111.713275][T13503] vhci_hcd vhci_hcd.3: disconnect device [ 1112.429081][T19388] syzkaller1: entered promiscuous mode [ 1112.429147][T19388] syzkaller1: entered allmulticast mode [ 1113.734266][T19407] netlink: 'syz.5.3473': attribute type 10 has an invalid length. [ 1113.793911][T19412] syz2: rxe_newlink: already configured on wg2 [ 1113.888044][T19415] netlink: 'syz.4.3475': attribute type 10 has an invalid length. [ 1114.079347][ T43] audit: type=1400 audit(1788484421.148:5417): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 1114.179771][T19422] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1114.181314][T19422] vhci_hcd vhci_hcd.0: Device attached [ 1114.336355][T15392] usb 10-1: new high-speed USB device number 91 using dummy_hcd [ 1114.428750][T19422] rdma_rxe: rxe_newlink: failed to add wg2 [ 1114.497571][T15392] usb 10-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 1114.499257][T15392] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1114.499284][T15392] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1114.499320][T15392] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.567933][T16675] usb 50-1: SetAddress Request (64) to port 0 [ 1114.573253][T16675] usb 50-1: new SuperSpeed USB device number 64 using vhci_hcd [ 1114.715779][T15392] usb 10-1: USB disconnect, device number 91 [ 1114.919360][T19423] vhci_hcd: connection reset by peer [ 1114.919978][ T13] vhci_hcd vhci_hcd.6: stop threads [ 1114.920017][ T13] vhci_hcd vhci_hcd.6: release socket [ 1114.920373][ T13] vhci_hcd vhci_hcd.6: disconnect device [ 1115.028889][T19430] rdma_rxe: rxe_newlink: failed to add wg2 [ 1115.266907][T19434] Bluetooth: MGMT ver 1.23 [ 1115.548319][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.548457][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.248100][T19441] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1116.248162][T19441] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1116.248754][T19441] vhci_hcd vhci_hcd.0: Device attached [ 1116.314682][T19441] rdma_rxe: rxe_newlink: failed to add wg2 [ 1116.480719][T19442] vhci_hcd: connection closed [ 1116.481160][ T13] vhci_hcd vhci_hcd.5: stop threads [ 1116.481221][ T13] vhci_hcd vhci_hcd.5: release socket [ 1116.481280][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 1116.536283][ T5836] usb 48-1: enqueue for inactive port 0 [ 1116.586825][ T9] usb 44-1: device descriptor read/8, error -110 [ 1116.988810][ T9] usb usb44-port1: attempt power cycle [ 1117.132484][ T43] audit: type=1400 audit(1788484424.198:5418): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331 pid=19454 comm="syz.3.3485" [ 1117.483173][T19458] netlink: 'syz.5.3486': attribute type 10 has an invalid length. [ 1117.592664][ T9] usb usb44-port1: unable to enumerate USB device [ 1117.673590][ T5836] usb usb48-port1: attempt power cycle [ 1117.741755][ T43] audit: type=1400 audit(1788484424.808:5419): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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netlink: 'syz.4.3489': attribute type 10 has an invalid length. [ 1117.977046][ T9] usb 11-1: new high-speed USB device number 63 using dummy_hcd [ 1118.127702][ T9] usb 11-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 1118.129519][ T9] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1118.129545][ T9] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1118.129577][ T9] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.247126][ T5836] usb usb48-port1: unable to enumerate USB device [ 1118.349649][ T5836] usb 11-1: USB disconnect, device number 63 [ 1119.026440][T19475] rdma_rxe: rxe_newlink: failed to add wg2 [ 1119.489846][T19484] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 1119.489907][T19484] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1119.493656][T19484] vhci_hcd vhci_hcd.0: Device attached [ 1119.786062][T19484] rdma_rxe: rxe_newlink: failed to add wg2 [ 1120.076699][T19485] vhci_hcd: connection reset by peer [ 1120.081591][ T13] vhci_hcd vhci_hcd.6: stop threads [ 1120.081706][ T13] vhci_hcd vhci_hcd.6: release socket [ 1120.085383][ T13] vhci_hcd vhci_hcd.6: disconnect device [ 1120.085382][T16675] usb 50-1: device descriptor read/8, error -110 [ 1120.470545][T16675] usb usb50-port1: attempt power cycle [ 1120.517033][T19499] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1120.517096][T19499] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1120.527141][T19499] vhci_hcd vhci_hcd.0: Device attached [ 1120.567373][T19499] rdma_rxe: rxe_newlink: failed to add wg2 [ 1120.816998][ T5836] usb 48-1: SetAddress Request (100) to port 0 [ 1120.817091][ T5836] usb 48-1: new SuperSpeed USB device number 100 using vhci_hcd [ 1121.013318][T19500] vhci_hcd: connection reset by peer [ 1121.013788][ T13] vhci_hcd vhci_hcd.5: stop threads [ 1121.013812][ T13] vhci_hcd vhci_hcd.5: release socket [ 1121.013857][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 1121.027127][T16675] usb usb50-port1: unable to enumerate USB device [ 1121.131025][T19508] netlink: 'syz.6.3498': attribute type 10 has an invalid length. [ 1121.856831][ T43] audit: type=1400 audit(1788484428.928:5420): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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audit: type=1400 audit(1788484429.058:5421): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 10-1: new high-speed USB device number 92 using dummy_hcd [ 1122.377527][T14776] usb 10-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 1122.378631][T14776] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1122.378650][T14776] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1122.378677][T14776] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.593442][T14776] usb 10-1: USB disconnect, device number 92 [ 1123.063229][T19530] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 1123.063283][T19530] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1123.063414][T19530] vhci_hcd vhci_hcd.0: Device attached [ 1123.108931][T19530] rdma_rxe: rxe_newlink: failed to add wg2 [ 1123.435906][T13792] usb 50-1: SetAddress Request (68) to port 0 [ 1123.436012][T13792] usb 50-1: new SuperSpeed USB device number 68 using vhci_hcd [ 1123.501430][T19539] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1123.501489][T19539] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1123.509225][T19539] vhci_hcd vhci_hcd.0: Device attached [ 1123.550574][T19539] rdma_rxe: rxe_newlink: failed to add wg2 [ 1123.700284][T19531] vhci_hcd: connection reset by peer [ 1123.701491][T13503] vhci_hcd vhci_hcd.6: stop threads [ 1123.701635][T13503] vhci_hcd vhci_hcd.6: release socket [ 1123.702114][T13503] vhci_hcd vhci_hcd.6: disconnect device [ 1124.073618][T19540] vhci_hcd: connection closed [ 1124.074191][T13503] vhci_hcd vhci_hcd.5: stop threads [ 1124.074267][T13503] vhci_hcd vhci_hcd.5: release socket [ 1124.074363][T13503] vhci_hcd vhci_hcd.5: disconnect device [ 1124.499367][T19550] netlink: 'syz.4.3511': attribute type 10 has an invalid length. [ 1124.886427][T19555] netlink: 'syz.5.3512': attribute type 10 has an invalid length. [ 1125.293985][T19560] netlink: 'syz.3.3513': attribute type 10 has an invalid length. [ 1125.356479][ T43] audit: type=1400 audit(1788484432.429:5422): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F0 [ 1125.845661][T19572] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1125.845710][T19572] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1125.853351][T19572] vhci_hcd vhci_hcd.0: Device attached [ 1125.910487][T19572] rdma_rxe: rxe_newlink: failed to add wg2 [ 1126.231671][ T43] audit: type=1400 audit(1788484433.299:5423): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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vhci_hcd: connection reset by peer [ 1126.488549][ T5837] vhci_hcd vhci_hcd.5: stop threads [ 1126.488573][ T5837] vhci_hcd vhci_hcd.5: release socket [ 1126.488636][ T5837] vhci_hcd vhci_hcd.5: disconnect device [ 1126.488749][ T5836] usb 48-1: device descriptor read/8, error -110 [ 1126.509498][ T50] usb 11-1: new high-speed USB device number 64 using dummy_hcd [ 1126.656780][ T50] usb 11-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 1126.658340][ T50] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1126.658366][ T50] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1126.658397][ T50] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.876370][ T5836] usb usb48-port1: attempt power cycle [ 1126.880290][T15392] usb 11-1: USB disconnect, device number 64 [ 1127.103249][T19582] netlink: 'syz.5.3522': attribute type 10 has an invalid length. [ 1127.191726][T19588] netlink: 'syz.5.3525': attribute type 10 has an invalid length. [ 1127.285010][T19594] Console: switching to colour dummy device 80x25 [ 1127.336788][T19597] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1127.337107][T19596] netlink: 'syz.4.3526': attribute type 10 has an invalid length. [ 1127.350882][T19597] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref] [ 1127.351023][T19597] pci 0000:00:01.0: BAR 2 [mem 0x80286000-0x80286fff] [ 