Extracting prog: 3h30m58.887657109s
Minimizing prog: 47m44.212486275s
Simplifying prog options: 19m53.92931018s
Extracting C: 5m47.961019124s
Simplifying C: 0s


extracting reproducer from 99 programs
testing a last program of every proc
single: executing 49 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$usbfs-ioctl$USBDEVFS_DROP_PRIVILEGES-ioctl$USBDEVFS_RESET
detailed listing:
executing program 0:
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, 0x0)
ioctl$USBDEVFS_RESET(r0, 0x5514)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-openat$kvm-userfaultfd-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-madvise-socket$xdp-setsockopt$XDP_UMEM_REG-ioctl$UFFDIO_COPY-sendmsg$nl_route
detailed listing:
executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}}, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$hid-syz_usb_control_io-syz_usb_control_io$cdc_ncm
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="1f769a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-ioctl$KVM_CREATE_VM-mmap-mbind-get_mempolicy-openat$cgroup_ro-fcntl$lock-write$binfmt_script-mmap-syz_open_dev$tty1-dup-write$UHID_INPUT-preadv-ioctl$KVM_SET_USER_MEMORY_REGION-sendmsg$inet-socket$nl_generic-socket$nl_generic-ioctl$ifreq_SIOCGIFINDEX_wireguard-syz_genetlink_get_family_id$wireguard-sendmsg$WG_CMD_SET_DEVICE-mount$fuse-sendmsg$WG_CMD_SET_DEVICE-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86-sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD-ioctl$KVM_RUN
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0x6, 0x8, 0x0)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f00003c9000/0x3000)=nil, 0x2)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x2, 0x3, 0x20000000000000, 0x800003fffffffff3, 0xffffffffffffffff})
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
sendmsg$inet(r2, &(0x7f0000001600)={&(0x7f0000001040)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001480)=[{&(0x7f0000001080)="22a08611c01536e625d6f85bf56e82cdcaf4c617a746bdc58b81b3ea53f886c51de4a99c7207aaaeab2f7d78e294fa6b03962b3a6dee02116d2a4ac7f9448ad5ca2f230a89c3527c04f307bfc8f7f55dd1936657f9b6ab5b08760619ecd76b317a03729398d5ff4dab42e2e6d1ca9e335b992f1c5aca351e6e88cec420b2814a65fdd71f8ff772700c97496c9f9b33eadd96b6ab6b28e639554b3890799862bb1b46411fcc330e5e2e5735b3a7", 0xad}, {&(0x7f0000001140)="9c9a448719565daec968b4c3c96b3d74784788e55fbe", 0x16}, {&(0x7f0000001180)="87", 0x1}, {&(0x7f00000011c0)="e344b6865e13c8", 0x7}, {&(0x7f0000001200)="16cec6edbc9eaf659e412f599932b26cf05d2b2f14e2f1eacbbb2ad0ad9344c58e84ff4cf3d7104c47cb3442fe4a0a0d95485933ed121b9a18b05bcbe9c7ba42001c531e3deb89032e6b5186e41be8eb2406932fe0e20ac442986914ee4a6026e61518a0da64caf61c9a8b899c1c8fcb8976c350400214cdb51bce5d9b0340e3f1e3a980f8e18b8791a15eb258e3342d3ab8307b619ac4c130f8b18d6673207b89beda136277a35e3ae7a1e0e7d7b6ee", 0xb0}, {&(0x7f00000012c0)="df5e8747a60f1c5867eecdff380e1a597eebc423487482a4eb633a61dadda9e857df7672c487ee01f135f8058fd4f9a7d1e3020a1127c296534f7ea506ff900a0d88176c28f2c694cd11bc7e367ed7dfd67dfa85bc139664106f7c8d2867a38cdd81db81db80e739bdf389ff04f465044936c4640d86b9b1f856b0828d40d23d1f22ad92c4ad6dbcfca2f15e8a05d190e799536b7f38924d72ad4d6f685080fa0084ddc272fcc68d2697ceff", 0xac}, {&(0x7f0000001380)="50ee29330525e681b14e491234b1198ecf03447c2cd485483ae62cc48462024502d968fa29c2f055a1e01eb03a2708c7db057566635952856876599ea1fab9bc6c1bce59208ade14a14dff6e1ecf26b83c53f5f6710f62d113dc4dd6d9c85c761573d9a3111c703f3f62f0b2207c3c01211846e3b9801a08e9fce419e6bde353b00143b6e1a43f8b6195890af8523a16db8ea2ada13d6dc0f2b2ae19b4c475885ece2d3b98b68ef09db35d082fef4316214b75192e7099a94c0f7c9862c77eb3db1d57193e3cf7c629588a27975e334c9ab8f12ad47aaa20", 0xd8}], 0x7, &(0x7f0000001500)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_retopts={{0x54, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x2b, [@rand_addr=0x64010101, @loopback]}, @timestamp_addr={0x44, 0x1c, 0x7e, 0x1, 0x9, [{@local, 0x7}, {@local, 0x9}, {@empty, 0x6c26}]}, @timestamp={0x44, 0x1c, 0x96, 0x0, 0x7, [0x0, 0x8, 0x9, 0x3, 0x5, 0x6]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0xb8}, 0x5)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000001880)={'wg1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x40, r8, 0xa29, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
mount$fuse(0x20100000, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d784308000100", @ANYRES32=r7, @ANYBLOB="1946217514ce129b0777129cf118c708aa868110142a3e05460cdc240ea1da8a6508ff8f2168bd5675e1a8d3e6578c815c413d099c940c109862a3f23d94b04ade734071660abb93cadec52bf9b85e5190b66b57db1d7ebbfb3cfb3d40744cb7b7b20dc162b60e1755b6decdd0c2075eda98195c6b63a2137439aab76aa81592cf366529c3f4ee932010c248ede913b0594f2f553bce3e293428a3899209a80f641b18957338fc706d1876e25cb52e2aeb3b4412435603cdd4c0bdced8184143bb3e5b6af6b272655952caa31b911be39e513a158002fe05e4d39671a2cc11af93b5429d93e59472d6e4d486747d40a4a841f92e4f9fb0611cd91fbb8ba0589dd83bebf77f5d2bbdd08aef14df8013ffdde22f9c6cbb9156263e3f17"], 0x40}}, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)

