last executing test programs: 6.702054819s ago: executing program 4 (id=164): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getresuid(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xf11, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}}, 0x0) 5.906917129s ago: executing program 4 (id=170): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101001, 0x200) write$tun(r4, &(0x7f0000000000)={@val={0x0, 0x886c}, @void, @eth={@random="000000f400", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0xaa, 0xe, "d8"}}}}}}, 0x19) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r5, 0x0, 0x0, 0x0, 0x4}, 0x50) gettid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)={0x44, r7, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x10004000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) r10 = socket(0x10, 0x803, 0x0) fcntl$getflags(r3, 0xb) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r10, 0x8982, &(0x7f0000000080)={0x7, 'syz_tun\x00', {0x7fff}, 0x2}) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2800000, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}}, 0x20004000) 5.4427035s ago: executing program 0 (id=172): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpgid(0x0) syz_open_procfs(r3, &(0x7f0000000180)='smaps\x00') setregid(0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x182800, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d036b6269b1, 0x10010, r2, 0x1372e000) fchdir(0xffffffffffffffff) inotify_init1(0x800) inotify_add_watch(0xffffffffffffffff, 0x0, 0x60000526) socket$nl_netfilter(0x10, 0x3, 0xc) 5.026752897s ago: executing program 4 (id=173): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000000102030600000000000000"], 0x44}}, 0x0) setns(0xffffffffffffffff, 0x24020000) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x0, 0x5, 0x6}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1}]}}, @TCA_STAB={0xfffffffffffffcdb}]}, 0x54}}, 0x8000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)={0x194, 0x3a, 0x100, 0x70bd25, 0x25dfdbfe, {0x6}, [@typed={0x43, 0x124, 0x0, 0x0, @binary="624b06d61736a22bd10847fb6fd3834cf3c92ef2bb2ee05d31b74205b394dbeab4235569850977e12a0e7b8888c5e594f31a8667b25bea7cb83ba7cd7a31eb"}, @nested={0x13a, 0x135, 0x0, 0x1, [@typed={0x14, 0xf9, 0x0, 0x0, @ipv6=@loopback}, @generic="401f6d75f00826bdc36cf3811738c43d7b90c40ceb340ed3698d33c981dc5fca54c72f224a230bab20cd92c492fdc467eff0fd7cabaafbffef2d3a3c41d9dc8c27bdb8755c78720a73ad14e2c8f943c5f0f90f8fee1c0d0568a3a6c65ab9bb48c4f7cc02ab04f7b023b694ed82c73443d62a937bd28152c1328c555a0b554189ebfdb4ea6aa29f26ca0ed92e", @generic="156b5ff55ea64a2dde8660fe3236ca2de4294b1180239baf9cf966fae31af2b6a9277ac6024833d974c681047544a8e85a9f742c519940578c5743545ba0973c3e2374fc3cad816ffdf518eb1d5dff2ef6f616507d6dba01cb8b83b4b0", @typed={0x8, 0x46, 0x0, 0x0, @u32=0xd}, @generic="7843f3673f21d241a2c872b6de092c98b22c860c52446ea6ac08609eba1cdb816c", @nested={0x4, 0xb2}, @typed={0xb, 0x34, 0x0, 0x0, @str='user_id'}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x20008810}, 0x800) mount$cgroup(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000100), 0x800004, &(0x7f0000000140)={[{@release_agent={'release_agent', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5.007707598s ago: executing program 1 (id=174): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101001, 0x200) write$tun(r4, &(0x7f0000000000)={@val={0x0, 0x886c}, @void, @eth={@random="000000f400", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0xaa, 0xe, "d8"}}}}}}, 0x19) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) gettid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)={0x44, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x10004000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) r9 = socket(0x10, 0x803, 0x0) fcntl$getflags(r3, 0xb) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r9, 0x8982, &(0x7f0000000080)={0x7, 'syz_tun\x00', {0x7fff}, 0x2}) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2800000, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r9) getsockname$packet(r9, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}}, 0x20004000) 4.071859491s ago: executing program 4 (id=175): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0201000000000010ac05418200000000000109022400010000000009040000110300000009210000000122050009058103"], 0x0) syz_usb_connect$hid(0x3, 0x0, 0x0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000ac0)=@string={0x2}}]}) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000040), 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x10) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000340)=ANY=[@ANYBLOB='1'], 0x31) 4.062700542s ago: executing program 1 (id=176): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000000102030600000000000000"], 0x44}}, 0x0) setns(0xffffffffffffffff, 0x24020000) r4 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x0, 0x5, 0x6}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1}]}}, @TCA_STAB={0xfffffffffffffcdb}]}, 0x54}}, 0x8000) sendmsg$nl_generic(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)={0x194, 0x3a, 0x100, 0x70bd25, 0x25dfdbfe, {0x6}, [@typed={0x43, 0x124, 0x0, 0x0, @binary="624b06d61736a22bd10847fb6fd3834cf3c92ef2bb2ee05d31b74205b394dbeab4235569850977e12a0e7b8888c5e594f31a8667b25bea7cb83ba7cd7a31eb"}, @nested={0x13a, 0x135, 0x0, 0x1, [@typed={0x14, 0xf9, 0x0, 0x0, @ipv6=@loopback}, @generic="401f6d75f00826bdc36cf3811738c43d7b90c40ceb340ed3698d33c981dc5fca54c72f224a230bab20cd92c492fdc467eff0fd7cabaafbffef2d3a3c41d9dc8c27bdb8755c78720a73ad14e2c8f943c5f0f90f8fee1c0d0568a3a6c65ab9bb48c4f7cc02ab04f7b023b694ed82c73443d62a937bd28152c1328c555a0b554189ebfdb4ea6aa29f26ca0ed92e", @generic="156b5ff55ea64a2dde8660fe3236ca2de4294b1180239baf9cf966fae31af2b6a9277ac6024833d974c681047544a8e85a9f742c519940578c5743545ba0973c3e2374fc3cad816ffdf518eb1d5dff2ef6f616507d6dba01cb8b83b4b0", @typed={0x8, 0x46, 0x0, 0x0, @u32=0xd}, @generic="7843f3673f21d241a2c872b6de092c98b22c860c52446ea6ac08609eba1cdb816c", @nested={0x4, 0xb2}, @typed={0xb, 0x34, 0x0, 0x0, @str='user_id'}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x20008810}, 0x800) mount$cgroup(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000100), 0x800004, &(0x7f0000000140)={[{@release_agent={'release_agent', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.97148668s ago: executing program 0 (id=178): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101001, 0x200) write$tun(r4, &(0x7f0000000000)={@val={0x0, 0x886c}, @void, @eth={@random="000000f400", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0xaa, 0xe, "d8"}}}}}}, 0x19) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r5, 0x0, 0x0, 0x0, 0x4}, 0x50) gettid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)={0x44, r7, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x10004000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x7, 'syz_tun\x00', {0x7fff}, 0x2}) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2800000, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}}, 0x20004000) 2.798508693s ago: executing program 2 (id=179): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r0, 0x0, 0x0) 2.741043659s ago: executing program 3 (id=181): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000000102030600000000000000"], 0x44}}, 0x0) setns(0xffffffffffffffff, 0x24020000) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x0, 0x5, 0x6}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1}]}}, @TCA_STAB={0xfffffffffffffcdb}]}, 0x54}}, 0x8000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)={0x194, 0x3a, 0x100, 0x70bd25, 0x25dfdbfe, {0x6}, [@typed={0x43, 0x124, 0x0, 0x0, @binary="624b06d61736a22bd10847fb6fd3834cf3c92ef2bb2ee05d31b74205b394dbeab4235569850977e12a0e7b8888c5e594f31a8667b25bea7cb83ba7cd7a31eb"}, @nested={0x13a, 0x135, 0x0, 0x1, [@typed={0x14, 0xf9, 0x0, 0x0, @ipv6=@loopback}, @generic="401f6d75f00826bdc36cf3811738c43d7b90c40ceb340ed3698d33c981dc5fca54c72f224a230bab20cd92c492fdc467eff0fd7cabaafbffef2d3a3c41d9dc8c27bdb8755c78720a73ad14e2c8f943c5f0f90f8fee1c0d0568a3a6c65ab9bb48c4f7cc02ab04f7b023b694ed82c73443d62a937bd28152c1328c555a0b554189ebfdb4ea6aa29f26ca0ed92e", @generic="156b5ff55ea64a2dde8660fe3236ca2de4294b1180239baf9cf966fae31af2b6a9277ac6024833d974c681047544a8e85a9f742c519940578c5743545ba0973c3e2374fc3cad816ffdf518eb1d5dff2ef6f616507d6dba01cb8b83b4b0", @typed={0x8, 0x46, 0x0, 0x0, @u32=0xd}, @generic="7843f3673f21d241a2c872b6de092c98b22c860c52446ea6ac08609eba1cdb816c", @nested={0x4, 0xb2}, @typed={0xb, 0x34, 0x0, 0x0, @str='user_id'}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x20008810}, 0x800) mount$cgroup(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000100), 0x800004, &(0x7f0000000140)={[{@release_agent={'release_agent', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.541295596s ago: executing program 1 (id=182): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000700)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000580)={0xe, 0x1, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 2.485778261s ago: executing program 0 (id=183): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)="17000000020001000003be8c5e687a8a6a002b00020100ecff3f0000000300000a7f1c000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880a00243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900", 