last executing test programs: 11.079298434s ago: executing program 2 (id=388): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file1\x00') r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe800000", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x40}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9.605754584s ago: executing program 2 (id=398): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x71) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x58, 0x10, 0x1, 0x70bd2c, 0x0, {}, [@IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0x50e, 0xff, 0x88a8}}, {0x14, 0x1, {0x5, 0x2c38, 0x101}}]}]}]}, @IFLA_IFALIASn={0x46}]}, 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)=@newqdisc={0x22c, 0x24, 0x601, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xf}, {0x6, 0xfff1}, {0x7}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_STAB={0x8c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x9, 0xae, 0x1, 0x2, 0xe9e, 0x2, 0x6}}, {0x10, 0x2, [0xe, 0x8, 0x200, 0x2, 0xb064, 0x28]}}, {{0x1c, 0x1, {0x8, 0x7, 0xfc, 0x5, 0x1, 0x7, 0x1, 0x3}}, {0xa, 0x2, [0xf, 0x2d, 0x0]}}, {{0x1c, 0x1, {0xb6, 0xc, 0x6, 0x764, 0x1, 0xfff, 0x4, 0xa}}, {0x18, 0x2, [0x9, 0x6, 0x8, 0x8, 0x2c, 0x6, 0x1, 0x7, 0x9, 0x9]}}]}, @TCA_STAB={0x16c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x22, 0x1, 0x0, 0x1, 0x2, 0x9, 0x81, 0x5}}, {0xe, 0x2, [0xc, 0x4, 0x2, 0x2c, 0xffff]}}, {{0x1c, 0x1, {0x7f, 0x3, 0xee, 0x55c7, 0x2, 0x7, 0x530d, 0x2}}, {0x8, 0x2, [0x2, 0x3]}}, {{0x1c, 0x1, {0x9, 0x1, 0xcdb, 0x5, 0x2, 0x2, 0x9, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x6e, 0x8, 0x2, 0x40, 0x2, 0x286cd411, 0x26, 0x3}}, {0xa, 0x2, [0x1, 0x0, 0xfff7]}}, {{0x1c, 0x1, {0xff, 0xcd, 0x100, 0x6c11d340, 0x1, 0x4, 0x6, 0x5}}, {0xe, 0x2, [0xd9b, 0x0, 0x2, 0x4, 0x28ad]}}, {{0x1c, 0x1, {0x8c, 0x3, 0x6, 0xe2cd, 0x0, 0x7cb, 0x4, 0x8}}, {0x14, 0x2, [0x20, 0x94, 0x7, 0x40, 0x7f, 0x2, 0x2, 0xc]}}, {{0x1c, 0x1, {0x5, 0x9, 0x6, 0x8f0, 0x0, 0x14000000, 0x3, 0x2}}, {0x8, 0x2, [0xf539, 0x4]}}, {{0x1c, 0x1, {0x8, 0x7, 0x5d6, 0xd51a, 0x1, 0xb3, 0x3, 0x1}}, {0x6, 0x2, [0xda6e]}}, {{0x1c, 0x1, {0x3, 0x4, 0x4, 0x0, 0x0, 0x1, 0x7, 0x3}}, {0xa, 0x2, [0x2, 0x9, 0x4]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x22c}, 0x1, 0x0, 0x0, 0x8081}, 0x24000010) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) cachestat(r6, &(0x7f0000000180)={0x3, 0xf12}, &(0x7f0000000200), 0x0) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000340)='user\x00', &(0x7f00000008c0)={'syz', 0x3}, &(0x7f00000005c0)='AT_7jsj\xa5\xb0\xf7\xca\xe7\xbd,\x00', 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r8 = dup(r5) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r7, 0xc0a85352, &(0x7f0000000280)={{0x0, 0x9}, 'port1\x00', 0x0, 0x0, 0xfffffffe, 0x6, 0x3}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0xff, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000480)={r9, 0xb, 0x3}, 0x8) 8.548932135s ago: executing program 2 (id=401): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0xd, "625e81abf2f5246c2f97ff767a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="200119"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x1, 0x5, "d326132b1b"}, 0x0}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000380)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x5, 0x0) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000080)={0xa6f4, 0x1ab3, 0x1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(r2, &(0x7f00000006c0)={&(0x7f0000000100)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)="9ae0e6ed8bc2482d2be6334bb1f2", 0xe}, {&(0x7f00000001c0)="53e37d9de6c52d5a41e389d846ded6c6c266259eaa7fc40374c054794c4d13bbe9c3a29790a6eabf68ad1a37e7a024705d09ab20b793a3b54d5a500f495bc75fab6e042ec2c836df75f67d833e6ec10c71f9cd047e1df3cd3f05b2e00bf55673894ccc8975f3d77a0d28713dac5c50d7a1bace72f7bef4b6e70feeb0f5340909bf1b4582fb6325b60c6ed953dd70c24107b6d0d75b091be083468298e041ce4267d0315f14fee9107975108ffd8f781a39a047de76474f390ab289f6cee3369c4407ff3ffdaebbe9dccab2f9d6f1c7f6848ca782ede871", 0xd7}, {&(0x7f00000002c0)="edc93ecd5bb3c7c89fb425d96d1fc9a02e75fb01fe16dbf38398d7c0abe21d86d6caf254", 0x24}, {&(0x7f0000000300)="2c8d1833a7242b9696ba04f4dc0a1e55becba9dc268ca802401d1008e3c47b7bf921c9ee7a4819209eea7c63b21d8f9c4404a6e5b5749c8d570ea4a47d4b236654ebc17d7b1622d379a5916ef92ee406b445108678fca7e940aefc4eb6fb83fa5c2f783c3601f019cbd6edd3aa621b72b69dfdfd7b1e734bed2936f62c9c8197d158779bfc07daf04014748262e7dc834d6a9eb2", 0x94}, {&(0x7f00000003c0)="43acb7a902ea3d24bf9bac11805714cb1440ad", 0x13}], 0x5, &(0x7f0000000480)=[{0x110, 0x101, 0x3ff, "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"}, {0xf8, 0x118, 0x2, "a9f4a3959af9c2a234ec3afa5499f680c7de16cb589e08311d6c34a38f85d035ea2960847f618db442fd46c7a187b5c0ff5168051a58c64a4a0d12b84968075323617c98138a3f0e93b01f5bf4172527654a86ecc3331500252bac560032c30062993505d47d7a77a7b6291dfeb3b35d2b64bfa92f2e69061752bdd739a9c3619100d42891c49aaefa1ee443c0ab77218c3f0d775b1032011a9132fe95e151ab57976d13542ed63c9310231f75ea662640932d2e52625cd57ea98322d99fa0f9b70ce9e954401b5a159aeba7d558770291e3bb32e31884c8de2f0ac98e223e034e7605"}], 0x208}, 0x8890) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000010a03000000000000000000070000000900010073797a30000000003c000000090a010480000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000001a0a05010000000000000000070000000900020073797a3100000000090001"], 0xc0}}, 0x0) 8.49062451s ago: executing program 1 (id=403): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r3 = socket(0x1d, 0x2, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000019000100000000000000eb008020"], 0x24}}, 0x0) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r2, 0x3}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000e10000100"/20, @ANYRES32=r6, @ANYBLOB='$'], 0x20}}, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000180), 0x408080, 0x0) close(r3) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x250040, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x800, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f00000002c0)={0xfffffff, 0x5, 0x9, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x337, 0x4, '\x00', @value64=0x2}}) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000100)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}) syz_emit_ethernet(0x11, &(0x7f0000000040)={@local, @local, @void, {@llc={0x4, {@llc={0x4e, 0x4e, 'y'}}}}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000285dbacab822595200000000000000000500030021000000060002400000080047861a72deeb2708fd6c20cf4531a2c9bd39c2fb6050cd3ec9d9ed3af30e09bfb5d9aa6be3a35099ba607b36383a50e6f56cf47bd995e4e6f715c38be2c9cc4c167d22c630ae5d7243e1be9f46ad21fc21b7df9902ea39b0e09b51b44b701f5d3140e1dd75535df5e2bf12a67d5f3c18b36502574c58a0776a7859bbc72de7e9"], 0x24}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="f72102ffe475ea29"], 0x0}, 0x0) lseek(0xffffffffffffffff, 0x81, 0x4) 8.095938386s ago: executing program 4 (id=406): socket$inet6(0xa, 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_io_uring_setup(0x4166, &(0x7f0000000780)={0x0, 0x0, 0x10100}, 0x0, 0x0) syz_io_uring_setup(0x7f49, &(0x7f0000000040), 0x0, 0x0) socket(0x840000000002, 0x3, 0xff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) syz_io_uring_setup(0x2d9d, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, 0x0, 0x0) socket(0x840000000002, 0x3, 0xff) syz_usb_connect$cdc_ncm(0x2, 0x9d, &(0x7f0000000ac0)=ANY=[], 0x0) pipe2$9p(&(0x7f0000000000), 0x80) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRES64=0x0, @ANYRESHEX=r1], 0x20) (fail_nth: 1) 7.672234841s ago: executing program 1 (id=407): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file1\x00') r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe80000000000000", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x40}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.665572062s ago: executing program 0 (id=410): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'erspan0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x23, 0x4, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x5, 0x0, 0x3f]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private, 0xffffff14}, {@remote}, {@remote}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private}]}, @noop, @noop, @noop, @lsrr={0x83, 0x7, 0x0, [@multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @local, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x300000000000000) 6.201466595s ago: executing program 1 (id=411): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'erspan0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xfff, 0x0, {{0x2f, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x5, 0x0, 0x3f, 0x8]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private, 0xffffff14}, {@private=0xa010100}, {@remote}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private}]}, @timestamp_prespec={0x44, 0x2c, 0x2c, 0x3, 0x0, [{@local}, {@multicast2}, {@private=0x20000000}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}]}, @noop, @noop, @lsrr={0x83, 0x7, 0x0, [@multicast1]}, @rr={0x7, 0x13, 0x0, [@dev, @remote, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.018872197s ago: executing program 4 (id=412): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x71) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x58, 0x10, 0x1, 0x70bd2c, 0x0, {}, [@IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0x50e, 0xff, 0x88a8}}, {0x14, 0x1, {0x5, 0x2c38, 0x101}}]}]}]}, @IFLA_IFALIASn={0x46}]}, 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)=@newqdisc={0x200, 0x24, 0x601, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xf}, {0x6, 0xfff1}, {0x7}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_STAB={0x8c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x9, 0xae, 0x1, 0x2, 0xe9e, 0x2, 0x6}}, {0x10, 0x2, [0xe, 0x8, 0x200, 0x2, 0xb064, 0x28]}}, {{0x1c, 0x1, {0x8, 0x7, 0xfc, 0x5, 0x1, 0x7, 0x1, 0x3}}, {0xa, 0x2, [0xf, 0x2d, 0x0]}}, {{0x1c, 0x1, {0xb6, 0xc, 0x6, 0x764, 0x1, 0xfff, 0x4, 0xa}}, {0x18, 0x2, [0x9, 0x6, 0x8, 0x8, 0x2c, 0x6, 0x1, 0x7, 0x9, 0x9]}}]}, @TCA_STAB={0x140, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x22, 0x1, 0x0, 0x1, 0x2, 0x9, 0x81, 0x5}}, {0xe, 0x2, [0xc, 0x4, 0x2, 0x2c, 0xffff]}}, {{0x1c, 0x1, {0x7f, 0x3, 0xee, 0x55c7, 0x2, 0x7, 0x530d, 0x2}}, {0x8, 0x2, [0x2, 0x3]}}, {{0x1c, 0x1, {0x9, 0x1, 0xcdb, 0x5, 0x2, 0x2, 0x9, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x6e, 0x8, 0x2, 0x40, 0x2, 0x286cd411, 0x26, 0x3}}, {0xa, 0x2, [0x1, 0x0, 0xfff7]}}, {{0x1c, 0x1, {0xff, 0xcd, 0x100, 0x6c11d340, 0x1, 0x4, 0x6, 0x5}}, {0xe, 0x2, [0xd9b, 0x0, 0x2, 0x4, 0x28ad]}}, {{0x1c, 0x1, {0x5, 0x9, 0x6, 0x8f0, 0x0, 0x14000000, 0x3, 0x3}}, {0xa, 0x2, [0x3, 0xf539, 0x4]}}, {{0x1c, 0x1, {0x8, 0x7, 0x5d6, 0xd51a, 0x1, 0xb3, 0x3, 0x1}}, {0x6, 0x2, [0xda6e]}}, {{0x1c, 0x1, {0x3, 0x4, 0x4, 0x0, 0x0, 0x1, 0x7, 0x3}}, {0xa, 0x2, [0x2, 0x9, 0x4]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x200}, 0x1, 0x0, 0x0, 0x8081}, 0x24000010) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) cachestat(r6, &(0x7f0000000180)={0x3, 0xf12}, &(0x7f0000000200), 0x0) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000340)='user\x00', &(0x7f00000008c0)={'syz', 0x3}, &(0x7f00000005c0)='AT_7jsj\xa5\xb0\xf7\xca\xe7\xbd,\x00', 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r8 = dup(r5) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r7, 0xc0a85352, &(0x7f0000000280)={{0x0, 0x9}, 'port1\x00', 0x0, 0x0, 0xfffffffe, 0x6, 0x3}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0xff, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000480)={r9, 0xb, 0x3}, 0x8) 6.017804922s ago: executing program 0 (id=413): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a8018000480140005800800020000000000080001"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x117b}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x2c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BCAST_FLOOD={0x5, 0x1e, 0xfd}, @IFLA_BRPORT_STATE={0x5, 0x1, 0x2}, @IFLA_BRPORT_BACKUP_PORT={0x0, 0x22, r5}, @IFLA_BRPORT_MODE={0xd94d63a68e98907d}, @IFLA_BRPORT_FAST_LEAVE={0x5}]}}}]}, 0x64}}, 0x48820) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000280)=0x1, 0x4) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800001f00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800e00010069703667726574617000000014000280050008002400000005000b0006000000"], 0x48}}, 0x4890) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x38}}, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010000000004"], 0x57) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_VAPIC_ADDR(r9, 0x4008ae93, &(0x7f0000000040)=0x5000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000b8000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000002b7c0011800b00010074617267657400006c00028059000100c8e0cd3d1494dadc537fecb426210d81ca78da5d8527e5f18b2a33319f4564294f793cb1043098e5b74e2512d5c40c53b2056a8fd7eb876bddddf3e0709b8f7a2b0e481cd3002bf5ec60ec7f5d5164d3cbc1c2a46100000004000300080002400000000014000000100001000000000000000000f40000"], 0x100}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 5.552724229s ago: executing program 3 (id=415): r0 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@empty, 0x4e22, 0x0, 0xfffc, 0x10, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000003}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@local, 0x0, 0x33}, 0x2, @in=@private=0xa010102, 0x0, 0x4}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xe803000000000000) 5.354825048s ago: executing program 0 (id=416): bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000440)=0x82, 0x49) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x401) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000d00), 0x4) sendto$inet(r0, &(0x7f0000000480)="fbbf0b5044e308cb7bd572aa2b42e9678bcf30eff9f3aed14dc94a114bd2b45956aebe2b108a87e865501a5f9e0383611afdd3f8bac3d5cfd7772a3ab48d0ba4b600731e357e38716c449fae7c28548a4f2105f44b8fd9b33041270ae01f1a405e3f650fc3b0926d481c364fca00000000000000006d3a3ede9fc738b8d86209c060161d5ddb5fcf3d09001117cdb9d055aa2d89fe3458720724853a876448d4a1fe9ef0569ad98a05ab5df763923b4e2c576e00000000000000000000000000000000002090666159e3075f7244cf4ec3d7814c0c934f44e200219e6dd7bc23397d5f2f2c76a5baddd0fd8c340362691ef226f7a0ac51b74b6be5ed6737948514cd466943d08eeb3895b80499da2b209da4f3ec5e3744ce3e863b0e04d0ec2f39edf50b6e08c4b47e448a35414763d687fbe3792ee15c5b9791310a346472723c100bf77a310b0ced8004b5ac6d48c40439f512e8ef34a53d65f55563f68136a577736ca5f6f66e01ef4ec2cdc8db34f6de50713adaa3f70189958263fddc1314f8a28ccdef6e1390c5fbaeadc3035d019f0dc75de307de6c0d010000000000000027083d1d5b4b013c503b863b560688d94de886b6dc73d5da2dfeff4bed1a49a975a6c8dbb480e4415ddca5657a5a8e3b111015499e952bb5e8d8f60de3d688df7802c6e8b27b31fac4e199038b79a3999920e634a5af162a9581b0e6647e410700246548234acacf9cb43ab332a37bbc926c39897395c974fda31536be523bf4260300730ae6136fecae5f0fa6ab2df8d98128b24589e3bbe5230e07dc5e0d65cc397e3f8204d48e59e8e294a6d7008ba8fba28cd5009fe1a7c569ce740078bf1c7389a6ba0f89257f0eac417aac0d2d89b05ee5dafa2f1d936c87264d077b2c0d5abdbc64ce943f895dd4c2e9dd7393543d89b00dc6b3a25045d4ec932366c67dfad087fa8dc104644828440bdf67dd97ebccb3bd", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) recvmsg(r0, &(0x7f00000033c0)={&(0x7f00000003c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000080)=""/49, 0x31}, {&(0x7f0000000f80)=""/4096, 0xffffffe1}, {0x0}, {&(0x7f0000000100)=""/102, 0x66}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001f80)=""/178, 0xb2}, 0x120) socket$can_raw(0x1d, 0x3, 0x1) syz_mount_image$fuse(0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd', @ANYRESHEX], 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x8}}}, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007080)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfff2}, {0x10, 0x4}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[]) sendmmsg$inet(r0, &(0x7f0000007780)=[{{&(0x7f0000000980)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003980)=ANY=[@ANYBLOB="1400000000000000000000000200000007000000000000001c0c00"/40, @ANYRES32=0x0, @ANYBLOB="0a010102640101020000000014000000000000000000000001000000f7ffffff000000004c00000000000000000000000700000001441c1b51ac1414bb000000020a01010000008007ac1e000100000004880341070ff00a010102e0000001e0000001890bade0000002640101020100000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbac14143f000000004c0000000000000000000000070000004420a710000000027b8f5d3a00000005000000075fbce4d900000005000000ca830b600000000564010100440c2551ac1e0101000000010094040100000000001400000000000000000000000100000005000000000000001400000000000000000000000100000020000000000000001400000000000000000000000100000000000000000000002c0000000000000000000000070000008614000000030502050c00079088fea626a9009d4408f2600000000000000000"], 0x188}}, {{&(0x7f0000000dc0)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000003640)=[{&(0x7f00000047c0)="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", 0xf80}, {&(0x7f0000000e00)="002521f740646d53d2b61f29f43fe29021f61e012d2c40a8897b56", 0x1b}, {&(0x7f0000000e40)="825b4ba0af82aa3d5a1a6761b4b1bfb375cc5611b08677e077e5130a574db01550a73a8fe20005feb09b47fa5d3acf995d3099acc9fdffd1d8929a927bef04dc082a9570d792f20e061f4890e666f10ab614c358c8ee05824d8284814391a354622741377200aa3a033b99a1b6bdab55b6bcbeab977998504b9214b5775e636735fbe6855df715597612875940db373fd63ef958e33c11e3b357d7b5f56bc0ed670671879869f727fb83b30dd6ea9fa5", 0xb0}, {&(0x7f0000000f00)}, {&(0x7f00000031c0)="e8b0dff4012896dd23be8e979af167633f71f04e18d04b3e165b7608d3e2ed40e43b49ca50a89424fd0e121a47b3ac98d72f9e333c140fd6d3e27d24b27bdcaaea426a0c671a3bcb4f32b880b31b3f941bd6f7b99ca033a627475bacdab4475d655090986f549256531a60363bd151bdb959fae59028e13dc50f4a700084d0c4daf63f1135d43eba176840a2bc5336967e2eef9b9eadfecb2128eac06adf502d9608778cab8aec2a1f4d81c0d1b86e222eaf8b0c36beefb8ce9ece15174cbe1fd4757b9246c21959cd5e71767c4e23400c4c90a68526b687b8a5c4509419c05e31d1befe9733d3d9a74e6a0e8971df", 0xef}, {&(0x7f00000032c0)="484440acf6c65362b8ca307d95ed48a83f5c018e38f260da926851e4d974ba9146d78e7f7f9407501f19e7880d6789616931b286241ef435856b48b6720e37023c77f790511da0535628cbc90ef73886b14870962e773888933dd7274832bb9bc8e2eddfff4fd5a680689603c27a24fed7fdb74c3b7aa084812a4538e4e1092e4e906948e62de9cf0a651344fbe72d90ecedf497472aceac763c7bb699941da2e544938257c23b5bfae4f61e7b77cdf12e99d6a2", 0xb4}, {&(0x7f0000003400)="a7a165acd176110e7a0654ed8ab877b8b28c75fa19f00fc2c93264e45595c8a4b588ce81aa69948f8f64f542692cfd70f39b0a890de1cad051e6530432a3bb2c47fa0eac68e4327c0f80246e2a701b63e0117837e5fb696eaa17eef6b6094e8a630ee6a765f3c142f1fe92e1e5a9b8e547fd2ff407c4e23e35718f7aabf70ba4ae8104b69150dd1735ae52", 0x8b}, {&(0x7f00000034c0)="f9293517947c21970283a7ea997b1730e29b8fc90a84bd220e643e1a59fd6702ec144cefce028a51d6178c540c3278c81c53f99e39fe6ce43bfbe95218bfdcd316cc", 0x42}, {&(0x7f0000003540)="4bd028b7576083d688af4d5f", 0xc}, {&(0x7f0000003580)="f5f3dcadff35b2974ec4aacb390a4810dfc783c1495d7e016068c6f1646f4d6f1b40cde7b579c46daea27137c947ea96865c7f7a8a24b264afb6c9e760b4b43059506585869b7ad3c3b7405436cd4ccb927e50", 0x53}], 0xa}}, {{&(0x7f0000003700)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000006900)=[{&(0x7f00000057c0)="36a6cd6e817295ecf9cf73f0d1c229731e488a19c4732d7d26a26665f1645545ff75f2217f875b82d40b7f41b0cb59caf12f8a1c0d379223b41c27b71559c81534bf307ba5a39f89a850008a1c1e9e6a9c2c5f1f244c755b72b1c2b0d79525c261177584e99460f2c9f92d3f8730aef82f394b9c363e25a5e02bb160f2fe9a8f", 0x80}, {&(0x7f0000005880)="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", 0xf00}, {&(0x7f0000006880)="1708ed8aee3279125b2ff660209a6b3459f2c329e94ef73ef274515fc58ef3bf06f17cd2a8baa9b70fa7b9f04d82928f26f1f7b6ef60cf87be09e09f6041ad593ef2b340116e874fbff301c6ebb45857209c4dbfd935dd46020e314542e79ebc9cc6443c748208413f788ceb0ae5985318182fd0375a80d37b", 0x79}], 0x3, &(0x7f0000006940)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @private=0xa010101}}}], 0x20}}, {{&(0x7f0000006980)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000006bc0), 0x0, &(0x7f0000007200)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_ttl={{0x14}}], 0x48}}, {{&(0x7f0000006c40)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000006ec0)=[{&(0x7f0000006c80)="ecbdf0b0876813aedc413331d62a30f9", 0x10}, {&(0x7f0000006cc0)="1e33c1ad836c836b27b03692", 0xc}, {&(0x7f0000006d00)="e92bc5d985331b07fc852bc0", 0xc}, {&(0x7f0000006d40)="e07d2cf3b5fa39201b1a9257dafdbae49dd69ae0dbe2cc70a9218467877fe2a0888543de186d2c897743e7d5674b57808b4db83f36257d2acafb48c6b431b06689a5a7df1af165617d22ab6a73492d1914e33fd863489e1719ee359f939fc7673059c047f58e70106ca9fdafdb09afd7a1db7439d688a8f6d13941e57321ccc344b3649d7c30574a8bd800f22bda720f616c9a2779533e8cbb44fe8168154f2642b8e901fbd3a9d664f489a15c993f91b1d57e7bc5876260ab495d511565747a60a1643910b54eb2e4039bd427848ddf7b5bea2be9c9e88dcd8ddaf9ce2e91c160", 0xe1}], 0x4, &(0x7f0000006f40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x33}}}}], 0x20}}, {{&(0x7f0000006f80)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000006fc0), 0x0, &(0x7f0000007000)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffe1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x401}}, @ip_ttl={{0x14, 0x0, 0x2, 0x81}}], 0xd8}}, {{&(0x7f0000007100)={0x2, 0x4e23, @dev}, 0x10, &(0x7f0000007400)=[{&(0x7f0000007140)="d8140ab05aa81e143b58", 0xa}, {&(0x7f0000007180)="0bfd17bf76cb880dbdb04255f0f5a401cabc2a047e1081b979a124c5987ad576982cf7ffffffffffffff2a889b062fefed63337e3df33e209607dad8fea7ef083940cd3392b8afb95787cb3808dc2b42d31588b15e463157", 0x58}, {&(0x7f0000007280)="5b8182f687241903f0cc6a9b8a9c1b84625e4c010d5cc8a687ea609ca200750507bdc5823dae2727ab659d3b75b6b0ebe9166269f5509a0fa34842c30e2649644316fd0c00a5cfb5258a8c106ae05c2945b4deaacc9d9dbf8f911cdde183f5d84f21e80ed242e1ee5b5d1debcc64b4e57f09a4aec74a6c50dc7819971fed4dda3a94aa7613105b6974fbd744deaff0fe591e16ff763f9f0742244997e09b023e75ed1466b74c79490ec5ad0788d5a3e7d6", 0xb1}, {&(0x7f0000007340)="bdff41ed7a062e29ed5b89b1e233dc2fe6b989536d3be748df9c1b772fbbc0ab0b1c9c938075fbb54953c9a2b991d72916081ee1a14a5499c5b696717b5aa43e69ef9737d9cf4a672490919910d7c3b2408ebbaed31ef029869bdd6aa56382f0baa365fc1a68d6ae8867342af6c24ca463e4fe8a5342d0e70980d050ecdcbf6d58d7aa00e1331f02c6c1222f9fbed18afbe11e9e41a6c1b54c8fa4148390", 0x9e}], 0x4, &(0x7f0000007480)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14}}], 0x30}}, {{&(0x7f0000007500)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000075c0)=[{&(0x7f0000007540)="adc3a6c3a2672655664b5e19fda10009b36f0fdad790a09a043781189be2c3d4c8e93096a7a0b7e2d515503db59b6abc53e1da14db54", 