program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-mknod-open$dir-timer_create-timer_settime-ioctl$TUNSETIFF-socket$kcm-ioctl$SIOCSIFHWADDR-openat$kvm-ioctl$KVM_CREATE_VM-ioctl$KVM_CREATE_IRQCHIP-ioctl$KVM_CREATE_VCPU-ioctl$KVM_SET_CPUID2-ioctl$KVM_X86_SETUP_MCE-write$tun
detailed listing:
executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x121181, 0x2)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x642f40, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000700)={0x2, 0x0, [{0x7, 0x5, 0x2, 0x2, 0x8, 0x5, 0x7f}, {0x40000000, 0x9, 0x4, 0x7, 0x20000000, 0x9ec4, 0x1}]})
ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000080)={0x15, 0x5, 0xc})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="00000002010000000e003d"], 0x2ca)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndseq-read-ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE-prctl$PR_SCHED_CORE-timer_create-timer_settime-tkill
detailed listing:
executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r0, &(0x7f0000000200)=""/209, 0xd1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(0x0, 0x7)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$sndseq-read-ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE-prctl$PR_SCHED_CORE-timer_create-timer_settime-tkill
detailed listing:
executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r0, &(0x7f0000000200)=""/209, 0xd1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(0x0, 0x7)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-fchown-ioctl$KVM_CREATE_VM-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_procs-write$cgroup_pid-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
fchown(0xffffffffffffffff, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f00000001c0), 0x12)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$cgroup_ro-close-socketpair$unix-sendmsg$netlink
detailed listing:
executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_all\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$netlink(r0, &(0x7f0000000500)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbff, 0x10}, 0xc, &(0x7f00000000c0)=[{&(0x7f00000005c0)={0x118, 0x11, 0x20, 0x70bd2b, 0x25dfdbfb, "", [@typed={0x8, 0x25, 0x0, 0x0, @uid}, @typed={0xfd, 0x82, 0x0, 0x0, @binary="62d0a85bd1410b5e14939e77e680c9937834ef612bfd2ea56eca41a9ad9b9051a725acdcaf99c3cf33682dc5f8a8bf86d812cdb14dbad08720fcebd1149010e8f2099c38167ad1006307c4816488104295ac6939a170cce570e6b70fe177f40166d0ebfaa51ef77619b5ea12ff0afc9c752041e5c793728a53dd3367ca97100d73efbc996888f269d42ca59c918c013ceb7236619427280f94114754202125320f732041c179df76e8d53a69e75e560f64c2420a286ad9ce7e97723fab7bbcc3b4e35b8f9b965edc86b5078930e7041eacb308f4eaae5e2b54316fa93722e10a35fd483df59eaf406e9ead5e11299359d5920c49c38087d274"}]}, 0x118}, {&(0x7f0000000700)={0x1230, 0x27, 0x4, 0x70bd25, 0x25dfdbfb, "", [@generic="a0d0948494c2a3a1d12609cf64ae46be3661e06571bea98030307686dba15609ee5675363470c5fce2e56079637ab64c790e555043d0b6d3603c89d68049e365de6dfdbac536b5a082cb75730d74c39836503da90ee2b54df88499b9ca356544ff7e6a42a551fb0a7f392b2ba91a93ec62244f137a6633629d6ab171388f80b1a352e78a00eb8ef8939f69c8d8fe13b49434ff7ca0e21886038faceb14df73d9c0e0ec832902fd43ea427dc4a1bab018", @nested={0x4, 0xb7}, @typed={0xc, 0x5c, 0x0, 0x0, @u64=0x100}, @typed={0xc, 0xe5, 0x0, 0x0, @u64=0x100000001}, @nested={0x10fe, 0xa, 0x0, 0x1, [@generic="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", @generic="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"]}, @nested={0x52, 0x81, 0x0, 0x1, [@typed={0xa, 0x9, 0x0, 0x0, @str='wlan1\x00'}, @generic="5780229f27d20c4c91a0f0b56d2ab084073f7e72922cc1c1d7d341bf37dcac8e81d6e44611fe69fa65728e204293cada0e1f5ebbe7b72b9227dfb655e93280c3f961"]}]}, 0x1230}, {&(0x7f0000000080)={0x10, 0x13, 0x200, 0x70bd2b, 0x25dfdbfe}, 0x10}], 0x3, &(0x7f0000001940)=[@rights={{0x18, 0x1, 0x1, [r2, r2]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r0, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r2, r0]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100, 0x800c}, 0x404c001)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$cgroup_ro-close-socketpair$unix-sendmsg$netlink
detailed listing:
executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_all\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$netlink(r0, &(0x7f0000000500)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbff, 0x10}, 0xc, &(0x7f00000000c0)=[{&(0x7f00000005c0)={0x118, 0x11, 0x20, 0x70bd2b, 0x25dfdbfb, "", [@typed={0x8, 0x25, 0x0, 0x0, @uid}, @typed={0xfd, 0x82, 0x0, 0x0, @binary="62d0a85bd1410b5e14939e77e680c9937834ef612bfd2ea56eca41a9ad9b9051a725acdcaf99c3cf33682dc5f8a8bf86d812cdb14dbad08720fcebd1149010e8f2099c38167ad1006307c4816488104295ac6939a170cce570e6b70fe177f40166d0ebfaa51ef77619b5ea12ff0afc9c752041e5c793728a53dd3367ca97100d73efbc996888f269d42ca59c918c013ceb7236619427280f94114754202125320f732041c179df76e8d53a69e75e560f64c2420a286ad9ce7e97723fab7bbcc3b4e35b8f9b965edc86b5078930e7041eacb308f4eaae5e2b54316fa93722e10a35fd483df59eaf406e9ead5e11299359d5920c49c38087d274"}]}, 0x118}, {&(0x7f0000000700)={0x1230, 0x27, 0x4, 0x70bd25, 0x25dfdbfb, "", [@generic="a0d0948494c2a3a1d12609cf64ae46be3661e06571bea98030307686dba15609ee5675363470c5fce2e56079637ab64c790e555043d0b6d3603c89d68049e365de6dfdbac536b5a082cb75730d74c39836503da90ee2b54df88499b9ca356544ff7e6a42a551fb0a7f392b2ba91a93ec62244f137a6633629d6ab171388f80b1a352e78a00eb8ef8939f69c8d8fe13b49434ff7ca0e21886038faceb14df73d9c0e0ec832902fd43ea427dc4a1bab018", @nested={0x4, 0xb7}, @typed={0xc, 0x5c, 0x0, 0x0, @u64=0x100}, @typed={0xc, 0xe5, 0x0, 0x0, @u64=0x100000001}, @nested={0x10fe, 0xa, 0x0, 0x1, [@generic="3f5fe03d0d9d2286d68c9c3358ea9c8cc6127eb137e1a7800878b55334c469a058a090335e9a8b8c6f3d5bd7a76b52c9575cabca31469deabd4a35fb7d989121a1b17f7e5d9db5ed582258dcdc41382973bf3c1028737025f99fa2f8dfbe501c75f82f632f71e531a92661b3ce283a40b5b6215e2887f76255ea924e10c7b702e6902d0e0386567c0f579fb5da075a28167a2f23fc4a1758b0b27dad339dcdb936b9f408c1e6e894f4398dfec579104f7fe7df8aa9969ad0679b88377d7aa962d626df7dd65d560dc50ec991b675965bf70985482897d32b9a9945c77401dddf2effed9b6708c58f27dc3523c659007662a2b09804b49aa1e937", @generic="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"]}, @nested={0x52, 0x81, 0x0, 0x1, [@typed={0xa, 0x9, 0x0, 0x0, @str='wlan1\x00'}, @generic="5780229f27d20c4c91a0f0b56d2ab084073f7e72922cc1c1d7d341bf37dcac8e81d6e44611fe69fa65728e204293cada0e1f5ebbe7b72b9227dfb655e93280c3f961"]}]}, 0x1230}, {&(0x7f0000000080)={0x10, 0x13, 0x200, 0x70bd2b, 0x25dfdbfe}, 0x10}], 0x3, &(0x7f0000001940)=[@rights={{0x18, 0x1, 0x1, [r2, r2]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r0, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r2, r0]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100, 0x800c}, 0x404c001)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$kvm-fchown-ioctl$KVM_CREATE_VM-mkdirat$cgroup_root-openat$cgroup_root-openat$cgroup_procs-write$cgroup_pid-ioctl$KVM_CREATE_VCPU-syz_kvm_setup_cpu$x86
detailed listing:
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
fchown(0xffffffffffffffff, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f00000001c0), 0x12)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$key-sendmsg$key
detailed listing:
executing program 0:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300090c0000000000000000000000030006000000000002000000e0000001000340000000000002", @ANYRES8=0x0, @ANYRES32=r0], 0x60}}, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$key-sendmsg$key
detailed listing:
executing program 0:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300090c0000000000000000000000030006000000000002000000e0000001000340000000000002", @ANYRES8=0x0, @ANYRES32=r0], 0x60}}, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-socket$igmp
detailed listing:
executing program 0:
syz_emit_vhci(&(0x7f00000027c0)=ANY=[], 0x7)
socket$igmp(0x2, 0x3, 0x2)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_vhci-socket$igmp
detailed listing:
executing program 0:
syz_emit_vhci(&(0x7f00000027c0)=ANY=[], 0x7)
socket$igmp(0x2, 0x3, 0x2)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$can_bcm-socket$can_bcm-connect$can_bcm-ioctl$ifreq_SIOCGIFINDEX_vcan-sendmsg$can_bcm
detailed listing:
executing program 0:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000140), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000340)={'vcan0\x00', <r2=>0x0})
sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES64=r0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="0000000001"], 0x80}}, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_emit_ethernet-socket$inet6-connect$inet6-madvise-openat$sysctl-write$sysctl-write$sysctl-dup2-write$tun
detailed listing:
executing program 0:
syz_emit_ethernet(0x5e, &(0x7f0000000200)={@link_local, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@private=0xa010600}, {@private}, {@broadcast}]}]}}}}}}}, 0x0) (async)
r0 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r1, &(0x7f0000000580)='1\x00', 0x2)
write$sysctl(r1, &(0x7f0000000000)='2\x00', 0x2)
r2 = dup2(r0, r0)
write$tun(r2, &(0x7f0000000240)=ANY=[], 0x46)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): landlock_create_ruleset-ioctl$SIOCSIFHWADDR-socket$inet_udp-bind$inet-setsockopt$SO_TIMESTAMPING-sendmmsg$inet-write-ppoll-syz_usb_connect-syz_usb_control_io-syz_usb_control_io$hid-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io$printer-syz_usb_control_io$cdc_ecm-syz_usb_control_io$cdc_ncm-syz_usb_control_io-syz_usb_control_io$hid-socketpair$nbd-ioctl$SIOCSIFHWADDR-syz_open_dev$dri-fcntl$lock-syz_usb_control_io$hid
detailed listing:
executing program 0:
landlock_create_ruleset(0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00'})
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x21e7, 0x4)
sendmmsg$inet(r0, &(0x7f0000001980)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080e4)
write(r0, 0x0, 0x0)
ppoll(&(0x7f0000001480)=[{r0, 0x16a2}, {r0, 0x8080}], 0x2, 0x0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x44, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00', @broadcast})
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x40802)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x2, 0x0, 0x8, 0x40, 0xffffffffffffffff})
syz_usb_control_io$hid(r1, &(0x7f0000000380)={0x24, &(0x7f0000000200)={0x20, 0x30, 0x50, {0x50, 0x21, "5f7172633c82c7dc08d985e3262c20305b98c9a90bd70f7a5c85992e6b614f561c9536ee5d6bb5aee1a9a12b012f22f87e8f4a0912b0f2c8b3577dfad194defdba05dc301de2dd97d59e8340e234"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x7c24}}, &(0x7f0000000300)={0x0, 0x22, 0xa, {[@global=@item_4={0x3, 0x1, 0x5, "589c8724"}, @main=@item_4={0x3, 0x0, 0xc, "902992e3"}]}}, &(0x7f0000000340)={0x0, 0x21, 0x9, {0x9, 0x21, 0xdb, 0x53, 0x1, {0x22, 0x953}}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000540)={0x40, 0x13, 0xcb, "184d51cee9ba0d373f6fe8ee9f049ac368f8fda905b64e212838f2c1d712847a4d80c238e1ec1454cd04978a725569e5326a50664a3e39bd8e1632e4eca145dbf95dccff5707706ac03f99cf85b8ee647c4adf107dd3cd7a98ac689d011f2dfad347b976f75310a2a7d3511905889592ee462b947962b23dd9f41e50a092fb98c4fb6d5b11f4be9dca57afe8b829b3a8a90cb9c6301320b8a5c3817a092914937e7aca9774a10333f3b2bcdf748a64796bde94f3b7d8921417d953e322464fb78aaff0074fd4d176d88ca4"}, &(0x7f00000003c0)={0x0, 0xa, 0x1}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000480)={0x20, 0x1, 0x3, "761449"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0x80}})

