last executing test programs:

5m51.815009001s ago: executing program 4 (id=40):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x2, 0x1, 0x2, 0x2, 0x5, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4)

5m50.24775427s ago: executing program 4 (id=44):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x503, 0x70bd2b, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYBLOB="a5010000010000000401"], 0x18)
sendmmsg$inet6(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x44)

5m49.335444659s ago: executing program 4 (id=46):
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, 0x0, 0x0)
sendmmsg$inet6(r1, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000010)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
syz_emit_ethernet(0x0, 0x0, 0x0)
r3 = socket(0x2, 0x3, 0xff)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, 0x0, 0x0)
sendto$inet(r3, &(0x7f0000000040)="0f83b07ef75b4ff0f2d163c7c8a0d8fb8ab88f5b134df9055ab57dcbb68052fc319ac66954faccf67679a82789438adf3664351d952cd72c0dd8e9e7", 0x3c, 0x24040040, &(0x7f0000000200)={0x2, 0x4e21, @remote}, 0x10)
bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20)

5m44.107720604s ago: executing program 4 (id=59):
socket$inet6(0xa, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x63, 0x100000, {<r0=>0xffffffffffffffff}, {0xee01}, 0x8008000, 0x5080})
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x40, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x8)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b24, &(0x7f0000000000)={'wlan0\x00'})

5m40.822038057s ago: executing program 4 (id=70):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="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", 0x724}], 0x1}}], 0x2, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

5m39.16319106s ago: executing program 4 (id=73):
socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0)
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = accept4(r2, 0x0, &(0x7f0000000080), 0x80000)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000340)={'vxcan0\x00'})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'tunl0\x00', &(0x7f0000000380)={'ip_vti0\x00', 0x0, 0x7, 0x7800, 0xcf2f, 0xffff, {{0xf, 0x4, 0x2, 0x11, 0x3c, 0x64, 0x0, 0x4, 0x2d, 0x0, @remote, @remote, {[@timestamp_addr={0x44, 0x14, 0x8b, 0x1, 0x2, [{@broadcast, 0x9}, {@empty}]}, @noop, @timestamp={0x44, 0x10, 0x96, 0x0, 0xb, [0x8509, 0x575d24a4, 0x7]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x0, 0x1, 0x7f, 0x4, 0x41, @mcast1, @mcast2, 0x1, 0x1, 0x1}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000006c0)={'ip_vti0\x00', &(0x7f0000000600)={'ip_vti0\x00', 0x0, 0x700, 0x700, 0xffffff24, 0x9, {{0x24, 0x4, 0x2, 0x33, 0x90, 0x66, 0x0, 0x3, 0x4, 0x0, @remote, @remote, {[@rr={0x7, 0x17, 0x3f, [@loopback, @dev={0xac, 0x14, 0x14, 0x3d}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @loopback]}, @lsrr={0x83, 0x23, 0xa2, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @empty, @local, @rand_addr=0x64010102, @empty, @empty, @broadcast]}, @generic={0x7, 0xc, "e3ce4c400db04a90eb9a"}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x1c, 0x51, 0x0, 0x3, [0xc, 0x8, 0x5, 0x0, 0x8, 0x6]}, @timestamp={0x44, 0x8, 0xd3, 0x0, 0x3, [0x41e]}, @generic={0x44, 0x4, "b6b3"}, @timestamp={0x44, 0x8, 0x9, 0x0, 0xf, [0xb0]}, @noop, @noop]}}}}})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4400000010000104fcffffffffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="43190300c0000000340012800b0001006d95eff913630000eafb7b2a0ba16f5297b2c5f46b3fd3289bb32f855b7a8552417b4c42fb8b3836741df6f6d23480ba2f573a", @ANYRES32=r6, @ANYBLOB="08001f0007000000"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000700)={'team0\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f0000000740)={0x114, r4, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x114}}, 0x800)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0)
unshare(0x24020400)
r8 = socket$inet6(0xa, 0x3, 0x7)
getsockopt(r8, 0xff, 0x22, 0x0, &(0x7f00000002c0))
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000009060102000000002a000000000040000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f0000"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @mcast1, 0x9}, 0x1c)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r10, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
bind$inet6(r10, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

5m24.066504996s ago: executing program 32 (id=73):
socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0)
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = accept4(r2, 0x0, &(0x7f0000000080), 0x80000)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000340)={'vxcan0\x00'})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'tunl0\x00', &(0x7f0000000380)={'ip_vti0\x00', 0x0, 0x7, 0x7800, 0xcf2f, 0xffff, {{0xf, 0x4, 0x2, 0x11, 0x3c, 0x64, 0x0, 0x4, 0x2d, 0x0, @remote, @remote, {[@timestamp_addr={0x44, 0x14, 0x8b, 0x1, 0x2, [{@broadcast, 0x9}, {@empty}]}, @noop, @timestamp={0x44, 0x10, 0x96, 0x0, 0xb, [0x8509, 0x575d24a4, 0x7]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x0, 0x1, 0x7f, 0x4, 0x41, @mcast1, @mcast2, 0x1, 0x1, 0x1}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000006c0)={'ip_vti0\x00', &(0x7f0000000600)={'ip_vti0\x00', 0x0, 0x700, 0x700, 0xffffff24, 0x9, {{0x24, 0x4, 0x2, 0x33, 0x90, 0x66, 0x0, 0x3, 0x4, 0x0, @remote, @remote, {[@rr={0x7, 0x17, 0x3f, [@loopback, @dev={0xac, 0x14, 0x14, 0x3d}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @loopback]}, @lsrr={0x83, 0x23, 0xa2, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @empty, @local, @rand_addr=0x64010102, @empty, @empty, @broadcast]}, @generic={0x7, 0xc, "e3ce4c400db04a90eb9a"}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x1c, 0x51, 0x0, 0x3, [0xc, 0x8, 0x5, 0x0, 0x8, 0x6]}, @timestamp={0x44, 0x8, 0xd3, 0x0, 0x3, [0x41e]}, @generic={0x44, 0x4, "b6b3"}, @timestamp={0x44, 0x8, 0x9, 0x0, 0xf, [0xb0]}, @noop, @noop]}}}}})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4400000010000104fcffffffffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="43190300c0000000340012800b0001006d95eff913630000eafb7b2a0ba16f5297b2c5f46b3fd3289bb32f855b7a8552417b4c42fb8b3836741df6f6d23480ba2f573a", @ANYRES32=r6, @ANYBLOB="08001f0007000000"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000700)={'team0\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f0000000740)={0x114, r4, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x114}}, 0x800)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0)
unshare(0x24020400)
r8 = socket$inet6(0xa, 0x3, 0x7)
getsockopt(r8, 0xff, 0x22, 0x0, &(0x7f00000002c0))
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000009060102000000002a000000000040000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f0000"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @mcast1, 0x9}, 0x1c)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r10, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
bind$inet6(r10, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

3m58.528540272s ago: executing program 1 (id=464):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socket$inet6(0xa, 0x3, 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10)
write(r0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="190000000400000004000000bc"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f0000000040), &(0x7f0000000040)=@udp=r1, 0x1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x16, &(0x7f0000000340)=ANY=[], 0x0)

3m58.169777354s ago: executing program 1 (id=467):
r0 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x9})
socket$inet6(0xa, 0x805, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4040838)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c1142)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffefffff}, 0x94)
r2 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r2, 0x0, 0x200488e7)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x7, 0x0, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)

3m57.226692143s ago: executing program 1 (id=470):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x2404c850)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, 0x0, {0x2, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x0, 0x4, 0x10001, 0x8}, 0x4b}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2)
close(r2)
socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, 0x0, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="27030200dc0f14000e00073c001400004000ff8800000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005)

3m56.526458775s ago: executing program 1 (id=474):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r6)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$kcm(0x11, 0x3, 0x0)
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003180)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x408d0}, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, 0x0}, 0x4)

3m56.182629416s ago: executing program 1 (id=479):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
syz_emit_ethernet(0x6e, &(0x7f0000000540)=ANY=[], 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141182)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
read$msr(r1, &(0x7f0000000200)=""/161, 0xa1)
r2 = syz_open_dev$dri(&(0x7f0000002580), 0x200, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[], 0x50)
r5 = fsopen(&(0x7f0000000080)='hugetlbfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x0)
fchdir(r6)
mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r4, r4}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x0})
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, {0x0, 0xa8ab, 0x0, 0x0, 0x8, 0x1, 0x5, 0x0, 0x3, 0x4, 0x0, 0x10000, 0x406, 0x0, "427f4d0561864078b7f952fc7ebbfea1deee063e520cc38c6a002000"}})
close(r2)

3m55.155865968s ago: executing program 1 (id=483):
sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd6000000000002d9300000c0001"], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xe4)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}}, 0x14}, 0x1, 0x0, 0x0, 0x60000081}, 0x800)
syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="79ee7ca42eeaaaaaaaaaaabb86dd6a"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

3m37.753268537s ago: executing program 33 (id=483):
sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd6000000000002d9300000c0001"], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xe4)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}}, 0x14}, 0x1, 0x0, 0x0, 0x60000081}, 0x800)
syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="79ee7ca42eeaaaaaaaaaaabb86dd6a"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

3m22.725301441s ago: executing program 2 (id=526):
openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300200d, 0x102)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r0 = getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x46ac01, 0x0)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x4, @empty, 0x2, 0x3}, 0x20)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a000000000006000200010000"], 0x5c}, 0x1, 0x6c}, 0x0)

3m21.225614938s ago: executing program 2 (id=532):
r0 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x9})
socket$inet6(0xa, 0x805, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4040838)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c1142)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffefffff}, 0x94)
r2 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r2, 0x0, 0x200488e7)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x7, 0x0, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)