0x60) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001042088be000000030c000800050086dd88a8"], 0xfdef) 2.408084648s ago: executing program 2 (id=184): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@delchain={0xb0, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x80, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x64, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x3c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x0, 0x3, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xd}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfffe}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x0, 0x3, 0x7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x24, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x80}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xc0}]}]}, @TCA_FLOWER_KEY_MPLS_BOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TTL={0xffffffffffffff6d, 0x52, 0x5}, @TCA_FLOWER_KEY_IP_TOS_MASK={0x5, 0x4a, 0xfb}]}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) 2.407868268s ago: executing program 1 (id=185): r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 2.405351788s ago: executing program 2 (id=186): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x22211001}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x40, 0x6, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) 2.403453268s ago: executing program 1 (id=187): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r0, 0x1) landlock_restrict_self(r0, 0x1) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x0, 0x0, 0x4) 2.071800467s ago: executing program 0 (id=188): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) times(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 2.068176038s ago: executing program 2 (id=189): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x2c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 2.003809404s ago: executing program 1 (id=190): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000400)="8867e877ccd861dbc4ac96fe2951c97bbb02672a0dafe1ecac335719e87b93a2db31d2886ed844ba4a4c8df6441f413402741a38e805f5cd685936f3a05159074fef1aaec79b5f1007ad5da77d9c117746ae2ba939b1b1705a070d3c82d03005e09147a3c9f8b11fa17f59dbc0325ce0c991cbac996d7eb1ac57947728edd7164fcdaee5d16907a30b8dcab517be26ca273ba5134cc8865b9108172fc4be002dc7dc8fea97a2df9666", 0xa9}, {&(0x7f00000004c0)="ea70918135eaab3a884242c9d1d25114aa96787c02826ef6ca3afcb0b9dcdf64e03e2d393b8f9ce9a5e0ad21c8e307f9e4bb018c5b22023f073f9fbe1508819dd448be8d9873aa90426f3cf4c187d10215395e8a7807e5893b0bd80f4ff745fe7f9c316d18f69265662694261c0b194ef8", 0x71}], 0x2) unshare(0x4020400) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') read$FUSE(r4, &(0x7f00000051c0)={0x2020}, 0x2020) pread64(r4, &(0x7f0000000100)=""/253, 0xfd, 0xadc) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) openat$cgroup_int(r3, 0x0, 0x2, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f0000000000)=0x1) 2.002805424s ago: executing program 2 (id=191): r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) socket$packet(0x11, 0xa, 0x300) sendto$inet(r0, 0x0, 0x1, 0x2004cfe9, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="ee", 0x1, 0x20004010, 0x0, 0xfffffffffffffd2d) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) shutdown(r0, 0x1) splice(r0, 0x0, r1, 0x0, 0x1, 0x3) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00220100"], 0x0}, 0x0) 1.580885081s ago: executing program 3 (id=192): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = syz_io_uring_setup(0x239, &(0x7f0000001080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x3c}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 1.500117728s ago: executing program 3 (id=193): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x1, 0x0, 0x0, 0x0, 0x1}, [@mark={0xc, 0x15, {0x350759, 0x81}}]}, 0xc4}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}}, 0xb8}}, 0x0) 1.483566729s ago: executing program 3 (id=194): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x2, 0x0) r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'sed\x00', 0x1, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x6c}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x10000, 0xcd, 0x1}}, 0x44) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x15, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.451834792s ago: executing program 3 (id=195): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101001, 0x200) write$tun(r4, &(0x7f0000000000)={@val={0x0, 0x886c}, @void, @eth={@random="000000f400", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0xaa, 0xe, "d8"}}}}}}, 0x19) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r5, 0x0, 0x0, 0x0, 0x4}, 0x50) gettid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)={0x44, r7, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x10004000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) r10 = socket(0x10, 0x803, 0x0) fcntl$getflags(r3, 0xb) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2800000, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r10) getsockname$packet(r10, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}}, 0x20004000) 1.159095978s ago: executing program 0 (id=196): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101001, 0x200) write$tun(r4, &(0x7f0000000000)={@val={0x0, 0x886c}, @void, @eth={@random="000000f400", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0xaa, 0xe, "d8"}}}}}}, 0x19) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r5, 0x0, 0x0, 0x0, 0x4}, 0x50) gettid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)={0x44, r7, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x10004000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) r10 = socket(0x10, 0x803, 0x0) fcntl$getflags(r3, 0xb) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2800000, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r10) getsockname$packet(r10, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}}, 0x20004000) 880.096122ms ago: executing program 2 (id=197): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0201000000000010ac05418200000000000109022400010000"], 0x0) syz_usb_connect$hid(0x3, 0x0, 0x0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000ac0)=@string={0x2}}]}) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000040), 0x0}, 0x0) syz_usb_connect$lan78xx(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x10) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19}, 0x94) write$cgroup_subtree(r6, &(0x7f0000000340)=ANY=[@ANYBLOB='1'], 0x31) 879.902162ms ago: executing program 4 (id=198): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setns(0xffffffffffffffff, 0x24020000) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x0, 0x5, 0x6}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1}]}}, @TCA_STAB={0xfffffffffffffcdb}]}, 0x54}}, 0x8000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)={0x194, 0x3a, 0x100, 0x70bd25, 0x25dfdbfe, {0x6}, [@typed={0x43, 0x124, 0x0, 0x0, @binary="624b06d61736a22bd10847fb6fd3834cf3c92ef2bb2ee05d31b74205b394dbeab4235569850977e12a0e7b8888c5e594f31a8667b25bea7cb83ba7cd7a31eb"}, @nested={0x13a, 0x135, 0x0, 0x1, [@typed={0x14, 0xf9, 0x0, 0x0, @ipv6=@loopback}, @generic="401f6d75f00826bdc36cf3811738c43d7b90c40ceb340ed3698d33c981dc5fca54c72f224a230bab20cd92c492fdc467eff0fd7cabaafbffef2d3a3c41d9dc8c27bdb8755c78720a73ad14e2c8f943c5f0f90f8fee1c0d0568a3a6c65ab9bb48c4f7cc02ab04f7b023b694ed82c73443d62a937bd28152c1328c555a0b554189ebfdb4ea6aa29f26ca0ed92e", @generic="156b5ff55ea64a2dde8660fe3236ca2de4294b1180239baf9cf966fae31af2b6a9277ac6024833d974c681047544a8e85a9f742c519940578c5743545ba0973c3e2374fc3cad816ffdf518eb1d5dff2ef6f616507d6dba01cb8b83b4b0", @typed={0x8, 0x46, 0x0, 0x0, @u32=0xd}, @generic="7843f3673f21d241a2c872b6de092c98b22c860c52446ea6ac08609eba1cdb816c", @nested={0x4, 0xb2}, @typed={0xb, 0x34, 0x0, 0x0, @str='user_id'}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x20008810}, 0x800) mount$cgroup(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000100), 0x800004, &(0x7f0000000140)={[{@release_agent={'release_agent', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 13.329789ms ago: executing program 3 (id=199): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000000102030600000000000000"], 0x44}}, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x0, 0x5, 0x6}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1}]}}, @TCA_STAB={0xfffffffffffffcdb}]}, 0x54}}, 0x8000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)={0x194, 0x3a, 0x100, 0x70bd25, 0x25dfdbfe, {0x6}, [@typed={0x43, 0x124, 0x0, 0x0, @binary="624b06d61736a22bd10847fb6fd3834cf3c92ef2bb2ee05d31b74205b394dbeab4235569850977e12a0e7b8888c5e594f31a8667b25bea7cb83ba7cd7a31eb"}, @nested={0x13a, 0x135, 0x0, 0x1, [@typed={0x14, 0xf9, 0x0, 0x0, @ipv6=@loopback}, @generic="401f6d75f00826bdc36cf3811738c43d7b90c40ceb340ed3698d33c981dc5fca54c72f224a230bab20cd92c492fdc467eff0fd7cabaafbffef2d3a3c41d9dc8c27bdb8755c78720a73ad14e2c8f943c5f0f90f8fee1c0d0568a3a6c65ab9bb48c4f7cc02ab04f7b023b694ed82c73443d62a937bd28152c1328c555a0b554189ebfdb4ea6aa29f26ca0ed92e", @generic="156b5ff55ea64a2dde8660fe3236ca2de4294b1180239baf9cf966fae31af2b6a9277ac6024833d974c681047544a8e85a9f742c519940578c5743545ba0973c3e2374fc3cad816ffdf518eb1d5dff2ef6f616507d6dba01cb8b83b4b0", @typed={0x8, 