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE_RINGBUF-bpf$MAP_CREATE-socketpair$unix-close-mkdirat$cgroup_root-openat$cgroup_root-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-openat$ppp-bpf$MAP_CREATE-bpf$BPF_TASK_FD_QUERY-openat$cgroup_root-socketpair$unix-socketpair$unix-bpf$MAP_CREATE_TAIL_CALL-bpf$OBJ_PIN_MAP
detailed listing:
executing program 0:
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0xb8}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000e40), 0x600c01, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x42, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a40)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0, r3}, 0x18)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-open_tree-move_mount-open_tree-sendmsg$alg-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$hid-open-mmap-bpf$MAP_CREATE-bpf$MAP_LOOKUP_BATCH-setsockopt$MRT_FLUSH
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10d)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
sendmsg$alg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="8cb2928c01076a6512235b278ffc4a8c8ca337523cc340ae949af51e9488693a0359d491785433d079ac5da7ec98d3dd136f98c62cff78e21810ba57e7c413621d46e06c664ce66546c57895f9fc05754a93bde8377aea110d1d85ec63a0674b6a279973ee6f0ebf42e0d51925c59b7667c3da92c5ea800e904b9f817a70f5f9ca3fdb78c9717767535e0ecfc2f519c7527bd7a6cd4abb73e91fa84f419e3e4e2e7198ccc43b", 0xa6}, {&(0x7f00000001c0)="6125d770e0c1667c93d1d5468edefcc6c026b1f8881dd19d3d5b43b571b48a1e776196e296b8ad76a436e7f07d7784e5d78420b2ca2fa1bca6b2720c4d6bdb38659392db68528d2b54a81f780175726c62da05ea9fd7daf5c183057fa31e5b1098088beac33ead171c2ca76eea675a0667564da30274caca15d593240c697a9d5b63b22408aed9826c39888a3821b6be81e6532cce99385f4e926ec7d572800c730976e7", 0xa4}, {&(0x7f0000000340)="fd69902423625186476668c0113959d18606e1e70cb41ca8c02592eff292d3fb65b3462fbabd7b8ec832adfe9afd124ff0a7e76a408f0d5a9c71cb5f483076b07dd03782641eb087e2331d64526aefeb52e5ebba05497d2872a0043cdfaba5de503a9c02bf4d438c46b57dbe86ed4f9b5a00aed8ef1952e0351ee0aac999bb262ae4af8fc5f24e01424faa5df1696b1a9c0a5cbc05f8537c358827af8ec305e9299ce6727ad83eb53c05722c3ffe776197e55ba3608fcfb31892867f7e0959b433af51", 0xc3}], 0x3, 0x0, 0x0, 0x40040}, 0x40041)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000640)={0x1c, &(0x7f0000000580)={0x0, 0x14, 0x4, "f7842e52"}, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x9, 0x7, "f6d417dbf5ea0e"}, 0x0, 0x0, 0x0, 0x0})
open(&(0x7f0000000480)='./file0\x00', 0x28000, 0x6e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xbfa35000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r2}, 0x38)
setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-socket$kcm-sendmsg$kcm
detailed listing:
executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$IPCTNL_MSG_CT_NEW
detailed listing:
executing program 0:
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="9000000000010104000000000000000002000000240001801400018008000100e000000208000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000208000200e000000208000740000000002c000e801400018008000100e000000208000200000000000c00028005000100"], 0x90}}, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$video-ioctl$VIDIOC_S_SELECTION
detailed listing:
executing program 0:
r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x9, 0x0, 0x0, {0x0, 0x300, 0x0, 0x80000300}}) (fail_nth: 2)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$apparmor_thread_current-write$apparmor_current-socket$nl_route-sendmsg$nl_route-syz_usb_connect-syz_open_dev$vim2m-madvise-mbind-madvise-socket$nl_route-socket$inet_tcp-socket$nl_route-socket$inet6_icmp_raw-sendmsg$nl_route-socket-sendmsg$kcm
detailed listing:
executing program 0:
r0 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000d40), 0x2, 0x0)
write$apparmor_current(r0, &(0x7f0000000d80)=@hat={'changehat ', 0x1}, 0x1d)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200400a1}, 0x20010084)
syz_usb_connect(0x6, 0x24, 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mbind(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x0, 0x3)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32], 0x50}, 0x1, 0xba01}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$TUNSETIFF-openat$cgroup_ro-write$UHID_CREATE2-mmap-socket$inet_tcp-getsockopt$sock_buf
detailed listing:
executing program 0:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, 0x0, 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x4c, 0x0, &(0x7f0000000080))

