last executing test programs: 1m11.355317007s ago: executing program 2 (id=2374): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x80000000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0}) sendto$packet(r2, &(0x7f0000000080)="0b030e00ebff020002004788ba96", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000003e0095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$igmp(0x2, 0x3, 0x2) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) flistxattr(r0, &(0x7f00000001c0)=""/33, 0x21) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r5=>0x0}) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) r7 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x5a) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r8, 0xffffffffffffffff, 0xc, 0x0, 0x0, @void, @value}, 0x20) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000002c0)={0x1, @raw_data="a73fb05f3771f0835241313588b6187916c7b0e5f1f7db307caa2c90fecaedfe56d521966c6f5ca1b46d182c443a5768c217df3ba1230934abad2e2bbd4401b182c34574db7554585d1f3cba9fc707f79a3bcec280417bb482e91562b2636266e3723b788e6010e21136df8b20e1238dc853276ba78cd4db1f7fd4cb738992e1ced9df4e9a31f534c3762ab0e345ab618406c9dcad18a65e2c9a80f2948809584a15bbf3956250db0cf5e948127560856c6d030334ab6166678f69df4dbc6af73f6eacdd4b6e23b1"}) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r1, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) 1m2.739594641s ago: executing program 1 (id=2386): syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socket$kcm(0x10, 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x339) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r6, r5, 0x0, 0x3a) 1m0.444850258s ago: executing program 0 (id=2328): r0 = socket$inet(0x2, 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = userfaultfd(0x80001) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1000, 0x800, 0x0) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, <r6=>0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000001200)={0x50, 0x0, r6}, 0x50) read$FUSE(r5, &(0x7f0000004340)={0x2020, 0x0, <r7=>0x0}, 0x2020) write$FUSE_INTERRUPT(r5, &(0x7f0000000200)={0x10, 0x0, r7}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', <r8=>0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) write$binfmt_elf64(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x10, 0x1, 0x9, 0x8, 0x8, 0x2, 0x3e, 0x800, 0x3bc, 0x40, 0x2d, 0x10, 0x0, 0x38, 0x1, 0x8000, 0x7, 0x4}, [{0x1, 0x9, 0x800, 0xff, 0x10001, 0x2, 0xfffffffffffffff9, 0x102}], "985775b17dc8e1348eb13a91c9b61b4208e093c824fff54d8bb1d43ff23933e6c2e9f125259d4055ce00f262d22fa30ef9dd74", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9ab) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000c6a000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f00002a0000/0x4000)=nil) mlock(&(0x7f0000408000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="2b68756765746c62202d696f202d637075202d637075202d64657669636573202d63707561636374202b6e65745f7072696f2000706964732094215eee3d86e5ac11080adeb90102d6514590b93da80beea7a774f83aaa9e98d575f84bb4a18c8b4d77fed5db6e1debd4a9c45220c6061d5f7f2472c5"], 0x39) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000fc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000140)=[0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0x9c, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000e40), 0x8, 0xa0, 0x8, 0x8, &(0x7f0000000e80)}}, 0x10) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x3e}, @local}, 0xc) 59.243244214s ago: executing program 0 (id=2388): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x20, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x20}}, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) 58.679936259s ago: executing program 0 (id=2389): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpgid(0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_pidfd_open(r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func, @map_fd, @generic, @initr0, @exit, @printk={@llu, {0x2, 0x3, 0x3, 0xa, 0x0}, {0x7, 0x1, 0xc, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002600)={'wlan0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500010300000000000000000a"], 0x14}}, 0x0) r9 = syz_clone(0x40000000, &(0x7f0000001600)="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", 0x1000, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)="a945f952ac4b0fdbe42dc963a273887475685e5ac236a4b7c092d2d13207d7e00293ed1a7bdf003ff0402e20f53347d8ea71e90ba192") wait4(r9, &(0x7f0000000180), 0x4, &(0x7f00000001c0)) readv(r8, &(0x7f0000000080)=[{&(0x7f00000005c0)=""/4099, 0x1003}], 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@generic={0x7, 0x7, "0441b613a3"}, @timestamp_addr={0x44, 0xc, 0x6, 0x1, 0x0, [{@multicast1}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) pidfd_send_signal(r4, 0x21, 0x0, 0x4) 38.277395889s ago: executing program 4 (id=2414): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000004a00)={0x9, {"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", 0xfffffffffffffea1}}, 0xef9) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f0000000040)=""/210, 0xd2, 0x0, &(0x7f0000000140)=""/122, 0x7a}}, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) socket$inet(0x2, 0x801, 0x0) pipe2(&(0x7f0000000080), 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002d00), &(0x7f0000002d40)='./file0\x00', 0x0, &(0x7f00000023c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000380)={0x2020, 0x0, <r4=>0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000000)={0x50, 0x0, r4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x93}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) pipe(&(0x7f0000000280)) r5 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$sock_buf(r5, 0x1, 0x4c, &(0x7f0000000500)=""/58, &(0x7f0000000540)=0x3a) 37.883171525s ago: executing program 4 (id=2415): r0 = socket(0x11, 0x800000003, 0x0) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r3=>0x0}) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3d, 0x0, 0x1}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x40, r1, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r7=>0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000690bb741", @ANYRES32=r7], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r8=>0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xcc, r1, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4b}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xe}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x40}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x7}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xec}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff51}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x6}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x7}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x4e}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0xc}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x4d}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x37}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0xffff}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x8}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xad}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x35) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x4, {0x0, 0x0, 0x12, 0x0, {0x0, 0xfff2}, {0xd, 0xffff}, {0xfff1}}}, 0x24}}, 0x0) 33.972693067s ago: executing program 2 (id=2375): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpgid(0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = syz_pidfd_open(r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x40000000, &(0x7f0000001600)="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", 0x1000, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)="a945f952ac4b0fdbe42dc963a273887475685e5ac236a4b7c092d2d13207d7e00293ed1a7bdf003ff0402e20f53347d8ea71e90ba192") syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) pidfd_send_signal(r1, 0x21, 0x0, 0x4) 28.768993613s ago: executing program 2 (id=2417): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x1a, 0x3, 0x0, "9611e6d6ffc88885163200000000000000000300000000000000000083df00"}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f00000000c0)={0xc0000015}) prlimit64(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x1, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x42000, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4004844}, 0x4000404) close(r5) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) r8 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f0000000180)={0x1, r6}) r9 = dup(r7) write$UHID_INPUT(r9, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) r10 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) r11 = fsopen(&(0x7f0000000100)='tracefs\x00', 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500010300000000000000000a"], 0x14}}, 0x0) readv(r12, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/198, 0xc6}, {&(0x7f00000013c0)=""/4096, 0x1000}], 0x2) fsconfig$FSCONFIG_SET_FD(r10, 0x5, &(0x7f0000000000)='acl\x00JN\xa0\xc3\xcd,\xebL>', 0x0, r11) 27.723364834s ago: executing program 2 (id=2418): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0xfffc, @empty}], 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=@gettaction={0x28, 0x32, 0x383, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x28}}, 0x0) sendmmsg$inet6(r0, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000000040)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) 27.041304942s ago: executing program 2 (id=2419): socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x6, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000000c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x5422) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r5, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r5, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0x3) syz_usb_connect(0x0, 0xc55d79076f785d51, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000000c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000180)={0xa, 0xfffc, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0xfffffffffffffe63) close_range(r2, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xf9) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000000)) r7 = inotify_init1(0x0) fcntl$setown(r7, 0x8, 0xffffffffffffffff) fcntl$getownex(r7, 0x10, &(0x7f0000000040)={0x0, <r8=>0x0}) move_pages(r8, 0x0, 0x0, 0x0, 0x0, 0x0) 25.957106103s ago: executing program 1 (id=2387): sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3, 0x7, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x2710}, 0x10, 0x400) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000180), 0x1, 0x2) mkdirat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0) openat$dir(0xffffff9c, &(0x7f0000000240)='./file1\x00', 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x8, "ab6ef4207d3652ba"}, &(0x7f0000000300)=0x2c) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_int(r3, 0x0, 0x21, &(0x7f0000000340), &(0x7f0000000380)=0x4) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f00000003c0)={0x5d7e9f55, 0x2, 0x9d}) unlink(&(0x7f0000000400)='./file0\x00') ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000440)={0xfffffffb, 0x2, 0x80000000, 0xfffffffd, 0x5}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x34010800}, 0xc, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x8050) r5 = openat$autofs(0xffffff9c, &(0x7f00000005c0), 0x6000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000600)={{0x1, 0x1, 0x18, <r6=>r2}, './file1/file0\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r6) sendmsg$NL80211_CMD_START_P2P_DEVICE(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, r7, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x77}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x44011}, 0x4000000) sendto$inet6(r6, &(0x7f0000000780)="2a90fa0d71f644ccb2bbf77daa9a9dbedcc509b4842516543e7e0691d58e76058394d9b1cd0adf7ab4b2d02e0ab5ba219d14834389e5f78ad3de0c7596a5c23f43a8989652b91e04444a9202a8d9faeb1a05ac6efbcd5c24eb69f53023cf3efe4bb7d7c6a58b94186596bf3a5fb1e8a99e8fc9fbc900c15ac05ba589e0bcaa9e2854ab35941096e007cd9b4e769176ff9493b64f350e4680976559e8d14141c8dbd238dcdb5c0a054fe0241ca90c6e3c8664236a091f8e73b0cdae5bfa9bf0b14bcd62da03c4a9ef5c91c9c0abb4e5d7d7b0df3f588b87f689a13cb0c5706e0098", 0xe1, 0x4051, &(0x7f0000000880)={0xa, 0x4e23, 0x8, @mcast2, 0x9}, 0x1c) syz_emit_ethernet(0xed, &(0x7f00000008c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @random="52f94a3cbcab", @void, {@ipv4={0x800, @icmp={{0xd, 0x4, 0x0, 0x27, 0xdf, 0x68, 0x0, 0xa, 0x1, 0x0, @multicast2, @broadcast, {[@generic={0x82, 0x6, "4341d13d"}, @generic={0x5, 0x10, "ad78c914594657abea96d80941b7"}, @timestamp={0x44, 0x4, 0x4d, 0x0, 0x8}, @ra={0x94, 0x4}]}}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0xb, 0x0, {0x28, 0x4, 0x1, 0x0, 0xe, 0x68, 0x7, 0x3, 0xff, 0xfffd, @multicast1, @local, {[@timestamp_addr={0x44, 0x2c, 0xc6, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x28}}, {@private=0xa010100}, {@rand_addr=0x64010100, 0x3}, {@empty, 0x3}, {@local, 0xffff07c1}]}, @cipso={0x86, 0x18, 0xffffffffffffffff, [{0x1, 0x5, "b60f3c"}, {0x0, 0xd, "daecd8d99f95781403848c"}]}, @ssrr={0x89, 0x27, 0x1e, [@private=0xa010100, @rand_addr=0x64010102, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast1, @empty, @remote]}, @generic={0x44, 0x5, "ad85d5"}, @timestamp_prespec={0x44, 0x1c, 0xbf, 0x3, 0x1, [{@broadcast, 0x3}, {@private=0xa010101, 0xff}, {@remote, 0xffff}]}]}}, "4f988f"}}}}}, &(0x7f0000000a00)={0x0, 0x4, [0x453, 0x384, 0x993, 0x15]}) r8 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x2, &(0x7f0000000a40)) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000b00)={{{@in6=@private0, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f0000000c00)=0xe4) r10 = getgid() getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000c40)={{{@in6=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in=@local}, 0x0, @in=@private}}, &(0x7f0000000d40)=0xe4) syz_mount_image$fuse(&(0x7f0000000a80), &(0x7f0000000ac0)='./file1\x00', 0x2000800, &(0x7f0000000d80)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r9}, 0x2c, {'group_id', 0x3d, r10}, 0x2c, {[{@default_permissions}, {@allow_other}, {@allow_other}, {@allow_other}, {@default_permissions}, {@allow_other}], [{@flag='nolazytime'}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@fsname={'fsname', 0x3d, '/dev/autofs\x00'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>', r11}}, {@obj_role={'obj_role', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}]}}, 0x1, 0x0, &(0x7f0000000ec0)="53778c610b1651e55949d1ba90c08c7ee3606e86a7971ad744ab88317866e451c5cc9aa978fb4299dea5da707002fa9bd7aa269fd6cd13c290d857ac870894d7edb4b72e93e9bba72143f46e54dc176cb811006a14421f2a500e1817b231255dcebbdc9ef16f38d5616740b1a1e01a3b0608a42fad979de2401fcef506375218f5970aa2094ceada3a0c666d375ae047b981402a129287a9a47abae86e74c7dc567ebbbc3a477484b52f000ae38745605a31f4d9b7a5630f2f429f") syz_fuse_handle_req(r6, 0xfffffffffffffffe, 0x0, &(0x7f0000001680)={&(0x7f0000000f80)={0x50, 0x0, 0x80, {0x7, 0x28, 0xfffffff2, 0x60, 0x400, 0x95a8, 0x6, 0xfffffffe}}, &(0x7f0000001000)={0x18, 0x0, 0xe6, {0x6}}, &(0x7f0000001040)={0x18, 0xfffffffffffffffe, 0xbbe, {0xfffffffffffffff8}}, &(0x7f0000001080)={0x18, 0x0, 0x9, {0xdf}}, &(0x7f00000010c0)={0x18, 0x0, 0x8, {0x8}}, &(0x7f0000001100)={0x28, 0x0, 0x147000, {{0x8, 0x9, 0x1, r8}}}, &(0x7f0000001140)={0x60, 0xfffffffffffffffe, 0xfffffffffffffff8, {{0xffff, 0x3, 0x6, 0x0, 0x1, 0x6, 0x3, 0x8000}}}, &(0x7f00000011c0)={0x18, 0x0, 0x9, {0x800}}, &(0x7f0000001200)={0x18, 0xffffffffffffffda, 0x7, {'ethtool\x00'}}, &(0x7f0000001240)={0x20, 0x0, 0x6, {0x0, 0x2}}, &(0x7f0000001280)={0x78, 0x0, 0xbd5, {0x6, 0xff, 0x0, {0x0, 0xfffffffffffffff8, 0xf8df, 0x9, 0x732c, 0x0, 0x5, 0x80, 0x400000, 0xa000, 0x6, r9, r10, 0x65, 0x800}}}, &(0x7f0000001300)={0x90, 0x0, 0x3a, {0x0, 0x1, 0xf, 0x7f, 0x2, 0x81, {0x6, 0xffffffff00000001, 0x800, 0xfffffffffffffff4, 0x2, 0x6c, 0x9, 0x28ef, 0xbaf, 0xc000, 0x9, r11, 0x0, 0x8, 0x9}}}, &(0x7f00000013c0)={0xc0, 0xffffffffffffffda, 0x7fff, [{0x6, 0x100000001, 0x1, 0x6, '@'}, {0x0, 0x6, 0xa, 0x8, 'nolazytime'}, {0x0, 0x5, 0x5, 0x6, '-,#^('}, {0x6, 0x0, 0xa, 0x2, 'nolazytime'}, {0x4, 0x80000001, 0x5, 0x4, 'fuse\x00'}]}, &(0x7f00000014c0)={0xb0, 0xffffffffffffffda, 0x1, [{{0x3, 0x1, 0x401, 0x7fffffff, 0x6, 0x0, {0x0, 0x6c, 0x80, 0x5, 0x100000000, 0x5, 0xffff753e, 0x8, 0x8, 0x1000, 0x7, r9, 0x0, 0x9, 0x2}}, {0x0, 0x100, 0x6, 0x80000001, '{^\\.,{'}}]}, &(0x7f0000001580)={0xa0, 0x0, 0x7, {{0x6, 0x3, 0x6, 0x10f2, 0x4, 0x1, {0x3, 0xff, 0x2, 0x6, 0x8, 0x2, 0x101, 0x7b, 0x4, 0xa000, 0x8, r11, r10, 0x2, 0x1ff}}, {0x0, 0xe}}}, &(0x7f0000001640)={0x20, 0x0, 0x5, {0x4, 0x0, 0xd0, 0x57fb41b8}}}) 25.681034575s ago: executing program 0 (id=2391): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000500010073797a300000000014000000020a0103000000000000000000000000140000001100010000000000000000000000000a"], 0x88}}, 0x0) 25.596280895s ago: executing program 1 (id=2420): r0 = socket$inet(0x2, 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = userfaultfd(0x80001) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1000, 0x800, 0x0) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, <r6=>0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000001200)={0x50, 0x0, r6}, 0x50) read$FUSE(r5, &(0x7f0000004340)={0x2020, 0x0, <r7=>0x0}, 0x2020) write$FUSE_INTERRUPT(r5, &(0x7f0000000200)={0x10, 0x0, r7}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', <r8=>0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) write$binfmt_elf64(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x10, 0x1, 0x9, 0x8, 0x8, 0x2, 0x3e, 0x800, 0x3bc, 0x40, 0x2d, 0x10, 0x0, 0x38, 0x2, 0x8000, 0x7, 0x4}, [{0x1, 0x9, 0x800, 0xff, 0x10001, 0x2, 0xfffffffffffffff9, 0x102}, {0x2, 0x1000, 0x8000, 0x8, 0x9, 0x7, 0x3, 0x7ff}], "985775b17dc8e1348eb13a91c9b61b4208e093c824fff54d8bb1d43ff23933e6c2e9f125259d40", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9d7) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000c6a000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f00002a0000/0x4000)=nil) mlock(&(0x7f0000408000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="2b68756765746c62202d696f202d637075202d637075202d64657669636573202d63707561636374202b6e65745f7072696f2000706964732094215eee3d86e5ac11080adeb90102d6514590b93da80beea7a774f83aaa9e98d575f84bb4a18c8b4d77fed5db6e1debd4a9c45220c6061d5f7f2472c5"], 0x39) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000fc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000140)=[0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0x9c, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000e40), 0x8, 0xa0, 0x8, 0x8, &(0x7f0000000e80)}}, 0x10) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x3e}, @local}, 0xc) 24.979523568s ago: executing program 0 (id=2421): r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000240)=[{}], 0x1, 0x7ff) ppoll(&(0x7f0000000080)=[{r0, 0x8201}], 0x1, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x10000001}) (fail_nth: 6) 24.926012178s ago: executing program 1 (id=2422): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r1=>0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r3=>0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) (async) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x4090) (async) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x4090) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r9=>0x0}) socket$inet6(0xa, 0x6, 0x0) (async) socket$inet6(0xa, 