last executing test programs: 6.924552722s ago: executing program 1 (id=158): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r0, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x4000000000009, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) acct(&(0x7f00000001c0)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) 6.783641522s ago: executing program 1 (id=159): sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) gettid() timer_create(0x7, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 5.236232589s ago: executing program 1 (id=163): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0xd8000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000640)=[@reply_sg={0x40486312, {0x4000, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x30, 0x68, 0x0, &(0x7f0000000180)={0x2b, 0xfffffebb, 0x30}}, 0x400}], 0xfefa, 0x0, 0x0}) 5.125778781s ago: executing program 1 (id=164): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x8, 0x63, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @remote, {[@end]}}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x1, 0x0, 0x8}, {"ff09eb92334ce7bdbce1cc8ea7c31c4233f717f38859083e7244d871b6582e4b77453efb5c862f933cb39161906e8b6c78ab07fe1b3fe0"}}}}, 0x71) 4.591383392s ago: executing program 1 (id=168): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000004380), 0x42000, 0x0) close(r3) write$tun(r1, &(0x7f0000000280)={@val={0xa, 0x6003}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x8, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x8}}}}}}}, 0x42) r4 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000140)=0x10, 0x80000) ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0) 4.327913677s ago: executing program 1 (id=172): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) (async) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) (async) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x82c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40084146, &(0x7f0000000100)=0x6) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000000000)={0x10001f, 0xfa, 0x20000}, 0x20) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddcffff, 0x0, 0xf0, 0x40, 0xfd, 0xd4, 0xd4, 0x9, 0x4, 0x7, 0x7}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0xc, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0x3000, 0x9, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0x0, 0x9, 0x1, 0x3, 0x9, 0x9, 0x5, 0x5, 0x44, 0xe, 0x4b}, {0x2, 0xd000, 0x0, 0x7, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x1000, 0xf, 0x9d, 0x9, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0x8000000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0xeeee8000, 0x1}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x0, 0xe6e70c00, [0xffffffffffffff47, 0x401, 0x5, 0xc5]}) (async) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000003808"]) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) (async) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0) sendfile(r7, r7, 0x0, 0x7ffff000) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 4.031082985s ago: executing program 2 (id=175): r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$char_usb(r0, &(0x7f00000008c0)='-0', 0x2) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000700)={'bond0\x00', 0x500}) 3.977403478s ago: executing program 2 (id=176): r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$char_usb(r0, &(0x7f00000008c0)='-0', 0x2) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000700)={'bond0\x00', 0x500}) (fail_nth: 2) 3.555954628s ago: executing program 2 (id=177): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x8, 0x63, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @remote, {[@end]}}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x1, 0x0, 0x8}, {"ff09eb92334ce7bdbce1cc8ea7c31c4233f717f38859083e7244d871b6582e4b77453efb5c862f933cb39161906e8b6c78ab07fe1b3fe0"}}}}, 0x71) 3.358877802s ago: executing program 2 (id=178): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r0, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x4000000000009, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) acct(&(0x7f00000001c0)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) 3.314172519s ago: executing program 2 (id=179): r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4f) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r2 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @remote}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000140)={r3, 0x200, 0xdda, 0x648, 0x8, 0x8}, 0x14) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) sendfile(r4, r4, 0x0, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x50, r6, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x4, 0x16}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8082}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x401080c}, 0x20080004) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x30, r6, 0xb97534d5fe9704cf, 0x0, 0xfffffffd, {{0x12}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}]}, 0x30}}, 0x0) r9 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r9, 0x83, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) 2.242552539s ago: executing program 3 (id=184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43af5fe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) 2.151499377s ago: executing program 3 (id=185): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000240)=ANY=[], 0xe) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x34, r3, 0x1, 0x703d25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044040}, 0x8842) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r4, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4041}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x38, r6, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)={0x14, 0x26, 0x229, 0x0, 0x56, {0x2}}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x28, r8, 0x403, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x21}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004800}, 0x20000040) 2.059922086s ago: executing program 3 (id=186): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x8, 0x65, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @remote, {[@end]}}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x1, 0x0, 0x8}, {"ff09eb92334ce7bdbce1cc8ea7c31c4233f717f38859083e7244d871b6582e4b77453efb5c862f933cb39161906e8b6c78ab07fe1b3fe07565"}}}}, 0x73) 1.93758164s ago: executing program 3 (id=187): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(r0, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x4000000000009, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) acct(&(0x7f00000001c0)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) 1.855772322s ago: executing program 3 (id=188): sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) gettid() timer_create(0x7, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 475.397392ms ago: executing program 3 (id=193): pread64(0xffffffffffffffff, &(0x7f0000002c00)=""/4082, 0xff2, 0x7) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55", 0x1b}], 0x1, 0x0, 0x0, 0x6000}, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0}, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file2\x00', &(0x7f0000000240), 0x20020, &(0x7f00000002c0)={[{@uuid_auto}, {@workdir={'workdir', 0x3d, './file0'}}, {@uuid_null}], [{@dont_hash}, {@smackfshat={'smackfshat', 0x3d, '+]@\''}}]}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)="29fa671d5aa495af9108d01aef263846", 0x10, 0x200008d0, &(0x7f0000000100)={0x2, 0x4e24, @private=0xa010100}, 0x10) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 415.990765ms ago: executing program 0 (id=194): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43af5fe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) 357.700798ms ago: executing program 0 (id=195): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) write$tun(r1, &(0x7f0000000280)={@val={0xa, 0x6003}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x8, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x8}}}}}}}, 0x42) (fail_nth: 2) 267.010708ms ago: executing program 0 (id=196): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(r0, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x4000000000009, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) acct(&(0x7f00000001c0)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) 199.665763ms ago: executing program 2 (id=197): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x8, 0x6578, 0x81, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r2 = memfd_secret(0x0) ioctl$FS_IOC_GETFSMAP(r2, 0x40305839, &(0x7f0000000400)=ANY=[@ANYBLOB="3f53628c148eb6db8f0218673441fdc1846b2ce4609febe257a2a249b08f00c8abb0167adbcc129304eba86dd1f59224fd198916c0315e4bcaa633e97559675ff1e49d813a9d1def6bc655bcd88b81f985da1fbd8342258c8fb315ed1199a37c81ad9afeb3f0d837824f726ff98833b7233b3e2413cf76290665e9cbab5eda5f734a172bf042a43a2a2cd782f4406394b4ba4c4013b0766a5f5852a044067ef97acd04ed20e8f177e14f2cc3c4cd127dc174cd0db14bf39f911265d16d23ff4ef3d64c2f099fe8ebae94e2d88e10346047401854f16c7824a9cc3776a4323c3dd863f302013609f4676e1f39564b3cd582", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRESDEC=r0]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x80100, 0x0) ioctl$VIDIOC_G_FREQUENCY(r5, 0xc02c5638, &(0x7f0000000180)={0x2, 0x4, 0xffff}) read$ptp(r5, &(0x7f0000000380)=""/120, 