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-syz_open_procfs-close_range
detailed listing:
executing program 0:
r0 = gettid()
r1 = syz_open_procfs(r0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SET_SECCOMP-fsopen
detailed listing:
executing program 0:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
fsopen(0x0, 0x1)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sched_setscheduler-openat$fuse-openat$cgroup_ro-fcntl$lock-openat$cgroup_ro-fcntl$lock-openat$cgroup_ro-fcntl$lock-fcntl$lock-close_range
detailed listing:
executing program 0:
sched_setscheduler(0x0, 0x2, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x25, &(0x7f00000000c0))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1})
fcntl$lock(r3, 0x25, &(0x7f00000000c0))
close_range(r0, 0xffffffffffffffff, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): prctl$PR_SCHED_CORE-socket-setsockopt$IP_VS_SO_SET_ADD-socket$nl_generic-syz_genetlink_get_family_id$tipc2-sendmsg$TIPC_NL_KEY_SET
detailed listing:
executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket(0xa, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'rr\x00', 0x2f, 0x3, 0x9}, 0x2c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): set_mempolicy
detailed listing:
executing program 0:
set_mempolicy(0xc005, 0x0, 0xb2)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binderfs-openat$binderfs-dup3-ioctl$BINDER_WRITE_READ-ioctl$BINDER_WRITE_READ
detailed listing:
executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000c80)={0x44, 0x0, &(0x7f0000000ac0)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0}}], 0x0, 0xfdfdffff, 0x0})