0x36}], 0x1, &(0x7f0000007980)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="cf690000ac1e0001000000001100000000000000540000000100000009000000000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x110}}], 0x8, 0x4080) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) 4.848957827s ago: executing program 3 (id=417): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)) fchdir(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x4000000) fadvise64(0xffffffffffffffff, 0x4, 0x0, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x8, 0x0, &(0x7f0000002380)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\xfd\x00\x00\x00@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x5) ftruncate(r2, 0xffff) r3 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x8002) ioctl$SG_IO(r3, 0x2285, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000200)=[{0x0, 0x2, 0x0, 0xff, @time, {}, {0x0, 0x5}, @raw32={[0x90b9dc2e, 0x0, 0xfffffff7]}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8}, {0x0, 0x0, 0xff, 0x0, @time, {}, {}, @connect={{0x0, 0x7}}}], 0x54) ioctl$SG_GET_REQUEST_TABLE(r4, 0x227d, &(0x7f00000018c0)) 4.648684327s ago: executing program 1 (id=418): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x88, 0x59, 0xf1, 0x10, 0x582, 0xe6, 0x4e06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xe2, 0xb2}}]}}]}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000080)={0x2a, 0x1, 0x8000}, 0xc) bind$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r5, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) socket$igmp6(0xa, 0x3, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) close(0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050040000000000000002e00000008000300", @ANYRES32=r10, @ANYBLOB="0a0034000202020202020000080026006c09"], 0x30}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x2f, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b1505d600000000000000004888", @ANYRES32=0x0, @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES64=r7], 0x40}}, 0x0) 4.553174095s ago: executing program 4 (id=419): unshare(0x20000400) r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRES8, @ANYRES64=0x0, @ANYRES8=r0, @ANYRES64], 0x48}, 0x300, 0x0, 0x0, 0x24040011}, 0x0) 4.55153169s ago: executing program 3 (id=420): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b000101000007090400001202060000052406000005240020000d240f010000000000000000000905820200020000000905030240"], 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_ep_read(r1, 0x3, 0xff33, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$video(&(0x7f0000000240), 0x3, 0x0) r3 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x0) creat(0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r7, r6) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000002, 0x2010, r3, 0x7beb5000) socket$inet6(0xa, 0x0, 0x8) r8 = open(&(0x7f00009e1000)='./file0\x00', 0x1c1c40, 0x0) fcntl$setsig(r8, 0xa, 0x13) fcntl$setlease(r8, 0x400, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r9, 0x0, 0x0) syz_open_pts(r9, 0x801) 4.499071604s ago: executing program 2 (id=421): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffff44, &(0x7f0000000300)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x6, 0x0, &(0x7f00000001c0)) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) read$FUSE(r1, &(0x7f0000001a40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0x0, r2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x400c041}, 0x44880) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x22, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8a}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc091, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xc57}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x3f, 0x7fff, 0xef2, 0x208, 0xffffffffffffffff, 0x1f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1, 0x3, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r3}, 0x38) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x90f, 0x102) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0xa, &(0x7f00000001c0)=@raw=[@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x105}}, @ldst={0x3, 0x2, 0x4, 0x5, 0x8, 0xffffffffffffffe0, 0x1}, @call={0x85, 0x0, 0x0, 0xa8}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b0000000800", @ANYRES32, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000"], 0x398}}, 0x0) socket$igmp(0x2, 0x3, 0x2) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r3) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="38001000", @ANYRES16=r7, @ANYBLOB="120325bd7000ffdbdf250a000000080001007063690011000200303030303a30303a31302e30000000000800030001000000"], 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x40010) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd0, &(0x7f0000000000)=0x5, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c000000040000000f0000001c00000000008000", @ANYRES32=r8, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 4.407860375s ago: executing program 4 (id=422): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffff44, &(0x7f0000000300)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x6, 0x0, &(0x7f00000001c0)) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) read$FUSE(r1, &(0x7f0000001a40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0x0, r2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x400c041}, 0x44880) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x22, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8a}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc091, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xc57}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x3f, 0x7fff, 0xef2, 0x208, 0xffffffffffffffff, 0x1f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1, 0x3, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r3}, 0x38) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x90f, 0x102) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000080)={0xa3, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0xa, &(0x7f00000001c0)=@raw=[@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x105}}, @ldst={0x3, 0x2, 0x4, 0x5, 0x8, 0xffffffffffffffe0, 0x1}, @call={0x85, 0x0, 0x0, 0xa8}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b0000000800", @ANYRES32, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000"], 0x398}}, 0x0) socket$igmp(0x2, 0x3, 0x2) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r3) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="38001000", @ANYRES16=r7, @ANYBLOB="120325bd7000ffdbdf250a000000080001007063690011000200303030303a30303a31302e30000000000800030001000000"], 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x40010) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd0, &(0x7f0000000000)=0x5, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c000000040000000f0000001c00000000008000", @ANYRES32=r8, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 4.273581024s ago: executing program 0 (id=423): sched_setaffinity(0x0, 0x8, &(0x7f0000000100)) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) cachestat(r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0xb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x0, 0x0, 0x0, "9ecf3315567f14d56a87d134cc409e2a652dbbf6c50480937c6fa85af81bc6fc54b71f03985ac33e31d612d97692efcda8853b8a4430503621f06679995d916cb4361795dd7dbae51d07384b7c2e6949"}, 0xd8) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200)={'#! ', './file0', [{0x20, '/dev/full\x00'}, {0x20, '/dev/full\x00'}, {0x20, '/dev/full\x00'}, {0x20, '/dev/full\x00'}, {0x20, '\'),\b'}, {0x20, 'syz'}], 0xa, "67e7303689fabc025796b7d4479ec2194f78b28f1f1d6cf52319127d6600711308e9df8c17aabe71bf985844aa44e3ca09b06c3ec760395952c329c25b0289572079141869c6aa5e644810ec6f2506a8102f005974298fb90cac499570dd0c93583dc5aca78c9fc66e53b0e2413cb5e44fe71951"}, 0xb4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/uevent_helper', 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x0) io_submit(0x0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0}}) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000000340)={0x3, 0x5, {0x0}, {0xee00}, 0x5, 0x7}) prlimit64(r7, 0x7, &(0x7f0000000380)={0x7613, 0x2000000008000002}, 0x0) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000300)) socket$xdp(0x2c, 0x3, 0x0) socket(0x21, 0x80000, 0x1) accept4$tipc(r2, &(0x7f0000000180)=@name, &(0x7f00000001c0)=0x10, 0x1800) setsockopt$inet_pktinfo(r4, 0x0, 0x18, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r8, r8, r8}, &(0x7f0000001cc0)=""/199, 0xc7, 0x0) 3.227255568s ago: executing program 0 (id=424): quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000002c0)) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r3, 0x0, 0x0, 0x20048004, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xd7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 2.309083112s ago: executing program 1 (id=425): r0 = socket$inet6(0xa, 0x1, 0x0) process_vm_writev(0x0, &(0x7f00000058c0)=[{&(0x7f00000043c0)=""/242, 0xfffffffffffffcea}, {&(0x7f00000001c0)=""/103, 0x67}, {&(0x7f00000044c0)=""/107, 0x6b}, {&(0x7f0000004540)=""/4096, 0x1000}, {&(0x7f0000005540)=""/78, 0x4e}, {&(0x7f00000055c0)=""/116, 0x74}, {&(0x7f0000005640)=""/69, 0x45}, {&(0x7f00000056c0)=""/88, 0x58}, {&(0x7f0000005740)=""/237, 0xed}, {&(0x7f0000005840)=""/68, 0x44}], 0xa, &(0x7f0000005d00)=[{&(0x7f0000005980)=""/168, 0xa8}, {&(0x7f0000005a40)=""/180, 0xb4}, {&(0x7f000001ed80)=""/189, 0xae}, {&(0x7f0000000080)=""/42, 0x2a}, {&(0x7f0000002280)=""/27, 0x1b}, {&(0x7f0000005bc0)}, {&(0x7f0000005c00)=""/130, 0x82}, {&(0x7f0000005b00)=""/59, 0x3b}], 0x8, 0x0) (async, rerun: 64) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') (rerun: 64) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000100)=""/215, 0xd7}], 0x1, 0x0, 0x0) write$P9_RWALK(r1, &(0x7f0000000040)={0x30, 0x6f, 0x2, {0x3, [{0x0, 0x3}, {0x0, 0x1, 0x8}, {0xace3a858f115bec, 0x3, 0x1}]}}, 0x30) (async) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d7dda4108911930836070102030109023f00020000000009046802006e02c0000904680004053e5300090508", @ANYRES16=r0, @ANYBLOB="5c5a41f8e11da73751f3"], 0x0) 2.079516327s ago: executing program 3 (id=426): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x9) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pipe(0x0) chdir(0x0) pipe(0x0) r2 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) getpeername$packet(r2, &(0x7f0000000040), &(0x7f0000000080)=0x14) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000200)={0x1, 0x0, 0x0, &(0x7f0000000140)=""/41, 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000080)) r6 = dup(r5) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000000)={0x1, r6}) ioctl$VHOST_NET_SET_BACKEND(r4, 0xaf02, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x64) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'virt_wifi0\x00', &(0x7f0000000180)=@ethtool_perm_addr={0x1e}}) 2.003008543s ago: executing program 0 (id=427): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fsopen(&(0x7f0000000100)='cifs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='user\x00', &(0x7f0000000040), 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000200)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x10000, 0x56570da2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x400], [0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0xfffffffc, 0x6, 0x0, 0x80000000, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xeae, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55e8, 0x0, 0x0, 0x7, 0x3, 0x0, 0x3ffffffe]}, 0x45c) epoll_create1(0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000280)={0x181dbc1da839d496}) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_DEV_DESTROY(r5, 0x5502) write$tcp_mem(r4, &(0x7f0000000280)={0x0, 0x2d, 0x0, 0x3a, 0x0, 0x2c}, 0x48) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c) r7 = socket$igmp6(0xa, 0x3, 0x2) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_buf(r8, 0x0, 0x29, &(0x7f0000000080)="222fd493b590ca013e2ea9f8c67fc907", 0x10) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x2b0, 0x150, 0x150, 0x0, 0xf8010000, 0x378, 0x238, 0x238, 0x378, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'batadv0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x4}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [0xffffffff], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$alg(0x26, 0x5, 0x0) r9 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$tun(r4, 0x0, 0xc9) write$binfmt_script(r9, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 1.456111295s ago: executing program 1 (id=428): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file1\x00') r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe80000000000000", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x40}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.394374002s ago: executing program 2 (id=429): r0 = socket(0x1e, 0x1, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x20}], 0x1, 0x2) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) ioprio_set$uid(0x3, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) syz_open_pts(r2, 0x30100) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000033f5c6caa1020bce8000000ff00", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028006000200f7"], 0x3c}}, 0x0) unshare(0x26020280) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.238680664s ago: executing program 4 (id=430): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000002c0)=0xa0000) dup(r1) (async) r2 = dup(r1) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000040)={@my=0x0}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000040)={@my=0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100736974000c00028008000100", @ANYRESDEC], 0x40}}, 0x810) 1.044677656s ago: executing program 2 (id=431): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000440)=0x82, 0x49) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000d00), 0x4) sendto$inet(r0, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) recvmsg(r0, &(0x7f00000033c0)={0x0, 0x0, &(0x7f0000002040), 0x0, &(0x7f0000001f80)=""/178, 0xb2}, 0x120) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x8}}}, 0x24}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007080)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0x10, 0x4}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000092000040"]) sendmmsg$inet(r0, &(0x7f0000007780)=[{{&(0x7f0000000980)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003980)=ANY=[@ANYBLOB="1400000000000000000000000200000007000000000000001c0c00"/40, @ANYRES32=0x0, @ANYBLOB="0a010102640101020000000014000000000000000000000001000000f7ffffff000000004c00000000000000000000000700000001441c1b51ac1414bb000000020a01010000008007ac1e000100000004880341070ff00a010102e0000001e0000001890bade0000002640101020100000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbac14143f000000004c0000000000000000000000070000004420a710000000027b8f5d3a00000005000000075fbce4d900000005000000ca830b600000000564010100440c2551ac1e0101000000010094040100000000001400000000000000000000000100000005000000000000001400000000000000000000000100000020000000000000001400000000000000000000000100000000000000000000002c0000000000000000000000070000008614000000030502050c00079088fea626a9009d4408f2600000000000000000"], 0x188}}, {{&(0x7f0000000dc0)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000003640)=[{&(0x7f00000047c0)="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", 0xf80}, {&(0x7f0000000e00)="002521f740646d53d2b61f29f43fe29021f61e012d2c40a8897b56", 0x1b}, {&(0x7f0000000e40)="825b4ba0af82aa3d5a1a6761b4b1bfb375cc5611b08677e077e5130a574db01550a73a8fe20005feb09b47fa5d3acf995d3099acc9fdffd1d8929a927bef04dc082a9570d792f20e061f4890e666f10ab614c358c8ee05824d8284814391a354622741377200aa3a033b99a1b6bdab55b6bcbeab977998504b9214b5775e636735fbe6855df715597612875940db373fd63ef958e33c11e3b357d7b5f56bc0ed670671879869f727fb83b30dd6ea9fa5", 0xb0}, {&(0x7f0000000f00)}, {&(0x7f00000031c0)="e8b0dff4012896dd23be8e979af167633f71f04e18d04b3e165b7608d3e2ed40e43b49ca50a89424fd0e121a47b3ac98d72f9e333c140fd6d3e27d24b27bdcaaea426a0c671a3bcb4f32b880b31b3f941bd6f7b99ca033a627475bacdab4475d655090986f549256531a60363bd151bdb959fae59028e13dc50f4a700084d0c4daf63f1135d43eba176840a2bc5336967e2eef9b9eadfecb2128eac06adf502d9608778cab8aec2a1f4d81c0d1b86e222eaf8b0c36beefb8ce9ece15174cbe1fd4757b9246c21959cd5e71767c4e23400c4c90a68526b687b8a5c4509419c05e31d1befe9733d3d9a74e6a0e8971df", 0xef}, {&(0x7f00000032c0)="484440acf6c65362b8ca307d95ed48a83f5c018e38f260da926851e4d974ba9146d78e7f7f9407501f19e7880d6789616931b286241ef435856b48b6720e37023c77f790511da0535628cbc90ef73886b14870962e773888933dd7274832bb9bc8e2eddfff4fd5a680689603c27a24fed7fdb74c3b7aa084812a4538e4e1092e4e906948e62de9cf0a651344fbe72d90ecedf497472aceac763c7bb699941da2e544938257c23b5bfae4f61e7b77cdf12e99d6a2", 0xb4}, {&(0x7f0000003400)="a7a165acd176110e7a0654ed8ab877b8b28c75fa19f00fc2c93264e45595c8a4b588ce81aa69948f8f64f542692cfd70f39b0a890de1cad051e6530432a3bb2c47fa0eac68e4327c0f80246e2a701b63e0117837e5fb696eaa17eef6b6094e8a630ee6a765f3c142f1fe92e1e5a9b8e547fd2ff407c4e23e35718f7aabf70ba4ae8104b69150dd1735ae52", 0x8b}, {&(0x7f00000034c0)="f9293517947c21970283a7ea997b1730e29b8fc90a84bd220e643e1a59fd6702ec144cefce028a51d6178c540c3278c81c53f99e39fe6ce43bfbe95218bfdcd316cc", 0x42}, {&(0x7f0000003540)="4bd028b7576083d688af4d5f", 0xc}, {&(0x7f0000003580)="f5f3dcadff35b2974ec4aacb390a4810dfc783c1495d7e016068c6f1646f4d6f1b40cde7b579c46daea27137c947ea96865c7f7a8a24b264afb6c9e760b4b43059506585869b7ad3c3b7405436cd4ccb927e50", 0x53}], 0xa}}, {{&(0x7f0000003700)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000006900)=[{&(0x7f00000057c0)="36a6cd6e817295ecf9cf73f0d1c229731e488a19c4732d7d26a26665f1645545ff75f2217f875b82d40b7f41b0cb59caf12f8a1c0d379223b41c27b71559c81534bf307ba5a39f89a850008a1c1e9e6a9c2c5f1f244c755b72b1c2b0d79525c261177584e99460f2c9f92d3f8730aef82f394b9c363e25a5e02bb160f2fe9a8f", 0x80}, {&(0x7f0000005880)="fa3124b9d00795fb5d69b776f08c53345ca4011348c5f25116f61f65b9a37914661bdf56482db784da9542f793c4db30b82b5316ceedfae89f2b8b757645fd07e614579c05b897236b22ec83a175220e490bbba7ff660b660069e006c3ad28eb89c882803d876e12ed683de4997f6433a0c31512c18c0d4ef79b96e0af61c21707d45657f916cf4afe6e8bc8d8ef1caddaef857d3e5c253759c5ad7dda07652c0f0788101ed6ab5275f47cb703bebccd114fb6774c547adbcfa7c0dafa256d4075a5876eb13e8ee0a9b1e1c77e294b8a232467306db8ad677520e9822d888b8fb57019c59cebe1159064a1c75b0021b5fffc72f65bda294c312ea62fd8322878bea0088477bec2c3916a3c2c7d041325505291a78f58b6e25b2cb85e6ce3680133915799610d6fbd8a213f2f4481273a5dc49ae1b6b0f3a8e849e2b212d392c3e531f0c0c4715e32b2e61622fbd2c477920bc6bc4cbb827f841fd61ddcf1dba894e4868f6ab6a65f9cceb6ab9942fd222fcf3881b5b1840d38e41b6a14e51087d362e9766608c58b08f500cd63b0f3e8e4ea62563d900bf61d90003e22b4d44313ec2647d31d8e0e6df6f3cb16609aeb4562479f8b95b98a8379c22bc9500b7baf8055163da03c6909cb24a48d9008d36c5d833a5deac4c5867720623a1315445a971539f3962bcbb0ff39aef65b05b2321cd60a29f131e18b8385214eb683f6c17f3d22c1b4a51a7bbc4bb4676a55dd94e5571ede3fd3f783c1e6e2cf1d8dbc7650ddaec52dc2520fba4bdcabe13fdab3f6422e2e87cfd1d400a529c4a574f0338b03211165a923e134e619f0387873ef9791e2bf5f00c400c357cf65f86bbfa8b7c497c3e1b7e0e93c95c7aa3025374c96f8ce545c07bd56bb336f4f1256643e0e2581af6c365ea27adbae2ff015c8b22678b76361f065b6936a771260b8dafc3b87670fd5b476180a13a1b445c21e4fcf9325aede838e774efcb6783e4c24b4c7e38426faa7a7f3c15e5bab2d84ac3ec49216a24aef3305a0abd3054fa70fa8c2b57c502c34c234123ff95256c1f034e014539518ce85915d7d14b55b8815b9ba2df4e0d544a7d5083a89df0b83954578f78a763b9075c23b9745d9d4abcb821b53085d6d207da86489640b1ba8b1e0de814b6673953873f93c79643671f54bccbcde1a109d603576c70029e65b73eca6815ffc3ab1db518763bf4b19b03613f81c08a18123912e3df0d5d3791ebc113a5e54ef79c3120ca19a01ab123159c9a32f59dbc41992de96eb78f0764db328d8efdc32a2141fa8852cee81c1b3fbf9a2e73d28c193a34bcdb66649d7d84be6c3f8d32391553995ef28f0938fed5703d65ffddc553e205c2df996f876617bf4ed499836ab07e08b0e2c7241bbb4570f283bf91e68d6f729056d0e84f8388bf90a18f20d5b225253345162ad269ad5dc5a28e77123263c7b842993755047cd780159b8899a60c820983403daeb8633159b8e342ab2a59940e6e025d6e1a817290555b0f32232a6f4c9c7c378215f0248f51774e1913e4537aca732d46ae8a31221d6e5d04bf128e3ba9716b7acdc1cf329c84214a2552d989d3ccb2aa1f6441c6b17fb487578a653141fbff26135940defe92481b2ccd2cd587d45e3ebede4500bd15ee1ab95ee9284bfaf1d6467813e2cfa0041dbc5f6538f9e1d26fa34a3938b85a69c29869466a29c1b5eb5968102aa5abcb4db713e752bb6d220b8c63aedfba5b359e41394dc8f9d49a94fdaa0891a6ef8046d0aaa5b67bd5b625683677e88e09e5a0fcd8d8b947c806f3dd235c7807228c8c2d13b5d66d606a76f45e9a56f80d6c6f4b29e8a783ba1d2c174fb945b8580b3314153897ef4df315e98c5f8a8b1317f1ae6aa3aebbae5757ef050dade82a5dc27e467b934c2191a391194e25c49ad8db017cfa3b4c05d8e5d7fa25e3f16b7bb14f3c7311e4477213b422294eab43e7ea41718692fe3159fd56d79606f73746868f2210bdd792bda9b1216728f3a4f9717ea3fcb09d1e17c54e038b10ce9ec6f7e0bca645a85e99578d85327c08bf73bf3b7177eb74fea37d731489baf932627bfbbb5d1577870947c71a8bc61fe4a3678ee7edf102d61e452128fdd1d5581787376f22bc7088ec0f603037979f6a09a198cb23088563f1d15517d0a65c50860edb2185a41fac6574888b8f8c05496b91dfb662a8556699695c648c0046d5d2c04150ecc840e3418343c68e8ddf3bc2bbb12cd61b5f1359ae6b6a7ed33a1d099551110b0a7fa3eddad09ea5bf3d19000ff7a379b0b977040b40feeef0a44bad0b3ed9254cc4835aed52af8a3b8f8a0511bdd145f65221e63a86f57be221edef1233e57fe4955b9f748ed967fb52066969b0fe7ead2a1f14c3a9d5a0b8a031be1d65c22ec733ca64c64f7f25a88f1b93860a7ef85fc713d967294cb7def029f9991204fb4ba82798b2e1c4db3b2aadc9ba0660fcaf1176ad1c9117f97a58580fd024abbd65c55104cd237629aaf7b362c0d610977ea7725f32778412f737a387c5f10e042cfa67d3952b9e408900b6132e68219bbf65d587ceec98b63537c08722b5b7191e15877225ccfb44365b8c7413f98f29e69ceb884f2d4c58257d5f82935666d351f11538b1e4d342fcdd1fbdf67e39da42d28697bb0e3d16bce1b9952d13ad79e72113edf859eb45e6fe10aaf8352770b906e1af623d0be532938abd1936f67925344537dfb6d67ff6f539ef8d8ce7842b82eca38e898c774015bfd8e7b02c91cadebbb2b5ece80b7553791ccf8a600d7acd1ca03cb075632713fadce2b28d80ec9749279d89529b5312e8143b0a98a7f98d0224ff8a77cbd272713458ec171ec431cf105e4df840ed1f41c97e84216c5a83ed2642d0ae86e849ceab438d7c564fcd30d9ecb7b9f02ba6ab62b33768f9791b9dd546b9a54949bb63321ee9b54703366f2d5ee9685ec629eb28060aa3b81be423dc934ecadd198e6303ab832c3b9a6f88eae87f64d3f79f87012b6e896f68b5e2e69dd9b5899f4d631e991803ddf9ef480b10469dc92bf64d4b74d38655df5dba7d3a6cd5fb8cbcd0d0ec5921efc1ac5864f338cb99c47e56467e461d11c8389df3a33a25a9aa140edf30ae87f203df70c7841d3f4ba45925bfd08b39ed4b41d2b703a4cbe8bfb100845b98bfacc1fe27f9f2dc3aa0e2a1191c9ab3f873d30e8d73be82f534bd41020a58107a8d4d452c76a3d8e2732dd8dbdae5576ac438e35682ca33feb0e12edd6f2f40a2e8a014f8a375c206570603dd44b5c285dc2d53a697f3397f98f055904484c832b49190b440b71b84d063e7852d387fd6545879e38bbe66d2e2a72e29bb5cb1b8197d7cf8f0f0097875d4dcf133d9bc2a9ae31ccebb527c925c1b9b174cf23962b659c09988022c1a3e8a55608186baa3b343df6706e7b90cd2f0ec8d60013bec946b66cfe04a35b11c470920e4da7b73088cad2497923f90f1171400f99cd5196f02ed714fe8768d2286c9c1f55d7a88cac48a672bd5b133ec2d5dfe42d37e05110e6f2fdb10feeaa2e6d06c08b9731968b3a3ad9a370ec17d347d6e3243812d2db828465d2a8502fc39f7209f874f94a60029f8ab0030503288ddb1c39b11e93592f4a60c7fb24f64145a3bace98f4e2db5bcc52563eb352d6b00e0bff733436273668b341155c4d2bbe869db4f1d703c41a3b5b3db3ee76752d52bde195f9eaa96179a41c9b6a7cff1f8e7a83f7e2e129d6a933bd1ae9060bf938844b156126a6813e6ab730c7cbdf2c70dda846b22dbd1f795e031b76553f9fd977f6b4bf1b6f9a2fcb5f05017d2fcec14837ab4e408889f33533f1502daaaba0cdc77f6a70d7805880d06f71388809e252c5826348224e5d40f19ae001c7fe9e86b0d514872aa1c858772737a5fe27aa9732659d3d47ec8dc6a47e6ea776fb7a14851db52eb051c1890c2f29885fb8ab3dc785092f556562be997503ebd0038d6614e0f31987570f17cc83f7bf48bbe9d825ed4ff347775bba9a14b9b0f2524ee8745a93c001bddb6c801ae8c17de841d7b63ffb72660f0ea39b7168a8213bde2c1ebc9aabd716e2a598cbda205402eb001257413d78decaa6485c87788eedf5816f8e266ce27860e090dd805a6648cd84e0747224fce0ebbe9e4e2a57d03930b8292c72fc46c86485cfbc687d94b8f2acfff41905a20ed3ebb2cd332cef12697714522ce61757180336ca78ad7a79bede68892819a2a46b0ea7999433f23a7eb1755badc9e42ce6dd62b33dc9a71d07b6f15b1148c5211136d308f467b4c7feabaaf12fe3f3b3eb9269ff903217090ac8bb3c4e3df9829a3aad053e3afa9fc8440b191cf95d2d7a604601482b576c22e23dbd6d9f622ecacd73dfc2b995289f1610053f60d939740cc989bfe71df812da7fa5f11ffb3c977edc6d31bc0954cb660fc911d7f4eb74e14beca02c489445d7a01807faae76a092a89dce03ae2f1f25b131ea9b6cc23e91a16d53c9be31a7c41a637001c8afcbb71e4330560a7454cdf815aa995b64942cd3fa9c551557d6e5aa002f36168223a138be32ddabe675d341f8dfc3661bb3f0861c49334b7e8dec6ff63356bcc08bd61e1fd084a6b3fd0af3caafcf9ae00f233f6f65745f621727f827886ae85e8aeaf9d9097d688095fd6ab17681e3f4ed713cd4852335760f3556f931b86ce7e81e83ba2c3adeb8d6d14726ad26bd52036baa1e3ec744dcf18dc66f613f48bb6d6cfa27030f29f6f3d3b7524597402a8742f4ab85c1e040bfd17cad42864d6700188b373135e3980d97f735d4a170bcc6a4ae06f59175b49292ec19f8673c57aa0e574fd7712fd5fb5ab793328f52bd8e6c15a05d17be9708441201243112c87dd9a55b1d461b0d1a1b1fad2471bfa31b4cd10705ae3f4c4b0b0cf48711a96908309e3ca2be90f483f5a144ab074cf828bb6d13de87e097e7882a833557a130c1fb4c0e95d7214100fc7a956216cf1da01bb39e7a37cd7438de7e66eeacaf859fad7269c635ad901a40546a24cf324ce35aa661579d355b2d94f284b7198fb6df9f3e700175369fed248783e0480f85ea1fe8fb67a7b49d973e5a703f4fca2960ab053e513001c28e67e87438456b2e98d01f38f0aa2c30ace42fc89b0ab952615b4ae8123a88dfec6ac3ac90363938f96a171b6a483eed60c8d34673cd240af774aaec41f0303df99dac09125694b6b7f00f9f7a2edd52b83817243394bd1d8b014cd759f2405dae18495161fe6b86d5466364433a3f2de799c110cd20ae5622f7b903c30e020ab35bd41dcb7cfc1e4a541c3e69ea52d6cb240ea83f597ded8ad1593c168cb600bc98ba151ea21ae0c263689fd85409c9061a60ea962ac69ad4be5fe4f584ab214130f32900491143b273a70ebedb8c8375c44183a13a5156ee1c18d93f03", 