0x6, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/block/ram8', 0x0, 0x0) getdents64(r10, &(0x7f0000000080)=""/158, 0x9e) close(0x4) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x141042, 0x0) (async) r11 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x141042, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r11, 0xc004500a, &(0x7f0000000200)=0x12) ioctl$SNDCTL_DSP_GETBLKSIZE(r11, 0xc0045004, 0x0) (async) ioctl$SNDCTL_DSP_GETBLKSIZE(r11, 0xc0045004, 0x0) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x40}}, 0x0) ioctl$TCFLSH(r10, 0x540b, 0x1) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 24.402639112s ago: executing program 2 (id=2423): r0 = socket$isdn(0x22, 0x2, 0x22) bind$isdn(r0, &(0x7f0000000040), 0x6) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000550001002bbd70000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0102010000000000000000000000ffffe000000208000000"], 0xffffffffffffffae}, 0x1, 0xf00}, 0x0) 24.290147769s ago: executing program 0 (id=2424): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xc82, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r3, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x8, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0x8, 0x8, 0x0, 0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000100)={0x0, 0xa00}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x334, 0x118, 0x600, 0x148, 0x118, 0x148, 0x1e8, 0x240, 0x240, 0x1e8, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x188, 0x1d0, 0x0, {}, [@inet=@rpfilter={{0x24}}, @inet]}, @common=@SET}, {{@uncond, 0x0, 0xb0, 0xd0, 0x0, {}, [@common=@set={{0x40}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3b3) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xd) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x50}, {&(0x7f0000000440)="82fb5892628fdbb93d8414ae", 0xc}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={0xffffffffffffffff, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40), <r7=>0x0, 0x9c, &(0x7f0000000b80), 0x0, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0x74, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r7, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000a0000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = getpid() r10 = inotify_init1(0x0) fcntl$setown(r10, 0x8, 0xffffffffffffffff) fcntl$getownex(r10, 0x10, &(0x7f0000000040)={0x0, <r11=>0x0}) kcmp(r9, r11, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000006c0)=""/185, 0xb9}, {&(0x7f0000004300)=""/4103, 0x1007}, {&(0x7f0000000340)=""/60, 0x3c}, {&(0x7f0000000240)=""/108, 0x6c}], 0x4}, 0x40000020) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0xffffffffffffff40, 0x0}, 0x40000122) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 24.234085722s ago: executing program 1 (id=2425): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00', <r1=>0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x650700, 0x188) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', <r4=>0x0}) bind$packet(r3, &(0x7f00000002c0)={0x11, 0xc, r4, 0x1, 0x3, 0x6, @broadcast}, 0x14) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfffffd9d) sendfile(r2, r5, 0x0, 0x8000002b) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x5c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x5c}}, 0x0) 19.622846665s ago: executing program 3 (id=2429): r0 = socket(0x11, 0x800000003, 0x0) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r3=>0x0}) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3d, 0x0, 0x1}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x40, r1, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r7=>0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000690bb741", @ANYRES32=r7], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r8=>0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xcc, r1, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4b}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xe}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x40}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x7}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xec}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff51}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x6}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x7}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x4e}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0xc}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x4d}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x37}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0xffff}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x8}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xad}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x35) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 17.531615528s ago: executing program 3 (id=2430): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000180)=0x80000000, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="0b030e00ebff020002004788ba96", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000002000)={0x44, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r4=>0x0}) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x5a) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r7, 0xffffffffffffffff, 0xc, 0x0, 0x0, @void, @value}, 0x20) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000002c0)={0x1, @raw_data="a73fb05f3771f0835241313588b6187916c7b0e5f1f7db307caa2c90fecaedfe56d521966c6f5ca1b46d182c443a5768c217df3ba1230934abad2e2bbd4401b182c34574db7554585d1f3cba9fc707f79a3bcec280417bb482e91562b2636266e3723b788e6010e21136df8b20e1238dc853276ba78cd4db1f7fd4cb738992e1ced9df4e9a31f534c3762ab0e345ab618406c9dcad18a65e2c9a80f2948809584a15bbf3956250db0cf5e948127560856c6d030334ab6166678f69df4dbc6af73f6eacdd4b6e23b1"}) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r1, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 14.929781657s ago: executing program 3 (id=2431): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$TIOCGPGRP(r3, 0x540f, 0x0) syz_open_dev$video(&(0x7f0000000280), 0x1, 0x101000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x59, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x0, 0x400000000000}, 0x0, &(0x7f0000000680)={0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ipv6_route\x00') preadv(r6, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0xa006, 0x0) 14.810485297s ago: executing program 4 (id=2416): syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x5f, 0x2a, 0xb4, 0x20, 0xc72, 0xd, 0x279b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0xa2, 0x92}}]}}]}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000002440)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x202000, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = getpgid(0x0) capget(&(0x7f0000000000)={0x20071026, r3}, &(0x7f0000000080)={0x6, 0x3, 0xa, 0x6, 0x7, 0xd5}) sendto$inet6(r2, &(0x7f0000847fff)="03", 0xfffffffffffffd9f, 0x0, 0x0, 0x25) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x5f, 0x2a, 0xb4, 0x20, 0xc72, 0xd, 0x279b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0xa2, 0x92}}]}}]}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000002440)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) (async) openat$hwrng(0xffffffffffffff9c, 0x0, 0x202000, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) (async) accept4(r1, 0x0, 0x0, 0x0) (async) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) getpgid(0x0) (async) capget(&(0x7f0000000000)={0x20071026, r3}, &(0x7f0000000080)={0x6, 0x3, 0xa, 0x6, 0x7, 0xd5}) (async) sendto$inet6(r2, &(0x7f0000847fff)="03", 0xfffffffffffffd9f, 0x0, 0x0, 0x25) (async) 13.531476093s ago: executing program 4 (id=2434): io_setup(0x9, &(0x7f0000000080)=<r0=>0x0) r1 = epoll_create1(0x0) r2 = eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000b80)={0xa0001011}) io_submit(r0, 0x1, &(0x7f0000000e40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) write$binfmt_misc(r2, 0x0, 0x0) 13.206865724s ago: executing program 4 (id=2435): r0 = socket$inet(0x2, 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = userfaultfd(0x80001) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1000, 0x800, 0x0) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, <r6=>0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000001200)={0x50, 0x0, r6}, 0x50) read$FUSE(r5, &(0x7f0000004340)={0x2020, 0x0, <r7=>0x0}, 0x2020) write$FUSE_INTERRUPT(r5, &(0x7f0000000200)={0x10, 0x0, r7}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', <r8=>0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) write$binfmt_elf64(r3, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x10, 0x1, 0x9, 0x8, 0x8, 0x2, 0x3e, 0x800, 0x3bc, 0x40, 0x2d, 0x10, 0x0, 0x38, 0x2, 0x8000, 0x7, 0x4}, [{0x1, 0x9, 0x800, 0xff, 0x10001, 0x2, 0xfffffffffffffff9, 0x102}, {0x2, 0x1000, 0x8000, 0x8, 0x9, 0x7, 0x3, 0x7ff}], "985775b17dc8e1348eb13a91c9b61b4208e093c824fff54d8bb1d43ff23933e6c2e9f125259d4055ce00f262d2", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9dd) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000c6a000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f00002a0000/0x4000)=nil) mlock(&(0x7f0000408000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="2b68756765746c62202d696f202d637075202d637075202d64657669636573202d63707561636374202b6e65745f7072696f2000706964732094215eee3d86e5ac11080adeb90102d6514590b93da80beea7a774f83aaa9e98d575f84bb4a18c8b4d77fed5db6e1debd4a9c45220c6061d5f7f2472c5"], 0x39) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000fc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000140)=[0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0x9c, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000e40), 0x8, 0xa0, 0x8, 0x8, &(0x7f0000000e80)}}, 0x10) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x3e}, @local}, 0xc) 13.097095615s ago: executing program 3 (id=2436): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='projid_map\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x574, 0x1ec, 0x2fc, 0x0, 0x3e4, 0x10c, 0x4ac, 0x4ac, 0x4ac, 0x4ac, 0x4ac, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0x10c, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @DNPT={0x44, 'DNPT\x00', 0x0, {@ipv4=@dev, @ipv6=@private0, 0xfc}}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@ipv6={@remote, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}}, @common=@inet=@socket1={{0x24}}]}, @HL={0x24}}, {{@uncond, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4=@private}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @HL={0x24, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5d0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000480)=[{0x6}]}) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x8000) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x3, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x200, 0x0, 0x0, {[@mss={0x2, 0x4, 0xa005}]}}}}}}}, 0x0) 12.127114585s ago: executing program 3 (id=2437): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000c80)=@filter={'filter\x00', 0x42, 0x4, 0x3ec, 0xffffffff, 0x0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @dev, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x3127, 0x70, 0xb0, 0x1ba, {0x46010000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6bc128419cfb67daad5b4809088400ed00000000000000009b0000040500"}}}, {{@uncond, 0x287, 0x190, 0x1b4, 0x0, {0x0, 0x4}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@loopback, [], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0x0, 0x0, 0xffffffff], @ipv4=@multicast1, [], @ipv6=@private1}, 0x100}}, @common=@unspec=@rateest={{0x68}, {'batadv0\x00', 'bond_slave_1\x00', 0x2a, 0x0, 0x1000, 0x7a36, 0x6, 0x6, {0x2}, {0x9c}}}]}, @common=@inet=@SYNPROXY={0x24}}, {{@uncond, 0x0, 0x94, 0xf4, 0x0, {}, [@common=@inet=@set1={{0x24}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x448) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x8, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0x4305000f}}}}}}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000240)={{0x0, 0x400, 0x0, 0xd, 0x4d, 0x2, 0x1000, 0x1, 0x1, 0x3, 0x8, 0x6, 0x9, 0x1, 0x4}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) getdents(r6, &(0x7f0000000040)=""/104, 0x68) pipe(&(0x7f00000001c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0x1e}]}}}]}, 0x3c}}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f"], 0x3}}, 0x0) write$binfmt_misc(r8, &(0x7f0000000000), 0xfffffecc) splice(r7, 0x0, r9, 0x0, 0x4ffe2, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x200, 0x4) 12.126164976s ago: executing program 4 (id=2438): r0 = socket(0x11, 0x800000003, 0x0) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r3=>0x0}) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3d, 0x0, 0x1}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x40, r1, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r7=>0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000690bb741", @ANYRES32=r7], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r8=>0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xcc, r1, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4b}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xe}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x40}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x7}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xec}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff51}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x6}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x7}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x4e}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0xc}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x4d}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x37}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0xffff}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x8}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xad}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x35) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 10.420618624s ago: executing program 3 (id=2439): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpgid(0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_pidfd_open(r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func, @map_fd, @generic, @initr0, @exit, @printk={@llu, {0x2, 0x3, 0x3, 0xa, 0x0}, {0x7, 0x1, 0xc, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002600)={'wlan0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500010300000000000000000a"], 0x14}}, 0x0) r9 = syz_clone(0x40000000, &(0x7f0000001600)="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", 0x1000, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)="a945f952ac4b0fdbe42dc963a273887475685e5ac236a4b7c092d2d13207d7e00293ed1a7bdf003ff0402e20f53347d8ea71e90ba192") wait4(r9, &(0x7f0000000180), 0x4, &(0x7f00000001c0)) readv(r8, &(0x7f0000000080)=[{&(0x7f00000005c0)=""/4099, 0x1003}], 0x1) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) pidfd_send_signal(r4, 0x21, 0x0, 0x4) 0s ago: executing program 1 (id=2426): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x89e0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) kernel console output (not intermixed with test programs): ave_1) is not up; please bring it up to get a fully working HSR network [ 909.521413][T17157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 909.555976][T17157] veth0_vlan: entered promiscuous mode [ 909.568016][T17135] 8021q: adding VLAN 0 to HW filter on device team0 [ 909.762918][T17157] veth1_vlan: entered promiscuous mode [ 909.865631][ T8836] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.872868][ T8836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 909.882236][ T8836] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.889358][ T8836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 910.075261][T17135] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 910.096909][T17135] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 910.256850][T17174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 910.290961][T17135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 910.332400][T17157] veth0_macvtap: entered promiscuous mode [ 910.442022][T17157] veth1_macvtap: entered promiscuous mode [ 910.518072][ T9] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 910.534495][T17174] 8021q: adding VLAN 0 to HW filter on device team0 [ 910.549537][ T8836] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.556712][ T8836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 910.680412][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 910.691113][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 910.711671][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 910.735493][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 910.801436][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 910.804872][T17157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 910.833029][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.861846][ T9] usb 3-1: config 0 descriptor?? [ 910.873081][T17157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.920699][T17157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 910.949687][T17157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.975296][T17157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 911.000539][T17157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 911.014400][T17157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 911.047488][T17157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 911.131323][T17157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 911.153056][T17227] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 911.190398][T12493] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.197655][T12493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 911.244413][T17227] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 911.297356][T17157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 911.316436][T17157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 911.330039][ T1683] kworker/1:2 (1683) used greatest stack depth: 14616 bytes left [ 911.356927][T17157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 911.379813][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0028/input/input51 [ 911.404513][T17157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 911.415950][T17157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 911.427676][T17157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 911.438619][T17157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 911.459264][T17157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 911.483329][ T9] microsoft 0003:045E:07DA.0028: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 911.550899][T17157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 911.676353][T17227] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 911.694997][T17227] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 911.789658][T17157] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.801518][T17157] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.814833][T17157] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.826196][T17157] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.944562][T17135] veth0_vlan: entered promiscuous mode [ 912.121876][T17135] veth1_vlan: entered promiscuous mode [ 912.317115][T17174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 912.376265][T17227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 912.433732][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 