3m20.291090428s ago: executing program 2 (id=533):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000d00)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000e00)={&(0x7f0000000c80), 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x3c, r2, 0xf857c719674fe8db, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}]}, 0x3c}}, 0x40800)

3m20.094809344s ago: executing program 2 (id=537):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827", 0x45}], 0x1}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', <r0=>0x0})
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e0080", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7c0100", @ANYRES16, @ANYBLOB="01002bbd7000fbdbdf25070000000c000180080003000100000074000180140002007767320000000000000000000000000008000300020000001400020070696d", @ANYRES32, @ANYRES32=r0, @ANYBLOB="400001801400020070696d3672656730"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

3m19.676595187s ago: executing program 2 (id=538):
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x3, 0x0, 0x8000}, 0x50)

3m19.59879889s ago: executing program 2 (id=539):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=<r1=>0x0)
syz_open_procfs$namespace(r1, &(0x7f00000002c0)='ns/ipc\x00')
unshare(0x6a040000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x80)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00'})
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x81)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$kcm(0x29, 0x7, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$FS_IOC_GETFSUUID(r4, 0x80111500, &(0x7f00000000c0))
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000100))
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00'})
getpid()
sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x8080)

3m3.771632989s ago: executing program 34 (id=539):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=<r1=>0x0)
syz_open_procfs$namespace(r1, &(0x7f00000002c0)='ns/ipc\x00')
unshare(0x6a040000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x80)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00'})
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x81)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$kcm(0x29, 0x7, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$FS_IOC_GETFSUUID(r4, 0x80111500, &(0x7f00000000c0))
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000100))
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00'})
getpid()
sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x8080)

1m41.131549075s ago: executing program 7 (id=805):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0x50, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r2, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x8}}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x6c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000800)

1m39.936896052s ago: executing program 7 (id=808):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, "042000", 0x8, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x1b59, 0x8}}}}}}}, 0x42)

1m39.463615467s ago: executing program 7 (id=811):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x1000000, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)

1m38.718748851s ago: executing program 7 (id=813):
accept$alg(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff020000000000000000000000000001"], 0x340a)

1m38.013772293s ago: executing program 7 (id=819):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socket$inet6(0xa, 0x3, 0x2)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f0000000040), &(0x7f0000000040)=@udp=r1, 0x1}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x16, &(0x7f0000000340)=ANY=[], 0x0)

1m37.673626414s ago: executing program 7 (id=821):
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket(0x1d, 0x2, 0x6)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r1, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90324fc60", 0x38}], 0x1}, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x6a, 0x4, 0xfffffffc, 0x4)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
unshare(0x62040200)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x7c, r6, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x9}, @NL80211_ATTR_SCAN_SSIDS={0x48, 0x2d, 0x0, 0x1, [{0xb, 0x0, @random="250e8aefc3c223"}, {0x5, 0x0, @random='2'}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x8}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r7, 0x84, 0x7b, &(0x7f0000000000), 0x8)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="98010000100001002cbc700000000008fe880000000000000000000000000101fe8800000000000000000000000000010000e3df000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe0000001000000003200000000000000000000000000000000000000fefffffffffffffffeffffffffffffff030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000090000000000000001000000000000000008400000000000090000000000000092020000000000000010000000000000000000000000000007350000020004002c00000000000000590002006362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000880000006e000b00000000200000000000000000000000004c001400686d6163287368613235362d6e656f6e2900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000"], 0x198}}, 0x44050)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

1m22.534296278s ago: executing program 35 (id=821):
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket(0x1d, 0x2, 0x6)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r1, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90324fc60", 0x38}], 0x1}, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x6a, 0x4, 0xfffffffc, 0x4)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
unshare(0x62040200)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x7c, r6, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x9}, @NL80211_ATTR_SCAN_SSIDS={0x48, 0x2d, 0x0, 0x1, [{0xb, 0x0, @random="250e8aefc3c223"}, {0x5, 0x0, @random='2'}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x8}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r7, 0x84, 0x7b, &(0x7f0000000000), 0x8)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="98010000100001002cbc700000000008fe880000000000000000000000000101fe8800000000000000000000000000010000e3df000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe0000001000000003200000000000000000000000000000000000000fefffffffffffffffeffffffffffffff030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000090000000000000001000000000000000008400000000000090000000000000092020000000000000010000000000000000000000000000007350000020004002c00000000000000590002006362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000880000006e000b00000000200000000000000000000000004c001400686d6163287368613235362d6e656f6e2900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000"], 0x198}}, 0x44050)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

38.044499041s ago: executing program 6 (id=1036):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040098}, 0x4000800)

34.180768792s ago: executing program 6 (id=1040):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x1000000, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x1, 0xb, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)

33.527651711s ago: executing program 6 (id=1044):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='blkio.bfq.dequeue\x00', 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@gettaction={0x44, 0x32, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000)
r1 = socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000240)={<r4=>r3, &(0x7f0000000700)='\b\x9a`[\x00\xbe\xa0\x02\x12\a\xc2\xd2\xf5\xa9\x94\n\xcd[\xfb\\`\xbc\xd3\fN[Y\xf3\xb2\x9a\xeaK\xad\xd4\xa5sc\x17U\xb9e%(\x1a\x93i;\x98\xedQF7:\'_\xee\xc9\xda\xbd\xee[]\x9d>\xb1\xe3\xe13\xb9s\xd8:\xdd\x05\xc7\x06\xebJP-s\xaa\xd2\nA5\x17\xc3\xf4A\xaf\xb3\xe7\x85\xe5\x18[s`\x96\x8e\xd5\xae\xe7h\x1dxh\xaf\x1a\xbb\x8a1\x90F\x83R\x82H\x19\x03\x85\xe2\r:\xe0\xc2\xdb\xf6\x16\x1e6\x18\x1b#\xba\xa6\x03\xcb\x9f\xe0!\xcf\x17\xe9\x9b\x85-\xdb\xfa\xb2\xea)\xd6\xbd\x16\x1f\xdb\xf4\xdd \x83\xc3?`\xb4\xbal0_\x0e\xfc\xb1V\x81\xeb\xca\x95\xbcN \xa9_\xaf\x9f\x80\x9f\xca\xbd\x94\xc6\xda\xf2#\xc7\xef\x96M\xfe\xac\xca\r\xbau\xf5\xe4\xe0\x95~f\xa4\xec\a`\xb4-\xbcx3', 0x101000, &(0x7f00000000c0)={@_ha_fsid={[0x0, 0x80000001]}, {0x5, 0x7, 0x115, 0xa7}}, 0xfffffff4, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x3})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001980)={'batadv_slave_0\x00', <r5=>0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000003300)={'tunl0\x00', &(0x7f0000000640)={'tunl0\x00', r5, 0x10, 0x1, 0x2, 0xc5, {{0x1f, 0x4, 0x2, 0x3, 0x7c, 0x68, 0x0, 0x7, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x43}, {[@cipso={0x86, 0x23, 0xffffffffffffffff, [{0x6, 0x11, "4843d006f54399fb67b0d2176d1012"}, {0x2, 0x7, "944b617286"}, {0xf, 0x5, "57d27b"}]}, @generic={0x44, 0x5, "17f1f3"}, @timestamp_prespec={0x44, 0x24, 0xbe, 0x3, 0x9, [{@remote, 0x9}, {@loopback, 0x7fffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@multicast2, 0x30497830}]}, @ssrr={0x89, 0x1b, 0x18, [@loopback, @empty, @multicast1, @empty, @private=0xa010101, @empty]}]}}}}})
sendmmsg$inet6(r4, 0x0, 0x0, 0x4000001)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0xfff9, @local}, 0x10)
r6 = socket(0xa, 0x80000, 0x1000ff)
sendmsg$inet6(r6, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0xa, 0x4, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14"], 0x18}, 0x922bac8576b92dde)
r7 = socket$inet6(0xa, 0x80002, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r8=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x3}, {0xfff3}}}, 0x24}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000003a00010329bd7000fddb0000"], 0x14}, 0x1, 0x0, 0x0, 0x448db}, 0x0)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\twr'], 0xa)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xbdc, @none, 0x0, 0x2}, 0xe)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)

32.199045189s ago: executing program 6 (id=1052):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x408, 0x103)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x40818)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae03, 0x64)

30.798159519s ago: executing program 6 (id=1053):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_timeval(r1, 0x1, 0x2, 0x0, 0x48)
listen(0xffffffffffffffff, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4)
close(0xffffffffffffffff)
accept4(r0, &(0x7f0000000180)=@xdp, &(0x7f0000000200)=0x80, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r2, &(0x7f0000000340)="08000000010000", 0x7)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
close(0x3)
socket$nl_netfilter(0x10, 0x3, 0xc)

28.31893937s ago: executing program 6 (id=1056):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x181242, 0x148)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r3 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/199}, {&(0x7f0000000340)=""/161}, {&(0x7f0000000400)=""/94}, {&(0x7f0000000480)=""/160}, {&(0x7f0000000640)=""/155}, {&(0x7f0000000700)=""/80}], 0x0, &(0x7f0000000580)=""/80, 0x11}}], 0x4000000000002ff, 0x2, 0x0)

11.344853895s ago: executing program 36 (id=1056):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x181242, 0x148)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r3 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/199}, {&(0x7f0000000340)=""/161}, {&(0x7f0000000400)=""/94}, {&(0x7f0000000480)=""/160}, {&(0x7f0000000640)=""/155}, {&(0x7f0000000700)=""/80}], 0x0, &(0x7f0000000580)=""/80, 0x11}}], 0x4000000000002ff, 0x2, 0x0)