0x46, 0x0, 0x0, @u32=0xd}, @generic="7843f3673f21d241a2c872b6de092c98b22c860c52446ea6ac08609eba1cdb816c", @nested={0x4, 0xb2}, @typed={0xb, 0x34, 0x0, 0x0, @str='user_id'}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x20008810}, 0x800) mount$cgroup(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000100), 0x800004, &(0x7f0000000140)={[{@release_agent={'release_agent', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 12.785759ms ago: executing program 4 (id=200): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) times(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) preadv(r4, &(0x7f0000000600), 0x0, 0x1006c, 0x0) 0s ago: executing program 0 (id=201): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x7ff}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.60' (ED25519) to the list of known hosts. [ 31.017813][ T4308] cgroup: Unknown subsys name 'net' [ 31.234892][ T4308] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.491818][ T4308] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 32.213330][ T4326] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 32.220381][ T4333] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 32.221744][ T4333] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 32.223335][ T4333] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 32.224589][ T4333] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 32.225829][ T4333] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 32.227006][ T4333] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 32.227836][ T4336] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 32.228362][ T4333] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 32.230069][ T4336] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 32.230778][ T4333] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 32.232019][ T4336] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 32.232808][ T4333] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 32.234733][ T4336] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 32.234781][ T4336] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 32.236376][ T4333] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 32.237446][ T4336] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 32.238221][ T4333] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 32.239364][ T4336] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 32.240378][ T4333] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 32.241718][ T4336] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 32.244231][ T4336] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 32.245948][ T4336] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 32.246237][ T4329] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 32.246995][ T4336] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 32.251163][ T4329] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 32.251417][ T4336] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 32.277064][ T47] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 32.278390][ T47] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 32.279791][ T47] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 32.338298][ T4322] chnl_net:caif_netlink_parms(): no params data found [ 32.391625][ T4322] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.393653][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.395164][ T4322] device bridge_slave_0 entered promiscuous mode [ 32.400696][ T4322] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.401864][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.403517][ T4322] device bridge_slave_1 entered promiscuous mode [ 32.415292][ T4320] chnl_net:caif_netlink_parms(): no params data found [ 32.434331][ T4322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.443497][ T4322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.460403][ T4322] team0: Port device team_slave_0 added [ 32.471997][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.474338][ T4320] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.476112][ T4320] device bridge_slave_0 entered promiscuous mode [ 32.478487][ T4322] team0: Port device team_slave_1 added [ 32.485516][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.486596][ T4320] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.488365][ T4320] device bridge_slave_1 entered promiscuous mode [ 32.498129][ T4320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.502075][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 32.510536][ T4327] chnl_net:caif_netlink_parms(): no params data found [ 32.515775][ T4320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.522024][ T4322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.523277][ T4322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.527293][ T4322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.531201][ T4322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.534400][ T4322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.538263][ T4322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.546026][ T4320] team0: Port device team_slave_0 added [ 32.547664][ T4320] team0: Port device team_slave_1 added [ 32.560500][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.561596][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.567398][ T4320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.578070][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.579200][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.585707][ T4320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.587584][ T4321] chnl_net:caif_netlink_parms(): no params data found [ 32.591469][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.592704][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.594159][ T4328] device bridge_slave_0 entered promiscuous mode [ 32.597475][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.598545][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.600061][ T4328] device bridge_slave_1 entered promiscuous mode [ 32.625780][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.626929][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.628462][ T4327] device bridge_slave_0 entered promiscuous mode [ 32.673657][ T4322] device hsr_slave_0 entered promiscuous mode [ 32.712450][ T4322] device hsr_slave_1 entered promiscuous mode [ 32.765732][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.803442][ T4320] device hsr_slave_0 entered promiscuous mode [ 32.852459][ T4320] device hsr_slave_1 entered promiscuous mode [ 32.912318][ T4320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.913553][ T4320] Cannot create hsr debugfs directory [ 32.917661][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.918747][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.920096][ T4327] device bridge_slave_1 entered promiscuous mode [ 32.924734][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.934994][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.936126][ T4321] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.937507][ T4321] device bridge_slave_0 entered promiscuous mode [ 32.940105][ T4328] team0: Port device team_slave_0 added [ 32.941992][ T4328] team0: Port device team_slave_1 added [ 32.946866][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.947987][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.949357][ T4321] device bridge_slave_1 entered promiscuous mode [ 32.963715][ T4327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.972640][ T4327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.978209][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.979224][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.983198][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.987095][ T4321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.992098][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.995940][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.999786][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.004591][ T4321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.016791][ T4327] team0: Port device team_slave_0 added [ 33.022051][ T4321] team0: Port device team_slave_0 added [ 33.030774][ T4327] team0: Port device team_slave_1 added [ 33.038600][ T4321] team0: Port device team_slave_1 added [ 33.083392][ T4328] device hsr_slave_0 entered promiscuous mode [ 33.142529][ T4328] device hsr_slave_1 entered promiscuous mode [ 33.192337][ T4328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.193622][ T4328] Cannot create hsr debugfs directory [ 33.199123][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.200179][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.204208][ T4327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.210576][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.211638][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.215797][ T4327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.217889][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.218977][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.225302][ T4321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.227587][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.228600][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.232741][ T4321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.283526][ T4327] device hsr_slave_0 entered promiscuous mode [ 33.324872][ T4327] device hsr_slave_1 entered promiscuous mode [ 33.382319][ T4327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.383664][ T4327] Cannot create hsr debugfs directory [ 33.463510][ T4321] device hsr_slave_0 entered promiscuous mode [ 33.502571][ T4321] device hsr_slave_1 entered promiscuous mode [ 33.552338][ T4321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.553559][ T4321] Cannot create hsr debugfs directory [ 33.560169][ T4322] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.601077][ T4322] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.651679][ T4322] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.693952][ T4322] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.778603][ T4320] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.803909][ T4320] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.859698][ T4320] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.903518][ T4320] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.958143][ T4328] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.993639][ T4328] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.039735][ T4328] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.076393][ T4328] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.134148][ T4322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.141413][ T4327] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.165475][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.167717][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.174315][ T4327] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.225053][ T4322] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.226198][ T4327] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.262796][ T47] Bluetooth: hci3: command 0x0409 tx timeout [ 34.279860][ T4327] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.320899][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.322923][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.324766][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.325922][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.327563][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.331274][ T4321] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.332488][ T47] Bluetooth: hci1: command 0x0409 tx timeout [ 34.332593][ T47] Bluetooth: hci0: command 0x0409 tx timeout [ 34.342502][ T4326] Bluetooth: hci2: command 0x0409 tx timeout [ 34.342710][ T47] Bluetooth: hci4: command 0x0409 tx timeout [ 34.375126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.376741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.378151][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.379634][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.381691][ T4321] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.433476][ T4321] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.474546][ T4321] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.516864][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.527062][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.540356][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.546081][ T4320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.550318][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.552708][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.557348][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.565780][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.567885][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.569631][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.571045][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.574249][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.576023][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.577305][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.583175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.584752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.586177][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.587301][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.588539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.589822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.600295][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.601805][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.603946][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.605263][ T1605] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.606423][ T1605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.607724][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.609351][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.610898][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.613236][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.614793][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.616300][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.618910][ T4320] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.627503][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.629040][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.630621][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.633208][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.634686][ T1605] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.635812][ T1605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.637218][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.638928][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.643032][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.650593][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.652186][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.654786][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.655914][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.657317][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.658851][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.666981][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.668734][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.670227][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.672767][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.686199][ T4327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.703576][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.705419][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.707124][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.708732][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.710440][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.712021][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.725414][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.727220][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.728675][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.730125][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.731541][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.735115][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.737591][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.741013][ T4327] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.752971][ T4321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.761752][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.764014][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.765304][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.766464][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.784368][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.785917][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.787463][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.788837][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.790071][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.791434][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.797864][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.799270][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.804833][ T4321] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.811774][ T4327] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.818850][ T4327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.822755][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.824357][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.826116][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.827621][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.829164][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.830594][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.831688][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.835182][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.836702][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.838187][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.839657][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.841031][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.842116][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.844005][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.845483][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.846960][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.848540][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.849995][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.851409][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.853908][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.855382][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.856809][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.868112][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.869444][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.870649][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.871839][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.877956][ T4322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.883732][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.884950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.887075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.888819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.908360][ T4321] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.909958][ T4321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.916379][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.918143][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.919637][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.921149][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.924888][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.926413][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.927863][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.945577][ T4320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.948569][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.949822][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.957066][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.958642][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.963988][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.965692][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.985697][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.987052][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.994971][ T4327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.996630][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.998232][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.999819][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.001301][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.013085][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.014534][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.015844][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.017277][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.020879][ T4328] device veth0_vlan entered promiscuous mode [ 35.033465][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.035229][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.037112][ T4322] device veth0_vlan entered promiscuous mode [ 35.045904][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.047148][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.051929][ T4321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.056381][ T4328] device veth1_vlan entered promiscuous mode [ 35.080739][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.082590][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.084082][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.085570][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.087129][ T4320] device veth0_vlan entered promiscuous mode [ 35.088524][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.089857][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.093126][ T4320] device veth1_vlan entered promiscuous mode [ 35.095202][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.096742][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.098357][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.116799][ T4328] device veth0_macvtap entered promiscuous mode [ 35.119739][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.121260][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.123158][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.124692][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.128073][ T4322] device veth1_vlan entered promiscuous mode [ 35.137493][ T4328] device veth1_macvtap entered promiscuous mode [ 35.138927][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.140335][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.141695][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.144658][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.146142][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.147789][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.149141][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.155917][ T4321] device veth0_vlan entered promiscuous mode [ 35.166703][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.168373][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.169884][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.171681][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.175347][ T4320] device veth0_macvtap entered promiscuous mode [ 35.179370][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.182963][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.184441][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.186024][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.188993][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.191674][ T4320] device veth1_macvtap entered promiscuous mode [ 35.199610][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.201130][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.203704][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.205214][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.206771][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.209306][ T4321] device veth1_vlan entered promiscuous mode [ 35.217367][ T4322] device veth0_macvtap entered promiscuous mode [ 35.220424][ T4328] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.221802][ T4328] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.223218][ T4328] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.224652][ T4328] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.229403][ T4322] device veth1_macvtap entered promiscuous mode [ 35.234084][ T4327] device veth0_vlan entered promiscuous mode [ 35.238298][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.239786][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.241187][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.242915][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.244252][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.245744][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.247296][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.248698][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.255640][ T4321] device veth0_macvtap entered promiscuous mode [ 35.257865][ T4321] device veth1_macvtap entered promiscuous mode [ 35.261952][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.266745][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.268916][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.274750][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.276432][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.277800][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.279349][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.281596][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.284627][ T4327] device veth1_vlan entered promiscuous mode [ 35.285862][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.287391][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.289351][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.290904][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.293767][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.295365][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.296800][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.298455][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.301779][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.303885][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.305323][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.306826][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.308285][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.309771][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.311974][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.319274][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.321054][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.323825][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.325076][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.326641][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.328149][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.329780][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.331253][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.335337][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.336949][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.338443][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.340043][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.342106][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.346567][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.348257][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.349726][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.351300][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.353037][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.354714][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.356847][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.360147][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.361772][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.364677][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.366305][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.367854][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.370358][ T4321] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.371711][ T4321] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.373766][ T4321] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.375121][ T4321] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.395073][ T4320] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.396385][ T4320] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.397787][ T4320] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.399009][ T4320] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.405124][ T4322] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.406407][ T4322] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.407749][ T4322] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.409121][ T4322] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.447832][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.449562][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.463324][ T4327] device veth0_macvtap entered promiscuous mode [ 35.466036][ T4327] device veth1_macvtap entered promiscuous mode [ 35.467351][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.468656][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.481140][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.482913][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.484239][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.486679][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.487837][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.489892][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.513817][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.515149][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.516993][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.520418][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.522022][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.525672][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.527838][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.529340][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.530983][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.533561][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.535172][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.537655][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.544922][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.546605][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.550847][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.552819][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.554325][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.555850][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.557294][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.558802][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.560224][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.561677][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.564735][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.566560][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.568283][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.580305][ T4327] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.581778][ T4327] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.585556][ T4327] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.586780][ T4327] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.593761][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.594972][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.596210][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.618376][ T1605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.619594][ T1605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.625989][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.635618][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.636883][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.649619][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.667296][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.667767][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.668591][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.669943][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.671304][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.674091][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.746153][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.747638][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.749093][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.804131][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.805290][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.806682][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.808954][ T4409] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 36.132746][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 36.267858][ T79] block nbd0: Attempted send on invalid socket [ 36.268957][ T79] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 36.340705][ T4330] Bluetooth: hci3: command 0x041b tx timeout [ 36.343730][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.345379][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.346862][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 36.348729][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 36.350039][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.362143][ T24] usb 1-1: config 0 descriptor?? [ 36.412695][ T47] Bluetooth: hci2: command 0x041b tx timeout [ 36.426399][ T4330] Bluetooth: hci4: command 0x041b tx timeout [ 36.427327][ T4330] Bluetooth: hci0: command 0x041b tx timeout [ 36.428348][ T4330] Bluetooth: hci1: command 0x041b tx timeout [ 36.783158][ T24] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 36.788371][ T24] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 37.094600][ T4441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.106484][ T4441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.158795][ T4448] loop2: detected capacity change from 0 to 512 [ 37.181138][ T4448] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.13: inode has both inline data and extents flags [ 37.185034][ T4448] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.13: couldn't read orphan inode 15 (err -117) [ 37.189934][ T4448] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 38.263868][ T3897] usb 1-1: USB disconnect, device number 2 [ 38.273535][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 38.413277][ T47] Bluetooth: hci3: command 0x040f tx timeout [ 38.492767][ T4330] Bluetooth: hci0: command 0x040f tx timeout [ 38.492867][ T47] Bluetooth: hci1: command 0x040f tx timeout [ 38.495021][ T4330] Bluetooth: hci4: command 0x040f tx timeout [ 38.496388][ T47] Bluetooth: hci2: command 0x040f tx timeout [ 38.839139][ T4473] loop2: detected capacity change from 0 to 512 [ 38.846384][ T4473] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.21: inode has both inline data and extents flags [ 38.848851][ T4473] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.21: couldn't read orphan inode 15 (err -117) [ 38.850800][ T4473] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 39.912954][ T4490] netlink: 16 bytes leftover after parsing attributes in process `syz.3.24'. [ 40.022555][ T4498] loop0: detected capacity change from 0 to 512 [ 40.025187][ T4498] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.025617][ T4496] loop3: detected capacity change from 0 to 512 [ 40.027166][ T4498] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 40.038483][ T4498] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.28: invalid indirect mapped block 9 (level 0) [ 40.041840][ T4498] EXT4-fs (loop0): 1 truncate cleaned up [ 40.042750][ T4498] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 40.741077][ T4330] Bluetooth: hci4: command 0x0419 tx timeout [ 40.742393][ T47] Bluetooth: hci2: command 0x0419 tx timeout [ 40.743481][ T4326] Bluetooth: hci3: command 0x0419 tx timeout [ 40.744551][ T4326] Bluetooth: hci1: command 0x0419 tx timeout [ 40.745689][ T47] Bluetooth: hci0: command 0x0419 tx timeout [ 40.938136][ T4496] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.26: inode has both inline data and extents flags [ 40.941387][ T4496] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.26: couldn't read orphan inode 15 (err -117) [ 