0x78) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000090601080000000000060000050000000900020073797a3100000000050001000700000018c34600078006000440512100000c000180080001400a010101c96be6abc8f8db8b026ef7fa38bf7f784f1bcc3336ef80607cf703688b925b7bbd1cd43c95d174b4b433ee322d0c7e5e"], 0x40}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r7 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl(r7, 0x80004507, 0x0) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r8, 0x5708e000) 193.165793ms ago: executing program 0 (id=198): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket(0x3, 0x80000, 0x101) socket(0xf, 0x4, 0x9) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0a0060030180c2000001ffffffffffff86dd6d002000000811ff00000000000000000000000000000000ff020000000000001f00000005000000014f194e6000089078"], 0x42) 90.189528ms ago: executing program 0 (id=199): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x9, 0x46080) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000040)={{0x4, 0x5, 0x3, 0x0, 'syz0\x00', 0x659}, 0x1, [0x14, 0x55cb020b, 0x7, 0x3, 0x4, 0x350, 0xff, 0x7, 0x200, 0x6, 0xfff, 0x1, 0x600000000000, 0x5cc, 0x4, 0xc5, 0x3a, 0x428c7d3c, 0x80, 0x3, 0x0, 0x3ff, 0xaf, 0x1, 0x400, 0x3, 0x3, 0x8, 0x3, 0x1, 0xf5, 0x8, 0x4, 0x0, 0x2, 0x80000001, 0x10, 0xc, 0x4, 0x5, 0x5, 0x966, 0x0, 0xc, 0x10, 0x0, 0x1, 0x1, 0xffff, 0x0, 0x80000000, 0x1, 0x1, 0x1, 0xff, 0xa6ee, 0x6, 0x0, 0x7, 0xff, 0xfffffffffffffffa, 0x1, 0x5, 0xfffffffffffffffa, 0x6, 0xe50, 0x1, 0x6, 0x3, 0x1, 0x3, 0xffffffffffffff00, 0x9de, 0x8, 0x4, 0x7, 0x8000000, 0x2, 0x5, 0x4, 0x1, 0xbec, 0x3, 0x0, 0xfffffffffffffd85, 0x3, 0x2, 0x1ff, 0x3, 0xfffffffffffffffc, 0x6, 0x7, 0x2dc6, 0x7ff, 0x2, 0x6, 0x5, 0x13, 0x8000, 0x200, 0x9, 0x800, 0x9, 0x4, 0x6, 0xc0, 0xfff, 0x4, 0x5, 0x5, 0x0, 0x8, 0x7, 0x4, 0xe, 0xb, 0x800, 0x8, 0x1, 0x0, 0x6, 0x0, 0x10, 0x9, 0xfb8, 0x7fffffffffffffff, 0xffffffff, 0x15]}) 0s ago: executing program 0 (id=200): openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) socket(0x2c, 0x3, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r0, 0x52fbe000) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) (async) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sigaltstack(0x0, 0x0) (async) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000140)={r2, r2, 0x5, 0x0, 0x0, 0x35, 0xb5, 0x3d, 0x1, 0x3ff, 0x0, 0x2, 'syz0\x00'}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.37' (ED25519) to the list of known hosts. [ 68.524769][ T5847] cgroup: Unknown subsys name 'net' [ 68.667968][ T5847] cgroup: Unknown subsys name 'cpuset' [ 68.675878][ T5847] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.992844][ T5847] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.516644][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.522967][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.036075][ T5859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.043378][ T5859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.051266][ T5864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.059486][ T5864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.066918][ T5864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.074002][ T5864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.082243][ T5869] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.093683][ T5865] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.101505][ T5869] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.109113][ T5869] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.112556][ T5864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.116301][ T5865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.131314][ T5865] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.131468][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.138889][ T5865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.158172][ T5185] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.165679][ T5185] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.174354][ T5185] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.182214][ T5185] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.190828][ T5185] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.432758][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 72.534396][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 72.598249][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.607142][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.614383][ T5866] bridge_slave_0: entered allmulticast mode [ 72.621695][ T5866] bridge_slave_0: entered promiscuous mode [ 72.631548][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.639029][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.646603][ T5866] bridge_slave_1: entered allmulticast mode [ 72.653522][ T5866] bridge_slave_1: entered promiscuous mode [ 72.666983][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 72.699624][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 72.729880][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.741192][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.769546][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.776827][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.783991][ T5856] bridge_slave_0: entered allmulticast mode [ 72.791121][ T5856] bridge_slave_0: entered promiscuous mode [ 72.802581][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.809912][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.817382][ T5856] bridge_slave_1: entered allmulticast mode [ 72.824171][ T5856] bridge_slave_1: entered promiscuous mode [ 72.856735][ T5866] team0: Port device team_slave_0 added [ 72.879149][ T5866] team0: Port device team_slave_1 added [ 72.895719][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.907264][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.948444][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.955660][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.982025][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.993998][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.001040][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.026978][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.074169][ T5856] team0: Port device team_slave_0 added [ 73.080256][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.087622][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.095516][ T5870] bridge_slave_0: entered allmulticast mode [ 73.102173][ T5870] bridge_slave_0: entered promiscuous mode [ 73.109659][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.116923][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.124172][ T5870] bridge_slave_1: entered allmulticast mode [ 73.131840][ T5870] bridge_slave_1: entered promiscuous mode [ 73.138416][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.145663][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.152802][ T5861] bridge_slave_0: entered allmulticast mode [ 73.159648][ T5861] bridge_slave_0: entered promiscuous mode [ 73.167498][ T5856] team0: Port device team_slave_1 added [ 73.173363][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.180531][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.187723][ T5861] bridge_slave_1: entered allmulticast mode [ 73.194603][ T5861] bridge_slave_1: entered promiscuous mode [ 73.246285][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.253274][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.279639][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.307699][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.317764][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.324828][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.351160][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.367685][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.379062][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.391442][ T5866] hsr_slave_0: entered promiscuous mode [ 73.397690][ T5866] hsr_slave_1: entered promiscuous mode [ 73.406191][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.460005][ T5861] team0: Port device team_slave_0 added [ 73.468266][ T5870] team0: Port device team_slave_0 added [ 73.475408][ T5861] team0: Port device team_slave_1 added [ 73.498647][ T5856] hsr_slave_0: entered promiscuous mode [ 73.504929][ T5856] hsr_slave_1: entered promiscuous mode [ 73.511003][ T5856] debugfs: 'hsr0' already exists in 'hsr' [ 73.516995][ T5856] Cannot create hsr debugfs directory [ 73.523661][ T5870] team0: Port device team_slave_1 added [ 73.556195][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.563185][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.589233][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.601329][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.608959][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.635011][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.675437][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.682413][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.708549][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.720416][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.727531][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.753483][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.812115][ T5861] hsr_slave_0: entered promiscuous mode [ 73.818292][ T5861] hsr_slave_1: entered promiscuous mode [ 73.824204][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 73.830745][ T5861] Cannot create hsr debugfs directory [ 73.891381][ T5870] hsr_slave_0: entered promiscuous mode [ 73.898072][ T5870] hsr_slave_1: entered promiscuous mode [ 