912.480127][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 912.527506][T17135] veth0_macvtap: entered promiscuous mode [ 912.539704][ T9] usb 3-1: reset high-speed USB device number 75 using dummy_hcd [ 912.548374][T17227] 8021q: adding VLAN 0 to HW filter on device team0 [ 912.666371][ T8820] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 912.677625][T17135] veth1_macvtap: entered promiscuous mode [ 912.697678][ T8820] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 912.725883][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.733150][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 912.762734][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.769950][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 912.895811][T17135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 912.943695][T17135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.979735][T17135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 912.995854][T17135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.009939][T17135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 913.034017][T17135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.050687][T17135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 913.068149][T17135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.106649][T17135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 913.129724][T17135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.161759][T17135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 913.251953][T17135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 913.323845][T17135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.339879][T17135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 913.375095][T17135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.408970][T17135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 913.429733][T17135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.439793][T17135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 913.451296][T17135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.464153][T17135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 913.476451][T17135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.514224][T17135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 913.560584][T17174] veth0_vlan: entered promiscuous mode [ 913.634738][T17135] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.656474][T17135] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.667592][T17135] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.703294][T17135] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.789048][T17174] veth1_vlan: entered promiscuous mode [ 914.015436][ T5298] usb 3-1: USB disconnect, device number 75 [ 914.106928][T17227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 914.221657][T17174] veth0_macvtap: entered promiscuous mode [ 914.326145][T17174] veth1_macvtap: entered promiscuous mode [ 914.614842][T17174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.694574][T17174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.742439][T17174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.772850][T17174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.783546][T17174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.794926][T17174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.806353][T17174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.840564][T17174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.881374][T17174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.904242][T17174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.926827][T17174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.999287][T17174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.022455][T17174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 915.036285][T17174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.121979][T17174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.219089][T17174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.286401][T17174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.301099][T17174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.312418][T17174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.323584][T17174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.334991][T17174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.417217][T17174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.491488][T17174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.526114][T17174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.536886][T17174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.551030][T17174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 915.575118][ T8820] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 915.589369][T17227] veth0_vlan: entered promiscuous mode [ 915.620801][ T8820] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 915.687661][T17174] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.737254][T17174] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.746321][T17174] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.769684][T17174] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.010770][T17227] veth1_vlan: entered promiscuous mode [ 916.080676][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.104311][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.149603][ T8] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 916.302654][T12493] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.443664][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 916.473320][ T8] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 916.489526][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.503381][ T8] usb 3-1: config 0 descriptor?? [ 916.514109][ T8] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 916.673943][T12493] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.824284][ T5251] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 916.842898][ T5251] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 916.854696][ T5251] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 916.865202][ T5251] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 916.876299][ T5251] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 916.885736][ T5251] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 916.939707][ T8820] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.947604][ T8820] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.988653][T17227] veth0_macvtap: entered promiscuous mode [ 917.088858][T12493] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.183780][T17227] veth1_macvtap: entered promiscuous mode [ 917.346329][T12493] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.432031][T17227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.440837][T16935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.453927][T16935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.475629][T17227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.502331][T17227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.519610][T17227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.539646][T17227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.569091][T17227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.589622][T17227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.631175][T17227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.684410][T17227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.743793][T17227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.776546][T17227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.818626][T17227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.837777][T17227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.850922][ T8] gspca_nw80x: reg_w err -110 [ 917.855947][ T8] nw80x 3-1:0.0: probe with driver nw80x failed with error -110 [ 917.886176][T17227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.918596][T17227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 918.081901][T17227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.099404][T17227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.110534][ T9542] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 918.132726][T17227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.150941][T17227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.166001][T17227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.187649][T17227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.198764][T17227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.218284][T17227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.229254][T17227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.240879][T17227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.250801][T17227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.263830][T17227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.274758][T17227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.280186][ T9542] usb 4-1: Using ep0 maxpacket: 16 [ 918.287503][T17227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.303120][ T9542] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 918.308095][T17227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 918.328137][T17227] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.338901][T17227] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.347843][T17227] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.356690][T17227] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.382939][ T9542] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 918.413334][ T9542] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 918.428592][ T9542] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 918.448323][ T5299] usb 3-1: USB disconnect, device number 76 [ 918.455195][ T9542] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.508558][ T9542] usb 4-1: config 0 descriptor?? [ 918.562508][T17505] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2299'. [ 918.594849][T17505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2299'. [ 918.919777][T11764] Bluetooth: hci4: command tx timeout [ 918.986378][T12493] bridge_slave_1: left allmulticast mode [ 919.003933][ T9542] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0029/input/input52 [ 919.014852][ T8836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.036183][T12493] bridge_slave_1: left promiscuous mode [ 919.088255][ T8836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.095919][T12493] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.150382][ T9542] microsoft 0003:045E:07DA.0029: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 919.275099][T12493] bridge_slave_0: left allmulticast mode [ 919.291641][T12493] bridge_slave_0: left promiscuous mode [ 919.304659][T12493] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.321565][ T5298] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 919.480434][ T5298] usb 5-1: Using ep0 maxpacket: 32 [ 919.497049][ T5298] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 919.514458][ T5298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.535955][ T5298] usb 5-1: Product: syz [ 919.544381][ T5298] usb 5-1: Manufacturer: syz [ 919.549191][ T5298] usb 5-1: SerialNumber: syz [ 919.571481][ T5298] usb 5-1: config 0 descriptor?? [ 919.586954][ T5298] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 920.262137][ T9542] usb 4-1: reset high-speed USB device number 75 using dummy_hcd [ 920.460672][T12493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 920.485454][T12493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 920.505427][T12493] bond0 (unregistering): Released all slaves [ 920.788147][T17525] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2332'. [ 920.958663][ T7520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 921.000062][T11764] Bluetooth: hci4: command tx timeout [ 921.015593][ T7520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 921.042459][T17513] IPv6: NLM_F_REPLACE set, but no existing node found! [ 921.087219][ T5298] gspca_stk1135: reg_w 0xf err -71 [ 921.094526][ T5298] gspca_stk1135: serial bus timeout: status=0x00 [ 921.101394][ T5298] gspca_stk1135: Sensor write failed [ 921.106754][ T5298] gspca_stk1135: serial bus timeout: status=0x00 [ 921.113964][ T5298] gspca_stk1135: Sensor write failed [ 921.119880][ T5298] gspca_stk1135: serial bus timeout: status=0x00 [ 921.126271][ T5298] gspca_stk1135: Sensor read failed [ 921.132128][ T5298] gspca_stk1135: serial bus timeout: status=0x00 [ 921.138514][ T5298] gspca_stk1135: Sensor read failed [ 921.144477][ T5298] gspca_stk1135: Detected sensor type unknown (0x0) [ 921.151563][ T5298] gspca_stk1135: serial bus timeout: status=0x00 [ 921.157932][ T5298] gspca_stk1135: Sensor read failed [ 921.163866][ T5298] gspca_stk1135: serial bus timeout: status=0x00 [ 921.170448][ T5298] gspca_stk1135: Sensor read failed [ 921.175724][ T5298] gspca_stk1135: serial bus timeout: status=0x00 [ 921.182279][ T5298] gspca_stk1135: Sensor write failed [ 921.187637][ T5298] gspca_stk1135: serial bus timeout: status=0x00 [ 921.194178][ T5298] gspca_stk1135: Sensor write failed [ 921.199654][ T5298] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 921.212902][ T5298] usb 5-1: USB disconnect, device number 64 [ 921.379367][ T51] usb 4-1: USB disconnect, device number 75 [ 921.408352][T17485] chnl_net:caif_netlink_parms(): no params data found [ 921.762347][T12493] hsr_slave_0: left promiscuous mode [ 921.768907][T12493] hsr_slave_1: left promiscuous mode [ 921.776874][T12493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 921.784533][T12493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 921.866551][T12493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 921.874442][T12493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 922.025792][T12493] veth1_macvtap: left promiscuous mode [ 922.035196][T12493] veth0_macvtap: left promiscuous mode [ 922.043446][T12493] veth1_vlan: left promiscuous mode [ 922.078346][T17542] fuse: Bad value for 'fd' [ 922.080320][T12493] veth0_vlan: left promiscuous mode [ 922.428051][ T29] audit: type=1800 audit(1727940742.097:469): pid=17550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2335" name="/" dev="fuse" ino=1 res=0 errno=0 [ 922.568931][T17562] FAULT_INJECTION: forcing a failure. [ 922.568931][T17562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 922.589691][T17562] CPU: 1 UID: 0 PID: 17562 Comm: syz.3.2337 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 922.600534][T17562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 922.610631][T17562] Call Trace: [ 922.613927][T17562] <TASK> [ 922.616869][T17562] dump_stack_lvl+0x241/0x360 [ 922.621568][T17562] ? __pfx_dump_stack_lvl+0x10/0x10 [ 922.626778][T17562] ? __pfx__printk+0x10/0x10 [ 922.631410][T17562] ? __pfx_lock_release+0x10/0x10 [ 922.636461][T17562] should_fail_ex+0x3b0/0x4e0 [ 922.641253][T17562] _copy_to_user+0x2f/0xb0 [ 922.645688][T17562] do_proc_control+0x83c/0xfe0 [ 922.650519][T17562] ? __pfx_do_proc_control+0x10/0x10 [ 922.655825][T17562] ? __might_fault+0xaa/0x120 [ 922.660531][T17562] ? __might_fault+0xc6/0x120 [ 922.665221][T17562] usbdev_ioctl+0x3d51/0x6120 [ 922.670013][T17562] ? kernel_text_address+0xa7/0xe0 [ 922.675146][T17562] ? __pfx_usbdev_ioctl+0x10/0x10 [ 922.680185][T17562] ? unwind_get_return_address+0x4d/0x90 [ 922.685843][T17562] ? arch_stack_walk+0xfd/0x150 [ 922.690910][T17562] ? stack_trace_save+0x118/0x1d0 [ 922.695955][T17562] ? __pfx_stack_trace_save+0x10/0x10 [ 922.701368][T17562] ? stack_depot_save_flags+0x29/0x830 [ 922.706856][T17562] ? kasan_save_track+0x51/0x80 [ 922.711720][T17562] ? kasan_save_track+0x3f/0x80 [ 922.716584][T17562] ? kasan_save_free_info+0x40/0x50 [ 922.721806][T17562] ? __kasan_slab_free+0x59/0x70 [ 922.726795][T17562] ? kfree+0x1a0/0x440 [ 922.730881][T17562] ? tomoyo_path_number_perm+0x68d/0x880 [ 922.736526][T17562] ? security_file_ioctl_compat+0xc6/0x2a0 [ 922.742355][T17562] ? __se_compat_sys_ioctl+0xd6/0xc90 [ 922.747742][T17562] ? do_vfs_ioctl+0xf08/0x2e40 [ 922.752533][T17562] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 922.757574][T17562] ? mark_lock+0x9a/0x360 [ 922.761931][T17562] ? tomoyo_path_number_perm+0x208/0x880 [ 922.767587][T17562] ? __pfx_lock_release+0x10/0x10 [ 922.772638][T17562] ? lockdep_hardirqs_on+0x99/0x150 [ 922.777865][T17562] ? kfree+0x1a0/0x440 [ 922.781955][T17562] ? tomoyo_path_number_perm+0x68d/0x880 [ 922.787618][T17562] ? tomoyo_path_number_perm+0x71a/0x880 [ 922.793289][T17562] ? tomoyo_path_number_perm+0x208/0x880 [ 922.798952][T17562] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 922.804978][T17562] ? __pfx_lock_acquire+0x10/0x10 [ 922.810142][T17562] ? __fget_files+0x29/0x470 [ 922.814760][T17562] ? __fget_files+0x3f3/0x470 [ 922.819468][T17562] __se_compat_sys_ioctl+0x510/0xc90 [ 922.824877][T17562] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 922.830715][T17562] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 922.836717][T17562] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 922.843162][T17562] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 922.849782][T17562] ? lockdep_hardirqs_on+0x99/0x150 [ 922.855038][T17562] __do_fast_syscall_32+0xb4/0x110 [ 922.860176][T17562] ? exc_page_fault+0x590/0x8c0 [ 922.865054][T17562] do_fast_syscall_32+0x34/0x80 [ 922.869925][T17562] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 922.876311][T17562] RIP: 0023:0xf7f53579 [ 922.880391][T17562] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 922.900035][T17562] RSP: 002b:00000000f56d656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 922.908468][T17562] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000c0105500 [ 922.916474][T17562] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 922.924461][T17562] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 922.932443][T17562] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 922.940424][T17562] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 922.948420][T17562] </TASK> [ 923.080237][T11764] Bluetooth: hci4: command tx timeout [ 923.158109][T17569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2338'. [ 923.213998][T17569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2338'. [ 924.093700][T12493] team0 (unregistering): Port device team_slave_1 removed [ 924.158259][T12493] team0 (unregistering): Port device team_slave_0 removed [ 925.160290][T11764] Bluetooth: hci4: command tx timeout [ 925.486881][T17577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2343'. [ 925.670192][ T5298] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 925.774853][T17485] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.797987][T17485] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.816436][T17485] bridge_slave_0: entered allmulticast mode [ 925.831805][T17485] bridge_slave_0: entered promiscuous mode [ 925.875457][ T5298] usb 3-1: Using ep0 maxpacket: 16 [ 925.933990][ T5298] usb 3-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 925.950490][ T5298] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.962417][ T5298] usb 3-1: Product: syz [ 925.966893][ T5298] usb 3-1: Manufacturer: syz [ 925.973631][ T5298] usb 3-1: SerialNumber: syz [ 925.983533][ T5298] usb 3-1: config 0 descriptor?? [ 926.063988][T17485] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.110060][T17485] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.119443][ T5251] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 926.134541][ T5251] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 926.166833][ T5251] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 926.170345][T17485] bridge_slave_1: entered allmulticast mode [ 926.184110][ T5251] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 926.195978][T17485] bridge_slave_1: entered promiscuous mode [ 926.209216][ T5251] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 926.239662][ T5251] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 926.262327][T17578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.263156][T17353] udevd[17353]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 926.319764][T17578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.358118][T17578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.455686][T17578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.563944][T17485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 926.609663][T17578] dummy0: entered promiscuous mode [ 926.625667][T17578] dummy0: left promiscuous mode [ 926.685334][T17485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 926.708395][ T8] usb 3-1: USB disconnect, device number 77 [ 926.801809][T17485] team0: Port device team_slave_0 added [ 926.811338][T17485] team0: Port device team_slave_1 added [ 926.945545][T17485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 926.954422][T17485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 926.983899][T17485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 926.996749][T17485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 927.003912][T17485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 927.030021][T17485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 927.477078][T17485] hsr_slave_0: entered promiscuous mode [ 927.508560][T17485] hsr_slave_1: entered promiscuous mode [ 927.714416][T12493] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.732839][ T5294] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 927.919962][ T5294] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 927.929097][ T5294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.949018][ T5294] usb 2-1: config 0 descriptor?? [ 928.241016][T17622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2350'. [ 928.287524][T12493] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.360568][ T5251] Bluetooth: hci5: command tx timeout [ 928.438670][T17591] chnl_net:caif_netlink_parms(): no params data found [ 928.716043][T12493] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.791012][ T5298] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 928.962427][ T5298] usb 4-1: Using ep0 maxpacket: 32 [ 928.971810][ T5298] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 928.987141][ T5298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.003711][ T5294] usb 2-1: Cannot set autoneg [ 929.014931][ T5298] usb 4-1: config 0 descriptor?? [ 929.024575][ T5298] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 929.032648][ T5294] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 929.086823][ T5294] usb 2-1: USB disconnect, device number 79 [ 929.155968][T12493] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.229643][T17591] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.236909][T17591] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.258753][T17591] bridge_slave_0: entered allmulticast mode [ 929.272589][T17591] bridge_slave_0: entered promiscuous mode [ 929.482554][T17591] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.490627][T17591] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.498682][T17591] bridge_slave_1: entered allmulticast mode [ 929.509812][ T5294] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 929.539733][T17591] bridge_slave_1: entered promiscuous mode [ 929.667870][T17591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 929.677273][ T5294] usb 2-1: Using ep0 maxpacket: 16 [ 929.699846][ T5294] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 929.719918][ T5294] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 929.739602][ T5294] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 929.752354][ T5294] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 929.765338][ T5294] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 929.801361][T17591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 929.811544][ T5294] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.829613][ T5294] usb 2-1: Product: syz [ 929.836345][ T5294] usb 2-1: Manufacturer: syz [ 929.846101][ T5294] usb 2-1: SerialNumber: syz [ 930.179022][ T5294] usb 2-1: USB disconnect, device number 80 [ 930.254142][T17353] udevd[17353]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 930.275404][T17591] team0: Port device team_slave_0 added [ 930.359850][ T5298] gspca_nw80x: reg_w err -110 [ 930.364834][ T5298] nw80x 4-1:0.0: probe with driver nw80x failed with error -110 [ 930.440327][ T5251] Bluetooth: hci5: command tx timeout [ 930.500646][T17591] team0: Port device team_slave_1 added [ 930.535949][ T5298] usb 4-1: USB disconnect, device number 76 [ 930.705618][T17591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 930.765226][T17591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 930.859878][T17591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 930.874241][T12493] bridge_slave_1: left allmulticast mode [ 930.883234][T12493] bridge_slave_1: left promiscuous mode [ 930.885314][T17666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2359'. [ 930.894002][T12493] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.914913][T12493] bridge_slave_0: left allmulticast mode [ 930.925696][T12493] bridge_slave_0: left promiscuous mode [ 930.941162][T12493] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.629831][ T5296] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 931.796807][T12493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 931.808491][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.811108][ T5296] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 931.820533][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.826570][ T5296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.852688][ T5296] usb 4-1: config 0 descriptor?? [ 931.861414][ T5296] cp210x 4-1:0.0: cp210x converter detected [ 931.875386][T12493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 931.890684][T12493] bond0 (unregistering): Released all slaves [ 931.913100][T17591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 931.922531][T17591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 931.993515][T17591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 932.428985][T17591] hsr_slave_0: entered promiscuous mode [ 932.481467][T17684] fuse: Bad value for 'fd' [ 932.494866][T17591] hsr_slave_1: entered promiscuous mode [ 932.501952][ T5296] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 932.520156][ T5251] Bluetooth: hci5: command tx timeout [ 932.526760][ T5296] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 932.533409][T17591] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 932.542722][T17591] Cannot create hsr debugfs directory [ 932.563875][ T5296] usb 4-1: cp210x converter now attached to ttyUSB0 [ 932.593878][T17682] netlink: 'syz.2.2364': attribute type 10 has an invalid length. [ 932.601473][ T5296] usb 4-1: USB disconnect, device number 77 [ 932.650035][T17682] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2364'. [ 932.663075][ T5296] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 932.683047][ T5296] cp210x 4-1:0.0: device disconnected [ 932.720431][T17682] team0: entered promiscuous mode [ 932.739821][T17682] team_slave_0: entered promiscuous mode [ 932.745847][T17682] team_slave_1: entered promiscuous mode [ 932.805865][T17682] bridge0: port 3(team0) entered blocking state [ 932.828545][T17682] bridge0: port 3(team0) entered disabled state [ 932.852604][T17682] team0: entered allmulticast mode [ 932.859754][T17682] team_slave_0: entered allmulticast mode [ 932.866485][T17682] team_slave_1: entered allmulticast mode [ 932.876703][T17682] bridge0: port 3(team0) entered blocking state [ 932.883126][T17682] bridge0: port 3(team0) entered forwarding state [ 933.293713][T17485] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 933.362991][T17702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2369'. [ 933.470281][T17485] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 933.503169][T17485] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 933.711185][T12493] hsr_slave_0: left promiscuous mode [ 933.728876][T12493] hsr_slave_1: left promiscuous mode [ 933.748757][T12493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 933.757857][T12493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 933.798804][T12493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 933.899684][T12493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 933.947627][T12493] veth1_macvtap: left promiscuous mode [ 933.992263][T12493] veth0_macvtap: left promiscuous mode [ 934.003668][T12493] veth1_vlan: left promiscuous mode [ 934.030697][ T5294] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 934.059015][T12493] veth0_vlan: left promiscuous mode [ 934.230033][ T5294] usb 4-1: Using ep0 maxpacket: 32 [ 934.240190][ T5294] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 934.257781][ T5294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.345027][ T5294] usb 4-1: config 0 descriptor?? [ 934.361764][ T5294] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 934.593487][T17709] netlink: 'syz.2.2371': attribute type 1 has an invalid length. [ 934.610152][ T5251] Bluetooth: hci5: command tx timeout [ 934.636405][T17709] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2371'. [ 934.657503][T17709] openvswitch: netlink: Actions may not be safe on all matching packets [ 934.723542][T17709] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2371'. [ 934.751460][T17709] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2371'. [ 935.517316][T12493] team0 (unregistering): Port device team_slave_1 removed [ 935.633683][T12493] team0 (unregistering): Port device team_slave_0 removed [ 935.673070][ T5294] gspca_nw80x: reg_w err -110 [ 935.677884][ T5294] nw80x 4-1:0.0: probe with driver nw80x failed with error -110 [ 936.617153][T17485] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 936.654621][ T8] usb 4-1: USB disconnect, device number 78 [ 938.075191][T12493] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.164719][T17485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 938.188645][T16472] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 938.204599][T16472] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 938.214175][T16472] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 938.223499][T16472] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 938.231631][T16472] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 938.239177][T16472] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 938.388174][T12493] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.526532][T17485] 8021q: adding VLAN 0 to HW filter on device team0 [ 938.604031][T12493] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.756351][T12493] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.806094][T17591] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 938.819015][T17591] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 938.865197][ T8836] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.872431][ T8836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 938.909288][T17591] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 938.941787][T17591] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 938.983502][T12492] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.990736][T12492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 939.008217][T16472] Bluetooth: hci1: command 0x0406 tx timeout [ 939.401028][T17734] chnl_net:caif_netlink_parms(): no params data found [ 939.692718][T12493] team0: left allmulticast mode [ 939.697652][T12493] team_slave_0: left allmulticast mode [ 939.714888][T12493] team_slave_1: left allmulticast mode [ 939.721206][T12493] bridge0: port 3(team0) entered disabled state [ 939.730972][T12493] bridge_slave_1: left allmulticast mode [ 939.736997][T12493] bridge_slave_1: left promiscuous mode [ 939.743726][T12493] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.756479][T12493] bridge_slave_0: left allmulticast mode [ 939.763692][T12493] bridge_slave_0: left promiscuous mode [ 939.770968][T12493] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.364619][ T5251] Bluetooth: hci3: command tx timeout [ 940.544807][T12493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 940.568706][T12493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 940.584383][T12493] bond0 (unregistering): Released all slaves [ 941.338161][T17734] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.350007][T17734] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.357346][T17734] bridge_slave_0: entered allmulticast mode [ 941.365546][T17734] bridge_slave_0: entered promiscuous mode [ 941.380387][T17734] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.387683][T17734] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.396501][T17734] bridge_slave_1: entered allmulticast mode [ 941.407197][T17734] bridge_slave_1: entered promiscuous mode [ 941.436792][T12493] hsr_slave_0: left promiscuous mode [ 941.446120][T12493] hsr_slave_1: left promiscuous mode [ 941.463842][T12493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 941.480022][T12493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 941.508530][T12493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 941.520192][T12493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 941.594526][T12493] veth1_macvtap: left promiscuous mode [ 941.624274][T12493] veth0_macvtap: left promiscuous mode [ 942.446536][ T5251] Bluetooth: hci3: command tx timeout [ 943.018435][T12493] team_slave_1 (unregistering): left promiscuous mode [ 943.042095][T12493] team0 (unregistering): Port device team_slave_1 removed [ 943.144953][T12493] team_slave_0 (unregistering): left promiscuous mode [ 943.155608][T12493] team0 (unregistering): Port device team_slave_0 removed [ 944.104954][T17734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 944.188934][T17591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 944.244476][T17734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 944.347918][T17485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 944.394890][T17734] team0: Port device team_slave_0 added [ 944.453002][T17485] veth0_vlan: entered promiscuous mode [ 944.464537][T17485] veth1_vlan: entered promiscuous mode [ 944.488240][T17485] veth0_macvtap: entered promiscuous mode [ 944.524719][ T5251] Bluetooth: hci3: command tx timeout [ 944.608220][T17591] 8021q: adding VLAN 0 to HW filter on device team0 [ 944.654927][T17734] team0: Port device team_slave_1 added [ 944.741888][T17485] veth1_macvtap: entered promiscuous mode [ 944.843960][T17734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 944.857382][T17734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 944.884767][T17734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 944.909395][T17734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 944.917470][T17734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 944.946349][T17734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 944.963977][T17485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 944.974694][T17485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 944.985116][T17485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 944.998611][T17485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.011335][T17485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 945.030452][T17485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.041936][T17485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 945.053526][T17485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.064591][T17485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 945.076180][T17485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.091166][T17485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 945.148157][T12492] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.155441][T12492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 945.191611][T17485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.202957][T17485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.213201][T17485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.225719][T17485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.235683][T17485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.247031][T17485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.257910][T17485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.310104][T17485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.348302][T17485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 945.376548][T17485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.394285][T17485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 945.498467][T12492] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.505780][T12492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 945.555248][T17485] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.565847][T17485] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.574698][T17485] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.585794][T17485] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.642652][T17734] hsr_slave_0: entered promiscuous mode [ 945.650300][T17734] hsr_slave_1: entered promiscuous mode [ 945.656682][T17734] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 945.665605][T17734] Cannot create hsr debugfs directory [ 945.708277][T17591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 946.118019][T12493] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.413470][T12493] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.440418][T16472] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 946.452149][T16472] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 946.466205][T16472] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 946.480466][T16472] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 946.498734][T16472] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 946.511929][T16472] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 946.610019][ T5251] Bluetooth: hci3: command tx timeout [ 946.775864][T12493] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.982515][T12493] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.213559][T17591] veth0_vlan: entered promiscuous mode [ 947.305095][T17591] veth1_vlan: entered promiscuous mode [ 947.451230][T16935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 947.476413][T16935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 947.683915][T12492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 947.702471][T12492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 947.948108][T12493] bridge_slave_1: left allmulticast mode [ 947.954008][T12493] bridge_slave_1: left promiscuous mode [ 947.990693][T12493] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.063352][T12493] bridge_slave_0: left allmulticast mode [ 948.071331][T12493] bridge_slave_0: left promiscuous mode [ 948.091213][T12493] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.616755][ T5251] Bluetooth: hci0: command