0xf00}, {&(0x7f0000006880)="1708ed8aee3279125b2ff660209a6b3459f2c329e94ef73ef274515fc58ef3bf06f17cd2a8baa9b70fa7b9f04d82928f26f1f7b6ef60cf87be09e09f6041ad593ef2b340116e874fbff301c6ebb45857209c4dbfd935dd46020e314542e79ebc9cc6443c748208413f788ceb0ae5985318182fd0375a80d37b", 0x79}], 0x3, &(0x7f0000006940)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @private=0xa010101}}}], 0x20}}, {{&(0x7f0000006980)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000006bc0), 0x0, &(0x7f0000007200)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_ttl={{0x14}}], 0x48}}, {{&(0x7f0000006c40)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000006ec0)=[{&(0x7f0000006c80)="ecbdf0b0876813aedc413331d62a30f9", 0x10}, {&(0x7f0000006cc0)="1e33c1ad836c836b27b03692", 0xc}, {&(0x7f0000006d00)="e92bc5d985331b07fc852bc0", 0xc}, {&(0x7f0000006d40)="e07d2cf3b5fa39201b1a9257dafdbae49dd69ae0dbe2cc70a9218467877fe2a0888543de186d2c897743e7d5674b57808b4db83f36257d2acafb48c6b431b06689a5a7df1af165617d22ab6a73492d1914e33fd863489e1719ee359f939fc7673059c047f58e70106ca9fdafdb09afd7a1db7439d688a8f6d13941e57321ccc344b3649d7c30574a8bd800f22bda720f616c9a2779533e8cbb44fe8168154f2642b8e901fbd3a9d664f489a15c993f91b1d57e7bc5876260ab495d511565747a60a1643910b54eb2e4039bd427848ddf7b5bea2be9c9e88dcd8ddaf9ce2e91c160", 0xe1}], 0x4, &(0x7f0000006f40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x33}}}}], 0x20}}, {{&(0x7f0000007100)={0x2, 0x4e23, @dev}, 0x10, &(0x7f0000007400)=[{&(0x7f0000007140)="d8140ab05aa81e143b58", 0xa}, {&(0x7f0000007180)="0bfd17bf76cb880dbdb04255f0f5a401cabc2a047e1081b979a124c5987ad576982cf7ffffffffffffff2a889b062fefed63337e3df33e209607dad8fea7ef083940cd3392b8afb95787cb3808dc2b42d31588", 0x53}, {&(0x7f0000007280)="5b8182f687241903f0cc6a9b8a9c1b84625e4c010d5cc8a687ea609ca200750507bdc5823dae2727ab659d3b75b6b0ebe9166269f5509a0fa34842c30e2649644316fd0c00a5cfb5258a8c106ae05c2945b4deaacc9d9dbf8f911cdde183f5d84f21e80ed242e1ee5b5d1debcc64b4e57f09a4aec74a6c50dc7819971fed4dda3a94aa7613105b6974fbd744deaff0fe591e16ff763f9f0742244997e09b023e75ed1466b74c7949", 0xa8}, {&(0x7f0000007340)="bdff41ed7a062e29ed5b89b1e233dc2fe6b989536d3be748df9c1b772fbbc0ab0b1c9c938075fbb54953c9a2b991d72916081ee1a14a5499c5b696717b5aa43e69ef9737d9cf4a672490919910d7c3b2408ebbaed31ef029869bdd6aa56382f0baa365fc1a68d6ae8867342af6c24ca463e4fe8a5342d0e70980d050ecdcbf6d58d7aa00e1331f02c6c1222f9fbed18afbe11e9e41a6c1b54c8fa4148390", 0x9e}], 0x4, &(0x7f0000007480)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x18}}, {{&(0x7f0000007500)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000075c0)=[{&(0x7f0000007540)="adc3a6c3a2672655664b5e19fda10009b36f0fdad790a09a043781189be2c3d4c8e93096a7a0b7e2d515503db59b6abc53e1da14db54", 0x36}], 0x1, &(0x7f0000007980)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="cf690000ac1e0001000000001100000000000000540000000100000009000000000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="64010102ac1414aa0000000014000000000000000000000001000000050000000000000084000000000000000000000007000000440c08b1ffffffff00000003832bca0a01010064010100ac1414bb64010102e0000002ac1414aae00000017f00000164010102ffffffff0717c80000000000000000ffffffff0a010102ac14140b0089099af1daa3cfa20d01861a00f8ffff0009a32e3e5993c99e050b6d2981ff1fa2d3ea7f0000000000140000000000000000000000010000000080000000000000"], 0x110}}], 0x7, 0x4080) munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) 1.014740469s ago: executing program 3 (id=432): r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRES8, @ANYRES64=0x0, @ANYRES8=r0, @ANYRES64], 0x48}, 0x300, 0x0, 0x0, 0x24040011}, 0x0) 810.92145ms ago: executing program 4 (id=433): syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="120100005ab05740450c088085e100000001090212"], 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001700), 0x2, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000200)=0x4) r2 = syz_io_uring_setup(0x23c, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x295}, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0400", "0d07080d004fcf0000e8ffff1a8600", "cf0d00", "865703b7e43b34e4"}, 0x28) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000a40)="fb", 0x1}], 0x21) io_uring_enter(r2, 0x2def, 0xf510, 0x8, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f041, 0xffffff80}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) socket(0x22, 0x0, 0x4) syz_emit_ethernet(0x44e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000186dd60d5b33204180000fc00000000000000000000000000000000000000000000000000000000000000625300000040"], 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r6, 0x400000001ffffffd) listen(r6, 0xe539) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r7, &(0x7f00000000c0)='./file0\x00') renameat2(r7, &(0x7f00000001c0)='./file0\x00', r7, &(0x7f00000002c0)='./file0/file0\x00', 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f0000000740)=[{}, {}], 0x44) 0s ago: executing program 3 (id=434): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file1\x00') r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe800000000000000000", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x40}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): : The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.548393][ T5916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.567728][ T5916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.583251][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.605874][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.679109][ T5916] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.692175][ T5916] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.703945][ T5916] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.713629][ T5916] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.768617][ T5323] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 292.960799][ T5323] usb 3-1: Using ep0 maxpacket: 8 [ 292.981958][ T5323] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 293.001423][ T5323] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 293.014665][ T5323] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 293.046900][ T5323] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 293.097673][ T5323] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 293.111359][ T5323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.244053][ T5400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.293484][ T5400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.363512][ T5323] usb 3-1: GET_CAPABILITIES returned 0 [ 293.372586][ T5323] usbtmc 3-1:16.0: can't read capabilities [ 293.420079][ T6107] netlink: 892 bytes leftover after parsing attributes in process `syz.3.69'. [ 293.425966][ T2974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.452336][ T2974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.682561][ T5280] usb 3-1: USB disconnect, device number 3 [ 294.352805][ T5280] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 294.447937][ T6133] hub 9-0:1.0: USB hub found [ 294.463014][ T6133] hub 9-0:1.0: 8 ports detected [ 294.518624][ T6134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.115'. [ 294.560242][ T5280] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.592630][ T6133] netlink: 20 bytes leftover after parsing attributes in process `syz.0.114'. [ 294.622555][ T5280] usb 3-1: config 0 has no interfaces? [ 294.677074][ T5280] usb 3-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 294.686479][ T6133] vlan2: entered promiscuous mode [ 294.739902][ T6134] netlink: 28 bytes leftover after parsing attributes in process `syz.3.115'. [ 294.748628][ T5280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.809706][ T5280] usb 3-1: config 0 descriptor?? [ 294.989490][ T940] usb 5-1: unable to get BOS descriptor or descriptor too short [ 294.998929][ T940] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 295.105671][ T940] usb 5-1: can't read configurations, error -71 [ 295.151413][ T6124] vivid-007: disconnect [ 295.391978][ T6123] vivid-007: reconnect [ 295.427390][ T5281] usb 3-1: USB disconnect, device number 4 [ 295.742366][ T6167] program syz.3.120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.930563][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 296.109978][ T6184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.125'. [ 296.151416][ T5280] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 296.227408][ T940] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 296.353157][ T5280] usb 4-1: config 0 has an invalid interface number: 232 but max is 0 [ 296.370998][ T5280] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.404235][ T5280] usb 4-1: config 0 has no interface number 0 [ 296.424558][ T5280] usb 4-1: config 0 interface 232 altsetting 255 endpoint 0x1 is Bulk; changing to Interrupt [ 296.436227][ T940] usb 5-1: Using ep0 maxpacket: 32 [ 296.459241][ T940] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 296.477692][ T5280] usb 4-1: config 0 interface 232 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 296.489132][ T940] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 296.514036][ T5280] usb 4-1: config 0 interface 232 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 296.529922][ T940] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 296.552104][ T940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 296.586714][ T5229] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 296.586829][ T5280] usb 4-1: config 0 interface 232 has no altsetting 0 [ 296.587014][ T940] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 296.665630][ T940] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 296.705114][ T940] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 296.726574][ T940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.766635][ T940] usb 5-1: config 0 descriptor?? [ 296.804415][ T6195] vhci_hcd: invalid port number 0 [ 296.854945][ T6195] netlink: 'syz.1.127': attribute type 72 has an invalid length. [ 296.894817][ T6195] netlink: 'syz.1.127': attribute type 8 has an invalid length. [ 297.028732][ T940] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 297.081335][ T940] usb 5-1: USB disconnect, device number 13 [ 297.099122][ T940] usblp0: removed [ 297.579307][ T940] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 297.735843][ T5281] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 297.756505][ T940] usb 5-1: Using ep0 maxpacket: 32 [ 297.779218][ T940] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 297.794881][ T940] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 297.804333][ T940] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 297.813579][ T940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 297.823469][ T940] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 297.833643][ T940] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 297.847259][ T940] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 297.857113][ T940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.878352][ T940] usb 5-1: config 0 descriptor?? [ 298.015875][ T5281] usb 1-1: Using ep0 maxpacket: 8 [ 298.023849][ T5281] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 298.040511][ T5281] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 298.054565][ T5281] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 298.068918][ T5281] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 298.086593][ T5281] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 298.097582][ T5281] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.136229][ T940] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 298.376853][ T5281] usb 1-1: GET_CAPABILITIES returned 0 [ 298.389233][ T5281] usbtmc 1-1:16.0: can't read capabilities [ 298.407616][ T9] usb 5-1: USB disconnect, device number 14 [ 298.430682][ T9] usblp0: removed [ 298.616802][ T9] usb 1-1: USB disconnect, device number 7 [ 298.954901][ T5280] usb 4-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice= 3.fc [ 298.966865][ T5280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.063139][ T5280] usb 4-1: config 0 descriptor?? [ 299.195351][ T5280] usb 4-1: can't set config #0, error -71 [ 299.499523][ T5280] usb 4-1: USB disconnect, device number 4 [ 299.513527][ T5229] usb 2-1: unable to get BOS descriptor or descriptor too short [ 299.554743][ T5229] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 299.579926][ T5229] usb 2-1: can't read configurations, error -71 [ 299.658514][ T6238] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 299.665347][ T6240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.140'. [ 299.745687][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 299.852020][ T5323] IPVS: starting estimator thread 0... [ 299.889702][ T5280] IPVS: starting estimator thread 0... [ 299.909887][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.934453][ T9] usb 5-1: config 0 has no interfaces? [ 299.945693][ T6245] IPVS: using max 15 ests per chain, 36000 per kthread [ 299.950765][ T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 299.999690][ T6243] FAULT_INJECTION: forcing a failure. [ 299.999690][ T6243] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 300.001322][ T6249] IPVS: using max 25 ests per chain, 60000 per kthread [ 300.004230][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.033188][ T6243] CPU: 1 UID: 0 PID: 6243 Comm: syz.2.142 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 300.043454][ T6243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 300.053520][ T6243] Call Trace: [ 300.056797][ T6243] [ 300.059728][ T6243] dump_stack_lvl+0x241/0x360 [ 300.064426][ T6243] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.069721][ T6243] ? __pfx__printk+0x10/0x10 [ 300.074317][ T6243] ? __pfx_lock_release+0x10/0x10 [ 300.079375][ T6243] should_fail_ex+0x3b0/0x4e0 [ 300.084264][ T6243] _copy_from_user+0x2f/0xe0 [ 300.088906][ T6243] copy_msghdr_from_user+0xae/0x680 [ 300.094159][ T6243] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 300.100026][ T6243] do_recvmmsg+0x409/0xad0 [ 300.104506][ T6243] ? __pfx_lock_release+0x10/0x10 [ 300.107954][ T9] usb 5-1: config 0 descriptor?? [ 300.109562][ T6243] ? __pfx_do_recvmmsg+0x10/0x10 [ 300.109619][ T6243] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 300.125432][ T6243] ? ksys_write+0x23e/0x2c0 [ 300.129985][ T6243] ? __pfx_lock_release+0x10/0x10 [ 300.135061][ T6243] ? vfs_write+0x7bf/0xc90 [ 300.139537][ T6243] ? __mutex_unlock_slowpath+0x21d/0x750 [ 300.145309][ T6243] ? __fget_files+0x3f3/0x470 [ 300.150043][ T6243] __x64_sys_recvmmsg+0x199/0x250 [ 300.155121][ T6243] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 300.160721][ T6243] ? do_syscall_64+0x100/0x230 [ 300.165543][ T6243] ? do_syscall_64+0xb6/0x230 [ 300.170279][ T6243] do_syscall_64+0xf3/0x230 [ 300.174828][ T6243] ? clear_bhb_loop+0x35/0x90 [ 300.179550][ T6243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.185496][ T6243] RIP: 0033:0x7fe178b7def9 [ 300.189953][ T6243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.209957][ T6243] RSP: 002b:00007fe1798e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 300.218462][ T6243] RAX: ffffffffffffffda RBX: 00007fe178d35f80 RCX: 00007fe178b7def9 [ 300.226567][ T6243] RDX: 0000000000000414 RSI: 0000000020000840 RDI: 0000000000000005 [ 300.234760][ T6243] RBP: 00007fe1798e3090 R08: 0000000000000000 R09: 0000000000000000 [ 300.242950][ T6243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.250965][ T6243] R13: 0000000000000000 R14: 00007fe178d35f80 R15: 00007fe178e5fa28 [ 300.258998][ T6243] [ 300.332990][ T6228] vivid-007: disconnect [ 300.429548][ T6227] vivid-007: reconnect [ 300.446822][ T940] usb 5-1: USB disconnect, device number 15 [ 300.761651][ T6257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.205731][ T940] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 301.367334][ T940] usb 1-1: Using ep0 maxpacket: 32 [ 301.374624][ T940] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 301.383728][ T940] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 301.402722][ T940] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 301.417035][ T940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 301.431508][ T940] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 301.450115][ T940] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 301.469353][ T940] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 301.540382][ T940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.580258][ T940] usb 1-1: config 0 descriptor?? [ 301.808264][ T940] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 301.843156][ T940] usb 1-1: USB disconnect, device number 8 [ 301.886667][ T940] usblp0: removed [ 301.928673][ T6288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.152'. [ 302.170785][ T5323] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 302.300082][ T6292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.154'. [ 302.375785][ T940] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 302.402798][ T6286] vhci_hcd: invalid port number 0 [ 302.443759][ T6286] netlink: 'syz.3.151': attribute type 72 has an invalid length. [ 302.451961][ T6286] netlink: 'syz.3.151': attribute type 8 has an invalid length. [ 302.545753][ T940] usb 1-1: Using ep0 maxpacket: 32 [ 302.573707][ T940] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 302.606004][ T940] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 302.614995][ T940] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 302.630079][ T940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 302.643069][ T940] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 302.663284][ T940] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 302.706127][ T940] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 302.746589][ T940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.756650][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 302.794217][ T940] usb 1-1: config 0 descriptor?? [ 302.942555][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.963903][ T9] usb 3-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6d.4d [ 303.002814][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.031538][ T940] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 303.047950][ T9] usb 3-1: config 0 descriptor?? [ 303.072131][ T9] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 303.085273][ T9] command write [95] error -22 [ 303.240584][ T5229] usb 1-1: USB disconnect, device number 9 [ 303.274810][ T5229] usblp0: removed [ 303.296073][ T5276] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 303.318315][ T937] usb 3-1: USB disconnect, device number 5 [ 303.478453][ T5276] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.521016][ T5276] usb 2-1: config 0 has no interfaces? [ 303.542212][ T5276] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 303.566797][ T5276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.604710][ T5276] usb 2-1: config 0 descriptor?? [ 303.869452][ T6303] vivid-007: disconnect [ 304.062858][ T6302] vivid-007: reconnect [ 