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$BATADV_CMD_GET_DAT_CACHE-syz_usb_connect$hid-syz_usb_control_io$hid-socket$nl_generic-socket$nl_generic-syz_genetlink_get_family_id$batadv-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_ROUTING_ALGOS-syz_usb_control_io$hid-syz_usb_control_io$hid-syz_usb_connect-syz_usb_control_io$hid
detailed listing:
executing program 0:
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x2, 0x70bd2d}, 0x14}}, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000400533ed0100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r2, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x2c}}, 0x8021)
syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002208000000aa"], 0x0}, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002208000000aa"], 0x0}, 0x0)
r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_sctp-setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-getsockopt$inet_sctp6_SCTP_DELAYED_SACK
detailed listing:
executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={<r1=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r1, 0xffff2ea2}, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-socket-socket$packet-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-setsockopt$inet_tcp_TCP_REPAIR_QUEUE-sendmsg$kcm
detailed listing:
executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xff}}}}]}, 0x48}}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0)

program crashed: possible deadlock in team_del_slave
single: successfully extracted reproducer
found reproducer with 7 syscalls
minimizing guilty program
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-socket-socket$packet-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-setsockopt$inet_tcp_TCP_REPAIR_QUEUE
detailed listing:
executing program 0:
socket$kcm(0x10, 0x2, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xff}}}}]}, 0x48}}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000), 0x4)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-socket-socket$packet-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$kcm
detailed listing:
executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xff}}}}]}, 0x48}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0)

program crashed: possible deadlock in team_del_slave
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-socket-socket$packet-ioctl$sock_SIOCGIFINDEX-sendmsg$kcm
detailed listing:
executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00'})
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0)

program crashed: possible deadlock in team_del_slave
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-socket-socket$packet-sendmsg$kcm
detailed listing:
executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0)

program crashed: possible deadlock in team_del_slave
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-socket-sendmsg$kcm
detailed listing:
executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0)

program crashed: possible deadlock in team_del_slave
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-sendmsg$kcm
detailed listing:
executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0)

program crashed: possible deadlock in team_del_slave
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$kcm
detailed listing:
executing program 0:
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-sendmsg$kcm
detailed listing:
executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, 0x0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-sendmsg$kcm
detailed listing:
executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-sendmsg$kcm
detailed listing:
executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-sendmsg$kcm
detailed listing:
executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x1}, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-sendmsg$kcm
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
simplifying guilty program options
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-sendmsg$kcm
detailed listing:
executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0)

program crashed: possible deadlock in team_del_slave
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-sendmsg$kcm
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-sendmsg$kcm
detailed listing:
executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0)

program crashed: possible deadlock in team_del_slave
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:namespace SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-sendmsg$kcm
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-sendmsg$kcm
detailed listing:
executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0)

program crashed: possible deadlock in team_del_slave
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$kcm-sendmsg$kcm
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
reproducing took 4h43m51.090885767s
repro crashed as (corrupted=false):
bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
bond0 (unregistering): Released all slaves
======================================================
WARNING: possible circular locking dependency detected
6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 Not tainted
------------------------------------------------------
kworker/u8:0/11 is trying to acquire lock:
ffff888025d44e00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_del_slave+0x32/0x1d0 drivers/net/team/team_core.c:1989

but task is already holding lock:
ffff888031b20768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: wiphy_lock include/net/cfg80211.h:6019 [inline]
ffff888031b20768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x12b/0x700 net/mac80211/iface.c:2285

which lock already depends on the new lock.