9.166965878s ago: executing program 5 (id=1091):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r1, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x1, 0xb, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)

7.942768593s ago: executing program 3 (id=1092):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$VT_OPENQRY(r0, 0x5600, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0408040bc90000a5f8bc6b86ba2597aa1e4a8c5dbe49e1984d6d868b1f15f0d95065887ebe495cfbab6bf2141a1f"], 0x7)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xff4c)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})

7.822308106s ago: executing program 3 (id=1093):
r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x48880)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @win={{0xc78e, 0xffffcaca, 0x5, 0x7}, 0x8, 0x5, 0x0, 0xfffffeff, 0x0, 0x5}})

7.812898397s ago: executing program 8 (id=1094):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020}, 0x2020)
r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x80400, 0x0)
renameat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00')
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)
setrlimit(0x5, &(0x7f00000000c0)={0x2})
setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4)
r5 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_FREE_MR(r5, 0x114, 0x3, 0x0, 0x0)
sendto$inet(r4, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0)

6.686659829s ago: executing program 5 (id=1095):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x2}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

6.686405398s ago: executing program 3 (id=1096):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tm\n'], 0xa)

6.685788289s ago: executing program 0 (id=1097):
close(0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
close(r0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00f0ffffffffffffff0000000000020000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
connect$unix(r0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff02000000000000000000000000000112"], 0xfdef)

6.66220851s ago: executing program 3 (id=1098):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff000000002d040000000000003d400300000000006504000001ed000079130000000000006c44000000000000"], 0x0}, 0x94)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0xc014)
r4 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7)

3.715957434s ago: executing program 5 (id=1099):
r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xc0)
socket$packet(0x11, 0x3, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
syz_emit_ethernet(0x3e, &(0x7f0000000380)=ANY=[@ANYBLOB="aae245bfaa280180c200000086dd600800000000000100000400000000000000000120"], 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r5, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}}, 0x40010)
rmdir(&(0x7f0000000080)='./cgroup/../file0\x00')

3.712002054s ago: executing program 8 (id=1100):
socket$packet(0x11, 0x2, 0x300)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000390400000000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="dd4c9a2d41980400188008ff0300ac1414aa00"/32], 0x38}}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000280)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {0x3}, {0x3}, {}, {0x74}, {0x0, 0x0, 0x0, 0x4000000}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x9}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4894}, 0x0)
r5 = socket(0x2, 0x80805, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={<r7=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={<r8=>0x0}, &(0x7f0000000000)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000200)={0x23, 0x8000, 0x7f, 0x5, r8}, &(0x7f0000000240)=0x10)
sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14)

3.711667034s ago: executing program 0 (id=1101):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = io_uring_setup(0x2f35, &(0x7f0000000000)={0x0, 0xfca1, 0x2, 0x2, 0x1e})
io_uring_register$IORING_REGISTER_RING_FDS(r6, 0x13, &(0x7f0000001bc0), 0x2)
sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0xfcfd, 0x25dfdbfb, {0x2}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r7=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000340)={r7, @in6={{0xa, 0x4e23, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}, [0x1200000000000, 0x1, 0x7, 0x3, 0xec, 0x2, 0x5, 0x1578, 0x7, 0x100000001, 0x1, 0x5, 0x9, 0x3, 0x4492]}, &(0x7f0000000440)=0x100)
r8 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c)
shutdown(r8, 0x1)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8)

3.711267794s ago: executing program 3 (id=1102):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb1)
socket$l2tp(0x2, 0x2, 0x73)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
mprotect(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4004040)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x320, 0x18c, 0x203, 0x320, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x1, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590)
gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3)
fcntl$setsig(r2, 0xa, 0x12)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)

3.608163417s ago: executing program 8 (id=1103):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, 0x0, 0x2000480d)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24)
close(r0)

3.50025348s ago: executing program 5 (id=1104):
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd27, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0xd1}, 0x8014)

3.328106515s ago: executing program 0 (id=1105):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='blkio.bfq.dequeue\x00', 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@gettaction={0x44, 0x32, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000)
r1 = socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000240)={<r4=>r3, &(0x7f0000000700)='\b\x9a`[\x00\xbe\xa0\x02\x12\a\xc2\xd2\xf5\xa9\x94\n\xcd[\xfb\\`\xbc\xd3\fN[Y\xf3\xb2\x9a\xeaK\xad\xd4\xa5sc\x17U\xb9e%(\x1a\x93i;\x98\xedQF7:\'_\xee\xc9\xda\xbd\xee[]\x9d>\xb1\xe3\xe13\xb9s\xd8:\xdd\x05\xc7\x06\xebJP-s\xaa\xd2\nA5\x17\xc3\xf4A\xaf\xb3\xe7\x85\xe5\x18[s`\x96\x8e\xd5\xae\xe7h\x1dxh\xaf\x1a\xbb\x8a1\x90F\x83R\x82H\x19\x03\x85\xe2\r:\xe0\xc2\xdb\xf6\x16\x1e6\x18\x1b#\xba\xa6\x03\xcb\x9f\xe0!\xcf\x17\xe9\x9b\x85-\xdb\xfa\xb2\xea)\xd6\xbd\x16\x1f\xdb\xf4\xdd \x83\xc3?`\xb4\xbal0_\x0e\xfc\xb1V\x81\xeb\xca\x95\xbcN \xa9_\xaf\x9f\x80\x9f\xca\xbd\x94\xc6\xda\xf2#\xc7\xef\x96M\xfe\xac\xca\r\xbau\xf5\xe4\xe0\x95~f\xa4\xec\a`\xb4-\xbcx3', 0x101000, &(0x7f00000000c0)={@_ha_fsid={[0x0, 0x80000001]}, {0x5, 0x7, 0x115, 0xa7}}, 0xfffffff4, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x3})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001980)={'batadv_slave_0\x00', <r5=>0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000003300)={'tunl0\x00', &(0x7f0000000640)={'tunl0\x00', r5, 0x10, 0x1, 0x2, 0xc5, {{0x1f, 0x4, 0x2, 0x3, 0x7c, 0x68, 0x0, 0x7, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x43}, {[@cipso={0x86, 0x23, 0xffffffffffffffff, [{0x6, 0x11, "4843d006f54399fb67b0d2176d1012"}, {0x2, 0x7, "944b617286"}, {0xf, 0x5, "57d27b"}]}, @generic={0x44, 0x5, "17f1f3"}, @timestamp_prespec={0x44, 0x24, 0xbe, 0x3, 0x9, [{@remote, 0x9}, {@loopback, 0x7fffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@multicast2, 0x30497830}]}, @ssrr={0x89, 0x1b, 0x18, [@loopback, @empty, @multicast1, @empty, @private=0xa010101, @empty]}]}}}}})
sendmmsg$inet6(r4, 0x0, 0x0, 0x4000001)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0xfff9, @local}, 0x10)
r6 = socket(0xa, 0x80000, 0x1000ff)
sendmsg$inet6(r6, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0xa, 0x4, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14"], 0x18}, 0x922bac8576b92dde)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x3}, {0xfff3}}}, 0x24}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000003a00010329bd7000fddb0000"], 0x14}, 0x1, 0x0, 0x0, 0x448db}, 0x0)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\twr'], 0xa)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xbdc, @none, 0x0, 0x2}, 0xe)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)

3.183323249s ago: executing program 8 (id=1106):
mkdir(0x0, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r3, 0x0, 0x0, 0x20000010, 0x0, 0xffffffffffffffe3)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000004c0)="17000000020001000003be8c5ee17688a20032000203000a0292000098fc5ad90a00bb6a880000d6c8db0000dba67e06020000e28900000200df018002000000fc0607bdff59100ac45761547a681f009cee4a5a2d8f89814bc6c252", 0x5c)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random="0100"})
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x11)
ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000100)={{0x104, 0x80, 0x0, 0x6a8}, 'syz1\x00', 0x2f})
ioctl$UI_SET_LEDBIT(r5, 0x40045569, 0x7)
ioctl$UI_DEV_CREATE(r5, 0x5501)

1.310846903s ago: executing program 8 (id=1107):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x0, 0x43, 0xa0, 0x1b8, 0x98, 0x268, 0x178, 0x178, 0x268, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0x190, 0x1b8, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0xffffffff, 0x0, 0x8, 0x0, 'syz0\x00', 0x12}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x0, 0x2}, {0xffffffffffffffff, 0x0, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c206000000116d00"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c5500000000004000f0f9ffff0000000000ffff00", [0x6, 0x6]}})

1.102268568s ago: executing program 5 (id=1108):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
io_pgetevents(0x0, 0x8, 0x0, 0x0, 0x0, 0x0)
io_destroy(0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/2, 0x1000000, 0x800, 0x7, 0x1}, 0x20)
getsockopt$XDP_STATISTICS(r1, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30)

1.03519665s ago: executing program 0 (id=1109):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x2}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

924.015923ms ago: executing program 3 (id=1110):
close(0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
close(r0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00f0ffffffffffffff0000000000020000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
connect$unix(r0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff02000000000000000000000000000112"], 0xfdef)

604.257873ms ago: executing program 0 (id=1111):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff000000002d040000000000003d400300000000006504000001ed000079130000000000006c44000000000000"], 0x0}, 0x94)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0xc014)
r4 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7)

259.099493ms ago: executing program 5 (id=1112):
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
rseq(0x0, 0x0, 0x20000000, 0x0)

139.148506ms ago: executing program 8 (id=1113):
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$kcm(0x1e, 0x1, 0x0)
recvmsg(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000080)=""/248, 0xf8}], 0x1, 0x0, 0x18}, 0x10100)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$SO_TIMESTAMP(r4, 0x1, 0x1, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