1127.351345][T19597] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1127.352402][T19597] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1127.364117][T19597] pci 0000:00:01.0: Adding to iommu group 1 [ 1127.369280][T19597] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1127.369305][T19597] pci 0000:00:01.0: vgaarb: bridge control possible [ 1127.369315][T19597] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1127.381652][T19597] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref]: assigned [ 1127.381834][T19597] pci 0000:00:01.0: BAR 2 [mem 0x80286000-0x80286fff]: assigned [ 1127.385211][T19597] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1127.408209][T19597] [drm] Found bochs VGA, ID 0xb0c5. [ 1127.408267][T19597] [drm] Framebuffer size 16384 kB @ 0x81000000, mmio @ 0x80286000. [ 1127.429451][T19597] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1127.457879][ T5836] usb usb48-port1: unable to enumerate USB device [ 1127.719731][T19601] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 1127.719784][T19601] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1127.720272][T19601] vhci_hcd vhci_hcd.0: Device attached [ 1127.776158][T19597] Console: switching to colour frame buffer device 160x50 [ 1127.781219][T19604] rdma_rxe: rxe_newlink: failed to add wg2 [ 1127.796979][T19597] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1128.271685][T19607] rdma_rxe: rxe_newlink: failed to add wg2 [ 1128.309969][T19602] vhci_hcd: connection closed [ 1128.310428][T13503] vhci_hcd vhci_hcd.6: stop threads [ 1128.310519][T13503] vhci_hcd vhci_hcd.6: release socket [ 1128.311243][T13503] vhci_hcd vhci_hcd.6: disconnect device [ 1128.506314][T13792] usb 50-1: device descriptor read/8, error -110 [ 1128.896345][T13792] usb usb50-port1: attempt power cycle [ 1128.930979][T19614] netlink: 'syz.6.3533': attribute type 10 has an invalid length. [ 1129.471398][T13792] usb usb50-port1: unable to enumerate USB device [ 1129.762006][T19623] netlink: 'syz.4.3536': attribute type 10 has an invalid length. [ 1130.162217][T19630] netlink: 'syz.6.3538': attribute type 10 has an invalid length. [ 1130.415535][ T5852] usb 10-1: new high-speed USB device number 93 using dummy_hcd [ 1130.586767][ T5852] usb 10-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 1130.588238][ T5852] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1130.588260][ T5852] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1130.588272][ T5852] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1130.588293][ T5852] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.590598][T19632] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1130.590710][T19632] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1130.593706][ T5852] pl2303 10-1:1.0: pl2303 converter detected [ 1130.597054][ T5852] usb 10-1: pl2303 converter now attached to ttyUSB0 [ 1130.857683][T19632] pl2303 10-1:1.0: pl2303_vendor_write - failed to write [0007]: -71 [ 1130.858089][T19632] pl2303 ttyUSB0: pl2303_get_line_request - failed: -71 [ 1130.861145][ T50] usb 10-1: USB disconnect, device number 93 [ 1130.866582][T19632] pl2303 ttyUSB0: pl2303_set_line_request - failed: -71 [ 1130.867188][T19632] pl2303 10-1:1.0: pl2303_vendor_read - failed to read [000a]: -19 [ 1130.867292][T19632] pl2303 ttyUSB0: failed to submit interrupt urb: -19 [ 1130.880404][ T50] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 1130.880870][ T50] pl2303 10-1:1.0: device disconnected [ 1131.150242][T19638] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 1131.150307][T19638] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1131.157963][T19638] vhci_hcd vhci_hcd.0: Device attached [ 1131.224102][T19638] rdma_rxe: rxe_newlink: failed to add wg2 [ 1131.435892][T13792] usb 50-1: SetAddress Request (72) to port 0 [ 1131.440070][T13792] usb 50-1: new SuperSpeed USB device number 72 using vhci_hcd [ 1131.454003][T19645] FAULT_INJECTION: forcing a failure. [ 1131.454003][T19645] name failslab, interval 1, probability 0, space 0, times 0 [ 1131.454234][T19645] CPU: 1 UID: 0 PID: 19645 Comm: syz.5.3544 Tainted: G L syzkaller #0 PREEMPT(full) [ 1131.454255][T19645] Tainted: [L]=SOFTLOCKUP [ 1131.454261][T19645] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1131.454270][T19645] Call Trace: [ 1131.454276][T19645] [ 1131.454282][T19645] dump_stack_lvl+0x100/0x190 [ 1131.454357][T19645] should_fail_ex.cold+0x5/0xa [ 1131.454376][T19645] should_failslab+0xc2/0x120 [ 1131.454431][T19645] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 1131.454450][T19645] ? v9fs_init_fs_context+0x17f/0x5c0 [ 1131.454470][T19645] kstrdup+0x51/0xe0 [ 1131.454494][T19645] v9fs_init_fs_context+0x17f/0x5c0 [ 1131.454510][T19645] alloc_fs_context+0x60c/0xf40 [ 1131.454529][T19645] path_mount+0xdbd/0x24c0 [ 1131.454547][T19645] ? __pfx_path_mount+0x10/0x10 [ 1131.454561][T19645] ? lockdep_hardirqs_on+0x7d/0x110 [ 1131.454598][T19645] ? putname+0xb1/0x110 [ 1131.454612][T19645] ? kmem_cache_free+0x127/0x6c0 [ 1131.454634][T19645] ? __ia32_sys_mount+0x292/0x310 [ 1131.454650][T19645] __ia32_sys_mount+0x292/0x310 [ 1131.454667][T19645] ? __pfx___ia32_sys_mount+0x10/0x10 [ 1131.454689][T19645] __do_fast_syscall_32+0x13a/0x8b0 [ 1131.454711][T19645] do_fast_syscall_32+0x32/0x70 [ 1131.454729][T19645] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1131.454744][T19645] RIP: 0023:0xf704efec [ 1131.454759][T19645] Code: Unable to access opcode bytes at 0xf704efc2. [ 1131.454765][T19645] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 1131.454778][T19645] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000280 [ 1131.454787][T19645] RDX: 00000000800003c0 RSI: 0000000002208440 RDI: 0000000080000300 [ 1131.454795][T19645] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1131.454802][T19645] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1131.454809][T19645] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1131.454824][T19645] [ 1131.665607][T19647] Console: switching to colour dummy device 80x25 [ 1131.706715][T19654] netlink: 'syz.5.3546': attribute type 10 has an invalid length. [ 1131.726634][T19652] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1131.739202][T19652] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref] [ 1131.739352][T19652] pci 0000:00:01.0: BAR 2 [mem 0x80286000-0x80286fff] [ 1131.739574][T19652] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1131.742048][T19652] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1131.780678][T19652] pci 0000:00:01.0: Adding to iommu group 1 [ 1131.784490][T19639] vhci_hcd: connection reset by peer [ 1131.788286][ T13] vhci_hcd vhci_hcd.6: stop threads [ 1131.791474][ T13] vhci_hcd vhci_hcd.6: release socket [ 1131.793259][T19652] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1131.793290][T19652] pci 0000:00:01.0: vgaarb: bridge control possible [ 1131.793310][T19652] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1131.806546][ T13] vhci_hcd vhci_hcd.6: disconnect device [ 1131.816993][T19652] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref]: assigned [ 1131.818845][T19652] pci 0000:00:01.0: BAR 2 [mem 0x80286000-0x80286fff]: assigned [ 1131.822135][T19652] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1131.846459][T19652] [drm] Found bochs VGA, ID 0xb0c5. [ 1131.846525][T19652] [drm] Framebuffer size 16384 kB @ 0x81000000, mmio @ 0x80286000. [ 1131.860791][T19652] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1132.142175][T19652] Console: switching to colour frame buffer device 160x50 [ 1132.160589][T19652] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1132.388272][T19662] netlink: 'syz.4.3548': attribute type 10 has an invalid length. [ 1132.813793][T19672] Console: switching to colour dummy device 80x25 [ 1132.891010][T19675] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1132.904791][T19675] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref] [ 1132.904963][T19675] pci 0000:00:01.0: BAR 2 [mem 0x80286000-0x80286fff] [ 1132.907933][T19675] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1132.908492][T19675] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1132.939076][T19675] pci 0000:00:01.0: Adding to iommu group 1 [ 1132.943650][T19675] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1132.943676][T19675] pci 0000:00:01.0: vgaarb: bridge control possible [ 1132.943686][T19675] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1132.957643][T19675] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref]: assigned [ 1132.957845][T19675] pci 0000:00:01.0: BAR 2 [mem 0x80286000-0x80286fff]: assigned [ 1132.959946][T19675] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1132.976142][T19675] [drm] Found bochs VGA, ID 0xb0c5. [ 1132.976219][T19675] [drm] Framebuffer size 16384 kB @ 0x81000000, mmio @ 0x80286000. [ 1133.009066][T19675] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1133.269924][T19675] Console: switching to colour frame buffer device 160x50 [ 1133.286533][T19675] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1133.464128][T19683] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 1133.464213][T19683] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1133.464328][T19683] vhci_hcd vhci_hcd.0: Device attached [ 1133.514980][T19683] syz2: rxe_newlink: already configured on wg2 [ 1133.519806][T19686] vhci_hcd: connection closed [ 1133.520229][ T13] vhci_hcd vhci_hcd.3: stop threads [ 1133.525012][ T13] vhci_hcd vhci_hcd.3: release socket [ 1133.525035][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 1134.233510][T19697] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1134.233553][T19697] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1134.246274][T19697] vhci_hcd vhci_hcd.0: Device attached [ 1134.330647][T19697] rdma_rxe: rxe_newlink: failed to add wg2 [ 1134.503589][T19703] FAULT_INJECTION: forcing a failure. [ 1134.503589][T19703] name failslab, interval 1, probability 0, space 0, times 0 [ 1134.503711][T19703] CPU: 3 UID: 0 PID: 19703 Comm: syz.3.3559 Tainted: G L syzkaller #0 PREEMPT(full) [ 1134.503753][T19703] Tainted: [L]=SOFTLOCKUP [ 1134.503763][T19703] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1134.503775][T19703] Call Trace: [ 1134.503832][T19703] [ 1134.503842][T19703] dump_stack_lvl+0x100/0x190 [ 1134.503938][T19703] should_fail_ex.cold+0x5/0xa [ 1134.503968][T19703] should_failslab+0xc2/0x120 [ 1134.504021][T19703] __kmalloc_cache_noprof+0x91/0x6d0 [ 1134.504050][T19703] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1134.504102][T19703] ? kvm_set_irq_routing+0x24f/0x960 [ 1134.504135][T19703] kvm_set_irq_routing+0x24f/0x960 [ 1134.504171][T19703] kvm_arch_vm_ioctl+0xf08/0x18d0 [ 1134.504200][T19703] ? is_bpf_text_address+0x94/0x1a0 [ 1134.504231][T19703] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 1134.504262][T19703] ? __kernel_text_address+0xd/0x30 [ 1134.504287][T19703] ? unwind_get_return_address+0x59/0xa0 [ 1134.504315][T19703] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1134.504345][T19703] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1134.504374][T19703] ? rb_read_data_buffer.isra.0+0x174/0x470 [ 1134.504404][T19703] ? check_buffer+0x13f/0x820 [ 1134.504426][T19703] ? __pfx_check_buffer+0x10/0x10 [ 1134.504447][T19703] ? register_lock_class+0x3f/0x7b0 [ 1134.504476][T19703] ? __pfx_check_buffer+0x10/0x10 [ 1134.504503][T19703] ? __lock_acquire+0x4c5/0x1ec0 [ 1134.504545][T19703] ? __lock_acquire+0x4c5/0x1ec0 [ 1134.504577][T19703] ? __lock_acquire+0x4c5/0x1ec0 [ 1134.504607][T19703] ? lock_acquire+0x1d1/0x380 [ 1134.504632][T19703] ? unwind_next_frame+0xbd/0x2090 [ 1134.504665][T19703] ? lock_acquire+0x1d1/0x380 [ 1134.504698][T19703] ? is_bpf_text_address+0x25/0x1a0 [ 1134.504727][T19703] ? find_held_lock+0x2b/0x80 [ 1134.504750][T19703] ? is_bpf_text_address+0x8a/0x1a0 [ 1134.504779][T19703] ? is_bpf_text_address+0x8a/0x1a0 [ 1134.504808][T19703] ? bpf_ksym_find+0x124/0x1c0 [ 1134.504831][T19703] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1134.504860][T19703] ? is_bpf_text_address+0x94/0x1a0 [ 1134.504890][T19703] ? kernel_text_address+0x8d/0x100 [ 1134.504912][T19703] ? __pfx_widen_string+0x10/0x10 [ 1134.504932][T19703] ? __kernel_text_address+0xd/0x30 [ 1134.504956][T19703] ? unwind_get_return_address+0x59/0xa0 [ 1134.504984][T19703] kvm_vm_ioctl+0x167d/0x42d0 [ 1134.505010][T19703] ? tomoyo_path_number_perm+0x46d/0x580 [ 1134.505039][T19703] ? stack_trace_save+0x8e/0xc0 [ 1134.505063][T19703] ? __pfx_stack_trace_save+0x10/0x10 [ 1134.505091][T19703] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1134.505110][T19703] ? __lock_acquire+0x4c5/0x1ec0 [ 1134.505139][T19703] ? tomoyo_path_number_perm+0x46d/0x580 [ 1134.505166][T19703] ? kasan_save_stack+0x3f/0x50 [ 1134.505188][T19703] ? kasan_save_stack+0x30/0x50 [ 1134.505208][T19703] ? kasan_save_track+0x14/0x30 [ 1134.505229][T19703] ? kasan_save_free_info+0x3b/0x70 [ 1134.505258][T19703] ? __kasan_slab_free+0x5f/0x80 [ 1134.505281][T19703] ? kfree+0x22b/0x6d0 [ 1134.505328][T19703] ? tomoyo_path_number_perm+0x46d/0x580 [ 1134.505355][T19703] ? security_file_ioctl_compat+0xd3/0x230 [ 1134.505384][T19703] ? __ia32_compat_sys_ioctl+0xc2/0x360 [ 1134.505417][T19703] ? __do_fast_syscall_32+0x13a/0x8b0 [ 1134.505444][T19703] ? kvm_arch_vm_compat_ioctl+0x2d0/0x470 [ 1134.505475][T19703] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 1134.505531][T19703] ? kasan_quarantine_put+0x104/0x240 [ 1134.505552][T19703] ? lockdep_hardirqs_on+0x7d/0x110 [ 1134.505579][T19703] ? find_held_lock+0x2b/0x80 [ 1134.505599][T19703] ? tomoyo_path_number_perm+0x28f/0x580 [ 1134.505626][T19703] ? tomoyo_path_number_perm+0x28f/0x580 [ 1134.505658][T19703] ? tomoyo_path_number_perm+0x188/0x580 [ 1134.505693][T19703] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1134.505719][T19703] ? futex_wait+0x11e/0x370 [ 1134.505752][T19703] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1134.505781][T19703] ? do_vfs_ioctl+0x226/0x13e0 [ 1134.505810][T19703] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1134.505842][T19703] kvm_vm_compat_ioctl+0x2f7/0x3f0 [ 1134.505863][T19703] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 1134.505882][T19703] ? __fget_files+0x34/0x3d0 [ 1134.505904][T19703] ? find_held_lock+0x2b/0x80 [ 1134.505924][T19703] ? __fget_files+0x215/0x3d0 [ 1134.505944][T19703] ? hook_file_ioctl_common+0x140/0x440 [ 1134.505978][T19703] ? __fget_files+0x21f/0x3d0 [ 1134.506002][T19703] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 1134.506022][T19703] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1134.506053][T19703] __do_fast_syscall_32+0x13a/0x8b0 [ 1134.506083][T19703] do_fast_syscall_32+0x32/0x70 [ 1134.506107][T19703] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1134.506131][T19703] RIP: 0023:0xf7f62fec [ 1134.506156][T19703] Code: Unable to access opcode bytes at 0xf7f62fc2. [ 1134.506201][T19703] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1134.506222][T19703] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000ae60 [ 1134.506235][T19703] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1134.506246][T19703] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1134.506257][T19703] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1134.506268][T19703] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1134.506293][T19703] [ 1134.555352][ T5836] usb 48-1: SetAddress Request (104) to port 0 [ 1134.555424][ T5836] usb 48-1: new SuperSpeed USB device number 104 using vhci_hcd [ 1134.776942][ T43] audit: type=1400 audit(1788484441.839:5424): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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vhci_hcd: connection reset by peer [ 1134.827840][ T5837] vhci_hcd vhci_hcd.5: stop threads [ 1134.827862][ T5837] vhci_hcd vhci_hcd.5: release socket [ 1134.827895][ T5837] vhci_hcd vhci_hcd.5: disconnect device [ 1135.245714][T19711] lo speed is unknown, defaulting to 1000 [ 1135.258036][T19711] wg2 speed is unknown, defaulting to 1000 [ 1135.382017][T19711] lo speed is unknown, defaulting to 1000 [ 1135.583930][ T8890] md_update_sb: can't update sb for read-only array md0 [ 1136.522969][T13792] usb 50-1: device descriptor read/8, error -110 [ 1136.561692][T19730] netlink: 'syz.5.3568': attribute type 10 has an invalid length. [ 1136.969635][T13792] usb usb50-port1: attempt power cycle [ 1137.992606][T13792] usb usb50-port1: unable to enumerate USB device [ 1138.031692][T19741] Console: switching to colour dummy device 80x25 [ 1138.093206][T19750] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1138.093255][T19750] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1138.096445][T19750] vhci_hcd vhci_hcd.0: Device attached [ 1138.166920][T19742] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1138.197269][T19750] rdma_rxe: rxe_newlink: failed to add wg2 [ 1138.200516][T19742] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref] [ 1138.200658][T19742] pci 0000:00:01.0: BAR 2 [mem 0x80286000-0x80286fff] [ 1138.200964][T19742] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1138.203653][T19742] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1138.212731][T19742] pci 0000:00:01.0: Adding to iommu group 1 [ 1138.224599][T19742] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1138.224638][T19742] pci 0000:00:01.0: vgaarb: bridge control possible [ 1138.224651][T19742] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1138.237866][T19742] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref]: assigned [ 1138.237983][T19742] pci 0000:00:01.0: BAR 2 [mem 0x80286000-0x80286fff]: assigned [ 1138.239579][T19742] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1138.257774][T19742] [drm] Found bochs VGA, ID 0xb0c5. [ 1138.257833][T19742] [drm] Framebuffer size 16384 kB @ 0x81000000, mmio @ 0x80286000. [ 1138.294678][T19742] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1138.507767][T19742] Console: switching to colour frame buffer device 160x50 [ 1138.530065][T19742] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1138.575400][T19751] vhci_hcd: connection closed [ 1138.575923][ T13] vhci_hcd vhci_hcd.5: stop threads [ 1138.575980][ T13] vhci_hcd vhci_hcd.5: release socket [ 1138.583931][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 1139.551026][T19774] netlink: 'syz.5.3580': attribute type 10 has an invalid length. [ 1139.626900][ T5836] usb 