the existing dependency chain (in reverse order) is:

-> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}:
       lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5849
       __mutex_lock_common kernel/locking/mutex.c:585 [inline]
       __mutex_lock+0x1ac/0xee0 kernel/locking/mutex.c:735
       wiphy_lock include/net/cfg80211.h:6019 [inline]
       ieee80211_open+0xe7/0x200 net/mac80211/iface.c:453
       __dev_open+0x2d3/0x450 net/core/dev.c:1476
       dev_open+0xae/0x1b0 net/core/dev.c:1512
       team_port_add drivers/net/team/team_core.c:1216 [inline]
       team_add_slave+0x9c8/0x2760 drivers/net/team/team_core.c:1975
       do_set_master net/core/rtnetlink.c:2911 [inline]
       do_setlink+0xe40/0x4210 net/core/rtnetlink.c:3110
       rtnl_changelink net/core/rtnetlink.c:3717 [inline]
       __rtnl_newlink net/core/rtnetlink.c:3869 [inline]
       rtnl_newlink+0x171c/0x24f0 net/core/rtnetlink.c:4001
       rtnetlink_rcv_msg+0x791/0xcf0 net/core/rtnetlink.c:6911
       netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2541
       netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline]
       netlink_unicast+0x7f6/0x990 net/netlink/af_netlink.c:1347
       netlink_sendmsg+0x8e4/0xcb0 net/netlink/af_netlink.c:1891
       sock_sendmsg_nosec net/socket.c:711 [inline]
       __sock_sendmsg+0x221/0x270 net/socket.c:726
       ____sys_sendmsg+0x52a/0x7e0 net/socket.c:2583
       ___sys_sendmsg net/socket.c:2637 [inline]
       __sys_sendmsg+0x269/0x350 net/socket.c:2669
       do_syscall_x64 arch/x86/entry/common.c:52 [inline]
       do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
       entry_SYSCALL_64_after_hwframe+0x77/0x7f

-> #0 (team->team_lock_key#2){+.+.}-{4:4}:
       check_prev_add kernel/locking/lockdep.c:3161 [inline]
       check_prevs_add kernel/locking/lockdep.c:3280 [inline]
       validate_chain+0x18ef/0x5920 kernel/locking/lockdep.c:3904
       __lock_acquire+0x1397/0x2100 kernel/locking/lockdep.c:5226
       lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5849
       __mutex_lock_common kernel/locking/mutex.c:585 [inline]
       __mutex_lock+0x1ac/0xee0 kernel/locking/mutex.c:735
       team_del_slave+0x32/0x1d0 drivers/net/team/team_core.c:1989
       team_device_event+0x200/0x5b0 drivers/net/team/team_core.c:2983
       notifier_call_chain+0x19f/0x3e0 kernel/notifier.c:85
       call_netdevice_notifiers_extack net/core/dev.c:2034 [inline]
       call_netdevice_notifiers net/core/dev.c:2048 [inline]
       unregister_netdevice_many_notify+0xedd/0x1da0 net/core/dev.c:11520
       unregister_netdevice_many net/core/dev.c:11584 [inline]
       unregister_netdevice_queue+0x303/0x370 net/core/dev.c:11456
       unregister_netdevice include/linux/netdevice.h:3192 [inline]
       _cfg80211_unregister_wdev+0x163/0x590 net/wireless/core.c:1255
       ieee80211_remove_interfaces+0x4db/0x700 net/mac80211/iface.c:2310
       ieee80211_unregister_hw+0x5d/0x2c0 net/mac80211/main.c:1671
       mac80211_hwsim_del_radio+0x2c4/0x4c0 drivers/net/wireless/virtual/mac80211_hwsim.c:5625
       hwsim_exit_net+0x5c1/0x670 drivers/net/wireless/virtual/mac80211_hwsim.c:6505
       ops_exit_list net/core/net_namespace.c:172 [inline]
       cleanup_net+0x802/0xcc0 net/core/net_namespace.c:632
       process_one_work kernel/workqueue.c:3229 [inline]
       process_scheduled_works+0xa63/0x1850 kernel/workqueue.c:3310
       worker_thread+0x870/0xd30 kernel/workqueue.c:3391
       kthread+0x2f0/0x390 kernel/kthread.c:389
       ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
       ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

other info that might help us debug this:

 Possible unsafe locking scenario:

       CPU0                    CPU1
       ----                    ----
  lock(&rdev->wiphy.mtx);
                               lock(team->team_lock_key#2);
                               lock(&rdev->wiphy.mtx);
  lock(team->team_lock_key#2);

 *** DEADLOCK ***

5 locks held by kworker/u8:0/11:
 #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3204 [inline]
 #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 kernel/workqueue.c:3310
 #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3205 [inline]
 #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 kernel/workqueue.c:3310
 #2: ffffffff8fcdbe10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x16a/0xcc0 net/core/net_namespace.c:586
 #3: ffffffff8fce8948 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 net/mac80211/main.c:1664
 #4: ffff888031b20768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: wiphy_lock include/net/cfg80211.h:6019 [inline]
 #4: ffff888031b20768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x12b/0x700 net/mac80211/iface.c:2285

