last executing test programs: 2m24.144565341s ago: executing program 0 (id=151): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000240)=ANY=[], 0x0, 0x8}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r1, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2m23.905612037s ago: executing program 0 (id=152): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r4, &(0x7f0000001780)=""/4101, 0x1010, 0x400020a4, 0x0, 0xba) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r8, 0x388, 0x41d9fda7) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 2m22.84477344s ago: executing program 0 (id=153): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fcntl$setlease(r0, 0x400, 0x2) 2m22.716705622s ago: executing program 0 (id=154): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f00000003c0)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0) 2m22.2512688s ago: executing program 0 (id=156): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./dev\x00', &(0x7f0000000480)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/mapper/control\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x1}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000f}) 2m20.297477594s ago: executing program 0 (id=163): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r4, &(0x7f0000001780)=""/4101, 0x1010, 0x400020a4, 0x0, 0xba) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r8, 0x388, 0x41d9fda7) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 2m19.977318838s ago: executing program 32 (id=163): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r4, &(0x7f0000001780)=""/4101, 0x1010, 0x400020a4, 0x0, 0xba) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r8, 0x388, 0x41d9fda7) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 3.261499628s ago: executing program 1 (id=1005): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000140)={'wlan0\x00', @ifru_flags=0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1743}], @NL80211_ATTR_BSS_BASIC_RATES={0x7, 0x24, [{0xc}, {0x18}, {0x30}]}]}, 0x38}}, 0x0) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000800)=ANY=[@ANYBLOB="80000000ffffffffffff0200000002000200000002000000000000000000000064001100000001038c98b0720373797a710701010001000009ff0c2400000200000001030f1700"], 0x48) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 2.597194567s ago: executing program 3 (id=1013): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000001040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3], 0x44}}, 0x28000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000040)={0x48, r5, 0x1, 0x470bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{}, {0x6}, @device_a, @device_a, @initial, {0x2, 0xfff}}, 0x600, 0x8, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) nanosleep(&(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0) 2.350277346s ago: executing program 1 (id=1017): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newsa={0x13c, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa, 0x80, 0x80}, {@in6=@loopback, 0x4d2, 0x32}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x0, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "000102030405060708090a0b0c0d0e0f01020304"}}]}, 0x13c}}, 0x0) 2.233656129s ago: executing program 1 (id=1018): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espintcp\x00', 0x9) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000400)='espintcp\x00', 0x9) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {@in6=@loopback, 0x1234, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}}}]}, 0x180}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x1234, 0x32}, 0xa, @in6=@loopback}}, 0xe8) sendto$inet6(r4, &(0x7f0000000200)='trigger', 0x7, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) 1.986898122s ago: executing program 2 (id=1022): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, &(0x7f0000000200)="ffffffffffff0011223344550800450000140000000040000000", 0x1c, 0x0, &(0x7f0000000300)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) 1.878038734s ago: executing program 3 (id=1023): unshare(0x40000000) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00', 0x1}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000), 0x3a0) sendto$inet(r0, &(0x7f0000000100)='\x00\x00\x00\x00', 0x4, 0x0, &(0x7f0000000200)={0x2, 0x1234}, 0x10) 1.742990441s ago: executing program 2 (id=1024): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'nat\x00'}, &(0x7f0000000200)=0x54) 1.705832056s ago: executing program 3 (id=1025): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='./proc/net/ip_vs_conn\x00', &(0x7f0000000100)='./ip_vs_conn\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x15, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000300)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000400)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) connect$inet(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x15, @loopback}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000700)='world\x00', 0x6) 1.590112139s ago: executing program 2 (id=1027): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x68}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000900000008000300", @ANYRES32=r3, @ANYBLOB="34005080140001000102030405060708090a0b0c0d0e0f1005000200060000000800030006ac0f000a0004000000000000000000"], 0x50}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000a00000008000300", @ANYRES32=r3, @ANYBLOB="10005080050002000600000004000a00"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]}, 0x44}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0) 1.554404076s ago: executing program 4 (id=1028): syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) 1.390030146s ago: executing program 5 (id=1029): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.373083822s ago: executing program 1 (id=1030): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x0, 0x0}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0) 1.185338828s ago: executing program 4 (id=1031): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'a\x00'}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x78, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0xc, 0xf, [@random={0xd4, 0x6}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0xb8, 0x1f4}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0xb8, 0x1f4}]]}, 0x50}}, 0x0) 1.106108028s ago: executing program 1 (id=1032): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv4_newroute={0x40, 0x18, 0x601, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, @private=0xa000000}, @RTA_OIF={0x8, 0x4, 0x1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0xc}]}, 0x40}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x2, 0x1f90, @private=0xa000001}, 0x10) 1.105853466s ago: executing program 2 (id=1033): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000300)={0x6, @loopback, 0x15, 0x0, 'none\x00'}, 0x2c) 1.071547372s ago: executing program 2 (id=1034): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x888e, r1, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0x888e, r2, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="1d003300d0000900080211000001080211000000505050505050"], 0x44}}, 0x0) 816.805695ms ago: executing program 2 (id=1035): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'wlan0\x00'}) syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000040)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000080)=@mgmt_frame=@probe_request={{{0x0, 0x0, 0x0}, {}, @device_b, @device_a, @from_mac=@device_b}, @val={0x0, 0x0, @default_ibss_ssid}, @val={0x0, 0x0, [{0x2, 0x1}, {0x4, 0x1}]}, @void, @void, @void}, 0x40) nanosleep(&(0x7f0000000200)={0x0, 0x1dcd6500}, 0x0) 722.626596ms ago: executing program 3 (id=1036): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='./proc/net/ip_vs_conn\x00', &(0x7f0000000100)='./ip_vs_conn\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x15, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000300)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000400)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./ip_vs_conn\x00', 0x0, 0x0) read(r2, &(0x7f0000000800)=""/1024, 0x400) 720.011127ms ago: executing program 5 (id=1037): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x2, @local}, 0x10) listen(r0, 0x5) syz_emit_ethernet(0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb000302027f"], 0x0) syz_emit_ethernet(0x12, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb000402030900"], 0x0) syz_emit_ethernet(0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb000402030901"], 0x0) 678.0695ms ago: executing program 1 (id=1038): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r3 = dup(0xffffffffffffffff) read$FUSE(r3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xbbe, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r5, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r4, 0x0, r0, 0x0, 0x317e, 0x4) write$P9_RREAD(r1, &(0x7f0000000840)=ANY=[], 0xb) write$tun(r1, &(0x7f0000000840)=ANY=[], 0x11b0) 533.190548ms ago: executing program 3 (id=1039): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xc138fd0a, &(0x7f0000000000)="040000000000000000000000380100003801") bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000002000200000000003f1ff8f3693dff9b7c87a397f70ba65eea7748a943d8e2c14f6321e99c5d8e7fef8985476a"], 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r1, 0xc138fd05, &(0x7f0000000000)="040000000200000000007c2fc2") bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r0, 0x16, 0x0, @void}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, 0x1, 0xc000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x20004000) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x40004, 0x1201}}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) setns(0xc9, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000180)='memory.pressure\x00', 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)={@local, @empty, 0x1, 0x2, [@rand_addr=0xb, @broadcast]}, 0x18) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x57) socket$inet6(0xa, 0x3, 0xfffffffc) socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r6, &(0x7f0000000080)=""/1, 0x1) 525.46994ms ago: executing program 5 (id=1040): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xd4}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000080040fe8000000000000000000000000000aafe8000000000000000000000000000bb3b00010400000000"], 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x54, 0x1, 0x3, 0x1, 0x0, 0x0, {0xa}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x1, 0x1}}, @NFQA_PAYLOAD={0x34, 0xa, "6000000000080040fe8000000000000000000000000000aafe8000000000000000000000000000bb0000010400000000"}]}, 0x54}}, 0x0) 490.272474ms ago: executing program 4 (id=1041): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x4c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000805}, 0xc080) 414.722655ms ago: executing program 5 (id=1042): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000014000100000000000000000004010000080009000200000004000f0004001e00"], 0x28}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000015000100000000000000000004010000080009000200000004000f0004001e00"], 0x28}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000016000100000000000000000004010000080009000200000004000f0004001e00"], 0x28}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000017000100000000000000000004010000080009000200000004000f0004001e00"], 0x28}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000018000100000000000000000004010000080009000200000004000f0004001e00"], 0x28}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000019000100000000000000000004010000080009000200000004000f0004001e00"], 0x28}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001a000100000000000000000004010000080009000200000004000f0004001e00"], 0x28}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001b000100000000000000000004010000080009000200000004000f0004001e00"], 0x28}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000004010000080009000200000004000f0004001e00"], 0x28}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001d000100000000000000000004010000080009000200000004000f0004001e00"], 0x28}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001e000100000000000000000004010000080009000200000004000f0004001e00"], 0x28}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001f000100000000000000000004010000080009000200000004000f0004001e00"], 0x28}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000020000100000000000000000004010000080009000200000004000f0004001e00"], 0x28}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100000000000000000004010000080009000200000004000f0004001e00"], 0x28}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000022000100000000000000000004010000080009000200000004000f0004001e00"], 0x28}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000023000100000000000000000004010000080009000200000004000f0004001e00"], 0x28}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000024000100000000000000000004010000080009000200000004000f0004001e00"], 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010000000000000001000000"], 0x14}}, 0x0) 341.628963ms ago: executing program 4 (id=1043): socket$nl_netfilter(0x10, 0x3, 0xc) nanosleep(&(0x7f0000000000), 0x0) 234.12754ms ago: executing program 4 (id=1044): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/ieee80211/phy0/netdev:wlan0/rc_stats\x00', 0x0, 0x0) 210.653684ms ago: executing program 5 (id=1045): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x888e, r1, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0x888e, r2, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="1d003300d0000900080211000001080211000000505050505050"], 0x44}}, 0x0) 202.856538ms ago: executing program 4 (id=1046): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='./proc/net/ip_vs_conn\x00', &(0x7f0000000100)='./ip_vs_conn\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x15, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000300)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000400)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) connect$inet(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x15, @loopback}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000700)='world\x00', 0x6) 26.602693ms ago: executing program 3 (id=1047): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 0s ago: executing program 5 (id=1048): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/ieee80211/phy0/netdev:wlan0/mesh_config/dot11MeshHWMPperrMinInterval\x00', 0x0, 0x0) read(r4, &(0x7f0000000340), 0x100) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.11' (ED25519) to the list of known hosts. [ 74.820440][ T5575] cgroup: Unknown subsys name 'net' [ 75.062508][ T5575] cgroup: Unknown subsys name 'cpuset' [ 75.115464][ T5575] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.754649][ T5575] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.124460][ T5594] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.139720][ T5598] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.144629][ T5598] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.156591][ T5602] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.158061][ T5602] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.159433][ T5602] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.160106][ T5602] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.186009][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.191201][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.194008][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.223275][ T5601] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.229095][ T5605] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.230461][ T5607] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.243679][ T5605] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.249369][ T5605] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.256995][ T5607] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.257480][ T5605] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.261419][ T5605] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.268268][ T5605] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.269842][ T5605] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.330459][ T5605] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.344491][ T5605] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.359205][ T5605] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.377039][ T5605] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.421661][ T5605] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.386667][ T5594] Bluetooth: hci3: command tx timeout [ 81.386786][ T5594] Bluetooth: hci4: command tx timeout [ 81.386866][ T5594] Bluetooth: hci1: command tx timeout [ 81.454939][ T5605] Bluetooth: hci0: command tx timeout [ 81.545008][ T5605] Bluetooth: hci2: command tx timeout [ 81.663178][ T5590] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.664491][ T5590] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.664694][ T5590] bridge_slave_0: entered allmulticast mode [ 81.688714][ T5590] bridge_slave_0: entered promiscuous mode [ 81.693984][ T5587] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.694102][ T5587] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.694644][ T5587] bridge_slave_0: entered allmulticast mode [ 81.704877][ T5587] bridge_slave_0: entered promiscuous mode [ 81.779375][ T5587] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.779479][ T5587] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.779594][ T5587] bridge_slave_1: entered allmulticast mode [ 81.782285][ T5587] bridge_slave_1: entered promiscuous mode [ 81.815966][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.816082][ T5590] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.816342][ T5590] bridge_slave_1: entered allmulticast mode [ 81.818966][ T5590] bridge_slave_1: entered promiscuous mode [ 82.018352][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.018476][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.018621][ T5593] bridge_slave_0: entered allmulticast mode [ 82.021008][ T5593] bridge_slave_0: entered promiscuous mode [ 82.042707][ T5588] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.042829][ T5588] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.046495][ T5588] bridge_slave_0: entered allmulticast mode [ 82.048990][ T5588] bridge_slave_0: entered promiscuous mode [ 82.063713][ T5587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.073289][ T5590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.074616][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.074729][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.076966][ T5593] bridge_slave_1: entered allmulticast mode [ 82.079418][ T5593] bridge_slave_1: entered promiscuous mode [ 82.081608][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.081728][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.081879][ T5592] bridge_slave_0: entered allmulticast mode [ 82.084499][ T5592] bridge_slave_0: entered promiscuous mode [ 82.090588][ T5588] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.090702][ T5588] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.090913][ T5588] bridge_slave_1: entered allmulticast mode [ 82.094728][ T5588] bridge_slave_1: entered promiscuous mode [ 82.101430][ T5587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.187556][ T5590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.203019][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.203196][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.203341][ T5592] bridge_slave_1: entered allmulticast mode [ 82.206767][ T5592] bridge_slave_1: entered promiscuous mode [ 82.311323][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.330752][ T5588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.334692][ T5587] team0: Port device team_slave_0 added [ 82.339886][ T5590] team0: Port device team_slave_0 added [ 82.344143][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.353058][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.360370][ T5588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.363029][ T5590] team0: Port device team_slave_1 added [ 82.390237][ T5587] team0: Port device team_slave_1 added [ 82.392374][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.490186][ T5593] team0: Port device team_slave_0 added [ 82.530407][ T5588] team0: Port device team_slave_0 added [ 82.537387][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.537405][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.537430][ T5590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.543775][ T5593] team0: Port device team_slave_1 added [ 82.544565][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.544578][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.544601][ T5587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.550976][ T5592] team0: Port device team_slave_0 added [ 82.553475][ T5588] team0: Port device team_slave_1 added [ 82.554533][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.554546][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.554570][ T5590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.581286][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.581303][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.581327][ T5587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.602870][ T5592] team0: Port device team_slave_1 added [ 82.707962][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.707980][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.708004][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.716745][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.716762][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.716786][ T5588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.743111][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.743129][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.743153][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.746634][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.746650][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.746674][ T5588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.748764][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.748777][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.748816][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.820125][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.820142][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.820165][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.899232][ T5590] hsr_slave_0: entered promiscuous mode [ 82.900738][ T5590] hsr_slave_1: entered promiscuous mode [ 82.915758][ T5587] hsr_slave_0: entered promiscuous mode [ 82.917395][ T5587] hsr_slave_1: entered promiscuous mode [ 82.919387][ T5587] debugfs: 'hsr0' already exists in 'hsr' [ 82.919504][ T5587] Cannot create hsr debugfs directory [ 83.043834][ T5593] hsr_slave_0: entered promiscuous mode [ 83.044589][ T5593] hsr_slave_1: entered promiscuous mode [ 83.047778][ T5593] debugfs: 'hsr0' already exists in 'hsr' [ 83.047802][ T5593] Cannot create hsr debugfs directory [ 83.084694][ T5588] hsr_slave_0: entered promiscuous mode [ 83.086827][ T5588] hsr_slave_1: entered promiscuous mode [ 83.087753][ T5588] debugfs: 'hsr0' already exists in 'hsr' [ 83.087776][ T5588] Cannot create hsr debugfs directory [ 83.455069][ T5605] Bluetooth: hci1: command tx timeout [ 83.455104][ T5605] Bluetooth: hci4: command tx timeout [ 83.455124][ T5605] Bluetooth: hci3: command tx timeout [ 83.534977][ T5594] Bluetooth: hci0: command tx timeout [ 83.615076][ T5594] Bluetooth: hci2: command tx timeout [ 83.642895][ T5592] hsr_slave_0: entered promiscuous mode [ 83.643639][ T5592] hsr_slave_1: entered promiscuous mode [ 83.644149][ T5592] debugfs: 'hsr0' already exists in 'hsr' [ 83.644170][ T5592] Cannot create hsr debugfs directory [ 84.334238][ T5590] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.384759][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.390915][ T5590] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.408666][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.413966][ T5590] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.450481][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.469127][ T5590] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.508850][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.606720][ T5593] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.638869][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.642862][ T5593] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.691134][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.703940][ T5593] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.729482][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.751161][ T5593] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.779269][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.917628][ T5588] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.958537][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.972611][ T5588] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.000641][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.011658][ T5588] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.039309][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.081870][ T5588] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.111606][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.261504][ T5592] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.289778][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.306269][ T5592] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.331314][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.339120][ T5592] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.367467][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.392548][ T5592] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.428673][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.516081][ T5590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.535150][ T5594] Bluetooth: hci3: command tx timeout [ 85.535182][ T5594] Bluetooth: hci4: command tx timeout [ 85.535203][ T5594] Bluetooth: hci1: command tx timeout [ 85.572684][ T5587] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.600385][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.612638][ T5587] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.615922][ T5605] Bluetooth: hci0: command tx timeout [ 85.637973][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.643736][ T5587] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.691436][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.695060][ T5605] Bluetooth: hci2: command tx timeout [ 85.703629][ T5587] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.750399][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.793116][ T5590] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.820500][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.848396][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.852058][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.905522][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.907320][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.963985][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.997386][ T5588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.000541][ T3406] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.001294][ T3406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.060801][ T3406] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.060943][ T3406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.127142][ T5588] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.177973][ T3406] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.178150][ T3406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.231293][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.251514][ T3406] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.251708][ T3406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.404760][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.439514][ T5587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.496933][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.497074][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.620972][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.621080][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.709734][ T5587] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.772409][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.772540][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.812491][ T1000] cfg80211: failed to load regulatory.db [ 86.909971][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.910174][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.360224][ T5590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.615098][ T5594] Bluetooth: hci4: command tx timeout [ 87.615131][ T5594] Bluetooth: hci3: command tx timeout [ 87.615180][ T5605] Bluetooth: hci1: command tx timeout [ 87.696463][ T5598] Bluetooth: hci0: command tx timeout [ 87.775104][ T5598] Bluetooth: hci2: command tx timeout [ 87.884245][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.912260][ T5590] veth0_vlan: entered promiscuous mode [ 87.971303][ T5590] veth1_vlan: entered promiscuous mode [ 88.024521][ T5588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.179257][ T5593] veth0_vlan: entered promiscuous mode [ 88.186602][ T5590] veth0_macvtap: entered promiscuous mode [ 88.201711][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.230550][ T5590] veth1_macvtap: entered promiscuous mode [ 88.267024][ T5593] veth1_vlan: entered promiscuous mode [ 88.344544][ T5588] veth0_vlan: entered promiscuous mode [ 88.380337][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.420488][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.436827][ T5587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.461842][ T5588] veth1_vlan: entered promiscuous mode [ 88.561177][ T5593] veth0_macvtap: entered promiscuous mode [ 88.647121][ T5592] veth0_vlan: entered promiscuous mode [ 88.652241][ T5593] veth1_macvtap: entered promiscuous mode [ 88.882236][ T5592] veth1_vlan: entered promiscuous mode [ 88.931692][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.934470][ T5588] veth0_macvtap: entered promiscuous mode [ 89.000416][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.014351][ T5588] veth1_macvtap: entered promiscuous mode [ 89.096752][ T1357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.096780][ T1357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.201515][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.229178][ T5587] veth0_vlan: entered promiscuous mode [ 89.289884][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.347807][ T5592] veth0_macvtap: entered promiscuous mode [ 89.351731][ T3341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.351753][ T3341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.371370][ T5592] veth1_macvtap: entered promiscuous mode [ 89.446654][ T5587] veth1_vlan: entered promiscuous mode [ 89.687874][ T5590] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.744669][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.909731][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.947796][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.947817][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.123798][ T5782] process 'syz.1.2' launched './file0' with NULL argv: empty string added [ 90.298133][ T5587] veth0_macvtap: entered promiscuous mode [ 90.436622][ T124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.436642][ T124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.498587][ T5587] veth1_macvtap: entered promiscuous mode [ 90.719372][ T1000] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.833256][ T1356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.833275][ T1356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.026121][ T1000] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 91.064110][ T1000] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.064147][ T1000] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.064175][ T1000] usb 2-1: config 0 interface 0 has no altsetting 0 [ 91.064209][ T1000] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.071892][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.106655][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.106677][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.202500][ T1000] usb 2-1: config 0 descriptor?? [ 91.224572][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.348679][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.348700][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.739069][ T3341] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.740302][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.740319][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.874497][ T1000] hid-multitouch 0003:0EEF:72C4.0001: hidraw0: USB HID v0.00 Joystick [HID 0eef:72c4] on usb-dummy_hcd.1-1/input0 [ 92.075832][ T3341] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.321715][ T1000] usb 2-1: USB disconnect, device number 2 [ 93.024201][ T66] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.024560][ T66] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.043294][ T5794] input: syz0 as /devices/virtual/input/input6 [ 93.090582][ T66] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.100810][ T5794] input: failed to attach handler leds to device input6, error: -6 [ 93.502455][ T1352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.502474][ T1352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.668462][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.668937][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.942457][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.953842][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.954053][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.954222][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.954622][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.993272][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.993295][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.222014][ T5819] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.338168][ T124] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.341538][ T1352] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.341758][ T1352] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.341939][ T1352] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.342119][ T1352] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.468174][ T1352] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.468699][ T1352] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.469282][ T1352] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.634938][ T5599] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.833189][ T5599] usb 3-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 96.864184][ T5599] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 96.864214][ T5599] usb 3-1: Product: syz [ 96.864229][ T5599] usb 3-1: Manufacturer: syz [ 97.977373][ T37] audit: type=1326 audit(1789142651.528:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5843 comm="syz.0.22" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86d69e159 code=0x7ffc0000 [ 98.303495][ T37] audit: type=1326 audit(1789142651.808:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5843 comm="syz.0.22" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc86d69ddeb code=0x7ffc0000 [ 98.303596][ T37] audit: type=1326 audit(1789142652.528:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5843 comm="syz.0.22" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86d69e159 code=0x7ffc0000 [ 98.303636][ T37] audit: type=1326 audit(1789142652.528:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5843 comm="syz.0.22" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc86d69e159 code=0x7ffc0000 [ 98.858353][ T5599] scsi host1: uas [ 98.972629][ C0] usb 3-1: stat urb: no pending cmd for uas-tag 0 [ 99.180977][ C0] usb 3-1: cmd cmplt err -71 [ 99.198479][ T5599] usb 3-1: USB disconnect, device number 2 [ 99.315312][ T5599] scsi 1:0:0:0: tag#24 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 99.315410][ T5599] scsi 1:0:0:0: tag#24 CDB: Inquiry 12 00 00 00 24 00 [ 100.954957][ T4976] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.104948][ T4976] usb 4-1: Using ep0 maxpacket: 16 [ 101.105806][ T4976] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 101.186329][ T4976] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 101.206932][ T4976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.206961][ T4976] usb 4-1: Product: syz [ 101.206975][ T4976] usb 4-1: Manufacturer: syz [ 101.206988][ T4976] usb 4-1: SerialNumber: syz [ 101.347674][ T4976] r8152-cfgselector 4-1: Unknown version 0x0000 [ 101.347704][ T4976] r8152-cfgselector 4-1: config 0 descriptor?? [ 101.962203][ T4976] r8152-cfgselector 4-1: USB disconnect, device number 2 [ 102.166520][ T5577] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 102.331628][ T5577] usb 5-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 102.333588][ T5577] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 102.333613][ T5577] usb 5-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 102.349067][ T5577] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 102.349095][ T5577] usb 5-1: Product: syz [ 102.349109][ T5577] usb 5-1: SerialNumber: syz [ 102.370655][ T5907] netlink: 68 bytes leftover after parsing attributes in process `syz.1.43'. [ 102.470220][ T5577] rndis_host 5-1:7.0: ACM capabilities ff, not really RNDIS? [ 102.473379][ T5577] option 5-1:7.0: GSM modem (1-port) converter detected [ 102.694771][ T1000] usb 5-1: USB disconnect, device number 2 [ 102.742243][ T1000] option 5-1:7.0: device disconnected [ 102.985397][ T5914] gretap1: entered allmulticast mode [ 106.385725][ T5969] FAULT_INJECTION: forcing a failure. [ 106.385725][ T5969] name failslab, interval 1, probability 0, space 0, times 1 [ 106.385788][ T5969] CPU: 0 UID: 0 PID: 5969 Comm: syz.0.55 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 106.385813][ T5969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.385834][ T5969] Call Trace: [ 106.385842][ T5969] [ 106.385852][ T5969] dump_stack_lvl+0xe8/0x150 [ 106.385902][ T5969] should_fail_ex+0x46b/0x600 [ 106.385933][ T5969] ? alloc_slab_obj_exts+0x5c/0x180 [ 106.385959][ T5969] should_failslab+0xa8/0x100 [ 106.385992][ T5969] ? alloc_slab_obj_exts+0x5c/0x180 [ 106.386016][ T5969] __kmalloc_flags_noprof+0x128/0x810 [ 106.386046][ T5969] ? alloc_slab_obj_exts+0x5c/0x180 [ 106.386077][ T5969] alloc_slab_obj_exts+0x5c/0x180 [ 106.386105][ T5969] __memcg_slab_post_alloc_hook+0x675/0xfe0 [ 106.386152][ T5969] ? __d_alloc+0x37/0x6f0 [ 106.386177][ T5969] kmem_cache_alloc_lru_noprof+0x41c/0x680 [ 106.386204][ T5969] ? __d_alloc+0x37/0x6f0 [ 106.386226][ T5969] ? __d_alloc+0x37/0x6f0 [ 106.386255][ T5969] __d_alloc+0x37/0x6f0 [ 106.386279][ T5969] ? hashlen_string+0x54/0x110 [ 106.386302][ T5969] d_alloc_name+0xba/0x270 [ 106.386329][ T5969] ? __pfx_d_alloc_name+0x10/0x10 [ 106.386353][ T5969] ? rt_spin_unlock+0x159/0x200 [ 106.386382][ T5969] proc_setup_self+0x48/0x1c0 [ 106.386411][ T5969] proc_fill_super+0x57d/0x760 [ 106.386442][ T5969] ? __pfx_proc_fill_super+0x10/0x10 [ 106.386472][ T5969] get_tree_nodev+0xbb/0x150 [ 106.386499][ T5969] vfs_get_tree+0x92/0x2a0 [ 106.386527][ T5969] do_new_mount+0x319/0xdc0 [ 106.386547][ T5969] ? cap_capable+0x123/0x460 [ 106.386575][ T5969] ? __pfx_do_new_mount+0x10/0x10 [ 106.386598][ T5969] ? ns_capable+0x89/0xe0 [ 106.386631][ T5969] ? path_mount+0x647/0x1050 [ 106.386655][ T5969] ? user_path_at+0xd4/0x160 [ 106.386681][ T5969] __se_sys_mount+0x31d/0x420 [ 106.386708][ T5969] ? __pfx___se_sys_mount+0x10/0x10 [ 106.386737][ T5969] ? __x64_sys_mount+0x20/0xc0 [ 106.386760][ T5969] do_syscall_64+0x166/0x520 [ 106.386788][ T5969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.386810][ T5969] ? clear_bhb_loop+0x70/0xc0 [ 106.386835][ T5969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.386863][ T5969] RIP: 0033:0x7fc86d69e159 [ 106.386891][ T5969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.386909][ T5969] RSP: 002b:00007fc86b8f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 106.386931][ T5969] RAX: ffffffffffffffda RBX: 00007fc86d925fa0 RCX: 00007fc86d69e159 [ 106.386947][ T5969] RDX: 0000200000000100 RSI: 0000200000000000 RDI: 0000000000000000 [ 106.386961][ T5969] RBP: 00007fc86d73503b R08: 0000000000000000 R09: 0000000000000000 [ 106.386975][ T5969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.386987][ T5969] R13: 00007fc86d926038 R14: 00007fc86d925fa0 R15: 00007fffd2262048 [ 106.387017][ T5969] [ 106.602966][ T5974] capability: warning: `syz.3.57' uses deprecated v2 capabilities in a way that may be insecure [ 107.019520][ T5981] syzkaller1: entered promiscuous mode [ 107.019548][ T5981] syzkaller1: entered allmulticast mode [ 108.838495][ T6001] tipc: Started in network mode [ 108.838528][ T6001] tipc: Node identity 1000001, cluster identity 4369 [ 108.838542][ T6001] tipc: Node