48-1: device descriptor read/8, error -110 [ 1139.986796][ T43] audit: type=1400 audit(1788484447.059:5425): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F0 [ 1140.040694][ T5836] usb usb48-port1: attempt power cycle [ 1140.383153][T19783] netlink: 'syz.4.3582': attribute type 10 has an invalid length. [ 1140.588712][T19785] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 1140.588752][T19785] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1140.588945][T19785] vhci_hcd vhci_hcd.0: Device attached [ 1140.640245][T19785] rdma_rxe: rxe_newlink: failed to add wg2 [ 1140.641690][T19789] vhci_hcd: connection closed [ 1140.642690][ T13] vhci_hcd vhci_hcd.6: stop threads [ 1140.642761][ T13] vhci_hcd vhci_hcd.6: release socket [ 1140.642808][ T13] vhci_hcd vhci_hcd.6: disconnect device [ 1140.924924][ T5836] usb usb48-port1: unable to enumerate USB device [ 1141.306719][ T43] audit: type=1400 audit(1788484448.379:5426): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 11-1: new high-speed USB device number 65 using dummy_hcd [ 1141.775780][T15392] usb 11-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 1141.780234][T15392] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1141.783866][T15392] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1141.787643][T15392] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.016085][T13792] usb 11-1: USB disconnect, device number 65 [ 1143.016922][T19816] netlink: 'syz.4.3592': attribute type 10 has an invalid length. [ 1143.709900][T19827] netlink: 'syz.4.3594': attribute type 10 has an invalid length. [ 1143.971268][T19825] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1143.971331][T19825] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1143.971534][T19825] vhci_hcd vhci_hcd.0: Device attached [ 1144.067348][T19828] rdma_rxe: rxe_newlink: failed to add wg2 [ 1144.174754][T19829] vhci_hcd: connection closed [ 1144.175471][ T13] vhci_hcd vhci_hcd.5: stop threads [ 1144.181122][ T13] vhci_hcd vhci_hcd.5: release socket [ 1144.181191][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 1145.432485][T19845] FAULT_INJECTION: forcing a failure. [ 1145.432485][T19845] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1145.432540][T19845] CPU: 2 UID: 0 PID: 19845 Comm: syz.5.3599 Tainted: G L syzkaller #0 PREEMPT(full) [ 1145.432575][T19845] Tainted: [L]=SOFTLOCKUP [ 1145.432583][T19845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1145.432591][T19845] Call Trace: [ 1145.432636][T19845] [ 1145.432643][T19845] dump_stack_lvl+0x100/0x190 [ 1145.432712][T19845] should_fail_ex.cold+0x5/0xa [ 1145.432731][T19845] get_futex_key+0x1d0/0x14f0 [ 1145.432754][T19845] ? __pfx_get_futex_key+0x10/0x10 [ 1145.432777][T19845] ? ___sys_sendmsg+0x127/0x1e0 [ 1145.432828][T19845] futex_wake+0xf4/0x5e0 [ 1145.432844][T19845] ? futex_wait+0x11e/0x370 [ 1145.432861][T19845] ? __pfx_futex_wake+0x10/0x10 [ 1145.432880][T19845] ? find_held_lock+0x2b/0x80 [ 1145.432900][T19845] do_futex+0x2b2/0x440 [ 1145.432914][T19845] ? __pfx_do_futex+0x10/0x10 [ 1145.432929][T19845] ? fput+0x7c/0x100 [ 1145.432969][T19845] __ia32_sys_futex_time32+0x2f4/0x470 [ 1145.432987][T19845] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 1145.433008][T19845] __do_fast_syscall_32+0x13a/0x8b0 [ 1145.433051][T19845] do_fast_syscall_32+0x32/0x70 [ 1145.433068][T19845] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1145.433085][T19845] RIP: 0023:0xf704efec [ 1145.433103][T19845] Code: Unable to access opcode bytes at 0xf704efc2. [ 1145.433130][T19845] RSP: 002b:00000000f543d5cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 1145.433143][T19845] RAX: ffffffffffffffda RBX: 00000000f7444f8c RCX: 0000000000000081 [ 1145.433152][T19845] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 1145.433159][T19845] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 1145.433167][T19845] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1145.433177][T19845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1145.433195][T19845] [ 1146.632826][T19859] FAULT_INJECTION: forcing a failure. [ 1146.632826][T19859] name failslab, interval 1, probability 0, space 0, times 0 [ 1146.634606][T19859] CPU: 2 UID: 0 PID: 19859 Comm: syz.5.3604 Tainted: G L syzkaller #0 PREEMPT(full) [ 1146.634646][T19859] Tainted: [L]=SOFTLOCKUP [ 1146.634654][T19859] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1146.634668][T19859] Call Trace: [ 1146.634676][T19859] [ 1146.634684][T19859] dump_stack_lvl+0x100/0x190 [ 1146.634721][T19859] should_fail_ex.cold+0x5/0xa [ 1146.634746][T19859] should_failslab+0xc2/0x120 [ 1146.634769][T19859] __kmalloc_cache_noprof+0x91/0x6d0 [ 1146.634798][T19859] ? fuse_get_tree+0x88/0x490 [ 1146.634829][T19859] fuse_get_tree+0x88/0x490 [ 1146.634851][T19859] vfs_get_tree+0x92/0x320 [ 1146.634875][T19859] path_mount+0x7d0/0x24c0 [ 1146.634907][T19859] ? __pfx_path_mount+0x10/0x10 [ 1146.634933][T19859] ? lockdep_hardirqs_on+0x7d/0x110 [ 1146.634960][T19859] ? putname+0xb1/0x110 [ 1146.634979][T19859] ? kmem_cache_free+0x127/0x6c0 [ 1146.635012][T19859] ? __ia32_sys_mount+0x292/0x310 [ 1146.635036][T19859] __ia32_sys_mount+0x292/0x310 [ 1146.635060][T19859] ? __pfx___ia32_sys_mount+0x10/0x10 [ 1146.635082][T19859] __do_fast_syscall_32+0x13a/0x8b0 [ 1146.635100][T19859] do_fast_syscall_32+0x32/0x70 [ 1146.635116][T19859] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1146.635132][T19859] RIP: 0023:0xf704efec [ 1146.635151][T19859] Code: Unable to access opcode bytes at 0xf704efc2. [ 1146.635158][T19859] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 1146.635179][T19859] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800020c0 [ 1146.635194][T19859] RDX: 0000000080002100 RSI: 0000000000000080 RDI: 00000000800002c0 [ 1146.635208][T19859] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1146.635220][T19859] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1146.635238][T19859] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1146.635263][T19859] [ 1146.889336][T19865] netlink: 'syz.5.3605': attribute type 10 has an invalid length. [ 1146.942362][T19866] rdma_rxe: rxe_newlink: failed to add wg2 [ 1147.578341][T19870] rdma_rxe: rxe_newlink: failed to add wg2 [ 1149.058940][T19886] netlink: 'syz.5.3610': attribute type 10 has an invalid length. [ 1149.941229][T19895] netlink: 'syz.3.3614': attribute type 10 has an invalid length. [ 1150.562346][T19904] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1150.562387][T19904] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1150.563113][T19904] vhci_hcd vhci_hcd.0: Device attached [ 1150.813193][T19904] rdma_rxe: rxe_newlink: failed to add wg2 [ 1150.829648][T19911] FAULT_INJECTION: forcing a failure. [ 1150.829648][T19911] name failslab, interval 1, probability 0, space 0, times 0 [ 1150.829731][T19911] CPU: 2 UID: 0 PID: 19911 Comm: syz.3.3619 Tainted: G L syzkaller #0 PREEMPT(full) [ 1150.829774][T19911] Tainted: [L]=SOFTLOCKUP [ 1150.829783][T19911] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1150.829809][T19911] Call Trace: [ 1150.829818][T19911] [ 1150.829827][T19911] dump_stack_lvl+0x100/0x190 [ 1150.829860][T19911] should_fail_ex.cold+0x5/0xa [ 1150.829886][T19911] should_failslab+0xc2/0x120 [ 1150.829910][T19911] __kmalloc_node_noprof+0xff/0x880 [ 1150.829929][T19911] ? __get_vm_area_node+0x1ff/0x350 [ 1150.829951][T19911] ? __get_vm_area_node+0x22b/0x350 [ 1150.829973][T19911] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 1150.830002][T19911] __vmalloc_node_range_noprof+0x3d4/0x1420 [ 1150.830036][T19911] ? vidtv_mux_init+0x1f9/0xbf0 [ 1150.830069][T19911] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1150.830096][T19911] ? kasan_save_track+0x14/0x30 [ 1150.830116][T19911] ? __kasan_kmalloc+0xaa/0xb0 [ 1150.830138][T19911] ? vidtv_mux_init+0x1f9/0xbf0 [ 1150.830162][T19911] __vmalloc_node_noprof+0xad/0xf0 [ 1150.830186][T19911] ? vidtv_mux_init+0x1f9/0xbf0 [ 1150.830212][T19911] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 1150.830235][T19911] vidtv_mux_init+0x1f9/0xbf0 [ 1150.830266][T19911] vidtv_start_feed+0x34e/0x500 [ 1150.830286][T19911] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1150.830307][T19911] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 1150.830341][T19911] dmx_section_feed_start_filtering+0x3a8/0x660 [ 1150.830372][T19911] dvb_dmxdev_filter_start+0x767/0xdd0 [ 1150.830398][T19911] dvb_demux_do_ioctl+0xe64/0x1200 [ 1150.830425][T19911] dvb_usercopy+0x167/0x340 [ 1150.830452][T19911] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1150.830473][T19911] ? __pfx_dvb_usercopy+0x10/0x10 [ 1150.830498][T19911] ? __fget_files+0x34/0x3d0 [ 1150.830528][T19911] ? __fget_files+0x21f/0x3d0 [ 1150.830552][T19911] dvb_demux_ioctl+0x29/0x40 [ 1150.830579][T19911] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1150.830605][T19911] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1150.830644][T19911] __do_fast_syscall_32+0x13a/0x8b0 [ 1150.830674][T19911] ? lockdep_hardirqs_on+0x7d/0x110 [ 1150.830701][T19911] do_fast_syscall_32+0x32/0x70 [ 1150.830728][T19911] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1150.830752][T19911] RIP: 0023:0xf7f62fec [ 1150.830772][T19911] Code: Unable to access opcode bytes at 0xf7f62fc2. [ 1150.830781][T19911] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1150.830801][T19911] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000403c6f2b [ 1150.830814][T19911] RDX: 0000000080001e40 RSI: 0000000000000000 RDI: 0000000000000000 [ 1150.830825][T19911] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1150.830837][T19911] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1150.830850][T19911] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1150.830876][T19911] [ 1150.833188][T19911] syz.3.3619: vmalloc error: size 94208, failed to allocated page array size 184, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1150.833288][T19911] CPU: 2 UID: 0 PID: 19911 Comm: syz.3.3619 Tainted: G L syzkaller #0 PREEMPT(full) [ 1150.833318][T19911] Tainted: [L]=SOFTLOCKUP [ 1150.833325][T19911] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1150.833337][T19911] Call Trace: [ 1150.833344][T19911] [ 1150.833353][T19911] dump_stack_lvl+0x100/0x190 [ 1150.833384][T19911] warn_alloc.cold+0x9e/0xb2 [ 1150.833406][T19911] ? __pfx_warn_alloc+0x10/0x10 [ 1150.833435][T19911] ? dump_stack_lvl+0x17c/0x190 [ 1150.833459][T19911] ? rcu_is_watching+0x13/0xc0 [ 1150.833502][T19911] ? __kasan_kmalloc+0x8a/0xb0 [ 1150.833530][T19911] ? __kmalloc_node_noprof+0x360/0x880 [ 1150.833551][T19911] ? __get_vm_area_node+0x1ff/0x350 [ 1150.833577][T19911] ? __get_vm_area_node+0x22b/0x350 [ 1150.833602][T19911] ? __vmalloc_node_range_noprof+0x3d4/0x1420 [ 1150.833639][T19911] __vmalloc_node_range_noprof+0x10f4/0x1420 [ 1150.833674][T19911] ? vidtv_mux_init+0x1f9/0xbf0 [ 1150.833711][T19911] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1150.833742][T19911] ? kasan_save_track+0x14/0x30 [ 1150.833763][T19911] ? __kasan_kmalloc+0xaa/0xb0 [ 1150.833786][T19911] ? vidtv_mux_init+0x1f9/0xbf0 [ 1150.833816][T19911] __vmalloc_node_noprof+0xad/0xf0 [ 1150.833843][T19911] ? vidtv_mux_init+0x1f9/0xbf0 [ 1150.833869][T19911] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 1150.833893][T19911] vidtv_mux_init+0x1f9/0xbf0 [ 1150.833922][T19911] vidtv_start_feed+0x34e/0x500 [ 1150.833944][T19911] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1150.833964][T19911] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 1150.833999][T19911] dmx_section_feed_start_filtering+0x3a8/0x660 [ 1150.834031][T19911] dvb_dmxdev_filter_start+0x767/0xdd0 [ 1150.834057][T19911] dvb_demux_do_ioctl+0xe64/0x1200 [ 1150.834086][T19911] dvb_usercopy+0x167/0x340 [ 1150.834112][T19911] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1150.834133][T19911] ? __pfx_dvb_usercopy+0x10/0x10 [ 1150.834157][T19911] ? __fget_files+0x34/0x3d0 [ 1150.834188][T19911] ? __fget_files+0x21f/0x3d0 [ 1150.834212][T19911] dvb_demux_ioctl+0x29/0x40 [ 1150.834239][T19911] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1150.834265][T19911] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1150.834296][T19911] __do_fast_syscall_32+0x13a/0x8b0 [ 1150.834321][T19911] ? lockdep_hardirqs_on+0x7d/0x110 [ 1150.834345][T19911] do_fast_syscall_32+0x32/0x70 [ 1150.834377][T19911] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1150.834399][T19911] RIP: 0023:0xf7f62fec [ 1150.834420][T19911] Code: Unable to access opcode bytes at 0xf7f62fc2. [ 1150.834429][T19911] RSP: 002b:00000000f542650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1150.834447][T19911] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000403c6f2b [ 1150.834458][T19911] RDX: 0000000080001e40 RSI: 0000000000000000 RDI: 0000000000000000 [ 1150.834470][T19911] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1150.834483][T19911] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1150.834496][T19911] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1150.834523][T19911] [ 1150.840317][T19911] Mem-Info: [ 1150.840335][T19911] active_anon:544 inactive_anon:6896 isolated_anon:0 [ 1150.840335][T19911] active_file:4221 inactive_file:1946 isolated_file:0 [ 1150.840335][T19911] unevictable:1000 dirty:50 writeback:0 [ 1150.840335][T19911] slab_reclaimable:6634 slab_unreclaimable:79858 [ 1150.840335][T19911] mapped:28321 shmem:6720 pagetables:1566 [ 1150.840335][T19911] sec_pagetables:382 bounce:0 [ 1150.840335][T19911] kernel_misc_reclaimable:0 [ 1150.840335][T19911] free:23646 free_pcp:9380 free_cma:0 [ 1150.840398][T19911] Node 0 active_anon:0kB inactive_anon:128kB active_file:756kB inactive_file:2744kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:468kB dirty:32kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7904kB pagetables:1132kB sec_pagetables:1148kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1150.840460][T19911] Node 1 active_anon:2176kB inactive_anon:27456kB active_file:16128kB inactive_file:5040kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:112816kB dirty:168kB writeback:0kB shmem:26880kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6640kB pagetables:5132kB sec_pagetables:380kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1150.840522][T19911] Node 0 DMA free:2532kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:24kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:72kB local_pcp:8kB free_cma:0kB [ 1150.840587][T19911] lowmem_reserve[]: 0 278 278 278 278 [ 1150.840628][T19911] Node 0 DMA32 free:22504kB boost:28408kB min:41036kB low:44192kB high:47348kB reserved_highatomic:2048kB free_highatomic:504kB active_anon:0kB inactive_anon:104kB active_file:756kB inactive_file:2744kB unevictable:0kB writepending:32kB zspages:4kB present:1032196kB managed:284672kB mlocked:0kB bounce:0kB free_pcp:12296kB local_pcp:3708kB free_cma:0kB [ 1150.840706][T19911] lowmem_reserve[]: 0 0 0 0 0 [ 1150.840749][T19911] Node 1 DMA32 free:69548kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0kB free_highatomic:0kB active_anon:2176kB inactive_anon:27456kB active_file:16128kB inactive_file:5040kB unevictable:4000kB writepending:168kB zspages:1744kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:25152kB local_pcp:4040kB free_cma:0kB [ 1150.840816][T19911] lowmem_reserve[]: 0 0 0 0 0 [ 1150.840856][T19911] Node 0 DMA: 73*4kB (UM) 16*8kB (UM) 12*16kB (UM) 12*32kB (UM) 2*64kB (UM) 3*128kB (M) 2*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2532kB [ 1150.841024][T19911] Node 0 DMA32: 626*4kB (UMEH) 116*8kB (UMEH) 44*16kB (UMEH) 72*32kB (UEH) 37*64kB (UMEH) 35*128kB (UME) 14*256kB (UM) 7*512kB (UM) 0*1024kB 1*2048kB (M) 0*4096kB = 22504kB [ 1150.841202][T19911] Node 1 DMA32: 156*4kB (U) 418*8kB (UE) 231*16kB (UME) 258*32kB (UME) 97*64kB (UME) 56*128kB (UME) 33*256kB (UME) 12*512kB (UME) 5*1024kB (UME) 4*2048kB (UM) 3*4096kB (U) = 69488kB [ 1150.841506][T19911] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1150.841528][T19911] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1150.841548][T19911] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1150.841568][T19911] Node 1 hugepages_total=6 hugepages_free=2 hugepages_surp=4 hugepages_size=2048kB [ 1150.841587][T19911] 13360 total pagecache pages [ 1150.841596][T19911] 475 pages in swap cache [ 1150.841605][T19911] Free swap = 41292kB [ 1150.841620][T19911] Total swap = 124996kB [ 1150.841630][T19911] 524155 pages RAM [ 1150.841645][T19911] 0 pages HighMem/MovableOnly [ 1150.841654][T19911] 212095 pages reserved [ 1150.841663][T19911] 0 pages cma reserved [ 1150.857765][T19907] rdma_rxe: rxe_newlink: failed to add wg2 [ 1150.884423][ T50] usb 48-1: SetAddress Request (108) to port 0 [ 1150.884491][ T50] usb 48-1: new SuperSpeed USB device number 108 using vhci_hcd [ 1151.289871][T19905] vhci_hcd: connection reset by peer [ 1151.290251][ T13] vhci_hcd vhci_hcd.5: stop threads [ 1151.290275][ T13] vhci_hcd vhci_hcd.5: release socket [ 1151.290321][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 1153.075317][T19942] netlink: 'syz.3.3627': attribute type 10 has an invalid length. [ 1153.244426][ T76] usb 10-1: new high-speed USB device number 94 using dummy_hcd [ 1153.395623][ T76] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1153.395717][ T76] usb 10-1: too many configurations: 13, using maximum allowed: 8 [ 1153.398675][ T76] usb 10-1: config 0 has no interfaces? [ 1153.399684][ T76] usb 10-1: config 0 has no interfaces? [ 1153.400558][ T76] usb 10-1: config 0 has no interfaces? [ 1153.401244][ T76] usb 10-1: config 0 has no interfaces? [ 1153.402176][ T76] usb 10-1: config 0 has no interfaces? [ 1153.403176][ T76] usb 10-1: config 0 has no interfaces? [ 1153.404799][ T76] usb 10-1: config 0 has no interfaces? [ 1153.406319][ T76] usb 10-1: config 0 has no interfaces? [ 1153.409208][ T76] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.409235][ T76] usb 10-1: Product: syz [ 1153.409250][ T76] usb 10-1: Manufacturer: syz [ 1153.409265][ T76] usb 10-1: SerialNumber: syz [ 1153.412508][ T76] usb 10-1: config 0 descriptor?? [ 1153.472402][T19946] rdma_rxe: rxe_newlink: failed to add wg2 [ 1153.623126][T19940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1153.623580][T19940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1153.638800][ T76] usb 10-1: USB disconnect, device number 94 [ 