40.944292][ T4496] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 40.949157][ T4321] EXT4-fs (loop0): unmounting filesystem. [ 40.952164][ T4511] loop1: detected capacity change from 0 to 512 [ 40.957425][ T4511] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 40.969620][ T4511] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.39: invalid indirect mapped block 9 (level 0) [ 40.984986][ T4511] EXT4-fs (loop1): 1 truncate cleaned up [ 40.985955][ T4511] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 41.505484][ T4516] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 42.560174][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 42.668479][ T4322] EXT4-fs (loop3): unmounting filesystem. [ 42.930555][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 42.973724][ T4536] loop2: detected capacity change from 0 to 512 [ 42.975612][ T4536] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 43.013473][ T4536] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.34: invalid indirect mapped block 9 (level 0) [ 43.017012][ T4536] EXT4-fs (loop2): 1 truncate cleaned up [ 43.017881][ T4536] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 43.082417][ T24] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 43.530825][ T4541] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 43.804694][ T24] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 43.806039][ T24] usb 1-1: config 0 has no interface number 0 [ 43.806965][ T24] usb 1-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x9F, skipping [ 43.838147][ T24] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 43.838198][ T4328] EXT4-fs (loop2): unmounting filesystem. [ 43.841017][ T24] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 43.842820][ T24] usb 1-1: Product: syz [ 43.843496][ T24] usb 1-1: SerialNumber: syz [ 43.845636][ T24] usb 1-1: config 0 descriptor?? [ 43.866695][ T24] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 44.785621][ T4564] batman_adv: batadv0: Adding interface: dummy0 [ 44.786624][ T4564] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.798721][ T4564] batman_adv: batadv0: Interface activated: dummy0 [ 44.940529][ T4564] batadv0: mtu less than device minimum [ 44.943209][ T4564] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 44.946417][ T4564] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 44.949395][ T4564] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 44.952437][ T4564] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 44.955511][ T4564] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 44.958481][ T4564] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 44.961431][ T4564] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 44.964397][ T4564] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 44.967392][ T4564] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 45.224331][ T4588] netlink: 48 bytes leftover after parsing attributes in process `syz.1.46'. [ 45.256290][ T4588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.46'. [ 45.258819][ T4588] netlink: 32 bytes leftover after parsing attributes in process `syz.1.46'. [ 45.656501][ T4590] mmap: syz.2.49 (4590) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 45.880155][ T7] usb 1-1: USB disconnect, device number 3 [ 45.943111][ T115] cfg80211: failed to load regulatory.db [ 46.517450][ T4613] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 46.519095][ T4613] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 47.059770][ T4637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.061496][ T4637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.145185][ T4639] netlink: 676 bytes leftover after parsing attributes in process `syz.0.62'. [ 47.700101][ T4679] netlink: 16 bytes leftover after parsing attributes in process `syz.1.85'. [ 47.705091][ T4679] netlink: 56 bytes leftover after parsing attributes in process `syz.1.85'. [ 47.717594][ T4681] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.719708][ T4681] Zero length message leads to an empty skb [ 47.807854][ T4688] loop1: detected capacity change from 0 to 128 [ 47.829647][ T4688] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 47.910741][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 48.011731][ T4700] binder: 4684:4700 BC_FREE_BUFFER u0000000000000000 no match [ 48.020953][ T4700] binder: 4684:4700 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 48.028353][ T4700] binder: 4684:4700 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 48.039930][ T4697] binder: 4684:4697 got transaction to invalid handle, 1 [ 48.083043][ T4697] binder: 4697:4684 cannot find target node [ 48.083997][ T4697] binder: 4684:4697 transaction call to 0:0 failed 3/29201/-22, size 12288-0 line 3045 [ 48.608740][ T113] binder: undelivered TRANSACTION_ERROR: 29201 [ 48.941625][ T4721] device team0 entered promiscuous mode [ 48.943883][ T4721] device team_slave_0 entered promiscuous mode [ 48.945056][ T4721] device team_slave_1 entered promiscuous mode [ 49.302289][ T4728] netlink: 'syz.3.102': attribute type 4 has an invalid length. [ 49.323704][ T4728] netlink: 'syz.3.102': attribute type 4 has an invalid length. [ 49.932360][ T4337] Bluetooth: hci0: command 0x0c1a tx timeout [ 49.932461][ T4685] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 50.557585][ T4685] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 50.560668][ T4685] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 50.561839][ T4685] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 50.563139][ T4685] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 50.565122][ T4685] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 50.566255][ T4685] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 50.567171][ T4685] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 50.568462][ T4685] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 50.569588][ T4685] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 50.570518][ T4685] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 50.573115][ T4685] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 50.574266][ T4685] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 50.575158][ T4685] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 50.576798][ T4685] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 50.578472][ T4706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.579815][ T4706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.594462][ T4727] block device autoloading is deprecated and will be removed. [ 50.729735][ T4749] net_ratelimit: 11 callbacks suppressed [ 50.729746][ T4749] IPVS: sh: FWM 3 0x00000003 - no destination available [ 50.731843][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 50.734866][ T4749] IPVS: sh: FWM 3 0x00000003 - no destination available [ 50.736178][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 51.189199][ T4737] bond1 (unregistering): Released all slaves [ 51.314150][ T4737] device vlan2 entered promiscuous mode [ 51.315544][ T4737] device veth1_to_hsr entered promiscuous mode [ 51.325123][ T4764] netlink: 'syz.2.114': attribute type 1 has an invalid length. [ 51.458597][ T4772] netlink: 16 bytes leftover after parsing attributes in process `syz.2.117'. [ 51.460195][ T4772] netlink: 56 bytes leftover after parsing attributes in process `syz.2.117'. [ 51.510440][ T4778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.512067][ T4778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.559503][ T4782] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20001 [ 52.012320][ T4326] Bluetooth: hci0: command 0x0406 tx timeout [ 52.075186][ T4794] netlink: 'syz.4.127': attribute type 1 has an invalid length. [ 52.101785][ T4794] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.198283][ T4794] device ip6erspan0 entered promiscuous mode [ 52.202019][ T4794] bond1: (slave ip6erspan0): making interface the new active one [ 52.205551][ T4794] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 52.207115][ T4616] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 52.479765][ T4799] 8021q: adding VLAN 0 to HW filter on device bond2 [ 52.482064][ T4799] bond1: (slave bond2): Enslaving as an active interface with an up link [ 52.514999][ T4799] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 52.531099][ T4799] device vlan2 entered promiscuous mode [ 52.531999][ T4799] device bond1 entered promiscuous mode [ 52.542313][ T4799] device bond2 entered promiscuous mode [ 52.543387][ T4799] device gretap1 entered promiscuous mode [ 52.572336][ T4337] Bluetooth: hci2: command 0x0c1a tx timeout [ 52.573433][ T4337] Bluetooth: hci3: command 0x0c1a tx timeout [ 52.574326][ T4337] Bluetooth: hci1: command 0x0c1a tx timeout [ 52.654974][ T4326] Bluetooth: hci4: command 0x0c1a tx timeout [ 52.667691][ T4806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.670004][ T4806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.679271][ T4806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.689107][ T4806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.230063][ T4785] Set syz1 is full, maxelem 65536 reached [ 53.542278][ T4648] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 53.742285][ T4648] usb 1-1: Using