number set to 16777217 [ 108.971710][ T5599] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 109.023922][ T6001] tipc: New replicast peer: 127.0.0.1 [ 109.048510][ T6001] tipc: Enabled bearer , priority 10 [ 109.147037][ T5599] usb 3-1: New USB device found, idVendor=044f, idProduct=b651, bcdDevice= 0.00 [ 109.152386][ T5599] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 109.152432][ T5599] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.225894][ T5599] usb 3-1: config 0 descriptor?? [ 109.672609][ T6007] kvm: emulating exchange as write [ 109.747189][ T5599] thrustmaster 0003:044F:B651.0002: unknown main item tag 0x0 [ 109.747237][ T5599] thrustmaster 0003:044F:B651.0002: unknown main item tag 0x0 [ 109.747265][ T5599] thrustmaster 0003:044F:B651.0002: unknown main item tag 0x0 [ 109.747292][ T5599] thrustmaster 0003:044F:B651.0002: unknown main item tag 0x0 [ 109.822920][ T5599] thrustmaster 0003:044F:B651.0002: hidraw0: USB HID v0.04 Device [HID 044f:b651] on usb-dummy_hcd.2-1/input0 [ 109.979161][ T5577] usb 3-1: USB disconnect, device number 3 [ 110.472161][ T6031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.77'. [ 115.361771][ T37] audit: type=1326 audit(1789142669.588:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6102 comm="syz.4.95" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cb52ae159 code=0x7ffc0000 [ 115.361842][ T37] audit: type=1326 audit(1789142669.588:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6102 comm="syz.4.95" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cb52ae159 code=0x7ffc0000 [ 115.372745][ T37] audit: type=1326 audit(1789142669.598:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6102 comm="syz.4.95" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f8cb52ae159 code=0x7ffc0000 [ 115.384032][ T37] audit: type=1326 audit(1789142669.608:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6102 comm="syz.4.95" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cb52ae159 code=0x7ffc0000 [ 115.386082][ T37] audit: type=1326 audit(1789142669.618:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6102 comm="syz.4.95" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f8cb52ae159 code=0x7ffc0000 [ 115.412025][ T37] audit: type=1326 audit(1789142669.638:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6102 comm="syz.4.95" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cb52ae159 code=0x7ffc0000 [ 115.413628][ T37] audit: type=1326 audit(1789142669.638:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6102 comm="syz.4.95" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cb52ae159 code=0x7ffc0000 [ 117.044965][ T6058] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 117.268163][ T6058] usb 3-1: unable to get BOS descriptor or descriptor too short [ 117.268773][ T6058] usb 3-1: not running at top speed; connect to a high speed hub [ 117.270515][ T6058] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 117.272586][ T6058] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 117.349914][ T6058] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.349932][ T6058] usb 3-1: Product: syz [ 117.349940][ T6058] usb 3-1: Manufacturer: syz [ 117.349948][ T6058] usb 3-1: SerialNumber: syz [ 117.690356][ T6058] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 117.867144][ T6058] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 117.867176][ T6058] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 118.267836][ T6058] usb 3-1: invalid uac2 rates [ 118.267945][ T6058] usb 3-1: invalid uac2 rates [ 118.268908][ T6058] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 118.268932][ T6058] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 118.563273][ T6058] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 119.343646][ T6131] veth1_macvtap: left promiscuous mode [ 119.698532][ T6138] futex_wake_op: syz.3.104 tries to shift op by 144; fix this program [ 119.749350][ T6058] usb 3-1: USB disconnect, device number 4 [ 120.048578][ T6146] FAULT_INJECTION: forcing a failure. [ 120.048578][ T6146] name failslab, interval 1, probability 0, space 0, times 0 [ 120.048622][ T6146] CPU: 0 UID: 0 PID: 6146 Comm: syz.0.107 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 120.048646][ T6146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.048658][ T6146] Call Trace: [ 120.048666][ T6146] [ 120.048675][ T6146] dump_stack_lvl+0xe8/0x150 [ 120.048716][ T6146] should_fail_ex+0x46b/0x600 [ 120.048749][ T6146] should_failslab+0xa8/0x100 [ 120.048785][ T6146] __kmalloc_noprof+0xfb/0x790 [ 120.048814][ T6146] ? security_sb_alloc+0x48/0x310 [ 120.048842][ T6146] ? security_sb_alloc+0x48/0x310 [ 120.048877][ T6146] security_sb_alloc+0x48/0x310 [ 120.048908][ T6146] sget_fc+0x984/0x1a60 [ 120.048932][ T6146] ? __pfx_kernfs_test_super+0x10/0x10 [ 120.048959][ T6146] ? __pfx_kernfs_set_super+0x10/0x10 [ 120.048983][ T6146] ? __pfx_sget_fc+0x10/0x10 [ 120.049004][ T6146] ? __kasan_kmalloc+0x93/0xb0 [ 120.049033][ T6146] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 120.049058][ T6146] ? kernfs_get_tree+0xc4/0x980 [ 120.049077][ T6146] ? kernfs_get_tree+0xc4/0x980 [ 120.049104][ T6146] kernfs_get_tree+0x1e9/0x980 [ 120.049126][ T6146] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 120.049153][ T6146] ? rt_spin_unlock+0x165/0x200 [ 120.049180][ T6146] ? __pfx_kernfs_get_tree+0x10/0x10 [ 120.049202][ T6146] ? cap_capable+0x123/0x460 [ 120.049228][ T6146] ? bpf_lsm_capable+0x9/0x20 [ 120.049257][ T6146] vfs_get_tree+0x92/0x2a0 [ 120.049284][ T6146] do_new_mount+0x319/0xdc0 [ 120.049304][ T6146] ? cap_capable+0x123/0x460 [ 120.049329][ T6146] ? __pfx_do_new_mount+0x10/0x10 [ 120.049350][ T6146] ? ns_capable+0x89/0xe0 [ 120.049378][ T6146] ? path_mount+0x647/0x1050 [ 120.049402][ T6146] ? user_path_at+0xd4/0x160 [ 120.049428][ T6146] __se_sys_mount+0x31d/0x420 [ 120.049454][ T6146] ? __pfx___se_sys_mount+0x10/0x10 [ 120.049483][ T6146] ? __x64_sys_mount+0x20/0xc0 [ 120.049504][ T6146] do_syscall_64+0x166/0x520 [ 120.049529][ T6146] ? trace_irq_disable+0x3b/0x140 [ 120.049554][ T6146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.049584][ T6146] ? clear_bhb_loop+0x70/0xc0 [ 120.049609][ T6146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.049629][ T6146] RIP: 0033:0x7fc86d69e159 [ 120.049656][ T6146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.049673][ T6146] RSP: 002b:00007fc86b8f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 120.049696][ T6146] RAX: ffffffffffffffda RBX: 00007fc86d925fa0 RCX: 00007fc86d69e159 [ 120.049711][ T6146] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 120.049724][ T6146] RBP: 00007fc86d73503b R08: 0000000000000000 R09: 0000000000000000 [ 120.049736][ T6146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.049747][ T6146] R13: 00007fc86d926038 R14: 00007fc86d925fa0 R15: 00007fffd2262048 [ 120.049777][ T6146] [ 121.765572][ T5818] udevd[5818]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.109178][ T6165] syzkaller0: entered promiscuous mode [ 122.109197][ T6165] syzkaller0: entered allmulticast mode [ 122.214929][ T5604] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 122.294332][ T5577] logitech-hidpp-device 0003:046D:C082.0003: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 122.408731][ T5604] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 122.429885][ T5604] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 122.429917][ T5604] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 122.433124][ T5604] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.433153][ T5604] usb 4-1: Product: syz [ 122.433168][ T5604] usb 4-1: Manufacturer: syz [ 122.433183][ T5604] usb 4-1: SerialNumber: syz [ 122.434011][ T6168] fido_id[6168]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 122.872841][ T5604] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 122.933466][ T6176] netlink: 28 bytes leftover after parsing attributes in process `syz.4.114'. [ 123.153527][ T6176] veth0_macvtap: left promiscuous mode [ 123.453357][ T1000] usb 4-1: USB disconnect, device number 3 [ 123.483311][ T1000] usblp0: removed [ 124.367157][ T5577] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 124.550668][ T5577] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 124.558327][ T5577] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.558362][ T5577] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 124.558387][ T5577] usb 4-1: config 0 interface 0 has no altsetting 0 [ 124.558420][ T5577] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.597407][ T5577] usb 4-1: config 0 descriptor?? [ 125.005869][ T6058] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 125.064587][ T5577] hid-multitouch 0003:0EEF:72C4.0004: unbalanced collection at end of report description [ 125.070820][ T5577] hid-multitouch 0003:0EEF:72C4.0004: probe with driver hid-multitouch failed with error -22 [ 125.184887][ T6058] usb 5-1: Using ep0 maxpacket: 32 [ 125.190881][ T6058] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 125.193301][ T6058] usb 5-1: too many endpoints for config 0 interface 0 altsetting 129: 33, using maximum allowed: 30 [ 125.193347][ T6058] usb 5-1: config 0 interface 0 altsetting 129 endpoint 0x2 has an invalid bInterval 65, changing to 10 [ 125.193372][ T6058] usb 5-1: config 0 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 33 [ 125.193398][ T6058] usb 5-1: config 0 interface 0 has no altsetting 0 [ 125.193431][ T6058] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.279328][ T5604] usb 4-1: USB disconnect, device number 4 [ 125.391139][ T6058] usb 5-1: config 0 descriptor?? [ 125.511531][ T6214] 9p: Bad value for 'rfdno' [ 125.876056][ T6058] zydacron 0003:13EC:0006.0005: unknown main item tag 0x0 [ 125.876100][ T6058] zydacron 0003:13EC:0006.0005: unknown main item tag 0x0 [ 125.876127][ T6058] zydacron 0003:13EC:0006.0005: unknown main item tag 0x0 [ 125.876154][ T6058] zydacron 0003:13EC:0006.0005: unknown main item tag 0x0 [ 125.876180][ T6058] zydacron 0003:13EC:0006.0005: unknown main item tag 0x0 [ 125.876207][ T6058] zydacron 0003:13EC:0006.0005: unknown main item tag 0x0 [ 125.876351][ T6058] zydacron 0003:13EC:0006.0005: unknown main item tag 0x0 [ 125.876381][ T6058] zydacron 0003:13EC:0006.0005: unknown main item tag 0x0 [ 125.876407][ T6058] zydacron 0003:13EC:0006.0005: unknown main item tag 0x0 [ 125.876439][ T6058] zydacron 0003:13EC:0006.0005: unknown main item tag 0x0 [ 126.051408][ T6058] zydacron 0003:13EC:0006.0005: hidraw0: USB HID v0.81 Device [HID 13ec:0006] on usb-dummy_hcd.4-1/input0 [ 126.110152][ T6058] usb 5-1: USB disconnect, device number 3 [ 126.257516][ T6220] fido_id[6220]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 126.666580][ T6229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.134'. [ 126.835783][ T6058] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 126.974960][ T5766] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 126.994877][ T6058] usb 1-1: Using ep0 maxpacket: 16 [ 127.012509][ T6058] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 127.024138][ T6058] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.024167][ T6058] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.024185][ T6058] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 127.024209][ T6058] usb 1-1: config 0 interface 0 has no altsetting 0 [ 127.024238][ T6058] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.128262][ T6058] usb 1-1: config 0 descriptor?? [ 127.155612][ T5766] usb 3-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 127.162954][ T5766] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.163048][ T5766] usb 3-1: config 0 interface 0 has no altsetting 0 [ 127.163081][ T5766] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.237563][ T5766] usb 3-1: config 0 descriptor?? [ 127.564672][ T6058] hid (null): unknown global tag 0xe [ 127.579741][ T6058] hid (null): unknown global tag 0x88 [ 127.579872][ T6058] hid (null): global environment stack underflow [ 127.813164][ T5766] usb 1-1: USB disconnect, device number 2 [ 127.917335][ T5597] usb 3-1: USB disconnect, device number 5 [ 129.746554][ T6271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.151'. [ 129.795022][ T5577] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 129.846468][ T6271] hsr_slave_1 (unregistering): left promiscuous mode [ 129.948325][ T5577] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 129.949744][ T5577] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.949778][ T5577] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 129.949804][ T5577] usb 3-1: config 0 interface 0 has no altsetting 0 [ 129.949826][ T5577] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.975377][ T5577] usb 3-1: config 0 descriptor?? [ 129.975669][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 131.057870][ T10] usb 4-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 131.059864][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.059896][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.059977][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.060020][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.108641][ T10] usb 4-1: config 0 descriptor?? [ 131.312928][ T6283] ======================================================= [ 131.312928][ T6283] WARNING: The mand mount option has been deprecated and [ 131.312928][ T6283] and is ignored by this kernel. Remove the mand [ 131.312928][ T6283] option from the mount to silence this warning. [ 131.312928][ T6283] ======================================================= [ 131.526734][ T5577] sony 0003:054C:0268.0008: unbalanced collection at end of report description [ 131.528122][ T5577] sony 0003:054C:0268.0008: parse failed [ 131.528285][ T5577] sony 0003:054C:0268.0008: probe with