73.904005][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 73.909788][ T5870] Cannot create hsr debugfs directory [ 74.062573][ T5866] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.083772][ T5866] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.100984][ T5866] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.117460][ T5866] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.154743][ T5185] Bluetooth: hci0: command tx timeout [ 74.163559][ T5856] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.172993][ T5856] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.182818][ T5856] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.200546][ T5856] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.221772][ T5861] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.233511][ T5861] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.240328][ T5185] Bluetooth: hci3: command tx timeout [ 74.240359][ T5185] Bluetooth: hci2: command tx timeout [ 74.240383][ T5185] Bluetooth: hci1: command tx timeout [ 74.271867][ T5861] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.282119][ T5861] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.333247][ T5870] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.342968][ T5870] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.353423][ T5870] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.362754][ T5870] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.438455][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.467538][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.490504][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.497682][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.511727][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.525224][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.546443][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.553557][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.564181][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.586006][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.593155][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.610001][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.620840][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.629386][ T3665] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.636569][ T3665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.659144][ T3665] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.666310][ T3665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.690196][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.704257][ T5866] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.715579][ T5866] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.729870][ T3665] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.736986][ T3665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.748400][ T3665] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.755512][ T3665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.773902][ T3665] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.781055][ T3665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.917261][ T5870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.051635][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.121387][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.152738][ T5866] veth0_vlan: entered promiscuous mode [ 75.189913][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.199296][ T5866] veth1_vlan: entered promiscuous mode [ 75.209153][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.277366][ T5861] veth0_vlan: entered promiscuous mode [ 75.289328][ T5856] veth0_vlan: entered promiscuous mode [ 75.296617][ T5866] veth0_macvtap: entered promiscuous mode [ 75.307843][ T5866] veth1_macvtap: entered promiscuous mode [ 75.320151][ T5870] veth0_vlan: entered promiscuous mode [ 75.331117][ T5861] veth1_vlan: entered promiscuous mode [ 75.340043][ T5856] veth1_vlan: entered promiscuous mode [ 75.358963][ T5870] veth1_vlan: entered promiscuous mode [ 75.376140][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.398627][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.411702][ T5856] veth0_macvtap: entered promiscuous mode [ 75.427007][ T73] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.436863][ T73] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.450944][ T5861] veth0_macvtap: entered promiscuous mode [ 75.458909][ T5856] veth1_macvtap: entered promiscuous mode [ 75.466785][ T73] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.487336][ T73] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.498711][ T5861] veth1_macvtap: entered promiscuous mode [ 75.509479][ T5870] veth0_macvtap: entered promiscuous mode [ 75.522579][ T5870] veth1_macvtap: entered promiscuous mode [ 75.542105][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.572540][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.600793][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.610010][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.619384][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.632343][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.642181][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.657340][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.680140][ T1138] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.689860][ T1138] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.701188][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.710540][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.713819][ T1138] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.726954][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.743091][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.753657][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.775056][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.783945][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.805200][ T5866] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.821088][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.836946][ T1138] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.854626][ T1138] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.863742][ T1138] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.935226][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.943756][ T5943] syzkaller1: entered promiscuous mode [ 75.945542][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.953043][ T5943] syzkaller1: entered allmulticast mode [ 75.964081][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.973724][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.998554][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.013834][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.031427][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.051524][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.091272][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.111508][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.148957][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.184639][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.236973][ T5865] Bluetooth: hci0: command tx timeout [ 76.251781][ T5948] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 76.314686][ T5865] Bluetooth: hci1: command tx timeout [ 76.320192][ T5865] Bluetooth: hci2: command tx timeout [ 76.325819][ T5185] Bluetooth: hci3: command tx timeout [ 76.466956][ T5963] binder: 5962:5963 ioctl c0306201 200000000240 returned -11 [ 76.474957][ T5963] binder: 5962:5963 ioctl c0306201 2000000002c0 returned -14 [ 77.099320][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.200926][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.302747][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.425133][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.464650][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.317098][ T5185] Bluetooth: hci0: command tx timeout [ 78.394763][ T5185] Bluetooth: hci3: command tx timeout [ 78.400228][ T5185] Bluetooth: hci2: command tx timeout [ 78.405720][ T5865] Bluetooth: hci1: command tx timeout [ 78.814844][ T30] audit: type=1326 audit(1756820846.142:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ced58ebe9 code=0x7ffc0000 [ 78.870551][ T30] audit: type=1326 audit(1756820846.172:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1ced52adb9 code=0x7ffc0000 [ 78.927247][ T30] audit: type=1326 audit(1756820846.172:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1ced52adb9 code=0x7ffc0000 [ 78.980876][ T30] audit: type=1326 audit(1756820846.172:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1ced52adb9 code=0x7ffc0000 [ 79.033269][ T30] audit: type=1326 audit(1756820846.172:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1ced52adb9 code=0x7ffc0000 [ 79.095868][ T30] audit: type=1326 audit(1756820846.172:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1ced52adb9 code=0x7ffc0000 [ 79.154560][ T30] audit: type=1326 audit(1756820846.172:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1ced52adb9 code=0x7ffc0000 [ 79.209014][ T30] audit: type=1326 audit(1756820846.172:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1ced52adb9 code=0x7ffc0000 [ 79.257014][ T30] audit: type=1326 audit(1756820846.172:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1ced52adb9 code=0x7ffc0000 [ 79.328550][ T30] audit: type=1326 audit(1756820846.172:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1ced52adb9 code=0x7ffc0000 [ 79.645123][ T5996] syzkaller1: entered promiscuous mode [ 79.664929][ T5996] syzkaller1: entered allmulticast mode [ 80.344656][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.353202][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.362092][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.382503][ T6013] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 80.389069][ T6013] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 80.398720][ T6013] vhci_hcd vhci_hcd.0: Device attached [ 80.405045][ T5865] Bluetooth: hci0: command tx timeout [ 80.474587][ T5865] Bluetooth: hci1: command tx timeout [ 80.481297][ T5185] Bluetooth: hci2: command tx timeout [ 80.486807][ T5859] Bluetooth: hci3: command tx timeout [ 80.495248][ T6015] vhci_hcd: connection closed [ 80.520971][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.536656][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.561862][ T12] vhci_hcd: stop threads [ 80.588821][ T12] vhci_hcd: release socket [ 80.614924][ T3092] vhci_hcd: vhci_device speed not set [ 80.648739][ T12] vhci_hcd: disconnect device [ 80.727476][ T3092] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 80.811083][ T3092] usb 39-1: enqueue for inactive port 0 [ 80.955850][ T3092] vhci_hcd: vhci_device speed not set [ 81.706698][ T6020] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.929985][ T6027] syzkaller1: entered promiscuous mode [ 81.944565][ T6027] syzkaller1: entered allmulticast mode [ 82.528964][ T5978] Set syz1 is full, maxelem 65536 reached [ 82.724673][ T3092] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.135052][ T3092] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 83.158918][ T3092] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 83.170316][ T6054] syzkaller1: entered promiscuous mode [ 83.183064][ T3092] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 83.185800][ T6054] syzkaller1: entered allmulticast mode [ 83.452007][ T6044] syz.1.40: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 83.470539][ T3092] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 83.491168][ T6044] CPU: 1 UID: 0 PID: 6044 Comm: syz.1.40 Not tainted syzkaller #0 PREEMPT(full) [ 83.491199][ T6044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 83.491213][ T6044] Call Trace: [ 83.491221][ T6044] [ 83.491229][ T6044] dump_stack_lvl+0x189/0x250 [ 83.491269][ T6044] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.491300][ T6044] ? __pfx__printk+0x10/0x10 [ 83.491328][ T6044] ? lock_release+0x4b/0x3e0 [ 83.491349][ T6044] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 83.491376][ T6044] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 83.491404][ T6044] warn_alloc+0x214/0x310 [ 83.491427][ T6044] ? __pfx_warn_alloc+0x10/0x10 [ 83.491451][ T6044] ? __get_vm_area_node+0x28f/0x300 [ 83.491481][ T6044] ? vb2_vmalloc_alloc+0xef/0x340 [ 83.491508][ T6044] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 83.491552][ T6044] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 83.491574][ T6044] ? __kasan_kmalloc+0x93/0xb0 [ 83.491605][ T6044] vmalloc_user_noprof+0xad/0xf0 [ 83.491623][ T6044] ? vb2_vmalloc_alloc+0xef/0x340 [ 83.491649][ T6044] vb2_vmalloc_alloc+0xef/0x340 [ 83.491675][ T6044] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 83.491701][ T6044] __vb2_queue_alloc+0x9bf/0x15a0 [ 83.491737][ T6044] vb2_core_reqbufs+0xc31/0x1420 [ 83.491769][ T6044] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 83.491791][ T6044] ? vb2_verify_memory_type+0x1fc/0x570 [ 83.491815][ T6044] ? vb2_reqbufs+0x3a9/0x630 [ 83.491841][ T6044] v4l2_m2m_ioctl_reqbufs+0x10d/0x200 [ 83.491872][ T6044] __video_do_ioctl+0xa59/0xc10 [ 83.491898][ T6044] ? rcu_is_watching+0x15/0xb0 [ 83.491925][ T6044] ? __pfx___video_do_ioctl+0x10/0x10 [ 83.491952][ T6044] ? __might_fault+0xb0/0x130 [ 83.491981][ T6044] ? __might_fault+0xcc/0x130 [ 83.492011][ T6044] video_usercopy+0x82d/0x1450 [ 83.492042][ T6044] ? __pfx___video_do_ioctl+0x10/0x10 [ 83.492069][ T6044] ? __pfx_video_usercopy+0x10/0x10 [ 83.492103][ T6044] ? __fget_files+0x3a0/0x420 [ 83.492129][ T6044] v4l2_ioctl+0x18a/0x1e0 [ 83.492153][ T6044] ? __pfx_v4l2_ioctl+0x10/0x10 [ 83.492177][ T6044] __se_sys_ioctl+0xf9/0x170 [ 83.492209][ T6044] do_syscall_64+0xfa/0xfa0 [ 83.492237][ T6044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.492257][ T6044] ? clear_bhb_loop+0x60/0xb0 [ 83.492279][ T6044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.492299][ T6044] RIP: 0033:0x7f807078ebe9 [ 83.492328][ T6044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.492345][ T6044] RSP: 002b:00007f80715cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.492368][ T6044] RAX: ffffffffffffffda RBX: 00007f80709c5fa0 RCX: 00007f807078ebe9 [ 83.492383][ T6044] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000003 [ 83.492396][ T6044] RBP: 00007f8070811e19 R08: 0000000000000000 R09: 0000000000000000 [ 83.492408][ T6044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.492420][ T6044] R13: 00007f80709c6038 R14: 00007f80709c5fa0 R15: 00007ffc9852c678 [ 83.492443][ T6044] [ 83.492456][ T6044] Mem-Info: [ 83.560718][ T6058] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.576777][ T3092] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 83.615861][ T6060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.44'. [ 83.623610][ T6044] active_anon:14537 inactive_anon:0 isolated_anon:0 [ 83.623610][ T6044] active_file:10983 inactive_file:39837 isolated_file:0 [ 83.623610][ T6044] unevictable:768 dirty:1588 writeback:0 [ 83.623610][ T6044] slab_reclaimable:10349 slab_unreclaimable:92354 [ 83.623610][ T6044] mapped:32981 shmem:10833 pagetables:1094 [ 83.623610][ T6044] sec_pagetables:5 bounce:0 [ 83.623610][ T6044] kernel_misc_reclaimable:0 [ 83.623610][ T6044] free:1297692 free_pcp:13818 free_cma:0 [ 83.892233][ T3092] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.921467][ T6044] Node 0 active_anon:60148kB inactive_anon:0kB active_file:45732kB inactive_file:159144kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:134024kB dirty:6344kB writeback:0kB shmem:43896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11184kB pagetables:4316kB sec_pagetables:20kB all_unreclaimable? no Balloon:0kB [ 83.973751][ T3092] usb 1-1: config 0 descriptor?? [ 84.071690][ T6044] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 84.314406][ T6044] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 85.636175][ T6044] lowmem_reserve[]: 0 2495 2496 2496 2496 [ 85.642192][ T6044] Node 0 DMA32 free:1283444kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:60700kB inactive_anon:0kB active_file:46096kB inactive_file:158084kB unevictable:1536kB writepending:6344kB present:3129332kB managed:2555588kB mlocked:0kB bounce:0kB free_pcp:30948kB local_pcp:10712kB free_cma:0kB [ 85.725669][ T6044] lowmem_reserve[]: 0 0 1 1 1 [ 85.730439][ T6044] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1060kB unevictable:0kB writepending:4kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 85.767350][ T3092] usbhid 1-1:0.0: can't add hid device: -71 [ 85.790340][ T3092] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 85.816203][ T3092] usb 1-1: USB disconnect, device number 2 [ 85.907977][ T6044] lowmem_reserve[]: 0 0 0 0 0 [ 85.908126][ T6072] binder: 6071:6072 ioctl 4018620d 0 returned -22 [ 85.934355][ T6044] Node 1 Normal free:3889084kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22048kB local_pcp:13344kB free_cma:0kB [ 85.951319][ T6072] binder: 6071:6072 ioctl c0306201 200000000240 returned -11 [ 85.980293][ T6044] lowmem_reserve[]: 0 0 0 0 0 [ 85.993050][ T6072] binder: 6071:6072 ioctl c0306201 2000000002c0 returned -14 [ 86.002984][ T6044] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 86.039482][ T6044] Node 0 DMA32: 0*4kB 2*8kB (UE) 1*16kB (U) 1*32kB (U) 1*64kB (M) 2*128kB (UM) 1*256kB (E) 0*512kB 27*1024kB (UE) 9*2048kB (UME) 301*4096kB (M) = 1279616kB [ 86.059222][ T6044] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 86.102223][ T6044] Node 1 Normal: 207*4kB (UME) 54*8kB (UME) 49*16kB (UME) 60*32kB (UME) 21*64kB (UME) 8*128kB (UME) 3*256kB (UM) 4*512kB (UM) 1*1024kB (M) 2*2048kB (UE) 946*4096kB (M) = 3889084kB [ 86.127813][ T6044] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 86.159714][ T6044] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 86.180942][ T6044] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 86.191257][ T6044] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 86.202545][ T6044] 56095 total pagecache pages [ 86.208052][ T6044] 0 pages in swap cache [ 86.213880][ T6044] Free swap = 124996kB [ 86.218655][ T6044] Total swap = 124996kB [ 86.222907][ T6044] 2097051 pages RAM [ 86.233893][ T6044] 0 pages HighMem/MovableOnly [ 86.251531][ T6044] 426256 pages reserved [ 86.260668][ T6044] 0 pages cma reserved [ 86.380709][ T6081] syzkaller1: entered promiscuous mode [ 86.387011][ T6081] syzkaller1: entered allmulticast mode [ 86.524695][ T24] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 86.794278][ T24] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 86.818608][ T24] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 86.857453][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 86.870861][ T6093] syz.0.56(6093): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 86.973723][ T24] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 86.996420][ T24] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 87.015473][ T24] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 