0s ago: executing program 0 (id=1114):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000840)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0)
ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0)
clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0xf423b, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x1, 0x3, 0x80000, 0x7ff, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0xf11b, 0x1, 0x8, 0x0, 0x0, 0x2, 0xb17, 0xffffffffffffffff, 0x5c43, 0x1, 0x6})

kernel console output (not intermixed with test programs):

6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   61.679721][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.687691][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.701277][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   61.709945][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   61.718380][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   61.732786][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   61.780703][ T4189] device veth1_vlan entered promiscuous mode
[   61.797186][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   61.812284][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   61.823013][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   61.832344][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.839797][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.849319][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   61.858730][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   61.867946][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   61.878694][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   61.890673][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   61.900523][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   61.910941][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   61.919566][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   61.962782][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   61.972026][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   61.982206][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   61.991895][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   62.002884][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   62.011965][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   62.022902][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   62.035750][ T4202] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.076590][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.087659][  T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   62.107131][  T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   62.131967][  T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   62.143498][  T419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   62.163112][  T419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   62.171894][  T419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   62.179938][  T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   62.189335][  T419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   62.203033][ T4189] device veth0_macvtap entered promiscuous mode
[   62.220122][ T4189] device veth1_macvtap entered promiscuous mode
[   62.230254][  T419] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   62.240887][  T419] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   62.264348][  T419] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   62.273841][  T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   62.289793][  T419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   62.314568][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   62.337285][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   62.353662][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   62.363219][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   62.422740][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.437548][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.456300][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   62.464038][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   62.474291][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   62.486417][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   62.496181][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   62.505503][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   62.542271][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.568907][ T4189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.588123][ T4189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.600849][ T4189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.611752][ T4189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.633609][ T4196] device veth0_vlan entered promiscuous mode
[   62.640915][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   62.649576][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   62.659957][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   62.668839][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   62.680289][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   62.688953][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   62.716350][ T4196] device veth1_vlan entered promiscuous mode
[   62.728794][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   62.737396][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   62.747031][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   62.766996][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   62.777311][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   62.816964][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   62.830926][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   62.841097][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   62.867914][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.882964][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   62.893632][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   62.903866][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   62.911848][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   62.924850][ T4202] device veth0_vlan entered promiscuous mode
[   62.940698][ T4188] device veth0_vlan entered promiscuous mode
[   62.969432][ T4196] device veth0_macvtap entered promiscuous mode
[   62.980027][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   62.989991][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   62.999226][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   63.008426][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   63.033116][ T4188] device veth1_vlan entered promiscuous mode
[   63.057268][ T4196] device veth1_macvtap entered promiscuous mode
[   63.074631][ T4202] device veth1_vlan entered promiscuous mode
[   63.082269][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   63.090659][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   63.099196][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   63.107658][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   63.117221][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   63.128346][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   63.137036][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   63.147321][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   63.177578][ T4188] device veth0_macvtap entered promiscuous mode
[   63.213128][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.228954][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.240896][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.255346][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   63.264776][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   63.273513][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   63.284130][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   63.296069][ T4188] device veth1_macvtap entered promiscuous mode
[   63.304855][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   63.315909][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   63.332785][ T4190] device veth0_vlan entered promiscuous mode
[   63.342559][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.353395][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.368408][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.384682][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.397242][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.407608][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.420813][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.433819][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.444104][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   63.453664][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   63.463762][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   63.473570][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   63.483306][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   63.493093][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   63.502392][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   63.510603][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   63.534535][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.540104][ T4196] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.557613][ T4196] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.560535][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.567276][ T4196] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.583886][ T4196] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.595600][ T4230] Bluetooth: hci1: command 0x040f tx timeout
[   63.597291][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.616214][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.626760][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.637731][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.649844][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.659969][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   63.669624][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   63.678921][ T1108] Bluetooth: hci0: command 0x040f tx timeout
[   63.682932][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   63.689692][ T1108] Bluetooth: hci3: command 0x040f tx timeout
[   63.695967][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   63.700756][ T1108] Bluetooth: hci4: command 0x040f tx timeout
[   63.715398][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   63.715615][ T1108] Bluetooth: hci2: command 0x040f tx timeout
[   63.727338][ T4190] device veth1_vlan entered promiscuous mode
[   63.752718][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.762816][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.772669][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.781885][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.803457][ T4202] device veth0_macvtap entered promiscuous mode
[   63.816399][ T4202] device veth1_macvtap entered promiscuous mode
[   63.851025][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.861865][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.872605][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   63.882238][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   63.894793][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   63.903689][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   63.912888][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   63.951816][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.963696][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.975643][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.988673][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.001425][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.012290][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.029263][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.045371][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   64.054451][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   64.106766][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.120458][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.140416][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.154495][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.181649][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.202434][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.221392][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.265201][ T4190] device veth0_macvtap entered promiscuous mode
[   64.272995][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   64.299405][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   64.309628][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   64.323434][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   64.333043][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   64.358588][ T4190] device veth1_macvtap entered promiscuous mode