1154.058100][T19959] netlink: 'syz.6.3633': attribute type 10 has an invalid length. [ 1154.338849][ T76] usb 10-1: new high-speed USB device number 95 using dummy_hcd [ 1154.541013][ T76] usb 10-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1154.546211][ T76] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1154.546772][ T76] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1154.547569][ T76] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1154.585906][ T76] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.586673][ T76] usb 10-1: Product: syz [ 1154.586940][ T76] usb 10-1: Manufacturer: syz [ 1154.587321][ T76] usb 10-1: SerialNumber: syz [ 1154.642154][ T76] usb 10-1: config 0 descriptor?? [ 1154.951638][ T76] adutux 10-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1155.333152][T15392] usb 10-1: USB disconnect, device number 95 [ 1155.834525][T19986] netlink: 'syz.4.3640': attribute type 10 has an invalid length. [ 1155.954002][ T50] usb 48-1: device descriptor read/8, error -110 [ 1155.970285][T19990] netlink: 'syz.5.3642': attribute type 10 has an invalid length. [ 1156.130363][T19993] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3643'. [ 1156.137954][T19995] rdma_rxe: rxe_newlink: failed to add wg2 [ 1156.346148][ T50] usb usb48-port1: attempt power cycle [ 1156.449014][T19997] mac80211_hwsim hwsim12 syzkaller0: left promiscuous mode [ 1156.449139][T19997] mac80211_hwsim hwsim12 syzkaller0: left allmulticast mode [ 1156.995533][ T50] usb usb48-port1: unable to enumerate USB device [ 1157.616273][T20014] netlink: 'syz.6.3651': attribute type 10 has an invalid length. [ 1157.773708][T20016] Console: switching to colour dummy device 80x25 [ 1157.823118][T20019] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1157.839388][T20019] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref] [ 1157.839545][T20019] pci 0000:00:01.0: BAR 2 [mem 0x80286000-0x80286fff] [ 1157.839782][T20019] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1157.840179][T20019] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1157.849148][T20019] pci 0000:00:01.0: Adding to iommu group 1 [ 1157.851589][T20019] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1157.851605][T20019] pci 0000:00:01.0: vgaarb: bridge control possible [ 1157.851614][T20019] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1157.861132][T20019] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref]: assigned [ 1157.861296][T20019] pci 0000:00:01.0: BAR 2 [mem 0x80286000-0x80286fff]: assigned [ 1157.862706][T20019] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1157.871497][T20019] [drm] Found bochs VGA, ID 0xb0c5. [ 1157.871515][T20019] [drm] Framebuffer size 16384 kB @ 0x81000000, mmio @ 0x80286000. [ 1157.881297][T20019] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1158.030197][T20019] Console: switching to colour frame buffer device 160x50 [ 1158.049615][T20019] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1158.158063][T20028] netlink: 'syz.3.3654': attribute type 10 has an invalid length. [ 1160.285359][T20055] rdma_rxe: rxe_newlink: failed to add wg2 [ 1160.439083][ T43] audit: type=1400 audit(1788484467.511:5427): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F0 [ 1160.643867][T15392] usb 11-1: new high-speed USB device number 66 using dummy_hcd [ 1160.682766][ T76] usb 10-1: new high-speed USB device number 96 using dummy_hcd [ 1160.835030][T15392] usb 11-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 1160.840224][T15392] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1160.840296][T15392] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1160.840389][T15392] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.852534][ T76] usb 10-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 1160.862975][ T76] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1160.863128][ T76] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1160.863153][ T76] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.075563][ T76] usb 11-1: USB disconnect, device number 66 [ 1161.111479][T13792] usb 10-1: USB disconnect, device number 96 [ 1161.702278][T20062] netlink: 'syz.3.3664': attribute type 10 has an invalid length. [ 1161.783629][ T43] audit: type=1400 audit(1788484468.831:5428): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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onsole: switching to colour dummy device 80x25 [ 1162.067575][T14776] usb 10-1: new high-speed USB device number 97 using dummy_hcd [ 1162.106329][T20071] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1162.124443][T20071] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref] [ 1162.124663][T20071] pci 0000:00:01.0: BAR 2 [mem 0x80286000-0x80286fff] [ 1162.124976][T20071] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1162.125587][T20071] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1162.156366][T20071] pci 0000:00:01.0: Adding to iommu group 1 [ 1162.165625][T20071] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1162.165666][T20071] pci 0000:00:01.0: vgaarb: bridge control possible [ 1162.165683][T20071] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1162.184824][T20071] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref]: assigned [ 1162.188874][T20071] pci 0000:00:01.0: BAR 2 [mem 0x80286000-0x80286fff]: assigned [ 1162.194807][T20071] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1162.207744][T20071] [drm] Found bochs VGA, ID 0xb0c5. [ 1162.210398][T20071] [drm] Framebuffer size 16384 kB @ 0x81000000, mmio @ 0x80286000. [ 1162.213194][T20078] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 1162.213222][T20078] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1162.215472][T20078] vhci_hcd vhci_hcd.0: Device attached [ 1162.215653][T14776] usb 10-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 1162.217038][T14776] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1162.217059][T14776] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1162.217087][T14776] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.309899][T20071] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1162.391200][T20078] rdma_rxe: rxe_newlink: failed to add wg2 [ 1162.459698][T14776] usb 10-1: USB disconnect, device number 97 [ 1162.497879][T20071] Console: switching to colour frame buffer device 160x50 [ 1162.530163][T20071] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1162.573689][ T50] usb 50-1: SetAddress Request (76) to port 0 [ 1162.573903][ T50] usb 50-1: new SuperSpeed USB device number 76 using vhci_hcd [ 1162.779028][T20079] vhci_hcd: connection reset by peer [ 1162.779629][ T13] vhci_hcd vhci_hcd.6: stop threads [ 1162.779658][ T13] vhci_hcd vhci_hcd.6: release socket [ 1162.779785][ T13] vhci_hcd vhci_hcd.6: disconnect device [ 1164.369234][T20107] sch_tbf: burst 32855 is lower than device lo mtu (65499) ! [ 1164.403843][T15392] usb 10-1: new high-speed USB device number 98 using dummy_hcd [ 1164.503837][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.559324][T15392] usb 10-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 1164.569540][T15392] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1164.572888][T15392] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1164.575021][T15392] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.908998][T14776] usb 10-1: USB disconnect, device number 98 [ 1165.417008][T20116] Console: switching to colour dummy device 80x25 [ 1165.923048][T20118] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1165.969474][T20118] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref] [ 1165.978942][T20118] pci 0000:00:01.0: BAR 2 [mem 0x80286000-0x80286fff] [ 1165.991952][T20118] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1166.007475][T20118] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1166.014612][T20118] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 11482 usecs [ 1167.195441][T20118] pci 0000:00:01.0: Adding to iommu group 1 [ 1167.226888][T20118] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1167.226915][T20118] pci 0000:00:01.0: vgaarb: bridge control possible [ 1167.226924][T20118] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1167.231969][T20118] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref]: assigned [ 1167.232124][T20118] pci 0000:00:01.0: BAR 2 [mem 0x80286000-0x80286fff]: assigned [ 1167.233510][T20118] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1167.241965][T20118] [drm] Found bochs VGA, ID 0xb0c5. [ 1167.241989][T20118] [drm] Framebuffer size 16384 kB @ 0x81000000, mmio @ 0x80286000. [ 1167.248008][T20118] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1167.289349][T20131] netlink: 'syz.4.3684': attribute type 10 has an invalid length. [ 1167.615664][T20139] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1167.615731][T20139] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1167.616253][T20139] vhci_hcd vhci_hcd.0: Device attached [ 1167.634992][ T50] usb 50-1: device descriptor read/8, error -110 [ 1167.793467][T20142] syz2: rxe_newlink: already configured on wg2 [ 1167.883373][ T5797] usb 44-1: SetAddress Request (94) to port 0 [ 1167.883474][ T5797] usb 44-1: new SuperSpeed USB device number 94 using vhci_hcd [ 1167.886714][T20118] Console: switching to colour frame buffer device 160x50 [ 1168.034963][ T50] usb usb50-port1: attempt power cycle [ 1168.155720][T20118] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1168.435252][T20140] vhci_hcd: connection reset by peer [ 1168.438134][ T5837] vhci_hcd vhci_hcd.3: stop threads [ 1168.438163][ T5837] vhci_hcd vhci_hcd.3: release socket [ 1168.438211][ T5837] vhci_hcd vhci_hcd.3: disconnect device [ 1168.694613][ T50] usb usb50-port1: unable to enumerate USB device [ 1168.785466][T20151] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1168.785534][T20151] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1168.786976][T20151] vhci_hcd vhci_hcd.0: Device attached [ 1168.977251][T20157] rdma_rxe: rxe_newlink: failed to add wg2 [ 1169.090802][T20160] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 1169.090845][T20160] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1169.091532][T20160] vhci_hcd vhci_hcd.0: Device attached [ 1169.208813][ T50] usb 48-1: SetAddress Request (112) to port 0 [ 1169.208979][ T50] usb 48-1: new SuperSpeed USB device number 112 using vhci_hcd [ 1169.433808][T20160] rdma_rxe: rxe_newlink: failed to add wg2 [ 1169.483617][ T5836] usb 50-1: SetAddress Request (80) to port 0 [ 1169.483760][ T5836] usb 50-1: new SuperSpeed USB device number 80 using vhci_hcd [ 1169.552876][T20154] vhci_hcd: connection reset by peer [ 1169.562204][ T5819] vhci_hcd vhci_hcd.5: stop threads [ 1169.562285][ T5819] vhci_hcd vhci_hcd.5: release socket [ 1169.562442][ T5819] vhci_hcd vhci_hcd.5: disconnect device [ 1169.790705][T20168] netlink: 'syz.4.3692': attribute type 10 has an invalid length. [ 1169.817401][T20163] vhci_hcd: connection reset by peer [ 1169.817818][ T5819] vhci_hcd vhci_hcd.6: stop threads [ 1169.817845][ T5819] vhci_hcd vhci_hcd.6: release socket [ 1169.817957][ T5819] vhci_hcd vhci_hcd.6: disconnect device [ 1171.560973][T20196] netlink: 'syz.6.3695': attribute type 10 has an invalid length. [ 1172.624533][T20209] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1172.624565][T20209] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1172.625060][T20209] vhci_hcd vhci_hcd.0: Device attached [ 1172.816583][T20206] syz2: rxe_newlink: already configured on wg2 [ 1172.824219][T20210] vhci_hcd: connection closed [ 1172.824819][ T5837] vhci_hcd vhci_hcd.3: stop threads [ 1172.831130][T20212] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1172.831152][T20212] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1172.831532][T20212] vhci_hcd vhci_hcd.0: Device attached [ 1172.831742][ T5837] vhci_hcd vhci_hcd.3: release socket [ 1172.831813][ T5837] vhci_hcd vhci_hcd.3: disconnect device [ 1172.872222][T20212] rdma_rxe: rxe_newlink: failed to add wg2 [ 1172.993943][ T5797] usb 44-1: device descriptor read/8, error -110 [ 1173.411671][T20215] vhci_hcd: connection closed [ 1173.413146][ T5819] vhci_hcd vhci_hcd.5: stop threads [ 1173.417671][ T5819] vhci_hcd vhci_hcd.5: release socket [ 1173.421546][ T5819] vhci_hcd vhci_hcd.5: disconnect device [ 1173.440595][T20219] rdma_rxe: rxe_newlink: failed to add wg2 [ 1173.490636][T20225] netlink: 'syz.3.3706': attribute type 10 has an invalid length. [ 1173.792112][ T5797] usb usb44-port1: attempt power cycle [ 1174.287604][ T50] usb 48-1: device descriptor read/8, error -110 [ 1174.332005][T20232] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3707'. [ 1174.504942][ T5797] usb usb44-port1: unable to enumerate USB device [ 1174.584164][ T5836] usb 50-1: device descriptor read/8, error -110 [ 1174.686555][ T50] usb usb48-port1: attempt power cycle [ 1174.985273][ T5836] usb usb50-port1: attempt power cycle [ 1175.167779][ T5923] device offline error, dev sda, sector 590134 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 1175.167923][ T5923] EXT4-fs warning (device sda1): ext4_end_bio:360: I/O error 16 writing to inode 2029 starting block 73766) [ 1175.168118][ T5923] Buffer I/O error on device sda1, logical block 73728 [ 1175.169001][ T5923] device offline error, dev sda, sector 598174 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 1175.169026][ T5923] EXT4-fs warning (device sda1): ext4_end_bio:360: I/O error 16 writing to inode 2029 starting block 74771) [ 1175.169047][ T5923] Buffer I/O error on device sda1, logical block 74733 [ 1175.169068][ T5923] Buffer I/O error on device sda1, logical block 74734 [ 1175.169098][ T5923] Buffer I/O error on device sda1, logical block 74735 [ 1175.169265][ T5923] Buffer I/O error on device sda1, logical block 74736 [ 1175.169447][ T5923] Buffer I/O error on device sda1, logical block 74737 [ 1175.169632][ T5923] Buffer I/O error on device sda1, logical block 74738 [ 1175.169814][ T5923] Buffer I/O error on device sda1, logical block 74739 [ 1175.170086][ T5923] Buffer I/O error on device sda1, logical block 74740 [ 1175.170103][ T5923] Buffer I/O error on device sda1, logical block 74741 [ 1175.171634][ T5923] device offline error, dev sda, sector 602262 op 0x1:(WRITE) flags 0x0 phys_seg 20 prio class 2 [ 1175.171690][ T5923] EXT4-fs warning (device sda1): ext4_end_bio:360: I/O error 16 writing to inode 2029 starting block 75282) [ 1175.182228][ T5923] device offline error, dev sda, sector 622902 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 1175.182485][ T5923] EXT4-fs warning (device sda1): ext4_end_bio:360: I/O error 16 writing to inode 2027 starting block 77862) [ 1175.183765][ T5923] device offline error, dev sda, sector 631030 op 0x1:(WRITE) flags 0x0 phys_seg 8 prio class 2 [ 1175.183858][ T5923] EXT4-fs warning (device sda1): ext4_end_bio:360: I/O error 16 writing to inode 2027 starting block 78878) [ 1175.185610][ T5923] device offline error, dev sda, sector 541014 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 1175.185694][ T5923] EXT4-fs warning (device sda1): ext4_end_bio:360: I/O error 16 writing to inode 2021 starting block 67626) [ 1175.186150][ T5923] device offline error, dev sda, sector 541054 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 1175.186366][ T5923] EXT4-fs warning (device sda1): ext4_end_bio:360: I/O error 16 writing to inode 2021 starting block 67631) [ 1175.187212][ T5923] device offline error, dev sda, sector 541078 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 1175.187266][ T5923] EXT4-fs warning (device sda1): ext4_end_bio:360: I/O error 16 writing to inode 2021 starting block 67634) [ 1175.211721][ T5923] device offline error, dev sda, sector 541150 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 1175.211790][ T5923] EXT4-fs warning (device sda1): ext4_end_bio:360: I/O error 16 writing to inode 2021 starting block 67643) [ 1175.212733][ T5923] device offline error, dev sda, sector 541334 op 0x1:(WRITE) flags 0x0 phys_seg 3 prio class 2 [ 1175.214445][ T5923] EXT4-fs warning (device sda1): ext4_end_bio:360: I/O error 16 writing to inode 2021 starting block 67666) [ 1175.311749][ T50] usb usb48-port1: unable to enumerate USB device [ 1175.396574][ T1132] ata2: SATA link down (SStatus 0 SControl 300) [ 1175.417415][ T1123] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 1175.421618][ T1123] ata1.00: configured for UDMA/100 [ 1175.447991][ T1137] ata3: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 1175.456823][ T1137] ata3.00: configured for UDMA/100 [ 1175.614247][ T5836] usb usb50-port1: unable to enumerate USB device [ 1175.647906][ T5108] Aborting journal on device sda1-8. [ 1175.651011][T12337] buffer_io_error: 18 callbacks suppressed [ 1175.651033][T12337] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 1175.657294][T20237] EXT4-fs error (device sda1): ext4_journal_check_start:94: comm syz.5.3709: Detected aborted journal [ 1175.665579][ T5108] JBD2: I/O error when updating journal superblock for sda1-8. [ 1175.673842][T20239] EXT4-fs error (device sda1): ext4_journal_check_start:94: comm syz.6.3710: Detected aborted journal [ 1175.721163][ T5923] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 1175.723567][T20239] EXT4-fs (sda1): previous I/O error to superblock detected [ 1175.730930][ T5923] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 1175.731190][T20239] EXT4-fs (sda1): I/O error while writing superblock [ 1175.731223][T20239] EXT4-fs (sda1): Remounting filesystem read-only [ 1175.791874][T11112] Read-error on swap-device (8:0:516182) [ 1175.863539][T10850] Read-error on swap-device (8:0:364134) [ 1175.888507][T20241] EXT4-fs (sda1): shut down requested (2) [ 1175.908145][ T5726] Read-error on swap-device (8:0:332990) [ 1175.908919][ T5923] Read-error on swap-device (8:0:333014) [ 1175.909235][ T5923] Read-error on swap-device (8:0:313854) [ 1175.939843][T11112] Read-error on swap-device (8:0:356918) [ 1175.967225][ T5148] Read-error on swap-device (8:0:364766) [ 1175.979645][ T5724] Read-error on sw ** replaying previous printk message ** [ 1175.979645][ T5724] Read-error on swap-device (8:0:418030) Connection to localhost closed by remote host. [ 1175.979906][ T5724] Read-error on swap-device (8:0:487638) [ 1175.981669][T13167] get_swap_device: Bad swap file