304.071495][ T5276] usb 2-1: USB disconnect, device number 11 [ 304.161228][ T6311] block device autoloading is deprecated and will be removed. [ 304.291619][ T6311] syz.0.159: attempt to access beyond end of device [ 304.291619][ T6311] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 304.362973][ T6319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.622051][ T6327] netlink: 'syz.4.164': attribute type 21 has an invalid length. [ 304.631986][ T6327] netlink: 156 bytes leftover after parsing attributes in process `syz.4.164'. [ 304.654469][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 304.851759][ T5323] usb 4-1: unable to get BOS descriptor or descriptor too short [ 304.892156][ T5323] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 304.915673][ T5323] usb 4-1: can't read configurations, error -71 [ 304.941947][ T6336] netlink: 'syz.3.167': attribute type 29 has an invalid length. [ 304.960105][ T6336] netlink: 'syz.3.167': attribute type 29 has an invalid length. [ 305.202653][ T5276] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 305.345891][ T5323] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 305.365760][ T5276] usb 1-1: Using ep0 maxpacket: 32 [ 305.391009][ T5276] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 305.400406][ T5276] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 305.415079][ T5276] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 305.431785][ T5276] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 305.446406][ T5276] usb 1-1: config 0 interface 0 has no altsetting 0 [ 305.460220][ T5276] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 305.472587][ T5276] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 305.482710][ T5276] usb 1-1: Product: syz [ 305.490353][ T5276] usb 1-1: Manufacturer: syz [ 305.495355][ T5276] usb 1-1: SerialNumber: syz [ 305.511937][ T5276] usb 1-1: config 0 descriptor?? [ 305.530716][ T5276] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 305.540748][ T5323] usb 4-1: Using ep0 maxpacket: 8 [ 305.552608][ T5323] usb 4-1: config 0 has no interfaces? [ 305.564161][ T5276] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 305.582973][ T5323] usb 4-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=56.a0 [ 305.616775][ T5323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.635705][ T937] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 305.656079][ T5323] usb 4-1: Product: syz [ 305.670453][ T5323] usb 4-1: Manufacturer: syz [ 305.681803][ T5323] usb 4-1: SerialNumber: syz [ 305.707527][ T5323] usb 4-1: config 0 descriptor?? [ 305.834142][ T937] usb 5-1: unable to get BOS descriptor or descriptor too short [ 305.864805][ T9] usb 1-1: USB disconnect, device number 10 [ 305.873977][ T9] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 305.897942][ T937] usb 5-1: no configurations [ 305.933044][ T937] usb 5-1: can't read configurations, error -22 [ 306.269993][ T6356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.174'. [ 306.516770][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 306.580318][ T940] usb 4-1: USB disconnect, device number 6 [ 306.698443][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 306.720942][ T9] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 306.738560][ T9] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 306.747418][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 306.756699][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 306.766600][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 306.776357][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 306.790242][ T9] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 306.800388][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.813700][ T6369] hub 9-0:1.0: USB hub found [ 306.830539][ T6369] hub 9-0:1.0: 8 ports detected [ 306.831679][ T9] usb 2-1: config 0 descriptor?? [ 306.922632][ T6369] netlink: 20 bytes leftover after parsing attributes in process `syz.3.177'. [ 306.949817][ T6369] vlan2: entered promiscuous mode [ 307.064531][ T9] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 307.078059][ T9] usb 2-1: USB disconnect, device number 12 [ 307.092179][ T9] usblp0: removed [ 307.375959][ T5276] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 307.396644][ T6380] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.587901][ T6374] vhci_hcd: invalid port number 0 [ 307.605809][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 307.633349][ T6374] netlink: 'syz.0.178': attribute type 72 has an invalid length. [ 307.643843][ T6374] netlink: 'syz.0.178': attribute type 8 has an invalid length. [ 307.785705][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 307.795437][ T9] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 307.811215][ T9] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 307.824404][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 307.834631][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 307.848302][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 307.859993][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 307.883137][ T5323] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 307.884232][ T9] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 307.901510][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.950664][ T9] usb 2-1: config 0 descriptor?? [ 308.078021][ T5323] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.097640][ T5323] usb 3-1: config 0 has no interfaces? [ 308.103919][ T5323] usb 3-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 308.129159][ T5323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.178762][ T5323] usb 3-1: config 0 descriptor?? [ 308.191389][ T9] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 308.356900][ T6386] netlink: 'syz.4.183': attribute type 29 has an invalid length. [ 308.380596][ T6386] netlink: 'syz.4.183': attribute type 29 has an invalid length. [ 308.409466][ T9] usb 2-1: USB disconnect, device number 13 [ 308.441288][ T9] usblp0: removed [ 308.483993][ T6382] vivid-007: disconnect [ 308.628842][ T6391] netlink: 'syz.4.184': attribute type 29 has an invalid length. [ 308.658064][ T6391] FAULT_INJECTION: forcing a failure. [ 308.658064][ T6391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.676358][ T6381] vivid-007: reconnect [ 308.697470][ T5280] usb 3-1: USB disconnect, device number 6 [ 308.703423][ T6391] CPU: 0 UID: 0 PID: 6391 Comm: syz.4.184 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 308.713702][ T6391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 308.723782][ T6391] Call Trace: [ 308.727090][ T6391] [ 308.730047][ T6391] dump_stack_lvl+0x241/0x360 [ 308.734762][ T6391] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.740089][ T6391] ? __pfx__printk+0x10/0x10 [ 308.744722][ T6391] ? __pfx_lock_release+0x10/0x10 [ 308.749800][ T6391] should_fail_ex+0x3b0/0x4e0 [ 308.754523][ T6391] _copy_from_user+0x2f/0xe0 [ 308.759157][ T6391] copy_msghdr_from_user+0xae/0x680 [ 308.764398][ T6391] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 308.770247][ T6391] __sys_recvmsg+0x24c/0x3d0 [ 308.774878][ T6391] ? __pfx___sys_recvmsg+0x10/0x10 [ 308.780071][ T6391] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 308.786437][ T6391] ? do_syscall_64+0x100/0x230 [ 308.791254][ T6391] ? do_syscall_64+0xb6/0x230 [ 308.795950][ T6391] do_syscall_64+0xf3/0x230 [ 308.800493][ T6391] ? clear_bhb_loop+0x35/0x90 [ 308.805216][ T6391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.811151][ T6391] RIP: 0033:0x7fa8a217def9 [ 308.815598][ T6391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.835316][ T6391] RSP: 002b:00007fa8a2fa1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 308.843789][ T6391] RAX: ffffffffffffffda RBX: 00007fa8a2335f80 RCX: 00007fa8a217def9 [ 308.851790][ T6391] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 308.859786][ T6391] RBP: 00007fa8a2fa1090 R08: 0000000000000000 R09: 0000000000000000 [ 308.867784][ T6391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.875785][ T6391] R13: 0000000000000000 R14: 00007fa8a2335f80 R15: 00007fa8a245fa28 [ 308.883793][ T6391] [ 309.726583][ T937] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 309.864520][ T6413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.191'. [ 309.913827][ T5276] usb 1-1: unable to get BOS descriptor or descriptor too short [ 309.934037][ T937] usb 4-1: Using ep0 maxpacket: 8 [ 309.951385][ T937] usb 4-1: config 0 has no interfaces? [ 309.965935][ T5276] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 309.984977][ T5276] usb 1-1: can't read configurations, error -71 [ 309.995183][ T937] usb 4-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=56.a0 [ 310.012192][ T937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.035671][ T937] usb 4-1: Product: syz [ 310.039933][ T937] usb 4-1: Manufacturer: syz [ 310.057175][ T937] usb 4-1: SerialNumber: syz [ 310.075296][ T937] usb 4-1: config 0 descriptor?? [ 310.326490][ T6425] hub 9-0:1.0: USB hub found [ 310.332812][ T6425] hub 9-0:1.0: 8 ports detected [ 310.484741][ T6424] netlink: 20 bytes leftover after parsing attributes in process `syz.1.193'. [ 310.585212][ T6424] vlan1: entered promiscuous mode [ 311.104347][ T5280] usb 4-1: USB disconnect, device number 7 [ 311.174523][ T6431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.195'. [ 311.196348][ T5229] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 311.226124][ T6431] netlink: 28 bytes leftover after parsing attributes in process `syz.4.195'. [ 311.256834][ T5276] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 311.321722][ T6431] netlink: 20 bytes leftover after parsing attributes in process `syz.4.195'. [ 311.390412][ T5229] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 311.408635][ T5229] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 311.424093][ T5229] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 311.434863][ T5276] usb 1-1: Using ep0 maxpacket: 16 [ 311.450220][ T5276] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.465090][ T5229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.475383][ T5276] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.516478][ T6423] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 311.520017][ T5276] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 311.538105][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 311.545406][ T5276] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.561535][ T5229] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 311.589615][ T5276] usb 1-1: config 0 descriptor?? [ 311.735807][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 311.744311][ T9] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 311.753482][ T9] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 311.764592][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 311.774213][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 311.800107][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 311.826523][ T5281] usb 3-1: USB disconnect, device number 7 [ 311.836284][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 311.882245][ T9] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 311.916066][ T5280] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 311.923898][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.940089][ T9] usb 4-1: config 0 descriptor?? [ 312.023934][ T5276] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0 [ 312.047008][ T5276] corsair 0003:1B1C:1B02.0002: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 312.087828][ T5280] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 312.138790][ T5280] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 312.151136][ T5280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 312.164307][ T5280] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 312.185392][ T9] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 312.204335][ T5280] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 312.223329][ T9] usb 4-1: USB disconnect, device number 8 [ 312.237731][ T5280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.254468][ T5280] usb 5-1: Product: syz [ 312.259470][ T9] usblp0: removed [ 312.271315][ T5280] usb 5-1: Manufacturer: syz [ 312.278615][ T5280] usb 5-1: SerialNumber: syz [ 312.303857][ T5280] usb 5-1: config 0 descriptor?? [ 312.314636][ T6436] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 312.416167][ T5280] rc_core: IR keymap rc-imon-rsc not found [ 312.431791][ T5280] Registered IR keymap rc-empty [ 312.446705][ T5280] rc rc0: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 312.471761][ T5280] input: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input12 [ 312.555866][ T5280] usb 5-1: USB disconnect, device number 18 [ 312.697144][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 312.856827][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 312.877350][ T9] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 312.886314][ T9] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 312.895085][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 312.934186][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 312.964772][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 312.983599][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 312.997057][ T9] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 313.006688][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.047366][ T9] usb 4-1: config 0 descriptor?? [ 313.261246][ T9] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 313.408831][ T5276] corsair 0003:1B1C:1B02.0002: Failed to get K90 initial state (error -71). [ 313.437202][ T5276] usb 1-1: USB disconnect, device number 13 [ 313.491932][ T9] usb 4-1: USB disconnect, device number 9 [ 313.544667][ T9] usblp0: removed [ 313.737011][ T5229] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 313.800475][ T6460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.204'. [ 313.942082][ T6457] vhci_hcd: invalid port number 0 [ 314.011742][ T6457] netlink: 'syz.4.203': attribute type 72 has an invalid length. [ 314.030666][ T6457] netlink: 'syz.4.203': attribute type 8 has an invalid length. [ 314.095056][ T6467] hub 9-0:1.0: USB hub found [ 314.120687][ T6467] hub 9-0:1.0: 8 ports detected [ 314.615888][ T5276] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 314.669734][ T6467] netlink: 20 bytes leftover after parsing attributes in process `syz.2.205'. [ 314.710503][ T6467] vlan0: entered promiscuous mode [ 314.785203][ T5397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.805927][ T5276] usb 2-1: Using ep0 maxpacket: 8 [ 314.821667][ T5276] usb 2-1: config 0 has no interfaces? [ 314.835288][ T5276] usb 2-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=56.a0 [ 314.840892][ T5397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.871497][ T5276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.909771][ T5276] usb 2-1: Product: syz [ 314.943564][ T5276] usb 2-1: Manufacturer: syz [ 314.959657][ T5276] usb 2-1: SerialNumber: syz [ 314.997900][ T5276] usb 2-1: config 0 descriptor?? [ 315.236869][ T6479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.408722][ T5276] IPVS: starting estimator thread 0... [ 315.503292][ T6484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.211'. [ 315.535694][ T6482] IPVS: using max 16 ests per chain, 38400 per kthread [ 315.548579][ T6484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.211'. [ 315.577215][ T6484] geneve2: entered promiscuous mode [ 315.825113][ T5280] usb 2-1: USB disconnect, device number 14 [ 315.881217][ T6492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'. [ 316.385413][ T5229] usb 5-1: unable to get BOS descriptor or descriptor too short [ 316.432091][ T5229] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 316.460203][ T5229] usb 5-1: can't read configurations, error -71 [ 316.478298][ T937] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 316.497673][ T6513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.218'. [ 316.675763][ T937] usb 4-1: Using ep0 maxpacket: 8 [ 316.684396][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 316.708701][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 316.742693][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 316.779602][ T937] usb 4-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 316.805402][ T937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.842258][ T937] usb 4-1: Product: syz [ 316.855017][ T937] usb 4-1: Manufacturer: syz [ 316.868253][ T937] usb 4-1: SerialNumber: syz [ 316.891667][ T937] usb 4-1: config 0 descriptor?? [ 316.915320][ T937] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 317.519412][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.528066][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.782685][ T5229] usb 4-1: USB disconnect, device number 10 [ 317.895812][ T5280] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 318.089736][ T5280] usb 5-1: Using ep0 maxpacket: 8 [ 318.142355][ T5280] usb 5-1: config 0 has no interfaces? [ 318.172892][ T5280] usb 5-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=56.a0 [ 318.198646][ T5280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.222331][ T5280] usb 5-1: Product: syz [ 318.236045][ T5280] usb 5-1: Manufacturer: syz [ 318.251709][ T5280] usb 5-1: SerialNumber: syz [ 318.283081][ T5280] usb 5-1: config 0 descriptor?? [ 318.375821][ T5281] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 318.493168][ T6553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.232'. [ 318.547887][ T5281] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 318.576234][ T5281] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.620143][ T5281] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 318.638454][ T5281] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.668901][ T5281] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 318.699539][ T5281] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 318.731303][ T5281] usb 2-1: Product: syz [ 318.752782][ T5281] usb 2-1: Manufacturer: syz [ 318.768996][ T5281] cdc_wdm 2-1:1.0: skipping garbage [ 318.787565][ T5281] cdc_wdm 2-1:1.0: skipping garbage [ 318.845499][ T5281] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 318.960066][ T5281] cdc_wdm 2-1:1.0: Unknown control protocol [ 319.211465][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 319.211585][ T5281] usb 2-1: USB disconnect, device number 15 [ 319.218338][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 319.230403][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 319.379590][ T9] usb 5-1: USB disconnect, device number 21 [ 319.580240][ T6569] netlink: 36 bytes leftover after parsing attributes in process `syz.3.235'. [ 319.601398][ T6569] netlink: 16 bytes leftover after parsing attributes in process `syz.3.235'. [ 319.653935][ T6569] netlink: 36 bytes leftover after parsing attributes in process `syz.3.235'. [ 319.699634][ T6569] netlink: 36 bytes leftover after parsing attributes in process `syz.3.235'. [ 320.012299][ T6580] pim6reg1: entered promiscuous mode [ 320.019371][ T6580] pim6reg1: entered allmulticast mode [ 320.065731][ T5229] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 320.227477][ T5229] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.246047][ T5229] usb 1-1: config 0 has no interfaces? [ 320.251691][ T5229] usb 1-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 320.330691][ T5229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.368096][ T5229] usb 1-1: config 0 descriptor?? [ 320.536561][ T5281] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 320.656495][ T6575] vivid-007: disconnect [ 320.735719][ T5281] usb 3-1: Using ep0 maxpacket: 16 [ 320.749960][ T5281] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.841810][ T5281] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 320.877510][ T6573] vivid-007: reconnect [ 320.882216][ T5276] usb 1-1: USB disconnect, device number 14 [ 320.916678][ T5281] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 320.927775][ T5281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.945628][ T5281] usb 3-1: Product: syz [ 320.950011][ T5281] usb 3-1: Manufacturer: syz [ 320.962708][ T5281] usb 3-1: SerialNumber: syz [ 320.995769][ T5229] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 321.166475][ T5229] usb 5-1: Using ep0 maxpacket: 8 [ 321.178345][ T5229] usb 5-1: config 0 has no interfaces? [ 321.207308][ T5229] usb 5-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=56.a0 [ 321.209751][ T5281] usb 3-1: 0:2 : does not exist [ 321.222937][ T5229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.234463][ T5229] usb 5-1: Product: syz [ 321.248040][ T5229] usb 5-1: Manufacturer: syz [ 321.258070][ T5229] usb 5-1: SerialNumber: syz [ 321.268195][ T5229] usb 5-1: config 0 descriptor?? [ 321.312252][ T5281] usb 3-1: USB disconnect, device number 8 [ 321.377641][ T5524] udevd[5524]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 321.630285][ T6607] netlink: 20 bytes leftover after parsing attributes in process `syz.0.250'. [ 321.707434][ T6608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.249'. [ 322.271635][ T6620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.253'. [ 322.306140][ T940] usb 5-1: USB disconnect, device number 22 [ 322.548000][ T6624] FAULT_INJECTION: forcing a failure. [ 322.548000][ T6624] name failslab, interval 1, probability 0, space 0, times 1 [ 322.616161][ T6624] CPU: 0 UID: 0 PID: 6624 Comm: syz.4.254 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 322.626468][ T6624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 322.636535][ T6624] Call Trace: [ 322.639822][ T6624] [ 322.642780][ T6624] dump_stack_lvl+0x241/0x360 [ 322.647501][ T6624] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.652732][ T6624] ? __pfx__printk+0x10/0x10 [ 322.657407][ T6624] ? ref_tracker_alloc+0x332/0x490 [ 322.662557][ T6624] should_fail_ex+0x3b0/0x4e0 [ 322.667266][ T6624] ? skb_clone+0x20c/0x390 [ 322.671735][ T6624] should_failslab+0xac/0x100 [ 322.676461][ T6624] ? skb_clone+0x20c/0x390 [ 322.680925][ T6624] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 322.686348][ T6624] skb_clone+0x20c/0x390 [ 322.690607][ T6624] __netlink_deliver_tap+0x3cc/0x7c0 [ 322.695908][ T6624] ? netlink_deliver_tap+0x2e/0x1b0 [ 322.701124][ T6624] netlink_deliver_tap+0x19d/0x1b0 [ 322.706251][ T6624] netlink_unicast+0x7c4/0x990 [ 322.711113][ T6624] ? __pfx_netlink_unicast+0x10/0x10 [ 322.716405][ T6624] ? __virt_addr_valid+0x183/0x530 [ 322.721695][ T6624] ? __check_object_size+0x48e/0x900 [ 322.727009][ T6624] netlink_sendmsg+0x8e4/0xcb0 [ 322.731812][ T6624] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.737196][ T6624] ? aa_sock_msg_perm+0x91/0x160 [ 322.742141][ T6624] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.747430][ T6624] __sock_sendmsg+0x221/0x270 [ 322.752112][ T6624] ____sys_sendmsg+0x52a/0x7e0 [ 322.756892][ T6624] ? __pfx_____sys_sendmsg+0x10/0x10 [ 322.762196][ T6624] __sys_sendmsg+0x2aa/0x390 [ 322.766803][ T6624] ? __pfx___sys_sendmsg+0x10/0x10 [ 322.772005][ T6624] ? vfs_write+0x7bf/0xc90 [ 322.776456][ T6624] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 322.782805][ T6624] ? do_syscall_64+0x100/0x230 [ 322.787580][ T6624] ? do_syscall_64+0xb6/0x230 [ 322.792277][ T6624] do_syscall_64+0xf3/0x230 [ 322.796807][ T6624] ? clear_bhb_loop+0x35/0x90 [ 322.801487][ T6624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.807386][ T6624] RIP: 0033:0x7fa8a217def9 [ 322.811805][ T6624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.831414][ T6624] RSP: 002b:00007fa8a2fa1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.839925][ T6624] RAX: ffffffffffffffda RBX: 00007fa8a2335f80 RCX: 00007fa8a217def9 [ 322.847909][ T6624] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 322.855926][ T6624] RBP: 00007fa8a2fa1090 R08: 0000000000000000 R09: 0000000000000000 [ 322.863992][ T6624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.871968][ T6624] R13: 0000000000000000 R14: 00007fa8a2335f80 R15: 00007fa8a245fa28 [ 322.879973][ T6624] [ 322.883120][ C0] vkms_vblank_simulate: vblank timer overrun [ 323.053467][ T6633] Cannot find set identified by id 0 to match [ 323.984218][ T6620] netlink: 28 bytes leftover after parsing attributes in process `syz.2.253'. [ 324.017315][ T6626] netlink: 20 bytes leftover after parsing attributes in process `syz.2.253'. [ 324.233102][ T6647] hub 9-0:1.0: USB hub found [ 324.238734][ T6647] hub 9-0:1.0: 8 ports detected [ 324.419415][ T6647] netlink: 20 bytes leftover after parsing attributes in process `syz.1.259'. [ 324.459324][ T6647] vlan1: entered promiscuous mode [ 324.556158][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 324.723213][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.793258][ T9] usb 3-1: config 0 has no interfaces? [ 324.828938][ T9] usb 3-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 324.903045][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.944115][ T9] usb 3-1: config 0 descriptor?? [ 325.173921][ T6650] vivid-007: disconnect [ 325.365946][ T5281] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 325.462346][ T6648] vivid-007: reconnect [ 325.526634][ T5229] usb 3-1: USB disconnect, device number 9 [ 325.547388][ T5281] usb 4-1: Using ep0 maxpacket: 8 [ 325.593892][ T5281] usb 4-1: config 0 has no interfaces? [ 325.604822][ T5281] usb 4-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=56.a0 [ 325.627574][ T5281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.641669][ T5281] usb 4-1: Product: syz [ 325.648636][ T5281] usb 4-1: Manufacturer: syz [ 325.653247][ T5281] usb 4-1: SerialNumber: syz [ 325.678818][ T5281] usb 4-1: config 0 descriptor?? [ 325.978480][ T6675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.270'. [ 325.996429][ T6675] netlink: 28 bytes leftover after parsing attributes in process `syz.4.270'. [ 326.009434][ T6675] netlink: 20 bytes leftover after parsing attributes in process `syz.4.270'. [ 326.026868][ T6676] openvswitch: netlink: Duplicate or invalid key (type 0). [ 326.054790][ T6676] openvswitch: netlink: Actions may not be safe on all matching packets [ 326.068086][ T6591] coredump: 79(syz.3.245): written to core: VMAs: 35, size 97345536; core: 60023806 bytes, pos 97353728 [ 326.082359][ T5281] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 326.216414][ T6678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.272'. [ 326.275685][ T5281] usb 1-1: Using ep0 maxpacket: 8 [ 326.285158][ T5281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 223, changing to 11 [ 326.303675][ T5281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.336009][ T5281] usb 1-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 326.346169][ T5281] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.662339][ T5229] usb 4-1: USB disconnect, device number 11 [ 326.716040][ T5281] usb 1-1: config 0 descriptor?? [ 327.054764][ T6670] xt_CT: No such helper "snmp" [ 327.145949][ T5229] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 327.225230][ T6670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.284674][ T6670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.327625][ T5229] usb 2-1: config 0 has an invalid interface number: 18 but max is 0 [ 327.345639][ T5229] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.357362][ T5324] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 327.382795][ T5281] hid-alps 0003:044E:1215.0003: unknown main item tag 0x0 [ 327.391343][ T5281] hid-alps 0003:044E:1215.0003: unknown main item tag 0x0 [ 327.396132][ T5229] usb 2-1: config 0 has no interface number 0 [ 327.418365][ T5229] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 327.452023][ T5229] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 327.470589][ T5229] usb 2-1: Manufacturer: syz [ 327.482705][ T5281] hid-alps 0003:044E:1215.0003: unknown main item tag 0x0 [ 327.491340][ T5229] usb 2-1: config 0 descriptor?? [ 327.524354][ T5281] hid-alps 0003:044E:1215.0003: unknown main item tag 0x0 [ 327.555165][ T6700] vhci_hcd: invalid port number 0 [ 327.587313][ T5281] hid-alps 0003:044E:1215.0003: unknown main item tag 0x0 [ 327.689970][ T5281] hid-alps 0003:044E:1215.0003: hidraw0: USB HID v40.00 Device [HID 044e:1215] on usb-dummy_hcd.0-1/input0 [ 327.754939][ T5281] usb 1-1: USB disconnect, device number 16 [ 327.852067][ T6708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.283'. [ 327.868875][ T5229] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 327.901799][ T6708] netlink: 28 bytes leftover after parsing attributes in process `syz.2.283'. [ 327.931348][ T6709] QAT: Device 0 not found [ 327.949074][ T6708] netlink: 20 bytes leftover after parsing attributes in process `syz.2.283'. [ 327.951392][ T5229] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 327.968089][ T5280] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 328.181985][ T5280] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.211256][ T5280] usb 5-1: config 0 has no interfaces? [ 328.232602][ T5280] usb 5-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 328.298204][ T5280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.340661][ T5280] usb 5-1: config 0 descriptor?? [ 328.389352][ T6713] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 328.629379][ T6706] vivid-007: disconnect [ 328.787967][ T6705] vivid-007: reconnect [ 328.802696][ T5276] usb 5-1: USB disconnect, device number 23 [ 328.916664][ T5229] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 329.115728][ T5229] usb 1-1: Using ep0 maxpacket: 8 [ 329.137657][ T5229] usb 1-1: config 0 has no interfaces? [ 329.149658][ T5229] usb 1-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=56.a0 [ 329.161956][ T5229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.170976][ T5229] usb 1-1: Product: syz [ 329.175374][ T5229] usb 1-1: Manufacturer: syz [ 329.185965][ T5229] usb 1-1: SerialNumber: syz [ 329.193590][ T5229] usb 1-1: config 0 descriptor?? [ 329.716973][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.291'. [ 329.901484][ T5276] usb 2-1: USB disconnect, device number 16 [ 330.064663][ T5324] usb 4-1: unable to get BOS descriptor or descriptor too short [ 330.086244][ T5324] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 330.094156][ T5324] usb 4-1: can't read configurations, error -71 [ 330.272123][ T5280] usb 1-1: USB disconnect, device number 17 [ 330.430005][ T29] audit: type=1326 audit(1727118430.484:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6740 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93f57def9 code=0x7ffc0000 [ 330.506240][ T29] audit: type=1326 audit(1727118430.494:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6740 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7fa93f57def9 code=0x7ffc0000 [ 330.535221][ T29] audit: type=1326 audit(1727118430.494:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6740 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93f57def9 code=0x7ffc0000 [ 330.594569][ T29] audit: type=1326 audit(1727118430.494:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6740 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93f57def9 code=0x7ffc0000 [ 330.618615][ T29] audit: type=1326 audit(1727118430.494:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6740 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fa93f57def9 code=0x7ffc0000 [ 330.648738][ T29] audit: type=1326 audit(1727118430.494:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6740 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93f57def9 code=0x7ffc0000 [ 330.673987][ T29] audit: type=1326 audit(1727118430.494:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6740 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93f57def9 code=0x7ffc0000 [ 330.712378][ T29] audit: type=1326 audit(1727118430.494:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6740 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa93f57def9 code=0x7ffc0000 [ 330.755647][ T5280] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 330.758045][ T29] audit: type=1326 audit(1727118430.494:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6740 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93f57def9 code=0x7ffc0000 [ 330.794675][ T29] audit: type=1326 audit(1727118430.494:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6740 comm="syz.1.293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93f57def9 code=0x7ffc0000 [ 330.975908][ T5280] usb 1-1: Using ep0 maxpacket: 8 [ 330.987954][ T5280] usb 1-1: config 0 has no interfaces? [ 330.995805][ T5280] usb 1-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=56.a0 [ 331.007773][ T5280] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.040065][ T5280] usb 1-1: Product: syz [ 331.071300][ T5280] usb 1-1: Manufacturer: syz [ 331.088695][ T5280] usb 1-1: SerialNumber: syz [ 331.113152][ T5280] usb 1-1: config 0 descriptor?? [ 331.387377][ T6762] tc_dump_action: action bad kind [ 331.405231][ T6762] sctp: [Deprecated]: syz.2.299 (pid 6762) Use of int in max_burst socket option deprecated. [ 331.405231][ T6762] Use struct sctp_assoc_value instead [ 331.433492][ T6762] x_tables: duplicate underflow at hook 3 [ 331.701256][ T6770] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 331.725308][ T6770] team0: Device ipvlan0 failed to register rx_handler [ 331.895912][ T5324] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 331.923445][ T5229] usb 1-1: USB disconnect, device number 18 [ 332.046131][ T6781] netlink: 20 bytes leftover after parsing attributes in process `syz.1.308'. [ 332.086245][ T5324] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.109002][ T5324] usb 4-1: config 0 has no interfaces? [ 332.114648][ T5324] usb 4-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 332.145688][ T5324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.196569][ T5324] usb 4-1: config 0 descriptor?? [ 332.432071][ T6771] vivid-007: disconnect [ 332.574714][ T6769] vivid-007: reconnect [ 332.592430][ T9] usb 4-1: USB disconnect, device number 14 [ 332.605719][ T5324] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 332.815922][ T5324] usb 2-1: Using ep0 maxpacket: 8 [ 332.830056][ T5324] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 332.895701][ T5324] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 332.909905][ T5324] usb 2-1: config 168 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 332.932422][ T5324] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 332.940140][ T5324] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 332.952108][ T5324] usb 2-1: config 168 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 332.980088][ T5324] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 332.993342][ T5324] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 333.021639][ T5324] usb 2-1: config 168 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 333.043489][ T5324] usb 2-1: string descriptor 0 read error: -22 [ 333.053196][ T5324] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 333.072641][ T5324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.100384][ T5324] adutux 2-1:168.0: interrupt endpoints not found [ 333.369381][ T5324] usb 2-1: USB disconnect, device number 17 [ 333.642995][ T6814] FAULT_INJECTION: forcing a failure. [ 333.642995][ T6814] name failslab, interval 1, probability 0, space 0, times 0 [ 333.664914][ T6814] CPU: 0 UID: 0 PID: 6814 Comm: syz.4.317 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 333.675238][ T6814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 333.685336][ T6814] Call Trace: [ 333.688832][ T6814] [ 333.691801][ T6814] dump_stack_lvl+0x241/0x360 [ 333.696529][ T6814] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.701778][ T6814] ? __pfx__printk+0x10/0x10 [ 333.706429][ T6814] ? ref_tracker_alloc+0x332/0x490 [ 333.711587][ T6814] should_fail_ex+0x3b0/0x4e0 [ 333.716319][ T6814] ? skb_clone+0x20c/0x390 [ 333.720791][ T6814] should_failslab+0xac/0x100 [ 333.725516][ T6814] ? skb_clone+0x20c/0x390 [ 333.729985][ T6814] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 333.735410][ T6814] skb_clone+0x20c/0x390 [ 333.739706][ T6814] __netlink_deliver_tap+0x3cc/0x7c0 [ 333.745136][ T6814] ? netlink_deliver_tap+0x2e/0x1b0 [ 333.750379][ T6814] netlink_deliver_tap+0x19d/0x1b0 [ 333.755546][ T6814] netlink_unicast+0x7c4/0x990 [ 333.760363][ T6814] ? __pfx_netlink_unicast+0x10/0x10 [ 333.765697][ T6814] ? __virt_addr_valid+0x183/0x530 [ 333.770853][ T6814] ? __check_object_size+0x48e/0x900 [ 333.776184][ T6814] netlink_sendmsg+0x8e4/0xcb0 [ 333.781009][ T6814] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.786349][ T6814] ? aa_sock_msg_perm+0x91/0x160 [ 333.791339][ T6814] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.796664][ T6814] __sock_sendmsg+0x221/0x270 [ 333.801390][ T6814] ____sys_sendmsg+0x52a/0x7e0 [ 333.806217][ T6814] ? __pfx_____sys_sendmsg+0x10/0x10 [ 333.811657][ T6814] __sys_sendmsg+0x2aa/0x390 [ 333.816299][ T6814] ? __pfx___sys_sendmsg+0x10/0x10 [ 333.821460][ T6814] ? vfs_write+0x7bf/0xc90 [ 333.825974][ T6814] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 333.832377][ T6814] ? do_syscall_64+0x100/0x230 [ 333.837274][ T6814] ? do_syscall_64+0xb6/0x230 [ 333.842002][ T6814] do_syscall_64+0xf3/0x230 [ 333.846548][ T6814] ? clear_bhb_loop+0x35/0x90 [ 333.851268][ T6814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.857201][ T6814] RIP: 0033:0x7fa8a217def9 [ 333.861661][ T6814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.881422][ T6814] RSP: 002b:00007fa8a2fa1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.889893][ T6814] RAX: ffffffffffffffda RBX: 00007fa8a2335f80 RCX: 00007fa8a217def9 [ 333.897906][ T6814] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 333.905916][ T6814] RBP: 00007fa8a2fa1090 R08: 0000000000000000 R09: 0000000000000000 [ 333.913927][ T6814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.921937][ T6814] R13: 0000000000000000 R14: 00007fa8a2335f80 R15: 00007fa8a245fa28 [ 333.929966][ T6814] [ 333.945307][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 333.960923][ T6814] netlink: 'syz.4.317': attribute type 9 has an invalid length. [ 333.974323][ T6814] netlink: 399 bytes leftover after parsing attributes in process `syz.4.317'. [ 334.105642][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 334.112817][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 4 [ 334.144363][ T9] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 334.155089][ T9] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 334.165053][ T9] usb 4-1: Product: syz [ 334.169622][ T9] usb 4-1: Manufacturer: syz [ 334.174368][ T9] usb 4-1: SerialNumber: syz [ 334.182161][ T6820] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 334.194470][ T9] usb 4-1: config 0 descriptor?? [ 334.207393][ T6804] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 334.214903][ T6819] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 334.316011][ T5280] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 334.440869][ T6804] tunl0: entered promiscuous mode [ 334.466731][ T6804] netlink: 'syz.3.314': attribute type 1 has an invalid length. [ 334.475029][ T5280] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 334.487460][ T5280] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 334.497804][ T6804] netlink: 9 bytes leftover after parsing attributes in process `syz.3.314'. [ 334.508281][ T5280] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 334.517646][ T5280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.526348][ T6838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.324'. [ 334.596217][ T6829] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 334.630577][ T6843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.327'. [ 334.681618][ T6847] netlink: 20 bytes leftover after parsing attributes in process `syz.4.324'. [ 334.700054][ T5280] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 335.074273][ T5324] usb 2-1: USB disconnect, device number 18 [ 335.123347][ T5276] usb 4-1: USB disconnect, device number 15 [ 335.438193][ T5239] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 335.444921][ T5239] Bluetooth: hci3: command 0x206a tx timeout [ 335.524787][ T6872] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 335.920503][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.339'. [ 335.994626][ T6882] netlink: 20 bytes leftover after parsing attributes in process `syz.1.339'. [ 336.116123][ T6889] FAULT_INJECTION: forcing a failure. [ 336.116123][ T6889] name failslab, interval 1, probability 0, space 0, times 0 [ 336.165450][ T6889] CPU: 1 UID: 0 PID: 6889 Comm: syz.4.341 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 336.175933][ T6889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 336.186027][ T6889] Call Trace: [ 336.189324][ T6889] [ 336.192267][ T6889] dump_stack_lvl+0x241/0x360 [ 336.196977][ T6889] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.202198][ T6889] ? __pfx__printk+0x10/0x10 [ 336.206809][ T6889] ? fs_reclaim_acquire+0x93/0x140 [ 336.211944][ T6889] ? __pfx___might_resched+0x10/0x10 [ 336.217248][ T6889] should_fail_ex+0x3b0/0x4e0 [ 336.222660][ T6889] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 336.228949][ T6889] should_failslab+0xac/0x100 [ 336.233882][ T6889] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 336.239829][ T6889] __kmalloc_noprof+0xd8/0x400 [ 336.244742][ T6889] tomoyo_realpath_from_path+0xcf/0x5e0 [ 336.251253][ T6889] tomoyo_path_number_perm+0x23a/0x880 [ 336.259064][ T6889] ? tomoyo_path_number_perm+0x208/0x880 [ 336.264852][ T6889] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 336.271075][ T6889] ? __fget_files+0x29/0x470 [ 336.275690][ T6889] ? __fget_files+0x3f3/0x470 [ 336.280392][ T6889] security_file_ioctl+0xc6/0x2a0 [ 336.285519][ T6889] __se_sys_ioctl+0x47/0x170 [ 336.290155][ T6889] do_syscall_64+0xf3/0x230 [ 336.295043][ T6889] ? clear_bhb_loop+0x35/0x90 [ 336.299759][ T6889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.305684][ T6889] RIP: 0033:0x7fa8a217def9 [ 336.310118][ T6889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.329751][ T6889] RSP: 002b:00007fa8a2fa1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 336.338280][ T6889] RAX: ffffffffffffffda RBX: 00007fa8a2335f80 RCX: 00007fa8a217def9 [ 336.346353][ T6889] RDX: 0000000020000100 RSI: 00000000800454d2 RDI: 0000000000000003 [ 336.354357][ T6889] RBP: 00007fa8a2fa1090 R08: 0000000000000000 R09: 0000000000000000 [ 336.362549][ T6889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.370592][ T6889] R13: 0000000000000000 R14: 00007fa8a2335f80 R15: 00007fa8a245fa28 [ 336.378779][ T6889] [ 336.394484][ T6889] ERROR: Out of memory at tomoyo_realpath_from_path. [ 336.419056][ T5324] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 336.778118][ T6880] vhci_hcd: invalid port number 0 [ 336.822664][ T6880] netlink: 'syz.3.338': attribute type 72 has an invalid length. [ 336.843502][ T6880] netlink: 'syz.3.338': attribute type 8 has an invalid length. [ 336.875694][ T5401] IPVS: starting estimator thread 0... [ 336.985701][ T6906] IPVS: using max 16 ests per chain, 38400 per kthread [ 337.073012][ T6909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.347'. [ 337.878348][ T6921] snd_dummy snd_dummy.0: control 0:0:0:syz1:0 is already present [ 338.670906][ T6937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.931536][ T5324] usb 4-1: unable to get BOS descriptor or descriptor too short [ 338.932349][ T5324] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 338.932377][ T5324] usb 4-1: can't read configurations, error -71 [ 339.545680][ T5280] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 339.625759][ T5276] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 339.716464][ T5280] usb 1-1: Using ep0 maxpacket: 16 [ 339.729190][ T5280] usb 1-1: config 208 has an invalid interface number: 15 but max is 3 [ 339.741455][ T5280] usb 1-1: config 208 has an invalid interface number: 228 but max is 3 [ 339.764590][ T5280] usb 1-1: config 208 has an invalid interface number: 221 but max is 3 [ 339.781433][ T5280] usb 1-1: config 208 has an invalid interface number: 191 but max is 3 [ 339.799616][ T5276] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 339.803079][ T5280] usb 1-1: config 208 has no interface number 0 [ 339.830824][ T5280] usb 1-1: config 208 has no interface number 1 [ 339.837283][ T5276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.842061][ T5276] usb 3-1: config 0 descriptor?? [ 339.861089][ T5280] usb 1-1: config 208 has no interface number 2 [ 339.875672][ T5280] usb 1-1: config 208 has no interface number 3 [ 339.886644][ T5280] usb 1-1: config 208 interface 15 