last executing test programs: 3.493040064s ago: executing program 1 (id=33): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40006101, 0x0) 3.29341359s ago: executing program 2 (id=36): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)="f3", 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) 3.269035221s ago: executing program 1 (id=37): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 3.149951195s ago: executing program 2 (id=39): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000380)=r1) 3.089881397s ago: executing program 1 (id=41): prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000b80)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x128, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xbfa6c1dfb8cc9f2d], 'wg2\x00', 'veth0_virt_wifi\x00', {}, {}, 0x29, 0x10, 0x0, 0x60}, 0x0, 0xa8, 0xf0, 0x60030000, {0x0, 0xff000000}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x8}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff000000, 0xffffff00, 0xffffff00, 0xff], [0xff, 0xff, 0xffffffff, 0xff], 'ip6gre0\x00', '\x00', {0xff}, {}, 0x0, 0x2, 0x4}, 0x0, 0xf0, 0x120, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x7, 0x0, [0x1, 0xa2e8, 0x4, 0x0, 0x9, 0xc, 0x7, 0x6f, 0x3a, 0x489, 0x2c, 0x8, 0x8, 0xfffb, 0x5, 0x9], 0xb}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x8000002, 0x6, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='cpuset\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r2) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x4f, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) 2.840665795s ago: executing program 2 (id=45): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000500)="14", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, 0x0, 0x0) socket(0x10, 0x3, 0x0) 2.823546126s ago: executing program 1 (id=46): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000080)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0xe}}, 0x10) 2.822813716s ago: executing program 1 (id=47): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40006101, 0x0) 2.39074303s ago: executing program 4 (id=48): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0x3, 0x2}, {}, {0xfff5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x320, 0x1a, 0xad9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) 2.389811761s ago: executing program 1 (id=49): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$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") r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r2 = socket$netlink(0x10, 0x3, 0xe) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r3, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @remote, 0x9}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000040)}], 0x1}, 0x4004000) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r0, 0x1, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000459bb240580403500000000000010902", @ANYBLOB="fa37"], 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r6, 0x5607, 0x4) 2.335193932s ago: executing program 4 (id=50): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_devices(r1, 0x0, 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x1, 'queue1\x00', 0x4}) write$sndseq(r0, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x1e6, @tick=0x9}) 2.290737164s ago: executing program 4 (id=51): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x1}, {r3, 0xd355}], 0x2, 0x0, 0x0, 0x0) 1.699585893s ago: executing program 2 (id=53): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) socket(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0xca200) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r1, 0x40026f34, &(0x7f0000000100)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/sync_on_suspend', 0x141282, 0x36) sendfile(r2, r2, 0x0, 0xf2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f00000000c0)=0x3, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c844}, 0x881) 1.507272139s ago: executing program 0 (id=56): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xc6a, 0x8, 0x0, 0x2, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r1, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000025c10200000001125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 1.353921285s ago: executing program 3 (id=58): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4c050}, 0x44004000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8917}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x855}, 0x24000840) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) gettid() timer_create(0x200000000000000, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, 0x0, 0x0) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000000000)=0x0) timer_settime(r3, 0x1, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) r4 = syz_io_uring_setup(0x1f9b, &(0x7f0000000340)={0x0, 0xffffff7c, 0x82, 0x0, 0x345}, &(0x7f0000000500), &(0x7f0000000600), &(0x7f0000000000)) io_uring_enter(r4, 0x5fb, 0xe876, 0x3, &(0x7f0000000040)={[0x7]}, 0x8) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, 0x0) 1.344096235s ago: executing program 0 (id=59): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40006101, 0x0) 1.271941558s ago: executing program 0 (id=60): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40844}, 0x40) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0x3, 0x2}, {}, {0xfff5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x320, 0x1a, 0xad9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) 1.271733687s ago: executing program 3 (id=61): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_devices(r1, 0x0, 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x1, 'queue1\x00', 0x4}) write$sndseq(r0, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x1e6, @tick=0x9}) 1.217119449s ago: executing program 0 (id=62): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000108000a40fffffffc880000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000005c0003805800008008000340000000024c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100001c000180090001006c617374000000000c0002800800014000000005140000001100", @ANYRES8], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 1.19896081s ago: executing program 3 (id=63): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$inet6(0xa, 0x80001, 0x10335548) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_clone(0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) r4 = syz_pidfd_open(r3, 0x0) process_mrelease(r4, 0x700000000000000) 281.842211ms ago: executing program 0 (id=64): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xc6a, 0x8, 0x0, 