last executing test programs: 9.26587512s ago: executing program 1 (id=2997): mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x184, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x138, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x184}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) socket(0x400000000010, 0x3, 0x0) creat(&(0x7f0000000440)='./file0\x00', 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r5, r5, 0x0, 0x40008) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) 7.839426983s ago: executing program 2 (id=3003): ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000340)={@desc={0x1, 0x0, @desc3}}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x450, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x404, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x318, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x2d0, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x450}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x0, 0x10, 0x1, 0x2, 0xfffffffd, 0x4}}) 7.014489982s ago: executing program 1 (id=3004): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}}) r0 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, 0x0, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000640)=@generic={0x1, 0x5, 0x8000000000000001}) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x20, @empty=0x1000000}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)="6306bc3795f8", 0x6}], 0x1, &(0x7f0000000180)=[@ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x4, [@empty]}]}}}], 0x18}, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"}) socket$rxrpc(0x21, 0x2, 0xa) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840, 0x42c04}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x24) 6.065618637s ago: executing program 0 (id=3011): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000340)={@desc={0x1, 0x0, @desc3}}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB]) 5.425083804s ago: executing program 2 (id=3012): mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x184, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x138, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x184}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) socket(0x400000000010, 0x3, 0x0) creat(&(0x7f0000000440)='./file0\x00', 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r5, r5, 0x0, 0x40008) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) 4.703333036s ago: executing program 0 (id=3014): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0xc618, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.653974019s ago: executing program 0 (id=3015): socket$rxrpc(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x184) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81800) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b1a439, &(0x7f0000000f80)=ANY=[@ANYRESOCT=r0, @ANYRES16, @ANYBLOB="41319d36b19da0f92c34d4161aedb4d9c117bb97d9a14da38deb4d799f7396c16e53eea9b38952392679dc9965aff692fc7a1de3490b4e22f3468c98ec62faff6c802527cda5cb48c5bc97b57252bea2f306513526e3e61d4e206934c90150ba2c325365d34a4866416a647a2022e5485163e3fad30730c80a46b63900f5dfdd845440d244a1e889fb14a29c06fcc85f976afbb0ce220bde0da45028db74413dd6a37b7b63c2b7a26169fc2a44d210bd17af7173aa72d2ad45542299334fe9576104e3e3e7d25997fe6c8bb5fa15b761725a39fedaf8d5533570ba136ac826592163351666324320c93c98c4", @ANYRES64], 0xb, 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./file0\x00', 0x2000898, &(0x7f00000003c0), 0x1, 0x55ae, &(0x7f000000abc0)="$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") read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0x0, 0x1}}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r4, &(0x7f00000001c0)=""/4068, 0xfe4) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000740), 0x80000, 0x0) socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00'}) ioctl$IOCTL_GET_NUM_DEVICES(r5, 0x40046104, &(0x7f0000000780)) pwrite64(r2, &(0x7f00000000c0)="c4ceae62a0daa42e23bb04d037b4246e31ccdec34127a899e4fc81f3118b97b2009cb368184fa04e9156b2858f37a92b3b102d21aff177b715bf5c89a6355164ac52ebeb9cc51db449041aa7ad0af0c573fff5b8349f51402c0af44499e24ad94c49f911ba2e749f3b312bc27de9c40fbc8a00535ea9d6e19b18a4302410d2ecc0fcce8d64f00c8558bc4da00ca8525bcb2c364d109114e4bfc7fc3e1070b8765873439dda4394c465fb16c54249de88f086b3f0da0b84d4e60d99395cc0de64b5672219c61984cb4cde317466bd262124a60802e36bf8bdb489e6b10827b1eb36f2a90bb97a35", 0xe7, 0x6) msgctl$IPC_RMID(0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000340)=ANY=[], 0x32600) 4.359021626s ago: executing program 3 (id=3016): syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000000c1, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000ff0000000000", @ANYRES32, @ANYRES32, @ANYRES32], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000ee7000/0x4000)=nil, 0x4000, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{0x0}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 4.048664294s ago: executing program 3 (id=3017): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(0x0, 0xa, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000140)={0x0, 0x34324142, 0x2, @discrete={0x1, 0x401}}) r3 = memfd_create(0x0, 0x2) ftruncate(r3, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setstatus(r4, 0x4, 0x22bc2fc78e92c4cb) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff, 0x100000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) lseek(r3, 0x0, 0x4) r5 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r5, &(0x7f0000000300)={0x2a, 0x1, 0xfffffffe}, 0xc) ftruncate(r0, 0xfffffd83) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r6, 0x227a, &(0x7f00000002c0)) close_range(r3, r6, 0x0) 3.992290677s ago: executing program 1 (id=3018): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, 0x0, 0x0) bind$inet6(r4, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043, r6}) 3.910536002s ago: executing program 0 (id=3019): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x0) 2.962542458s ago: executing program 3 (id=3020): syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000000c1, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000ff0000000000", @ANYRES32, @ANYRES32, @ANYRES32], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000ee7000/0x4000)=nil, 0x4000, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, 0x0, 0x0) writev(r1, &(0x7f0000000300)=[{0x0}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 2.961158898s ago: executing program 1 (id=3021): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = open$dir(0x0, 0x8000, 0x65) renameat2(r1, 0x0, 0xffffffffffffffff, 0x0, 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r0, 0x0, 0x800) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, 0x0) syz_io_uring_setup(0x20a0, &(0x7f00000001c0)={0x0, 0x66bd, 0xf59bfae318842803, 0x3, 0x37a}, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb2, 0x0, 0x0, 0x10, 0x5}, 0x94) 2.852486834s ago: executing program 2 (id=3022): socket$rxrpc(0x21, 0x2, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x184) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81800) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b1a439, &(0x7f0000000f80)=ANY=[@ANYRESOCT=r0, @ANYRES16, @ANYBLOB="41319d36b19da0f92c34d4161aedb4d9c117bb97d9a14da38deb4d799f7396c16e53eea9b38952392679dc9965aff692fc7a1de3490b4e22f3468c98ec62faff6c802527cda5cb48c5bc97b57252bea2f306513526e3e61d4e206934c90150ba2c325365d34a4866416a647a2022e5485163e3fad30730c80a46b63900f5dfdd845440d244a1e889fb14a29c06fcc85f976afbb0ce220bde0da45028db74413dd6a37b7b63c2b7a26169fc2a44d210bd17af7173aa72d2ad45542299334fe9576104e3e3e7d25997fe6c8bb5fa15b761725a39fedaf8d5533570ba136ac826592163351666324320c93c98c4", @ANYRES64], 0xb, 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./file0\x00', 0x2000898, &(0x7f00000003c0), 0x1, 0x55ae, &(0x7f000000abc0)="$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") read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r3, &(0x7f00000001c0)=""/4068, 0xfe4) socket$packet(0x11, 0x3, 0x300) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000780)) 2.852024304s ago: executing program 0 (id=3023): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000340)={@desc={0x1, 0x0, @desc3}}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB]) 2.851661904s ago: executing program 3 (id=3024): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) execve(0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r4, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.640934266s ago: executing program 3 (id=3025): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x3f8, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x3ac, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x2c0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x278, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 1.979566455s ago: executing program 1 (id=3026): sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x94}, 0x20000081) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9100, &(0x7f0000000140)={0x6, 0x8a, 0x40000}, 0x37) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x21, 0x3, 0x430, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x388, 0xffffffff, 0xffffffff, 0x388, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private2, [], [], 'veth0\x00', 'syzkaller1\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x12, 0x40, 0x1}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@private1, [], @ipv4=@remote, [], 0x0, 0x0, 0x0, 0x0, 0x4, 0x13}, {@ipv6=@dev, [0xffffffff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {@ipv4=@multicast2, [0x0, 0x0, 0xff000000], @ipv4=@multicast1, [0x0, 0xff], 0x4d6, 0x0, 0x0, 0x0, 0x9}, {@ipv6=@rand_addr=' \x01\x00', [0x0, 0xffffff00], @ipv4=@broadcast, [0x0, 0x0, 0xffffff00]}]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) 1.163910852s ago: executing program 1 (id=3027): sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x94}, 0x20000081) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9100, &(0x7f0000000140)={0x6, 0x8a, 0x40000}, 0x37) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x21, 0x3, 0x300, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x388, 0xffffffff, 0xffffffff, 0x388, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private2, [], [], 'veth0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0x12, 0x40, 0x1}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) 863.89859ms ago: executing program 2 (id=3028): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(0x0, 0xa, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000140)={0x0, 0x34324142, 0x2, @discrete={0x1, 0x401}}) r3 = memfd_create(0x0, 0x2) ftruncate(r3, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setstatus(r4, 0x4, 0x22bc2fc78e92c4cb) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff, 0x100000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) lseek(r3, 0x0, 0x4) r5 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r5, &(0x7f0000000300)={0x2a, 0x1, 0xfffffffe}, 0xc) ftruncate(r0, 0xfffffd83) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r6, 0x227a, &(0x7f00000002c0)) close_range(r3, r6, 0x0) 547.654208ms ago: executing program 2 (id=3029): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) setsockopt(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bpq0, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) 418.766386ms ago: executing program 2 (id=3030): mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x184, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x138, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x184}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) socket(0x400000000010, 0x3, 0x0) creat(&(0x7f0000000440)='./file0\x00', 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r5, r5, 0x0, 0x40008) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) 85.251165ms ago: executing program 3 (id=3031): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 0s ago: executing program 0 (id=3032): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x0) kernel console output (not intermixed with test programs): ][ T789] usb 2-1: Product: syz [ 310.123352][ T789] usb 2-1: Manufacturer: syz [ 310.153229][ T789] usb 2-1: SerialNumber: syz [ 310.160706][ T789] usb 2-1: config 0 descriptor?? [ 310.178587][ T789] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 310.240155][ T7908] udevd[7908]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 310.271329][ T7985] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.621'. [ 310.588090][ T7991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.623'. [ 310.855634][ T5846] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 311.285616][ T5846] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 311.293923][ T5846] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 311.332385][ T5846] usb 1-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 311.355363][ T5846] usb 1-1: config 220 has no interface number 1 [ 311.361702][ T5846] usb 1-1: config 220 interface 0 has no altsetting 0 [ 311.498196][ T5846] usb 1-1: config 220 interface 76 has no altsetting 0 [ 311.508122][ T5846] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 311.517606][ T5846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.554721][ T5846] usb 1-1: Product: syz [ 311.560372][ T5846] usb 1-1: Manufacturer: syz [ 311.576139][ T5846] usb 1-1: SerialNumber: syz [ 312.938573][ T5846] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 312.951389][ T5846] usb 1-1: No valid video chain found. [ 312.968331][ T5846] usb 1-1: USB disconnect, device number 9 [ 313.833791][ T789] usb 2-1: USB disconnect, device number 6 [ 314.170653][ T8020] random: crng reseeded on system resumption [ 314.828934][ T8023] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.629'. [ 315.300715][ T8028] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.631'. [ 316.072305][ T8037] random: crng reseeded on system resumption [ 317.375266][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.386293][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.470282][ T8041] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 318.739614][ T8051] random: crng reseeded on system resumption [ 320.231576][ T8071] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.641'. [ 324.082188][ T8088] random: crng reseeded on system resumption [ 325.862209][ T8101] syzkaller0: entered promiscuous mode [ 325.869226][ T8101] syzkaller0: entered allmulticast mode [ 326.722078][ T8096] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 326.730810][ T8097] delete_channel: no stack [ 327.500127][ T8110] random: crng reseeded on system resumption [ 328.071239][ T8116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.653'. [ 329.353495][ T8124] random: crng reseeded on system resumption [ 330.736687][ T5846] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 330.926946][ T5846] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.939485][ T5846] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 330.969892][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 331.450701][ T5846] usb 2-1: Product: syz [ 331.831358][ T8133] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 331.837495][ T5846] usb 2-1: Manufacturer: syz [ 331.855591][ T5846] usb 2-1: SerialNumber: syz [ 331.873976][ T5846] usb 2-1: config 0 descriptor?? [ 331.965416][ T5846] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 332.042337][ T7908] udevd[7908]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 333.095114][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.663'. [ 333.594489][ T8161] random: crng reseeded on system resumption [ 333.657448][ T5846] usb 2-1: USB disconnect, device number 7 [ 334.045761][ T8162] delete_channel: no stack [ 337.322110][ T8185] random: crng reseeded on system resumption [ 339.111325][ T8193] random: crng reseeded on system resumption [ 340.197415][ T8202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.675'. [ 340.838408][ T8213] : renamed from bond_slave_0 (while UP) [ 341.926615][ T8216] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 342.141402][ T8221] random: crng reseeded on system resumption [ 344.970348][ T8242] binder: 8241:8242 ioctl c0306201 0 returned -14 [ 345.029622][ T8243] random: crng reseeded on system resumption [ 346.826055][ T8262] random: crng reseeded on system resumption [ 348.601554][ T8264] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 349.903150][ T8284] random: crng reseeded on system resumption [ 353.050972][ T8319] random: crng reseeded on system resumption [ 355.152352][ T8333] syzkaller0: entered promiscuous mode [ 355.159654][ T8333] syzkaller0: entered allmulticast mode [ 359.240331][ T8360] random: crng reseeded on system resumption [ 359.464315][ T8347] random: crng reseeded on system resumption [ 360.007066][ T8367] random: crng reseeded on system resumption [ 361.225761][ T8378] syzkaller0: entered promiscuous mode [ 