stack backtrace:
CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Workqueue: netns cleanup_net
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120
 print_circular_bug+0x13a/0x1b0 kernel/locking/lockdep.c:2074
 check_noncircular+0x36a/0x4a0 kernel/locking/lockdep.c:2206
 check_prev_add kernel/locking/lockdep.c:3161 [inline]
 check_prevs_add kernel/locking/lockdep.c:3280 [inline]
 validate_chain+0x18ef/0x5920 kernel/locking/lockdep.c:3904
 __lock_acquire+0x1397/0x2100 kernel/locking/lockdep.c:5226
 lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5849
 __mutex_lock_common kernel/locking/mutex.c:585 [inline]
 __mutex_lock+0x1ac/0xee0 kernel/locking/mutex.c:735
 team_del_slave+0x32/0x1d0 drivers/net/team/team_core.c:1989
 team_device_event+0x200/0x5b0 drivers/net/team/team_core.c:2983
 notifier_call_chain+0x19f/0x3e0 kernel/notifier.c:85
 call_netdevice_notifiers_extack net/core/dev.c:2034 [inline]
 call_netdevice_notifiers net/core/dev.c:2048 [inline]
 unregister_netdevice_many_notify+0xedd/0x1da0 net/core/dev.c:11520
 unregister_netdevice_many net/core/dev.c:11584 [inline]
 unregister_netdevice_queue+0x303/0x370 net/core/dev.c:11456
 unregister_netdevice include/linux/netdevice.h:3192 [inline]
 _cfg80211_unregister_wdev+0x163/0x590 net/wireless/core.c:1255
 ieee80211_remove_interfaces+0x4db/0x700 net/mac80211/iface.c:2310
 ieee80211_unregister_hw+0x5d/0x2c0 net/mac80211/main.c:1671
 mac80211_hwsim_del_radio+0x2c4/0x4c0 drivers/net/wireless/virtual/mac80211_hwsim.c:5625
 hwsim_exit_net+0x5c1/0x670 drivers/net/wireless/virtual/mac80211_hwsim.c:6505
 ops_exit_list net/core/net_namespace.c:172 [inline]
 cleanup_net+0x802/0xcc0 net/core/net_namespace.c:632
 process_one_work kernel/workqueue.c:3229 [inline]
 process_scheduled_works+0xa63/0x1850 kernel/workqueue.c:3310
 worker_thread+0x870/0xd30 kernel/workqueue.c:3391
 kthread+0x2f0/0x390 kernel/kthread.c:389
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
team0: Port device wlan1 removed
hsr_slave_0: left promiscuous mode
hsr_slave_1: left promiscuous mode
batman_adv: batadv0: Interface deactivated: batadv_slave_0
batman_adv: batadv0: Removing interface: batadv_slave_0
batman_adv: batadv0: Interface deactivated: batadv_slave_1
batman_adv: batadv0: Removing interface: batadv_slave_1
veth1_macvtap: left promiscuous mode
veth0_macvtap: left promiscuous mode
veth1_vlan: left promiscuous mode
veth0_vlan: left promiscuous mode
team0 (unregistering): Port device team_slave_1 removed
team0 (unregistering): Port device team_slave_0 removed
wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50

final repro crashed as (corrupted=false):
bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
bond0 (unregistering): Released all slaves
======================================================
WARNING: possible circular locking dependency detected
6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 Not tainted
------------------------------------------------------
kworker/u8:0/11 is trying to acquire lock:
ffff888025d44e00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_del_slave+0x32/0x1d0 drivers/net/team/team_core.c:1989

but task is already holding lock:
ffff888031b20768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: wiphy_lock include/net/cfg80211.h:6019 [inline]
ffff888031b20768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x12b/0x700 net/mac80211/iface.c:2285

which lock already depends on the new lock.


the existing dependency chain (in reverse order) is:

-> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}:
       lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5849
       __mutex_lock_common kernel/locking/mutex.c:585 [inline]
       __mutex_lock+0x1ac/0xee0 kernel/locking/mutex.c:735
       wiphy_lock include/net/cfg80211.h:6019 [inline]
       ieee80211_open+0xe7/0x200 net/mac80211/iface.c:453
       __dev_open+0x2d3/0x450 net/core/dev.c:1476
       dev_open+0xae/0x1b0 net/core/dev.c:1512
       team_port_add drivers/net/team/team_core.c:1216 [inline]
       team_add_slave+0x9c8/0x2760 drivers/net/team/team_core.c:1975
       do_set_master net/core/rtnetlink.c:2911 [inline]
       do_setlink+0xe40/0x4210 net/core/rtnetlink.c:3110
       rtnl_changelink net/core/rtnetlink.c:3717 [inline]
       __rtnl_newlink net/core/rtnetlink.c:3869 [inline]
       rtnl_newlink+0x171c/0x24f0 net/core/rtnetlink.c:4001
       rtnetlink_rcv_msg+0x791/0xcf0 net/core/rtnetlink.c:6911
       netlink_rcv_skb+0x1e3/0x430 net/netlink/af_netlink.c:2541
       netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline]
       netlink_unicast+0x7f6/0x990 net/netlink/af_netlink.c:1347
       netlink_sendmsg+0x8e4/0xcb0 net/netlink/af_netlink.c:1891
       sock_sendmsg_nosec net/socket.c:711 [inline]
       __sock_sendmsg+0x221/0x270 net/socket.c:726
       ____sys_sendmsg+0x52a/0x7e0 net/socket.c:2583
       ___sys_sendmsg net/socket.c:2637 [inline]
       __sys_sendmsg+0x269/0x350 net/socket.c:2669
       do_syscall_x64 arch/x86/entry/common.c:52 [inline]
       do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
       entry_SYSCALL_64_after_hwframe+0x77/0x7f