ep0 maxpacket: 16 [ 53.746559][ T4648] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.751480][ T4648] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.755048][ T4648] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 53.759263][ T4648] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 53.761833][ T4648] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.771916][ T4648] usb 1-1: config 0 descriptor?? [ 54.393203][ T4810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.395312][ T4810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.292155][ T4326] Bluetooth: hci3: command 0x0406 tx timeout [ 55.292181][ T47] Bluetooth: hci4: command 0x0406 tx timeout [ 55.294433][ T4330] Bluetooth: hci2: command 0x0406 tx timeout [ 55.295559][ T4337] Bluetooth: hci1: command 0x0406 tx timeout [ 55.468332][ T4823] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20001 [ 55.538389][ T4825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.540179][ T4825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.046746][ T4833] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.158286][ T4846] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 56.212184][ T4846] fuse: Bad value for 'fd' [ 56.220758][ T4849] device syzkaller0 entered promiscuous mode [ 56.582517][ T4648] usbhid 1-1:0.0: can't add hid device: -71 [ 56.584598][ T4648] usbhid: probe of 1-1:0.0 failed with error -71 [ 56.597332][ T4648] usb 1-1: USB disconnect, device number 4 [ 56.823448][ T4858] netlink: 48 bytes leftover after parsing attributes in process `syz.0.145'. [ 57.261994][ T4858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.145'. [ 57.263719][ T4858] netlink: 32 bytes leftover after parsing attributes in process `syz.0.145'. [ 57.580047][ T4868] netlink: 16 bytes leftover after parsing attributes in process `syz.0.148'. [ 57.581634][ T4868] netlink: 56 bytes leftover after parsing attributes in process `syz.0.148'. [ 58.214578][ T4885] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 58.216131][ T4885] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 59.223192][ T4902] netlink: 48 bytes leftover after parsing attributes in process `syz.0.158'. [ 59.549517][ T4902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.158'. [ 59.550891][ T4902] netlink: 32 bytes leftover after parsing attributes in process `syz.0.158'. [ 59.779456][ T4881] netlink: 676 bytes leftover after parsing attributes in process `syz.3.149'. [ 60.520801][ T4922] 8021q: adding VLAN 0 to HW filter on device bond3 [ 60.531247][ T4922] bond2: (slave bond3): Enslaving as an active interface with an up link [ 60.532931][ T4928] hub 1-0:1.0: USB hub found [ 60.537645][ T4928] hub 1-0:1.0: 1 port detected [ 60.591214][ T4922] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 60.678100][ T4922] device vlan2 entered promiscuous mode [ 60.678989][ T4922] device bond2 entered promiscuous mode [ 60.679844][ T4922] device bond3 entered promiscuous mode [ 60.680675][ T4922] device gretap1 entered promiscuous mode [ 60.769080][ T4937] netlink: 44 bytes leftover after parsing attributes in process `syz.1.169'. [ 60.801342][ T4944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.804131][ T4944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.913678][ T4946] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 60.915133][ T4946] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 61.168673][ T4944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.172510][ T4944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.784221][ T4961] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 61.785809][ T4961] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 61.884040][ T4962] netlink: 48 bytes leftover after parsing attributes in process `syz.4.173'. [ 62.592671][ T4965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.595473][ T4965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.212347][ T4977] netlink: 48 bytes leftover after parsing attributes in process `syz.1.176'. [ 63.414097][ T4975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.176'. [ 63.423163][ T4978] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 63.806921][ T4979] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 63.808553][ T4979] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 64.327548][ T4996] netlink: 48 bytes leftover after parsing attributes in process `syz.3.181'. [ 64.494085][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.495697][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.168089][ T5013] hub 1-0:1.0: USB hub found [ 65.170040][ T5013] hub 1-0:1.0: 1 port detected [ 65.357757][ T5021] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 65.359268][ T5021] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 65.748591][ T5026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.772656][ T5026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.383786][ T5031] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 66.385310][ T5031] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 66.657405][ T5026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.658949][ T5026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.699615][ T5039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.201'. [ 66.701093][ T5039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.201'. [ 66.744138][ T5039] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.745607][ T5039] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.746914][ T5039] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.748192][ T5039] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.763958][ T5039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.201'. [ 66.765459][ T5039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.201'. [ 67.084522][ C1] ------------[ cut here ]------------ [ 67.085361][ C1] WARNING: CPU: 1 PID: 5040 at net/mac80211/tx.c:4944 __ieee80211_beacon_get+0xf60/0x12bc [ 67.086930][ C1] Modules linked in: [ 67.087494][ C1] CPU: 1 PID: 5040 Comm: syz.2.197 Not tainted syzkaller #0 [ 67.088581][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 67.089965][ C1] pstate: 42400005 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 67.091085][ C1] pc : __ieee80211_beacon_get+0xf60/0x12bc [ 67.091901][ C1] lr : __ieee80211_beacon_get+0xf60/0x12bc [ 67.092784][ C1] sp : ffff800008017a90 [ 67.093365][ C1] x29: ffff800008017ad0 x28: ffffffffffffe520 x27: 0000000000000001 [ 67.094556][ C1] x26: 0000000000000041 x25: ffff0000c3d4b000 x24: 0000000000000000 [ 67.095741][ C1] x23: ffff0000d9910ea0 x22: ffff800008017b3c x21: ffff0000f72be228 [ 67.096942][ C1] x20: dfff800000000000 x19: ffff0000f72be760 x18: ffff800011b8bf60 [ 67.098216][ C1] x17: 3004320000020601 x16: ffff8000082d7e60 x15: 0000000000000000 [ 67.099435][ C1] x14: 0000000000000007 x13: 0000000000ff0100 x12: 0000000000ff0100 [ 67.100587][ C1] x11: ff00800011307c84 x10: 0000000000000000 x9 : ffff800011307c84 [ 67.101798][ C1] x8 : ffff0000de983780 x7 : 0000000000000000 x6 : 0000000000000000 [ 67.102967][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800011306f7c [ 67.104195][ C1] x2 : 000000000000000a x1 : 0000000000000000 x0 : 0000000000000000 [ 67.105407][ C1] Call trace: [ 67.105908][ C1] __ieee80211_beacon_get+0xf60/0x12bc [ 67.106701][ C1] ieee80211_beacon_get_tim+0x70/0x44c [ 67.107511][ C1] mac80211_hwsim_beacon_tx+0x1e8/0x914 [ 67.108366][ C1] __iterate_interfaces+0x204/0x484 [ 67.109110][ C1] ieee80211_iterate_active_interfaces_atomic+0xd4/0x180 [ 67.110262][ C1] mac80211_hwsim_beacon+0xc8/0x1b8 [ 67.111085][ C1] __hrtimer_run_queues+0x434/0xc34 [ 67.111840][ C1] hrtimer_run_softirq+0x160/0x400 [ 67.112650][ C1] handle_softirqs+0x318/0xc60 [ 67.113390][ C1] __do_softirq+0x14/0x20 [ 67.114053][ C1] ____do_softirq+0x14/0x20 [ 67.114746][ C1] call_on_irq_stack+0x30/0x48 [ 67.115436][ C1] do_softirq_own_stack+0x20/0x2c [ 67.116147][ C1] __irq_exit_rcu+0x23c/0x438 [ 67.116844][ C1] irq_exit_rcu+0x14/0x84 [ 67.117507][ C1] el1_interrupt+0x38/0x54 [ 67.118142][ C1] el1h_64_irq_handler+0x18/0x24 [ 67.118794][ C1] el1h_64_irq+0x64/0x68 [ 67.119392][ C1] _raw_spin_unlock_irqrestore+0x58/0xac [ 67.120260][ C1] __wake_up_sync_key+0x11c/0x180 [ 67.120973][ C1] __unix_dgram_recvmsg+0x38c/0xb04 [ 67.121701][ C1] unix_dgram_recvmsg+0xd0/0xe8 [ 67.122413][ C1] ____sys_recvmsg+0x678/0x768 [ 67.123102][ C1] do_recvmmsg+0x388/0xa0c [ 67.123739][ C1] __arm64_sys_recvmmsg+0x17c/0x23c [ 67.124480][ C1] invoke_syscall+0x98/0x2b4 [ 67.125140][ C1] el0_svc_common+0x138/0x258 [ 67.125840][ C1] do_el0_svc+0x58/0x130 [ 67.126422][ C1] el0_svc+0x58/0x128 [ 67.126956][ C1] el0t_64_sync_handler+0x84/0xf0 [ 67.127607][ C1] el0t_64_sync+0x18c/0x190 [ 67.128249][ C1] irq event stamp: 155871 [ 67.128888][ C1] hardirqs last enabled at (155870): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 67.130384][ C1] hardirqs last disabled at (155871): [] el1_dbg+0x24/0x80 [ 67.131578][ C1] softirqs last enabled at (154836): [] handle_softirqs+0xaec/0xc60 [ 67.132924][ C1] softirqs last disabled at (155811): [] __do_softirq+0x14/0x20 [ 67.134262][ C1] ---[ end trace 0000000000000000 ]--- [ 67.561222][ T5045] netlink: 48 bytes leftover after parsing attributes in process `syz.3.199'.