driver sony failed with error -22 [ 131.614568][ T5577] usb 3-1: USB disconnect, device number 6 [ 131.720196][ T10] hid_parser_main: 30 callbacks suppressed [ 131.720221][ T10] elecom 0003:056E:010C.0009: unknown main item tag 0x0 [ 131.720251][ T10] elecom 0003:056E:010C.0009: unknown main item tag 0x0 [ 131.720276][ T10] elecom 0003:056E:010C.0009: unknown main item tag 0x0 [ 131.720301][ T10] elecom 0003:056E:010C.0009: unknown main item tag 0x0 [ 131.720323][ T10] elecom 0003:056E:010C.0009: unknown main item tag 0x0 [ 131.720338][ T10] elecom 0003:056E:010C.0009: unknown main item tag 0x0 [ 131.720364][ T10] elecom 0003:056E:010C.0009: unknown main item tag 0x0 [ 131.720380][ T10] elecom 0003:056E:010C.0009: unknown main item tag 0x0 [ 131.720395][ T10] elecom 0003:056E:010C.0009: unknown main item tag 0x0 [ 131.720409][ T10] elecom 0003:056E:010C.0009: unknown main item tag 0x0 [ 131.765511][ T10] elecom 0003:056E:010C.0009: hidraw0: USB HID v0.00 Device [HID 056e:010c] on usb-dummy_hcd.3-1/input0 [ 131.866623][ T10] usb 4-1: USB disconnect, device number 5 [ 132.675142][ T5577] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 132.833907][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.834008][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.834933][ T5577] usb 4-1: Using ep0 maxpacket: 16 [ 132.836544][ T5577] usb 4-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 132.862207][ T5577] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.862235][ T5577] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 132.862259][ T5577] usb 4-1: config 0 interface 0 has no altsetting 0 [ 132.862295][ T5577] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.883753][ T5577] usb 4-1: config 0 descriptor?? [ 133.426565][ T5577] pantherlord 0003:0810:0001.000A: unbalanced collection at end of report description [ 133.432134][ T5577] pantherlord 0003:0810:0001.000A: parse failed [ 133.432206][ T5577] pantherlord 0003:0810:0001.000A: probe with driver pantherlord failed with error -22 [ 133.602473][ T6309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.162'. [ 133.609403][ T5577] usb 4-1: USB disconnect, device number 6 [ 134.280592][ T5605] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 134.340777][ T5605] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 134.342611][ T5605] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 134.363955][ T5605] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 134.557179][ T124] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.099471][ T5605] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 135.654918][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 135.804910][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 135.806687][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 135.809267][ T10] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.809300][ T10] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.809328][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 135.809361][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.882903][ T10] usb 2-1: config 0 descriptor?? [ 136.079400][ T124] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.400737][ T10] logitech 0003:046D:C29C.000B: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0 [ 136.524142][ T10] logitech 0003:046D:C29C.000B: no inputs found [ 136.643183][ T10] usb 2-1: USB disconnect, device number 3 [ 136.759678][ T6355] fido_id[6355]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 137.166780][ T6364] netlink: 20 bytes leftover after parsing attributes in process `syz.2.176'. [ 137.311057][ T6365] fuse: Bad value for 'fd' [ 137.324388][ T6365] 9p: Bad value for 'wfdno' [ 138.173902][ T124] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.562085][ T6374] netlink: 'syz.1.180': attribute type 1 has an invalid length. [ 138.562111][ T6374] netlink: 224 bytes leftover after parsing attributes in process `syz.1.180'. [ 138.858862][ T5598] Bluetooth: hci1: command tx timeout [ 140.709668][ T124] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.895435][ T5598] Bluetooth: hci1: command tx timeout [ 140.908127][ T5604] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 140.944938][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 141.086279][ T5604] usb 3-1: Using ep0 maxpacket: 16 [ 141.088628][ T5604] usb 3-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 141.092862][ T5604] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.092891][ T5604] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 141.092917][ T5604] usb 3-1: config 0 interface 0 has no altsetting 0 [ 141.092951][ T5604] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.095056][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 141.095993][ T10] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 141.116516][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.116543][ T10] usb 5-1: Product: syz [ 141.116557][ T10] usb 5-1: Manufacturer: syz [ 141.116571][ T10] usb 5-1: SerialNumber: syz [ 141.203368][ T5604] usb 3-1: config 0 descriptor?? [ 141.681111][ T5604] pantherlord 0003:0810:0001.000C: no output reports found [ 141.712136][ T5604] pantherlord 0003:0810:0001.000C: hidraw0: USB HID v0.0a Joystick [HID 0810:0001] on usb-dummy_hcd.2-1/input0 [ 141.865085][ T10] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 141.880521][ T10] usb 5-1: USB disconnect, device number 4 [ 141.918102][ T9] usb 3-1: USB disconnect, device number 7 [ 142.974968][ T5598] Bluetooth: hci1: command tx timeout [ 144.110514][ T124] bridge_slave_1: left allmulticast mode [ 144.110752][ T124] bridge_slave_1: left promiscuous mode [ 144.129142][ T124] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.057021][ T5598] Bluetooth: hci1: command tx timeout [ 145.194485][ T124] bridge_slave_0: left allmulticast mode [ 145.194531][ T124] bridge_slave_0: left promiscuous mode [ 145.234477][ T124] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.266149][ T124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.348233][ T124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.401235][ T124] bond0 (unregistering): Released all slaves [ 148.479053][ T5251] 8021q: adding VLAN 0 to HW filter on device eth1 [ 148.490553][ T6524] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 150.044948][ T5604] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 150.255804][ T5604] usb 4-1: New USB device found, idVendor=056a, idProduct=0100, bcdDevice= 0.00 [ 150.257412][ T5604] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.257447][ T5604] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 150.257488][ T5604] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.438438][ T5604] usb 4-1: config 0 descriptor?? [ 150.834615][ T5251] 8021q: adding VLAN 0 to HW filter on device eth2 [ 151.112050][ T5604] usb 4-1: USB disconnect, device number 7 [ 151.627560][ T6595] ½ [ 152.603506][ T6317] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.606894][ T6317] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.607091][ T6317] bridge_slave_0: entered allmulticast mode [ 152.609951][ T6317] bridge_slave_0: entered promiscuous mode [ 152.658507][ T6317] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.658743][ T6317] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.658934][ T6317] bridge_slave_1: entered allmulticast mode [ 152.686789][ T6317] bridge_slave_1: entered promiscuous mode [ 153.590140][ T6317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.718020][ T6317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.875915][ T6317] team0: Port device team_slave_0 added [ 154.127482][ T124] hsr_slave_0: left promiscuous mode [ 154.128845][ T124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.151367][ T124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.179589][ T124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.179614][ T124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.258163][ T124] veth1_macvtap: left promiscuous mode [ 156.258402][ T124] veth0_macvtap: left promiscuous mode [ 156.258610][ T124] veth1_vlan: left promiscuous mode [ 156.258902][ T124] veth0_vlan: left promiscuous mode [ 158.195540][ T124] team0 (unregistering): Port device team_slave_1 removed [ 158.257343][ T124] team0 (unregistering): Port device team_slave_0 removed [ 158.469417][ T6317] team0: Port device team_slave_1 added [ 158.515037][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 158.546842][ T5251] 8021q: adding VLAN 0 to HW filter on device eth3 [ 158.624392][ T6317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.624470][ T6317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.624493][ T6317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.681711][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 158.681754][ T10] usb 4-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 158.682838][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.682862][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 158.682894][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 158.684498][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 158.684522][ T10] usb 4-1: Product: syz [ 158.684536][ T10] usb 4-1: Manufacturer: syz [ 158.703142][ T6317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.703159][ T6317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.703183][ T6317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.783728][ T10] uvcvideo 4-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 158.979698][ T10] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 2 on unit 49: 0 (exp. 1). [ 159.096406][ T6317] hsr_slave_0: entered promiscuous mode [ 159.097533][ T6317] hsr_slave_1: entered promiscuous mode [ 159.098302][ T6317] debugfs: 'hsr0' already exists in 'hsr' [ 159.098324][ T6317] Cannot create hsr debugfs directory [ 159.187983][ T10] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 3 on unit 49: -71 (exp. 1). [ 159.188467][ T10] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 6 on unit 49: -71 (exp. 1). [ 159.190334][ T10] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 8 on unit 49: -71 (exp. 1). [ 159.198947][ T10] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 9 on unit 49: -71 (exp. 1). [ 159.199906][ T10] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 5 on unit 49: -71 (exp. 1). [ 159.200397][ T10] uvcvideo 4-1:1.0: Failed to query (GET_CUR) UVC control 5 on unit 49: -71 (exp. 1). [ 159.200862][ T10] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 11 on unit 49: -71 (exp. 1). [ 159.202571][ T10] uvcvideo 4-1:1.0: Failed to query (GET_INFO) UVC control 13 on unit 49: -71 (exp. 1). [ 159.202782][ T10] uvcvideo 4-1:1.0: No streaming interface found for terminal 32770. [ 159.269256][ T10] usb 4-1: USB disconnect, device number 8 [ 159.664917][ T5597] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 159.837054][ T5597] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 159.858771][ T5597] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.858799][ T5597] usb 2-1: Product: syz [ 159.858813][ T5597] usb 2-1: Manufacturer: syz [ 159.858827][ T5597] usb 2-1: SerialNumber: syz [ 160.312859][ T5597] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 160.312922][ T5597] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 160.312943][ T5597] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 161.531885][ T5597] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 161.570176][ T5597] usb 2-1: USB disconnect, device number 4 [ 162.051264][ T5251] 8021q: adding VLAN 0 to HW filter on device eth4 [ 163.184978][ T5604] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 163.345293][ T5604] usb 4-1: Using ep0 maxpacket: 8 [ 163.346091][ T5604] usb 4-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 163.347426][ T5604] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.347456][ T5604] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.347478][ T5604] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 163.347518][ T5604] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.450611][ T5604] usb 4-1: config 0 descriptor?? [ 163.586983][ T6317] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 163.986144][ T6718] binder: BINDER_SET_CONTEXT_MGR already set [ 163.986207][ T6718] binder: 6712:6718 ioctl 4018620d 200000004a80 returned -16 [ 164.808379][ T6317] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 164.914632][ T6317] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 165.919630][ T6317] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 165.985421][ T6317] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 166.132823][ T5604] usbhid 4-1:0.0: can't add hid device: -71 [ 166.133036][ T5604] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 166.149392][ T5604] usb 4-1: USB disconnect, device number 9 [ 166.309195][ T6317] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 166.326617][ T6317] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 166.403439][ T6317] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 166.949680][ T6317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.050254][ T6317] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.077536][ T1357] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.077630][ T1357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.177228][ T1357] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.177377][ T1357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.297347][ T4976] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 169.315961][ T6317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.448082][ T4976] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 169.450267][ T4976] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.450315][ T4976] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 169.492833][ T4976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 169.492863][ T4976] usb 2-1: SerialNumber: syz [ 169.546058][ T4976] usb 2-1: No union descriptors [ 169.792808][ T9] usb 2-1: USB disconnect, device number 5 [ 170.153857][ T6807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.284'. [ 170.980463][ T6317] veth0_vlan: entered promiscuous mode [ 171.108983][ T6317] veth1_vlan: entered promiscuous mode [ 171.295311][ T6317] veth0_macvtap: entered promiscuous mode [ 171.309381][ T6317] veth1_macvtap: entered promiscuous mode [ 171.327181][ T6819] device-mapper: ioctl: Unable to rename non-existent device, to j [ 171.484945][ T31] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 171.526050][ T6317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.570018][ T6317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.645781][ T31] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 171.647279][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.647309][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.647332][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 171.647374][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.652347][ T31] usb 3-1: config 0 descriptor?? [ 172.287204][ T31] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 175.106099][ T5766] usb 3-1: USB disconnect, device number 8 [ 175.485116][ T31] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 175.637390][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 175.639349][ T31] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 149 [ 175.639383][ T31] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.642150][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 175.642176][ T31] usb 4-1: Product: syz [ 175.642191][ T31] usb 4-1: Manufacturer: syz [ 175.642205][ T31] usb 4-1: SerialNumber: syz [ 175.819882][ T6843] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 176.061648][ T31] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 176.187110][ T6851] syzkaller1: entered promiscuous mode [ 176.187137][ T6851] syzkaller1: entered allmulticast mode [ 176.215061][ T6856] device-mapper: ioctl: Unable to rename non-existent device, to j [ 176.254957][ C1] usblp0: nonzero write bulk status received: -71 [ 176.261710][ T5766] usb 4-1: USB disconnect, device number 10 [ 176.295711][ T5766] usblp0: removed [ 176.858548][ T6873] netlink: 20 bytes leftover after parsing attributes in process `syz.2.303'. [ 177.083011][ T6878] fuse: Bad value for 'fd' [ 177.487604][ T1357] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.491532][ T3341] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.492075][ T3341] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.931114][ T1352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.931137][ T1352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.025891][ T2980] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.118109][ T3341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.118131][ T3341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.469395][ T6897] cgroup: Unknown subsys name 'cpuset' [ 179.230369][ T37] audit: type=1326 audit(1789142733.188:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6893 comm="syz.3.309" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7607b1e159 code=0x0 [ 180.871210][ T6915] fuse: Bad value for 'fd' [ 187.030071][ T6969] fuse: fd is not a fuse device [ 187.174452][ T6973] fuse: Bad value for 'fd' [ 187.747412][ T6981] device-mapper: ioctl: Unable to rename non-existent device, to j [ 188.381109][ T7004] fuse: fd is not a fuse device [ 188.401192][ T7006] netlink: 44 bytes leftover after parsing attributes in process `syz.5.337'. [ 188.401637][ T7006] Zero length message leads to an empty skb [ 190.916919][ T7034] fuse: Invalid rootmode [ 192.315834][ T7059] device-mapper: ioctl: Unable to rename non-existent device, to j [ 194.370198][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.875234][ T5711] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 196.840938][ T7112] device-mapper: ioctl: Unable to rename non-existent device, to j [ 196.985396][ T5711] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 196.986229][ T5711] usb 1-1: Dual-Role OTG device on HNP port [ 196.989431][ T5711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.197612][ T5711] gspca_main: spca501-2.14.0 probing 0000:0000 [ 197.213475][ T5711] gspca_spca501: reg write: error -32 [ 197.213493][ T5711] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 197.213594][ T5711] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 197.221191][ T5711] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 197.344647][ T7106] wireguard0: entered promiscuous mode [ 197.770756][ T7124] IPv6: Can't replace route, no match found [ 198.390918][ T7112] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 199.468471][ T7140] input: syz0 as /devices/virtual/input/input9 [ 200.517524][ T7149] netlink: 'syz.3.370': attribute type 1 has an invalid length. [ 200.517550][ T7149] netlink: 'syz.3.370': attribute type 4 has an invalid length. [ 200.517564][ T7149] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.370'. [ 201.102240][ T7164] device-mapper: ioctl: Unable to rename non-existent device, to j [ 201.481235][ T5594] Bluetooth: hci0: command 0x0406 tx timeout [ 201.486701][ T5602] Bluetooth: hci4: command 0x0406 tx timeout [ 202.022102][ T7177] netlink: 'syz.2.381': attribute type 29 has an invalid length. [ 202.250026][ T7174] syz.5.380 (7174) used greatest stack depth: 18760 bytes left [ 203.644296][ T7200] fuse: fd is not a fuse device [ 204.215258][ T7213] netlink: 'syz.5.393': attribute type 2 has an invalid length. [ 204.215284][ T7213] netlink: 132 bytes leftover after parsing attributes in process `syz.5.393'. [ 205.754304][ T7228] Invalid argument reading file caps for ./file0 [ 206.664681][ T5605] Bluetooth: hci2: command 0x0406 tx timeout [ 206.664722][ T5605] Bluetooth: hci3: command 0x0406 tx timeout [ 208.940807][ T7270] netlink: 'syz.4.416': attribute type 10 has an invalid length. [ 208.940833][ T7270] netlink: 2 bytes leftover after parsing attributes in process `syz.4.416'. [ 209.063305][ T7270] bond0: entered promiscuous mode [ 209.063330][ T7270] bond_slave_0: entered promiscuous mode [ 209.105792][ T7270] bond_slave_1: entered promiscuous mode [ 209.106337][ T7270] bridge0: port 3(bond0) entered blocking state [ 209.106459][ T7270] bridge0: port 3(bond0) entered disabled state [ 209.108344][ T7270] bond0: entered allmulticast mode [ 209.108363][ T7270] bond_slave_0: entered allmulticast mode [ 209.108388][ T7270] bond_slave_1: entered allmulticast mode [ 209.196488][ T7270] bridge0: port 3(bond0) entered blocking state [ 209.196654][ T7270] bridge0: port 3(bond0) entered forwarding state [ 211.295418][ T7302] syz.2.427 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 211.760033][ T7311] netlink: 12 bytes leftover after parsing attributes in process `syz.5.430'. [ 215.718848][ T7330] netlink: 44 bytes leftover after parsing attributes in process `syz.4.434'. [ 216.104130][ T7342] netlink: 'syz.5.439': attribute type 29 has an invalid length. [ 217.360725][ T7376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.468255][ T7376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.528777][ T7376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.659780][ T7379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.953028][ T7390] netlink: 'syz.4.458': attribute type 2 has an invalid length. [ 218.360910][ T7400] netlink: 52 bytes leftover after parsing attributes in process `syz.4.463'. [ 218.775196][ T7411] netlink: 28 bytes leftover after parsing attributes in process `syz.2.467'. [ 219.622494][ T1175] IPVS: starting estimator thread 0... [ 219.715067][ T7429] IPVS: using max 10 ests per chain, 24000 per kthread [ 219.746948][ T7436] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 219.971123][ T7439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.281733][ T7447] netlink: 28 bytes leftover after parsing attributes in process `syz.2.479'. [ 220.414060][ T7453] netlink: 72 bytes leftover after parsing attributes in process `syz.2.481'. [ 221.072110][ T7467] netlink: 72 bytes leftover after parsing attributes in process `syz.3.486'. [ 221.582231][ T7476] netlink: 28 bytes leftover after parsing attributes in process `syz.2.491'. [ 221.813162][ T7483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.909802][ T7483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.954068][ T7487] device-mapper: ioctl: Unable to rename non-existent device, to j [ 221.993257][ T7489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.085598][ T7489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.155289][ T7480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.010862][ T7511] netlink: 28 bytes leftover after parsing attributes in process `syz.4.504'. [ 223.087486][ T7514] netlink: 16 bytes leftover after parsing attributes in process `syz.5.506'. [ 223.800421][ T7534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.873963][ T7534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.949455][ T7537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.798168][ T7555] netlink: 28 bytes leftover after parsing attributes in process `syz.1.518'. [ 226.449493][ T1175] IPVS: starting estimator thread 0... [ 226.536110][ T7577] IPVS: using max 9 ests per chain, 21600 per kthread [ 227.771701][ T7595] netlink: 28 bytes leftover after parsing attributes in process `syz.5.533'. [ 228.294497][ T7614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.391652][ T7606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.461447][ T7606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.740957][ T7624] netlink: 64 bytes leftover after parsing attributes in process `syz.5.545'. [ 229.085622][ T7632] netlink: 8 bytes leftover after parsing attributes in process `syz.5.547'. [ 229.521228][ T7642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.574040][ T7642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.655014][ T5604] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 229.674667][ T7645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.731878][ T7647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.805244][ T7648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.825997][ T5604] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 229.827490][ T5604] usb 4-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 229.827521][ T5604] usb 4-1: config 0 interface 0 has no altsetting 0 [ 229.827553][ T5604] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.860847][ T7647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.883313][ T5604] usb 4-1: config 0 descriptor?? [ 230.389269][ T5604] ryos 0003:1E7D:3232.000F: item fetching failed at offset 5/6 [ 230.389931][ T5604] ryos 0003:1E7D:3232.000F: parse failed [ 230.390002][ T5604] ryos 0003:1E7D:3232.000F: probe with driver ryos failed with error -22 [ 230.570307][ T31] usb 4-1: USB disconnect, device number 11 [ 230.832964][ T7658] netlink: 72 bytes leftover after parsing attributes in process `syz.5.556'. [ 231.028404][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.558'. [ 231.272327][ T7668] debugfs: Bad value for 'source' [ 231.352077][ T7674] netlink: 52 bytes leftover after parsing attributes in process `syz.4.564'. [ 231.504216][ T7679] netlink: 16 bytes leftover after parsing attributes in process `syz.4.566'. [ 232.145980][ T7697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.570'. [ 233.035552][ T7722] fuse: fd is not a fuse device [ 233.256048][ T7730] netlink: 28 bytes leftover after parsing attributes in process `syz.4.582'. [ 233.652792][ T7743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.741287][ T7744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.818487][ T7743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.908225][ T7748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.931521][ T7750] fuse: Bad value for 'fd' [ 234.240525][ T7756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.593'. [ 234.250479][ T7759] fuse: Unknown parameter 'user_i00000000000000000000' [ 234.463367][ T7764] netlink: 'syz.3.594': attribute type 20 has an invalid length. [ 234.463388][ T7764] netlink: 'syz.3.594': attribute type 21 has an invalid length. [ 234.613800][ T7772] netlink: 28 bytes leftover after parsing attributes in process `syz.2.599'. [ 234.672629][ T7774] fuse: Bad value for 'fd' [ 234.700136][ T7053] syz.4.344 (7053) used greatest stack depth: 18400 bytes left [ 234.942643][ T7783] fuse: Unknown parameter 'user_id00000000000000000000' [ 235.504322][ T7801] netlink: 28 bytes leftover after parsing attributes in process `syz.1.612'. [ 235.613885][ T7805] fuse: Bad value for 'fd' [ 235.771731][ T7808] fuse: fd is not a fuse device [ 235.970561][ T7819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.621'. [ 236.006591][ T7820] netlink: 40 bytes leftover after parsing attributes in process `syz.1.620'. [ 236.407028][ T7837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.423509][ T1357] IPVS: starting estimator thread 0... [ 236.535060][ T7841] IPVS: using max 15 ests per chain, 36000 per kthread [ 236.604407][ T7847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.627'. [ 236.753156][ T7851] fuse: Bad value for 'fd' [ 236.915869][ T7856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.044523][ T37] audit: type=1326 audit(1789142791.268:14): auid=4294967295 uid=37119 gid=0 ses=4294967295 subj=_ pid=7857 comm="syz.5.634" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c10cce159 code=0x0 [ 237.107841][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.107863][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.378525][ T7868] netlink: 'syz.3.637': attribute type 18 has an invalid length. [ 237.457057][ T7870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.638'. [ 237.457106][ T7870] netlink: 44 bytes leftover after parsing attributes in process `syz.1.638'. [ 237.457136][ T7870] netlink: 140 bytes leftover after parsing attributes in process `syz.1.638'. [ 237.777617][ T7880] netlink: 'syz.3.641': attribute type 20 has an invalid length. [ 237.777642][ T7880] netlink: 'syz.3.641': attribute type 21 has an invalid length. [ 237.784134][ T7880] netlink: 'syz.3.641': attribute type 20 has an invalid length. [ 237.784157][ T7880] netlink: 'syz.3.641': attribute type 21 has an invalid length. [ 237.820244][ T7880] netlink: 'syz.3.641': attribute type 20 has an invalid length. [ 237.820268][ T7880] netlink: 'syz.3.641': attribute type 21 has an invalid length. [ 237.830687][ T7880] netlink: 'syz.3.641': attribute type 20 has an invalid length. [ 237.854621][ T7882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.912605][ T7884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.960526][ T7886] fuse: Bad value for 'fd' [ 237.974254][ T7882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.528986][ T7901] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 238.813167][ T7907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.931830][ T7911] netlink: 8 bytes leftover after parsing attributes in process `syz.5.654'. [ 239.195131][ T7915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.258443][ T7920] fuse: Bad value for 'fd' [ 239.260731][ T7921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.316849][ T7915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.392440][ T7923] netlink: 72 bytes leftover after parsing attributes in process `syz.2.658'. [ 239.777820][ T7933] netlink: 60 bytes leftover after parsing attributes in process `syz.3.662'. [ 239.892260][ T7936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.664'. [ 240.017030][ T7939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.582953][ T7948] fuse: Invalid rootmode [ 240.849821][ T1356] IPVS: starting estimator thread 0... [ 240.863643][ T7958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.670'. [ 240.902810][ T7959] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 240.903347][ T7958] mesh0: renamed from gretap0 (while UP) [ 240.936073][ T7957] IPVS: using max 10 ests per chain, 24000 per kthread [ 241.037002][ T7963] fuse: Bad value for 'fd' [ 241.123940][ T7965] IPVS: stopping master sync thread 7959 ... [ 241.260769][ T7967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.674'. [ 242.187567][ T7986] fuse: Invalid rootmode [ 242.246868][ T7992] netlink: 64 bytes leftover after parsing attributes in process `syz.4.683'. [ 242.300270][ T7994] fuse: Bad value for 'fd' [ 242.344244][ T7982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.400965][ T7982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.534128][ T7999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.603093][ T8004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.089596][ T8016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.172178][ T8016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.182428][ T8021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.693'. [ 243.183053][ T8021] validate_nla: 9 callbacks suppressed [ 243.183067][ T8021] netlink: 'syz.3.693': attribute type 4 has an invalid length. [ 243.205258][ T8021] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 243.293057][ T8026] fuse: Unknown parameter '0x0000000000000004' [ 243.383257][ T8030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.697'. [ 243.385908][ T8028] fuse: Invalid rootmode [ 243.429326][ T37] audit: type=1326 audit(1789142797.658:15): auid=4294967295 uid=37119 gid=0 ses=4294967295 subj=_ pid=8031 comm="syz.4.698" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8cb52ae159 code=0x0 [ 243.832416][ T8040] fuse: Unknown parameter 'grou00000000000000000000' [ 243.915033][ T8044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.355314][ T8053] fuse: Unknown parameter '0x0000000000000004' [ 244.497045][ T8059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.710'. [ 244.917298][ T8072] fuse: Unknown parameter 'grou00000000000000000000' [ 245.046688][ T37] audit: type=1326 audit(1789142799.278:16): auid=4294967295 uid=37119 gid=0 ses=4294967295 subj=_ pid=8076 comm="syz.4.718" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8cb52ae159 code=0x0 [ 245.065804][ T8081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.150503][ T8074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.204858][ T8077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.259242][ T8077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.321354][ T8074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.626073][ T8094] netlink: 'syz.1.723': attribute type 20 has an invalid length. [ 245.626087][ T8094] netlink: 'syz.1.723': attribute type 21 has an invalid length. [ 246.494211][ T8111] fuse: Unknown parameter 'grou00000000000000000000' [ 246.809263][ T8117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.881643][ T8122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.940503][ T8119] ath9k 0000:00:01.0: PCI memory region reserve error [ 246.949682][ T8117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.978386][ T37] audit: type=1326 audit(1789142801.208:17): auid=4294967295 uid=37119 gid=0 ses=4294967295 subj=_ pid=8126 comm="syz.4.737" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8cb52ae159 code=0x0 [ 247.330260][ T8139] fuse: Unknown parameter 'group_i00000000000000000000' [ 247.414185][ T8142] netlink: 'syz.5.744': attribute type 23 has an invalid length. [ 247.625985][ T8148] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 247.634118][ T8147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.735352][ T8149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.798349][ T8147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.858104][ T8149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.911841][ T8156] fuse: fd is not a fuse device [ 247.918508][ T8149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.972816][ T8158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.051967][ T8159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.080336][ T8161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.118018][ T8158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.133052][ T8161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.172803][ T8158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.195492][ T8163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.229436][ T8158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.411674][ T8169] netlink: 12 bytes leftover after parsing attributes in process `syz.5.755'. [ 248.428587][ T8170] fuse: Unknown parameter 'group_i00000000000000000000' [ 248.478545][ T8169] 8021q: adding VLAN 0 to HW filter on device bond2 [ 248.798589][ T8182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.828432][ T8184] fuse: fd is not a fuse device [ 248.890858][ T8185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.950259][ T8182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.115131][ T8195] fuse: Unknown parameter 'group_i00000000000000000000' [ 249.249921][ T8200] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 249.779972][ T8218] netlink: 16 bytes leftover after parsing attributes in process `syz.1.773'. [ 249.787322][ T8217] fuse: Unknown parameter 'use00000000000000000000' [ 249.973261][ T8227] fuse: Unknown parameter 'group_id00000000000000000000' [ 250.154106][ T8229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.229206][ T8233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.300548][ T8229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.434674][ T8242] device-mapper: ioctl: Unable to rename non-existent device, to j [ 250.638545][ T8249] fuse: Unknown parameter 'use00000000000000000000' [ 250.749361][ T8252] fuse: Unknown parameter 'group_id00000000000000000000' [ 250.816322][ T8254] netlink: 'syz.3.789': attribute type 1 has an invalid length. [ 250.816343][ T8254] netlink: 224 bytes leftover after parsing attributes in process `syz.3.789'. [ 251.011133][ T8260] netlink: 72 bytes leftover after parsing attributes in process `syz.3.793'. [ 251.580400][ T1356] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 251.583264][ T1356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.583284][ T1356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.592635][ T8279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.799'. [ 251.967118][ T8281] device-mapper: ioctl: Unable to rename non-existent device, to j [ 252.099094][ T8285] fuse: Unknown parameter 'group_id00000000000000000000' [ 252.216464][ T8287] netlink: 'syz.3.803': attribute type 1 has an invalid length. [ 252.216487][ T8287] netlink: 224 bytes leftover after parsing attributes in process `syz.3.803'. [ 252.440960][ T8296] netlink: 72 bytes leftover after parsing attributes in process `syz.3.807'. [ 252.642891][ T8305] netlink: 52 bytes leftover after parsing attributes in process `syz.3.812'. [ 252.743222][ T8310] fuse: Bad value for 'user_id' [ 252.743244][ T8310] fuse: Bad value for 'user_id' [ 252.836034][ T8314] netlink: 'syz.3.815': attribute type 1 has an invalid length. [ 252.836056][ T8314] netlink: 224 bytes leftover after parsing attributes in process `syz.3.815'. [ 253.178065][ T8327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.744517][ T8333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.821'. [ 253.819668][ T8336] netlink: 72 bytes leftover after parsing attributes in process `syz.1.820'. [ 253.974031][ T8343] fuse: fd is not a fuse device [ 254.047770][ T8345] netlink: 'syz.3.826': attribute type 1 has an invalid length. [ 254.077594][ T8347] device-mapper: ioctl: Unable to rename non-existent device, to j [ 254.794698][ T8364] __nla_validate_parse: 6 callbacks suppressed [ 254.794720][ T8364] netlink: 88 bytes leftover after parsing attributes in process `syz.3.832'. [ 254.937650][ T8367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.831'. [ 255.069775][ T3341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.069797][ T3341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.093590][ T8377] netlink: 8 bytes leftover after parsing attributes in process `syz.5.835'. [ 255.225236][ T8384] device-mapper: ioctl: Unable to rename non-existent device, to j [ 255.441169][ T8391] fuse: fd is not a fuse device [ 255.728419][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.002359][ T8403] netlink: 12 bytes leftover after parsing attributes in process `syz.5.848'. [ 256.051480][ T8407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.849'. [ 256.056572][ T8403] 8021q: adding VLAN 0 to HW filter on device bond4 [ 256.331252][ T8416] netlink: 12 bytes leftover after parsing attributes in process `syz.3.852'. [ 256.482558][ T8422] netlink: 12 bytes leftover after parsing attributes in process `syz.5.855'. [ 256.528860][ T8425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.764765][ T8437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.862'. [ 256.765766][ T8437] netlink: 52 bytes leftover after parsing attributes in process `syz.4.862'. [ 256.766075][ T8437] netlink: 52 bytes leftover after parsing attributes in process `syz.4.862'. [ 257.151835][ T8445] 8021q: adding VLAN 0 to HW filter on device bond3 [ 257.503746][ T8455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.562541][ T8462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.705350][ T8455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.775018][ T5594] Bluetooth: hci1: command 0x0406 tx timeout [ 258.765742][ T8523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.821424][ T8520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.168489][ T8528] __nla_validate_parse: 5 callbacks suppressed [ 261.168509][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.890'. [ 261.389723][ T8535] netlink: 72 bytes leftover after parsing attributes in process `syz.2.891'. [ 261.645110][ T8543] netlink: 'syz.1.896': attribute type 23 has an invalid length. [ 261.825275][ T8550] netlink: 12 bytes leftover after parsing attributes in process `syz.5.898'. [ 261.990291][ T8551] netlink: 72 bytes leftover after parsing attributes in process `syz.3.899'. [ 262.503165][ T8579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.544639][ T3341] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 262.636182][ T8582] netlink: 16 bytes leftover after parsing attributes in process `syz.1.913'. [ 262.836565][ T8592] netlink: 16 bytes leftover after parsing attributes in process `syz.5.916'. [ 263.277284][ T8606] netlink: 64 bytes leftover after parsing attributes in process `syz.5.924'. [ 263.338568][ T8603] ath9k 0000:00:01.0: PCI memory region reserve error [ 263.462178][ T8608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.538389][ T8612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.650992][ T8613] netlink: 8 bytes leftover after parsing attributes in process `syz.5.926'. [ 263.652582][ T8612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.983119][ T8619] netlink: 72 bytes leftover after parsing attributes in process `syz.2.929'. [ 264.338305][ T12] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 264.338338][ T8633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.933'. [ 264.343595][ T8634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.627996][ T8641] ath9k 0000:00:01.0: PCI memory region reserve error [ 265.163056][ T8656] fuse: Unknown parameter 'user_id00000000000000000000' [ 265.202129][ T8657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.269978][ T8653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.343306][ T8653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.370115][ T8661] debugfs: Bad value for 'source' [ 265.483199][ T8664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.173665][ T57] IPVS: starting estimator thread 0... [ 266.265014][ T8688] IPVS: using max 11 ests per chain, 26400 per kthread [ 266.542587][ T8698] fuse: Bad value for 'fd' [ 266.986808][ T8709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.464066][ T8722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.507314][ T8726] __nla_validate_parse: 3 callbacks suppressed [ 267.507334][ T8726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.970'. [ 267.883897][ T8730] netlink: 12 bytes leftover after parsing attributes in process `syz.5.971'. [ 268.072923][ T8733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.566193][ T8744] fuse: Bad value for 'fd' [ 268.966200][ T8754] netlink: 52 bytes leftover after parsing attributes in process `syz.5.981'. [ 269.383871][ T8765] netlink: 44 bytes leftover after parsing attributes in process `syz.2.986'. [ 269.473978][ T8770] fuse: Unknown parameter '0x0000000000000004' [ 269.690266][ T8776] netlink: 16 bytes leftover after parsing attributes in process `syz.1.990'. [ 269.791363][ T8781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.979080][ T8789] netlink: 60 bytes leftover after parsing attributes in process `syz.3.995'. [ 269.980570][ T8789] IPVS: rr: UDP 127.0.0.1:5060 - no destination available [ 270.207660][ T8797] fuse: Unknown parameter '0x0000000000000004' [ 270.246219][ T8799] syzkaller1: entered promiscuous mode [ 270.246248][ T8799] syzkaller1: entered allmulticast mode [ 270.518659][ T8811] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1004'. [ 270.823162][ T8826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.131434][ T8833] fuse: Unknown parameter '0x0000000000000004' [ 271.196567][ T8835] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1012'. [ 271.196597][ T8835] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1012'. [ 271.358193][ T8841] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1013'. [ 271.491889][ T8847] netlink: 'syz.2.1016': attribute type 20 has an invalid length. [ 271.491912][ T8847] netlink: 'syz.2.1016': attribute type 21 has an invalid length. [ 272.561671][ T12] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 272.578264][ T8883] __nla_validate_parse: 3 callbacks suppressed [ 272.578279][ T8883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1030'. [ 272.820986][ T8887] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1031'. [ 273.060872][ T8893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1032'. [ 273.185624][ T8902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.230418][ T8905] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1038'. [ 273.429216][ T8915] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1041'. [ 273.479652][ T8916] device-mapper: ioctl: Unable to rename non-existent device, to j [ 273.579819][ T8918] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1042'. [ 273.703675][ T8929] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1045'. [ 273.995933][ T8934] ------------[ cut here ]------------ [ 273.995949][ T8934] !chanctx_conf [ 273.995966][ T8934] WARNING: net/mac80211/tx.c:6509 at ieee80211_tx_skb_tid+0x3b8/0x480, CPU#1: syz.5.1048/8934 [ 274.017127][ T8934] Modules linked in: [ 274.021121][ T8934] CPU: 1 UID: 0 PID: 8934 Comm: syz.5.1048 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 274.030975][ T8934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 274.041097][ T8934] RIP: 0010:ieee80211_tx_skb_tid+0x3b8/0x480 [ 274.047156][ T8934] Code: 7d d0 f6 e9 b1 fe ff ff e8 c5 f6 f4 f6 90 0f 0b 90 e9 e2 fe ff ff e8 b7 f6 f4 f6 90 0f 0b 90 e9 2a fe ff ff e8 a9 f6 f4 f6 90 <0f> 0b 90 e8 30 af fd ff 31 ff 48 8b 34 24 ba 02 00 00 00 48 83 c4 [ 274.066880][ T8934] RSP: 0018:ffffc900064271f8 EFLAGS: 00010287 [ 274.072980][ T8934] RAX: ffffffff8ad19ce7 RBX: ffffffff8ad1995f RCX: 0000000000080000 [ 274.081002][ T8934] RDX: ffffc9001c35f000 RSI: 0000000000002813 RDI: 0000000000002814 [ 274.089047][ T8934] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 274.097056][ T8934] R10: dffffc0000000000 R11: ffffed10062cf34e R12: ffff8880612810c0 [ 274.105066][ T8934] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 274.113036][ T8934] FS: 00007f4c0ef266c0(0000) GS:ffff888125cce000(0000) knlGS:0000000000000000 [ 274.122011][ T8934] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 274.128636][ T8934] CR2: 00007f4c10d1b840 CR3: 0000000034730000 CR4: 00000000003526f0 [ 274.136674][ T8934] Call Trace: [ 274.140022][ T8934] [ 274.142962][ T8934] mesh_plink_frame_tx+0x73d/0xc30 [ 274.148117][ T8934] ? __pfx_mesh_plink_frame_tx+0x10/0x10 [ 274.153756][ T8934] ? ieee80211_mps_set_sta_local_pm+0xad/0x2f0 [ 274.160052][ T8934] mesh_plink_deactivate+0x1a0/0x300 [ 274.165405][ T8934] ? mesh_plink_deactivate+0x6c/0x300 [ 274.170807][ T8934] mesh_sta_cleanup+0x42/0x150 [ 274.175633][ T8934] cleanup_single_sta+0x3ff/0x660 [ 274.180694][ T8934] __sta_info_flush+0x5bb/0x700 [ 274.185660][ T8934] ? __pfx___sta_info_flush+0x10/0x10 [ 274.191080][ T8934] ieee80211_do_stop+0x3e3/0x2440 [ 274.196179][ T8934] ? do_raw_spin_lock+0x12b/0x2f0 [ 274.201262][ T8934] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 274.206814][ T8934] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 274.212477][ T8934] ? rt_spin_unlock+0x159/0x200 [ 274.217360][ T8934] ? rt_spin_unlock+0x165/0x200 [ 274.222219][ T8934] ieee80211_stop+0x1ab/0x200 [ 274.226932][ T8934] ? __pfx_ieee80211_stop+0x10/0x10 [ 274.232159][ T8934] __dev_close_many+0x366/0x6e0 [ 274.237056][ T8934] ? __pfx___dev_close_many+0x10/0x10 [ 274.242439][ T8934] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 274.247844][ T8934] ? lockdep_hardirqs_on+0x7b/0x110 [ 274.253098][ T8934] __dev_change_flags+0x3f5/0x820 [ 274.258193][ T8934] ? __pfx___dev_change_flags+0x10/0x10 [ 274.263820][ T8934] netif_change_flags+0x7c/0x1b0 [ 274.268811][ T8934] dev_change_flags+0x128/0x260 [ 274.273720][ T8934] devinet_ioctl+0x966/0x1c50 [ 274.278441][ T8934] ? __pfx_devinet_ioctl+0x10/0x10 [ 274.283578][ T8934] ? get_user_ifreq+0x12b/0x180 [ 274.288459][ T8934] inet_ioctl+0x42a/0x560 [ 274.292815][ T8934] ? __pfx_inet_ioctl+0x10/0x10 [ 274.297716][ T8934] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 274.302752][ T8934] sock_do_ioctl+0x101/0x320 [ 274.307473][ T8934] ? __pfx_sock_do_ioctl+0x10/0x10 [ 274.312706][ T8934] ? hook_file_ioctl+0x1f5/0x610 [ 274.317694][ T8934] ? __asan_memset+0x22/0x50 [ 274.322300][ T8934] ? smack_file_ioctl+0x265/0x370 [ 274.327372][ T8934] sock_ioctl+0x57d/0x7f0 [ 274.331725][ T8934] ? __pfx_sock_ioctl+0x10/0x10 [ 274.336597][ T8934] ? __fget_files+0x2a/0x420 [ 274.341177][ T8934] ? __fget_files+0x3a8/0x420 [ 274.345903][ T8934] ? __fget_files+0x2a/0x420 [ 274.350491][ T8934] ? bpf_lsm_file_ioctl+0x9/0x20 [ 274.355462][ T8934] ? __pfx_sock_ioctl+0x10/0x10 [ 274.360439][ T8934] __se_sys_ioctl+0xff/0x170 [ 274.365080][ T8934] do_syscall_64+0x166/0x520 [ 274.369723][ T8934] ? trace_irq_disable+0x3b/0x140 [ 274.374818][ T8934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.380923][ T8934] ? clear_bhb_loop+0x70/0xc0 [ 274.385661][ T8934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.391584][ T8934] RIP: 0033:0x7f4c10cce159 [ 274.396216][ T8934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.415958][ T8934] RSP: 002b:00007f4c0ef26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 274.424371][ T8934] RAX: ffffffffffffffda RBX: 00007f4c10f55fa0 RCX: 00007f4c10cce159 [ 274.432381][ T8934] RDX: 0000200000000140 RSI: 0000000000008914 RDI: 0000000000000003 [ 274.440385][ T8934] RBP: 00007f4c10d6503b R08: 0000000000000000 R09: 0000000000000000 [ 274.448387][ T8934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.456396][ T8934] R13: 00007f4c10f56038 R14: 00007f4c10f55fa0 R15: 00007ffe8a6094b8 [ 274.464388][ T8934] [ 274.467426][ T8934] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 274.474700][ T8934] CPU: 1 UID: 0 PID: 8934 Comm: syz.5.1048 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 274.484495][ T8934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 274.494562][ T8934] Call Trace: [ 274.497849][ T8934] [ 274.500793][ T8934] vpanic+0x56d/0xa60 [ 274.504800][ T8934] ? __pfx__printk+0x10/0x10 [ 274.509408][ T8934] ? __pfx_vpanic+0x10/0x10 [ 274.513926][ T8934] ? is_bpf_text_address+0x292/0x2b0 [ 274.519227][ T8934] ? is_bpf_text_address+0x26/0x2b0 [ 274.524448][ T8934] panic+0xc5/0xd0 [ 274.528168][ T8934] ? __pfx_panic+0x10/0x10 [ 274.532598][ T8934] __warn+0x315/0x4c0 [ 274.536573][ T8934] ? ieee80211_tx_skb_tid+0x3b8/0x480 [ 274.541963][ T8934] ? ieee80211_tx_skb_tid+0x3b8/0x480 [ 274.547350][ T8934] __report_bug+0x276/0x570 [ 274.551863][ T8934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.557931][ T8934] ? ieee80211_tx_skb_tid+0x3b8/0x480 [ 274.563319][ T8934] ? __pfx___report_bug+0x10/0x10 [ 274.568349][ T8934] ? __lock_acquire+0x747/0x2de0 [ 274.573300][ T8934] ? ieee80211_tx_skb_tid+0x3b8/0x480 [ 274.578669][ T8934] report_bug+0x16b/0x220 [ 274.582997][ T8934] ? ieee80211_tx_skb_tid+0x3b8/0x480 [ 274.588372][ T8934] ? ieee80211_tx_skb_tid+0x3ba/0x480 [ 274.593742][ T8934] handle_bug+0x9c/0x200 [ 274.597989][ T8934] exc_invalid_op+0x1a/0x50 [ 274.602492][ T8934] asm_exc_invalid_op+0x1a/0x20 [ 274.607337][ T8934] RIP: 0010:ieee80211_tx_skb_tid+0x3b8/0x480 [ 274.613316][ T8934] Code: 7d d0 f6 e9 b1 fe ff ff e8 c5 f6 f4 f6 90 0f 0b 90 e9 e2 fe ff ff e8 b7 f6 f4 f6 90 0f 0b 90 e9 2a fe ff ff e8 a9 f6 f4 f6 90 <0f> 0b 90 e8 30 af fd ff 31 ff 48 8b 34 24 ba 02 00 00 00 48 83 c4 [ 274.632999][ T8934] RSP: 0018:ffffc900064271f8 EFLAGS: 00010287 [ 274.639062][ T8934] RAX: ffffffff8ad19ce7 RBX: ffffffff8ad1995f RCX: 0000000000080000 [ 274.647028][ T8934] RDX: ffffc9001c35f000 RSI: 0000000000002813 RDI: 0000000000002814 [ 274.655002][ T8934] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 274.662963][ T8934] R10: dffffc0000000000 R11: ffffed10062cf34e R12: ffff8880612810c0 [ 274.670922][ T8934] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 274.678888][ T8934] ? ieee80211_tx_skb_tid+0x2f/0x480 [ 274.684200][ T8934] ? ieee80211_tx_skb_tid+0x3b7/0x480 [ 274.689577][ T8934] ? ieee80211_tx_skb_tid+0x3b7/0x480 [ 274.694945][ T8934] mesh_plink_frame_tx+0x73d/0xc30 [ 274.700062][ T8934] ? __pfx_mesh_plink_frame_tx+0x10/0x10 [ 274.705735][ T8934] ? ieee80211_mps_set_sta_local_pm+0xad/0x2f0 [ 274.711908][ T8934] mesh_plink_deactivate+0x1a0/0x300 [ 274.717214][ T8934] ? mesh_plink_deactivate+0x6c/0x300 [ 274.722584][ T8934] mesh_sta_cleanup+0x42/0x150 [ 274.727350][ T8934] cleanup_single_sta+0x3ff/0x660 [ 274.732378][ T8934] __sta_info_flush+0x5bb/0x700 [ 274.737233][ T8934] ? __pfx___sta_info_flush+0x10/0x10 [ 274.742612][ T8934] ieee80211_do_stop+0x3e3/0x2440 [ 274.747638][ T8934] ? do_raw_spin_lock+0x12b/0x2f0 [ 274.752663][ T8934] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 274.758132][ T8934] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 274.763773][ T8934] ? rt_spin_unlock+0x159/0x200 [ 274.768709][ T8934] ? rt_spin_unlock+0x165/0x200 [ 274.773555][ T8934] ieee80211_stop+0x1ab/0x200 [ 274.778230][ T8934] ? __pfx_ieee80211_stop+0x10/0x10 [ 274.783430][ T8934] __dev_close_many+0x366/0x6e0 [ 274.788286][ T8934] ? __pfx___dev_close_many+0x10/0x10 [ 274.793651][ T8934] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 274.799014][ T8934] ? lockdep_hardirqs_on+0x7b/0x110 [ 274.804214][ T8934] __dev_change_flags+0x3f5/0x820 [ 274.809249][ T8934] ? __pfx___dev_change_flags+0x10/0x10 [ 274.814807][ T8934] netif_change_flags+0x7c/0x1b0 [ 274.819748][ T8934] dev_change_flags+0x128/0x260 [ 274.824605][ T8934] devinet_ioctl+0x966/0x1c50 [ 274.829292][ T8934] ? __pfx_devinet_ioctl+0x10/0x10 [ 274.834402][ T8934] ? get_user_ifreq+0x12b/0x180 [ 274.839281][ T8934] inet_ioctl+0x42a/0x560 [ 274.843609][ T8934] ? __pfx_inet_ioctl+0x10/0x10 [ 274.848481][ T8934] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 274.853604][ T8934] sock_do_ioctl+0x101/0x320 [ 274.858198][ T8934] ? __pfx_sock_do_ioctl+0x10/0x10 [ 274.863303][ T8934] ? hook_file_ioctl+0x1f5/0x610 [ 274.868234][ T8934] ? __asan_memset+0x22/0x50 [ 274.872821][ T8934] ? smack_file_ioctl+0x265/0x370 [ 274.877847][ T8934] sock_ioctl+0x57d/0x7f0 [ 274.882263][ T8934] ? __pfx_sock_ioctl+0x10/0x10 [ 274.887107][ T8934] ? __fget_files+0x2a/0x420 [ 274.891716][ T8934] ? __fget_files+0x3a8/0x420 [ 274.896386][ T8934] ? __fget_files+0x2a/0x420 [ 274.900976][ T8934] ? bpf_lsm_file_ioctl+0x9/0x20 [ 274.905920][ T8934] ? __pfx_sock_ioctl+0x10/0x10 [ 274.910768][ T8934] __se_sys_ioctl+0xff/0x170 [ 274.915366][ T8934] do_syscall_64+0x166/0x520 [ 274.919979][ T8934] ? trace_irq_disable+0x3b/0x140 [ 274.925027][ T8934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.931088][ T8934] ? clear_bhb_loop+0x70/0xc0 [ 274.935809][ T8934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.941716][ T8934] RIP: 0033:0x7f4c10cce159 [ 274.946129][ T8934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.965725][ T8934] RSP: 002b:00007f4c0ef26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 274.974137][ T8934] RAX: ffffffffffffffda RBX: 00007f4c10f55fa0 RCX: 00007f4c10cce159 [ 274.982117][ T8934] RDX: 0000200000000140 RSI: 0000000000008914 RDI: 0000000000000003 [ 274.990078][ T8934] RBP: 00007f4c10d6503b R08: 0000000000000000 R09: 0000000000000000 [ 274.998147][ T8934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.006107][ T8934] R13: 00007f4c10f56038 R14: 00007f4c10f55fa0 R15: 00007ffe8a6094b8 [ 275.014087][ T8934] [ 275.017373][ T8934] Kernel Offset: disabled [ 275.021693][ T8934] Rebooting in 86400 seconds..