361.231434][ T8378] syzkaller0: entered allmulticast mode [ 362.220142][ T8393] : renamed from bond_slave_0 (while UP) [ 364.295284][ T8407] siw: device registration error -23 [ 364.642629][ T8415] binder: 8414:8415 ioctl c0306201 0 returned -14 [ 364.891694][ T8421] random: crng reseeded on system resumption [ 366.998236][ T8441] random: crng reseeded on system resumption [ 370.531422][ T8484] binder: 8483:8484 ioctl c0306201 0 returned -14 [ 370.983933][ T8491] random: crng reseeded on system resumption [ 374.096455][ T8505] sched: RT throttling activated [ 375.455038][ T8526] random: crng reseeded on system resumption [ 377.187714][ T8537] syzkaller0: entered promiscuous mode [ 377.193231][ T8537] syzkaller0: entered allmulticast mode [ 377.485905][ T8542] netlink: 68 bytes leftover after parsing attributes in process `syz.1.764'. [ 377.619571][ T8545] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.765'. [ 377.988332][ T8555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.769'. [ 378.811301][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.817793][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.458365][ T8581] syzkaller0: entered promiscuous mode [ 379.464048][ T8581] syzkaller0: entered allmulticast mode [ 380.366056][ T8596] random: crng reseeded on system resumption [ 381.975836][ T8607] syzkaller0: entered promiscuous mode [ 381.982792][ T8607] syzkaller0: entered allmulticast mode [ 382.072806][ T8615] overlayfs: failed to resolve './file1': -2 [ 383.294143][ T8628] random: crng reseeded on system resumption [ 384.783021][ T8641] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 385.710967][ T8660] random: crng reseeded on system resumption [ 386.931039][ T8668] syzkaller0: entered promiscuous mode [ 386.985014][ T8668] syzkaller0: entered allmulticast mode [ 390.701260][ T8687] random: crng reseeded on system resumption [ 391.455265][ T8702] netlink: 68 bytes leftover after parsing attributes in process `syz.2.808'. [ 391.918732][ T8707] random: crng reseeded on system resumption [ 393.415172][ T8709] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 395.629032][ T8754] random: crng reseeded on system resumption [ 396.453315][ T8765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.819'. [ 397.407847][ T8773] random: crng reseeded on system resumption [ 398.365816][ T8787] syzkaller0: entered promiscuous mode [ 398.385498][ T8787] syzkaller0: entered allmulticast mode [ 398.899822][ T8792] random: crng reseeded on system resumption [ 401.546351][ T8820] random: crng reseeded on system resumption [ 402.956795][ T8831] random: crng reseeded on system resumption [ 404.105048][ T8840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.838'. [ 405.652683][ T8855] random: crng reseeded on system resumption [ 407.151114][ T8864] netlink: 68 bytes leftover after parsing attributes in process `syz.3.844'. [ 407.279897][ T8868] netlink: 'syz.1.845': attribute type 72 has an invalid length. [ 407.830748][ T8876] random: crng reseeded on system resumption [ 409.321879][ T8897] random: crng reseeded on system resumption [ 410.242903][ T8900] netlink: 'syz.2.855': attribute type 72 has an invalid length. [ 411.172850][ T8920] random: crng reseeded on system resumption [ 415.788006][ T8955] kthread_run failed with err -4 [ 416.618297][ T8972] random: crng reseeded on system resumption [ 418.563835][ T8997] netlink: 68 bytes leftover after parsing attributes in process `syz.1.877'. [ 418.823534][ T9003] random: crng reseeded on system resumption [ 421.607751][ T9018] random: crng reseeded on system resumption [ 422.068376][ T9024] netlink: 24 bytes leftover after parsing attributes in process `syz.3.884'. [ 422.987639][ T9033] random: crng reseeded on system resumption [ 427.014990][ T9063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.895'. [ 427.683919][ T9078] random: crng reseeded on system resumption [ 429.067692][ T9094] random: crng reseeded on system resumption [ 429.743624][ T9106] siw: device registration error -23 [ 431.993793][ T9137] random: crng reseeded on system resumption [ 433.988896][ T9163] random: crng reseeded on system resumption [ 437.030727][ T9186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.920'. [ 437.893316][ T9193] random: crng reseeded on system resumption [ 440.250463][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.256917][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.065617][ T9218] random: crng reseeded on system resumption [ 443.881207][ T9244] syz_tun: entered allmulticast mode [ 444.031873][ T9244] dvmrp6: entered allmulticast mode [ 444.354811][ T9251] random: crng reseeded on system resumption [ 447.083479][ T9283] Bluetooth: MGMT ver 1.22 [ 448.976262][ T9312] random: crng reseeded on system resumption [ 450.365386][ T9319] tipc: Started in network mode [ 450.370585][ T9319] tipc: Node identity bee358ca4902, cluster identity 4711 [ 450.401061][ T9319] tipc: Enabled bearer , priority 0 [ 450.423878][ T9325] syzkaller0: entered promiscuous mode [ 450.546221][ T9325] syzkaller0: entered allmulticast mode [ 450.584577][ T9319] tipc: Resetting bearer [ 450.685946][ T9328] random: crng reseeded on system resumption [ 451.035453][ T9317] tipc: Resetting bearer [ 451.650633][ T9317] tipc: Disabling bearer [ 451.663128][ T5828] tipc: Node number set to 4158740682 [ 452.771155][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.962'. [ 455.464082][ T9386] random: crng reseeded on system resumption [ 457.396244][ T9416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.978'. [ 459.383296][ T9445] random: crng reseeded on system resumption [ 462.084663][ T9472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.996'. [ 463.419777][ T9494] random: crng reseeded on system resumption [ 464.461104][ T9499] random: crng reseeded on system resumption [ 471.869934][ T9545] random: crng reseeded on system resumption [ 475.923884][ T9581] tipc: Enabled bearer , priority 0 [ 475.959535][ T9581] syzkaller0: entered promiscuous mode [ 475.982211][ T9581] syzkaller0: entered allmulticast mode [ 476.050158][ T9581] tipc: Resetting bearer [ 476.091078][ T9580] tipc: Resetting bearer [ 476.140955][ T9580] tipc: Disabling bearer [ 477.242388][ T9591] syzkaller0: entered promiscuous mode [ 477.261941][ T9591] syzkaller0: entered allmulticast mode [ 477.320797][ T9574] : renamed from bond_slave_0 (while UP) [ 478.039263][ T9601] random: crng reseeded on system resumption [ 479.935236][ T9623] random: crng reseeded on system resumption [ 480.688741][ T9627] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 480.689447][ T9625] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 483.492697][ T9656] syzkaller0: entered promiscuous mode [ 483.508712][ T9656] syzkaller0: entered allmulticast mode [ 483.967936][ T9665] random: crng reseeded on system resumption [ 486.244030][ T9695] random: crng reseeded on system resumption [ 491.998818][ T9753] syz_tun: entered allmulticast mode [ 492.025159][ T9753] dvmrp6: entered allmulticast mode [ 492.662594][ T9771] random: crng reseeded on system resumption [ 495.574123][ T9790] random: crng reseeded on system resumption [ 495.657169][ T9792] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1069'. [ 496.473128][ T9792] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 497.694449][ T9821] random: crng reseeded on system resumption [ 497.976337][ T9827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1075'. [ 500.775285][ T9865] random: crng reseeded on system resumption [ 501.691102][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.697952][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.474988][ T9902] random: crng reseeded on system resumption [ 506.357781][ T9931] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1096'. [ 507.949587][ T9958] random: crng reseeded on system resumption [ 509.140116][ T9977] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1106'. [ 510.182545][ T9996] random: crng reseeded on system resumption [ 510.616681][T10000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1111'. [ 511.497557][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1113'. [ 512.302096][T10024] random: crng reseeded on system resumption [ 514.901789][T10062] random: crng reseeded on system resumption [ 516.302552][T10078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1126'. [ 516.735748][T10084] random: crng reseeded on system resumption [ 517.677323][T10096] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 520.002813][ T27] audit: type=1326 audit(1771096032.965:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10117 comm="syz.1.1139" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f893e99bf79 code=0x0 [ 520.849102][T10140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1143'. [ 521.779613][T10155] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.1147'. [ 524.555119][T10175] random: crng reseeded on system resumption [ 526.861482][ T27] audit: type=1326 audit(1771096039.825:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10179 comm="syz.3.1156" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1b379bf79 code=0x0 [ 529.207580][T10221] random: crng reseeded on system resumption [ 532.445791][T10256] random: crng reseeded on system resumption [ 533.605279][T10255] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 535.248005][T10275] random: crng reseeded on system resumption [ 536.213497][T10281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1183'. [ 538.552067][T10314] random: crng reseeded on system resumption [ 540.786532][T10330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1194'. [ 542.131627][T10350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1200'. [ 543.385057][ T5828] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 543.617116][ T5828] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 543.632673][ T5828] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 543.694202][ T5828] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 543.791141][ T5828] usb 4-1: string descriptor 0 read error: -22 [ 543.800737][ T5828] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 543.832790][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.876353][T10369] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 544.534160][ T5828] cdc_ncm 4-1:1.0: bind() failure [ 544.578991][ T5828] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 544.622016][ T5828] cdc_ncm 4-1:1.1: bind() failure [ 544.651274][ T5828] usb 4-1: USB disconnect, device number 7 [ 545.013780][T10392] syzkaller0: entered promiscuous mode [ 545.028630][T10392] syzkaller0: entered allmulticast mode [ 548.036939][T10424] syzkaller0: entered promiscuous mode [ 548.042509][T10424] syzkaller0: entered allmulticast mode [ 548.066368][T10423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1219'. [ 548.880553][T10448] random: crng reseeded on system resumption [ 551.515103][T10472] syzkaller0: entered promiscuous mode [ 551.525157][T10472] syzkaller0: entered allmulticast mode [ 552.644370][T10485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1235'. [ 554.006337][T10499] random: crng reseeded on system resumption [ 555.850347][T10512] syzkaller0: entered promiscuous mode [ 555.856019][T10512] syzkaller0: entered allmulticast mode [ 557.545277][ T27] audit: type=1326 audit(1771096070.505:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10528 comm="syz.0.1247" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e20b9bf79 code=0x0 [ 559.022431][T10556] syzkaller0: entered promiscuous mode [ 559.145046][T10556] syzkaller0: entered allmulticast mode [ 563.157556][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.225010][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.740231][T10591] syzkaller0: entered promiscuous mode [ 563.782450][T10591] syzkaller0: entered allmulticast mode [ 565.539248][T10613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1269'. [ 568.362473][T10650] random: crng reseeded on system resumption [ 573.649105][T10705] random: crng reseeded on system resumption [ 577.682159][T10736] random: crng reseeded on system resumption [ 577.787286][T10737] netlink: 'syz.1.1301': attribute type 72 has an invalid length. [ 579.824183][T10754] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1304'. [ 582.167424][T10775] tipc: Enabled bearer , priority 0 [ 582.204279][T10774] tipc: Disabling bearer [ 582.266297][T10778] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1312'. [ 582.712932][T10789] random: crng reseeded on system resumption [ 585.078819][T10813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1321'. [ 585.147535][T10819] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1324'. [ 585.589990][T10828] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1326'. [ 586.276564][T10839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1330'. [ 587.003097][T10844] random: crng reseeded on system resumption [ 587.863656][T10860] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1337'. [ 588.245422][T10876] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1338'. [ 588.346778][ T789] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 588.547656][ T789] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 588.587188][ T789] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 588.640521][ T789] usb 4-1: config 0 has no interfaces? [ 588.675261][ T789] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 588.694394][ T789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.714608][ T789] usb 4-1: config 0 descriptor?? [ 589.459883][T10892] random: crng reseeded on system resumption [ 591.273594][ T789] usb 4-1: USB disconnect, device number 8 [ 592.669309][T10936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1357'. [ 592.974656][T10940] random: crng reseeded on system resumption [ 596.936256][T10996] random: crng reseeded on system resumption [ 604.228493][T11069] random: crng reseeded on system resumption [ 607.448788][T11109] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1406'. [ 607.989778][T11115] random: crng reseeded on system resumption [ 609.243233][T11126] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1411'. [ 609.527850][T11130] fuse: Bad value for 'fd' [ 614.510007][T11193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1430'. [ 616.885988][T11222] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1438'. [ 621.206817][T11275] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1450'. [ 623.026730][T11290] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1455'. [ 624.570201][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.576645][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.113518][T11321] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1464'. [ 625.813145][T11336] random: crng reseeded on system resumption [ 626.894976][ T5828] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 627.097446][ T5828] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 627.109371][ T5828] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 627.129974][ T5828] usb 2-1: config 0 has no interfaces? [ 627.144988][ T5828] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 627.154795][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.178582][ T5828] usb 2-1: config 0 descriptor?? [ 627.518054][T11359] tipc: Enabled bearer , priority 0 [ 627.550158][T11359] tipc: Resetting bearer [ 627.575508][T11358] tipc: Disabling bearer [ 629.484521][ T789] usb 2-1: USB disconnect, device number 8 [ 629.851692][T11396] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1488'. [ 631.040255][T11413] random: crng reseeded on system resumption [ 631.981462][T11423] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1496'. [ 632.095179][ T789] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 632.296807][ T789] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 632.358900][T11438] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1499'. [ 632.518434][ T789] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 632.965022][ T789] usb 3-1: config 0 has no interfaces? [ 632.978330][ T789] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 632.995105][ T789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.041333][ T789] usb 3-1: config 0 descriptor?? [ 633.440741][T11447] random: crng reseeded on system resumption [ 634.636426][ T1806] usb 3-1: USB disconnect, device number 9 [ 634.790862][T11454] overlayfs: missing 'lowerdir' [ 636.505150][T11487] random: crng reseeded on system resumption [ 637.925619][ T5845] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 637.976731][T11498] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1515'. [ 638.043987][T11502] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1517'. [ 638.708286][ T5845] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 638.716897][ T5845] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 638.730387][ T5845] usb 3-1: config 