0x2, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r4) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000025c10200000011125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 245.731261ms ago: executing program 4 (id=65): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {0x2, 0x10, 0x2, 0x4}, 0xf, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x80c, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb89, 0x0, 0x296, 0x71, 0x0, 0x0, 0x9, 0x2000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200, 0x3, 0xfffffffc, 0x0, 0x0, 0x207, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x200, 0x0, 0x2, 0x9, 0x3, 0x5, 0xfffffffd, 0x4000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x3, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x4000000, 0x0, 0x1, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0x4, 0x0, 0x0, 0xbffffffe, 0x0, 0x0, 0x4, 0x0, 0x6, 0x1, 0x0, 0xbda6, 0xe, 0x7ff, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x0, 0xfffffffe, 0xbd, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80000020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5cb9, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_clone3(0x0, 0x0) read(r0, 0x0, 0x0) 244.692561ms ago: executing program 3 (id=66): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x7, 0x8, 0x40, 0x42, 0x1}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020400) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000380)) 222.766112ms ago: executing program 2 (id=67): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000100), 0x10) syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000001200)='./file1\x00', 0x4010, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0], 0x1, 0x11cf, &(0x7f0000003640)="$eJzs3V9Ls3UYB/BLH/doM83+WXrSjzqpk5v0oKNOJBSiQZGuqCC4xVljaxu7d7BJkNBZR72O6LCzIHoDvotOQoKoE49a6ExTDDPSPeDnc7JrfO+LXReDwT32Y4evf/1ZY7fIdvNeTE5MxFSnFOkoRYrJeBAj+/HKlxu/f7X58PR5ShtrWyuvpZTmX/jho8+/ffHH3ux7381/Px0HCx8f/rr608HiwdLhH1uf1otUL1Kr3Ut52m63e/l2s5Z26kUjS+mdZi0vaqneKmrdC/lus93pDFLe2pkrd7q1okh5a5AatUHqtVOvO0j5J3m9lbIsS3Pl4LLhcDj84l9eW/3maDgcHveU4uFJ52NRjtl4POZiPp6IhXgynoqn45l4NhbjuXg+lk6uuuUVAAAAAAAAAAAAAAAAAAAA4J5x/h8AAAAAAAAAAAAAAAAAAADG70bn/0vHHc7/AwAAAAAAAAAAAAAAAAAAwP/N//8DAAAAAAAAAAAAAAAAAADA+G1+8OFba5XK+rspzUT8st+v9qujx1G+8WZl/dV0YuG867d+v/rgLF8Z5eliPh3l03z1ynwmXn5plB9nb7xduZQvx87trw8AAAD3QpbOXHl/n2X/lI+qv30/cOn+fSqWp656xZnbWoX/oBjsNfJms9YtBqW/ir2xFROnU415DIXi+uLn9yNu3jX5aAx/fTHmDybuxPmbPj3uUQAAAAAAAAAAALiBu/g54bh3BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4E924FgAAAAAQJi/dRodGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFcFAAD//3uGkzs=") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 144.279275ms ago: executing program 4 (id=68): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000080)={0x4, 0x8, 0xfa00, {r0, 0xe}}, 0x10) 143.079765ms ago: executing program 0 (id=69): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xc6a, 0x8, 0x0, 0x2, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r4) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000025c10200000001125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 126.776425ms ago: executing program 3 (id=70): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40006101, 0x0) 71.901518ms ago: executing program 4 (id=71): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x1, 0x2, 0x0) r3 = epoll_create1(0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x404e40) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x194, &(0x7f0000000640)="$eJzsmD9P+kAYx7/X8if88ktw1UUTScDB0hY1MjgwO2ii0bhJpBK0iIEOwGZ8Ec6+AmfiwvvQQZ0cxM3Joebawx4oYuI/jM9neO57dw/Hc0+Tb5OCIIg/y831w9VZMhHj+j8SiIr1WzXIUaT8Vvxx5qK0cn6i31+22svZ/vMYANd9//+HALRzKhwxd93eXyfEuA6lq8Py/iYYNKG3oWBDaAsMW0LvSbrC8zVtt2Rb2k7FLnCh82DwYPKQ6a+vc8RQkOpj0n6t0dzP27ZV/UIxrH+dnIIlqT75eXV7owf9gwEFhtAZMKwJvYhotzd+S6T7T4SC89Vvvv/vFuPxITlhjEqpJD5BMHBxFwNGo56fEoE/uacMScmfQpJ/pJ3yYbrWaM6WyvmiVbQOTDOzoM/p+ryZ9ozIj2/4X8zzp3/S+eEBuREWQT3vOFXDj89zsx6FUzVfc9yI538KUtN+1UysyXjvgzE2xYeUChwPrJYgCIIgCIIgCIIgCIIgCOIjTIJ5X0F7yL5YMle97KcAAAD//5Z1cak=") r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) read$FUSE(r4, &(0x7f0000003f00)={0x2020}, 0x2020) 71.178747ms ago: executing program 3 (id=72): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40844}, 0x40) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0x3, 0x2}, {}, {0xfff5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x320, 0x1a, 0xad9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) 0s ago: executing program 2 (id=73): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_devices(r1, 0x0, 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x1, 'queue1\x00', 0x4}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, 0x0) kernel console output (not intermixed with test programs): [ 9.478580][ T3990] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: [ 9.508003][ T11] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 9.509960][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.144' (ED25519) to the list of known hosts. syzkaller login: [ 29.235362][ T4312] cgroup: Unknown subsys name 'net' [ 29.515356][ T4312] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.781650][ T4312] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 30.445320][ T4328] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.448233][ T4328] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.449624][ T4328] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.450860][ T4333] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.452575][ T4328] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.453374][ T4334] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.455588][ T4334] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.457103][ T4334] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.457542][ T4328] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.458508][ T4334] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 30.460882][ T4333] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.461094][ T4334] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.463844][ T4328] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.465446][ T4328] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.466752][ T4333] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 30.468364][ T4331] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.470080][ T4331] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 30.474228][ T47] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.475703][ T47] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.477466][ T47] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.479501][ T47] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.481223][ T47] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 