tx timeout [ 948.886067][T12493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 948.903922][T12493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 948.915769][T12493] bond0 (unregistering): Released all slaves [ 949.196091][T17591] veth0_macvtap: entered promiscuous mode [ 949.357376][T17591] veth1_macvtap: entered promiscuous mode [ 949.488091][T17591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 949.525220][T17591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.549608][T17591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 949.570343][T17591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.580721][T17591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 949.591604][T17591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.604268][T17591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 949.615899][T17591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.626836][T17591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 949.638439][T17591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.658006][T17591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 949.668961][T17591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.683600][T17591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 949.849042][T12493] hsr_slave_0: left promiscuous mode [ 949.942951][T12493] hsr_slave_1: left promiscuous mode [ 949.955916][T12493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 949.964022][T12493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 950.007304][T12493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 950.016254][T12493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 950.117546][T12493] veth1_macvtap: left promiscuous mode [ 950.150729][T12493] veth0_macvtap: left promiscuous mode [ 950.358581][T16472] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 950.387560][T16472] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 950.397501][T16472] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 950.408213][T16472] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 950.418082][T16472] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 950.447201][T16472] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 950.689951][ T5251] Bluetooth: hci0: command tx timeout [ 951.487057][T17859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2395'. [ 951.546494][ T29] audit: type=1326 audit(1727940771.217:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17858 comm="syz.3.2395" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 951.734602][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 952.070257][T12493] team0 (unregistering): Port device team_slave_1 removed [ 952.169598][T12493] team0 (unregistering): Port device team_slave_0 removed [ 952.539593][ T5251] Bluetooth: hci4: command tx timeout [ 952.759980][ T5251] Bluetooth: hci0: command tx timeout [ 953.128619][T17814] chnl_net:caif_netlink_parms(): no params data found [ 953.162082][T17591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.192865][T17591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.217145][T17591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.247410][T17591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.266890][T17591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.278209][T17591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.291834][T17591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.305167][T17591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.316590][T17591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.329977][T17591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.342680][T17591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 953.378421][T17864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2396'. [ 953.406440][T17864] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 953.622376][T17591] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.680244][T17591] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.689115][T17591] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.762898][T17591] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.258360][T17814] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.277975][T17814] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.302651][T17814] bridge_slave_0: entered allmulticast mode [ 954.311660][T17814] bridge_slave_0: entered promiscuous mode [ 954.319320][T17734] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 954.426140][T17814] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.459078][T17814] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.478776][T17814] bridge_slave_1: entered allmulticast mode [ 954.491262][T17814] bridge_slave_1: entered promiscuous mode [ 954.555262][T17734] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 954.600700][ T5251] Bluetooth: hci4: command tx timeout [ 954.674157][T17814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 954.694146][T17734] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 954.708352][T17814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 954.764675][T17734] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 954.841818][ T5251] Bluetooth: hci0: command tx timeout [ 954.879008][T17814] team0: Port device team_slave_0 added [ 954.903729][T17814] team0: Port device team_slave_1 added [ 955.050477][T16472] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 955.068636][T16472] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 955.078215][T16472] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 955.098702][T16472] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 955.108487][T16472] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 955.117704][T17814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 955.125265][T17814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 955.159962][T16472] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 955.182531][T17814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 955.211471][T17814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 955.220424][T17814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 955.280452][T17814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 955.317923][ T8820] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 955.331199][ T8820] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 955.477478][T17855] chnl_net:caif_netlink_parms(): no params data found [ 955.695682][T12492] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.756308][T17814] hsr_slave_0: entered promiscuous mode [ 955.773201][T17814] hsr_slave_1: entered promiscuous mode [ 955.784383][T17814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 955.793056][T17814] Cannot create hsr debugfs directory [ 955.813441][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 955.823118][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 955.972034][T12492] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.213183][T12492] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.544972][T12492] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.681858][T16472] Bluetooth: hci4: command tx timeout [ 956.746561][T17855] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.770081][T17855] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.777476][T17855] bridge_slave_0: entered allmulticast mode [ 956.803436][T17855] bridge_slave_0: entered promiscuous mode [ 956.879048][T17855] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.887716][T17855] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.912186][T17855] bridge_slave_1: entered allmulticast mode [ 956.923480][T17855] bridge_slave_1: entered promiscuous mode [ 957.122638][T17855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.133466][T17892] chnl_net:caif_netlink_parms(): no params data found [ 957.239702][T16472] Bluetooth: hci6: command tx timeout [ 957.268381][T17855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.392835][T12492] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.513916][ T29] audit: type=1400 audit(1727940777.187:471): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=5D9625292F2F2E212D pid=17923 comm="syz.4.2403" [ 957.540628][T17855] team0: Port device team_slave_0 added [ 957.754897][T12492] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.879259][T17855] team0: Port device team_slave_1 added [ 957.990114][T17932] FAULT_INJECTION: forcing a failure. [ 957.990114][T17932] name failslab, interval 1, probability 0, space 0, times 0 [ 958.015961][T12492] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.047706][T17932] CPU: 0 UID: 0 PID: 17932 Comm: syz.4.2404 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 958.058525][T17932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 958.068614][T17932] Call Trace: [ 958.071939][T17932] <TASK> [ 958.073328][T17734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 958.074888][T17932] dump_stack_lvl+0x241/0x360 [ 958.086176][T17932] ? __pfx_dump_stack_lvl+0x10/0x10 [ 958.091393][T17932] ? __pfx__printk+0x10/0x10 [ 958.096009][T17932] ? kmem_cache_alloc_lru_noprof+0x49/0x2b0 [ 958.101934][T17932] ? __pfx___might_resched+0x10/0x10 [ 958.107247][T17932] should_fail_ex+0x3b0/0x4e0 [ 958.111972][T17932] ? __d_alloc+0x31/0x700 [ 958.116321][T17932] should_failslab+0xac/0x100 [ 958.121032][T17932] ? __d_alloc+0x31/0x700 [ 958.125397][T17932] kmem_cache_alloc_lru_noprof+0x71/0x2b0 [ 958.131156][T17932] __d_alloc+0x31/0x700 [ 958.135348][T17932] d_alloc_parallel+0xdf/0x1600 [ 958.140236][T17932] ? __asan_memset+0x23/0x50 [ 958.144840][T17932] ? __asan_memset+0x23/0x50 [ 958.149439][T17932] ? lockdep_init_map_type+0xa1/0x910 [ 958.154850][T17932] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 958.160682][T17932] ? __pfx_d_alloc_parallel+0x10/0x10 [ 958.166085][T17932] ? __init_waitqueue_head+0xae/0x150 [ 958.171502][T17932] proc_fill_cache+0x296/0x420 [ 958.176321][T17932] ? __pfx_proc_pident_instantiate+0x10/0x10 [ 958.182341][T17932] ? __pfx_proc_fill_cache+0x10/0x10 [ 958.187733][T17932] ? down_read_killable+0xaaa/0xd30 [ 958.192968][T17932] ? __pfx_lock_release+0x10/0x10 [ 958.198036][T17932] ? trace_contention_end+0x3c/0x120 [ 958.203479][T17932] ? get_pid_task+0x23/0x1f0 [ 958.208097][T17932] proc_pident_readdir+0x377/0x4b0 [ 958.213258][T17932] iterate_dir+0x571/0x800 [ 958.217719][T17932] __se_sys_getdents64+0x1d3/0x4a0 [ 958.222877][T17932] ? __pfx___se_sys_getdents64+0x10/0x10 [ 958.228528][T17932] ? __pfx_filldir64+0x10/0x10 [ 958.233335][T17932] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 958.239948][T17932] ? lockdep_hardirqs_on+0x99/0x150 [ 958.245191][T17932] __do_fast_syscall_32+0xb4/0x110 [ 958.250500][T17932] ? exc_page_fault+0x590/0x8c0 [ 958.255372][T17932] do_fast_syscall_32+0x34/0x80 [ 958.260236][T17932] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 958.266581][T17932] RIP: 0023:0xf745d579 [ 958.270663][T17932] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 958.290294][T17932] RSP: 002b:00000000f574656c EFLAGS: 00000206 ORIG_RAX: 00000000000000dc [ 958.298759][T17932] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020002f40 [ 958.306861][T17932] RDX: 0000000000001002 RSI: 0000000000000000 RDI: 0000000000000000 [ 958.314849][T17932] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 958.322920][T17932] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 958.331075][T17932] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 958.339112][T17932] </TASK> [ 958.480912][T17855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 958.488199][T17855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.520804][T17855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 958.534957][T17892] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.543516][T17892] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.552105][T17892] bridge_slave_0: entered allmulticast mode [ 958.559297][T17892] bridge_slave_0: entered promiscuous mode [ 958.649418][T12492] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.718990][T17734] 8021q: adding VLAN 0 to HW filter on device team0 [ 958.731857][T16935] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.739046][T16935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 958.761344][T16472] Bluetooth: hci4: command tx timeout [ 958.962549][T17855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 958.970874][T17855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 959.043382][T17855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.102234][T17892] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.109421][T17892] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.146868][T17892] bridge_slave_1: entered allmulticast mode [ 959.195748][T17892] bridge_slave_1: entered promiscuous mode [ 959.320036][T16472] Bluetooth: hci6: command tx timeout [ 959.367515][ T8817] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.374737][ T8817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 959.616126][T17855] hsr_slave_0: entered promiscuous mode [ 959.624942][T17855] hsr_slave_1: entered promiscuous mode [ 959.639825][T17855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 959.647497][T17855] Cannot create hsr debugfs directory [ 959.694182][T17892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 959.803239][T17892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 959.870044][ T5296] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 960.007250][T17892] team0: Port device team_slave_0 added [ 960.038247][T17892] team0: Port device team_slave_1 added [ 960.046041][ T5296] usb 5-1: Using ep0 maxpacket: 8 [ 960.060586][ T5296] usb 5-1: config 1 has an invalid descriptor of length 233, skipping remainder of the config [ 960.084782][ T5296] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 960.128702][ T5296] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 960.148033][ T5296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.159098][ T5296] usb 5-1: Product: syz [ 960.166566][ T5296] usb 5-1: Manufacturer: syz [ 960.177279][ T5296] usb 5-1: SerialNumber: syz [ 960.291952][T17892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 960.298973][T17892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 960.330608][T17892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 960.359082][T12492] bridge_slave_1: left allmulticast mode [ 960.366484][T12492] bridge_slave_1: left promiscuous mode [ 960.381125][T12492] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.408100][T12492] bridge_slave_0: left allmulticast mode [ 960.430279][T12492] bridge_slave_0: left promiscuous mode [ 960.436173][T12492] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.477158][T12492] bridge_slave_1: left allmulticast mode [ 960.499629][T12492] bridge_slave_1: left promiscuous mode [ 960.504863][ T5296] usb 5-1: USB disconnect, device number 65 [ 960.506798][T12492] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.540476][T12492] bridge_slave_0: left allmulticast mode [ 960.547233][T12492] bridge_slave_0: left promiscuous mode [ 960.553808][T12492] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.370453][ T7128] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 961.400728][T16472] Bluetooth: hci6: command tx timeout [ 961.510189][ T7128] usb 5-1: device descriptor read/64, error -71 [ 961.752092][ T7128] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 961.910591][ T7128] usb 5-1: device descriptor read/64, error -71 [ 961.992480][T12492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 962.013638][T12492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 962.022750][ T7128] usb usb5-port1: attempt power cycle [ 962.035892][T12492] bond0 (unregistering): Released all slaves [ 962.299291][T12492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 962.325211][T12492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 962.359742][ T7128] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 962.381754][T12492] bond0 (unregistering): Released all slaves [ 962.392474][ T7128] usb 5-1: device descriptor read/8, error -71 [ 962.507846][T17892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 962.569094][T17892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 962.670349][ T7128] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 962.707566][T17892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 962.739096][ T7128] usb 5-1: device descriptor read/8, error -71 [ 962.852489][ T7128] usb usb5-port1: unable to enumerate USB device [ 963.027261][T17814] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 963.073710][T17814] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 963.119899][T17892] hsr_slave_0: entered promiscuous mode [ 963.126578][T17892] hsr_slave_1: entered promiscuous mode [ 963.134067][T17892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 963.142145][T17892] Cannot create hsr debugfs directory [ 963.223274][T17814] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 963.385185][T17814] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 963.479890][T16472] Bluetooth: hci6: command tx timeout [ 963.866998][T17734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 964.021805][T12492] hsr_slave_0: left promiscuous mode [ 964.047475][T12492] hsr_slave_1: left promiscuous mode [ 964.082660][T12492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 964.093808][T12492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 964.117392][T12492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 964.155822][T12492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 964.257050][T12492] hsr_slave_0: left promiscuous mode [ 964.263439][T12492] hsr_slave_1: left promiscuous mode [ 964.273401][T12492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 964.282505][T12492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 964.293975][T12492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 964.322119][T12492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 964.373793][T12492] veth1_macvtap: left promiscuous mode [ 964.379410][T12492] veth0_macvtap: left promiscuous mode [ 964.396785][T12492] veth1_vlan: left promiscuous mode [ 964.404998][T12492] veth0_vlan: left promiscuous mode [ 964.474448][T12492] veth1_macvtap: left promiscuous mode [ 964.500066][T12492] veth0_macvtap: left promiscuous mode [ 964.505764][T12492] veth1_vlan: left promiscuous mode [ 964.550991][T12492] veth0_vlan: left promiscuous mode [ 966.300634][ T5298] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 966.477493][ T5298] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 966.486892][ T5298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.509080][ T5298] usb 5-1: config 0 descriptor?? [ 966.529016][ T5298] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 966.698281][T12492] team0 (unregistering): Port device team_slave_1 removed [ 966.764474][T18023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2410'. [ 966.826499][T12492] team0 (unregistering): Port device team_slave_0 removed [ 966.846728][T18025] fuse: Bad value for 'user_id' [ 966.880645][T18025] fuse: Bad value for 'user_id' [ 967.182334][ T5298] usb 5-1: USB disconnect, device number 70 [ 969.061434][T12492] team0 (unregistering): Port device team_slave_1 removed [ 969.173108][T12492] team0 (unregistering): Port device team_slave_0 removed [ 970.251964][T17734] veth0_vlan: entered promiscuous mode [ 970.556012][T17734] veth1_vlan: entered promiscuous mode [ 970.915071][T17734] veth0_macvtap: entered promiscuous mode [ 