87.032312][ T24] usb 3-1: Product: syz [ 87.048923][ T24] usb 3-1: Manufacturer: syz [ 87.125009][ T6096] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 87.131568][ T6096] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 87.139718][ T6096] vhci_hcd vhci_hcd.0: Device attached [ 87.196646][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 87.221869][ T6097] vhci_hcd: connection closed [ 87.279365][ T24] cdc_wdm 3-1:1.0: skipping garbage [ 87.402459][ T24] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 87.554634][ T44] usb 39-1: new high-speed USB device number 3 using vhci_hcd [ 87.625201][ T1138] vhci_hcd: stop threads [ 87.682710][ T24] usb 3-1: USB disconnect, device number 2 [ 87.733128][ T1138] vhci_hcd: release socket [ 87.805381][ T1138] vhci_hcd: disconnect device [ 88.541323][ T6110] binder: 6108:6110 ioctl 4018620d 0 returned -22 [ 88.553645][ T6110] binder: 6108:6110 ioctl c0306201 200000000240 returned -11 [ 88.562100][ T6110] binder: 6108:6110 ioctl c0306201 2000000002c0 returned -14 [ 88.671980][ T6113] fuse: Bad value for 'fd' [ 88.709990][ T6113] Process accounting resumed [ 88.750980][ T6116] syzkaller1: entered promiscuous mode [ 88.756651][ T6116] syzkaller1: entered allmulticast mode [ 88.789648][ T6118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.65'. [ 88.921623][ T6124] 9pnet_virtio: no channels available for device syz [ 89.036458][ T6131] binder: 6130:6131 ioctl 4018620d 0 returned -22 [ 89.058073][ T6131] binder: 6130:6131 ioctl c0306201 200000000240 returned -11 [ 89.077013][ T6131] binder: 6130:6131 ioctl c0306201 2000000002c0 returned -14 [ 89.277561][ T6141] fuse: Bad value for 'fd' [ 89.315287][ T6141] Process accounting resumed [ 89.380377][ T6145] syzkaller1: entered promiscuous mode [ 89.388097][ T6145] syzkaller1: entered allmulticast mode [ 89.402658][ T6143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.76'. [ 89.484071][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.76'. [ 89.563767][ T6152] input: syz1 as /devices/virtual/input/input5 [ 89.823144][ T6157] binder: 6156:6157 ioctl c0306201 0 returned -14 [ 89.831494][ T6157] binder: 6156:6157 ioctl c0306201 200000000240 returned -11 [ 89.839805][ T6157] binder: 6156:6157 ioctl c0306201 2000000002c0 returned -14 [ 90.421951][ T6167] fuse: Bad value for 'fd' [ 90.552689][ T6166] Process accounting resumed [ 90.675037][ T6169] syzkaller1: entered promiscuous mode [ 90.687164][ T6169] syzkaller1: entered allmulticast mode [ 91.017328][ T6177] binder: 6175:6177 ioctl c0306201 0 returned -14 [ 91.038397][ T6177] binder: 6175:6177 ioctl c0306201 200000000240 returned -11 [ 91.057857][ T6177] binder: 6175:6177 ioctl c0306201 2000000002c0 returned -14 [ 92.139944][ T1216] cfg80211: failed to load regulatory.db [ 92.551245][ T6191] Process accounting resumed [ 92.664312][ T6196] syzkaller1: entered promiscuous mode [ 92.685718][ T6196] syzkaller1: entered allmulticast mode [ 92.796049][ T44] vhci_hcd: vhci_device speed not set [ 92.974923][ T6202] binder: 6201:6202 ioctl c0306201 0 returned -14 [ 93.003546][ T6202] binder: 6201:6202 ioctl c0306201 200000000240 returned -11 [ 93.050019][ T6202] binder: 6201:6202 ioctl c0306201 2000000002c0 returned -14 [ 94.535308][ T6215] Process accounting resumed [ 94.666579][ T6217] syzkaller1: entered promiscuous mode [ 94.682433][ T6217] syzkaller1: entered allmulticast mode [ 95.065121][ T6234] binder: 6233:6234 ioctl c0306201 200000000240 returned -11 [ 95.078498][ T6234] binder: 6233:6234 ioctl c0306201 2000000002c0 returned -14 [ 95.183902][ T6238] Process accounting resumed [ 95.635939][ T6250] syzkaller1: entered promiscuous mode [ 95.641571][ T6250] syzkaller1: entered allmulticast mode [ 95.684609][ T44] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 95.815892][ T6252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.122'. [ 95.866812][ T44] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 95.875678][ T44] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 95.914541][ T44] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 95.942214][ T6256] binder: 6255:6256 ioctl c0306201 200000000240 returned -11 [ 95.950411][ T44] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 95.965971][ T44] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 95.981916][ T44] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 95.986423][ T6256] binder: 6255:6256 ioctl c0306201 2000000002c0 returned -14 [ 95.991878][ T44] usb 3-1: Product: syz [ 96.005550][ T44] usb 3-1: Manufacturer: syz [ 96.017962][ T44] cdc_wdm 3-1:1.0: skipping garbage [ 96.023224][ T44] cdc_wdm 3-1:1.0: skipping garbage [ 96.034530][ T44] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 96.043203][ T44] cdc_wdm 3-1:1.0: Unknown control protocol [ 96.136916][ T6262] Process accounting resumed [ 96.180792][ T6266] netlink: 'syz.3.128': attribute type 1 has an invalid length. [ 96.188754][ T6266] netlink: 224 bytes leftover after parsing attributes in process `syz.3.128'. [ 96.232625][ T44] usb 3-1: USB disconnect, device number 3 [ 96.307479][ T6275] syzkaller1: entered promiscuous mode [ 96.313182][ T6275] syzkaller1: entered allmulticast mode [ 96.478512][ T6281] binder: 6280:6281 ioctl c0306201 200000000240 returned -11 [ 96.488829][ T6281] binder: 6280:6281 ioctl c0306201 2000000002c0 returned -14 [ 96.620474][ T6285] Process accounting resumed [ 96.777471][ T6298] syzkaller1: entered promiscuous mode [ 96.783407][ T6298] syzkaller1: entered allmulticast mode [ 96.818870][ T6300] binder: 6299:6300 ioctl c0306201 200000000240 returned -11 [ 96.827301][ T6300] binder: 6299:6300 ioctl c0306201 2000000002c0 returned -14 [ 96.894545][ T5908] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 96.924070][ T6303] bond0: entered promiscuous mode [ 96.939130][ T6306] FAULT_INJECTION: forcing a failure. [ 96.939130][ T6306] name failslab, interval 1, probability 0, space 0, times 1 [ 96.984537][ T6306] CPU: 0 UID: 0 PID: 6306 Comm: syz.0.146 Not tainted syzkaller #0 PREEMPT(full) [ 96.984563][ T6306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 96.984575][ T6306] Call Trace: [ 96.984583][ T6306] [ 96.984590][ T6306] dump_stack_lvl+0x189/0x250 [ 96.984625][ T6306] ? __pfx____ratelimit+0x10/0x10 [ 96.984650][ T6306] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.984679][ T6306] ? __pfx__printk+0x10/0x10 [ 96.984709][ T6306] ? __pfx___might_resched+0x10/0x10 [ 96.984731][ T6306] ? lock_acquire+0x5f/0x360 [ 96.984761][ T6306] should_fail_ex+0x414/0x560 [ 96.984788][ T6306] should_failslab+0xa8/0x100 [ 96.984807][ T6306] __kmalloc_noprof+0xcb/0x4b0 [ 96.984833][ T6306] ? kfree+0x4d/0x440 [ 96.984856][ T6306] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 96.984886][ T6306] tomoyo_realpath_from_path+0xe3/0x5d0 [ 96.984912][ T6306] ? tomoyo_domain+0xd9/0x130 [ 96.984940][ T6306] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 96.984962][ T6306] tomoyo_path_number_perm+0x1e8/0x5a0 [ 96.984982][ T6306] ? lock_release+0x4b/0x3e0 [ 96.985001][ T6306] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 96.985023][ T6306] ? rcu_is_watching+0x15/0xb0 [ 96.985045][ T6306] ? lock_release+0x4b/0x3e0 [ 96.985061][ T6306] ? vfs_write+0x956/0xb30 [ 96.985081][ T6306] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 96.985122][ T6306] ? __fget_files+0x3a0/0x420 [ 96.985143][ T6306] ? __fget_files+0x2a/0x420 [ 96.985167][ T6306] security_file_ioctl+0xcb/0x2d0 [ 96.985188][ T6306] __se_sys_ioctl+0x47/0x170 [ 96.985218][ T6306] do_syscall_64+0xfa/0xfa0 [ 96.985245][ T6306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.985264][ T6306] ? clear_bhb_loop+0x60/0xb0 [ 96.985285][ T6306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.985303][ T6306] RIP: 0033:0x7f1ced58ebe9 [ 96.985328][ T6306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.985345][ T6306] RSP: 002b:00007f1cee326038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 96.985365][ T6306] RAX: ffffffffffffffda RBX: 00007f1ced7c5fa0 RCX: 00007f1ced58ebe9 [ 96.985379][ T6306] RDX: 0000200000000700 RSI: 0000000000008914 RDI: 0000000000000004 [ 96.985391][ T6306] RBP: 00007f1cee326090 R08: 0000000000000000 R09: 0000000000000000 [ 96.985401][ T6306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.985412][ T6306] R13: 00007f1ced7c6038 R14: 00007f1ced7c5fa0 R15: 00007ffe5b813f58 [ 96.985432][ T6306] [ 96.985439][ T6306] ERROR: Out of memory at tomoyo_realpath_from_path. [ 97.255335][ T5908] usb 4-1: Using ep0 maxpacket: 32 [ 97.262032][ T5908] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 97.270445][ T5908] usb 4-1: config 0 has no interface number 0 [ 97.284528][ T5908] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 97.304530][ T5908] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 97.324562][ T5908] usb 4-1: config 0 interface 126 has no altsetting 0 [ 97.334369][ T5908] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 97.362171][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.384369][ T5908] usb 4-1: Product: syz [ 97.396175][ T5908] usb 4-1: Manufacturer: syz [ 97.400881][ T5908] usb 4-1: SerialNumber: syz [ 97.412565][ T5908] usb 4-1: config 0 descriptor?? [ 97.426775][ T6292] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 97.435487][ T6292] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 97.475038][ T6320] Process accounting resumed [ 97.654800][ T5858] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 97.750277][ T6339] binder: 6338:6339 ioctl c0306201 