[   64.373787][ T4202] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.376466][  T419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.383451][ T4202] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.397629][  T419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.402058][ T4202] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.417302][ T4202] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.446332][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.463537][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.473884][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.485601][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.495995][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.507044][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.517549][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.528716][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.540777][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.549477][  T419] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   64.560050][  T419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   64.570235][  T419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   64.579542][  T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   64.601516][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.613304][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.623742][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.638679][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.649127][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.661055][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.671180][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.686409][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.700317][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.716337][  T419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.724396][  T419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.724887][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   64.742923][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   64.753431][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   64.778588][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.781946][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.793548][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.798770][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.814894][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.824044][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.843424][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   64.918409][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.933598][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.986370][  T419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   65.026752][  T419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.042696][  T419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.078949][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   65.103975][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.117636][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.177284][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   65.206168][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.214331][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.217188][ T4279] device syzkaller0 entered promiscuous mode
[   65.273004][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   65.332050][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.342991][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.411121][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   65.501081][ T4287] device syzkaller0 entered promiscuous mode
[   65.662057][ T4307] sctp: [Deprecated]: syz.3.4 (pid 4307) Use of struct sctp_assoc_value in delayed_ack socket option.
[   65.662057][ T4307] Use struct sctp_sack_info instead
[   65.675578][ T4191] Bluetooth: hci1: command 0x0419 tx timeout
[   65.756170][ T4229] Bluetooth: hci2: command 0x0419 tx timeout
[   65.773781][ T4229] Bluetooth: hci4: command 0x0419 tx timeout
[   65.813871][ T4229] Bluetooth: hci3: command 0x0419 tx timeout
[   65.847749][ T4229] Bluetooth: hci0: command 0x0419 tx timeout
[   67.630876][ T4334] Zero length message leads to an empty skb
[   67.845500][ T4177] Bluetooth: hci4: command 0x0405 tx timeout
[   68.815496][ T4355] =======================================================
[   68.815496][ T4355] WARNING: The mand mount option has been deprecated and
[   68.815496][ T4355]          and is ignored by this kernel. Remove the mand
[   68.815496][ T4355]          option from the mount to silence this warning.
[   68.815496][ T4355] =======================================================
[   70.474753][ T4362] sctp: [Deprecated]: syz.3.26 (pid 4362) Use of struct sctp_assoc_value in delayed_ack socket option.
[   70.474753][ T4362] Use struct sctp_sack_info instead
[   70.607498][ T4364] device syzkaller0 entered promiscuous mode
[   70.644683][ T4368] syz.1.29 uses obsolete (PF_INET,SOCK_PACKET)
[   70.698248][ T4373] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   70.876593][ T4376] netlink: 'syz.3.33': attribute type 4 has an invalid length.
[   70.884907][ T4376] netlink: 17 bytes leftover after parsing attributes in process `syz.3.33'.
[   71.368718][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[   71.376112][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[   74.981907][ T4405] device syzkaller0 entered promiscuous mode
[   75.174980][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[   75.194977][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[   75.204982][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[   75.224994][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[   75.234983][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[   76.400393][ T4426] device syzkaller0 entered promiscuous mode
[   78.734916][ T4447] device syzkaller0 entered promiscuous mode
[   81.605470][ T1325] cfg80211: failed to load regulatory.db
[   82.708230][ T4471] netlink: 'syz.1.61': attribute type 1 has an invalid length.
[   82.821526][ T4479] device syzkaller0 entered promiscuous mode
[   85.118466][ T4486] sctp: [Deprecated]: syz.0.67 (pid 4486) Use of struct sctp_assoc_value in delayed_ack socket option.
[   85.118466][ T4486] Use struct sctp_sack_info instead
[   86.312627][ T4497] device syzkaller0 entered promiscuous mode
[   86.378361][ T4504] xt_hashlimit: size too large, truncated to 1048576
[   86.542701][ T4505] netlink: 36 bytes leftover after parsing attributes in process `syz.4.73'.
[   88.235426][ T4516] netlink: 60 bytes leftover after parsing attributes in process `syz.1.76'.
[   88.294426][ T4516] unsupported nlmsg_type 40
[   88.339624][ T4521] device syzkaller0 entered promiscuous mode
[   89.524979][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!!
[   89.544986][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!!
[   89.554982][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!!
[   89.564978][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[   89.647657][ T4536] sctp: [Deprecated]: syz.1.81 (pid 4536) Use of struct sctp_assoc_value in delayed_ack socket option.
[   89.647657][ T4536] Use struct sctp_sack_info instead
[   89.754113][ T4539] tipc: Started in network mode
[   89.764407][ T4539] tipc: Node identity da3eaf96d6ae, cluster identity 4711
[   89.782476][ T4539] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.842449][ T4539] device syzkaller0 entered promiscuous mode
[   89.879274][ T4539] tipc: Resetting bearer <eth:syzkaller0>
[   89.909646][ T4539] syzkaller0: tun_net_xmit 90
[   89.956975][ T4537] tipc: Resetting bearer <eth:syzkaller0>
[   89.986790][ T4537] tipc: Disabling bearer <eth:syzkaller0>
[   92.337410][ T4546] device syzkaller0 entered promiscuous mode
[   92.765130][ T4561] device syzkaller0 entered promiscuous mode
[   93.076429][ T4574] sctp: [Deprecated]: syz.0.93 (pid 4574) Use of struct sctp_assoc_value in delayed_ack socket option.
[   93.076429][ T4574] Use struct sctp_sack_info instead
[   93.783395][ T4505] ODEBUG: Out of memory. ODEBUG disabled
[   93.957627][ T4588] device vlan2 entered promiscuous mode
[   94.015345][ T4588] device gretap0 entered promiscuous mode
[   95.143656][ T4604] device syzkaller0 entered promiscuous mode
[   95.276932][ T4618] sctp: [Deprecated]: syz.1.105 (pid 4618) Use of struct sctp_assoc_value in delayed_ack socket option.
[   95.276932][ T4618] Use struct sctp_sack_info instead
[   95.814645][ T4627] device syzkaller0 entered promiscuous mode
[   96.241150][ T4650] Restarting kernel threads ... done.
[   97.298502][ T4661] sctp: [Deprecated]: syz.2.117 (pid 4661) Use of struct sctp_assoc_value in delayed_ack socket option.
[   97.298502][ T4661] Use struct sctp_sack_info instead
[   97.555765][ T4665] device syzkaller0 entered promiscuous mode
[   97.636883][ T4668] device syzkaller0 entered promiscuous mode
[   98.094777][ T4674] CIFS: VFS: Malformed UNC in devname
[   98.509555][ T4689] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   98.554228][ T4689] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.562638][ T4689] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.663231][ T4689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.126'.
[   98.683387][ T4689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.126'.
[   99.535182][ T4689] syz.2.126 (4689) used greatest stack depth: 20816 bytes left
[   99.538001][ T4691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.129'.
[   99.641229][ T4691] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.048769][ T4706] Restarting kernel threads ... done.
[  100.518577][ T4691] batman_adv: batadv0: Removing interface: batadv_slave_1
[  100.529322][ T1325] Bluetooth: hci2: command 0x706d tx timeout
[  100.894044][ T4713] CIFS: VFS: Malformed UNC in devname
[  100.919708][ T4711] device syzkaller0 entered promiscuous mode
[  101.132568][ T4717] device syzkaller0 entered promiscuous mode
[  101.555006][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!!
[  102.759091][ T4739] Restarting kernel threads ... done.
[  103.045061][ T1325] Bluetooth: hci2: command 0x706d tx timeout
[  103.683505][ T4744] device syzkaller0 entered promiscuous mode
[  103.977679][ T4751] CIFS: VFS: Malformed UNC in devname
[  104.022396][ T4754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.148'.
[  104.187779][ T4754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.148'.
[  104.286235][ T4756] device syzkaller0 entered promiscuous mode
[  104.460246][ T4505] Set syz1 is full, maxelem 65536 reached
[  104.556524][ T4745] chnl_net:caif_netlink_parms(): no params data found
[  104.809606][ T4764] device syzkaller0 entered promiscuous mode
[  105.599880][ T4303] Bluetooth: hci5: command 0x0409 tx timeout
[  110.131137][ T4231] Bluetooth: hci5: command 0x041b tx timeout
[  110.137912][ T4745] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.145203][ T4745] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.154173][ T4745] device bridge_slave_0 entered promiscuous mode
[  110.175783][ T4745] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.183096][ T4745] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.191641][ T4745] device bridge_slave_1 entered promiscuous mode
[  110.409440][ T4791] CIFS: VFS: Malformed UNC in devname
[  110.579090][ T4794] device syzkaller0 entered promiscuous mode
[  110.643657][ T4388] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.678149][ T4745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  110.835372][ T4745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  110.868213][ T4388] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.998993][ T4388] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.077170][ T4745] team0: Port device team_slave_0 added
[  111.248276][ T4745] team0: Port device team_slave_1 added
[  111.315423][ T4235] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  111.605941][ T4235] usb 1-1: Using ep0 maxpacket: 32
[  111.709459][ T4388] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.756608][ T4235] usb 1-1: config 0 has no interfaces?
[  111.935856][ T4235] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11
[  111.982723][ T4235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.122494][ T4745] batman_adv: batadv0: Adding interface: batadv_slave_0
[  112.137316][ T4235] usb 1-1: Product: syz
[  112.183743][ T4235] usb 1-1: Manufacturer: syz
[  112.208084][ T4824] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  112.231655][ T4745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.281118][ T4235] usb 1-1: SerialNumber: syz
[  112.467023][ T4235] usb 1-1: config 0 descriptor??
[  112.543854][ T4305] Bluetooth: hci5: command 0x040f tx timeout
[  112.601855][ T4745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  113.708334][ T4745] batman_adv: batadv0: Adding interface: batadv_slave_1
[  114.619346][ T4745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.671262][ T4234] Bluetooth: hci5: command 0x0419 tx timeout
[  114.942863][ T4230] usb 1-1: USB disconnect, device number 2
[  115.158428][ T4745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  115.552988][ T4888] CIFS: VFS: Malformed UNC in devname
[  115.569062][ T4745] device hsr_slave_0 entered promiscuous mode