970.963181][T17814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 971.011350][T17855] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 971.084054][T17855] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 971.327896][T17855] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 971.383782][T17855] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 971.452128][T17734] veth1_macvtap: entered promiscuous mode [ 971.587636][ T5251] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 971.602368][ T5251] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 971.628238][ T5251] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 971.647352][ T5251] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 971.670807][ T5251] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 971.679098][ T5251] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 971.753643][T17734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.781884][T17734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.804873][T17734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.827153][T17734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.853632][T17734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.900191][T17734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.940726][T17734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.982970][T17734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.996258][T17734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 972.041902][T17814] 8021q: adding VLAN 0 to HW filter on device team0 [ 972.172072][T17734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.219622][T17734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.238088][T17734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.251023][T17734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.284605][T17734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.296187][T17734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.307228][T17734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.318782][T17734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.334084][T17734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 972.405435][ T8836] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.412670][ T8836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 972.482266][ T8836] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.489529][ T8836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 972.516311][T17734] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.525373][T17734] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.534302][T17734] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.543577][T17734] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.648630][T17814] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 972.674828][T17814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 972.998089][T17855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 973.129530][T12492] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.305529][T12492] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.434580][ T8817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 973.464554][ T8817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 973.524289][T12492] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.548835][T17892] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 973.574489][T17892] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 973.691688][T17855] 8021q: adding VLAN 0 to HW filter on device team0 [ 973.719223][ T8836] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.726458][ T8836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 973.799757][T16472] Bluetooth: hci5: command tx timeout [ 973.801597][ T8836] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.813053][ T8836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 973.943011][T12492] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.000075][T17892] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 974.033554][T17892] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 974.196713][T17814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 974.277099][T16935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 974.303460][T18069] chnl_net:caif_netlink_parms(): no params data found [ 974.312673][T16935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 974.678779][T17855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 974.866337][T12492] bridge_slave_1: left allmulticast mode [ 974.883611][T12492] bridge_slave_1: left promiscuous mode [ 974.898387][T12492] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.958812][T12492] bridge_slave_0: left allmulticast mode [ 974.972276][T12492] bridge_slave_0: left promiscuous mode [ 974.979001][T12492] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.853562][T12492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 975.878519][T12492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 975.892257][T16472] Bluetooth: hci5: command tx timeout [ 975.918405][T12492] bond0 (unregistering): Released all slaves [ 976.189215][T17814] veth0_vlan: entered promiscuous mode [ 976.213541][T18069] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.227260][T18069] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.237114][T18069] bridge_slave_0: entered allmulticast mode [ 976.247804][T18069] bridge_slave_0: entered promiscuous mode [ 976.324128][T18069] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.343538][T18069] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.365973][T18069] bridge_slave_1: entered allmulticast mode [ 976.388900][T18069] bridge_slave_1: entered promiscuous mode [ 976.713017][T17814] veth1_vlan: entered promiscuous mode [ 976.723620][T18069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 976.753344][T17892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 976.768590][T17855] veth0_vlan: entered promiscuous mode [ 976.804150][T12492] hsr_slave_0: left promiscuous mode [ 976.812997][T12492] hsr_slave_1: left promiscuous mode [ 976.819305][T12492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 976.838568][T12492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 976.848936][T12492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 976.856992][T12492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 976.918279][T12492] veth1_macvtap: left promiscuous mode [ 976.929239][T12492] veth0_macvtap: left promiscuous mode [ 976.938702][T12492] veth1_vlan: left promiscuous mode [ 976.945166][T12492] veth0_vlan: left promiscuous mode [ 977.960767][T16472] Bluetooth: hci5: command tx timeout [ 977.978282][T12492] team0 (unregistering): Port device team_slave_1 removed [ 978.080969][T12492] team0 (unregistering): Port device team_slave_0 removed [ 979.112631][T18069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 979.227189][T18069] team0: Port device team_slave_0 added [ 979.237904][T18069] team0: Port device team_slave_1 added [ 979.256057][T17855] veth1_vlan: entered promiscuous mode [ 979.361792][T18069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 979.368796][T18069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 979.396218][T18069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 979.427861][T18069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 979.436455][T18069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 979.463668][T18069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 979.486537][T17892] 8021q: adding VLAN 0 to HW filter on device team0 [ 979.528011][T17814] veth0_macvtap: entered promiscuous mode [ 979.565784][ T8836] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.572999][ T8836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 979.635245][ T8836] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.642472][ T8836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 979.742071][T17814] veth1_macvtap: entered promiscuous mode [ 979.949159][T18069] hsr_slave_0: entered promiscuous mode [ 979.980092][T18069] hsr_slave_1: entered promiscuous mode [ 979.997657][T17814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 980.019258][T17814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.040495][T16472] Bluetooth: hci5: command tx timeout [ 980.041296][T17814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 980.072190][T17814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.097795][T17814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 980.158886][T17814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.192622][T17814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 980.234653][T17814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.247162][T17814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 980.272124][T17855] veth0_macvtap: entered promiscuous mode [ 980.475443][T17855] veth1_macvtap: entered promiscuous mode [ 980.516486][T17814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 980.558749][T17814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.586645][T17814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 980.616038][T17814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.627099][T17814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 980.664565][T17814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.699134][T17814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 980.719559][T17814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.732237][T17814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 980.779361][T17855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 980.858183][T17855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.878428][T17855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 980.890338][T17855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.908535][T17855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 980.938323][T17855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.949834][T17855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 980.961875][T17855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.972068][T17855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 980.982723][T17855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.014833][T17855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 981.106042][T17814] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.127668][T17814] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.138424][T17814] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.148359][T17814] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.201525][T17855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 981.218621][T17855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.239062][T17855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 981.251506][T17855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.262690][T17855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 981.276467][T17855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.287508][T17855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 981.299565][T17855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.309648][T17855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 981.320421][T17855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.337149][T17855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 981.431976][T17855] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.473053][T17855] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.495561][T17855] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.508530][T17855] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.581627][T17892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 982.202317][T12493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 982.250631][T12493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 982.303352][ T8817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 982.332756][T16935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 982.341536][T16935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 982.349032][ T8817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 982.389193][T17892] veth0_vlan: entered promiscuous mode [ 982.496329][T17892] veth1_vlan: entered promiscuous mode [ 982.609958][T12492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 982.617854][T12492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 982.649065][T18069] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 982.682308][T18069] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 982.726211][T18069] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 982.753213][T18200] fuse: Bad value for 'fd' [ 982.772883][T18069] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 982.848730][T17892] veth0_macvtap: entered promiscuous mode [ 982.897466][T17892] veth1_macvtap: entered promiscuous mode [ 983.023656][T17892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 983.030596][T18208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2391'. [ 983.036453][T17892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.054738][T17892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 983.068451][T17892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.113509][T17892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 983.138658][T17892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.158778][T17892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 983.192029][T17892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.228958][T17892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 983.269515][T17892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.298226][T17892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 983.317270][T17892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.353854][T17892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 983.439985][T17892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 983.450972][T17892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.461835][T17892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 983.475074][T17892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.505910][T17892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 983.542936][T17892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.562762][T17892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 983.573687][T17892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.593557][T17892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 983.606336][T17892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.636865][T17892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 983.654110][T17892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.666767][T17892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 983.748852][T18223] FAULT_INJECTION: forcing a failure. [ 983.748852][T18223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 983.765265][T18223] CPU: 0 UID: 0 PID: 18223 Comm: syz.0.2421 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 983.776123][T18223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 983.786228][T18223] Call Trace: [ 983.789537][T18223] <TASK> [ 983.792500][T18223] dump_stack_lvl+0x241/0x360 [ 983.797209][T18223] ? __pfx_dump_stack_lvl+0x10/0x10 [ 983.802443][T18223] ? __pfx__printk+0x10/0x10 [ 983.807076][T18223] ? snprintf+0xda/0x120 [ 983.811436][T18223] should_fail_ex+0x3b0/0x4e0 [ 983.816150][T18223] _copy_to_user+0x2f/0xb0 [ 983.820643][T18223] simple_read_from_buffer+0xca/0x150 [ 983.826078][T18223] proc_fail_nth_read+0x1e9/0x250 [ 983.831141][T18223] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 983.836729][T18223] ? rw_verify_area+0x55e/0x6f0 [ 983.841619][T18223] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 983.847226][T18223] vfs_read+0x201/0xbc0 [ 983.851500][T18223] ? __pfx_lock_release+0x10/0x10 [ 983.856646][T18223] ? __pfx_vfs_read+0x10/0x10 [ 983.861400][T18223] ? __fget_files+0x3f3/0x470 [ 983.866129][T18223] ? fdget_pos+0x24e/0x320 [ 983.870590][T18223] ksys_read+0x183/0x2b0 [ 983.874874][T18223] ? __pfx_ksys_read+0x10/0x10 [ 983.879682][T18223] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 983.886313][T18223] ? lockdep_hardirqs_on+0x99/0x150 [ 983.891543][T18223] __do_fast_syscall_32+0xb4/0x110 [ 983.896682][T18223] ? exc_page_fault+0x590/0x8c0 [ 983.901604][T18223] do_fast_syscall_32+0x34/0x80 [ 983.906512][T18223] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 983.912861][T18223] RIP: 0023:0xf73cd579 [ 983.916949][T18223] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 983.936673][T18223] RSP: 002b:00000000f56745a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 983.945113][T18223] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5674620 [ 983.953106][T18223] RDX: 000000000000000f RSI: 00000000f73bbff4 RDI: 0000000000000000 [ 983.961112][T18223] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 983.969130][T18223] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 983.977167][T18223] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 983.985183][T18223] </TASK> [ 984.138713][T17892] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.169889][T17892] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.179314][T17892] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.189163][T17892] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.422492][T16935] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.564919][T18069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 984.682461][T16935] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.941036][T16935] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.011023][T18231] delete_channel: no stack [ 985.103671][T16935] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.174657][T18069] 8021q: adding VLAN 0 to HW filter on device team0 [ 985.201387][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.214712][ T8836] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.221963][ T8836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 985.245473][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.279369][ T5251] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 985.297215][ T5251] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 985.307481][ T5251] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 985.321475][ T5251] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 985.341599][ T5251] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 985.355982][ T5251] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 985.369009][ T8836] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.376268][ T8836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 985.600898][T12492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.609907][T12492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.893416][T16935] bridge_slave_1: left allmulticast mode [ 985.905004][T16935] bridge_slave_1: left promiscuous mode [ 985.913281][T16935] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.974260][T16935] bridge_slave_0: left allmulticast mode [ 986.011716][T16935] bridge_slave_0: left promiscuous mode [ 986.028212][T16935] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.155652][T16935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 987.180333][T16935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 987.212179][T16935] bond0 (unregistering): Released all slaves [ 987.399871][ T5251] Bluetooth: hci0: command tx timeout [ 987.436797][ T29] audit: type=1326 audit(1727940807.107:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18275 comm="syz.3.2427" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 