0 has no interfaces? [ 638.748734][ T5845] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 638.775961][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.804545][ T5845] usb 3-1: config 0 descriptor?? [ 638.805926][T11503] syzkaller0: entered promiscuous mode [ 638.818816][T11503] syzkaller0: entered allmulticast mode [ 638.840802][T11510] overlayfs: missing 'lowerdir' [ 640.198579][T11532] random: crng reseeded on system resumption [ 641.019518][ T5845] usb 3-1: USB disconnect, device number 10 [ 641.205588][T11545] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1537'. [ 641.669513][T11553] random: crng reseeded on system resumption [ 642.104999][ T5845] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 642.602253][ T5845] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 642.618533][ T5845] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 642.640441][ T5845] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 642.716816][ T5845] usb 1-1: string descriptor 0 read error: -22 [ 642.733447][ T5845] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 642.824936][ T5845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.955586][T11550] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 643.177923][ T5845] cdc_ncm 1-1:1.0: bind() failure [ 643.198140][ T5845] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 643.221948][ T5845] cdc_ncm 1-1:1.1: bind() failure [ 643.249070][ T5845] usb 1-1: USB disconnect, device number 10 [ 643.832811][T11573] syzkaller0: entered promiscuous mode [ 643.855224][T11573] syzkaller0: entered allmulticast mode [ 644.254668][ T5845] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 644.409235][T11586] random: crng reseeded on system resumption [ 644.497227][ T5845] usb 3-1: config 0 has no interfaces? [ 644.502937][ T5845] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 644.512649][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.527245][ T5845] usb 3-1: config 0 descriptor?? [ 645.624797][T11587] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 646.148703][T11592] random: crng reseeded on system resumption [ 646.667041][T11599] fuse: Bad value for 'fd' [ 646.863416][ T23] usb 3-1: USB disconnect, device number 11 [ 648.669713][T11621] syzkaller0: entered promiscuous mode [ 648.704995][T11621] syzkaller0: entered allmulticast mode [ 651.089423][T11634] overlayfs: missing 'lowerdir' [ 651.139440][T11635] random: crng reseeded on system resumption [ 653.815302][T11656] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1560'. [ 654.136060][T11660] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1562'. [ 655.078419][T11680] random: crng reseeded on system resumption [ 656.736821][T11691] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1571'. [ 657.193147][T11705] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 657.205397][T11705] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 657.900644][T11710] random: crng reseeded on system resumption [ 659.437394][T11728] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1582'. [ 659.610094][T11732] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.1583'. [ 659.943120][T11736] random: crng reseeded on system resumption [ 660.951857][T11751] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 660.981478][T11751] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 661.340835][ T27] audit: type=1326 audit(1771096174.315:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11742 comm="syz.2.1587" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e2219bf79 code=0x0 [ 664.998830][T11796] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 665.023424][T11796] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 665.797096][T11821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1606'. [ 666.517603][ T5845] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 666.722345][ T5845] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 666.731514][ T5845] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 666.743096][ T5845] usb 2-1: config 0 has no interfaces? [ 666.753376][ T5845] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 666.783336][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.802293][ T5845] usb 2-1: config 0 descriptor?? [ 667.035940][ T5845] usb 2-1: USB disconnect, device number 9 [ 667.812944][T11843] overlayfs: failed to resolve './file1': -2 [ 668.406671][T11853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1618'. [ 669.656671][ T5828] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 669.847150][ T5828] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 669.868331][ T5828] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 669.893915][ T5828] usb 4-1: config 0 has no interfaces? [ 669.906855][ T5828] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 669.930520][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.954306][ T5828] usb 4-1: config 0 descriptor?? [ 670.199065][ T5828] usb 4-1: USB disconnect, device number 9 [ 670.742123][T11887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1628'. [ 673.790104][T11919] random: crng reseeded on system resumption [ 674.067270][T11926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1637'. [ 675.326916][T11934] syzkaller0: entered promiscuous mode [ 675.353346][T11934] syzkaller0: entered allmulticast mode [ 675.692456][ T27] audit: type=1326 audit(1771096188.665:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11927 comm="syz.1.1638" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f893e99bf79 code=0x0 [ 678.023304][T11958] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1646'. [ 679.093182][T11971] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1647'. [ 680.003069][T11977] random: crng reseeded on system resumption [ 683.510684][T12005] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1659'. [ 685.815278][ T23] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 686.010104][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.016606][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.048997][ T23] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 686.068946][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 686.112736][ T23] usb 2-1: config 0 has no interfaces? [ 686.237407][ T23] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 686.261178][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.288476][ T23] usb 2-1: config 0 descriptor?? [ 686.377320][T12035] random: crng reseeded on system resumption [ 686.630098][ T23] usb 2-1: USB disconnect, device number 10 [ 688.073126][T12048] random: crng reseeded on system resumption [ 689.653930][T12070] random: crng reseeded on system resumption [ 690.610817][T12076] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1674'. [ 690.895127][T12079] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.1676'. [ 691.059219][T12086] overlayfs: failed to resolve './file1': -2 [ 691.084993][ T789] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 691.276625][ T789] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 691.296803][ T789] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 691.315793][ T789] usb 2-1: config 0 has no interfaces? [ 691.325991][ T789] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 691.342481][ T789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.366433][ T789] usb 2-1: config 0 descriptor?? [ 691.599452][ T789] usb 2-1: USB disconnect, device number 11 [ 693.973764][T12114] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.1686'. [ 694.913446][T12123] overlayfs: failed to resolve './file1': -2 [ 695.905063][ T5845] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 696.098382][ T5845] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 696.127727][ T5845] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.173359][ T5845] usb 2-1: config 0 has no interfaces? [ 696.192223][ T5845] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 696.211465][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.235780][ T5845] usb 2-1: config 0 descriptor?? [ 696.500608][ T789] usb 2-1: USB disconnect, device number 12 [ 696.573942][ T27] audit: type=1326 audit(1771096209.545:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12133 comm="syz.3.1692" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1b379bf79 code=0x0 [ 697.021239][T12144] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1694'. [ 699.650464][T12181] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1704'. [ 700.006748][ T5845] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 700.207134][ T5845] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 700.230669][ T5845] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 700.274954][ T5845] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 702.795082][ T5845] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 702.804343][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.846060][ T5845] usb 2-1: can't set config #1, error -71 [ 702.872946][ T5845] usb 2-1: USB disconnect, device number 13 [ 703.042780][T12203] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1713'. [ 706.670931][T12241] random: crng reseeded on system resumption [ 706.737056][T12244] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1722'. [ 711.485355][ T5828] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 711.686734][ T5828] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 711.703016][ T5828] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.729290][ T5828] usb 3-1: config 0 has no interfaces? [ 711.745929][ T5828] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 711.769647][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.795070][ T5828] usb 3-1: config 0 descriptor?? [ 712.088074][ T5828] usb 3-1: USB disconnect, device number 12 [ 712.212959][T12299] random: crng reseeded on system resumption [ 714.893839][T12325] random: crng reseeded on system resumption [ 717.265048][ T789] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 717.456417][ T789] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 717.492657][ T789] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 717.523479][ T789] usb 1-1: config 0 has no interfaces? [ 717.543725][ T789] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 717.565294][ T789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.601567][ T789] usb 1-1: config 0 descriptor?? [ 717.858267][ T789] usb 1-1: USB disconnect, device number 11 [ 720.013836][T12394] random: crng reseeded on system resumption [ 722.555506][ T23] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 722.861114][ T23] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 722.870239][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 722.881626][ T23] usb 2-1: config 0 has no interfaces? [ 722.888074][ T23] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 722.898933][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.909832][ T23] usb 2-1: config 0 descriptor?? [ 723.014197][T12420] random: crng reseeded on system resumption [ 723.170895][ T23] usb 2-1: USB disconnect, device number 14 [ 728.646775][T12474] overlayfs: failed to resolve './file1': -2 [ 728.989642][T12141] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 729.207448][T12141] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 729.216251][T12141] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 729.237212][T12141] usb 4-1: config 0 has no interfaces? [ 729.243115][T12141] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 729.253349][T12141] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.262839][T12141] usb 4-1: config 0 descriptor?? [ 729.491666][T12141] usb 4-1: USB disconnect, device number 10 [ 732.112936][T12518] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1789'. [ 732.960011][T12515] overlayfs: failed to resolve './file1': -2 [ 733.415207][ T5845] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 733.676671][ T5845] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 733.685314][ T5845] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.695793][ T5845] usb 4-1: config 0 has no interfaces? [ 733.702412][ T5845] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 733.749835][ T5845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.772857][ T5845] usb 4-1: config 0 descriptor?? [ 733.992855][ T1806] usb 4-1: USB disconnect, device number 11 [ 734.375098][ T5845] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 735.474273][ T5845] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 735.515026][ T5845] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 735.536050][ T5845] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 735.553542][ T5845] usb 1-1: string descriptor 0 read error: -22 [ 735.561355][ T5845] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 735.574304][ T5845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.592237][T12531] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 735.844342][ T5845] cdc_ncm 1-1:1.0: bind() failure [ 735.919219][ T5845] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 735.993928][ T5845] cdc_ncm 1-1:1.1: bind() failure [ 736.028460][ T5845] usb 1-1: USB disconnect, device number 12 [ 740.722491][T12589] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1807'. [ 748.036237][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.043246][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.379041][ T27] audit: type=1326 audit(1771096263.345:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12654 comm="syz.2.1822" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e2219bf79 code=0x0 [ 752.093712][T12673] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1826'. [ 755.837681][T12721] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1837'. [ 762.315086][ T789] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 762.507279][ T789] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 762.538351][ T789] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 762.630525][ T789] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 762.677985][ T789] usb 4-1: string descriptor 0 read error: -22 [ 762.688864][ T789] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 762.709230][ T789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.743544][T12765] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 763.077416][ T789] cdc_ncm 4-1:1.0: bind() failure [ 763.084565][ T789] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 763.137282][ T789] cdc_ncm 4-1:1.1: bind() failure [ 763.213267][T12782] random: crng reseeded on system resumption [ 763.349066][ T789] usb 4-1: USB disconnect, device number 12 [ 763.885130][T12781] fuse: Bad value for 'fd' [ 768.555128][ T5801] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 768.664987][ T5845] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 768.816667][ T5801] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 768.828016][ T5801] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 768.838132][ T5801] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 768.850550][ T5801] usb 3-1: string descriptor 0 read error: -22 [ 768.857451][ T5801] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 768.867267][ T5801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.883845][T12818] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 768.892654][ T5845] usb 4-1: Using ep0 maxpacket: 32 [ 768.900484][ T5845] usb 4-1: config 47 has an invalid descriptor of length 0, skipping remainder of the config [ 768.928819][ T5845] usb 4-1: config 47 has no interfaces? [ 768.937163][ T5845] usb 4-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=39.2b [ 768.946436][ T5845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.955489][ T5845] usb 4-1: Product: syz [ 768.960626][ T5845] usb 4-1: Manufacturer: syz [ 768.965966][ T5845] usb 4-1: SerialNumber: syz [ 769.210212][ T5801] cdc_ncm 3-1:1.0: bind() failure [ 769.228718][ T5845] usb 4-1: USB disconnect, device number 13 [ 769.239894][ T5801] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 769.251105][ T5801] cdc_ncm 3-1:1.1: bind() failure [ 769.260745][ T5801] usb 3-1: USB disconnect, device number 13 [ 769.664673][T12833] random: crng reseeded on system resumption [ 770.633720][T12839] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1869'. [ 773.995007][ T5801] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 774.186606][ T5801] usb 3-1: Using ep0 maxpacket: 32 [ 774.241159][ T5801] usb 3-1: config 47 has an invalid descriptor of length 0, skipping remainder of the config [ 774.251954][ T5801] usb 3-1: config 47 has no interfaces? [ 774.259695][ T5801] usb 3-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=39.2b [ 774.273440][ T5801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.283779][ T5801] usb 3-1: Product: syz [ 774.288148][ T5801] usb 3-1: Manufacturer: syz [ 774.295065][ T5801] usb 3-1: SerialNumber: syz [ 774.535543][ T5801] usb 3-1: USB disconnect, device