200000000240 returned -11 [ 97.780966][ T6339] binder: 6338:6339 ioctl c0306201 2000000002c0 returned -14 [ 97.814791][ T5858] usb 3-1: Using ep0 maxpacket: 16 [ 97.827862][ T5858] usb 3-1: config 9 has an invalid interface number: 74 but max is 0 [ 97.846707][ T5858] usb 3-1: config 9 has no interface number 0 [ 97.873095][ T5908] ir_usb 4-1:0.126: IR Dongle converter detected [ 97.879618][ T5858] usb 3-1: config 9 interface 74 has no altsetting 0 [ 97.893839][ T5858] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10 [ 97.909851][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.920678][ T5858] usb 3-1: Product: syz [ 97.925367][ T5858] usb 3-1: Manufacturer: syz [ 97.930114][ T5858] usb 3-1: SerialNumber: syz [ 97.938307][ T6350] syzkaller1: entered promiscuous mode [ 97.944080][ T6350] syzkaller1: entered allmulticast mode [ 98.038485][ T6355] FAULT_INJECTION: forcing a failure. [ 98.038485][ T6355] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 98.060315][ T6355] CPU: 1 UID: 0 PID: 6355 Comm: syz.1.156 Not tainted syzkaller #0 PREEMPT(full) [ 98.060361][ T6355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 98.060373][ T6355] Call Trace: [ 98.060380][ T6355] [ 98.060388][ T6355] dump_stack_lvl+0x189/0x250 [ 98.060423][ T6355] ? __pfx____ratelimit+0x10/0x10 [ 98.060449][ T6355] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.060479][ T6355] ? __pfx__printk+0x10/0x10 [ 98.060506][ T6355] ? __might_fault+0xb0/0x130 [ 98.060540][ T6355] ? rcu_is_watching+0x15/0xb0 [ 98.060563][ T6355] should_fail_ex+0x414/0x560 [ 98.060593][ T6355] _copy_from_user+0x2d/0xb0 [ 98.060617][ T6355] ___sys_sendmsg+0x158/0x2a0 [ 98.060650][ T6355] ? __pfx____sys_sendmsg+0x10/0x10 [ 98.060696][ T6355] ? __fget_files+0x2a/0x420 [ 98.060718][ T6355] ? __fget_files+0x3a0/0x420 [ 98.060745][ T6355] __x64_sys_sendmsg+0x19b/0x260 [ 98.060776][ T6355] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 98.060810][ T6355] ? __pfx_ksys_write+0x10/0x10 [ 98.060831][ T6355] ? rcu_is_watching+0x15/0xb0 [ 98.060855][ T6355] do_syscall_64+0xfa/0xfa0 [ 98.060882][ T6355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.060901][ T6355] ? clear_bhb_loop+0x60/0xb0 [ 98.060923][ T6355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.060943][ T6355] RIP: 0033:0x7f807078ebe9 [ 98.060959][ T6355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.060983][ T6355] RSP: 002b:00007f80715cc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.061004][ T6355] RAX: ffffffffffffffda RBX: 00007f80709c5fa0 RCX: 00007f807078ebe9 [ 98.061018][ T6355] RDX: 0000000020000040 RSI: 0000200000000200 RDI: 0000000000000004 [ 98.061042][ T6355] RBP: 00007f80715cc090 R08: 0000000000000000 R09: 0000000000000000 [ 98.061054][ T6355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.061065][ T6355] R13: 00007f80709c6038 R14: 00007f80709c5fa0 R15: 00007ffc9852c678 [ 98.061087][ T6355] [ 98.066187][ T1216] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.276944][ T5908] usb 4-1: IRDA class descriptor not found, device not bound [ 98.291125][ T5908] usb 4-1: USB disconnect, device number 2 [ 98.384355][ T6362] Process accounting resumed [ 98.437102][ T1216] usb 1-1: Using ep0 maxpacket: 8 [ 98.467358][ T1216] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.494861][ T1216] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.521998][ T1216] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.551404][ T1216] usb 1-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 98.561233][ T1216] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.575694][ T1216] usb 1-1: config 0 descriptor?? [ 98.631588][ T6324] infiniband syz1: set down [ 98.640797][ T6324] infiniband syz1: added ipvlan1 [ 98.713574][ T6324] RDS/IB: syz1: added [ 98.726056][ T6324] smc: adding ib device syz1 with port count 1 [ 98.732342][ T6324] smc: ib device syz1 port 1 has pnetid [ 98.796912][ T1216] hid (null): report_id 918307361 is invalid [ 98.817317][ T1216] nzxt-kraken2 0003:1E71:170E.0001: report_id 918307361 is invalid [ 98.858988][ T1216] nzxt-kraken2 0003:1E71:170E.0001: item 0 4 1 8 parsing failed [ 98.895059][ T1216] nzxt-kraken2 0003:1E71:170E.0001: hid parse failed with -22 [ 98.902703][ T1216] nzxt-kraken2 0003:1E71:170E.0001: probe with driver nzxt-kraken2 failed with error -22 [ 99.000401][ T6379] netlink: 200 bytes leftover after parsing attributes in process `syz.0.154'. [ 99.589249][ T1216] usb 1-1: USB disconnect, device number 3 [ 100.011963][ T6388] binder: 6387:6388 ioctl c0306201 200000000240 returned -11 [ 100.020366][ T6388] binder: 6387:6388 ioctl c0306201 2000000002c0 returned -14 [ 100.104399][ T6391] FAULT_INJECTION: forcing a failure. [ 100.104399][ T6391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.124029][ T6391] CPU: 1 UID: 0 PID: 6391 Comm: syz.3.165 Not tainted syzkaller #0 PREEMPT(full) [ 100.124055][ T6391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 100.124067][ T6391] Call Trace: [ 100.124075][ T6391] [ 100.124083][ T6391] dump_stack_lvl+0x189/0x250 [ 100.124119][ T6391] ? __pfx____ratelimit+0x10/0x10 [ 100.124145][ T6391] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.124174][ T6391] ? __pfx__printk+0x10/0x10 [ 100.124200][ T6391] ? __might_fault+0xb0/0x130 [ 100.124233][ T6391] ? rcu_is_watching+0x15/0xb0 [ 100.124257][ T6391] should_fail_ex+0x414/0x560 [ 100.124287][ T6391] _copy_from_iter+0x1de/0x1790 [ 100.124306][ T6391] ? unwind_next_frame+0xa5/0x2390 [ 100.124329][ T6391] ? rcu_is_watching+0x15/0xb0 [ 100.124351][ T6391] ? unwind_next_frame+0xa5/0x2390 [ 100.124374][ T6391] ? unwind_next_frame+0xa5/0x2390 [ 100.124400][ T6391] ? __pfx__copy_from_iter+0x10/0x10 [ 100.124419][ T6391] ? rcu_is_watching+0x15/0xb0 [ 100.124441][ T6391] ? lock_release+0x4b/0x3e0 [ 100.124463][ T6391] ? lock_release+0x4b/0x3e0 [ 100.124482][ T6391] tun_get_user+0x219/0x3e20 [ 100.124510][ T6391] ? rcu_is_watching+0x15/0xb0 [ 100.124531][ T6391] ? lock_release+0x4b/0x3e0 [ 100.124552][ T6391] ? aa_file_perm+0x44d/0x1550 [ 100.124578][ T6391] ? __pfx_tun_get_user+0x10/0x10 [ 100.124601][ T6391] ? _parse_integer_limit+0x1ae/0x1f0 [ 100.124632][ T6391] ? kstrtoull+0x12f/0x1d0 [ 100.124664][ T6391] ? ref_tracker_alloc+0x318/0x460 [ 100.124691][ T6391] ? get_pid_task+0x20/0x1f0 [ 100.124717][ T6391] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 100.124755][ T6391] ? tun_get+0x1c/0x2f0 [ 100.124778][ T6391] ? tun_get+0x1c/0x2f0 [ 100.124800][ T6391] ? rcu_is_watching+0x15/0xb0 [ 100.124820][ T6391] ? tun_get+0x1c/0x2f0 [ 100.124843][ T6391] ? lock_release+0x4b/0x3e0 [ 100.124860][ T6391] ? common_file_perm+0x1b5/0x230 [ 100.124886][ T6391] ? tun_get+0x1c/0x2f0 [ 100.124912][ T6391] tun_chr_write_iter+0x113/0x200 [ 100.124937][ T6391] vfs_write+0x5c9/0xb30 [ 100.124960][ T6391] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 100.124985][ T6391] ? __pfx_vfs_write+0x10/0x10 [ 100.125009][ T6391] ? __fget_files+0x2a/0x420 [ 100.125036][ T6391] ksys_write+0x145/0x250 [ 100.125056][ T6391] ? __pfx_ksys_write+0x10/0x10 [ 100.125077][ T6391] ? rcu_is_watching+0x15/0xb0 [ 100.125101][ T6391] do_syscall_64+0xfa/0xfa0 [ 100.125129][ T6391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.125148][ T6391] ? clear_bhb_loop+0x60/0xb0 [ 100.125169][ T6391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.125188][ T6391] RIP: 0033:0x7ff96c18ebe9 [ 100.125206][ T6391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.125223][ T6391] RSP: 002b:00007ff96a3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 100.125246][ T6391] RAX: ffffffffffffffda RBX: 00007ff96c3c5fa0 RCX: 00007ff96c18ebe9 [ 100.125260][ T6391] RDX: 0000000000000042 RSI: 0000200000000280 RDI: 0000000000000004 [ 100.125272][ T6391] RBP: 00007ff96a3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 100.125284][ T6391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.125295][ T6391] R13: 00007ff96c3c6038 R14: 00007ff96c3c5fa0 R15: 00007ffc3bdc4f88 [ 100.125315][ T6391] [ 100.578396][ T5858] go7007 3-1:9.74: probe with driver go7007 failed with error -12 [ 100.593091][ T5858] usb 3-1: USB disconnect, device number 4 [ 100.679967][ T6402] Process accounting resumed [ 100.910039][ T6415] binder: 6414:6415 ioctl c0306201 0 returned -14 [ 100.914647][ T1216] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 100.917302][ T6415] binder: 6414:6415 ioctl c0306201 200000000240 returned -11 [ 100.933598][ T6415] binder: 6414:6415 ioctl c0306201 2000000002c0 returned -14 [ 101.075667][ T1216] usb 4-1: Using ep0 maxpacket: 32 [ 101.082655][ T1216] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 101.092567][ T1216] usb 4-1: config 0 has no interface number 0 [ 101.099250][ T1216] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 101.114388][ T1216] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 101.126040][ T1216] usb 4-1: config 0 interface 126 has no altsetting 0 [ 101.135033][ T1216] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 101.154077][ T1216] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.177099][ T1216] usb 4-1: Product: syz [ 101.181681][ T1216] usb 4-1: Manufacturer: syz [ 101.188996][ T1216] usb 4-1: SerialNumber: syz [ 101.203639][ T1216] usb 4-1: config 0 descriptor?? [ 101.219236][ T6400] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 101.227019][ T6400] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 101.259583][ T6425] FAULT_INJECTION: forcing a failure. [ 101.259583][ T6425] name failslab, interval 1, probability 0, space 0, times 