altsetting 28 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 339.996616][ T5280] usb 1-1: config 208 interface 221 altsetting 3 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 340.110029][ T5280] usb 1-1: config 208 interface 221 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 340.135315][ T5276] ath6kl: Failed to submit usb control message: -71 [ 340.153816][ T5280] usb 1-1: config 208 interface 221 altsetting 3 bulk endpoint 0x2 has invalid maxpacket 8 [ 340.169966][ T5276] ath6kl: unable to send the bmi data to the device: -71 [ 340.183054][ T5276] ath6kl: Unable to send get target info: -71 [ 340.191675][ T5280] usb 1-1: config 208 interface 221 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 340.195961][ T5276] ath6kl: Failed to init ath6kl core: -71 [ 340.219182][ T5276] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 340.233686][ T5280] usb 1-1: config 208 interface 191 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 340.254473][ T5276] usb 3-1: USB disconnect, device number 10 [ 340.292717][ T5280] usb 1-1: config 208 interface 191 altsetting 4 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 340.323028][ T5280] usb 1-1: config 208 interface 191 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 340.340184][ T5280] usb 1-1: config 208 interface 191 altsetting 4 has an endpoint descriptor with address 0x1C, changing to 0xC [ 340.356154][ T5280] usb 1-1: config 208 interface 191 altsetting 4 endpoint 0xC has an invalid bInterval 202, changing to 11 [ 340.394500][ T6958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.362'. [ 340.408611][ T5280] usb 1-1: config 208 interface 191 altsetting 4 endpoint 0xC has invalid maxpacket 17220, setting to 1024 [ 340.436003][ T5280] usb 1-1: config 208 interface 191 altsetting 4 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 340.468581][ T5280] usb 1-1: config 208 interface 191 altsetting 4 bulk endpoint 0x4 has invalid maxpacket 16 [ 340.489922][ T6961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.363'. [ 340.499700][ T5280] usb 1-1: config 208 interface 191 altsetting 4 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 340.514390][ T6958] netlink: 20 bytes leftover after parsing attributes in process `syz.3.362'. [ 340.534901][ T5280] usb 1-1: config 208 interface 15 has no altsetting 0 [ 340.542763][ T5280] usb 1-1: config 208 interface 228 has no altsetting 0 [ 340.551703][ T5280] usb 1-1: config 208 interface 221 has no altsetting 0 [ 340.560609][ T5280] usb 1-1: config 208 interface 191 has no altsetting 0 [ 340.570861][ T5280] usb 1-1: New USB device found, idVendor=04b8, idProduct=0521, bcdDevice=bf.40 [ 340.580228][ T5280] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.590355][ T5280] usb 1-1: Product: syz [ 340.595852][ T5280] usb 1-1: Manufacturer: Ð [ 340.605988][ T5280] usb 1-1: SerialNumber: syz [ 340.822407][ T6971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.366'. [ 340.833422][ T6943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.847689][ T6943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.864073][ T6971] netlink: 28 bytes leftover after parsing attributes in process `syz.2.366'. [ 340.888723][ T6943] netlink: 320 bytes leftover after parsing attributes in process `syz.0.357'. [ 340.936339][ T6971] netlink: 20 bytes leftover after parsing attributes in process `syz.2.366'. [ 340.954959][ T5280] pl2303 1-1:208.15: required endpoints missing [ 340.997691][ T5280] pl2303 1-1:208.228: required endpoints missing [ 341.034062][ T5280] pl2303 1-1:208.221: required endpoints missing [ 341.074758][ T5280] pl2303 1-1:208.191: required endpoints missing [ 341.122277][ T5280] usb 1-1: USB disconnect, device number 19 [ 341.466059][ T5324] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 341.550675][ T5280] IPVS: starting estimator thread 0... [ 341.607263][ T5324] usb 3-1: device descriptor read/64, error -71 [ 341.656064][ T6984] IPVS: using max 16 ests per chain, 38400 per kthread [ 341.731781][ T6991] FAULT_INJECTION: forcing a failure. [ 341.731781][ T6991] name failslab, interval 1, probability 0, space 0, times 0 [ 341.749360][ T6991] CPU: 0 UID: 0 PID: 6991 Comm: syz.1.372 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 341.759728][ T6991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 341.769793][ T6991] Call Trace: [ 341.773093][ T6991] [ 341.776028][ T6991] dump_stack_lvl+0x241/0x360 [ 341.780749][ T6991] ? __pfx_dump_stack_lvl+0x10/0x10 [ 341.785979][ T6991] ? __pfx__printk+0x10/0x10 [ 341.790581][ T6991] ? fs_reclaim_acquire+0x93/0x140 [ 341.795708][ T6991] ? __pfx___might_resched+0x10/0x10 [ 341.801042][ T6991] should_fail_ex+0x3b0/0x4e0 [ 341.805803][ T6991] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 341.811561][ T6991] should_failslab+0xac/0x100 [ 341.816274][ T6991] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 341.822034][ T6991] __kmalloc_noprof+0xd8/0x400 [ 341.826817][ T6991] tomoyo_realpath_from_path+0xcf/0x5e0 [ 341.832425][ T6991] tomoyo_path_number_perm+0x23a/0x880 [ 341.837987][ T6991] ? tomoyo_path_number_perm+0x208/0x880 [ 341.843636][ T6991] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 341.849658][ T6991] ? __fget_files+0x29/0x470 [ 341.854294][ T6991] ? __fget_files+0x3f3/0x470 [ 341.859024][ T6991] security_file_ioctl+0xc6/0x2a0 [ 341.864061][ T6991] __se_sys_ioctl+0x47/0x170 [ 341.868672][ T6991] do_syscall_64+0xf3/0x230 [ 341.873186][ T6991] ? clear_bhb_loop+0x35/0x90 [ 341.877876][ T6991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.883796][ T6991] RIP: 0033:0x7fa93f57def9 [ 341.888213][ T6991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.905832][ T5324] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 341.907909][ T6991] RSP: 002b:00007fa9403cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 341.907956][ T6991] RAX: ffffffffffffffda RBX: 00007fa93f735f80 RCX: 00007fa93f57def9 [ 341.932013][ T6991] RDX: 00000000200003c0 RSI: 000000008208ae63 RDI: 0000000000000004 [ 341.940025][ T6991] RBP: 00007fa9403cf090 R08: 0000000000000000 R09: 0000000000000000 [ 341.948112][ T6991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.956119][ T6991] R13: 0000000000000000 R14: 00007fa93f735f80 R15: 00007fa93f85fa28 [ 341.964137][ T6991] [ 341.970766][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 341.980121][ T6991] ERROR: Out of memory at tomoyo_realpath_from_path. [ 342.036252][ T5324] usb 3-1: device descriptor read/64, error -71 [ 342.106309][ T5280] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 342.127862][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.138941][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.149241][ T9] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 342.161525][ T5324] usb usb3-port1: attempt power cycle [ 342.176498][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.190752][ T9] usb 4-1: config 0 descriptor?? [ 342.265710][ T5280] usb 5-1: Using ep0 maxpacket: 16 [ 342.281123][ T5280] usb 5-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 0.81 [ 342.294580][ T5280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.343530][ T5280] usb 5-1: config 0 descriptor?? [ 342.375034][ T5280] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 342.419342][ T5280] usb 5-1: Detected SIO [ 342.436283][ T5280] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 342.538093][ T5324] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 342.569084][ T5324] usb 3-1: device descriptor read/8, error -71 [ 342.589668][ T5280] usb 5-1: USB disconnect, device number 24 [ 342.617918][ T9] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 342.629801][ T5280] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 342.658892][ T9] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 342.668068][ T5280] ftdi_sio 5-1:0.0: device disconnected [ 342.684125][ T9] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0005/input/input14 [ 342.741422][ T9] cm6533_jd 0003:0D8C:0022.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 342.765679][ T937] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 342.819475][ T9] usb 4-1: USB disconnect, device number 18 [ 342.845651][ T5324] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 342.886941][ T5324] usb 3-1: device descriptor read/8, error -71 [ 342.997731][ T937] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 343.014926][ T937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.024170][ T5324] usb usb3-port1: unable to enumerate USB device [ 343.033236][ T937] usb 1-1: config 0 descriptor?? [ 343.053736][ T937] ums-realtek 1-1:0.0: USB Mass Storage device detected [ 343.263716][ T7001] netlink: 40 bytes leftover after parsing attributes in process `syz.0.374'. [ 343.275856][ T7001] fuse: Unknown parameter 'G, priority 10 [ 348.667469][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.403'. [ 348.688100][ T9] tipc: Node number set to 2886997162 [ 349.126067][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 349.246300][ T5229] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 349.291961][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 349.301575][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.325481][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.342066][ T9] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 349.351847][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.383048][ T9] usb 3-1: config 0 descriptor?? [ 349.527431][ T5229] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 349.544044][ T5229] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 349.567007][ T5229] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 349.601953][ T5229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.629481][ T7107] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 349.659856][ T5229] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 349.867004][ T7107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.891819][ T9] ft260 0003:0403:6030.0006: unknown main item tag 0x0 [ 349.946552][ T7107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.007928][ T7107] FAULT_INJECTION: forcing a failure. [ 350.007928][ T7107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.072553][ T9] ft260 0003:0403:6030.0006: chip code: 5e81 abf2 [ 350.089595][ T7107] CPU: 1 UID: 0 PID: 7107 Comm: syz.4.406 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 350.099923][ T7107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 350.110044][ T7107] Call Trace: [ 350.113357][ T7107] [ 350.116309][ T7107] dump_stack_lvl+0x241/0x360 [ 350.121043][ T7107] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.126288][ T7107] ? __pfx__printk+0x10/0x10 [ 350.130917][ T7107] ? __pfx_lock_release+0x10/0x10 [ 350.135985][ T7107] ? vfs_write+0x7bf/0xc90 [ 350.140453][ T7107] should_fail_ex+0x3b0/0x4e0 [ 350.145178][ T7107] _copy_from_user+0x2f/0xe0 [ 350.149802][ T7107] __sys_bpf+0x1a4/0x810 [ 350.154078][ T7107] ? __pfx___sys_bpf+0x10/0x10 [ 350.158877][ T7107] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 350.164893][ T7107] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 350.171276][ T7107] ? do_syscall_64+0x100/0x230 [ 350.176071][ T7107] __x64_sys_bpf+0x7c/0x90 [ 350.180519][ T7107] do_syscall_64+0xf3/0x230 [ 350.185497][ T7107] ? clear_bhb_loop+0x35/0x90 [ 350.190230][ T7107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.196157][ T7107] RIP: 0033:0x7fa8a217def9 [ 350.200701][ T7107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.220607][ T7107] RSP: 002b:00007fa8a2fa1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 350.229219][ T7107] RAX: ffffffffffffffda RBX: 00007fa8a2335f80 RCX: 00007fa8a217def9 [ 350.237312][ T7107] RDX: 0000000000000020 RSI: 0000000020000240 RDI: 0000000000000009 [ 350.245321][ T7107] RBP: 00007fa8a2fa1090 R08: 0000000000000000 R09: 0000000000000000 [ 350.253330][ T7107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.261316][ T7107] R13: 0000000000000000 R14: 00007fa8a2335f80 R15: 00007fa8a245fa28 [ 350.269313][ T7107] [ 350.282823][ T9] ft260 0003:0403:6030.0006: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 350.358892][ T5401] usb 5-1: USB disconnect, device number 26 [ 350.481130][ T9] ft260 0003:0403:6030.0006: failed to retrieve status: -32, no wakeup [ 350.521274][ T9] ft260 0003:0403:6030.0006: i2c bus error: 0x26 [ 350.833103][ T7126] netlink: 'syz.2.401': attribute type 2 has an invalid length. [ 350.841955][ T7126] netlink: 16 bytes leftover after parsing attributes in process `syz.2.401'. [ 351.208370][ T7135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.412'. [ 351.306028][ T7140] netlink: 24 bytes leftover after parsing attributes in process `syz.0.413'. [ 351.317373][ T7140] bridge0: port 1(bridge_slave_0) entered learning state [ 351.400916][ T7140] netlink: 'syz.0.413': attribute type 4 has an invalid length. [ 351.455302][ T7140] netlink: 'syz.0.413': attribute type 4 has an invalid length. [ 352.301698][ T9] ft260 0003:0403:6030.0006: failed to reset I2C controller: -71 [ 352.395836][ T9] usb 3-1: USB disconnect, device number 15 [ 352.721938][ T5401] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 352.886909][ T5401] usb 2-1: Using ep0 maxpacket: 16 [ 352.903139][ T5401] usb 2-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 352.913758][ T5401] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.945737][ T940] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 352.972565][ T5401] usb 2-1: Product: syz [ 352.988674][ T5401] usb 2-1: Manufacturer: syz [ 353.010878][ T5401] usb 2-1: SerialNumber: syz [ 353.015740][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 353.057692][ T5401] usb 2-1: config 0 descriptor?? [ 353.128377][ T940] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 353.148971][ T5524] udevd[5524]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 353.170175][ T7196] vhci_hcd: invalid port number 0 [ 353.202691][ T940] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 353.217205][ T7196] netlink: 'syz.2.421': attribute type 8 has an invalid length. [ 353.218898][ T940] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 353.235672][ T5229] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 353.272877][ T940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 353.314568][ T940] usb 4-1: SerialNumber: syz [ 353.343486][ T7194] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 353.426970][ T7204] vhci_hcd: invalid port number 0 [ 353.463467][ T7204] netlink: 'syz.4.422': attribute type 8 has an invalid length. [ 353.504572][ T7187] bond0: entered promiscuous mode [ 353.528544][ T7187] bond_slave_0: entered promiscuous mode [ 353.552005][ T7187] bond_slave_1: entered promiscuous mode [ 353.646533][ T7187] bond0: left promiscuous mode [ 353.742359][ T7187] bond_slave_0: left promiscuous mode [ 353.810292][ T7187] bond_slave_1: left promiscuous mode [ 354.095023][ T5324] usb 2-1: USB disconnect, device number 19 [ 354.216872][ T940] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 354.333848][ T940] usb 4-1: USB disconnect, device number 21 [ 355.337291][ T7225] input: syz1 as /devices/virtual/input/input16 [ 355.465273][ T7225] kernel profiling enabled (shift: 0) [ 355.628940][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 355.657797][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 355.708445][ T9] usb 3-1: can't read configurations, error -71 [ 355.779656][ T5229] usb 5-1: unable to get BOS descriptor or descriptor too short [ 355.868279][ T5229] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 355.879068][ T5229] usb 5-1: can't read configurations, error -71 [ 355.939729][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.430'. [ 357.325718][ T5229] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 357.537315][ T5229] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.014629][ T5229] usb 5-1: config 0 has no interfaces? [ 359.031290][ T5229] usb 5-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 359.103279][ T5229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.542344][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 397.561550][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 410.170535][ T5227] Bluetooth: hci0: command tx timeout [ 410.189625][ T5227] Bluetooth: hci6: command tx timeout [ 412.851942][ T5239] Bluetooth: hci2: command 0x0406 tx timeout [ 412.871667][ T5239] Bluetooth: hci1: command 0x0406 tx timeout [ 419.715341][ T5224] Bluetooth: hci3: command 0x206a tx timeout [ 461.297078][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 461.313166][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 465.607656][ T7225] syz.0.427: vmalloc error: size 738197504, failed to allocated page array size 1441792, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 465.865125][ T7225] CPU: 0 UID: 0 PID: 7225 Comm: syz.0.427 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 465.875454][ T7225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 465.885553][ T7225] Call Trace: [ 465.888858][ T7225] [ 465.891790][ T7225] dump_stack_lvl+0x241/0x360 [ 465.896499][ T7225] ? __pfx_dump_stack_lvl+0x10/0x10 [ 465.901752][ T7225] ? __pfx__printk+0x10/0x10 [ 465.906403][ T7225] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 465.912871][ T7225] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 465.919420][ T7225] warn_alloc+0x278/0x410 [ 465.923817][ T7225] ? __pfx_warn_alloc+0x10/0x10 [ 465.928726][ T7225] ? profile_init+0xb1/0x100 [ 465.933357][ T7225] ? __get_vm_area_node+0x23d/0x270 [ 465.938877][ T7225] __vmalloc_node_range_noprof+0x691/0x13f0 [ 465.944855][ T7225] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 465.951238][ T7225] ? rcu_is_watching+0x15/0xb0 [ 465.956065][ T7225] ? rcu_is_watching+0x15/0xb0 [ 465.960931][ T7225] ? profile_init+0xb1/0x100 [ 465.965658][ T7225] ? __pfx_sysfs_kf_write+0x10/0x10 [ 465.970937][ T7225] vzalloc_noprof+0x79/0x90 [ 465.975509][ T7225] ? profile_init+0xb1/0x100 [ 465.980328][ T7225] profile_init+0xb1/0x100 [ 465.984780][ T7225] profiling_store+0x6c/0xf0 [ 465.989420][ T7225] kernfs_fop_write_iter+0x3a0/0x500 [ 465.994756][ T7225] vfs_write+0xa6d/0xc90 [ 465.999058][ T7225] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 466.004920][ T7225] ? __pfx_vfs_write+0x10/0x10 [ 466.009765][ T7225] ? __fdget_pos+0x24e/0x320 [ 466.014404][ T7225] ksys_write+0x1a0/0x2c0 [ 466.018769][ T7225] ? irqentry_exit+0x63/0x90 [ 466.023385][ T7225] ? lockdep_hardirqs_on+0x99/0x150 [ 466.028639][ T7225] ? __pfx_ksys_write+0x10/0x10 [ 466.033554][ T7225] do_syscall_64+0xf3/0x230 [ 466.038189][ T7225] ? clear_bhb_loop+0x35/0x90 [ 466.042917][ T7225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.048859][ T7225] RIP: 0033:0x7f26ed57def9 [ 466.053319][ T7225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.072970][ T7225] RSP: 002b:00007f26ee35e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 466.081456][ T7225] RAX: ffffffffffffffda RBX: 00007f26ed736058 RCX: 00007f26ed57def9 [ 466.089472][ T7225] RDX: 0000000000000048 RSI: 0000000020000280 RDI: 0000000000000008 [ 466.097493][ T7225] RBP: 00007f26ed5f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 466.105518][ T7225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 466.113622][ T7225] R13: 0000000000000000 R14: 00007f26ed736058 R15: 00007f26ed85fa28 [ 466.121751][ T7225] [ 485.196728][ T7225] Mem-Info: [ 485.200110][ T7225] active_anon:19246 inactive_anon:0 isolated_anon:0 [ 485.200110][ T7225] active_file:17193 inactive_file:37652 isolated_file:0 [ 485.200110][ T7225] unevictable:768 dirty:90 writeback:45 [ 485.200110][ T7225] slab_reclaimable:8668 slab_unreclaimable:953552 [ 485.200110][ T7225] mapped:23327 shmem:16561 pagetables:702 [ 485.200110][ T7225] sec_pagetables:3 bounce:0 [ 485.200110][ T7225] kernel_misc_reclaimable:0 [ 485.200110][ T7225] free:452127 free_pcp:3041 free_cma:0 [ 485.292452][ T7225] Node 0 active_anon:76984kB inactive_anon:0kB active_file:68772kB inactive_file:150532kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:93308kB dirty:360kB writeback:180kB shmem:64708kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10416kB pagetables:2808kB sec_pagetables:12kB all_unreclaimable? no [ 486.062230][ T7225] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 486.606381][ T7225] Node 0 DMA free:10016kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:156kB local_pcp:32kB free_cma:0kB [ 486.906762][ T7225] lowmem_reserve[]: 0 2465 2466 0 0 [ 486.921458][ T7225] Node 0 DMA32 free:69132kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:26624KB active_anon:76944kB inactive_anon:0kB active_file:67988kB inactive_file:150532kB unevictable:1536kB writepending:540kB present:3129332kB managed:2552492kB mlocked:0kB bounce:0kB free_pcp:792kB local_pcp:588kB free_cma:0kB [ 486.999400][ T7225] lowmem_reserve[]: 0 0 0 0 0 [ 487.004224][ T7225] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:784kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 487.070030][ T7225] lowmem_reserve[]: 0 0 0 0 0 [ 487.074846][ T7225] Node 1 Normal free:1679968kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:12288KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:5900kB local_pcp:904kB free_cma:0kB [ 487.160638][ T7225] lowmem_reserve[]: 0 0 0 0 0 [ 487.186568][ T7225] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 0*64kB 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10016kB [ 487.229009][ T7225] Node 0 DMA32: 262*4kB (MEH) 154*8kB (UMEH) 222*16kB (MEH) 196*32kB (UMEH) 139*64kB (UMEH) 58*128kB (UMEH) 26*256kB (MEH) 19*512kB (UMH) 10*1024kB (MEH) 7*2048kB (UMH) 0*4096kB = 69384kB [ 487.277401][ T7225] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 487.318467][ T7225] Node 1 Normal: 4*4kB (UE) 4*8kB (ME) 7*16kB (ME) 10*32kB (MEH) 6*64kB (MEH) 5*128kB (MEH) 4*256kB (UMH) 3*512kB (MH) 3*1024kB (UMH) 5*2048kB (H) 405*4096kB (UM) = 1676256kB [ 487.775754][ T7225] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 487.785382][ T7225] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 505.196106][ T7225] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 505.239411][ T7225] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 505.696321][ T7225] 71406 total pagecache pages [ 505.701072][ T7225] 0 pages in swap cache [ 505.705261][ T7225] Free swap = 124412kB [ 515.112193][ T7225] Total swap = 124996kB [ 515.129118][ T7225] 2097051 pages RAM [ 