30.482440][ T47] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.483744][ T47] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.485175][ T47] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.486518][ T47] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.492056][ T4326] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.493934][ T4328] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.506690][ T4335] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 30.508096][ T4335] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.646827][ T4336] chnl_net:caif_netlink_parms(): no params data found [ 30.694920][ T4336] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.696250][ T4336] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.697935][ T4336] device bridge_slave_0 entered promiscuous mode [ 30.701092][ T4336] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.702247][ T4336] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.704348][ T4336] device bridge_slave_1 entered promiscuous mode [ 30.708773][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 30.713624][ T4324] chnl_net:caif_netlink_parms(): no params data found [ 30.717676][ T4336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.719316][ T4325] chnl_net:caif_netlink_parms(): no params data found [ 30.722101][ T4336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.723883][ T4337] chnl_net:caif_netlink_parms(): no params data found [ 30.747152][ T4336] team0: Port device team_slave_0 added [ 30.760416][ T4336] team0: Port device team_slave_1 added [ 30.768855][ T4336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.769987][ T4336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.775186][ T4336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.787040][ T4336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.788181][ T4336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.792525][ T4336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.800167][ T4325] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.801425][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.804550][ T4325] device bridge_slave_0 entered promiscuous mode [ 30.814088][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.815270][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.816935][ T4329] device bridge_slave_0 entered promiscuous mode [ 30.824627][ T4324] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.826138][ T4324] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.827975][ T4324] device bridge_slave_0 entered promiscuous mode [ 30.830044][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.831152][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.833895][ T4325] device bridge_slave_1 entered promiscuous mode [ 30.835672][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.836931][ T4337] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.838497][ T4337] device bridge_slave_0 entered promiscuous mode [ 30.840418][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.841517][ T4337] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.843360][ T4337] device bridge_slave_1 entered promiscuous mode [ 30.847587][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.848743][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.850249][ T4329] device bridge_slave_1 entered promiscuous mode [ 30.852002][ T4324] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.854387][ T4324] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.855887][ T4324] device bridge_slave_1 entered promiscuous mode [ 30.863999][ T4337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.870345][ T4337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.924080][ T4336] device hsr_slave_0 entered promiscuous mode [ 30.973028][ T4336] device hsr_slave_1 entered promiscuous mode [ 31.013808][ T4325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.018697][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.023818][ T4324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.026193][ T4325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.028484][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.030865][ T4324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.034576][ T4337] team0: Port device team_slave_0 added [ 31.045783][ T4337] team0: Port device team_slave_1 added [ 31.057654][ T4325] team0: Port device team_slave_0 added [ 31.059792][ T4329] team0: Port device team_slave_0 added [ 31.061783][ T4324] team0: Port device team_slave_0 added [ 31.063901][ T4324] team0: Port device team_slave_1 added [ 31.068902][ T4324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.070046][ T4324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.074344][ T4324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.081520][ T4325] team0: Port device team_slave_1 added [ 31.085751][ T4329] team0: Port device team_slave_1 added [ 31.087002][ T4324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.088154][ T4324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.092334][ T4324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.096177][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.097232][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.101228][ T4337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.112005][ T4337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.113384][ T4337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.117469][ T4337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.124533][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.125702][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.129964][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.138043][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.139146][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.143539][ T4325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.145710][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.146734][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.150932][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.159369][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.160463][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.164680][ T4325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.213794][ T4324] device hsr_slave_0 entered promiscuous mode [ 31.252907][ T4324] device hsr_slave_1 entered promiscuous mode [ 31.292836][ T4324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.294195][ T4324] Cannot create hsr debugfs directory [ 31.333912][ T4329] device hsr_slave_0 entered promiscuous mode [ 31.375331][ T4329] device hsr_slave_1 entered promiscuous mode [ 31.412739][ T4329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.413957][ T4329] Cannot create hsr debugfs directory [ 31.473873][ T4325] device hsr_slave_0 entered promiscuous mode [ 31.522918][ T4325] device hsr_slave_1 entered promiscuous mode [ 31.562788][ T4325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.564112][ T4325] Cannot create hsr debugfs directory [ 31.603834][ T4337] device hsr_slave_0 entered promiscuous mode [ 31.642950][ T4337] device hsr_slave_1 entered promiscuous mode [ 31.682765][ T4337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.684072][ T4337] Cannot create hsr debugfs directory [ 31.793010][ T4336] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.845394][ T4336] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.889780][ T4336] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.923820][ T4336] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.980740][ T4324] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.004740][ T4324] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.051581][ T4337] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.093612][ T4324] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.146839][ T4336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.148940][ T4337] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.183850][ T4337] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.223820][ T4337] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.263625][ T4324] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.314855][ T4329] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.368979][ T4336] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.371650][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.373877][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.375522][ T4329] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.422472][ T4329] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.473796][ T4329] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.492909][ T4333] Bluetooth: hci0: command 0x0409 tx timeout [ 32.492919][ T4335] Bluetooth: hci3: command 0x0409 tx timeout [ 32.534393][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.536164][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.538094][ T1576] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.539418][ T1576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.550401][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.554116][ T4325] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.582915][ T4335] Bluetooth: hci4: command 0x0409 tx timeout [ 32.582995][ T4328] Bluetooth: hci1: command 0x0409 tx timeout [ 32.584039][ T4335] Bluetooth: hci2: command 0x0409 tx timeout [ 32.589068][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.590668][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.592113][ T4354] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.593341][ T4354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.596665][ T4325] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.634412][ T4325] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.678388][ T4325] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.719576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.727277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.737858][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.739881][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.741655][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.759703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.761764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.765679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.767186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.769080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.770601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.774529][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.781755][ T4337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.789440][ T4324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.808494][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.811799][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.813547][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.814937][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.816405][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.819592][ T4337] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.825112][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.826756][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.828239][ T1576] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.829393][ T1576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.841094][ T4324] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.842617][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.853023][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.854683][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.856132][ T1576] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.857312][ T1576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.858807][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.860191][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.862067][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.866928][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.868544][ T1576] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.869701][ T1576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.871505][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.875424][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.876968][ T1576] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.878189][ T1576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.883715][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.885383][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.887185][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.895742][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.898395][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.900152][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.902140][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.908367][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.909980][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.918762][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.920599][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.922168][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.924758][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.926234][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.927476][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.928990][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.930769][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.932480][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.934290][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.937535][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.938866][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.940177][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.941900][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.944175][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.945269][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.949792][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.951598][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.954623][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.958330][ T4336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.962363][ T4337] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.964747][ T4337] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.968933][ T4325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.975056][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.976707][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.978373][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.979972][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.981466][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.983523][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.984980][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.990198][ T4325] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.999866][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.001431][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.003715][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.005205][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.006737][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.008194][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.009863][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.011319][ T1576] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.012499][ T1576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.014354][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.016000][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.017481][ T1576] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.018597][ T1576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.020614][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.023771][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.032342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.034216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.035894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.038131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.039730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.051018][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.052797][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.054506][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.056309][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.057926][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.065321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.067306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.068835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.070470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.072504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.075759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.086526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.088274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.090133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.091751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.095100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.096790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.098775][ T4336] device veth0_vlan entered promiscuous mode [ 33.105978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.107680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.109241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.110736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.115032][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.117483][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.124443][ T4336] device veth1_vlan entered promiscuous mode [ 33.148650][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.150322][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.151858][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.156096][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.171041][ T4336] device veth0_macvtap entered promiscuous mode [ 33.186643][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.188311][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.189586][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.198674][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.200025][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.203342][ T4337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.206667][ T4324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.209694][ T4336] device veth1_macvtap entered promiscuous mode [ 33.235506][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.237175][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.238743][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.245878][ T4336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.247233][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.249078][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.259593][ T4336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.267460][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.269034][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.271051][ T4336] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.272442][ T4336] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.275028][ T4336] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.276401][ T4336] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.290683][ T4325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.294591][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.296705][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.298636][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.299977][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.301346][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.303574][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.309535][ T4324] device veth0_vlan entered promiscuous mode [ 33.318925][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.320200][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.322463][ T4324] device veth1_vlan entered promiscuous mode [ 