number 14 [ 777.091692][T12889] random: crng reseeded on system resumption [ 777.953386][T12896] overlayfs: failed to resolve './file1': -2 [ 781.422952][T12923] siw: device registration error -23 [ 781.487924][T12925] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1887'. [ 781.661860][T12929] fuse: Bad value for 'fd' [ 782.156853][T12938] overlayfs: failed to resolve './file1': -2 [ 785.755993][T12968] random: crng reseeded on system resumption [ 787.548562][T12986] overlayfs: failed to resolve './file1': -2 [ 792.984961][ T789] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 793.186762][ T789] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 793.214130][ T789] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 793.224540][ T789] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 793.244471][ T789] usb 1-1: string descriptor 0 read error: -22 [ 793.326318][ T789] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 793.335775][ T789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.351518][T13024] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 793.615129][ T789] cdc_ncm 1-1:1.0: bind() failure [ 793.622365][ T789] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 793.678625][ T789] cdc_ncm 1-1:1.1: bind() failure [ 793.713280][ T789] usb 1-1: USB disconnect, device number 13 [ 795.817838][T13054] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1914'. [ 799.144979][ T1806] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 799.346827][ T1806] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 799.358882][ T1806] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 799.369687][ T1806] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 799.383277][ T1806] usb 2-1: string descriptor 0 read error: -22 [ 799.390299][ T1806] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 799.399442][ T1806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.412153][T13080] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 799.735074][ T1806] cdc_ncm 2-1:1.0: bind() failure [ 799.784265][ T1806] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 799.808275][ T1806] cdc_ncm 2-1:1.1: bind() failure [ 799.866967][ T1806] usb 2-1: USB disconnect, device number 15 [ 801.811671][T13121] fuse: Bad value for 'fd' [ 803.665047][ T789] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 803.875173][ T789] usb 2-1: Using ep0 maxpacket: 32 [ 803.907202][ T789] usb 2-1: config 47 has an invalid descriptor of length 0, skipping remainder of the config [ 803.919050][ T789] usb 2-1: config 47 has no interfaces? [ 803.937547][ T789] usb 2-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=39.2b [ 803.982715][ T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.995431][ T789] usb 2-1: Product: syz [ 804.001107][ T789] usb 2-1: Manufacturer: syz [ 804.018720][ T789] usb 2-1: SerialNumber: syz [ 804.274901][ T789] usb 2-1: USB disconnect, device number 16 [ 805.842777][T13155] random: crng reseeded on system resumption [ 808.896074][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.902522][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.213012][T13180] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1948'. [ 812.810429][T13220] random: crng reseeded on system resumption [ 812.985846][ T1806] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 813.167819][ T1806] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 813.178733][ T1806] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 813.230328][ T1806] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 813.326182][ T1806] usb 3-1: string descriptor 0 read error: -22 [ 813.359499][ T1806] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 813.398183][ T1806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.441793][T13217] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 813.688121][ T1806] cdc_ncm 3-1:1.0: bind() failure [ 813.723381][ T1806] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 813.746673][ T1806] cdc_ncm 3-1:1.1: bind() failure [ 813.767071][ T1806] usb 3-1: USB disconnect, device number 15 [ 817.948780][T13267] random: crng reseeded on system resumption [ 819.145015][ T789] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 819.326258][ T789] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 819.344243][ T789] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 819.475129][ T789] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 819.535566][ T789] usb 2-1: string descriptor 0 read error: -22 [ 819.547732][ T789] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 819.584977][ T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.618696][T13271] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 819.854297][ T789] cdc_ncm 2-1:1.0: bind() failure [ 819.887393][ T789] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 819.923067][ T789] cdc_ncm 2-1:1.1: bind() failure [ 819.941837][ T789] usb 2-1: USB disconnect, device number 17 [ 822.065328][ T789] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 822.255097][ T789] usb 2-1: Using ep0 maxpacket: 32 [ 822.272179][ T789] usb 2-1: config 47 has an invalid descriptor of length 0, skipping remainder of the config [ 822.284041][ T789] usb 2-1: config 47 has no interfaces? [ 822.293599][ T789] usb 2-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=39.2b [ 822.318749][ T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.334588][ T789] usb 2-1: Product: syz [ 822.345510][ T789] usb 2-1: Manufacturer: syz [ 822.363448][ T789] usb 2-1: SerialNumber: syz [ 822.616775][ T789] usb 2-1: USB disconnect, device number 18 [ 824.545056][ T1806] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 824.655332][ T5845] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 824.758155][ T1806] usb 1-1: Using ep0 maxpacket: 32 [ 824.781222][ T1806] usb 1-1: config 47 has an invalid descriptor of length 0, skipping remainder of the config [ 824.801926][ T1806] usb 1-1: config 47 has no interfaces? [ 824.823566][ T1806] usb 1-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=39.2b [ 824.845154][ T5845] usb 3-1: Using ep0 maxpacket: 32 [ 824.850426][ T1806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.857011][ T5845] usb 3-1: config 47 has an invalid descriptor of length 0, skipping remainder of the config [ 824.875546][ T1806] usb 1-1: Product: syz [ 824.885169][ T1806] usb 1-1: Manufacturer: syz [ 824.889803][ T1806] usb 1-1: SerialNumber: syz [ 824.895131][ T5845] usb 3-1: config 47 has no interfaces? [ 824.913271][ T5845] usb 3-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=39.2b [ 824.935192][ T5845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.960429][ T5845] usb 3-1: Product: syz [ 824.975136][ T5845] usb 3-1: Manufacturer: syz [ 824.980693][ T5845] usb 3-1: SerialNumber: syz [ 825.137179][ T1806] usb 1-1: USB disconnect, device number 14 [ 825.223408][ T5845] usb 3-1: USB disconnect, device number 16 [ 829.994958][ T5845] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 830.260215][ T5845] usb 3-1: Using ep0 maxpacket: 32 [ 830.327039][ T5845] usb 3-1: config 47 has an invalid descriptor of length 0, skipping remainder of the config [ 831.438170][ T5845] usb 3-1: config 47 has no interfaces? [ 831.447183][ T5845] usb 3-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=39.2b [ 831.456673][ T5845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.472910][ T5845] usb 3-1: Product: syz [ 831.478656][ T5845] usb 3-1: Manufacturer: syz [ 831.483276][ T5845] usb 3-1: SerialNumber: syz [ 831.733010][ T5845] usb 3-1: USB disconnect, device number 17 [ 832.517252][T13393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1995'. [ 834.085130][ T5845] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 834.285132][ T5845] usb 3-1: Using ep0 maxpacket: 32 [ 834.298478][ T5845] usb 3-1: config 47 has an invalid descriptor of length 0, skipping remainder of the config [ 834.323395][ T5845] usb 3-1: config 47 has no interfaces? [ 834.332255][ T5845] usb 3-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=39.2b [ 834.349558][ T5845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.359150][ T5845] usb 3-1: Product: syz [ 834.363408][ T5845] usb 3-1: Manufacturer: syz [ 834.372670][ T5845] usb 3-1: SerialNumber: syz [ 834.616958][ T5845] usb 3-1: USB disconnect, device number 18 [ 835.173160][ T5845] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 835.375301][ T5845] usb 2-1: device descriptor read/64, error -71 [ 835.664995][ T5845] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 835.855127][ T5845] usb 2-1: device descriptor read/64, error -71 [ 835.975372][ T5845] usb usb2-port1: attempt power cycle [ 837.377172][ T5845] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 837.455782][ T5845] usb 2-1: device descriptor read/8, error -71 [ 837.755068][ T5845] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 837.848380][ T5845] usb 2-1: device descriptor read/8, error -71 [ 838.043350][ T5845] usb usb2-port1: unable to enumerate USB device [ 839.285434][ T23] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 839.458584][T13444] fuse: Bad value for 'fd' [ 839.485123][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 839.493010][ T23] usb 4-1: config 47 has an invalid descriptor of length 0, skipping remainder of the config [ 839.520734][ T23] usb 4-1: config 47 has no interfaces? [ 839.541743][ T23] usb 4-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=39.2b [ 839.551575][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.563318][ T23] usb 4-1: Product: syz [ 839.568851][ T23] usb 4-1: Manufacturer: syz [ 839.573894][ T23] usb 4-1: SerialNumber: syz [ 839.616001][ T5845] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 839.800077][ T23] usb 4-1: USB disconnect, device number 14 [ 839.865406][ T5845] usb 2-1: Using ep0 maxpacket: 32 [ 839.879097][ T5845] usb 2-1: config 47 has an invalid descriptor of length 0, skipping remainder of the config [ 839.898028][ T5845] usb 2-1: config 47 has no interfaces? [ 839.907451][ T5845] usb 2-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=39.2b [ 839.928799][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.937859][ T5845] usb 2-1: Product: syz [ 839.942132][ T5845] usb 2-1: Manufacturer: syz [ 839.949751][ T5845] usb 2-1: SerialNumber: syz [ 840.235358][ T5845] usb 2-1: USB disconnect, device number 23 [ 842.475437][T13088] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 842.687289][T13088] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 842.705738][T13088] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 842.717119][T13088] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 842.747131][T13088] usb 4-1: string descriptor 0 read error: -22 [ 842.761520][T13088] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 842.786217][T13088] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.840397][T13471] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 843.119205][T13088] cdc_ncm 4-1:1.0: bind() failure [ 843.151328][T13088] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 843.176944][T13088] cdc_ncm 4-1:1.1: bind() failure [ 843.202678][T13088] usb 4-1: USB disconnect, device number 15 [ 845.850463][ T5801] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 846.245517][ T5801] usb 1-1: Using ep0 maxpacket: 32 [ 846.266392][ T5801] usb 1-1: config 47 has an invalid descriptor of length 0, skipping remainder of the config [ 846.306228][ T5801] usb 1-1: config 47 has no interfaces? [ 846.317570][ T5801] usb 1-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=39.2b [ 846.331985][ T5801] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.341455][ T5801] usb 1-1: Product: syz [ 846.346033][ T5801] usb 1-1: Manufacturer: syz [ 846.350842][ T5801] usb 1-1: SerialNumber: syz [ 846.450932][ T5801] usb 1-1: can't set config #47, error -71 [ 846.467602][ T5801] usb 1-1: USB disconnect, device number 15 [ 846.820268][T13510] fuse: Bad value for 'fd' [ 847.328804][ T27] audit: type=1326 audit(1771096360.305:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13499 comm="syz.3.2026" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1b379bf79 code=0x0 [ 852.185187][ T23] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 852.400333][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 852.458543][ T23] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 852.464965][ T5845] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 852.486246][ T23] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 852.542455][ T23] usb 3-1: string descriptor 0 read error: -22 [ 852.557797][ T23] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 852.600402][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.658301][T13542] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 852.675479][ T5845] usb 4-1: Using ep0 maxpacket: 32 [ 852.682939][ T5845] usb 4-1: config 47 has an invalid descriptor of length 0, skipping remainder of the config [ 852.700135][ T5845] usb 4-1: config 47 has no interfaces? [ 852.732861][ T5845] usb 4-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=39.2b [ 852.743690][ T5845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.760980][ T5845] usb 4-1: Product: syz [ 852.791527][ T5845] usb 4-1: Manufacturer: syz [ 852.815735][ T5845] usb 4-1: SerialNumber: syz [ 852.828218][T13563] fuse: Bad value for 'fd' [ 852.895996][ T23] cdc_ncm 3-1:1.0: bind() failure [ 852.905628][ T23] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 852.912665][ T23] cdc_ncm 3-1:1.1: bind() failure [ 852.924166][ T23] usb 3-1: USB disconnect, device number 19 [ 853.186137][ T5845] usb 4-1: USB disconnect, device number 16 [ 856.153672][T13587] random: crng reseeded on system resumption [ 857.880882][ T23] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 858.067653][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 858.127635][ T23] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 858.200825][ T23] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 858.257898][ T23] usb 1-1: string descriptor 0 read error: -22 [ 858.264179][ T23] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 858.288524][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.299748][T13603] random: crng reseeded on system resumption [ 858.309444][T13595] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 858.587090][ T23] cdc_ncm 1-1:1.0: bind() failure [ 858.803702][ T23] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 858.992881][ T23] cdc_ncm 1-1:1.1: bind() failure [ 859.040267][ T23] usb 1-1: USB disconnect, device number 16 [ 860.260650][T13615] fuse: Bad value for 'fd' [ 861.435043][ T23] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 861.625339][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 861.637721][ T23] usb 1-1: config 47 has an invalid descriptor of length 0, skipping remainder of the config [ 861.650167][ T23] usb 1-1: config 47 has no interfaces? [ 861.659285][ T23] usb 1-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=39.2b [ 861.668955][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.677426][ T23] usb 1-1: Product: syz [ 861.681826][ T23] usb 1-1: Manufacturer: syz [ 861.687339][ T23] usb 1-1: SerialNumber: syz [ 861.906918][ T23] usb 1-1: USB disconnect, device number 17 [ 863.132686][T13637] random: crng reseeded on system resumption [ 865.315119][T13088] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 865.630458][T13088] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 865.687720][T13088] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 865.712802][T13088] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 865.808086][T13088] usb 4-1: string descriptor 0 read error: -22 [ 865.814343][T13088] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 865.845109][T13088] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.866748][T13645] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 866.166687][T13088] cdc_ncm 4-1:1.0: bind() failure [ 866.216444][T13088] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 866.235638][T13088] cdc_ncm 4-1:1.1: bind() failure [ 866.299456][T13088] usb 4-1: USB disconnect, device number 17 [ 866.719032][T13657] fuse: Bad value for 'fd' [ 868.160309][T13676] random: crng reseeded on system resumption [ 869.562442][T13686] tipc: Enabling of bearer rejected, failed to enable media [ 870.336308][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.342673][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.245037][ T5845] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 872.426848][ T5845] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 872.452845][ T5845] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 872.482800][ T5845] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 872.517528][ T5845] usb 1-1: string descriptor 0 read error: -22 [ 872.525171][ T5845] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 872.557756][ T5845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.577022][T13707] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 872.823976][ T5845] cdc_ncm 1-1:1.0: bind() failure [ 872.850416][ T5845] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 872.882939][ T5845] cdc_ncm 1-1:1.1: bind() failure [ 872.903752][ T5845] usb 1-1: USB disconnect, device number 18 [ 875.401255][ T789] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 875.539592][T13730] tipc: Enabling of bearer rejected, failed to enable media [ 875.596233][T13730] syzkaller0: entered promiscuous mode [ 875.601849][T13730] syzkaller0: entered allmulticast mode [ 875.605066][ T789] usb 3-1: Using ep0 maxpacket: 32 [ 875.628169][ T789] usb 3-1: config 47 has an invalid descriptor of length 0, skipping remainder of the config [ 875.643865][ T789] usb 3-1: config 47 has no interfaces? [ 875.660829][ T789] usb 3-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=39.2b [ 875.670174][ T789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.678423][ T789] usb 3-1: Product: syz [ 875.682635][ T789] usb 3-1: Manufacturer: syz [ 875.690253][ T789] usb 3-1: SerialNumber: syz [ 875.854999][ T5801] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 875.947027][ T789] usb 3-1: USB disconnect, device number 20 [ 876.045960][ T5801] usb 4-1: too many configurations: 109, using maximum allowed: 8 [ 876.078335][ T5801] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 876.095448][ T5801] usb 4-1: can't read configurations, error -61 [ 876.267655][ T5801] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 876.475725][ T5801] usb 4-1: too many configurations: 109, using maximum allowed: 8 [ 876.522599][ T5801] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 876.535952][ T5801] usb 4-1: can't read configurations, error -61 [ 876.550791][ T5801] usb usb4-port1: attempt power cycle [ 876.965220][ T5801] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 877.947037][ T5801] usb 4-1: too many configurations: 109, using maximum allowed: 8 [ 878.918330][ T5801] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 878.957216][ T5801] usb 4-1: can't read configurations, error -71 [ 879.939639][ T5801] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 880.865001][ T5801] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 880.883950][ T5801] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 880.914917][ T5801] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 880.976081][ T5801] usb 4-1: string descriptor 0 read error: -22 [ 880.995110][ T5801] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 881.035277][ T5801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.072464][T13757] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 881.354215][ T5801] cdc_ncm 4-1:1.0: bind() failure [ 881.397368][ T5801] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 881.434781][ T5801] cdc_ncm 4-1:1.1: bind() failure [ 881.454101][ T5801] usb 4-1: USB disconnect, device number 21 [ 885.257601][T12141] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 885.495033][T12141] usb 2-1: Using ep0 maxpacket: 32 [ 885.502874][T12141] usb 2-1: config 47 has an invalid descriptor of length 0, skipping remainder of the config [ 885.609633][T12141] usb 2-1: config 47 has no interfaces? [ 885.646777][T12141] usb 2-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=39.2b [ 885.674379][T12141] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.694534][T12141] usb 2-1: Product: syz [ 885.721507][T12141] usb 2-1: Manufacturer: syz [ 885.747978][T12141] usb 2-1: SerialNumber: syz [ 885.956262][ T23] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 886.014815][T12141] usb 2-1: USB disconnect, device number 24 [ 886.167331][ T23] usb 1-1: too many configurations: 109, using maximum allowed: 8 [ 886.227719][ T23] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 886.245234][ T23] usb 1-1: can't read configurations, error -61 [ 886.416088][ T23] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 886.676354][ T23] usb 1-1: too many configurations: 109, using maximum allowed: 8 [ 886.708723][ T23] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 886.724277][ T23] usb 1-1: can't read configurations, error -61 [ 886.741127][ T23] usb usb1-port1: attempt power cycle [ 887.213039][T13805] random: crng reseeded on system resumption [ 887.285696][ T23] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 887.326617][ T23] usb 1-1: too many configurations: 109, using maximum allowed: 8 [ 887.435655][ T23] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 887.443286][ T23] usb 1-1: can't read configurations, error -61 [ 887.685661][ T23] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 887.785398][ T23] usb 1-1: too many configurations: 109, using maximum allowed: 8 [ 887.818315][ T23] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 887.827467][ T23] usb 1-1: can't read configurations, error -61 [ 887.836113][ T23] usb usb1-port1: unable to enumerate USB device [ 889.336868][T13815] xt_policy: neither incoming nor outgoing policy selected [ 892.855054][ T23] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 893.758130][ T23] usb 2-1: too many configurations: 109, using maximum allowed: 8 [ 893.788500][ T23] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 893.799588][ T23] usb 2-1: can't read configurations, error -61 [ 893.955981][ T23] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 894.015932][ T1806] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 894.885430][ T1806] usb 3-1: Using ep0 maxpacket: 32 [ 894.900804][ T1806] usb 3-1: config 47 has an invalid descriptor of length 0, skipping remainder of the config [ 894.913295][ T23] usb 2-1: too many configurations: 109, using maximum allowed: 8 [ 894.928320][ T1806] usb 3-1: config 47 has no interfaces? [ 894.935487][ T23] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 894.946766][ T1806] usb 3-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=39.2b [ 894.956703][ T23] usb 2-1: can't read configurations, error -61 [ 894.966805][ T23] usb usb2-port1: attempt power cycle [ 894.972214][ T1806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.985207][ T1806] usb 3-1: Product: syz [ 894.989395][ T1806] usb 3-1: Manufacturer: syz [ 894.993968][ T1806] usb 3-1: SerialNumber: syz [ 895.219003][ T1806] usb 3-1: USB disconnect, device number 21 [ 895.446140][ T23] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 895.481619][ T23] usb 2-1: too many configurations: 109, using maximum allowed: 8 [ 895.494379][ T23] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 895.502532][ T23] usb 2-1: can't read configurations, error -61 [ 897.352454][T13904] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2122'. [ 898.034693][T13912] xt_policy: neither incoming nor outgoing policy selected [ 900.535985][ T27] audit: type=1326 audit(1771096413.505:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13918 comm="syz.2.2127" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e2219bf79 code=0x0 [ 908.509753][T13998] xt_policy: neither incoming nor outgoing policy selected [ 910.250507][T14013] fuse: Bad value for 'fd' [ 913.232226][T14026] xt_policy: neither incoming nor outgoing policy selected [ 913.837010][ T27] audit: type=1326 audit(1771096426.805:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14021 comm="syz.3.2156" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1b379bf79 code=0x0 [ 917.491594][T14069] xt_policy: neither incoming nor outgoing policy selected [ 918.970361][ T27] audit: type=1326 audit(1771096431.945:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14071 comm="syz.0.2169" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e20b9bf79 code=0x0 [ 919.871950][T14084] xt_policy: neither incoming nor outgoing policy selected [ 927.410527][T14126] xt_policy: neither incoming nor outgoing policy selected [ 929.978080][T14162] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2190'. [ 930.419630][T14170] fuse: Bad value for 'fd' [ 932.175221][T14176] xt_policy: neither incoming nor outgoing policy selected [ 932.232937][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.245112][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.073978][T14191] xt_policy: neither incoming nor outgoing policy selected [ 938.847743][T14238] fuse: Bad value for 'fd' [ 940.517799][T14251] xt_policy: neither incoming nor outgoing policy selected [ 946.429578][T14296] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2222'. [ 948.230467][T14307] xt_policy: neither incoming nor outgoing policy selected [ 950.898659][T14338] fuse: Bad value for 'fd' [ 952.026281][T14348] fuse: Bad value for 'fd' [ 958.001542][T14385] xt_policy: neither incoming nor outgoing policy selected [ 965.037556][T14432] fuse: Bad value for 'fd' [ 966.470522][T14437] xt_policy: neither incoming nor outgoing policy selected [ 971.669132][ T27] audit: type=1326 audit(1771096484.645:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14472 comm="syz.3.2271" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1b379bf79 code=0x0 [ 973.826100][T14491] xt_policy: neither incoming nor outgoing policy selected [ 974.086546][T14495] syzkaller0: entered promiscuous mode [ 974.092066][T14495] syzkaller0: entered allmulticast mode [ 977.708220][T14520] xt_policy: neither incoming nor outgoing policy selected [ 979.377009][T14533] xt_policy: neither incoming nor outgoing policy selected [ 980.627564][T14543] fuse: Bad value for 'fd' [ 980.995411][ T5801] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 981.215221][ T5801] usb 3-1: Using ep0 maxpacket: 32 [ 981.231588][ T5801] usb 3-1: config 47 has an invalid descriptor of length 0, skipping remainder of the config [ 981.275198][ T5801] usb 3-1: config 47 has no interfaces? [ 981.287350][ T5801] usb 3-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=39.2b [ 982.089976][ T5801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.098405][ T5801] usb 3-1: Product: syz [ 982.154992][ T5801] usb 3-1: Manufacturer: syz [ 982.159643][ T5801] usb 3-1: SerialNumber: syz [ 982.445115][ T5801] usb 3-1: USB disconnect, device number 22 [ 985.028999][T14569] xt_policy: neither incoming nor outgoing policy selected [ 985.425540][T14573] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 985.436593][T14573] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 985.451869][T14573] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 985.473560][T14573] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 985.482967][T14573] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 985.490717][T14573] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 985.500403][ T7296] syz_tun (unregistering): left allmulticast mode [ 985.912998][ T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.121751][ T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.144075][T14572] chnl_net:caif_netlink_parms(): no params data found [ 986.268856][ T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.788456][T14584] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 987.077304][ T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.123259][T14573] Bluetooth: hci1: command tx timeout [ 988.148214][T14572] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.155845][T14572] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.163475][T14572] bridge_slave_0: entered allmulticast mode [ 988.170772][T14572] bridge_slave_0: entered promiscuous mode [ 988.180188][T14572] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.187782][T14572] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.195582][T14572] bridge_slave_1: entered allmulticast mode [ 988.206490][T14572] bridge_slave_1: entered promiscuous mode [ 988.242534][T14572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 988.257282][T14572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 989.009213][T14592] xt_policy: neither incoming nor outgoing policy selected [ 989.121177][T14572] team0: Port device team_slave_0 added [ 989.164036][T14572] team0: Port device team_slave_1 added [ 989.310420][T14572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 989.365220][T14572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 989.425062][T14572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 989.470362][T14572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 989.485358][T14572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 989.556016][T14572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 989.960463][T14572] hsr_slave_0: entered promiscuous mode [ 990.056422][T14572] hsr_slave_1: entered promiscuous mode [ 990.075662][T14572] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 990.098784][T14572] Cannot create hsr debugfs directory [ 990.167629][T14573] Bluetooth: hci1: command tx timeout [ 991.194202][T14624] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2305'. [ 992.112621][T14628] xt_policy: neither incoming nor outgoing policy selected [ 992.245448][T14573] Bluetooth: hci1: command tx timeout [ 992.766670][T14636] fuse: Bad value for 'fd' [ 992.974662][ T62] dvmrp6 (unregistering): left allmulticast mode [ 993.209058][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.225425][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.915072][ T62] hsr_slave_0: left promiscuous mode [ 993.978333][ T62] hsr_slave_1: left promiscuous mode [ 994.004217][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 994.031348][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 994.069456][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 994.115409][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 994.138954][ T62] bridge_slave_1: left allmulticast mode [ 994.161060][ T62] bridge_slave_1: left promiscuous mode [ 994.178203][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.210092][ T62] bridge_slave_0: left allmulticast mode [ 994.216319][ T62] bridge_slave_0: left promiscuous mode [ 994.228568][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.263353][ T62] veth1_macvtap: left promiscuous mode [ 994.269351][ T62] veth0_macvtap: left promiscuous mode [ 994.282179][ T62] veth1_vlan: left promiscuous mode [ 994.325305][T14573] Bluetooth: hci1: command tx timeout [ 994.335080][ T62] veth0_vlan: left promiscuous mode [ 996.678670][ T62] team0 (unregistering): Port device team_slave_1 removed [ 996.726231][ T62] team0 (unregistering): Port device team_slave_0 removed [ 996.778608][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 996.884428][ T62] bond0 (unregistering): (slave 30): Releasing backup interface [ 996.904004][ T1806] infiniband syz1: ib_query_port failed (-19) [ 997.333149][ T62] bond0 (unregistering): Released all slaves [ 997.511704][T14572] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 997.675105][T14572] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 997.750771][T14572] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 997.813807][T14572] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 998.054763][T14572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 998.083279][T14572] 8021q: adding VLAN 0 to HW filter on device team0 [ 998.118701][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.125908][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 998.336602][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.343763][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 998.540825][T14572] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 998.855044][T14572] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 999.047848][T14695] fuse: Bad value for 'fd' [ 999.470466][T14572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 999.793407][T14572] veth0_vlan: entered promiscuous mode [ 999.807824][T14572] veth1_vlan: entered promiscuous mode [ 1000.714584][T14572] veth0_macvtap: entered promiscuous mode [ 1000.788931][T14572] veth1_macvtap: entered promiscuous mode [ 1000.866029][T14572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1000.880720][T14572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.899280][T14572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1000.912956][T14572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.925386][T14572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1000.940687][T14572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.980061][T14572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1001.020935][T14572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.061711][T14572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.086607][T14572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.119375][T14572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.137588][T14572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.149863][T14572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.167592][T14572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1001.198052][T14572] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.217323][T14572] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.238298][T14572] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.294918][T14572] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.101503][T14720] xt_policy: neither incoming nor outgoing policy selected [ 1002.357687][T12624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1002.382474][T12624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1002.456332][ T1835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1002.476588][ T1835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1002.975162][ T23] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 1003.179685][ T23] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 1003.244328][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1003.309539][ T23] usb 4-1: config 0 has no interfaces? [ 1003.378213][ T23] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1003.483081][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.503635][ T23] usb 4-1: config 0 descriptor?? [ 1004.262911][T14763] fuse: Bad value for 'fd' [ 1005.334178][T14771] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2320'. [ 1005.699145][ T5828] usb 4-1: USB disconnect, device number 22 [ 1008.442878][T14791] xt_policy: neither incoming nor outgoing policy selected [ 1012.301924][T14821] xt_policy: neither incoming nor outgoing policy selected [ 1014.636852][T14834] xt_policy: neither incoming nor outgoing policy selected [ 1016.016515][T14860] fuse: Bad value for 'fd' [ 1019.016977][T14878] fuse: Bad value for 'fd' [ 1020.018782][T14880] xt_policy: neither incoming nor outgoing policy selected [ 1023.051229][T14897] : renamed from bond_slave_0 (while UP) [ 1025.493082][T14915] xt_policy: neither incoming nor outgoing policy selected [ 1027.184933][T14923] xt_policy: neither incoming nor outgoing policy selected [ 1027.822438][T14933] fuse: Bad value for 'fd' [ 1029.339140][T14946] fuse: Bad value for 'fd' [ 1031.262529][T14966] xt_policy: neither incoming nor outgoing policy selected [ 1033.082820][T14985] fuse: Bad value for 'fd' [ 1038.280288][T15024] fuse: Bad value for 'fd' [ 1040.421022][T15035] fuse: Bad value for 'fd' [ 1040.470465][T15037] xt_policy: neither incoming nor outgoing policy selected [ 1044.607433][T15061] xt_policy: neither incoming nor outgoing policy selected [ 1045.827709][T15059] fuse: Bad value for 'fd' [ 1046.541097][ T5769] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1046.552291][ T5769] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1046.565985][ T5769] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1046.582211][ T5769] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1046.590050][ T5769] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1046.600352][ T5769] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1047.576203][T15076] chnl_net:caif_netlink_parms(): no params data found [ 1047.794544][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.027751][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.274390][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.427223][T15076] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.492084][T15076] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.531969][T15076] bridge_slave_0: entered allmulticast mode [ 1048.550381][T15076] bridge_slave_0: entered promiscuous mode [ 1048.645468][T14573] Bluetooth: hci4: command tx timeout [ 1048.676519][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.745751][T15076] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.760681][T15076] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.799800][T15076] bridge_slave_1: entered allmulticast mode [ 1048.832116][T15076] bridge_slave_1: entered promiscuous mode [ 1048.911989][T15076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1048.972681][T15076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1049.141562][T15076] team0: Port device team_slave_0 added [ 1049.178032][T15076] team0: Port device team_slave_1 added [ 1049.415329][T15076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1049.578171][T15076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1049.673816][T15076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1049.833413][T15109] fuse: Bad value for 'fd' [ 1050.140740][T15076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1050.158077][T15076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1050.302249][T15076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1050.410896][T15117] fuse: Bad value for 'fd' [ 1050.756666][T14573] Bluetooth: hci4: command tx timeout [ 1050.771965][T15076] hsr_slave_0: entered promiscuous mode [ 1050.971188][T15076] hsr_slave_1: entered promiscuous mode [ 1052.807884][T14573] Bluetooth: hci4: command tx timeout [ 1053.617613][T15076] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1053.687117][T15076] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1053.883966][T15076] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1053.949217][T15076] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1054.244905][ T12] hsr_slave_0: left promiscuous mode [ 1054.301243][ T12] hsr_slave_1: left promiscuous mode [ 1054.320128][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1054.345078][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1054.379151][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1054.420759][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1054.485779][ T12] bridge_slave_1: left allmulticast mode [ 1054.491589][ T12] bridge_slave_1: left promiscuous mode [ 1054.510523][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.575821][ T12] bridge_slave_0: left allmulticast mode [ 1054.581543][ T12] bridge_slave_0: left promiscuous mode [ 1054.595150][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.647602][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.653928][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.711979][ T12] veth1_macvtap: left promiscuous mode [ 1054.717630][ T12] veth0_macvtap: left promiscuous mode [ 1054.735563][ T12] veth1_vlan: left promiscuous mode [ 1054.751580][ T12] veth0_vlan: left promiscuous mode [ 1054.885330][T14573] Bluetooth: hci4: command tx timeout [ 1056.228101][T15183] fuse: Bad value for 'fd' [ 1057.551610][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1058.279720][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1058.371978][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1058.484278][ T12] bond0 (unregistering): (slave 30): Releasing backup interface [ 1059.003853][ T12] bond0 (unregistering): Released all slaves [ 1059.696307][T15076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1059.735703][T15076] 8021q: adding VLAN 0 to HW filter on device team0 [ 1059.766703][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.773818][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1059.829148][T15201] xt_policy: neither incoming nor outgoing policy selected [ 1059.888514][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.895734][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1060.748529][T15076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1060.917431][T15076] veth0_vlan: entered promiscuous mode [ 1060.946333][T15076] veth1_vlan: entered promiscuous mode [ 1061.054770][T15076] veth0_macvtap: entered promiscuous mode [ 1061.130041][T15076] veth1_macvtap: entered promiscuous mode [ 1061.261119][T15234] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2421'. [ 1061.271038][T15076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.300101][T15076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.350241][T15076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.380177][T15076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.422521][T15076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.469770][T15076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.508931][T15076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1061.605328][T15076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1061.659706][T15076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.687012][T15076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1061.731630][T15076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.805911][T15076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1061.833200][T15076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.862780][T15076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1061.914278][T15076] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.952126][T15076] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.002021][T15076] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.045609][T15076] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.376110][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1062.433141][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1062.512714][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1062.532439][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1062.936122][T15259] fuse: Bad value for 'fd' [ 1064.805573][T15291] fuse: Bad value for 'fd' [ 1066.166613][ T5769] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1066.185989][ T5769] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1066.231222][ T5769] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1066.240224][ T5769] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1066.257561][ T5769] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1066.265127][ T5769] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1067.643578][T15296] chnl_net:caif_netlink_parms(): no params data found [ 1067.948710][T15207] syz_tun (unregistering): left allmulticast mode [ 1068.701389][T14573] Bluetooth: hci0: command tx timeout [ 1069.029971][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.161334][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.188146][T15296] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.199502][T15296] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.207465][T15296] bridge_slave_0: entered allmulticast mode [ 1069.214306][T15296] bridge_slave_0: entered promiscuous mode [ 1069.222814][T15296] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.230956][T15296] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.242765][T15296] bridge_slave_1: entered allmulticast mode [ 1069.346335][T15296] bridge_slave_1: entered promiscuous mode [ 1069.436075][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.719504][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.868431][T15296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1069.923116][T15296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1070.016489][T15296] team0: Port device team_slave_0 added [ 1070.027925][T15296] team0: Port device team_slave_1 added [ 1070.092691][T15296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1070.101125][T15296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1070.129700][T15296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1070.156551][T15330] Bluetooth: MGMT ver 1.22 [ 1070.190622][T15296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1070.208853][T15296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1070.335408][T15296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1070.460665][T15296] hsr_slave_0: entered promiscuous mode [ 1070.474490][T15296] hsr_slave_1: entered promiscuous mode [ 1070.495569][T15296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1070.503340][T15296] Cannot create hsr debugfs directory [ 1070.735782][T14573] Bluetooth: hci0: command tx timeout [ 1070.886475][T15336] fuse: Bad value for 'fd' [ 1072.282063][T15348] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2439'. [ 1072.448005][ T12] dvmrp6 (unregistering): left allmulticast mode [ 1072.909143][T14573] Bluetooth: hci0: command tx timeout [ 1073.603344][T15364] xt_policy: neither incoming nor outgoing policy selected [ 1073.665768][T15296] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1073.722898][T15296] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1073.804962][T15296] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1073.833210][T15296] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1073.942370][ T12] hsr_slave_0: left promiscuous mode [ 1073.965907][ T12] hsr_slave_1: left promiscuous mode [ 1073.998347][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1074.015412][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1074.047251][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1074.063013][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1074.086379][ T12] bridge_slave_1: left allmulticast mode [ 1074.099193][ T12] bridge_slave_1: left promiscuous mode [ 1074.119229][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.159142][ T12] bridge_slave_0: left allmulticast mode [ 1074.179537][ T12] bridge_slave_0: left promiscuous mode [ 1074.208229][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.974984][T14573] Bluetooth: hci0: command tx timeout [ 1075.048641][ T12] veth1_macvtap: left promiscuous mode [ 1075.054228][ T12] veth0_macvtap: left promiscuous mode [ 1075.075619][ T12] veth1_vlan: left promiscuous mode [ 1075.081040][ T12] veth0_vlan: left promiscuous mode [ 1075.235009][ T5845] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1075.435119][ T5845] usb 2-1: Using ep0 maxpacket: 32 [ 1075.455660][ T5845] usb 2-1: config 47 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.489111][ T5845] usb 2-1: config 47 has no interfaces? [ 1075.503764][ T5845] usb 2-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=39.2b [ 1075.519419][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.527693][ T5845] usb 2-1: Product: syz [ 1075.535074][ T5845] usb 2-1: Manufacturer: syz [ 1075.539919][ T5845] usb 2-1: SerialNumber: syz [ 1075.767426][ T5845] usb 2-1: USB disconnect, device number 29 [ 1077.283638][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1077.299329][T15398] mmap: syz.2.2447 (15398) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1077.382216][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1077.532237][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1078.021873][ T12] bond0 (unregistering): (slave 30): Releasing backup interface [ 1078.647115][ T12] bond0 (unregistering): Released all slaves [ 1078.835499][T15403] netlink: 'syz.2.2447': attribute type 4 has an invalid length. [ 1080.120578][T15296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1080.178238][T15296] 8021q: adding VLAN 0 to HW filter on device team0 [ 1080.238265][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 1080.246144][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1080.314382][T12624] bridge0: port 2(bridge_slave_1) entered blocking state [ 1080.321612][T12624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1081.030593][T15296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1081.163362][T15296] veth0_vlan: entered promiscuous mode [ 1081.189301][T15296] veth1_vlan: entered promiscuous mode [ 1081.273982][T15296] veth0_macvtap: entered promiscuous mode [ 1081.327442][T15296] veth1_macvtap: entered promiscuous mode [ 1081.384323][T15296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1081.424908][T15296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.451546][T15296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1081.505966][T15296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.524909][T15296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1081.555474][T15296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.568115][T15296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1081.578244][T15296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1081.589270][T15296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.625980][T15296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1081.661045][T15296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.447207][T15296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1082.457933][T15296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.486795][T15296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1082.528948][T15296] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.541096][T15296] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.553636][T15296] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.567153][T15296] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.809296][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1082.827488][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1082.836073][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1082.850108][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1085.337837][T15467] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2455'. [ 1087.965367][T15487] xt_policy: neither incoming nor outgoing policy selected [ 1089.478999][T15492] xt_policy: neither incoming nor outgoing policy selected [ 