515.133083][ T7225] 0 pages HighMem/MovableOnly [ 517.330689][ T7225] 427078 pages reserved [ 517.335012][ T7225] 0 pages cma reserved [ 538.990040][ C1] kworker/1:7: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 539.004196][ C1] CPU: 1 UID: 0 PID: 5324 Comm: kworker/1:7 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 539.016482][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 539.026679][ C1] Workqueue: events_power_efficient neigh_periodic_work [ 539.033745][ C1] Call Trace: [ 539.037061][ C1] [ 539.039939][ C1] dump_stack_lvl+0x241/0x360 [ 539.044670][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 539.049921][ C1] ? __pfx__printk+0x10/0x10 [ 539.054561][ C1] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 539.061021][ C1] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 539.067590][ C1] warn_alloc+0x278/0x410 [ 539.072462][ C1] ? __pfx_warn_alloc+0x10/0x10 [ 539.077468][ C1] __alloc_pages_slowpath+0xf16/0x1000 [ 539.083211][ C1] ? __pfx___alloc_pages_slowpath+0x10/0x10 [ 539.089162][ C1] __alloc_pages_noprof+0x43e/0x6c0 [ 539.094402][ C1] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 539.100181][ C1] alloc_pages_mpol_noprof+0x3e8/0x680 [ 539.105688][ C1] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 539.111715][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 539.117742][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 539.122727][ C1] ? alloc_pages_noprof+0x43/0x170 [ 539.127887][ C1] alloc_slab_page+0x6a/0x120 [ 539.132603][ C1] allocate_slab+0x1c0/0x2f0 [ 539.137234][ C1] ___slab_alloc+0xcd1/0x14b0 [ 539.141988][ C1] ? __alloc_skb+0x1c3/0x440 [ 539.146904][ C1] ? __alloc_skb+0x1c3/0x440 [ 539.148302][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 539.151523][ C1] __slab_alloc+0x58/0xa0 [ 539.162786][ C0] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 539.167120][ C1] ? __alloc_skb+0x1c3/0x440 [ 539.167158][ C1] kmem_cache_alloc_node_noprof+0x1fe/0x320 [ 539.177324][ C0] node 0: slabs: 32585, objs: 512568, free: 0 [ 539.181881][ C1] __alloc_skb+0x1c3/0x440 [ 539.187796][ C0] node 1: slabs: 90308, objs: 1417082, free: 54 [ 539.194449][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 539.199138][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 539.205401][ C1] synproxy_send_client_synack+0x1ba/0xf30 [ 539.210422][ C0] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 539.221104][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 539.221143][ C1] ? synproxy_pernet+0x45/0x270 [ 539.227146][ C0] node 0: slabs: 32585, objs: 512568, free: 0 [ 539.237252][ C1] nft_synproxy_eval_v4+0x3ca/0x610 [ 539.237294][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 539.243599][ C0] node 1: slabs: 90308, objs: 1417082, free: 54 [ 539.248439][ C1] ? nf_ip_checksum+0x13a/0x500 [ 539.248479][ C1] nft_synproxy_do_eval+0x362/0xa60 [ 539.254858][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 539.259890][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 539.259922][ C1] ? ip_vs_conn_hashkey_param+0x3ad/0x6b0 [ 539.265709][ C0] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 539.272042][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 539.276915][ C0] node 0: slabs: 32585, objs: 512568, free: 0 [ 539.282067][ C1] ? ip_vs_conn_out_get+0xba6/0xc00 [ 539.292857][ C0] node 1: slabs: 90308, objs: 1417082, free: 54 [ 539.298634][ C1] nft_do_chain+0x4ad/0x1da0 [ 539.304499][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 539.314577][ C1] ? tcp_conn_schedule+0x45e/0x880 [ 539.314614][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 539.319565][ C0] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 539.325788][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 539.330991][ C0] node 0: slabs: 32585, objs: 512568, free: 0 [ 539.337408][ C1] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 539.337455][ C1] nft_do_chain_inet+0x418/0x6b0 [ 539.342056][ C0] node 1: slabs: 90308, objs: 1417082, free: 54 [ 539.352804][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 539.352858][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 539.358194][ T1112] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 539.362952][ C1] nf_hook_slow+0xc3/0x220 [ 539.374540][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 539.378502][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 539.378546][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 539.378579][ C1] NF_HOOK+0x29e/0x450 [ 539.385002][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 539.390384][ C1] ? NF_HOOK+0x9a/0x450 [ 539.390433][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 539.395382][ C0] node 0: slabs: 45109, objs: 541308, free: 0 [ 539.401786][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 539.401834][ C1] ? ip_rcv_finish+0x406/0x560 [ 539.407308][ C0] node 1: slabs: 117607, objs: 1411284, free: 55 [ 539.412743][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 539.424119][ T1112] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 539.428021][ C1] NF_HOOK+0x3a4/0x450 [ 539.428063][ C1] ? __lock_acquire+0x1384/0x2050 [ 539.428099][ C1] ? NF_HOOK+0x9a/0x450 [ 539.428129][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 539.428158][ C1] ? ip_rcv_core+0x801/0xd10 [ 539.428194][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 539.428198][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 539.428230][ C0] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 539.428238][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 539.428256][ C0] node 0: slabs: 32585, objs: 512568, free: 0 [ 539.428273][ C1] __netif_receive_skb+0x2bf/0x650 [ 539.428278][ C0] node 1: slabs: 90308, objs: 1417082, free: 54 [ 539.428304][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 539.428337][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 539.428359][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 539.428394][ C1] ? __pfx_lock_release+0x10/0x10 [ 539.428399][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 539.428426][ C0] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 539.428430][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 539.428450][ C0] node 0: slabs: 32585, objs: 512568, free: 0 [ 539.428471][ C0] node 1: slabs: 90308, objs: 1417082, free: 54 [ 539.428473][ C1] process_backlog+0x662/0x15b0 [ 539.428505][ C1] ? process_backlog+0x33b/0x15b0 [ 539.428540][ C1] ? __pfx_process_backlog+0x10/0x10 [ 539.428565][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 539.428575][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 539.428602][ C0] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 539.428603][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 539.428627][ C0] node 0: slabs: 32585, objs: 512568, free: 0 [ 539.428643][ C1] __napi_poll+0xcb/0x490 [ 539.428647][ C0] node 1: slabs: 90308, objs: 1417082, free: 54 [ 539.428672][ C1] net_rx_action+0x89b/0x1240 [ 539.428721][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 539.438672][ T1112] node 0: slabs: 32585, objs: 512568, free: 0 [ 539.445085][ C1] ? __run_timer_base+0x178/0x8e0 [ 539.445126][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 539.445189][ C1] handle_softirqs+0x2c5/0x980 [ 539.445223][ C1] ? do_softirq+0x11b/0x1e0 [ 539.445253][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 539.445293][ C1] do_softirq+0x11b/0x1e0 [ 539.445321][ C1] [ 539.445331][ C1] [ 539.445342][ C1] ? __pfx_do_softirq+0x10/0x10 [ 539.445371][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 539.445411][ C1] ? rcu_is_watching+0x15/0xb0 [ 539.445438][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 539.445468][ C1] ? neigh_periodic_work+0xb35/0xd50 [ 539.445492][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 539.445524][ C1] ? neigh_destroy+0x423/0x580 [ 539.445567][ C1] neigh_periodic_work+0xb35/0xd50 [ 539.445601][ C1] ? process_scheduled_works+0x976/0x1850 [ 539.445635][ C1] process_scheduled_works+0xa63/0x1850 [ 539.451784][ T1112] node 1: slabs: 90308, objs: 1417082, free: 54 [ 539.455977][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 539.456028][ C1] ? assign_work+0x364/0x3d0 [ 539.456064][ C1] worker_thread+0x870/0xd30 [ 539.456102][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 539.456132][ C1] ? __kthread_parkme+0x169/0x1d0 [ 539.456166][ C1] ? __pfx_worker_thread+0x10/0x10 [ 539.456196][ C1] kthread+0x2f0/0x390 [ 539.456207][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 539.456218][ C1] ? __pfx_worker_thread+0x10/0x10 [ 539.456237][ C0] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 539.456251][ C1] ? __pfx_kthread+0x10/0x10 [ 539.456263][ C0] node 0: slabs: 32585, objs: 512568, free: 0 [ 539.456276][ C1] ret_from_fork+0x4b/0x80 [ 539.456285][ C0] node 1: slabs: 90308, objs: 1417082, free: 54 [ 539.456309][ C1] ? __pfx_kthread+0x10/0x10 [ 539.456330][ C1] ret_from_fork_asm+0x1a/0x30 [ 539.456380][ C1] [ 539.456449][ C1] Mem-Info: [ 539.456463][ C1] active_anon:19246 inactive_anon:0 isolated_anon:0 [ 539.456463][ C1] active_file:17193 inactive_file:37652 isolated_file:0 [ 539.456463][ C1] unevictable:768 dirty:0 writeback:0 [ 539.456463][ C1] slab_reclaimable:8668 slab_unreclaimable:1392554 [ 539.456463][ C1] mapped:23327 shmem:16561 pagetables:703 [ 539.456463][ C1] sec_pagetables:3 bounce:0 [ 539.456463][ C1] kernel_misc_reclaimable:0 [ 539.456463][ C1] free:15844 free_pcp:233 free_cma:0 [ 539.456529][ C1] Node 0 active_anon:76984kB inactive_anon:0kB active_file:68772kB inactive_file:150532kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:93308kB dirty:0kB writeback:0kB shmem:64708kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10384kB pagetables:2812kB sec_pagetables:12kB all_unreclaimable? no [ 539.456596][ C1] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 540.018112][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 540.031068][ C1] Node 0 [ 540.037473][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 540.047372][ C1] DMA free:9936kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:136kB local_pcp:124kB free_cma:0kB [ 540.074141][ C1] lowmem_reserve[]: 0 2465 2466 0 0 [ 540.079518][ C1] Node 0 DMA32 free:33296kB boost:76944kB min:111144kB low:119692kB high:128240kB reserved_highatomic:26624KB active_anon:76944kB inactive_anon:0kB active_file:67988kB inactive_file:150532kB unevictable:1536kB writepending:0kB present:3129332kB managed:2552492kB mlocked:0kB bounce:0kB free_pcp:492kB local_pcp:288kB free_cma:0kB [ 540.110389][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 540.117166][ C1] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:784kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 540.143976][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 540.148809][ C1] Node 1 Normal free:28640kB boost:125292kB min:180980kB low:194900kB high:208820kB reserved_highatomic:43008KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:196kB local_pcp:0kB free_cma:0kB [ 540.178728][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 540.183507][ C1] Node 0 DMA: 0*4kB 0*8kB 2*16kB (UM) 0*32kB 1*64kB (U) 2*128kB (UM) 1*256kB (M) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 9824kB [ 540.198550][ C1] Node 0 DMA32: 536*4kB (UH) 132*8kB (UH) 40*16kB (UH) 195*32kB (UH) 94*64kB (UH) 32*128kB (UH) 18*256kB (UH) 10*512kB (UH) 4*1024kB (H) 6*2048kB (UH) 0*4096kB = 46304kB [ 540.215957][ C1] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 540.227867][ C1] Node 1 Normal: 0*4kB 0*8kB 0*16kB 8*32kB (H) 6*64kB (H) 10*128kB (H) 10*256kB (H) 7*512kB (H) 10*1024kB (H) 5*2048kB (H) 0*4096kB = 28544kB [ 540.242634][ C1] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 540.252273][ C1] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 540.261649][ C1] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 540.271296][ C1] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 540.280688][ C1] 71231 total pagecache pages [ 540.285408][ C1] 0 pages in swap cache [ 540.289671][ C1] Free swap = 124412kB [ 540.293967][ C1] Total swap = 124996kB [ 540.298202][ C1] 2097051 pages RAM [ 540.302261][ C1] 0 pages HighMem/MovableOnly [ 540.307021][ C1] 427078 pages reserved [ 540.311196][ C1] 0 pages cma reserved [ 553.944648][ T5229] usb 5-1: config 0 descriptor?? [ 555.349620][ T5229] usb 5-1: can't set config #0, error -71 [ 556.778592][ C1] warn_alloc: 1578 callbacks suppressed [ 556.778624][ C1] ksoftirqd/1: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 556.797718][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 556.808012][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 556.818188][ C1] Call Trace: [ 556.821501][ C1] [ 556.824455][ C1] dump_stack_lvl+0x241/0x360 [ 556.829178][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 556.834418][ C1] ? __pfx__printk+0x10/0x10 [ 556.839049][ C1] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 556.845500][ C1] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 556.852043][ C1] warn_alloc+0x278/0x410 [ 556.856425][ C1] ? seqcount_lockdep_reader_access+0x13b/0x1e0 [ 556.857427][ C0] slab_out_of_memory: 1569 callbacks suppressed [ 556.857446][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 556.862685][ C1] ? __pfx_warn_alloc+0x10/0x10 [ 556.869070][ C0] cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0, min order: 0 [ 556.879769][ C1] __alloc_pages_slowpath+0xf16/0x1000 [ 556.879819][ C1] ? __pfx___alloc_pages_slowpath+0x10/0x10 [ 556.884629][ C0] node 0: slabs: 732, objs: 23424, free: 0 [ 556.894444][ C1] __alloc_pages_noprof+0x43e/0x6c0 [ 556.894477][ C1] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 556.899941][ C0] node 1: slabs: 369, objs: 11808, free: 68 [ 556.905788][ C1] ? unwind_next_frame+0x193b/0x22d0 [ 556.905833][ C1] ? __pfx_validate_chain+0x10/0x10 [ 556.911890][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 556.917002][ C1] alloc_pages_mpol_noprof+0x3e8/0x680 [ 556.917043][ C1] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 556.922733][ C0] cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0, min order: 0 [ 556.928788][ C1] ? stack_trace_save+0x118/0x1d0 [ 556.928817][ C1] ? alloc_pages_noprof+0x43/0x170 [ 556.934094][ C0] node 0: slabs: 732, objs: 23424, free: 0 [ 556.939287][ C1] alloc_slab_page+0x6a/0x120 [ 556.939318][ C1] allocate_slab+0x1c0/0x2f0 [ 556.950100][ C0] node 1: slabs: 369, objs: 11808, free: 68 [ 556.955617][ C1] ___slab_alloc+0xcd1/0x14b0 [ 556.955657][ C1] ? __lock_acquire+0x1320/0x2050 [ 556.965236][ T62] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 556.971567][ C1] ? ieee802_11_parse_elems_full+0xdb/0x2880 [ 556.971613][ C1] ? ieee802_11_parse_elems_full+0xdb/0x2880 [ 556.971638][ C1] __slab_alloc+0x58/0xa0 [ 556.971671][ C1] ? ieee802_11_parse_elems_full+0xdb/0x2880 [ 556.971697][ C1] __kmalloc_noprof+0x25a/0x400 [ 556.971728][ C1] ieee802_11_parse_elems_full+0xdb/0x2880 [ 556.971755][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 556.971793][ C1] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 556.971794][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 556.971821][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 556.971850][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 556.971876][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 556.971890][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 556.971917][ C0] node 0: slabs: 44708, objs: 536496, free: 0 [ 556.971915][ C1] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 556.971938][ C0] node 1: slabs: 117608, objs: 1411296, free: 55 [ 556.971944][ C1] ? kvfree_call_rcu+0x48c/0x790 [ 556.971975][ C1] ? __pfx_kvfree_call_rcu+0x10/0x10 [ 556.972011][ C1] ? cfg80211_update_known_bss+0xba1/0x1590 [ 556.972050][ C1] ieee80211_inform_bss+0x15f/0x1080 [ 556.972077][ C1] ? __cfg80211_bss_update+0x109b/0x2030 [ 556.972108][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 556.972139][ C1] ? cfg80211_inform_single_bss_data+0xb2d/0x2090 [ 556.972169][ C1] ? cfg80211_inform_single_bss_data+0xb2d/0x2090 [ 556.972195][ C1] ? cfg80211_inform_single_bss_data+0xd6e/0x2090 [ 556.972225][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 556.972251][ C1] cfg80211_inform_single_bss_data+0xec1/0x2090 [ 556.972298][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 556.972328][ C1] ? nft_synproxy_eval_v4+0x3d2/0x610 [ 556.972377][ C1] ? nft_synproxy_do_eval+0x362/0xa60 [ 556.972412][ C1] ? cfg80211_inform_bss_data+0x3b6/0x5e70 [ 556.972448][ C1] cfg80211_inform_bss_data+0x3ce/0x5e70 [ 556.972494][ C1] ? nft_do_chain+0x1aa9/0x1da0 [ 556.972530][ C1] ? tcp_conn_schedule+0x45e/0x880 [ 556.972558][ C1] ? __pfx_validate_chain+0x10/0x10 [ 556.972587][ C1] ? validate_chain+0x11e/0x5920 [ 556.972649][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 556.972679][ C1] ? validate_chain+0x11e/0x5920 [ 556.972704][ C1] ? __pfx_validate_chain+0x10/0x10 [ 556.972731][ C1] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 556.972766][ C1] ? mark_lock+0x9a/0x360 [ 556.972788][ C1] ? __pfx_validate_chain+0x10/0x10 [ 556.972817][ C1] ? __lock_acquire+0x1384/0x2050 [ 556.972881][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 556.972913][ C1] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 556.972945][ C1] cfg80211_inform_bss_frame_data+0x3b8/0x720 [ 556.972988][ C1] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 556.973015][ C1] ieee80211_bss_info_update+0x8a7/0xbc0 [ 556.973048][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 556.973085][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 556.973118][ C1] ? kcov_remote_start+0x97/0x7d0 [ 556.973148][ C1] ? ieee80211_get_channel_khz+0x173/0x920 [ 556.973183][ C1] ieee80211_scan_rx+0x526/0x9c0 [ 556.973219][ C1] ieee80211_rx_list+0x2b02/0x3780 [ 556.973244][ C1] ? __lock_acquire+0x1384/0x2050 [ 556.973292][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 556.973332][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 556.973371][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 556.973408][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 556.973452][ C1] ? ieee80211_rx_napi+0xd6/0x3c0 [ 556.973477][ C1] ieee80211_rx_napi+0x18a/0x3c0 [ 556.973502][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 556.973535][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 556.973567][ C1] ? skb_dequeue+0x113/0x150 [ 556.973603][ C1] ieee80211_handle_queued_frames+0xe7/0x1e0 [ 556.973636][ C1] tasklet_action_common+0x321/0x4d0 [ 556.973677][ C1] ? __pfx_tasklet_action_common+0x10/0x10 [ 556.973712][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 556.973751][ C1] ? workqueue_softirq_action+0xce/0x140 [ 556.973791][ C1] handle_softirqs+0x2c5/0x980 [ 556.973828][ C1] ? run_ksoftirqd+0xca/0x130 [ 556.973864][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 556.973893][ C1] ? preempt_schedule+0xe1/0xf0 [ 556.973930][ C1] run_ksoftirqd+0xca/0x130 [ 556.973962][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 556.973993][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 556.974029][ C1] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 556.974063][ C1] ? smpboot_thread_fn+0x2d3/0xa30 [ 556.974093][ C1] ? smpboot_thread_fn+0x4fb/0xa30 [ 556.974123][ C1] ? smpboot_thread_fn+0x656/0xa30 [ 556.974157][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 556.974188][ C1] smpboot_thread_fn+0x544/0xa30 [ 556.974221][ C1] ? smpboot_thread_fn+0x4e/0xa30 [ 556.974260][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 556.974292][ C1] kthread+0x2f0/0x390 [ 556.974315][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 556.974347][ C1] ? __pfx_kthread+0x10/0x10 [ 556.974370][ C1] ret_from_fork+0x4b/0x80 [ 556.974403][ C1] ? __pfx_kthread+0x10/0x10 [ 556.974426][ C1] ret_from_fork_asm+0x1a/0x30 [ 556.974475][ C1] [ 556.974549][ C1] Mem-Info: [ 556.974563][ C1] active_anon:19246 inactive_anon:1 isolated_anon:0 [ 556.974563][ C1] active_file:19761 inactive_file:25712 isolated_file:0 [ 556.974563][ C1] unevictable:768 dirty:0 writeback:0 [ 556.974563][ C1] slab_reclaimable:8668 slab_unreclaimable:1404088 [ 556.974563][ C1] mapped:23325 shmem:16561 pagetables:714 [ 556.974563][ C1] sec_pagetables:3 bounce:0 [ 556.974563][ C1] kernel_misc_reclaimable:0 [ 556.974563][ C1] free:9935 free_pcp:4381 free_cma:0 [ 556.974634][ C1] Node 0 active_anon:76984kB inactive_anon:4kB active_file:79040kB inactive_file:102844kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:93300kB dirty:0kB writeback:0kB shmem:64708kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10256kB pagetables:2856kB sec_pagetables:12kB all_unreclaimable? no [ 556.974700][ C1] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 556.974761][ C1] Node 0 DMA free:9944kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 556.974833][ C1] lowmem_reserve[]: 0 2465 2466 0 0 [ 556.974889][ C1] Node 0 DMA32 free:11120kB boost:76944kB min:111144kB low:119692kB high:128240kB reserved_highatomic:26624KB active_anon:76944kB inactive_anon:4kB active_file:78256kB inactive_file:103044kB unevictable:1536kB writepending:0kB present:3129332kB managed:2552492kB mlocked:0kB bounce:0kB free_pcp:9304kB local_pcp:8252kB free_cma:0kB [ 556.974961][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 556.975011][ C1] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:784kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 556.975077][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 556.975130][ C1] Node 1 Normal free:18672kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:22528KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:8220kB local_pcp:8124kB free_cma:0kB [ 556.975201][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 556.975254][ C1] Node 0 DMA: 2*4kB (U) 0*8kB 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 9928kB [ 556.975493][ C1] Node 0 DMA32: 755*4kB (MH) 4*8kB (H) 1*16kB (H) 4*32kB (H) 10*64kB (H) 6*128kB (H) 4*256kB (H) 5*512kB (H) 1*1024kB (H) 1*2048kB (H) 0*4096kB = 11260kB [ 556.975722][ C1] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB [ 556.980818][ T62] cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0, min order: 0 [ 556.985954][ C1] 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 556.986007][ C1] Node 1 Normal: 2*4kB (UM) [ 556.986030][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 556.986045][ C1] 1*8kB (U) 2*16kB [ 556.986061][ C0] cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0, min order: 0 [ 556.986077][ C1] (H) 