[  115.596226][ T4745] device hsr_slave_1 entered promiscuous mode
[  115.603724][ T4745] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  115.614467][ T4745] Cannot create hsr debugfs directory
[  115.662166][ T4890] device syzkaller0 entered promiscuous mode
[  115.963951][ T4901] device syzkaller0 entered promiscuous mode
[  116.028350][ T4907] sctp: [Deprecated]: syz.0.177 (pid 4907) Use of struct sctp_assoc_value in delayed_ack socket option.
[  116.028350][ T4907] Use struct sctp_sack_info instead
[  118.205587][   T13] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  118.485135][   T13] usb 1-1: Using ep0 maxpacket: 32
[  118.616550][   T13] usb 1-1: config 0 has no interfaces?
[  118.752809][ T4924] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma?
[  118.771033][ T4745] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  118.788997][ T4745] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  118.820280][ T4745] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  118.836568][   T13] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11
[  118.894675][   T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.915305][   T13] usb 1-1: Product: syz
[  118.931534][   T13] usb 1-1: Manufacturer: syz
[  118.931975][ T4745] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  118.942943][   T13] usb 1-1: SerialNumber: syz
[  118.976087][   T13] usb 1-1: config 0 descriptor??
[  118.984619][ T4935] device syzkaller0 entered promiscuous mode
[  119.174514][ T4745] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.281295][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  119.291299][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  119.301761][ T4945] lo speed is unknown, defaulting to 1000
[  119.303259][ T4745] 8021q: adding VLAN 0 to HW filter on device team0
[  119.330467][ T4945] lo speed is unknown, defaulting to 1000
[  119.330832][    T7] usb 1-1: USB disconnect, device number 3
[  119.354663][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  119.381767][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  119.420990][ T4870] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.428196][ T4870] bridge0: port 1(bridge_slave_0) entered forwarding state
[  119.445287][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  119.463015][ T4945] lo speed is unknown, defaulting to 1000
[  119.465216][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  119.484641][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  119.495742][ T4245] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.503524][ T4245] bridge0: port 2(bridge_slave_1) entered forwarding state
[  119.533525][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  119.687748][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  119.714323][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  119.753424][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  119.769110][ T4945] infiniband syz0: set active
[  119.777941][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  119.786308][ T4945] infiniband syz0: added lo
[  119.791967][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  119.813055][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  119.864524][    T7] lo speed is unknown, defaulting to 1000
[  119.976061][ T4945] RDS/IB: syz0: added
[  119.982079][ T4945] smc: adding ib device syz0 with port count 1
[  119.990034][ T4945] smc:    ib device syz0 port 1 has pnetid 
[  119.990323][ T4974] sctp: [Deprecated]: syz.2.188 (pid 4974) Use of struct sctp_assoc_value in delayed_ack socket option.
[  119.990323][ T4974] Use struct sctp_sack_info instead
[  120.018530][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  120.045899][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  120.092869][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  120.251187][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  120.302846][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  120.333692][ T4305] lo speed is unknown, defaulting to 1000
[  120.369108][ T4945] lo speed is unknown, defaulting to 1000
[  120.669167][ T4990] CIFS: VFS: Malformed UNC in devname
[  121.847463][ T4945] lo speed is unknown, defaulting to 1000
[  122.750945][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  122.798904][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  123.000803][ T4745] 8021q: adding VLAN 0 to HW filter on device batadv0
[  123.871467][ T4945] lo speed is unknown, defaulting to 1000
[  124.035946][ T5024] device syzkaller0 entered promiscuous mode
[  124.076897][ T5024] 0: reclassify loop, rule prio 0, protocol 700
[  124.171124][ T4945] lo speed is unknown, defaulting to 1000
[  124.315307][ T4512] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  124.405032][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  124.428978][ T4846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  124.457946][ T5041] sctp: [Deprecated]: syz.3.199 (pid 5041) Use of struct sctp_assoc_value in delayed_ack socket option.
[  124.457946][ T5041] Use struct sctp_sack_info instead
[  124.486954][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  124.508294][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  124.532654][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  124.556722][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  124.575008][ T4512] usb 1-1: Using ep0 maxpacket: 32
[  124.593409][ T4745] device veth0_vlan entered promiscuous mode
[  124.642949][ T4745] device veth1_vlan entered promiscuous mode
[  124.656198][ T4945] lo speed is unknown, defaulting to 1000
[  124.715671][ T5044] device syzkaller0 entered promiscuous mode
[  124.717372][ T4512] usb 1-1: config 0 has no interfaces?
[  124.779978][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  124.793103][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  124.864705][ T5051] device syzkaller0 entered promiscuous mode
[  124.925294][ T4512] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11
[  124.934394][ T4512] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.962005][ T4512] usb 1-1: Product: syz
[  124.970782][ T4512] usb 1-1: Manufacturer: syz
[  124.981239][ T4512] usb 1-1: SerialNumber: syz
[  125.003363][ T4512] usb 1-1: config 0 descriptor??
[  125.012007][ T4945] lo speed is unknown, defaulting to 1000
[  125.014600][ T4745] device veth0_macvtap entered promiscuous mode
[  125.118944][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  125.131228][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  125.143990][ T4745] device veth1_macvtap entered promiscuous mode
[  125.177849][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  125.187667][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  125.231772][ T4745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.285044][ T4745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.305947][ T4745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.324636][ T4745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.334903][ T4745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.375090][ T4745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.395075][ T4745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.395099][ T4745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.395111][ T4745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.395125][ T4745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.397028][ T4745] batman_adv: batadv0: Interface activated: batadv_slave_0
[  125.407941][   T23] usb 1-1: USB disconnect, device number 4
[  125.480007][ T5070] device syzkaller0 entered promiscuous mode
[  125.506698][ T4745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.528169][ T4745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.543453][ T4745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.558711][ T4745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.575888][ T4745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.601497][ T4745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.648031][ T4745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.687323][ T4745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.720993][ T4745] batman_adv: batadv0: Interface activated: batadv_slave_1
[  125.741621][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  125.758560][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  125.777428][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  125.797614][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  125.839158][ T4388] device hsr_slave_0 left promiscuous mode
[  125.858547][ T4388] device hsr_slave_1 left promiscuous mode
[  125.867670][ T4388] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  125.883342][ T4388] batman_adv: batadv0: Removing interface: batadv_slave_0
[  125.896060][ T4388] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  125.903922][ T4388] batman_adv: batadv0: Removing interface: batadv_slave_1
[  125.933857][ T4388] device bridge_slave_1 left promiscuous mode
[  125.955609][ T4388] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.993611][ T4388] device bridge_slave_0 left promiscuous mode
[  126.005653][ T4388] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.104344][ T4305] libceph: connect (1)[c::]:6789 error -101
[  126.111502][ T4305] libceph: mon0 (1)[c::]:6789 connect error
[  126.120725][ T4388] device veth1_macvtap left promiscuous mode
[  126.128777][ T4388] device veth0_macvtap left promiscuous mode
[  126.135480][ T4388] device veth1_vlan left promiscuous mode
[  126.141532][ T4388] device veth0_vlan left promiscuous mode
[  126.253319][ T5074] ceph: No mds server is up or the cluster is laggy
[  126.476289][ T4388] team0 (unregistering): Port device team_slave_1 removed
[  126.494794][ T4388] team0 (unregistering): Port device team_slave_0 removed
[  126.512812][ T4388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  126.540631][ T4388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  126.608127][ T4388] bond0 (unregistering): Released all slaves
[  126.667253][ T4745] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  126.676476][ T4745] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  126.685446][ T4745] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  126.694823][ T4745] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  127.022244][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.061556][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.080884][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  127.095243][ T5106] sctp: [Deprecated]: syz.1.210 (pid 5106) Use of struct sctp_assoc_value in delayed_ack socket option.
[  127.095243][ T5106] Use struct sctp_sack_info instead
[  127.172082][ T5115] x_tables: duplicate underflow at hook 3
[  127.214138][ T4245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.224720][ T4245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.256607][ T5112] device syzkaller0 entered promiscuous mode
[  127.288463][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  127.605175][    T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  127.627533][ T5121] device syzkaller0 entered promiscuous mode
[  128.492100][ T5139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  128.563646][ T5144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  128.575095][    T7] usb 3-1: Using ep0 maxpacket: 32
[  128.701108][    T7] usb 3-1: config 0 has no interfaces?
[  128.885316][    T7] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11
[  128.912210][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.936448][    T7] usb 3-1: Product: syz
[  128.940671][    T7] usb 3-1: Manufacturer: syz
[  128.974990][    T7] usb 3-1: SerialNumber: syz
[  129.012412][    T7] usb 3-1: config 0 descriptor??
[  129.238695][ T5161] device syzkaller0 entered promiscuous mode
[  129.313156][   T13] usb 3-1: USB disconnect, device number 2
[  131.353006][ T5206] device syzkaller0 entered promiscuous mode
[  132.798133][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  132.807023][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  133.768786][ T5248] netlink: 'syz.2.234': attribute type 4 has an invalid length.
[  133.992523][ T5248] netlink: 17 bytes leftover after parsing attributes in process `syz.2.234'.
[  134.096341][ T5246] netlink: 'syz.5.233': attribute type 8 has an invalid length.
[  134.135022][ T4234] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  134.277053][ T4235] libceph: connect (1)[c::]:6789 error -101
[  134.283108][ T4235] libceph: mon0 (1)[c::]:6789 connect error
[  134.405251][ T4234] usb 2-1: Using ep0 maxpacket: 32
[  134.525291][ T4234] usb 2-1: config 0 has no interfaces?
[  134.685671][ T4234] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11
[  134.758317][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.910792][ T4234] usb 2-1: Product: syz
[  135.016524][ T4234] usb 2-1: Manufacturer: syz
[  135.099452][ T4234] usb 2-1: SerialNumber: syz
[  135.522212][ T4234] usb 2-1: config 0 descriptor??
[  135.528130][ T4235] libceph: connect (1)[c::]:6789 error -101
[  135.534753][ T4235] libceph: mon0 (1)[c::]:6789 connect error