33.326403][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.359911][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.361652][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.363719][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.365314][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.366869][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.368422][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.374714][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.376467][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.379132][ T4324] device veth0_macvtap entered promiscuous mode [ 33.398979][ T4324] device veth1_macvtap entered promiscuous mode [ 33.401280][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.403075][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.404482][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.406029][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.407632][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.409244][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.421081][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.422647][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.425559][ T4337] device veth0_vlan entered promiscuous mode [ 33.435656][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.437573][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.440814][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.445013][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.446610][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.448080][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.449653][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.451257][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.453788][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.464059][ T4337] device veth1_vlan entered promiscuous mode [ 33.467238][ T4389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.468535][ T4389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.470429][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.472601][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.477319][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.479089][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.481240][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.486923][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.488589][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.490156][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.491710][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.496381][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.497816][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.500325][ T4324] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.501730][ T4324] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.503484][ T4324] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.504864][ T4324] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.506952][ T4329] device veth0_vlan entered promiscuous mode [ 33.512122][ T4325] device veth0_vlan entered promiscuous mode [ 33.520287][ T4325] device veth1_vlan entered promiscuous mode [ 33.528298][ T4329] device veth1_vlan entered promiscuous mode [ 33.536508][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.538069][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.539531][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.540899][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.542353][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.549909][ T272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.551202][ T272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.552523][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.554290][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.555736][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.561739][ T4337] device veth0_macvtap entered promiscuous mode [ 33.570618][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.572304][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.575432][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.577337][ T4337] device veth1_macvtap entered promiscuous mode [ 33.580569][ T4329] device veth0_macvtap entered promiscuous mode [ 33.588556][ T4329] device veth1_macvtap entered promiscuous mode [ 33.597410][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.599108][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.600632][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.602053][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.607544][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.640221][ T4325] device veth0_macvtap entered promiscuous mode [ 33.647743][ T4325] device veth1_macvtap entered promiscuous mode [ 33.657470][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.659610][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.661189][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.665859][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.668105][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.672221][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.674490][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.676066][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.677806][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.679419][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.681131][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.684220][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.686033][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.687616][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.689076][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.690581][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.692063][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.694873][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.706615][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.708274][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.709849][ T4337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.711590][ T4337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.713884][ T4389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.714981][ T4389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.717291][ T4389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.718461][ T4389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.721003][ T4337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.725048][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.726665][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.728155][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.729724][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.731303][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.736221][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.738535][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.740321][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.741686][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.744335][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.745960][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.747960][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.749833][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.752164][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.755489][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.757086][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.758619][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.760016][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.761552][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.763307][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.764928][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.767284][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.768934][ T4406] device syzkaller0 entered promiscuous mode [ 33.771123][ T4337] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.772551][ T4337] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.779203][ T4337] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.780557][ T4337] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.784078][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.785574][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.861694][ T4329] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.865609][ T4329] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.875743][ T4329] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.877124][ T4329] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.890231][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.892227][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.897168][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.898777][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.900368][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.902008][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.903988][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.905591][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.908208][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.910642][ T4325] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.912003][ T4325] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.916158][ T4325] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.917593][ T4325] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.922267][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.923895][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.938073][ T4408] device syzkaller0 entered promiscuous mode [ 34.011526][ T272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.014731][ T272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.017962][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.038080][ T4389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.039398][ T4389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.040816][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.053920][ T272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.055392][ T272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.057018][ T272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.062588][ T4389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.064259][ T4389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.065647][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.075023][ T4389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.076350][ T4389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.077743][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.087135][ T4389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.088329][ T4389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.089630][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.160636][ T4413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 34.503745][ T4420] loop4: detected capacity change from 0 to 512 [ 34.573090][ T4335] Bluetooth: hci0: command 0x041b tx timeout [ 34.574193][ T4335] Bluetooth: hci3: command 0x041b tx timeout [ 34.653194][ T4333] Bluetooth: hci2: command 0x041b tx timeout [ 34.663023][ T4333] Bluetooth: hci4: command 0x041b tx timeout [ 34.664334][ T4335] Bluetooth: hci1: command 0x041b tx timeout [ 35.219432][ T4420] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 35.220930][ T4420] EXT4-fs (loop4): DAX unsupported by block device. [ 35.435911][ T4318] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 35.552115][ T4426] device syzkaller0 entered promiscuous mode [ 35.692210][ T4428] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 35.755941][ T4437] loop2: detected capacity change from 0 to 128 [ 35.796406][ T4437] xt_hashlimit: size too large, truncated to 1048576 [ 36.127286][ T4452] device syzkaller0 entered promiscuous mode [ 36.370315][ T4454] device syzkaller0 entered promiscuous mode [ 36.653449][ T4328] Bluetooth: hci3: command 0x040f tx timeout [ 36.654565][ T4328] Bluetooth: hci0: command 0x040f tx timeout [ 36.732910][ T4335] Bluetooth: hci1: command 0x040f tx timeout [ 36.733119][ T4328] Bluetooth: hci4: command 0x040f tx timeout [ 36.733924][ T4335] Bluetooth: hci2: command 0x040f tx timeout [ 37.151936][ T4463] loop4: detected capacity change from 0 to 512 [ 37.242452][ T4463] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 37.244036][ T4463] EXT4-fs (loop4): DAX unsupported by block device. [ 38.054888][ T4318] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 38.732982][ T4333] Bluetooth: hci0: command 0x0419 tx timeout [ 38.733079][ T4335] Bluetooth: hci3: command 0x0419 tx timeout [ 38.812709][ T4335] Bluetooth: hci2: command 0x0419 tx timeout [ 38.812802][ T4328] Bluetooth: hci4: command 0x0419 tx timeout [ 38.813794][ T4335] Bluetooth: hci1: command 0x0419 tx timeout [ 49.192076][ T4509] random: crng reseeded on system resumption [ 49.245872][ T4509] Restarting kernel threads ... done. [ 49.319507][ T4518] device syzkaller0 entered promiscuous mode [ 49.548845][ T4516] loop3: detected capacity change from 0 to 131072 [ 49.559266][ T4516] F2FS-fs (loop3): invalid crc value [ 49.606339][ T4516] F2FS-fs (loop3): Found nat_bits in checkpoint [ 49.634820][ T4516] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 49.797190][ T4533] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 50.326805][ T4563] syz.0.42 sent an empty control