entry 7c00000000000002 [ 1175.981867][T13167] ------------[ cut here ]------------ [ 1175.981876][T13167] !si [ 1175.981882][T13167] WARNING: mm/swapfile.c:2130 at swap_put_entries_direct+0x17d/0x1b0, CPU#1: udevd/13167 [ 1176.003591][T13167] Modules linked in: [ 1176.005876][T13167] CPU: 1 UID: 0 PID: 13167 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 1176.011146][T13167] Tainted: [L]=SOFTLOCKUP [ 1176.011973][ T5727] Read-error on swap-device (8:0:330270) [ 1176.015919][T13167] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1176.020416][T13167] RIP: 0010:swap_put_entries_direct+0x17d/0x1b0 [ 1176.023478][T13167] Code: 00 00 00 00 48 8b 44 24 58 65 48 2b 05 64 fa 15 12 75 3b 48 83 c4 60 5b 5d 41 5c 41 5d 41 5e c3 cc cc cc cc e8 74 a6 95 ff 90 <0f> 0b 90 eb be e8 69 a6 95 ff 90 0f 0b 90 eb a6 e8 5e bf 07 00 e9 [ 1176.031054][T13167] RSP: 0018:ffffc90004d9f628 EFLAGS: 00010293 [ 1176.033820][T13167] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 1176.037461][T13167] RDX: ffff888049448000 RSI: ffffffff827595bc RDI: fffff520009b3ea4 [ 1176.040658][T13167] RBP: 0000000000000003 R08: 0000000000000007 R09: 0000000000000000 [ 1176.044331][T13167] R10: 8000000000000000 R11: 0000000000000001 R12: 0000000000000002 [ 1176.047911][T13167] R13: 0000000000000000 R14: 1ffff920009b3ec5 R15: ffffc90004d9f6e0 [ 1176.051393][T13167] FS: 00007fcd01ba2880(0000) GS:ffff888096a67000(0000) knlGS:0000000000000000 [ 1176.055367][T13167] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1176.058625][T13167] CR2: 00000000f740d2a8 CR3: 00000000703ea000 CR4: 0000000000352ef0 [ 1176.062350][T13167] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1176.065989][T13167] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1176.069465][T13167] Call Trace: [ 1176.070916][T13167] [ 1176.072287][T13167] ? __pfx_swap_put_entries_direct+0x10/0x10 [ 1176.075145][T13167] ? mark_held_locks+0x40/0x70 [ 1176.077214][T13167] ? _raw_spin_unlock_irq+0x23/0x50 [ 1176.079810][T13167] shmem_free_swap+0x1f4/0x200 [ 1176.082569][T13167] ? __pfx_shmem_free_swap+0x10/0x10 [ 1176.085577][T13167] shmem_undo_range+0x3fd/0x1570 [ 1176.087718][T13167] ? __pfx_shmem_undo_range+0x10/0x10 [ 1176.090197][T13167] ? kernel_text_address+0x8d/0x100 [ 1176.092450][T13167] ? __kernel_text_address+0xd/0x30 [ 1176.102006][T13167] ? unwind_get_return_address+0x59/0xa0 [ 1176.104955][T13167] ? arch_stack_walk+0xa6/0xf0 [ 1176.107033][T13167] ? kasan_save_stack+0x3f/0x50 [ 1176.109289][T13167] ? kasan_record_aux_stack+0xa7/0xc0 [ 1176.111556][T13167] shmem_evict_inode+0x3b1/0xca0 [ 1176.113872][T13167] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1176.116206][T13167] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 1176.118925][T13167] ? lock_acquire+0x1d1/0x380 [ 1176.121347][T13167] ? find_held_lock+0x2b/0x80 [ 1176.124195][T13167] ? evict+0x37e/0xad0 [ 1176.126186][T13167] ? evict+0x37e/0xad0 [ 1176.128016][T13167] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1176.130408][T13167] evict+0x3c2/0xad0 [ 1176.132153][T13167] ? __pfx_evict+0x10/0x10 [ 1176.134268][T13167] ? lock_acquire+0x1d1/0x380 [ 1176.136578][T13167] ? iput.part.0+0x981/0x1050 [ 1176.138984][T13167] iput.part.0+0x989/0x1050 [ 1176.141256][T13167] iput+0x35/0x40 [ 1176.142982][T13167] filename_unlinkat+0x466/0x730 [ 1176.145149][T13167] ? __pfx_filename_unlinkat+0x10/0x10 [ 1176.147453][T13167] ? do_getname+0x191/0x390 [ 1176.149426][T13167] __x64_sys_unlink+0x46/0x70 [ 1176.151766][T13167] do_syscall_64+0x121/0x770 [ 1176.154573][T13167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1176.157286][T13167] RIP: 0033:0x7fcd01515937 [ 1176.159357][T13167] Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8 [ 1176.167622][T13167] RSP: 002b:00007ffc4214fcf8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 1176.171203][T13167] RAX: ffffffffffffffda RBX: 00007ffc4214fd00 RCX: 00007fcd01515937 [ 1176.174627][T13167] RDX: 0000000000000000 RSI: 00000000000003ed RDI: 00007ffc4214fd00 [ 1176.178102][T13167] RBP: 000055f191cfee00 R08: 0000000000000000 R09: 0000000000000000 [ 1176.181678][T13167] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000aba9500 [ 1176.185642][T13167] R13: 0000000003938700 R14: 000055f18779e100 R15: 000055f18779e140 [ 1176.189188][T13167] [ 1176.190625][T13167] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1176.193752][T13167] CPU: 1 UID: 0 PID: 13167 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 1176.197670][T13167] Tainted: [L]=SOFTLOCKUP [ 1176.199453][T13167] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1176.203886][T13167] Call Trace: [ 1176.205463][T13167] [ 1176.206759][T13167] dump_stack_lvl+0x100/0x190 [ 1176.208952][T13167] vpanic+0x553/0x970 [ 1176.210680][T13167] ? __pfx_vpanic+0x10/0x10 [ 1176.212599][T13167] panic+0xd1/0xe0 [ 1176.214229][T13167] ? __pfx_panic+0x10/0x10 [ 1176.216126][T13167] check_panic_on_warn.cold+0x19/0x34 [ 1176.218632][T13167] ? swap_put_entries_direct+0x17d/0x1b0 [ 1176.221766][T13167] __warn.cold+0x191/0x318 [ 1176.224367][T13167] __report_bug+0x30f/0x440 [ 1176.226509][T13167] ? swap_put_entries_direct+0x17d/0x1b0 [ 1176.228808][T13167] ? __pfx___report_bug+0x10/0x10 [ 1176.230936][T13167] ? __pfx_vprintk_emit+0x10/0x10 [ 1176.233053][T13167] ? ___ratelimit+0x642/0xae0 [ 1176.235235][T13167] ? find_held_lock+0x2b/0x80 [ 1176.237053][T13167] ? _printk+0xcf/0x110 [ 1176.238743][T13167] ? swap_put_entries_direct+0x17d/0x1b0 [ 1176.241319][T13167] report_bug+0xb3/0x220 [ 1176.243171][T13167] ? swap_put_entries_direct+0x17d/0x1b0 [ 1176.245942][T13167] handle_bug+0x16a/0x2a0 [ 1176.248375][T13167] exc_invalid_op+0x17/0x50 [ 1176.250821][T13167] asm_exc_invalid_op+0x1a/0x20 [ 1176.253077][T13167] RIP: 0010:swap_put_entries_direct+0x17d/0x1b0 [ 1176.255822][T13167] Code: 00 00 00 00 48 8b 44 24 58 65 48 2b 05 64 fa 15 12 75 3b 48 83 c4 60 5b 5d 41 5c 41 5d 41 5e c3 cc cc cc cc e8 74 a6 95 ff 90 <0f> 0b 90 eb be e8 69 a6 95 ff 90 0f 0b 90 eb a6 e8 5e bf 07 00 e9 [ 1176.264331][T13167] RSP: 0018:ffffc90004d9f628 EFLAGS: 00010293 [ 1176.267659][T13167] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 1176.272029][T13167] RDX: ffff888049448000 RSI: ffffffff827595bc RDI: fffff520009b3ea4 [ 1176.275693][T13167] RBP: 0000000000000003 R08: 0000000000000007 R09: 0000000000000000 [ 1176.279130][T13167] R10: 8000000000000000 R11: 0000000000000001 R12: 0000000000000002 [ 1176.282921][T13167] R13: 0000000000000000 R14: 1ffff920009b3ec5 R15: ffffc90004d9f6e0 [ 1176.286601][T13167] ? swap_put_entries_direct+0x17c/0x1b0 [ 1176.289068][T13167] ? swap_put_entries_direct+0x17c/0x1b0 [ 1176.291409][T13167] ? __pfx_swap_put_entries_direct+0x10/0x10 [ 1176.293929][T13167] ? mark_held_locks+0x40/0x70 [ 1176.296238][T13167] ? _raw_spin_unlock_irq+0x23/0x50 [ 1176.298693][T13167] shmem_free_swap+0x1f4/0x200 [ 1176.300951][T13167] ? __pfx_shmem_free_swap+0x10/0x10 [ 1176.303088][T13167] shmem_undo_range+0x3fd/0x1570 [ 1176.305208][T13167] ? __pfx_shmem_undo_range+0x10/0x10 [ 1176.307564][T13167] ? kernel_text_address+0x8d/0x100 [ 1176.309677][T13167] ? __kernel_text_address+0xd/0x30 [ 1176.312007][T13167] ? unwind_get_return_address+0x59/0xa0 [ 1176.315004][T13167] ? arch_stack_walk+0xa6/0xf0 [ 1176.317599][T13167] ? kasan_save_stack+0x3f/0x50 [ 1176.319986][T13167] ? kasan_record_aux_stack+0xa7/0xc0 [ 1176.322225][T13167] shmem_evict_inode+0x3b1/0xca0 [ 1176.324471][T13167] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1176.326799][T13167] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 1176.329345][T13167] ? lock_acquire+0x1d1/0x380 [ 1176.331334][T13167] ? find_held_lock+0x2b/0x80 [ 1176.333491][T13167] ? evict+0x37e/0xad0 [ 1176.335393][T13167] ? evict+0x37e/0xad0 [ 1176.337156][T13167] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1176.339571][T13167] evict+0x3c2/0xad0 [ 1176.341367][T13167] ? __pfx_evict+0x10/0x10 [ 1176.343252][T13167] ? lock_acquire+0x1d1/0x380 [ 1176.345291][T13167] ? iput.part.0+0x981/0x1050 [ 1176.347510][T13167] iput.part.0+0x989/0x1050 [ 1176.349433][T13167] iput+0x35/0x40 [ 1176.350979][T13167] filename_unlinkat+0x466/0x730 [ 1176.353117][T13167] ? __pfx_filename_unlinkat+0x10/0x10 [ 1176.355620][T13167] ? do_getname+0x191/0x390 [ 1176.357584][T13167] __x64_sys_unlink+0x46/0x70 [ 1176.360075][T13167] do_syscall_64+0x121/0x770 [ 1176.362907][T13167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1176.365658][T13167] RIP: 0033:0x7fcd01515937 [ 1176.367559][T13167] Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8 [ 1176.375930][T13167] RSP: 002b:00007ffc4214fcf8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 1176.380600][T13167] RAX: ffffffffffffffda RBX: 00007ffc4214fd00 RCX: 00007fcd01515937 [ 1176.384471][T13167] RDX: 0000000000000000 RSI: 00000000000003ed RDI: 00007ffc4214fd00 [ 1176.388045][T13167] RBP: 000055f191cfee00 R08: 0000000000000000 R09: 0000000000000000 [ 1176.391359][T13167] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000aba9500 [ 1176.394748][T13167] R13: 0000000003938700 R14: 000055f18779e100 R15: 000055f18779e140 [ 1176.398574][T13167] [ 1176.401145][T13167] Kernel Offset: disabled [ 1176.403381][T13167] Rebooting in 86400 seconds..