[  135.546192][ T5260] ceph: No mds server is up or the cluster is laggy
[  136.045104][ T4234] usb 2-1: can't set config #0, error -71
[  136.052996][ T4234] usb 2-1: USB disconnect, device number 2
[  136.070077][ T4305] libceph: connect (1)[c::]:6789 error -101
[  136.079863][ T4305] libceph: mon0 (1)[c::]:6789 connect error
[  136.335900][ T5285] device syzkaller0 entered promiscuous mode
[  137.185435][ T5304] netlink: 'syz.1.249': attribute type 4 has an invalid length.
[  137.737403][ T5304] netlink: 17 bytes leftover after parsing attributes in process `syz.1.249'.
[  139.005161][ T5318] netlink: 'syz.2.250': attribute type 8 has an invalid length.
[  139.254998][    T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  139.268784][ T5328] device syzkaller0 entered promiscuous mode
[  139.515098][    T7] usb 2-1: Using ep0 maxpacket: 32
[  139.675384][    T7] usb 2-1: config 0 has no interfaces?
[  139.868294][    T7] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11
[  139.916077][    T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.967978][    T7] usb 2-1: Product: syz
[  139.993578][    T7] usb 2-1: Manufacturer: syz
[  140.008929][    T7] usb 2-1: SerialNumber: syz
[  140.070739][    T7] usb 2-1: config 0 descriptor??
[  140.354221][ T5345] device syzkaller0 entered promiscuous mode
[  140.396923][ T4235] usb 2-1: USB disconnect, device number 3
[  140.598746][ T5347] netlink: 'syz.5.260': attribute type 1 has an invalid length.
[  140.644706][ T5347] netlink: 'syz.5.260': attribute type 2 has an invalid length.
[  140.827448][ T5353] device syzkaller0 entered promiscuous mode
[  141.666051][ T5374] device syzkaller0 entered promiscuous mode
[  142.132870][ T5383] device syzkaller0 entered promiscuous mode
[  143.015697][ T5371] netlink: 'syz.2.267': attribute type 8 has an invalid length.
[  143.363728][ T5394] device syzkaller0 entered promiscuous mode
[  143.548957][ T5407] device syzkaller0 entered promiscuous mode
[  143.727347][ T5411] device syzkaller0 entered promiscuous mode
[  143.925075][    T7] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  144.215035][    T7] usb 6-1: Using ep0 maxpacket: 32
[  144.243336][ T5431] device syzkaller0 entered promiscuous mode
[  145.115102][    T7] usb 6-1: config 0 has no interfaces?
[  145.285376][    T7] usb 6-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11
[  145.361284][    T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.525820][    T7] usb 6-1: Product: syz
[  145.604248][    T7] usb 6-1: Manufacturer: syz
[  145.635273][    T7] usb 6-1: SerialNumber: syz
[  145.676220][    T7] usb 6-1: config 0 descriptor??
[  145.984429][ T5457] device syzkaller0 entered promiscuous mode
[  146.083401][ T4305] usb 6-1: USB disconnect, device number 2
[  146.218391][ T5463] device syzkaller0 entered promiscuous mode
[  146.716218][ T5468] device syzkaller0 entered promiscuous mode
[  146.737056][ T5481] CIFS: VFS: Malformed UNC in devname
[  147.138689][   T23] libceph: connect (1)[c::]:6789 error -1
[  147.145851][   T23] libceph: mon0 (1)[c::]:6789 connect error
[  147.310356][ T5489] ceph: No mds server is up or the cluster is laggy
[  147.362006][ T5496] tipc: Started in network mode
[  147.399319][ T5496] tipc: Node identity 424b2cecd4cb, cluster identity 4711
[  147.675608][ T5496] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.975585][ T5497] device syzkaller0 entered promiscuous mode
[  148.178447][ T4305] libceph: connect (1)[c::]:6789 error -1
[  148.184354][ T4305] libceph: mon0 (1)[c::]:6789 connect error
[  148.349503][ T5504] device syzkaller0 entered promiscuous mode
[  148.423716][ T5496] tipc: Resetting bearer <eth:syzkaller0>
[  148.599443][ T5496] tipc: Disabling bearer <eth:syzkaller0>
[  149.341812][ T5513] device syzkaller0 entered promiscuous mode
[  149.501151][ T5515] device syzkaller0 entered promiscuous mode
[  149.863591][ T5529] device syzkaller0 entered promiscuous mode
[  149.994853][ T5532] device syzkaller0 entered promiscuous mode
[  150.256492][ T5547] device syzkaller0 entered promiscuous mode
[  150.559613][ T5556] device syzkaller0 entered promiscuous mode
[  150.653608][ T5566] device syzkaller0 entered promiscuous mode
[  150.959687][ T5572] device syzkaller0 entered promiscuous mode
[  151.379345][ T5585] netlink: 'syz.2.319': attribute type 4 has an invalid length.
[  151.387332][ T5585] netlink: 17 bytes leftover after parsing attributes in process `syz.2.319'.
[  152.354984][ T4305] libceph: connect (1)[c::]:6789 error -101
[  152.361183][ T4305] libceph: mon0 (1)[c::]:6789 connect error
[  152.579666][ T5596] ceph: No mds server is up or the cluster is laggy
[  152.602392][ T5605] device syzkaller0 entered promiscuous mode
[  152.626768][ T4305] libceph: connect (1)[c::]:6789 error -101
[  152.633091][ T4305] libceph: mon0 (1)[c::]:6789 connect error
[  152.853456][ T5609] device syzkaller0 entered promiscuous mode
[  153.192816][ T5618] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  153.476564][ T5621] device syzkaller0 entered promiscuous mode
[  153.646036][ T5630] device syzkaller0 entered promiscuous mode
[  154.237609][ T5648] device syzkaller0 entered promiscuous mode
[  154.653148][ T5666] device syzkaller0 entered promiscuous mode
[  155.163524][ T5670] netlink: 28 bytes leftover after parsing attributes in process `syz.1.340'.
[  155.494404][ T5690] device syzkaller0 entered promiscuous mode
[  156.050829][ T5701] device syzkaller0 entered promiscuous mode
[  156.523304][ T5730] netlink: 28 bytes leftover after parsing attributes in process `syz.2.357'.
[  156.755332][ T5735] device syzkaller0 entered promiscuous mode
[  156.794833][ T5732] netlink: 'syz.1.359': attribute type 8 has an invalid length.
[  158.266596][ T5778] device syzkaller0 entered promiscuous mode
[  159.380395][ T5796] netlink: 28 bytes leftover after parsing attributes in process `syz.3.374'.
[  159.556244][ T5794] device syzkaller0 entered promiscuous mode
[  159.589898][ T5803] netlink: 8 bytes leftover after parsing attributes in process `syz.5.378'.
[  159.994641][ T5847] netlink: 'syz.1.381': attribute type 1 has an invalid length.
[  160.260731][ T5853] device syzkaller0 entered promiscuous mode
[  160.318683][ T5856] netlink: 20 bytes leftover after parsing attributes in process `syz.1.381'.
[  160.466064][ T5856] bond1: (slave bridge2): making interface the new active one
[  160.514431][ T5856] bond1: (slave bridge2): Enslaving as an active interface with an up link
[  160.552421][ T5847] netlink: 28 bytes leftover after parsing attributes in process `syz.1.381'.
[  160.566789][ T5847] 8021q: adding VLAN 0 to HW filter on device bond1
[  161.107251][ T5847] syz.1.381 (5847) used greatest stack depth: 20496 bytes left
[  161.320466][ T5882] device syzkaller0 entered promiscuous mode
[  163.093637][ T5907] netlink: 'syz.2.392': attribute type 4 has an invalid length.
[  163.104115][ T5911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.389'.
[  163.335636][ T5907] netlink: 17 bytes leftover after parsing attributes in process `syz.2.392'.
[  163.344869][ T5911] netlink: 'syz.3.389': attribute type 1 has an invalid length.
[  163.426591][ T5902] netlink: 20 bytes leftover after parsing attributes in process `syz.5.393'.
[  164.716144][ T5919] device syzkaller0 entered promiscuous mode
[  165.802056][ T5947] netlink: 'syz.0.402': attribute type 32 has an invalid length.
[  165.935013][ T4177] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  168.035002][    C0] hrtimer: interrupt took 123122 ns
[  168.235175][ T4177] usb 3-1: Using ep0 maxpacket: 32
[  168.241430][ T5965] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.407'.
[  168.335031][ T5957] device syzkaller0 entered promiscuous mode
[  168.370179][ T4177] usb 3-1: config 0 has no interfaces?
[  168.460641][ T5969] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  168.531139][ T5969] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  168.543598][ T4177] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11
[  168.576543][ T4177] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.584595][ T4177] usb 3-1: Product: syz
[  168.645214][ T4177] usb 3-1: Manufacturer: syz
[  168.650049][ T4177] usb 3-1: SerialNumber: syz
[  168.687088][ T4177] usb 3-1: config 0 descriptor??
[  169.707080][ T4177] usb 3-1: can't set config #0, error -71
[  171.786383][ T4177] usb 3-1: USB disconnect, device number 3
[  172.922297][ T5975] netlink: 20 bytes leftover after parsing attributes in process `syz.0.408'.
[  173.113464][ T5976] netlink: 'syz.5.410': attribute type 4 has an invalid length.
[  173.121437][ T5976] netlink: 17 bytes leftover after parsing attributes in process `syz.5.410'.
[  177.961221][ T6013] device macvlan0 entered promiscuous mode
[  177.969029][ T6013] netlink: 4 bytes leftover after parsing attributes in process `syz.5.421'.
[  178.013444][ T6013] device macvlan0 left promiscuous mode
[  178.339239][ T6014] device syzkaller0 entered promiscuous mode
[  178.368551][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.5.426'.
[  178.414620][ T6025] tipc: Started in network mode
[  178.437513][ T6025] tipc: Node identity 2e32caf81438, cluster identity 4711
[  178.470890][ T6025] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  178.675736][ T6027] device syzkaller0 entered promiscuous mode
[  178.722962][ T6024] tipc: Resetting bearer <eth:syzkaller0>
[  178.908949][ T6024] tipc: Disabling bearer <eth:syzkaller0>
[  179.068673][ T6045] device syzkaller0 entered promiscuous mode
[  179.248569][ T6050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.433'.
[  179.448425][ T6062] netlink: 12 bytes leftover after parsing attributes in process `syz.5.436'.
[  180.030513][ T6066] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  180.432012][ T6062] device macvlan0 entered promiscuous mode
[  180.955390][ T4303] Bluetooth: hci1: command 0x0406 tx timeout
[  180.963767][ T4303] Bluetooth: hci3: command 0x0406 tx timeout
[  181.000785][ T4303] Bluetooth: hci2: command 0x0406 tx timeout
[  181.325930][ T6104] device syzkaller0 entered promiscuous mode
[  181.741136][ T6119] device syzkaller0 entered promiscuous mode
[  186.311600][ T6135] netlink: 'syz.5.455': attribute type 4 has an invalid length.
[  186.319512][ T6135] netlink: 17 bytes leftover after parsing attributes in process `syz.5.455'.
[  186.373760][ T6144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.458'.
[  186.727362][ T6150] device syzkaller0 entered promiscuous mode
[  187.688795][ T6172] device syzkaller0 entered promiscuous mode
[  188.597447][ T6177] device syzkaller0 entered promiscuous mode
[  188.679147][   T26] audit: type=1800 audit(1779294190.779:2): pid=6175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.459" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  188.703392][ T6175] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4
[  188.716742][ T6175] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4
[  188.730832][ T6175] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  188.802236][ T6185] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  188.850701][ T6184] tipc: Resetting bearer <eth:syzkaller0>
[  188.864558][ T6188] device syzkaller0 entered promiscuous mode
[  188.886151][ T6188] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  188.931173][ T6183] tipc: Resetting bearer <eth:syzkaller0>
[  189.008538][ T6183] tipc: Disabling bearer <eth:syzkaller0>
[  189.095565][ T6190] device syzkaller0 entered promiscuous mode
[  189.139748][ T6175] syz.2.459 (6175) used greatest stack depth: 18552 bytes left
[  190.667078][ T6220] netlink: 20 bytes leftover after parsing attributes in process `syz.3.481'.
[  190.996985][ T6218] xt_hashlimit: size too large, truncated to 1048576
[  194.240263][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  194.246782][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  197.543055][ T6235] device syzkaller0 entered promiscuous mode
[  197.657520][ T4234] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  197.915154][ T4234] usb 3-1: Using ep0 maxpacket: 32
[  197.921215][ T6241] device syzkaller0 entered promiscuous mode
[  198.060461][ T4234] usb 3-1: config 0 has no interfaces?
[  198.255428][ T4234] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11
[  198.293711][ T4234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.142058][ T4234] usb 3-1: Product: syz
[  201.422258][ T4234] usb 3-1: Manufacturer: syz
[  201.427212][ T4234] usb 3-1: SerialNumber: syz
[  201.433824][ T4234] usb 3-1: config 0 descriptor??
[  201.461393][ T4234] usb 3-1: can't set config #0, error -71
[  201.471681][ T4234] usb 3-1: USB disconnect, device number 4
[  208.249008][ T6264] netlink: 20 bytes leftover after parsing attributes in process `syz.3.498'.
[  208.316423][ T6268] device syzkaller0 entered promiscuous mode
[  208.378426][ T6270] netlink: 4 bytes leftover after parsing attributes in process `syz.5.502'.
[  209.003774][ T6280] netlink: 'syz.5.505': attribute type 1 has an invalid length.