message without MSG_MORE. [ 50.636943][ T4572] xt_hashlimit: size too large, truncated to 1048576 [ 52.739172][ T4627] device syzkaller0 entered promiscuous mode [ 52.804579][ T4631] input: syz0 as /devices/virtual/input/input2 [ 52.870751][ T4633] loop2: detected capacity change from 0 to 8192 [ 52.924587][ T4635] device syzkaller0 entered promiscuous mode [ 53.074071][ T4647] loop4: detected capacity change from 0 to 16 [ 53.082365][ T4647] erofs: (device loop4): mounted with root inode @ nid 36. [ 53.097931][ T4647] syz.4.71: attempt to access beyond end of device [ 53.097931][ T4647] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 53.100607][ T4647] syz.4.71: attempt to access beyond end of device [ 53.100607][ T4647] loop4: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 53.106131][ T4647] ================================================================== [ 53.107458][ T4647] BUG: KASAN: slab-out-of-bounds in z_erofs_transform_plain+0x3a4/0x490 [ 53.108927][ T4647] Read of size 4096 at addr ffff0000d056a000 by task syz.4.71/4647 [ 53.110287][ T4647] [ 53.110674][ T4647] CPU: 1 PID: 4647 Comm: syz.4.71 Not tainted syzkaller #0 [ 53.111854][ T4647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 53.113615][ T4647] Call trace: [ 53.114172][ T4647] dump_backtrace+0x1c0/0x1ec [ 53.114976][ T4647] show_stack+0x2c/0x3c [ 53.115670][ T4647] __dump_stack+0x30/0x40 [ 53.116450][ T4647] dump_stack_lvl+0xf4/0x15c [ 53.117246][ T4647] print_address_description+0x88/0x218 [ 53.118213][ T4647] print_report+0x50/0x68 [ 53.118946][ T4647] kasan_report+0xa8/0xfc [ 53.119693][ T4647] kasan_check_range+0x258/0x290 [ 53.120561][ T4647] memcpy+0x48/0x90 [ 53.121252][ T4647] z_erofs_transform_plain+0x3a4/0x490 [ 53.122119][ T4647] z_erofs_decompress+0x9c/0xd4 [ 53.122973][ T4647] z_erofs_decompress_queue+0x100c/0x1b40 [ 53.123970][ T4647] z_erofs_runqueue+0x152c/0x16cc [ 53.124826][ T4647] z_erofs_read_folio+0x2d8/0x5c8 [ 53.125700][ T4647] filemap_read_folio+0x134/0x384 [ 53.126518][ T4647] filemap_read+0x12cc/0x2104 [ 53.127299][ T4647] generic_file_read_iter+0xf8/0x5c4 [ 53.128172][ T4647] vfs_read+0x3d4/0x7f0 [ 53.128843][ T4647] ksys_read+0x12c/0x224 [ 53.129552][ T4647] __arm64_sys_read+0x7c/0x90 [ 53.130358][ T4647] invoke_syscall+0x98/0x2b4 [ 53.131133][ T4647] el0_svc_common+0x138/0x258 [ 53.131929][ T4647] do_el0_svc+0x58/0x130 [ 53.132649][ T4647] el0_svc+0x58/0x128 [ 53.133360][ T4647] el0t_64_sync_handler+0x84/0xf0 [ 53.134171][ T4647] el0t_64_sync+0x18c/0x190 [ 53.134898][ T4647] [ 53.135265][ T4647] Allocated by task 1: [ 53.135944][ T4647] kasan_set_track+0x4c/0x80 [ 53.136752][ T4647] kasan_save_alloc_info+0x24/0x30 [ 53.137600][ T4647] __kasan_slab_alloc+0x70/0x88 [ 53.138407][ T4647] slab_post_alloc_hook+0x74/0x430 [ 53.139224][ T4647] kmem_cache_alloc+0x22c/0x308 [ 53.140002][ T4647] __kernfs_new_node+0xec/0x5f4 [ 53.140739][ T4647] kernfs_new_node+0x11c/0x22c [ 53.141548][ T4647] __kernfs_create_file+0x60/0x2d4 [ 53.142349][ T4647] sysfs_add_file_mode_ns+0x1d8/0x294 [ 53.143197][ T4647] internal_create_group+0x3e0/0xad0 [ 53.144052][ T4647] sysfs_create_groups+0x60/0x134 [ 53.144929][ T4647] device_add_attrs+0x178/0x6f4 [ 53.145787][ T4647] device_add+0x5d0/0xf90 [ 53.146538][ T4647] usb_set_configuration+0x1594/0x1b04 [ 53.147452][ T4647] usb_generic_driver_probe+0x8c/0x144 [ 53.148378][ T4647] usb_probe_device+0x120/0x258 [ 53.149193][ T4647] really_probe+0x39c/0xacc [ 53.149909][ T4647] __driver_probe_device+0x180/0x310 [ 53.150770][ T4647] driver_probe_device+0x78/0x324 [ 53.151623][ T4647] __device_attach_driver+0x290/0x4d4 [ 53.152505][ T4647] bus_for_each_drv+0x154/0x1e4 [ 53.153308][ T4647] __device_attach+0x2ac/0x3dc [ 53.154112][ T4647] device_initial_probe+0x24/0x34 [ 53.154980][ T4647] bus_probe_device+0xbc/0x1c4 [ 53.155790][ T4647] device_add+0xb04/0xf90 [ 53.156561][ T4647] usb_new_device+0x7f8/0x11e4 [ 53.157374][ T4647] register_root_hub+0x220/0x51c [ 53.158239][ T4647] usb_add_hcd+0x914/0xd58 [ 53.159014][ T4647] vhci_hcd_probe+0x1b8/0x350 [ 53.159781][ T4647] platform_probe+0x13c/0x1b4 [ 53.160510][ T4647] really_probe+0x39c/0xacc [ 53.161232][ T4647] __driver_probe_device+0x180/0x310 [ 53.162018][ T4647] driver_probe_device+0x78/0x324 [ 53.162838][ T4647] __device_attach_driver+0x290/0x4d4 [ 53.163671][ T4647] bus_for_each_drv+0x154/0x1e4 [ 53.164498][ T4647] __device_attach+0x2ac/0x3dc [ 53.165273][ T4647] device_initial_probe+0x24/0x34 [ 53.166119][ T4647] bus_probe_device+0xbc/0x1c4 [ 53.166892][ T4647] device_add+0xb04/0xf90 [ 53.167541][ T4647] platform_device_add+0x3f8/0x6e8 [ 53.168326][ T4647] vhci_hcd_init+0x37c/0x498 [ 53.169051][ T4647] do_one_initcall+0x278/0x9e0 [ 53.169778][ T4647] do_initcall_level+0x154/0x214 [ 53.170566][ T4647] do_initcalls+0x58/0xac [ 53.171307][ T4647] do_basic_setup+0x8c/0xa0 [ 53.171998][ T4647] kernel_init_freeable+0x35c/0x4f0 [ 53.172833][ T4647] kernel_init+0x24/0x1d8 [ 53.173496][ T4647] ret_from_fork+0x10/0x20 [ 53.174204][ T4647] [ 53.174568][ T4647] The buggy address belongs to the object at ffff0000d056a000 [ 53.174568][ T4647] which belongs to the cache kernfs_node_cache of size 168 [ 53.176862][ T4647] The buggy address is located 0 bytes inside of [ 53.176862][ T4647] 168-byte region [ffff0000d056a000, ffff0000d056a0a8) [ 53.178841][ T4647] [ 53.179203][ T4647] The buggy address belongs to the physical page: [ 53.180182][ T4647] page:000000001d0bd6b4 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11056a [ 53.181804][ T4647] flags: 0x5ffc00000000200(slab|node=0|zone=2|lastcpupid=0x7ff) [ 53.183118][ T4647] raw: 05ffc00000000200 0000000000000000 dead000000000122 ffff0000c03dca80 [ 53.184519][ T4647] raw: 0000000000000000 0000000000110011 00000001ffffffff 0000000000000000 [ 53.185944][ T4647] page dumped because: kasan: bad access detected [ 53.186966][ T4647] [ 53.187347][ T4647] Memory state around the buggy address: [ 53.188286][ T4647] ffff0000d0569f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 53.189597][ T4647] ffff0000d056a000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 53.190884][ T4647] >ffff0000d056a080: 00 00 00 00 00 fc fc fc fc fc fc fc fc 00 00 00 [ 53.192172][ T4647] ^ [ 53.193034][ T4647] ffff0000d056a100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 53.194381][ T4647] ffff0000d056a180: 00 00 fc fc fc fc fc fc fc fc 00 00 00 00 00 00 [ 53.195706][ T4647] ================================================================== [ 53.197083][ T4647] Disabling lock debugging due to kernel taint [ 53.198555][ T4647] syz.4.71: attempt to access beyond end of device [ 53.198555][ T4647] loop4: rw=0, sector=1056, nr_sectors = 8 limit=16