2*32kB [ 556.986086][ C0] node 0: slabs: 732, objs: 23424, free: 0 [ 556.986098][ C1] (H) 0*64kB [ 556.986107][ C0] node 1: slabs: 369, objs: 11808, free: 68 [ 556.986117][ C1] 1*128kB (U) 8*256kB (UH) 2*512kB (H) 5*1024kB (H) [ 556.986181][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 556.986189][ C1] 5*2048kB (UH) 0*4096kB [ 556.986209][ C0] cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0, min order: 0 [ 556.986222][ C1] = 18672kB [ 556.986233][ C0] node 0: slabs: 732, objs: 23424, free: 0 [ 556.986235][ C1] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 556.986253][ C0] node 1: slabs: 369, objs: 11808, free: 68 [ 556.986258][ C1] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 556.986280][ C1] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 556.986301][ C1] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 556.986311][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 556.986323][ C1] 62036 total pagecache pages [ 556.986334][ C1] 0 pages in swap cache [ 556.986337][ C0] cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0, min order: 0 [ 556.986345][ C1] Free swap = 124412kB [ 556.986355][ C1] Total swap = 124996kB [ 556.986366][ C1] 2097051 pages RAM [ 556.986370][ C0] node 0: slabs: 732, objs: 23424, free: 0 [ 556.986376][ C1] 0 pages HighMem/MovableOnly [ 556.986386][ C1] 427078 pages reserved [ 556.986392][ C0] node 1: slabs: 369, objs: 11808, free: 68 [ 556.986398][ C1] 0 pages cma reserved [ 556.986410][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 556.986434][ C1] cache: kmalloc-1k, object size: 1024, buffer size: 2048, default order: 3, min order: 0 [ 556.986450][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 556.986458][ C1] node 0: slabs: 41043, objs: 521504, free: 0 [ 556.986476][ C0] cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0, min order: 0 [ 556.986481][ C1] node 1: slabs: 90363, objs: 1417962, free: 54 [ 556.986500][ C0] node 0: slabs: 732, objs: 23424, free: 0 [ 556.986519][ C0] node 1: slabs: 369, objs: 11808, free: 68 [ 556.986551][ C1] SLUB: Unable to allocate memory on CPU 1 (of node 0) on node -1, gfp=0x920(GFP_ATOMIC|__GFP_ZERO) [ 556.986574][ C1] cache: kmalloc-96, object size: 96, buffer size: 128, default order: 0, min order: 0 [ 556.986600][ C1] node 0: slabs: 732, objs: 23424, free: 0 [ 556.986619][ C1] node 1: slabs: 369, objs: 11808, free: 68 [ 557.005719][ T30] INFO: task syz.0.427:7228 blocked for more than 165 seconds. [ 557.011690][ T62] node 0: slabs: 732, objs: 23424, free: 0 [ 557.014273][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 557.022677][ T62] node 1: slabs: 369, objs: 11808, free: 68 [ 557.024006][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 558.216385][ T30] task:syz.0.427 state:D stack:25840 pid:7228 tgid:7220 ppid:5916 flags:0x00004004 [ 558.226940][ T30] Call Trace: [ 558.230433][ T30] [ 558.233400][ T30] __schedule+0x1895/0x4b30 [ 558.238095][ T30] ? __pfx___schedule+0x10/0x10 [ 558.243027][ T30] ? __pfx_lock_release+0x10/0x10 [ 558.248252][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 558.253764][ T30] ? schedule+0x90/0x320 [ 558.258093][ T30] schedule+0x14b/0x320 [ 558.262290][ T30] schedule_preempt_disabled+0x13/0x30 [ 558.267834][ T30] __mutex_lock+0x6a7/0xd70 [ 558.272394][ T30] ? __mutex_lock+0x52a/0xd70 [ 558.277340][ T30] ? __fdget_pos+0x24e/0x320 [ 558.282054][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 558.287637][ T30] ? do_futex+0x33b/0x560 [ 558.292024][ T30] ? __fget_files+0x3f3/0x470 [ 558.297461][ T30] __fdget_pos+0x24e/0x320 [ 558.301968][ T30] ksys_write+0x82/0x2c0 [ 558.306575][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 558.312628][ T30] ? __pfx_ksys_write+0x10/0x10 [ 558.317615][ T30] ? do_syscall_64+0x100/0x230 [ 558.322439][ T30] ? do_syscall_64+0xb6/0x230 [ 558.327213][ T30] do_syscall_64+0xf3/0x230 [ 558.331764][ T30] ? clear_bhb_loop+0x35/0x90 [ 558.336560][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.342498][ T30] RIP: 0033:0x7f26ed57def9 [ 558.346990][ T30] RSP: 002b:00007f26ee33d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 558.355534][ T30] RAX: ffffffffffffffda RBX: 00007f26ed736130 RCX: 00007f26ed57def9 [ 558.363547][ T30] RDX: 00000000000000c9 RSI: 0000000000000000 RDI: 0000000000000008 [ 558.371631][ T30] RBP: 00007f26ed5f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 558.379689][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.388296][ T30] R13: 0000000000000000 R14: 00007f26ed736130 R15: 00007f26ed85fa28 [ 558.396913][ T30] [ 558.399978][ T30] INFO: task syz.2.431:7243 blocked for more than 167 seconds. [ 558.407779][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 558.415092][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 558.423878][ T30] task:syz.2.431 state:D stack:23072 pid:7243 tgid:7243 ppid:5714 flags:0x00000004 [ 558.434165][ T30] Call Trace: [ 558.437509][ T30] [ 558.440471][ T30] __schedule+0x1895/0x4b30 [ 558.445035][ T30] ? __pfx___schedule+0x10/0x10 [ 558.450022][ T30] ? __pfx_lock_release+0x10/0x10 [ 558.455138][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 558.461047][ T30] ? schedule+0x90/0x320 [ 558.465346][ T30] schedule+0x14b/0x320 [ 558.469626][ T30] schedule_preempt_disabled+0x13/0x30 [ 558.475131][ T30] __mutex_lock+0x6a7/0xd70 [ 558.479741][ T30] ? __mutex_lock+0x52a/0xd70 [ 558.484473][ T30] ? raw_release+0x1b8/0x8b0 [ 558.489693][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 558.494776][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 558.500484][ T30] raw_release+0x1b8/0x8b0 [ 558.504957][ T30] sock_close+0xbc/0x240 [ 558.509311][ T30] ? __pfx_sock_close+0x10/0x10 [ 558.514196][ T30] __fput+0x23f/0x880 [ 558.518334][ T30] task_work_run+0x24f/0x310 [ 558.522965][ T30] ? __pfx_task_work_run+0x10/0x10 [ 558.528282][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 558.534054][ T30] syscall_exit_to_user_mode+0x168/0x370 [ 558.539802][ T30] do_syscall_64+0x100/0x230 [ 558.544432][ T30] ? clear_bhb_loop+0x35/0x90 [ 558.549281][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.555311][ T30] RIP: 0033:0x7fe178b7def9 [ 558.559935][ T30] RSP: 002b:00007fe178e5fb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 558.568434][ T30] RAX: 0000000000000000 RBX: 00007fe178d37a80 RCX: 00007fe178b7def9 [ 558.576479][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 558.584484][ T30] RBP: 00007fe178d37a80 R08: 0000000000000006 R09: 00007fe178e5fe7f [ 558.593062][ T30] R10: 00000000003ff8c0 R11: 0000000000000246 R12: 000000000005730e [ 558.601486][ T30] R13: 00007fe178e5fc90 R14: 0000000000000032 R15: ffffffffffffffff [ 558.609558][ T30] [ 558.612613][ T30] INFO: task syz.3.434:7254 blocked for more than 167 seconds. [ 558.620235][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 558.627782][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 558.636532][ T30] task:syz.3.434 state:D stack:27360 pid:7254 tgid:7253 ppid:5845 flags:0x00000004 [ 558.646820][ T30] Call Trace: [ 558.650153][ T30] [ 558.653118][ T30] __schedule+0x1895/0x4b30 [ 558.657728][ T30] ? __pfx___schedule+0x10/0x10 [ 558.662619][ T30] ? __pfx_lock_release+0x10/0x10 [ 558.667756][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 558.673358][ T30] ? schedule+0x90/0x320 [ 558.677681][ T30] schedule+0x14b/0x320 [ 558.681880][ T30] schedule_preempt_disabled+0x13/0x30 [ 558.687503][ T30] __mutex_lock+0x6a7/0xd70 [ 558.692064][ T30] ? __mutex_lock+0x52a/0xd70 [ 558.697354][ T30] ? ppp_ioctl+0x789/0x1cd0 [ 558.701993][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 558.707480][ T30] ? alloc_netdev_mqs+0xcda/0x1000 [ 558.712739][ T30] ppp_ioctl+0x789/0x1cd0 [ 558.717333][ T30] ? __pfx_ppp_ioctl+0x10/0x10 [ 558.722152][ T30] ? __fget_files+0x3f3/0x470 [ 558.726937][ T30] ? __pfx_ppp_ioctl+0x10/0x10 [ 558.731745][ T30] __se_sys_ioctl+0xf9/0x170 [ 558.736427][ T30] do_syscall_64+0xf3/0x230 [ 558.740985][ T30] ? clear_bhb_loop+0x35/0x90 [ 558.745767][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.752052][ T30] RIP: 0033:0x7fa485d7def9 [ 558.756556][ T30] RSP: 002b:00007fa486c3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 558.765013][ T30] RAX: ffffffffffffffda RBX: 00007fa485f35f80 RCX: 00007fa485d7def9 [ 558.773105][ T30] RDX: 0000000020000000 RSI: 00000000c004743e RDI: 0000000000000003 [ 558.781176][ T30] RBP: 00007fa485df0b76 R08: 0000000000000000 R09: 0000000000000000 [ 558.789250][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.797804][ T30] R13: 0000000000000000 R14: 00007fa485f35f80 R15: 00007fa48605fa28 [ 558.806218][ T30] [ 558.809288][ T30] [ 558.809288][ T30] Showing all locks held in the system: [ 558.817282][ T30] 3 locks held by kworker/u8:0/11: [ 558.822449][ T30] #0: ffff88802e1d3148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 558.834163][ T30] #1: ffffc90000107d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 558.848049][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 558.857753][ T30] 1 lock held by ksoftirqd/0/16: [ 558.862715][ T30] 1 lock held by khungtaskd/30: [ 558.867646][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 558.877614][ T30] 5 locks held by kworker/u9:0/54: [ 558.882749][ T30] #0: ffff888078964148 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 558.893684][ T30] #1: ffffc90000bf7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 558.906849][ T30] #2: ffff88805f8e4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 558.917421][ T30] #3: ffff88805f8e4078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 558.927246][ T30] #4: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 558.937213][ T30] 3 locks held by kworker/u8:4/62: [ 558.942352][ T30] 1 lock held by kswapd0/88: [ 558.947027][ T30] 1 lock held by kswapd1/89: [ 558.951659][ T30] 2 locks held by kworker/0:2/940: [ 558.956843][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 558.967934][ T30] #1: ffffc90003997d00 (key_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 558.978215][ T30] 3 locks held by kworker/u8:6/2896: [ 558.983560][ T30] 5 locks held by kworker/u9:1/4618: [ 558.988952][ T30] #0: ffff88803b9aa148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 559.000682][ T30] #1: ffffc9000de7fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 559.013735][ T30] #2: ffff888051cd4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 559.023728][ T30] #3: ffff888051cd4078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 559.033525][ T30] #4: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 559.043436][ T30] 2 locks held by syslogd/4662: [ 559.048656][ T30] 4 locks held by udevd/4680: [ 559.053447][ T30] 4 locks held by dhcpcd/4894: [ 559.058311][ T30] 2 locks held by getty/4978: [ 559.063014][ T30] #0: ffff8880328da0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 559.072896][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 559.083111][ T30] 5 locks held by kworker/u9:4/5227: [ 559.088470][ T30] #0: ffff88807faa9948 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 559.099384][ T30] #1: ffffc90003fb7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 559.112623][ T30] #2: ffff88804be44d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 559.122959][ T30] #3: ffff88804be44078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 559.132739][ T30] #4: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 559.142663][ T30] 4 locks held by kworker/1:3/5229: [ 559.147928][ T30] 6 locks held by kworker/u9:5/5232: [ 559.153238][ T30] #0: ffff8880327fb948 ((wq_completion)hci0#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 559.164428][ T30] #1: ffffc90004017d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 559.177192][ T30] #2: ffff88802e318d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 559.187248][ T30] #3: ffff88802e318078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 559.197283][ T30] #4: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 559.207792][ T30] #5: ffffffff8e93d478 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 559.219640][ T30] 3 locks held by kworker/1:4/5276: [ 559.224871][ T30] #0: ffff888030df5d48 ((wq_completion)wg-kex-wg2#24){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 559.236694][ T30] #1: ffffc900042c7d00 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((typeof(*((worker))) *)((worker))); (typeof((typeof(*((worker))) *)((worker)))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 559.272701][ T30] #2: ffff8880665f73b8 (&handshake->lock){++++}-{3:3}, at: wg_noise_handshake_begin_session+0x36/0xb80 [ 559.284315][ T30] 3 locks held by kworker/0:5/5280: [ 559.289586][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 559.300706][ T30] #1: ffffc90004307d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 559.312374][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 559.323311][ T30] 3 locks held by kworker/u8:8/5395: [ 559.328709][ T30] 3 locks held by kworker/u8:9/5396: [ 559.334039][ T30] 4 locks held by kworker/u8:10/5397: [ 559.339508][ T30] 4 locks held by kworker/u8:11/5398: [ 559.344917][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 559.356743][ T30] #1: ffffc9000462fd00 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 559.369153][ T30] #2: ffff8880600c0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0xd9/0x490 [ 559.379452][ T30] #3: ffffffff8e93d478 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 559.390574][ T30] 3 locks held by kworker/u8:12/5400: [ 559.396107][ T30] 2 locks held by syz-executor/5407: [ 559.401521][ T30] 2 locks held by syz-executor/5845: [ 559.406880][ T30] 3 locks held by kworker/u8:13/7173: [ 559.413149][ T30] 5 locks held by syz.0.427/7225: [ 559.418259][ T30] 1 lock held by syz.0.427/7228: [ 559.423218][ T30] #0: ffff88802d2470b8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x24e/0x320 [ 559.432601][ T30] 1 lock held by syz.1.428/7234: [ 559.438020][ T30] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: ppp_release+0x87/0x1f0 [ 559.447048][ T30] 3 locks held by kvm-nx-lpage-re/7241: [ 559.452620][ T30] #0: ffffffff8e96c5e8 (cgroup_mutex){+.+.}-{3:3}, at: cgroup_attach_task_all+0x27/0xe0 [ 559.462624][ T30] #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_attach_lock+0x11/0x40 [ 559.472612][ T30] #2: ffffffff8e96c7d0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: cgroup_attach_task_all+0x31/0xe0 [ 559.483646][ T30] 2 locks held by syz.2.431/7243: [ 559.488866][ T30] #0: ffff88805d7f8e08 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 559.499184][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: raw_release+0x1b8/0x8b0 [ 559.508281][ T30] 2 locks held by syz.3.434/7254: [ 559.514224][ T30] #0: ffffffff8f4b30e8 (ppp_mutex){+.+.}-{3:3}, at: ppp_ioctl+0x112/0x1cd0 [ 559.523090][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: ppp_ioctl+0x789/0x1cd0 [ 559.532020][ T30] 2 locks held by syz-executor/7258: [ 559.537391][ T30] [ 559.539742][ T30] ============================================= [ 559.539742][ T30] [ 559.548246][ T30] NMI backtrace for cpu 1 [ 559.552610][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 559.563056][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 559.573239][ T30] Call Trace: [ 559.576540][ T30] [ 559.579502][ T30] dump_stack_lvl+0x241/0x360 [ 559.584223][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 559.589465][ T30] ? __pfx__printk+0x10/0x10 [ 559.594104][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 559.599088][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 559.604588][ T30] ? _printk+0xd5/0x120 [ 559.608774][ T30] ? __pfx__printk+0x10/0x10 [ 559.613394][ T30] ? __wake_up_klogd+0xcc/0x110 [ 559.618281][ T30] ? __pfx__printk+0x10/0x10 [ 559.623431][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 559.628505][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 559.634525][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 559.640555][ T30] watchdog+0xff4/0x1040 [ 559.644837][ T30] ? watchdog+0x1ea/0x1040 [ 559.649296][ T30] ? __pfx_watchdog+0x10/0x10 [ 559.654006][ T30] kthread+0x2f0/0x390 [ 559.658105][ T30] ? __pfx_watchdog+0x10/0x10 [ 559.662824][ T30] ? __pfx_kthread+0x10/0x10 [ 559.667443][ T30] ret_from_fork+0x4b/0x80 [ 559.671899][ T30] ? __pfx_kthread+0x10/0x10 [ 559.676511][ T30] ret_from_fork_asm+0x1a/0x30 [ 559.681325][ T30] [ 559.685043][ T30] Sending NMI from CPU 1 to CPUs 0: [ 559.690810][ C0] NMI backtrace for cpu 0 [ 559.690825][ C0] CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 559.690847][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 559.690859][ C0] RIP: 0010:do_raw_spin_lock+0x16f/0x370 [ 559.690888][ C0] Code: be 04 00 00 00 e8 c1 ee 8c 00 41 0f b6 44 1d 00 84 c0 48 89 da 0f 85 8d 01 00 00 8b 44 24 60 b9 01 00 00 00 f0 41 0f b1 0c 24 <0f> 85 df 00 00 00 65 8b 1d 10 56 92 7e 41 0f b6 04 17 84 c0 0f 85 [ 559.690958][ C0] RSP: 0018:ffffc900001576a0 EFLAGS: 00000046 [ 559.690975][ C0] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000001 [ 559.690988][ C0] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc90000157700 [ 559.691002][ C0] RBP: ffffc90000157770 R08: 0000000000000003 R09: fffff5200002aee0 [ 559.691015][ C0] R10: dffffc0000000000 R11: fffff5200002aee0 R12: ffffffff9a6888e8 [ 559.691028][ C0] R13: 1ffff9200002aee0 R14: ffffc90000157700 R15: 1ffffffff34d111e [ 559.691043][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 559.691058][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 559.691072][ C0] CR2: 00007fd0e6f71ff8 CR3: 00000000ad45e000 CR4: 00000000003526f0 [ 559.691088][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 559.691099][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 559.691110][ C0] Call Trace: [ 559.691117][ C0] [ 559.691124][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 559.691153][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 559.691181][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 559.691208][ C0] ? nmi_handle+0x2a/0x5a0 [ 559.691233][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 559.691262][ C0] ? nmi_handle+0x14f/0x5a0 [ 559.691280][ C0] ? nmi_handle+0x2a/0x5a0 [ 559.691298][ C0] ? do_raw_spin_lock+0x16f/0x370 [ 559.691320][ C0] ? default_do_nmi+0x63/0x160 [ 559.691338][ C0] ? exc_nmi+0x123/0x1f0 [ 559.691354][ C0] ? end_repeat_nmi+0xf/0x53 [ 559.691382][ C0] ? do_raw_spin_lock+0x16f/0x370 [ 559.691404][ C0] ? do_raw_spin_lock+0x16f/0x370 [ 559.691427][ C0] ? do_raw_spin_lock+0x16f/0x370 [ 559.691449][ C0] [ 559.691456][ C0] [ 559.691465][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 559.691492][ C0] _raw_spin_lock_irqsave+0xe1/0x120 [ 559.691515][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 559.691537][ C0] ? kasan_quarantine_put+0xdc/0x230 [ 559.691568][ C0] debug_check_no_obj_freed+0x234/0x580 [ 559.691596][ C0] ? kfree+0x1a0/0x440 [ 559.691617][ C0] ? ref_tracker_free+0x4ef/0x7e0 [ 559.691637][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 559.691665][ C0] ? rcu_core+0xaaa/0x17a0 [ 559.691681][ C0] ? handle_softirqs+0x2c5/0x980 [ 559.691704][ C0] ? run_ksoftirqd+0xca/0x130 [ 559.691728][ C0] ? kthread+0x2f0/0x390 [ 559.691743][ C0] ? ret_from_fork+0x4b/0x80 [ 559.691767][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 559.691795][ C0] ? dst_destroy+0x2ac/0x460 [ 559.691819][ C0] kmem_cache_free+0x11f/0x420 [ 559.691845][ C0] dst_destroy+0x2ac/0x460 [ 559.691868][ C0] ? rcu_core+0xa37/0x17a0 [ 559.691884][ C0] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 559.691907][ C0] rcu_core+0xaaa/0x17a0 [ 559.691931][ C0] ? __pfx_rcu_core+0x10/0x10 [ 559.691950][ C0] ? rcu_qs+0xf1/0x190 [ 559.691966][ C0] ? __pfx_rcu_qs+0x10/0x10 [ 559.691987][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 559.692014][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 559.692046][ C0] handle_softirqs+0x2c5/0x980 [ 559.692072][ C0] ? run_ksoftirqd+0xca/0x130 [ 559.692098][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 559.692126][ C0] run_ksoftirqd+0xca/0x130 [ 559.692151][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 559.692174][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 559.692201][ C0] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 559.692227][ C0] ? smpboot_thread_fn+0x2d3/0xa30 [ 559.692255][ C0] ? smpboot_thread_fn+0x4fb/0xa30 [ 559.692278][ C0] ? smpboot_thread_fn+0x656/0xa30 [ 559.692303][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 559.692327][ C0] smpboot_thread_fn+0x544/0xa30 [ 559.692351][ C0] ? smpboot_thread_fn+0x4e/0xa30 [ 559.692377][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 559.692402][ C0] kthread+0x2f0/0x390 [ 559.692417][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 559.692441][ C0] ? __pfx_kthread+0x10/0x10 [ 559.692458][ C0] ret_from_fork+0x4b/0x80 [ 559.692482][ C0] ? __pfx_kthread+0x10/0x10 [ 559.692499][ C0] ret_from_fork_asm+0x1a/0x30 [ 559.692531][ C0] [ 559.692816][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 560.144261][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 560.154450][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 560.164547][ T30] Call Trace: [ 560.167855][ T30] [ 560.170821][ T30] dump_stack_lvl+0x241/0x360 [ 560.175540][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 560.180780][ T30] ? __pfx__printk+0x10/0x10 [ 560.185400][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 560.191699][ T30] ? vscnprintf+0x5d/0x90 [ 560.196232][ T30] panic+0x349/0x880 [ 560.200287][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 560.206601][ T30] ? __pfx_panic+0x10/0x10 [ 560.211057][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 560.216557][ T30] ? __irq_work_queue_local+0x137/0x410 [ 560.222146][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 560.227562][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 560.233788][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 560.240103][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 560.246490][ T30] watchdog+0x1033/0x1040 [ 560.250865][ T30] ? watchdog+0x1ea/0x1040 [ 560.255669][ T30] ? __pfx_watchdog+0x10/0x10 [ 560.260386][ T30] kthread+0x2f0/0x390 [ 560.264481][ T30] ? __pfx_watchdog+0x10/0x10 [ 560.269197][ T30] ? __pfx_kthread+0x10/0x10 [ 560.273827][ T30] ret_from_fork+0x4b/0x80 [ 560.278368][ T30] ? __pfx_kthread+0x10/0x10 [ 560.282989][ T30] ret_from_fork_asm+0x1a/0x30 [ 560.287812][ T30] [ 560.291208][ T30] Kernel Offset: disabled [ 560.295549][ T30] Rebooting in 86400 seconds..