-> #0 (team->team_lock_key#2){+.+.}-{4:4}:
       check_prev_add kernel/locking/lockdep.c:3161 [inline]
       check_prevs_add kernel/locking/lockdep.c:3280 [inline]
       validate_chain+0x18ef/0x5920 kernel/locking/lockdep.c:3904
       __lock_acquire+0x1397/0x2100 kernel/locking/lockdep.c:5226
       lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5849
       __mutex_lock_common kernel/locking/mutex.c:585 [inline]
       __mutex_lock+0x1ac/0xee0 kernel/locking/mutex.c:735
       team_del_slave+0x32/0x1d0 drivers/net/team/team_core.c:1989
       team_device_event+0x200/0x5b0 drivers/net/team/team_core.c:2983
       notifier_call_chain+0x19f/0x3e0 kernel/notifier.c:85
       call_netdevice_notifiers_extack net/core/dev.c:2034 [inline]
       call_netdevice_notifiers net/core/dev.c:2048 [inline]
       unregister_netdevice_many_notify+0xedd/0x1da0 net/core/dev.c:11520
       unregister_netdevice_many net/core/dev.c:11584 [inline]
       unregister_netdevice_queue+0x303/0x370 net/core/dev.c:11456
       unregister_netdevice include/linux/netdevice.h:3192 [inline]
       _cfg80211_unregister_wdev+0x163/0x590 net/wireless/core.c:1255
       ieee80211_remove_interfaces+0x4db/0x700 net/mac80211/iface.c:2310
       ieee80211_unregister_hw+0x5d/0x2c0 net/mac80211/main.c:1671
       mac80211_hwsim_del_radio+0x2c4/0x4c0 drivers/net/wireless/virtual/mac80211_hwsim.c:5625
       hwsim_exit_net+0x5c1/0x670 drivers/net/wireless/virtual/mac80211_hwsim.c:6505
       ops_exit_list net/core/net_namespace.c:172 [inline]
       cleanup_net+0x802/0xcc0 net/core/net_namespace.c:632
       process_one_work kernel/workqueue.c:3229 [inline]
       process_scheduled_works+0xa63/0x1850 kernel/workqueue.c:3310
       worker_thread+0x870/0xd30 kernel/workqueue.c:3391
       kthread+0x2f0/0x390 kernel/kthread.c:389
       ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
       ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244

other info that might help us debug this:

 Possible unsafe locking scenario:

       CPU0                    CPU1
       ----                    ----
  lock(&rdev->wiphy.mtx);
                               lock(team->team_lock_key#2);
                               lock(&rdev->wiphy.mtx);
  lock(team->team_lock_key#2);

 *** DEADLOCK ***

5 locks held by kworker/u8:0/11:
 #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3204 [inline]
 #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 kernel/workqueue.c:3310
 #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3205 [inline]
 #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 kernel/workqueue.c:3310
 #2: ffffffff8fcdbe10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x16a/0xcc0 net/core/net_namespace.c:586
 #3: ffffffff8fce8948 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 net/mac80211/main.c:1664
 #4: ffff888031b20768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: wiphy_lock include/net/cfg80211.h:6019 [inline]
 #4: ffff888031b20768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x12b/0x700 net/mac80211/iface.c:2285

stack backtrace:
CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Workqueue: netns cleanup_net
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120
 print_circular_bug+0x13a/0x1b0 kernel/locking/lockdep.c:2074
 check_noncircular+0x36a/0x4a0 kernel/locking/lockdep.c:2206
 check_prev_add kernel/locking/lockdep.c:3161 [inline]
 check_prevs_add kernel/locking/lockdep.c:3280 [inline]
 validate_chain+0x18ef/0x5920 kernel/locking/lockdep.c:3904
 __lock_acquire+0x1397/0x2100 kernel/locking/lockdep.c:5226
 lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5849
 __mutex_lock_common kernel/locking/mutex.c:585 [inline]
 __mutex_lock+0x1ac/0xee0 kernel/locking/mutex.c:735
 team_del_slave+0x32/0x1d0 drivers/net/team/team_core.c:1989
 team_device_event+0x200/0x5b0 drivers/net/team/team_core.c:2983
 notifier_call_chain+0x19f/0x3e0 kernel/notifier.c:85
 call_netdevice_notifiers_extack net/core/dev.c:2034 [inline]
 call_netdevice_notifiers net/core/dev.c:2048 [inline]
 unregister_netdevice_many_notify+0xedd/0x1da0 net/core/dev.c:11520
 unregister_netdevice_many net/core/dev.c:11584 [inline]
 unregister_netdevice_queue+0x303/0x370 net/core/dev.c:11456
 unregister_netdevice include/linux/netdevice.h:3192 [inline]
 _cfg80211_unregister_wdev+0x163/0x590 net/wireless/core.c:1255
 ieee80211_remove_interfaces+0x4db/0x700 net/mac80211/iface.c:2310
 ieee80211_unregister_hw+0x5d/0x2c0 net/mac80211/main.c:1671
 mac80211_hwsim_del_radio+0x2c4/0x4c0 drivers/net/wireless/virtual/mac80211_hwsim.c:5625
 hwsim_exit_net+0x5c1/0x670 drivers/net/wireless/virtual/mac80211_hwsim.c:6505
 ops_exit_list net/core/net_namespace.c:172 [inline]
 cleanup_net+0x802/0xcc0 net/core/net_namespace.c:632
 process_one_work kernel/workqueue.c:3229 [inline]
 process_scheduled_works+0xa63/0x1850 kernel/workqueue.c:3310
 worker_thread+0x870/0xd30 kernel/workqueue.c:3391
 kthread+0x2f0/0x390 kernel/kthread.c:389
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
team0: Port device wlan1 removed
hsr_slave_0: left promiscuous mode
hsr_slave_1: left promiscuous mode
batman_adv: batadv0: Interface deactivated: batadv_slave_0
batman_adv: batadv0: Removing interface: batadv_slave_0
batman_adv: batadv0: Interface deactivated: batadv_slave_1
batman_adv: batadv0: Removing interface: batadv_slave_1
veth1_macvtap: left promiscuous mode
veth0_macvtap: left promiscuous mode
veth1_vlan: left promiscuous mode
veth0_vlan: left promiscuous mode
team0 (unregistering): Port device team_slave_1 removed
team0 (unregistering): Port device team_slave_0 removed
wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50