0 [ 101.274321][ T6425] CPU: 0 UID: 0 PID: 6425 Comm: syz.2.176 Not tainted syzkaller #0 PREEMPT(full) [ 101.274348][ T6425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 101.274360][ T6425] Call Trace: [ 101.274368][ T6425] [ 101.274375][ T6425] dump_stack_lvl+0x189/0x250 [ 101.274415][ T6425] ? __pfx____ratelimit+0x10/0x10 [ 101.274440][ T6425] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.274469][ T6425] ? __pfx__printk+0x10/0x10 [ 101.274498][ T6425] ? __pfx___might_resched+0x10/0x10 [ 101.274519][ T6425] ? lock_acquire+0x5f/0x360 [ 101.274538][ T6425] should_fail_ex+0x414/0x560 [ 101.274567][ T6425] should_failslab+0xa8/0x100 [ 101.274586][ T6425] __kmalloc_noprof+0xcb/0x4b0 [ 101.274614][ T6425] ? tomoyo_encode+0x28b/0x550 [ 101.274641][ T6425] tomoyo_encode+0x28b/0x550 [ 101.274669][ T6425] tomoyo_realpath_from_path+0x58d/0x5d0 [ 101.274696][ T6425] ? tomoyo_domain+0xd9/0x130 [ 101.274724][ T6425] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 101.274745][ T6425] tomoyo_path_number_perm+0x1e8/0x5a0 [ 101.274767][ T6425] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 101.274787][ T6425] ? kvm_sched_clock_read+0x11/0x20 [ 101.274810][ T6425] ? sched_clock+0x3f/0x60 [ 101.274826][ T6425] ? sched_clock_cpu+0x74/0x430 [ 101.274847][ T6425] ? rcu_is_watching+0x15/0xb0 [ 101.274871][ T6425] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 101.274894][ T6425] ? clockevents_program_event+0x24d/0x360 [ 101.274941][ T6425] ? __fget_files+0x3a0/0x420 [ 101.274963][ T6425] ? __fget_files+0x2a/0x420 [ 101.274986][ T6425] security_file_ioctl+0xcb/0x2d0 [ 101.275007][ T6425] __se_sys_ioctl+0x47/0x170 [ 101.275036][ T6425] do_syscall_64+0xfa/0xfa0 [ 101.275061][ T6425] ? rcu_is_watching+0x15/0xb0 [ 101.275081][ T6425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.275099][ T6425] ? clear_bhb_loop+0x60/0xb0 [ 101.275119][ T6425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.275138][ T6425] RIP: 0033:0x7fd20ed8ebe9 [ 101.275154][ T6425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.275170][ T6425] RSP: 002b:00007fd20fc4a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.275191][ T6425] RAX: ffffffffffffffda RBX: 00007fd20efc5fa0 RCX: 00007fd20ed8ebe9 [ 101.275204][ T6425] RDX: 0000200000000700 RSI: 0000000000008914 RDI: 0000000000000004 [ 101.275216][ T6425] RBP: 00007fd20fc4a090 R08: 0000000000000000 R09: 0000000000000000 [ 101.275227][ T6425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.275237][ T6425] R13: 00007fd20efc6038 R14: 00007fd20efc5fa0 R15: 00007fff95f28ad8 [ 101.275258][ T6425] [ 101.551805][ T6425] ERROR: Out of memory at tomoyo_realpath_from_path. [ 101.629779][ T6427] syzkaller1: entered promiscuous mode [ 101.645899][ T6427] syzkaller1: entered allmulticast mode [ 101.749854][ T1216] ir_usb 4-1:0.126: IR Dongle converter detected [ 101.857740][ T6428] Process accounting resumed [ 101.956483][ T1216] usb 4-1: IRDA class descriptor not found, device not bound [ 102.112309][ T6435] FAULT_INJECTION: forcing a failure. [ 102.112309][ T6435] name failslab, interval 1, probability 0, space 0, times 0 [ 102.125150][ T6435] CPU: 0 UID: 0 PID: 6435 Comm: syz.0.181 Not tainted syzkaller #0 PREEMPT(full) [ 102.125176][ T6435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 102.125189][ T6435] Call Trace: [ 102.125196][ T6435] [ 102.125204][ T6435] dump_stack_lvl+0x189/0x250 [ 102.125238][ T6435] ? __pfx____ratelimit+0x10/0x10 [ 102.125263][ T6435] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.125290][ T6435] ? __pfx__printk+0x10/0x10 [ 102.125318][ T6435] ? fs_reclaim_acquire+0x7d/0x100 [ 102.125336][ T6435] ? rcu_is_watching+0x15/0xb0 [ 102.125357][ T6435] ? __pfx___might_resched+0x10/0x10 [ 102.125377][ T6435] ? lock_acquire+0x5f/0x360 [ 102.125396][ T6435] should_fail_ex+0x414/0x560 [ 102.125423][ T6435] should_failslab+0xa8/0x100 [ 102.125441][ T6435] kmem_cache_alloc_node_noprof+0x76/0x390 [ 102.125469][ T6435] ? __alloc_skb+0x112/0x2d0 [ 102.125496][ T6435] __alloc_skb+0x112/0x2d0 [ 102.125523][ T6435] netlink_sendmsg+0x5c6/0xb30 [ 102.125561][ T6435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.125588][ T6435] ? aa_sock_msg_perm+0xf1/0x1d0 [ 102.125614][ T6435] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 102.125637][ T6435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.125663][ T6435] __sock_sendmsg+0x21c/0x270 [ 102.125684][ T6435] ____sys_sendmsg+0x505/0x830 [ 102.125715][ T6435] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.125747][ T6435] ? import_iovec+0x74/0xa0 [ 102.125770][ T6435] ___sys_sendmsg+0x21f/0x2a0 [ 102.125798][ T6435] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.125842][ T6435] ? __fget_files+0x2a/0x420 [ 102.125863][ T6435] ? __fget_files+0x3a0/0x420 [ 102.125890][ T6435] __x64_sys_sendmsg+0x19b/0x260 [ 102.125919][ T6435] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 102.125952][ T6435] ? __pfx_ksys_write+0x10/0x10 [ 102.125972][ T6435] ? rcu_is_watching+0x15/0xb0 [ 102.125994][ T6435] do_syscall_64+0xfa/0xfa0 [ 102.126019][ T6435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.126038][ T6435] ? clear_bhb_loop+0x60/0xb0 [ 102.126059][ T6435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.126077][ T6435] RIP: 0033:0x7f1ced58ebe9 [ 102.126093][ T6435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.126109][ T6435] RSP: 002b:00007f1cee326038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.126129][ T6435] RAX: ffffffffffffffda RBX: 00007f1ced7c5fa0 RCX: 00007f1ced58ebe9 [ 102.126143][ T6435] RDX: 0000000020000040 RSI: 0000200000000200 RDI: 0000000000000004 [ 102.126155][ T6435] RBP: 00007f1cee326090 R08: 0000000000000000 R09: 0000000000000000 [ 102.126166][ T6435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.126176][ T6435] R13: 00007f1ced7c6038 R14: 00007f1ced7c5fa0 R15: 00007ffe5b813f58 [ 102.126197][ T6435] [ 102.396197][ T44] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 102.410730][ T5924] usb 4-1: USB disconnect, device number 3 [ 102.446962][ T6438] binder: 6437:6438 ioctl c0306201 0 returned -14 [ 102.453731][ T6438] binder: 6437:6438 ioctl c0306201 200000000240 returned -11 [ 102.462163][ T6438] binder: 6437:6438 ioctl c0306201 2000000002c0 returned -14 [ 102.542768][ T30] kauditd_printk_skb: 113 callbacks suppressed [ 102.542785][ T30] audit: type=1326 audit(1756820869.872:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6439 comm="syz.0.183" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1ced58ebe9 code=0x0 [ 102.578309][ T44] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 102.589160][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.598132][ T44] usb 3-1: Product: syz [ 102.602314][ T44] usb 3-1: Manufacturer: syz [ 102.606961][ T44] usb 3-1: SerialNumber: syz [ 102.617002][ T44] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 102.643017][ T5924] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 103.138024][ T6446] syzkaller1: entered promiscuous mode [ 103.143777][ T6446] syzkaller1: entered allmulticast mode [ 103.291337][ T6447] Process accounting resumed [ 103.674938][ T5924] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 103.692302][ T5924] ath9k_htc: Failed to initialize the device [ 103.728088][ T5924] usb 3-1: ath9k_htc: USB layer deinitialized [ 104.545073][ T6458] binder: 6457:6458 ioctl c0306201 0 returned -14 [ 104.578854][ T6458] binder: 6457:6458 ioctl c0306201 200000000240 returned -11 [ 104.605589][ T6458] binder: 6457:6458 ioctl c0306201 2000000002c0 returned -14 [ 104.927125][ T5858] usb 3-1: USB disconnect, device number 5 [ 104.982139][ T6467] Process accounting resumed [ 105.012307][ T44] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 105.047398][ T6470] netlink: 24 bytes leftover after parsing attributes in process `syz.2.197'. [ 105.174659][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 105.187346][ T44] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 105.204580][ T44] usb 4-1: config 0 has no interface number 0 [ 105.214604][ T44] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 105.232205][ T44] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 105.261748][ T44] usb 4-1: config 0 interface 126 has no altsetting 0 [ 105.271304][ T44] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 105.281892][ C1] ------------[ cut here ]------------ [ 105.287414][ C1] WARNING: ./include/linux/skbuff.h:1165 at nf_send_unreach6+0x828/0xa20, CPU#1: kworker/1:0/24 [ 105.297900][ C1] Modules linked in: [ 105.301821][ C1] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 105.311071][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 105.321173][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 105.327350][ C1] RIP: 0010:nf_send_unreach6+0x828/0xa20 [ 105.333024][ C1] Code: 85 f6 74 0a e8 39 1b 6f f7 e9 c8 fc ff ff e8 2f 1b 6f f7 4c 8b 7c 24 18 e9 34 fa ff ff e8 20 1b 6f f7 eb 9b e8 19 1b 6f f7 90 <0f> 0b 90 e9 c7 fb ff ff 48 85 db 0f 84 81 00 00 00 4c 8d a4 24 20 [ 105.352733][ C1] RSP: 0018:ffffc90000a083c0 EFLAGS: 00010246 [ 105.358868][ C1] RAX: ffffffff8a51b3b7 RBX: ffff888058884500 RCX: ffff88801da88000 [ 105.366904][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 105.375011][ C1] RBP: ffffc90000a08568 R08: ffff888026e03543 R09: 1ffff11004dc06a8 [ 105.383011][ C1] R10: dffffc0000000000 R11: ffffed1004dc06a9 R12: ffff888032948101 [ 105.391059][ C1] R13: dffffc0000000001 R14: 1ffff1100b1108ab R15: 0000000000000000 [ 105.399082][ C1] FS: 