987.479015][ T29] audit: type=1326 audit(1727940807.137:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18275 comm="syz.3.2427" exe="/root/syz-executor" sig=0 arch=40000003 syscall=107 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 987.509826][ T29] audit: type=1326 audit(1727940807.137:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18275 comm="syz.3.2427" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 987.539543][ T29] audit: type=1326 audit(1727940807.137:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18275 comm="syz.3.2427" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 987.564340][ T29] audit: type=1326 audit(1727940807.137:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18275 comm="syz.3.2427" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 987.588081][ T29] audit: type=1326 audit(1727940807.137:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18275 comm="syz.3.2427" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 987.613408][ T29] audit: type=1326 audit(1727940807.137:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18275 comm="syz.3.2427" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 987.636564][ T29] audit: type=1326 audit(1727940807.147:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18275 comm="syz.3.2427" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 987.660148][ T29] audit: type=1326 audit(1727940807.147:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18275 comm="syz.3.2427" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 987.684545][ T29] audit: type=1326 audit(1727940807.147:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18275 comm="syz.3.2427" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 988.030566][T18069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 988.086433][T18242] chnl_net:caif_netlink_parms(): no params data found [ 988.205265][T16935] hsr_slave_0: left promiscuous mode [ 988.222060][T16935] hsr_slave_1: left promiscuous mode [ 988.228133][T16935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 988.293610][T16935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 988.335223][T16935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 988.380451][T16935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 988.435889][T16935] veth1_macvtap: left promiscuous mode [ 988.455179][T16935] veth0_macvtap: left promiscuous mode [ 988.503023][T16935] veth1_vlan: left promiscuous mode [ 988.515455][T16935] veth0_vlan: left promiscuous mode [ 988.906210][T18298] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2429'. [ 989.480160][ T5251] Bluetooth: hci0: command tx timeout [ 989.846272][T16935] team0 (unregistering): Port device team_slave_1 removed [ 989.925681][T16935] team0 (unregistering): Port device team_slave_0 removed [ 991.064414][T18069] veth0_vlan: entered promiscuous mode [ 991.135658][T18242] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.156357][T18242] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.179926][T18242] bridge_slave_0: entered allmulticast mode [ 991.188119][T18242] bridge_slave_0: entered promiscuous mode [ 991.229323][T18242] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.238307][ T51] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 991.259662][T18242] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.266987][T18242] bridge_slave_1: entered allmulticast mode [ 991.279836][T18242] bridge_slave_1: entered promiscuous mode [ 991.333758][T18069] veth1_vlan: entered promiscuous mode [ 991.400571][ T51] usb 4-1: Using ep0 maxpacket: 32 [ 991.406518][T18242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 991.412354][ T51] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 991.424952][ T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.455985][T18242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 991.460158][ T51] usb 4-1: config 0 descriptor?? [ 991.476517][ T51] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 991.562899][ T5251] Bluetooth: hci0: command tx timeout [ 991.574492][T18242] team0: Port device team_slave_0 added [ 991.712513][T18242] team0: Port device team_slave_1 added [ 991.856451][T18069] veth0_macvtap: entered promiscuous mode [ 991.895544][T18242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 991.918639][T18242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 991.947032][T18242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 992.015835][T18069] veth1_macvtap: entered promiscuous mode [ 992.031901][T18242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 992.039029][T18242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 992.088283][T18242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 992.122999][T18069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 992.136750][T18069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.147130][T18069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 992.185189][T18069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.212319][T18069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 992.242195][T18069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.279997][T18069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 992.300175][T18069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.322047][T18069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 992.333345][T18069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.343663][T18069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 992.359610][T18069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.381832][T18069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 992.435667][T18069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.489600][T18069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.509598][T18069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.532250][T18069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.570525][T18069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.592661][T18069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.606053][T18069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.617489][T18069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.629851][T18069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.649771][T18069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.660319][T18069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.672343][T18069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.692457][T18069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 992.754236][T18069] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.779798][ T51] gspca_nw80x: reg_w err -110 [ 992.785179][ T51] nw80x 4-1:0.0: probe with driver nw80x failed with error -110 [ 992.786102][T18069] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.809655][T18069] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.819519][T18069] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.944375][ T5297] usb 4-1: USB disconnect, device number 79 [ 993.033561][T18242] hsr_slave_0: entered promiscuous mode [ 993.047310][T18242] hsr_slave_1: entered promiscuous mode [ 993.066336][T18242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 993.074799][T18242] Cannot create hsr debugfs directory [ 993.241733][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.248835][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.288157][ T8817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 993.334688][ T8817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 993.497679][ T8820] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 993.517820][ T8820] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 993.640305][ T5251] Bluetooth: hci0: command tx timeout [ 994.069627][ T5297] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 994.250587][ T5297] usb 5-1: Using ep0 maxpacket: 32 [ 994.260525][ T5297] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 994.272309][ T5297] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.281979][ T5297] usb 5-1: Product: syz [ 994.286184][ T5297] usb 5-1: Manufacturer: syz [ 994.291476][ T5297] usb 5-1: SerialNumber: syz [ 994.302087][ T5297] usb 5-1: config 0 descriptor?? [ 994.681841][T18341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 994.715399][T18341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 994.778458][ T5297] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 994.797568][ T5297] peak_usb 5-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 995.134041][T18242] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 995.164571][ T5297] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 995.263237][T18242] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 995.280427][ T5297] usb 5-1: USB disconnect, device number 71 [ 995.310397][T18242] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 995.418056][T18242] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 995.426866][T16472] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 995.450743][T16472] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 995.460329][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 995.460350][ T29] audit: type=1326 audit(1727940815.087:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18350 comm="syz.3.2436" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x0 [ 995.461247][T16472] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 995.502983][T16472] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 995.511932][T16472] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 995.519954][T16472] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 996.154999][T18242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 996.408515][T16472] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 996.430392][T16472] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 996.439403][T16472] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 996.449747][T16472] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 996.471343][T16472] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 996.482028][T16472] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 996.624149][T18242] 8021q: adding VLAN 0 to HW filter on device team0 [ 996.943643][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.950853][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 997.062121][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.069304][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 997.195111][T18355] chnl_net:caif_netlink_parms(): no params data found [ 997.304308][T18373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2437'. [ 997.339733][T18373] netlink: 'syz.3.2437': attribute type 30 has an invalid length. [ 997.378432][T18373] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 997.422694][T18373] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 997.559806][T16472] Bluetooth: hci7: command tx timeout [ 997.876852][ T8817] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.600756][T16472] Bluetooth: hci8: command tx timeout [ 998.789138][T18355] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.822591][T18355] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.867781][T18355] bridge_slave_0: entered allmulticast mode [ 998.909747][T18355] bridge_slave_0: entered promiscuous mode [ 998.960335][T18355] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.008598][T18355] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.035411][T18355] bridge_slave_1: entered allmulticast mode [ 999.066509][T18355] bridge_slave_1: entered promiscuous mode [ 999.164440][T18242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 999.263686][ T5251] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 999.277795][ T5251] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 999.290262][ T5251] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 999.299065][ T5251] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 999.310559][ T5251] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 999.317979][ T5251] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 999.639850][ T5251] Bluetooth: hci7: command tx timeout [ 999.833749][ T8817] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.944489][T18355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1000.072766][T18355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1000.238286][T18355] team0: Port device team_slave_0 added [ 1000.269963][T18365] chnl_net:caif_netlink_parms(): no params data found [ 1000.694839][ T5251] Bluetooth: hci8: command tx timeout [ 1001.399844][ T5251] Bluetooth: hci5: command tx timeout [ 1001.721464][ T5251] Bluetooth: hci7: command tx timeout [ 1001.761466][T18355] team0: Port device team_slave_1 added [ 1002.235216][ T8817] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.328836][T18355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1002.344634][T18355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1002.396194][T18355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1002.481517][T18355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1002.488549][T18355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1002.613325][T18355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1002.750268][T18242] veth0_vlan: entered promiscuous mode [ 1002.761571][ T5251] Bluetooth: hci8: command tx timeout [ 1002.868009][T18355] hsr_slave_0: entered promiscuous mode [ 1002.883709][T18355] hsr_slave_1: entered promiscuous mode [ 1002.900667][T18355] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1002.908396][T18355] Cannot create hsr debugfs directory [ 1002.935291][T18242] veth1_vlan: entered promiscuous mode [ 1002.988378][T18365] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.009674][T18365] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.017031][T18365] bridge_slave_0: entered allmulticast mode [ 1003.039083][T18365] bridge_slave_0: entered promiscuous mode [ 1003.067366][T18365] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.088176][T18365] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.110310][T18365] bridge_slave_1: entered allmulticast mode [ 1003.117997][T18365] bridge_slave_1: entered promiscuous mode [ 1003.316909][T18365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1003.345756][T18365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1003.488914][ T5251] Bluetooth: hci5: command tx timeout [ 1003.795383][T18365] team0: Port device team_slave_0 added [ 1003.802636][ T5251] Bluetooth: hci7: command tx timeout [ 1003.833317][T18365] team0: Port device team_slave_1 added [ 1003.971310][T18242] veth0_macvtap: entered promiscuous mode [ 1004.094273][T18242] veth1_macvtap: entered promiscuous mode [ 1004.183191][T18365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1004.204727][T18365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1004.246061][T18365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1004.311474][T18365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1004.318489][T18365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1004.389249][T18365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1004.471120][T18242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.496824][T18242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.514878][T18242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.539994][T18242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.561481][T18242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.585424][T18242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.605960][T18242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.631565][T18242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.654191][T18242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.678774][T18242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.699789][T18242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.725670][T18242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.748203][T18242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.761979][T18242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.797654][T18242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1004.818090][T18402] chnl_net:caif_netlink_parms(): no params data found [ 1004.839928][ T5251] Bluetooth: hci8: command tx timeout [ 1004.872916][T18242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1004.899889][T18242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.920155][T18242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1004.947340][T18242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.965433][T18242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1004.989635][T18242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.009710][T18242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1005.028775][T18242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.044665][T18242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1005.069157][T18242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.080888][T18242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1005.099555][T18242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.127074][T18242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1005.144172][T18242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.161171][T18242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1005.559765][ T5251] Bluetooth: hci5: command tx timeout [ 1006.408372][ T8817] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.588196][T18355] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.653321][T18242] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.671624][T18242] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.703482][T18242] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.728405][T18242] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.880848][T18365] hsr_slave_0: entered promiscuous mode [ 1006.925716][T18365] hsr_slave_1: entered promiscuous mode [ 1006.944613][T18365] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1006.955268][T18365] Cannot create hsr debugfs directory [ 1007.158819][T18402] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.177995][T18402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.199829][T18402] bridge_slave_0: entered allmulticast mode [ 1007.207599][T18402] bridge_slave_0: entered promiscuous mode [ 1007.227388][T18402] bridge0: port 2(bridge_slave_1) entered blocking state [ 1007.249550][T18402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.256922][T18402] bridge_slave_1: entered allmulticast mode [ 1007.287748][T18402] bridge_slave_1: entered promiscuous mode [ 1007.508720][T18402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1007.553732][T18402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1007.641130][ T5251] Bluetooth: hci5: command tx timeout [ 1007.787551][T18402] team0: Port device team_slave_0 added [ 1007.838630][ T8836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1007.861560][T18402] team0: Port device team_slave_1 added [ 1007.879492][ T8836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1008.056477][T18402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1008.081125][T18402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1008.127620][T18402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1008.156113][ T8836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1008.183918][ T8836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1008.253378][T18402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1008.292573][T18402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1008.399891][T18402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1008.602152][ T30] INFO: task syz.3.2217:16746 blocked for more than 143 seconds. [ 1008.612528][ T30] Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 1008.651218][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1008.709989][ T30] task:syz.3.2217 state:D stack:23776 pid:16746 tgid:16746 ppid:16473 flags:0x20004004 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1008.836446][ T30] Call Trace: [ 1008.867687][ T30] <TASK> [ 1008.889731][ T30] __schedule+0x1895/0x4b30 [ 1008.894457][ T30] ? __pfx___schedule+0x10/0x10 [ 1008.899379][ T30] ? __pfx_lock_release+0x10/0x10 [ 1008.936960][ T30] ? schedule+0x90/0x320 [ 1008.959640][ T30] schedule+0x14b/0x320 [ 1008.963990][ T30] ? down_read+0x6a5/0xa40 [ 1008.968463][ T30] schedule_preempt_disabled+0x13/0x30 [ 1008.990116][ T30] down_read+0x705/0xa40 [ 1008.994571][ T30] ? __pfx_down_read+0x10/0x10 [ 1009.009570][ T30] ? __filemap_get_folio+0x949/0xbd0 [ 1009.015066][ T30] filemap_fault+0xd54/0x1950 [ 1009.034234][ T30] ? pte_alloc_one+0x3b2/0x5d0 [ 1009.039122][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 1009.059691][ T30] ? pte_alloc_one+0x442/0x5d0 [ 1009.064569][ T30] ? __pfx_pte_alloc_one+0x10/0x10 [ 1009.079939][ T30] __do_fault+0x135/0x460 [ 1009.084376][ T30] handle_pte_fault+0x1105/0x6800 [ 1009.108441][ T30] ? mark_lock+0x9a/0x360 [ 1009.113284][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 1009.118737][ T30] ? __lock_acquire+0x1384/0x2050 [ 1009.138728][ T30] ? __thp_vma_allowable_orders+0x39e/0x9f0 [ 1009.148899][ T30] ? mt_find+0x2a9/0x920 [ 1009.161096][ T30] ? __pfx_lock_release+0x10/0x10 [ 1009.166340][ T30] handle_mm_fault+0x1106/0x1bb0 [ 1009.181531][ T30] ? mt_find+0x2a9/0x920 [ 1009.185993][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 1009.208330][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 1009.228957][ T30] exc_page_fault+0x2b9/0x8c0 [ 1009.238240][ T30] asm_exc_page_fault+0x26/0x30 [ 1009.259640][ T30] RIP: 0023:0xf710c3a5 [ 1009.263801][ T30] RSP: 002b:00000000f753fb50 EFLAGS: 00010246 [ 1009.279570][ T30] RAX: 0000000000008640 RBX: 00000000f73dbff4 RCX: 00000000e12f02a5 [ 1009.287717][ T30] RDX: 0000000000000000 RSI: 00000000f710bc6f RDI: 0000000000000000 [ 1009.316319][ T30] RBP: 00000000f753fdb8 R08: 0000000000000000 R09: 0000000000000000 [ 1009.339655][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1009.347728][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1009.370977][ T30] </TASK> [ 1009.394078][ T30] INFO: task syz.3.2217:16748 blocked for more than 144 seconds. [ 1009.461973][ T30] Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 1009.531070][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1009.579579][ T30] task:syz.3.2217 state:D stack:23616 pid:16748 tgid:16746 ppid:16473 flags:0x20004006 [ 1009.638974][ T30] Call Trace: [ 1009.660974][ T30] <TASK> [ 1009.664008][ T30] __schedule+0x1895/0x4b30 [ 1009.668598][ T30] ? __pfx___schedule+0x10/0x10 [ 1009.736435][ T30] ? __pfx_lock_release+0x10/0x10 [ 1009.751398][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1009.757513][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1009.815490][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1009.869510][ T30] ? schedule+0x90/0x320 [ 1009.873861][ T30] schedule+0x14b/0x320 [ 1009.878090][ T30] ? down_read+0x6a5/0xa40 [ 1009.944344][ T30] schedule_preempt_disabled+0x13/0x30 [ 1009.975591][ T30] down_read+0x705/0xa40 [ 1010.012909][ T30] ? __pfx_down_read+0x10/0x10 [ 1010.017786][ T30] ? __filemap_get_folio+0x949/0xbd0 [ 1010.059542][ T30] filemap_fault+0xd54/0x1950 [ 1010.064417][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 1010.092962][ T30] ? handle_pte_fault+0x2188/0x6800 [ 1010.098273][ T30] ? __pfx_lock_release+0x10/0x10 [ 1010.148000][ T30] ? pte_alloc_one+0x442/0x5d0 [ 1010.169790][ T30] ? handle_pte_fault+0x2188/0x6800 [ 1010.175244][ T30] __do_fault+0x135/0x460 [ 1010.199708][ T30] ? handle_pte_fault+0x2188/0x6800 [ 1010.205020][ T30] handle_pte_fault+0x2d1c/0x6800 [ 1010.237802][ T30] ? mark_lock+0x9a/0x360 [ 1010.242885][ T30] ? mark_lock+0x9a/0x360 [ 1010.247375][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 1010.282502][ T30] ? __lock_acquire+0x1384/0x2050 [ 1010.287729][ T30] ? __thp_vma_allowable_orders+0x39e/0x9f0 [ 1010.314297][ T30] ? mt_find+0x2a9/0x920 [ 1010.338874][ T30] ? __pfx_lock_release+0x10/0x10 [ 1010.360988][ T30] handle_mm_fault+0x1106/0x1bb0 [ 1010.366119][ T30] ? mt_find+0x2a9/0x920 [ 1010.389596][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 1010.395019][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1010.429739][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 1010.435215][ T30] exc_page_fault+0x2b9/0x8c0 [ 1010.469782][ T30] asm_exc_page_fault+0x26/0x30 [ 1010.474775][ T30] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 1010.504407][ T30] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 1010.579608][ T30] RSP: 0018:ffffc9000426fa98 EFLAGS: 00050206 [ 1010.586041][ T30] RAX: ffffffff84b98c01 RBX: 0000000020001840 RCX: 0000000000000800 [ 1010.625446][ T30] RDX: 0000000000000001 RSI: 0000000020001840 RDI: ffff88807c7c1000 [ 1010.659525][ T30] RBP: ffffc9000426fc18 R08: ffff88807c7c17ff R09: 1ffff1100f8f82ff [ 1010.667602][ T30] R10: dffffc0000000000 R11: ffffed100f8f8300 R12: 0000000000000800 [ 1010.709528][ T30] R13: ffff88807c7c1000 R14: ffffc9000426fd78 R15: 1ffff9200084dfaf [ 1010.717696][ T30] ? _copy_from_iter+0x1e1/0x1d60 [ 1010.749764][ T30] _copy_from_iter+0x257/0x1d60 [ 1010.754739][ T30] ? __virt_addr_valid+0x183/0x530 [ 1010.792702][ T30] ? __pfx_lock_release+0x10/0x10 [ 1010.797863][ T30] ? __pfx__copy_from_iter+0x10/0x10 [ 1010.830418][ T30] ? __virt_addr_valid+0x183/0x530 [ 1010.835722][ T30] ? __virt_addr_valid+0x183/0x530 [ 1010.859680][ T30] ? __virt_addr_valid+0x45f/0x530 [ 1010.864897][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 1010.902312][ T30] ? __check_object_size+0x48e/0x900 [ 1010.907701][ T30] file_tty_write+0x4b2/0x9b0 [ 1010.929682][ T30] vfs_write+0xa6d/0xc90 [ 1010.939759][ T30] ? __pfx_tty_write+0x10/0x10 [ 1010.944625][ T30] ? __pfx_vfs_write+0x10/0x10 [ 1010.959589][ T30] ? fdget_pos+0x19a/0x320 [ 1010.964294][ T30] ksys_write+0x183/0x2b0 [ 1010.968715][ T30] ? __pfx_ksys_write+0x10/0x10 [ 1010.988609][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1011.008977][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1011.019778][ T30] __do_fast_syscall_32+0xb4/0x110 [ 1011.024987][ T30] ? exc_page_fault+0x590/0x8c0 [ 1011.069614][ T30] do_fast_syscall_32+0x34/0x80 [ 1011.074569][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1011.089586][ T30] RIP: 0023:0xf73ed579 [ 1011.093832][ T30] RSP: 002b:00000000f56d656c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1011.120059][ T30] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020001040 [ 1011.128166][ T30] RDX: 0000000000001006 RSI: 0000000000000000 RDI: 0000000000000000 [ 1011.155157][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1011.179919][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1011.187991][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1011.213917][ T30] </TASK> [ 1011.230189][ T30] [ 1011.230189][ T30] Showing all locks held in the system: [ 1011.315668][ T30] 3 locks held by kworker/u8:0/11: [ 1011.339844][ T30] #0: ffff88814bb77948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1011.399689][ T30] #1: ffffc90000107d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1011.469714][ T30] #2: ffffffff8fcd16c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 1011.486760][ T30] 1 lock held by ksoftirqd/1/24: [ 1011.503417][ T30] 1 lock held by khungtaskd/30: [ 1011.508344][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1011.580851][ T30] 2 locks held by kworker/u8:3/52: [ 1011.586179][ T30] 1 lock held by dhcpcd/4903: [ 1011.629563][ T30] #0: ffffffff8fcd16c8 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2ce/0x1aa0 [ 1011.638895][ T30] 2 locks held by getty/4998: [ 1011.700098][ T30] #0: ffff88802e4370a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1011.763880][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 1011.819638][ T30] 2 locks held by kworker/0:5/5295: [ 1011.825106][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1011.869483][ T30] #1: ffffc90004487d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1011.899779][ T30] 4 locks held by kworker/u8:16/8817: [ 1011.905339][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1011.933014][ T30] #1: ffffc900020cfd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1011.949562][ T30] #2: ffffffff8fcc4bd0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1011.977385][ T30] #3: ffffffff8fcd16c8 (rtnl_mutex){+.+.}-{3:3}, at: cleanup_net+0x6af/0xcc0 [ 1011.999659][ T30] 3 locks held by kworker/1:7/9542: [ 1012.004948][ T30] 1 lock held by syz.0.1895/15341: [ 1012.019629][ T30] #0: ffff888023732bc0 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x20e/0x490 [ 1012.058897][ T30] 2 locks held by syz.3.2217/16746: [ 1012.064710][ T30] #0: ffff88807920ea18 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x70 [ 1012.089568][ T30] #1: ffff888023732bc0 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_fault+0xd54/0x1950 [ 1012.111303][ T30] 4 locks held by syz.3.2217/16748: [ 1012.129937][ T30] #0: ffff88807c46f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1012.144707][ T30] #1: ffff88807c46f130 (&tty->atomic_write_lock){+.+.}-{3:3}, at: file_tty_write+0x1ed/0x9b0 [ 1012.166519][ T30] #2: ffff88807920ea18 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 1012.191795][ T30] #3: ffff888023732bc0 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_fault+0xd54/0x1950 [ 1012.219566][ T30] 3 locks held by kworker/u8:1/16935: [ 1012.225030][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1012.250176][ T30] #1: ffffc9001af8fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1012.275463][ T30] #2: ffffffff8fcd16c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1012.301656][ T30] 1 lock held by syz.2.2423/18232: [ 1012.306947][ T30] #0: ffff888023732bc0 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_common_ioctl+0x150b/0x2480 [ 1012.334368][ T30] 1 lock held by syz.0.2424/18236: [ 1012.348368][ T30] #0: ffff888023732bc0 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 1012.369532][ T30] 3 locks held by syz-executor/18242: [ 1012.374992][ T30] #0: ffff888056974d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 1012.402820][ T30] #1: ffff888056974078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 1012.419639][ T30] #2: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 1012.478212][ T30] 7 locks held by syz-executor/18355: [ 1012.489566][ T30] #0: ffff888023cd4420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 1012.498714][ T30] #1: ffff888065bb4888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 1012.525800][ T30] #2: ffff888027542008 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 1012.545167][ T30] #3: ffffffff8f56f7c8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1012.565291][ T30] #4: ffff888047c3b0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 1012.584970][ T30] #5: ffff88806c683250 (&devlink->lock_key#99){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 1012.609493][ T30] #6: ffffffff8fcd16c8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 1012.618648][ T30] 4 locks held by syz-executor/18365: [ 1012.639929][ T30] #0: ffff888023cd4420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 1012.649017][ T30] #1: ffff88805bee0888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 1012.673562][ T30] #2: ffff888027542008 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 1012.700007][ T30] #3: ffffffff8f56f7c8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1012.719844][ T30] 3 locks held by syz.3.2439/18383: [ 1012.725139][ T30] #0: ffff8880627acd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 1012.749404][ T30] #1: ffff8880627ac078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 1012.775678][ T30] #2: ffffffff8fe3df28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 1012.795999][ T30] 4 locks held by syz-executor/18402: [ 1012.810049][ T30] #0: ffff88807d42cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 1012.830244][ T30] #1: ffff88807d42c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 1012.849839][ T30] #2: ffffffff8fe3df28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 1012.876226][ T30] #3: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 1012.918989][ T30] [ 1012.943142][ T30] ============================================= [ 1012.943142][ T30] [ 1013.002666][ T30] NMI backtrace for cpu 0 [ 1013.007076][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 1013.017638][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1013.028102][ T30] Call Trace: [ 1013.031465][ T30] <TASK> [ 1013.034442][ T30] dump_stack_lvl+0x241/0x360 [ 1013.039173][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1013.044430][ T30] ? __pfx__printk+0x10/0x10 [ 1013.049097][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1013.054106][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1013.059716][ T30] ? _printk+0xd5/0x120 [ 1013.063929][ T30] ? __pfx__printk+0x10/0x10 [ 1013.068614][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1013.073539][ T30] ? __pfx__printk+0x10/0x10 [ 1013.078210][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1013.083299][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1013.089357][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1013.095410][ T30] watchdog+0xff4/0x1040 [ 1013.099722][ T30] ? watchdog+0x1ea/0x1040 [ 1013.104210][ T30] ? __pfx_watchdog+0x10/0x10 [ 1013.108944][ T30] kthread+0x2f0/0x390 [ 1013.113063][ T30] ? __pfx_watchdog+0x10/0x10 [ 1013.117817][ T30] ? __pfx_kthread+0x10/0x10 [ 1013.122506][ T30] ret_from_fork+0x4b/0x80 [ 1013.126986][ T30] ? __pfx_kthread+0x10/0x10 [ 1013.131631][ T30] ret_from_fork_asm+0x1a/0x30 [ 1013.136568][ T30] </TASK> [ 1013.141391][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1013.146690][ C1] NMI backtrace for cpu 1 [ 1013.146709][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 1013.146732][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1013.146746][ C1] RIP: 0010:trace_hardirqs_on+0x18/0x40 [ 1013.146777][ C1] Code: 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 8b 05 fd b9 66 7e 85 c0 74 14 48 8b 3c 24 e8 b8 fe ff ff <65> c7 05 e5 b9 66 7e 00 00 00 00 e8 18 68 d3 ff 48 8b 3c 24 e9 2f [ 1013.146794][ C1] RSP: 0018:ffffc900001e7950 EFLAGS: 00000002 [ 1013.146812][ C1] RAX: 0000000000000001 RBX: ffff88804e802e00 RCX: ffffffff819c9eac [ 1013.146827][ C1] RDX: 0000000000000000 RSI: ffffffff8c60f840 RDI: ffffffff8c60f800 [ 1013.146841][ C1] RBP: 0000000000000000 R08: ffffffff901ce5ef R09: 1ffffffff2039cbd [ 1013.146855][ C1] R10: dffffc0000000000 R11: fffffbfff2039cbe R12: ffff8880202a4b5c [ 1013.146885][ C1] R13: ffffea00013a0080 R14: 00000000000ab380 R15: 0000000000000286 [ 1013.146899][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1013.146916][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1013.146930][ C1] CR2: 0000000020084000 CR3: 000000000e734000 CR4: 00000000003526f0 [ 1013.146947][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1013.146958][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1013.146971][ C1] Call Trace: [ 1013.146978][ C1] <NMI> [ 1013.146992][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1013.147015][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1013.147046][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1013.147067][ C1] ? nmi_handle+0x2a/0x5a0 [ 1013.147095][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1013.147120][ C1] ? nmi_handle+0x14f/0x5a0 [ 1013.147140][ C1] ? nmi_handle+0x2a/0x5a0 [ 1013.147160][ C1] ? trace_hardirqs_on+0x18/0x40 [ 1013.147183][ C1] ? default_do_nmi+0x63/0x160 [ 1013.147206][ C1] ? exc_nmi+0x123/0x1f0 [ 1013.147227][ C1] ? end_repeat_nmi+0xf/0x53 [ 1013.147249][ C1] ? trace_irq_enable+0x2c/0x120 [ 1013.147273][ C1] ? trace_hardirqs_on+0x18/0x40 [ 1013.147297][ C1] ? trace_hardirqs_on+0x18/0x40 [ 1013.147321][ C1] ? trace_hardirqs_on+0x18/0x40 [ 1013.147344][ C1] </NMI> [ 1013.147351][ C1] <TASK> [ 1013.147358][ C1] kasan_quarantine_put+0xdc/0x230 [ 1013.147379][ C1] ? dst_destroy+0x2ac/0x460 [ 1013.147397][ C1] kmem_cache_free+0x1a2/0x420 [ 1013.147423][ C1] ? dst_destroy+0x2ac/0x460 [ 1013.147442][ C1] dst_destroy+0x2ac/0x460 [ 1013.147460][ C1] ? rcu_core+0xa37/0x17a0 [ 1013.147479][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 1013.147497][ C1] rcu_core+0xaaa/0x17a0 [ 1013.147523][ C1] ? __pfx_rcu_core+0x10/0x10 [ 1013.147559][ C1] handle_softirqs+0x2c5/0x980 [ 1013.147587][ C1] ? run_ksoftirqd+0xca/0x130 [ 1013.147615][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1013.147639][ C1] ? preempt_schedule+0xe1/0xf0 [ 1013.147670][ C1] run_ksoftirqd+0xca/0x130 [ 1013.147697][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 1013.147723][ C1] ? kasan_check_range+0x52/0x290 [ 1013.147747][ C1] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 1013.147774][ C1] ? smpboot_thread_fn+0x2d3/0xa30 [ 1013.147800][ C1] ? smpboot_thread_fn+0x4fb/0xa30 [ 1013.147825][ C1] ? smpboot_thread_fn+0x656/0xa30 [ 1013.147851][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 1013.147877][ C1] smpboot_thread_fn+0x544/0xa30 [ 1013.147903][ C1] ? smpboot_thread_fn+0x4e/0xa30 [ 1013.147931][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1013.147958][ C1] kthread+0x2f0/0x390 [ 1013.147975][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1013.148007][ C1] ? __pfx_kthread+0x10/0x10 [ 1013.148025][ C1] ret_from_fork+0x4b/0x80 [ 1013.148052][ C1] ? __pfx_kthread+0x10/0x10 [ 1013.148070][ C1] ret_from_fork_asm+0x1a/0x30 [ 1013.148104][ C1] </TASK> [ 1013.603394][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1013.610418][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 1013.621063][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1013.631256][ T30] Call Trace: [ 1013.634575][ T30] <TASK> [ 1013.637613][ T30] dump_stack_lvl+0x241/0x360 [ 1013.642358][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1013.647616][ T30] ? __pfx__printk+0x10/0x10 [ 1013.652267][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1013.658317][ T30] ? vscnprintf+0x5d/0x90 [ 1013.662806][ T30] panic+0x349/0x880 [ 1013.666822][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1013.673047][ T30] ? __pfx_panic+0x10/0x10 [ 1013.677528][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1013.682957][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1013.688658][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1013.694089][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1013.700387][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1013.706604][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1013.712826][ T30] watchdog+0x1033/0x1040 [ 1013.717308][ T30] ? watchdog+0x1ea/0x1040 [ 1013.721875][ T30] ? __pfx_watchdog+0x10/0x10 [ 1013.726617][ T30] kthread+0x2f0/0x390 [ 1013.730748][ T30] ? __pfx_watchdog+0x10/0x10 [ 1013.735483][ T30] ? __pfx_kthread+0x10/0x10 [ 1013.740121][ T30] ret_from_fork+0x4b/0x80 [ 1013.744604][ T30] ? __pfx_kthread+0x10/0x10 [ 1013.749257][ T30] ret_from_fork_asm+0x1a/0x30 [ 1013.754186][ T30] </TASK> [ 1013.757519][ T30] Kernel Offset: disabled [ 1013.762052][ T30] Rebooting in 86400 seconds..