1089.645037][T14725] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1089.864942][T14725] usb 1-1: Using ep0 maxpacket: 32 [ 1089.920308][T14725] usb 1-1: config 47 has an invalid descriptor of length 0, skipping remainder of the config [ 1089.977670][T14725] usb 1-1: config 47 has no interfaces? [ 1090.005423][T14725] usb 1-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=39.2b [ 1090.059459][T14725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.067668][T14725] usb 1-1: Product: syz [ 1090.071929][T14725] usb 1-1: Manufacturer: syz [ 1090.085056][T14725] usb 1-1: SerialNumber: syz [ 1090.306658][T15518] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2463'. [ 1090.696498][T14725] usb 1-1: USB disconnect, device number 23 [ 1091.118104][T15523] netlink: 'syz.1.2466': attribute type 4 has an invalid length. [ 1093.290511][T15546] xt_policy: neither incoming nor outgoing policy selected [ 1096.467678][ T5769] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1096.477981][ T5769] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1096.487097][ T5769] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1096.496126][ T5769] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1096.504009][ T5769] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1096.512441][ T5769] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1098.262690][T15566] chnl_net:caif_netlink_parms(): no params data found [ 1098.458324][T15583] netlink: 'syz.3.2484': attribute type 4 has an invalid length. [ 1098.565492][T14573] Bluetooth: hci2: command tx timeout [ 1099.235171][ T1835] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.375981][T15594] : renamed from bond_slave_0 (while UP) [ 1099.668826][ T1835] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.839356][ T1835] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.893070][T15566] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.923255][T15566] bridge0: port 1(bridge_slave_0) entered disabled state [ 1099.934514][T15566] bridge_slave_0: entered allmulticast mode [ 1099.953546][T15566] bridge_slave_0: entered promiscuous mode [ 1099.986419][ T1835] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.008269][T15566] bridge0: port 2(bridge_slave_1) entered blocking state [ 1100.015644][T15566] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.022991][T15566] bridge_slave_1: entered allmulticast mode [ 1100.033829][T15566] bridge_slave_1: entered promiscuous mode [ 1100.094341][T15566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1100.136149][T15566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1100.289848][T15566] team0: Port device team_slave_0 added [ 1100.311907][ T1835] tipc: Left network mode [ 1100.334550][T15566] team0: Port device team_slave_1 added [ 1100.645059][T14573] Bluetooth: hci2: command tx timeout [ 1100.724347][T15566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1100.775471][T15566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1100.841648][T15566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1101.000430][T15566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1101.125290][T15566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1101.165049][T15566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1101.718584][T15566] hsr_slave_0: entered promiscuous mode [ 1101.740074][T15566] hsr_slave_1: entered promiscuous mode [ 1101.748383][T15566] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1101.785699][T15566] Cannot create hsr debugfs directory [ 1102.056059][T15636] : renamed from bond_slave_0 (while UP) [ 1102.735037][T14573] Bluetooth: hci2: command tx timeout [ 1103.804279][ T1835] hsr_slave_0: left promiscuous mode [ 1103.818679][ T1835] hsr_slave_1: left promiscuous mode [ 1103.845945][ T1835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1103.858614][ T1835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1103.868048][ T1835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1103.879486][ T1835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1103.888289][ T1835] bridge_slave_1: left allmulticast mode [ 1103.894421][ T1835] bridge_slave_1: left promiscuous mode [ 1103.901123][ T1835] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.913379][ T1835] bridge_slave_0: left allmulticast mode [ 1103.919290][ T1835] bridge_slave_0: left promiscuous mode [ 1103.925234][ T1835] bridge0: port 1(bridge_slave_0) entered disabled state [ 1103.948410][ T1835] veth1_macvtap: left promiscuous mode [ 1103.954041][ T1835] veth0_macvtap: left promiscuous mode [ 1104.779422][ T1835] team0 (unregistering): Port device team_slave_1 removed [ 1104.808271][T14573] Bluetooth: hci2: command tx timeout [ 1104.837006][ T1835] team0 (unregistering): Port device team_slave_0 removed [ 1104.883588][ T1835] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1105.585534][T15669] xt_policy: neither incoming nor outgoing policy selected [ 1105.663889][ T1835] bond0 (unregistering): (slave 30): Releasing backup interface [ 1106.417256][ T1835] bond0 (unregistering): Released all slaves [ 1107.502747][T15566] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1107.554568][T15566] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1107.597858][T15566] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1107.661765][T15566] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1107.775012][ T5845] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1107.924996][ T5769] Bluetooth: hci1: command 0x0406 tx timeout [ 1107.955230][ T5845] usb 2-1: Using ep0 maxpacket: 32 [ 1108.019371][ T5845] usb 2-1: config 47 has an invalid descriptor of length 0, skipping remainder of the config [ 1108.066510][ T5845] usb 2-1: config 47 has no interfaces? [ 1108.087626][T15566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1108.095341][ T5845] usb 2-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=39.2b [ 1108.115076][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.138503][ T5845] usb 2-1: Product: syz [ 1108.144813][ T5845] usb 2-1: Manufacturer: syz [ 1108.149770][ T5845] usb 2-1: SerialNumber: syz [ 1108.218440][T15566] 8021q: adding VLAN 0 to HW filter on device team0 [ 1108.306667][T12624] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.313863][T12624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1108.464067][ T5845] usb 2-1: USB disconnect, device number 30 [ 1108.583010][ T1835] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.590204][ T1835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1108.791220][T15566] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1110.119929][T15737] netlink: 'syz.3.2506': attribute type 10 has an invalid length. [ 1110.173682][T15737] team0: Port device dummy0 added [ 1110.233331][T15566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1110.241060][T15737] netlink: 'syz.3.2506': attribute type 10 has an invalid length. [ 1110.274062][T15737] team0: Port device dummy0 removed [ 1110.292137][T15737] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1110.412523][T15566] veth0_vlan: entered promiscuous mode [ 1110.440287][T15566] veth1_vlan: entered promiscuous mode [ 1110.514572][T15566] veth0_macvtap: entered promiscuous mode [ 1110.536352][T15566] veth1_macvtap: entered promiscuous mode [ 1110.594066][T15566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1110.611996][T15566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.622576][T15566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1110.640096][T15566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.650514][T15566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1110.666889][T15566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.769436][T15566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1110.780613][T15566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1111.383628][T15747] xt_policy: neither incoming nor outgoing policy selected [ 1111.384987][T15566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.470090][T15566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1111.494973][T15566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.529941][T15566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1111.625037][T15566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.694739][T15566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1111.770968][T15566] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.805035][T15566] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.813780][T15566] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.843050][T15566] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.073478][T15763] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2509'. [ 1112.118009][T12624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1112.152790][T12624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1112.318187][T15381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1112.342561][T15381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.489561][T15794] fuse: Bad value for 'fd' [ 1115.310313][T15798] netlink: 'syz.3.2513': attribute type 10 has an invalid length. [ 1115.333537][T15798] bond0: (slave dummy0): Releasing backup interface [ 1115.376103][T15798] team0: Port device dummy0 added [ 1115.436777][T15800] netlink: 'syz.3.2513': attribute type 10 has an invalid length. [ 1115.544800][T15800] team0: Port device dummy0 removed [ 1115.705203][T15800] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1116.095421][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.102009][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.882633][T15809] netlink: 'syz.1.2517': attribute type 10 has an invalid length. [ 1116.966099][T15809] team0: Port device dummy0 added [ 1116.979207][T15812] RDS: rds_bind could not find a transport for ae0c:91e3:ccfb:11d2:0:5efe:150.125.240.108, load rds_tcp or rds_rdma? [ 1117.000772][T15813] netlink: 'syz.1.2517': attribute type 10 has an invalid length. [ 1117.076697][T15813] team0: Port device dummy0 removed [ 1117.092874][T15813] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1119.971628][T15837] xt_policy: neither incoming nor outgoing policy selected [ 1121.573006][T15846] netlink: 'syz.0.2527': attribute type 10 has an invalid length. [ 1121.601734][T15846] team0: Port device dummy0 added [ 1121.627730][T15846] netlink: 'syz.0.2527': attribute type 10 has an invalid length. [ 1121.670622][T15846] team0: Port device dummy0 removed [ 1121.681479][T15846] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1121.820587][T15850] netlink: 'syz.0.2528': attribute type 10 has an invalid length. [ 1121.963287][T15850] bond0: (slave dummy0): Releasing backup interface [ 1121.989285][T15850] team0: Port device dummy0 added [ 1124.032626][T15863] fuse: Bad value for 'fd' [ 1124.167210][ T27] audit: type=1326 audit(1771096637.145:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15864 comm="syz.2.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21fbf9bf79 code=0x7fc00000 [ 1124.574348][ T27] audit: type=1326 audit(1771096637.155:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15864 comm="syz.2.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f21fbf9bf79 code=0x7fc00000 [ 1124.827185][T15851] netlink: 'syz.0.2528': attribute type 10 has an invalid length. [ 1124.896710][T15851] team0: Port device dummy0 removed [ 1124.914355][T15851] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1124.915926][ T27] audit: type=1326 audit(1771096637.895:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15864 comm="syz.2.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21fbf9bf79 code=0x7fc00000 [ 1125.065102][T15868] netlink: 'syz.2.2533': attribute type 10 has an invalid length. [ 1125.123991][T15868] team0: Port device dummy0 added [ 1125.288500][T15868] netlink: 'syz.2.2533': attribute type 10 has an invalid length. [ 1125.356562][T15868] team0: Port device dummy0 removed [ 1125.363955][T15868] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1125.433469][T15875] fuse: Bad value for 'fd' [ 1127.274557][T15895] netlink: 'syz.3.2538': attribute type 10 has an invalid length. [ 1127.379464][T15895] bond0: (slave dummy0): Releasing backup interface [ 1127.438172][T15895] team0: Port device dummy0 added [ 1127.467855][T15896] netlink: 'syz.3.2538': attribute type 10 has an invalid length. [ 1127.607425][T15896] team0: Port device dummy0 removed [ 1127.614580][T15896] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1128.027838][ T27] audit: type=1326 audit(1771096641.005:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15901 comm="syz.3.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79859bf79 code=0x7fc00000 [ 1128.156139][ T27] audit: type=1326 audit(1771096641.035:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15901 comm="syz.3.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc79859bf79 code=0x7fc00000 [ 1128.742958][ T27] audit: type=1326 audit(1771096641.035:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15901 comm="syz.3.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79859bf79 code=0x7fc00000 [ 1130.235813][ T27] audit: type=1326 audit(1771096643.215:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15915 comm="syz.2.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21fbf9bf79 code=0x7fc00000 [ 1132.995767][T15942] netlink: 'syz.2.2549': attribute type 10 has an invalid length. [ 1133.070858][T15942] bond0: (slave dummy0): Releasing backup interface [ 1133.163197][T15942] team0: Port device dummy0 added [ 1133.187108][T15943] netlink: 'syz.2.2549': attribute type 10 has an invalid length. [ 1133.191825][ T27] audit: type=1326 audit(1771096646.165:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15944 comm="syz.0.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d2f9bf79 code=0x7fc00000 [ 1133.277525][ T27] audit: type=1326 audit(1771096646.195:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15944 comm="syz.0.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa5d2f9bf79 code=0x7fc00000 [ 1133.311105][T15943] team0: Port device dummy0 removed [ 1133.331238][T15943] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1133.354932][ T27] audit: type=1326 audit(1771096646.195:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15944 comm="syz.0.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5d2f9bf79 code=0x7fc00000 [ 1133.405306][T15949] netlink: 'syz.0.2553': attribute type 10 has an invalid length. [ 1133.446214][T15949] bond0: (slave dummy0): Releasing backup interface [ 1133.491982][T15949] team0: Port device dummy0 added [ 1133.519114][T15950] netlink: 'syz.0.2553': attribute type 10 has an invalid length. [ 1133.660023][T15950] team0: Port device dummy0 removed [ 1133.678856][T15950] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1134.449889][T15969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2557'. [ 1138.071810][T16004] netlink: 'syz.0.2564': attribute type 10 has an invalid length. [ 1138.761414][T16004] bond0: (slave dummy0): Releasing backup interface [ 1138.826942][T16004] team0: Port device dummy0 added [ 1138.887466][T16007] netlink: 'syz.0.2564': attribute type 10 has an invalid length. [ 1139.088742][T16007] team0: Port device dummy0 removed [ 1139.129805][T16007] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1141.452067][T16036] netlink: 'syz.3.2573': attribute type 4 has an invalid length. [ 1142.205579][T16031] xt_policy: neither incoming nor outgoing policy selected [ 1144.262562][T16054] netlink: 'syz.2.2577': attribute type 10 has an invalid length. [ 1145.857540][T16073] : renamed from bond_slave_0 (while UP) [ 1146.290861][T16079] netlink: 'syz.1.2582': attribute type 10 has an invalid length. [ 1150.763532][T16124] netlink: 'syz.2.2592': attribute type 10 has an invalid length. [ 1157.405714][T16166] xt_policy: neither incoming nor outgoing policy selected [ 1163.669091][T16204] xt_policy: neither incoming nor outgoing policy selected [ 1169.367022][ T5769] Bluetooth: hci4: command 0x0406 tx timeout [ 1171.165434][T16268] xt_policy: neither incoming nor outgoing policy selected [ 1171.910675][T16278] xt_policy: neither incoming nor outgoing policy selected [ 1177.531491][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.546697][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.375534][T16351] fuse: Bad value for 'fd' [ 1179.719696][T16367] fuse: Bad value for 'fd' [ 1181.957107][T16388] fuse: Bad value for 'fd' [ 1183.377800][T16401] netlink: 'syz.1.2664': attribute type 10 has an invalid length. [ 1183.386492][T16401] bond0: (slave dummy0): Releasing backup interface [ 1183.405960][T16401] team0: Port device dummy0 added [ 1184.136085][T16399] xt_policy: neither incoming nor outgoing policy selected [ 1184.811553][T16407] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2666'. [ 1186.310077][T16409] xt_policy: neither incoming nor outgoing policy selected [ 1186.709598][T16415] fuse: Bad value for 'fd' [ 1188.211839][T16434] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2672'. [ 1189.846264][ T5769] Bluetooth: hci0: command 0x0406 tx timeout [ 1192.928661][T16477] fuse: Bad value for 'fd' [ 1194.285073][T12141] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1194.303089][T16489] kAFS: No cell specified [ 1195.357373][T12141] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1195.374196][T12141] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.382826][T12141] usb 3-1: Product: syz [ 1195.395496][T12141] usb 3-1: Manufacturer: syz [ 1195.403175][T12141] usb 3-1: SerialNumber: syz [ 1195.439394][T12141] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1195.554281][ T5845] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1197.055389][ T5845] usb 3-1: Service connection timeout for: 256 [ 1197.081477][ T5845] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1197.127884][ T5845] ath9k_htc: Failed to initialize the device [ 1197.153061][ T5845] usb 3-1: ath9k_htc: USB layer deinitialized [ 1197.737277][T16515] fuse: Bad value for 'fd' [ 1198.022027][T15426] usb 3-1: USB disconnect, device number 23 [ 1198.734190][T16529] fuse: Bad value for 'fd' [ 1202.873569][T16554] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2704'. [ 1204.239542][T16562] kAFS: No cell specified [ 1204.650593][T16568] netlink: 'syz.2.2708': attribute type 10 has an invalid length. [ 1204.699784][T16568] bond0: (slave dummy0): Releasing backup interface [ 1204.736413][T16568] team0: Port device dummy0 added [ 1205.123490][T16577] fuse: Bad value for 'fd' [ 1206.340116][T16580] xt_policy: neither incoming nor outgoing policy selected [ 1211.233960][T16615] xt_policy: neither incoming nor outgoing policy selected [ 1212.025587][T16631] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2726'. [ 1212.814450][T16648] fuse: Bad value for 'fd' [ 1215.407267][T16670] fuse: Bad value for 'fd' [ 1216.523908][T16679] fuse: Bad value for 'fd' [ 1217.827854][T16692] fuse: Bad value for 'fd' [ 1220.603698][T16712] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2745'. [ 1222.358499][T16731] fuse: Bad value for 'fd' [ 1224.661477][T16749] fuse: Bad value for 'fd' [ 1226.604134][T16761] fuse: Bad value for 'fd' [ 1228.402611][T16777] fuse: Bad value for 'fd' [ 1230.078767][T16788] fuse: Bad value for 'fd' [ 1235.189009][T16833] fuse: Bad value for 'fd' [ 1238.969275][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.975948][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.901698][T16904] xt_policy: neither incoming nor outgoing policy selected [ 1241.877903][T16920] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2801'. [ 1243.260947][T16931] fuse: Bad value for 'fd' [ 1244.795868][T16937] xt_policy: neither incoming nor outgoing policy selected [ 1246.097949][T16949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2810'. [ 1247.068192][T16951] xt_policy: neither incoming nor outgoing policy selected [ 1249.923586][T14573] Bluetooth: min 0 < 6 [ 1249.934023][T16981] fuse: Bad value for 'fd' [ 1251.566315][T16985] xt_policy: neither incoming nor outgoing policy selected [ 1251.858272][T16992] fuse: Bad value for 'fd' [ 1252.639422][T14573] Bluetooth: hci2: command tx timeout [ 1253.841147][T17004] netlink: 'syz.3.2827': attribute type 4 has an invalid length. [ 1256.279079][T17037] netlink: 'syz.2.2835': attribute type 4 has an invalid length. [ 1261.349699][T17079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2847'. [ 1265.101103][T17115] netlink: 'syz.0.2857': attribute type 4 has an invalid length. [ 1265.925872][T14573] Bluetooth: hci2: command tx timeout [ 1279.173438][T17236] xt_policy: neither incoming nor outgoing policy selected [ 1283.206921][T14573] Bluetooth: hci4: command 0x0406 tx timeout [ 1284.906252][T17290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2909'. [ 1287.068023][T17310] fuse: Bad value for 'fd' [ 1289.577280][T17325] xt_policy: neither incoming nor outgoing policy selected [ 1293.029568][T17355] xt_policy: neither incoming nor outgoing policy selected [ 1298.232985][T17407] netlink: 'syz.3.2942': attribute type 4 has an invalid length. [ 1300.418739][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.425126][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.451877][T17434] fuse: Bad value for 'fd' [ 1302.923460][T17444] xt_policy: neither incoming nor outgoing policy selected [ 1303.650355][T17457] fuse: Bad value for 'fd' [ 1304.293817][T17463] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2958'. [ 1306.909825][T17480] netlink: 'syz.1.2970': attribute type 4 has an invalid length. [ 1307.054250][T17481] netlink: 'syz.2.2962': attribute type 4 has an invalid length. [ 1310.188759][T17512] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2967'. [ 1310.832567][T17518] fuse: Bad value for 'fd' [ 1313.959143][T17544] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2982'. [ 1317.039216][T17555] fuse: Bad value for 'fd' [ 1322.305840][T17599] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2999'. [ 1323.104490][T17610] fuse: Bad value for 'fd' [ 1325.086172][T17633] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3010'. [ 1326.230676][T17652] fuse: Bad value for 'fd' [ 1327.026905][T17658] netlink: 'syz.3.3016': attribute type 4 has an invalid length. [ 1331.239469][T17704] fuse: Bad value for 'fd' [ 1331.306989][ T49] ------------[ cut here ]------------ [ 1331.312713][ T49] WARNING: CPU: 0 PID: 49 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1331.323756][ T49] Modules linked in: [ 1331.327718][ T49] CPU: 0 PID: 49 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 1331.335146][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1331.345243][ T49] Workqueue: phy14 ieee80211_csa_finalize_work [ 1331.351448][ T49] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1331.358750][ T49] Code: 48 89 df e8 8a 05 d8 f7 e9 dc fc ff ff e8 90 dc 7f f7 eb 24 e8 89 dc 7f f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 78 dc 7f f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 6a dc 7f f7 48 8b 7c 24 08 4c 8b 7c [ 1331.378410][ T49] RSP: 0018:ffffc90000ba79c0 EFLAGS: 00010293 [ 1331.384467][ T49] RAX: ffffffff8a07332e RBX: 0000000000000001 RCX: ffff88801d26bc00 [ 1331.392478][ T49] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1331.395798][T17015] ------------[ cut here ]------------ [ 1331.400574][ T49] RBP: dffffc0000000000 R08: ffff888061cd15af R09: 1ffff1100c39a2b5 [ 1331.406398][T17015] WARNING: CPU: 1 PID: 17015 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1331.415010][ C1] ------------[ cut here ]------------ [ 1331.415086][ T49] R10: dffffc0000000000 R11: ffffed100c39a2b6 R12: 0000000000000001 [ 1331.415105][ T49] R13: ffff888061cd25d9 R14: ffff8880797d2c70 R15: ffff8880797d2ce8 [ 1331.415117][ T49] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1331.415138][ T49] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1331.415148][ T49] CR2: 00007f6535d456b8 CR3: 0000000063544000 CR4: 00000000003506f0 [ 1331.415164][ T49] Call Trace: [ 1331.415186][ T49] [ 1331.415096][ C1] WARNING: CPU: 1 PID: 17015 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600 [ 1331.415214][ C1] Modules linked in: [ 1331.415210][ T49] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 1331.415222][ C1] [ 1331.415231][ C1] CPU: 1 PID: 17015 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 1331.415238][ T49] ieee80211_csa_finalize+0x5a6/0xf20 [ 1331.415255][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1331.415269][ C1] Workqueue: phy13 ieee80211_csa_finalize_work [ 1331.415295][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 1331.415264][ T49] ? mutex_lock_nested+0x20/0x20 [ 1331.415319][ C1] Code: 24 4c 89 e7 e8 3e 42 c2 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 79 88 84 f7 0f 0b e9 f6 f7 ff ff e8 6d 88 84 f7 <0f> 0b e9 48 fb ff ff e8 61 88 84 f7 48 c7 c7 60 51 64 8e 4c 89 e6 [ 1331.415339][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 1331.415358][ C1] RAX: ffffffff8a028b33 RBX: ffffffff8a027936 RCX: ffff88802c749e00 [ 1331.415341][ T49] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1331.415375][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1331.415397][ C1] RBP: 0000000000000000 R08: ffff88802c749e00 R09: 0000000000000003 [ 1331.415399][ T49] ? ieee80211_csa_finalize_work+0x140/0x140 [ 1331.415412][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888061cd23c0 [ 1331.415422][ T49] ? read_lock_is_recursive+0x20/0x20 [ 1331.415428][ C1] R13: dffffc0000000000 R14: ffff888061cd28b0 R15: ffff888076a2e024 [ 1331.415445][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1331.415453][ T49] ieee80211_csa_finalize_work+0xf6/0x140 [ 1331.415464][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1331.415480][ C1] CR2: 0000001b30522ff8 CR3: 000000003135e000 CR4: 00000000003506e0 [ 1331.415476][ T49] ? process_scheduled_works+0x96f/0x15d0 [ 1331.415498][ C1] Call Trace: [ 1331.415507][ C1] [ 1331.415513][ T49] process_scheduled_works+0xa5d/0x15d0 [ 1331.415519][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 1331.415554][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 1331.415567][ T49] ? assign_work+0x430/0x430 [ 1331.415584][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 1331.415597][ T49] ? assign_work+0x3d0/0x430 [ 1331.415626][ T49] worker_thread+0xa55/0xfc0 [ 1331.415649][ T49] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1331.415622][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 1331.415684][ C1] __iterate_interfaces+0x243/0x500 [ 1331.415695][ T49] kthread+0x2fa/0x390 [ 1331.415712][ T49] ? pr_cont_work+0x560/0x560 [ 1331.415713][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1331.415736][ T49] ? kthread_blkcg+0xd0/0xd0 [ 1331.415738][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1331.415755][ T49] ret_from_fork+0x48/0x80 [ 1331.415770][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1331.415782][ T49] ? kthread_blkcg+0xd0/0xd0 [ 1331.415795][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1331.415802][ T49] ret_from_fork_asm+0x11/0x20 [ 1331.415830][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 1331.415851][ T49] [ 1331.415861][ T49] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1331.415856][ C1] __hrtimer_run_queues+0x52a/0xc40 [ 1331.415870][ T49] CPU: 0 PID: 49 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 1331.415886][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1331.415883][ C1] ? hw_scan_work+0xf60/0xf60 [ 1331.415896][ T49] Workqueue: phy14 ieee80211_csa_finalize_work [ 1331.415915][ T49] Call Trace: [ 1331.415911][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1331.415921][ T49] [ 1331.415931][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 1331.415961][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 1331.415928][ T49] dump_stack_lvl+0x18c/0x250 [ 1331.415986][ C1] handle_softirqs+0x280/0x820 [ 1331.415998][ T49] ? show_regs_print_info+0x20/0x20 [ 1331.416010][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1331.416021][ T49] ? load_image+0x400/0x400 [ 1331.416034][ C1] ? do_softirq+0x1a0/0x1a0 [ 1331.416059][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1331.416065][ T49] panic+0x2dc/0x730 [ 1331.416087][ C1] __irq_exit_rcu+0xd3/0x190 [ 1331.416089][ T49] ? bpf_jit_dump+0xd0/0xd0 [ 1331.416107][ C1] ? irq_exit_rcu+0x20/0x20 [ 1331.416118][ T49] ? ret_from_fork_asm+0x11/0x20 [ 1331.416134][ C1] irq_exit_rcu+0x9/0x20 [ 1331.416150][ T49] __warn+0x2e0/0x470 [ 1331.416151][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1331.416166][ T49] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1331.416173][ C1] [ 1331.416178][ C1] [ 1331.416187][ T49] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1331.416186][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1331.416240][ C1] RIP: 0010:vprintk_emit+0x46f/0x610 [ 1331.416205][ T49] report_bug+0x2be/0x4f0 [ 1331.416263][ C1] Code: 85 3f 01 00 00 e8 11 a6 1b 00 45 89 f7 48 85 db 48 8b 1c 24 75 07 e8 00 a6 1b 00 eb 06 e8 f9 a5 1b 00 fb 48 c7 c7 e0 62 12 8d <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 99 b2 [ 1331.416271][ T49] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1331.416279][ C1] RSP: 0018:ffffc90005817620 EFLAGS: 00000293 [ 1331.416291][ T49] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1331.416296][ C1] RAX: ffffffff816b6da7 RBX: ffffffff816b6c4b RCX: ffff88802c749e00 [ 1331.416309][ T49] ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 1331.416311][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8d1262e0 [ 1331.416324][ C1] RBP: ffffc90005817710 R08: ffffffff911bf5c7 R09: 1ffffffff2237eb8 [ 1331.416327][ T49] handle_bug+0xcf/0x120 [ 1331.416339][ C1] R10: dffffc0000000000 R11: fffffbfff2237eb9 R12: dffffc0000000000 [ 1331.416353][ C1] R13: 1ffff92000b02ec8 R14: 0000000000000064 R15: 0000000000000064 [ 1331.416350][ T49] exc_invalid_op+0x1a/0x50 [ 1331.416372][ T49] asm_exc_invalid_op+0x1a/0x20 [ 1331.416371][ C1] ? vprintk_emit+0x30b/0x610 [ 1331.416387][ T49] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1331.416401][ C1] ? vprintk_emit+0x467/0x610 [ 1331.416406][ T49] Code: 48 89 df e8 8a 05 d8 f7 e9 dc fc ff ff e8 90 dc 7f f7 eb 24 e8 89 dc 7f f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 78 dc 7f f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 6a dc 7f f7 48 8b 7c 24 08 4c 8b 7c [ 1331.416419][ T49] RSP: 0018:ffffc90000ba79c0 EFLAGS: 00010293 [ 1331.416434][ T49] RAX: ffffffff8a07332e RBX: 0000000000000001 RCX: ffff88801d26bc00 [ 1331.416430][ C1] ? vprintk_emit+0x30b/0x610 [ 1331.416447][ T49] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1331.416458][ T49] RBP: dffffc0000000000 R08: ffff888061cd15af R09: 1ffff1100c39a2b5 [ 1331.416455][ C1] ? printk_sprint+0x460/0x460 [ 1331.416470][ T49] R10: dffffc0000000000 R11: ffffed100c39a2b6 R12: 0000000000000001 [ 1331.416481][ T49] R13: ffff888061cd25d9 R14: ffff8880797d2c70 R15: ffff8880797d2ce8 [ 1331.416477][ C1] ? __wake_up_klogd+0xd9/0x100 [ 1331.416502][ T49] ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0 [ 1331.416501][ C1] ? vprintk_emit+0x53d/0x610 [ 1331.416526][ C1] ? printk_sprint+0x460/0x460 [ 1331.416542][ T49] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 1331.416556][ C1] _printk+0xde/0x130 [ 1331.416566][ T49] ieee80211_csa_finalize+0x5a6/0xf20 [ 1331.416583][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1331.416585][ T49] ? mutex_lock_nested+0x20/0x20 [ 1331.416605][ C1] ? load_image+0x400/0x400 [ 1331.416609][ T49] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1331.416625][ C1] ? _printk+0xde/0x130 [ 1331.416628][ T49] ? ieee80211_csa_finalize_work+0x140/0x140 [ 1331.416648][ T49] ? read_lock_is_recursive+0x20/0x20 [ 1331.416653][ C1] ? load_image+0x400/0x400 [ 1331.416676][ T49] ieee80211_csa_finalize_work+0xf6/0x140 [ 1331.416681][ C1] __warn+0xe3/0x470 [ 1331.416697][ T49] ? process_scheduled_works+0x96f/0x15d0 [ 1331.416700][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1331.416718][ T49] process_scheduled_works+0xa5d/0x15d0 [ 1331.416724][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1331.416745][ C1] report_bug+0x2be/0x4f0 [ 1331.416768][ T49] ? assign_work+0x430/0x430 [ 1331.416772][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1331.416796][ T49] ? assign_work+0x3d0/0x430 [ 1331.416795][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1331.416817][ C1] ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 1331.416822][ T49] worker_thread+0xa55/0xfc0 [ 1331.416838][ C1] handle_bug+0xcf/0x120 [ 1331.416844][ T49] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1331.416865][ C1] exc_invalid_op+0x1a/0x50 [ 1331.416887][ T49] kthread+0x2fa/0x390 [ 1331.416892][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1331.416902][ T49] ? pr_cont_work+0x560/0x560 [ 1331.416911][ C1] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1331.416924][ T49] ? kthread_blkcg+0xd0/0xd0 [ 1331.416934][ C1] Code: 48 89 df e8 8a 05 d8 f7 e9 dc fc ff ff e8 90 dc 7f f7 eb 24 e8 89 dc 7f f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 78 dc 7f f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 6a dc 7f f7 48 8b 7c 24 08 4c 8b 7c [ 1331.416940][ T49] ret_from_fork+0x48/0x80 [ 1331.416950][ C1] RSP: 0018:ffffc900058179c0 EFLAGS: 00010293 [ 1331.416957][ T49] ? kthread_blkcg+0xd0/0xd0 [ 1331.416966][ C1] RAX: ffffffff8a07332e RBX: 0000000000000001 RCX: ffff88802c749e00 [ 1331.416975][ T49] ret_from_fork_asm+0x11/0x20 [ 1331.416981][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1331.416992][ C1] RBP: dffffc0000000000 R08: ffff888064f455af R09: 1ffff1100c9e8ab5 [ 1331.417007][ C1] R10: dffffc0000000000 R11: ffffed100c9e8ab6 R12: 0000000000000001 [ 1331.417012][ T49] [ 1331.417020][ C1] R13: ffff888064f465d9 R14: ffff88802f4cac70 R15: ffff88802f4cace8 [ 1331.417369][ T49] Kernel Offset: disabled