0000000000000000(0000) GS:ffff8881258c4000(0000) knlGS:0000000000000000 [ 105.408100][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.411457][ T6482] binder: 6481:6482 ioctl c0306201 200000000240 returned -11 [ 105.414857][ C1] CR2: 00007f1cee2f7d60 CR3: 000000007c570000 CR4: 00000000003526f0 [ 105.414883][ C1] Call Trace: [ 105.414891][ C1] [ 105.414904][ C1] ? __pfx_nf_send_unreach6+0x10/0x10 [ 105.423694][ T6482] binder: 6481:6482 ioctl c0306201 2000000002c0 returned -14 [ 105.430314][ C1] ? lock_release+0x4b/0x3e0 [ 105.430342][ C1] ? unwind_next_frame+0xa5/0x2390 [ 105.430367][ C1] ? rcu_is_watching+0x15/0xb0 [ 105.463810][ C1] nft_reject_inet_eval+0x441/0x690 [ 105.469098][ C1] nft_do_chain+0x40c/0x1920 [ 105.473717][ C1] ? __pfx_wg_receive+0x10/0x10 [ 105.478642][ C1] ? __pfx_udpv6_queue_rcv_one_skb+0x10/0x10 [ 105.484678][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 105.489737][ C1] ? ipv6_find_hdr+0xc78/0x1050 [ 105.494658][ C1] nft_do_chain_inet+0x25d/0x340 [ 105.499626][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 105.505148][ C1] ? NF_HOOK+0x9a/0x3a0 [ 105.509340][ C1] ? rcu_is_watching+0x15/0xb0 [ 105.514134][ C1] ? lock_acquire+0x5f/0x360 [ 105.518810][ C1] ? ip_sabotage_in+0x57/0x270 [ 105.523628][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 105.529162][ C1] nf_hook_slow+0xc5/0x220 [ 105.533623][ C1] NF_HOOK+0x206/0x3a0 [ 105.537770][ C1] ? skb_orphan+0xaf/0xd0 [ 105.542133][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 105.547427][ C1] ? NF_HOOK+0x9a/0x3a0 [ 105.551618][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 105.556292][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 105.561536][ C1] __netif_receive_skb+0xd3/0x380 [ 105.566629][ C1] ? process_backlog+0x2d5/0x14f0 [ 105.571693][ C1] process_backlog+0x60e/0x14f0 [ 105.576611][ C1] ? __pfx_process_backlog+0x10/0x10 [ 105.581922][ C1] ? xdp_do_check_flushed+0x21b/0x240 [ 105.587350][ C1] __napi_poll+0xc4/0x360 [ 105.591723][ C1] ? rcu_is_watching+0x15/0xb0 [ 105.596562][ C1] net_rx_action+0x707/0xe30 [ 105.601195][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 105.606389][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 105.611630][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 105.617000][ C1] handle_softirqs+0x283/0x870 [ 105.621806][ C1] ? do_softirq+0xec/0x180 [ 105.626322][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 105.631636][ C1] ? wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 105.637597][ C1] do_softirq+0xec/0x180 [ 105.641868][ C1] [ 105.644857][ C1] [ 105.647819][ C1] ? __pfx_do_softirq+0x10/0x10 [ 105.652721][ C1] ? rcu_is_watching+0x15/0xb0 [ 105.657560][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 105.662803][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 105.668597][ C1] ? do_raw_read_unlock+0x3d/0x80 [ 105.673665][ C1] wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 105.679459][ C1] wg_packet_tx_worker+0x1c8/0x7c0 [ 105.684624][ C1] ? rcu_is_watching+0x15/0xb0 [ 105.689424][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 105.695233][ C1] process_scheduled_works+0xae1/0x17b0 [ 105.700825][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 105.706878][ C1] worker_thread+0x8a0/0xda0 [ 105.711509][ C1] kthread+0x711/0x8a0 [ 105.715655][ C1] ? __pfx_worker_thread+0x10/0x10 [ 105.720793][ C1] ? __pfx_kthread+0x10/0x10 [ 105.725459][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 105.730685][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 105.735950][ C1] ? __pfx_kthread+0x10/0x10 [ 105.740586][ C1] ret_from_fork+0x47c/0x820 [ 105.745261][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 105.750406][ C1] ? __switch_to_asm+0x39/0x70 [ 105.755242][ C1] ? __switch_to_asm+0x33/0x70 [ 105.760035][ C1] ? __pfx_kthread+0x10/0x10 [ 105.764677][ C1] ret_from_fork_asm+0x1a/0x30 [ 105.769486][ C1] [ 105.772529][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 105.779837][ C1] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 105.789082][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 105.799346][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 105.805470][ C1] Call Trace: [ 105.808796][ C1] [ 105.811674][ C1] dump_stack_lvl+0x99/0x250 [ 105.816307][ C1] ? __asan_memcpy+0x40/0x70 [ 105.820955][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.826210][ C1] ? __pfx__printk+0x10/0x10 [ 105.830849][ C1] vpanic+0x281/0x750 [ 105.834870][ C1] ? __pfx_vpanic+0x10/0x10 [ 105.839409][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 105.844731][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 105.849968][ C1] panic+0xb9/0xc0 [ 105.853729][ C1] ? __pfx_panic+0x10/0x10 [ 105.858183][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 105.863177][ C1] __warn+0x334/0x4c0 [ 105.867235][ C1] ? nf_send_unreach6+0x828/0xa20 [ 105.872315][ C1] ? nf_send_unreach6+0x828/0xa20 [ 105.877386][ C1] report_bug+0x2be/0x4f0 [ 105.881747][ C1] ? nf_send_unreach6+0x828/0xa20 [ 105.886792][ C1] ? nf_send_unreach6+0x828/0xa20 [ 105.891827][ C1] ? nf_send_unreach6+0x82a/0xa20 [ 105.896861][ C1] handle_bug+0x84/0x160 [ 105.901104][ C1] exc_invalid_op+0x1a/0x50 [ 105.905612][ C1] asm_exc_invalid_op+0x1a/0x20 [ 105.910470][ C1] RIP: 0010:nf_send_unreach6+0x828/0xa20 [ 105.916136][ C1] Code: 85 f6 74 0a e8 39 1b 6f f7 e9 c8 fc ff ff e8 2f 1b 6f f7 4c 8b 7c 24 18 e9 34 fa ff ff e8 20 1b 6f f7 eb 9b e8 19 1b 6f f7 90 <0f> 0b 90 e9 c7 fb ff ff 48 85 db 0f 84 81 00 00 00 4c 8d a4 24 20 [ 105.935755][ C1] RSP: 0018:ffffc90000a083c0 EFLAGS: 00010246 [ 105.941831][ C1] RAX: ffffffff8a51b3b7 RBX: ffff888058884500 RCX: ffff88801da88000 [ 105.949836][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 105.957811][ C1] RBP: ffffc90000a08568 R08: ffff888026e03543 R09: 1ffff11004dc06a8 [ 105.965791][ C1] R10: dffffc0000000000 R11: ffffed1004dc06a9 R12: ffff888032948101 [ 105.973788][ C1] R13: dffffc0000000001 R14: 1ffff1100b1108ab R15: 0000000000000000 [ 105.981788][ C1] ? nf_send_unreach6+0x827/0xa20 [ 105.986925][ C1] ? __pfx_nf_send_unreach6+0x10/0x10 [ 105.992321][ C1] ? lock_release+0x4b/0x3e0 [ 105.996916][ C1] ? unwind_next_frame+0xa5/0x2390 [ 106.002035][ C1] ? rcu_is_watching+0x15/0xb0 [ 106.006809][ C1] nft_reject_inet_eval+0x441/0x690 [ 106.012022][ C1] nft_do_chain+0x40c/0x1920 [ 106.016614][ C1] ? __pfx_wg_receive+0x10/0x10 [ 106.021475][ C1] ? __pfx_udpv6_queue_rcv_one_skb+0x10/0x10 [ 106.027483][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 106.032511][ C1] ? ipv6_find_hdr+0xc78/0x1050 [ 106.037388][ C1] nft_do_chain_inet+0x25d/0x340 [ 106.042329][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 106.047792][ C1] ? NF_HOOK+0x9a/0x3a0 [ 106.051956][ C1] ? rcu_is_watching+0x15/0xb0 [ 106.056726][ C1] ? lock_acquire+0x5f/0x360 [ 106.061321][ C1] ? ip_sabotage_in+0x57/0x270 [ 106.066102][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 106.071562][ C1] nf_hook_slow+0xc5/0x220 [ 106.075995][ C1] NF_HOOK+0x206/0x3a0 [ 106.080077][ C1] ? skb_orphan+0xaf/0xd0 [ 106.084433][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 106.089652][ C1] ? NF_HOOK+0x9a/0x3a0 [ 106.093836][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 106.098431][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 106.103643][ C1] __netif_receive_skb+0xd3/0x380 [ 106.108677][ C1] ? process_backlog+0x2d5/0x14f0 [ 106.113712][ C1] process_backlog+0x60e/0x14f0 [ 106.118575][ C1] ? __pfx_process_backlog+0x10/0x10 [ 106.123874][ C1] ? xdp_do_check_flushed+0x21b/0x240 [ 106.129259][ C1] __napi_poll+0xc4/0x360 [ 106.133595][ C1] ? rcu_is_watching+0x15/0xb0 [ 106.138368][ C1] net_rx_action+0x707/0xe30 [ 106.143066][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 106.148186][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 106.153411][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 106.158842][ C1] handle_softirqs+0x283/0x870 [ 106.163622][ C1] ? do_softirq+0xec/0x180 [ 106.168048][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 106.173340][ C1] ? wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 106.179254][ C1] do_softirq+0xec/0x180 [ 106.183514][ C1] [ 106.186463][ C1] [ 106.189403][ C1] ? __pfx_do_softirq+0x10/0x10 [ 106.194261][ C1] ? rcu_is_watching+0x15/0xb0 [ 106.199210][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 106.204441][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 106.210199][ C1] ? do_raw_read_unlock+0x3d/0x80 [ 106.215248][ C1] wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 106.220978][ C1] wg_packet_tx_worker+0x1c8/0x7c0 [ 106.226095][ C1] ? rcu_is_watching+0x15/0xb0 [ 106.230862][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 106.236774][ C1] process_scheduled_works+0xae1/0x17b0 [ 106.242335][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 106.248329][ C1] worker_thread+0x8a0/0xda0 [ 106.252937][ C1] kthread+0x711/0x8a0 [ 106.257019][ C1] ? __pfx_worker_thread+0x10/0x10 [ 106.262223][ C1] ? __pfx_kthread+0x10/0x10 [ 106.266830][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 106.272036][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 106.277249][ C1] ? __pfx_kthread+0x10/0x10 [ 106.281945][ C1] ret_from_fork+0x47c/0x820 [ 106.286568][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 106.291724][ C1] ? __switch_to_asm+0x39/0x70 [ 106.296519][ C1] ? __switch_to_asm+0x33/0x70 [ 106.301303][ C1] ? __pfx_kthread+0x10/0x10 [ 106.305924][ C1] ret_from_fork_asm+0x1a/0x30 [ 106.310710][ C1] [ 106.314126][ C1] Kernel Offset: disabled [ 106.318453][ C1] Rebooting in 86400 seconds..