[  209.025346][ T6280] netlink: 'syz.5.505': attribute type 4 has an invalid length.
[  209.033995][ T6280] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.505'.
[  209.339174][ T6279] lo speed is unknown, defaulting to 1000
[  211.234490][ T4231] Bluetooth: hci4: command 0x0409 tx timeout
[  212.851467][ T6289] netlink: 16 bytes leftover after parsing attributes in process `syz.2.507'.
[  212.862963][ T6289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.507'.
[  212.875731][ T6289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.507'.
[  212.884795][ T6289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.507'.
[  215.298998][ T4235] Bluetooth: hci4: command 0x041b tx timeout
[  216.638357][ T6305] netlink: 20 bytes leftover after parsing attributes in process `syz.2.512'.
[  217.135969][ T6315] device syzkaller0 entered promiscuous mode
[  217.185778][ T6279] chnl_net:caif_netlink_parms(): no params data found
[  217.357073][ T4235] Bluetooth: hci4: command 0x040f tx timeout
[  217.762791][ T6279] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.775275][ T6279] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.783628][ T6279] device bridge_slave_0 entered promiscuous mode
[  217.793620][ T6279] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.807516][ T6279] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.827060][ T6279] device bridge_slave_1 entered promiscuous mode
[  217.920263][ T6279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  218.439178][ T6279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  218.809958][ T6279] team0: Port device team_slave_0 added
[  218.899895][ T6279] team0: Port device team_slave_1 added
[  219.201929][ T6353] netlink: 'syz.3.522': attribute type 7 has an invalid length.
[  219.445037][ T4231] Bluetooth: hci4: command 0x0419 tx timeout
[  222.571554][ T6353] netlink: 29 bytes leftover after parsing attributes in process `syz.3.522'.
[  222.861601][ T6279] batman_adv: batadv0: Adding interface: batadv_slave_0
[  222.891554][ T6279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  223.578681][ T6365] netlink: 20 bytes leftover after parsing attributes in process `syz.2.526'.
[  223.686059][ T6279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  223.766114][ T6279] batman_adv: batadv0: Adding interface: batadv_slave_1
[  223.773107][ T6279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.117973][ T6279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  224.355072][ T6373] device syzkaller0 entered promiscuous mode
[  224.468395][ T6384] device syzkaller0 entered promiscuous mode
[  224.543269][ T6279] device hsr_slave_0 entered promiscuous mode
[  224.610854][ T6279] device hsr_slave_1 entered promiscuous mode
[  224.693071][ T6279] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  224.736376][ T6279] Cannot create hsr debugfs directory
[  225.630466][ T6392] device syzkaller0 entered promiscuous mode
[  225.654276][ T6395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.534'.
[  226.060537][ T4858] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.139956][ T6403] lo speed is unknown, defaulting to 1000
[  226.220377][ T4858] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.327541][ T4858] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.657663][ T4858] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.810029][ T6424] device syzkaller0 entered promiscuous mode
[  231.838545][ T6279] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  231.925697][ T6279] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  232.133550][ T6279] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  232.152497][ T4858] tipc: Left network mode
[  232.186455][ T6279] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  232.434559][ T6452] netlink: 4 bytes leftover after parsing attributes in process `syz.5.546'.
[  232.609615][ T6279] 8021q: adding VLAN 0 to HW filter on device bond0
[  232.730837][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  232.745579][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  232.818759][ T6279] 8021q: adding VLAN 0 to HW filter on device team0
[  232.909134][ T6462] device syzkaller0 entered promiscuous mode
[  233.036259][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  233.052336][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  233.079305][ T4392] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.086462][ T4392] bridge0: port 1(bridge_slave_0) entered forwarding state
[  233.725198][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  235.888681][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  236.560993][ T4392] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.569043][ T4392] bridge0: port 2(bridge_slave_1) entered forwarding state
[  236.845660][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  236.906288][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  237.020616][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  237.107815][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  237.165450][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  237.199076][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  237.409072][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  237.921570][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  238.074564][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  238.116071][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  238.194407][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  238.232688][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  238.305916][ T6279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  239.576364][ T6502] device syzkaller0 entered promiscuous mode
[  239.798278][ T4858] device hsr_slave_0 left promiscuous mode
[  239.815188][ T4858] device hsr_slave_1 left promiscuous mode
[  239.831569][ T4858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  239.858152][ T4858] batman_adv: batadv0: Removing interface: batadv_slave_0
[  239.878507][ T4858] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  239.913200][ T4858] batman_adv: batadv0: Removing interface: batadv_slave_1
[  239.932850][ T4858] device bridge_slave_1 left promiscuous mode
[  239.953640][ T4858] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.976532][ T4858] device bridge_slave_0 left promiscuous mode
[  239.999016][ T4858] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.040986][ T4858] rdma_rxe: ignoring netdev event = 10 for lo
[  240.081560][ T4858] device veth1_macvtap left promiscuous mode
[  240.095992][ T4858] device veth0_macvtap left promiscuous mode
[  240.108816][ T4858] device veth1_vlan left promiscuous mode
[  240.124407][ T4858] device veth0_vlan left promiscuous mode
[  240.423397][ T4858] infiniband syz0: set down
[  240.436714][ T4858] bond1 (unregistering): (slave bridge2): Releasing active interface
[  240.508877][ T4858] bond1 (unregistering): Released all slaves
[  240.844702][ T4858] team0 (unregistering): Port device team_slave_1 removed
[  240.871952][ T4858] team0 (unregistering): Port device team_slave_0 removed
[  240.902106][ T4858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  240.930490][ T4858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  240.944671][ T4234] infiniband syz1: ib_query_port failed (-19)
[  241.095906][ T4858] bond0 (unregistering): Released all slaves
[  241.201649][ T4827] smc: removing ib device syz0
[  241.322548][ T6521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.560'.
[  241.417767][ T4231] bond0 speed is unknown, defaulting to 1000
[  241.424433][ T4303] lo speed is unknown, defaulting to 1000
[  241.462068][ T6279] 8021q: adding VLAN 0 to HW filter on device batadv0
[  241.523072][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  241.552787][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  247.945542][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.572'.
[  248.034143][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  248.539737][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  248.880112][ T4235] Bluetooth: hci3: command 0x0409 tx timeout
[  250.834244][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  250.876910][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  250.924366][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  250.955712][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  251.008126][ T6279] device veth0_vlan entered promiscuous mode
[  252.421188][    T7] Bluetooth: hci3: command 0x041b tx timeout
[  254.725570][ T4512] Bluetooth: hci3: command 0x040f tx timeout
[  254.863886][ T6613] netlink: 32 bytes leftover after parsing attributes in process `syz.3.579'.
[  254.894913][ T6279] device veth1_vlan entered promiscuous mode
[  255.634442][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  255.648077][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  255.678226][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  255.680810][ T6279] device veth0_macvtap entered promiscuous mode
[  255.685295][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  255.829028][ T6556] chnl_net:caif_netlink_parms(): no params data found
[  255.905868][ T6279] device veth1_macvtap entered promiscuous mode
[  256.053755][ T6627] device syzkaller0 entered promiscuous mode
[  256.356367][ T6279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  256.384942][ T6279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.394827][ T6279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  256.419034][ T6279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.435020][ T6279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  256.464891][ T6279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.478251][ T6279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  256.509112][ T6279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.575297][ T6279] batman_adv: batadv0: Interface activated: batadv_slave_0
[  256.640679][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  256.667218][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  256.685762][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  256.734530][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  256.776176][ T6279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.795291][   T13] Bluetooth: hci3: command 0x0419 tx timeout
[  256.834921][ T6279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.885155][ T6279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.914898][ T6279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.924763][ T6279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.969848][ T6279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  257.009566][ T6279] batman_adv: batadv0: Interface activated: batadv_slave_1
[  257.054153][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  257.068419][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  257.174739][ T6659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.584'.
[  257.226197][ T6279] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  257.245774][ T6279] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  257.281646][ T6279] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  257.325007][ T6279] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  260.040928][ T6556] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.048115][ T6556] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.056418][ T6556] device bridge_slave_0 entered promiscuous mode
[  260.067409][ T6556] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.086434][ T6556] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.094605][ T6556] device bridge_slave_1 entered promiscuous mode
[  260.139022][ T6556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  260.233133][ T6556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  260.542006][ T6556] team0: Port device team_slave_0 added
[  260.579254][ T6676] netlink: 'syz.3.587': attribute type 1 has an invalid length.
[  260.654947][ T6676] netlink: 'syz.3.587': attribute type 2 has an invalid length.
[  260.705803][ T6556] team0: Port device team_slave_1 added
[  260.745985][ T4392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  260.754066][ T4392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  260.946358][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  260.990705][ T4392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  261.005343][ T6556] batman_adv: batadv0: Adding interface: batadv_slave_0
[  261.049322][ T4392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  261.091577][ T6556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  261.865011][ T6556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  262.477267][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  263.150753][ T6719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.594'.
[  263.439770][ T6556] batman_adv: batadv0: Adding interface: batadv_slave_1
[  263.464753][ T6556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  263.665588][ T6556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  264.020430][ T6556] device hsr_slave_0 entered promiscuous mode
[  264.246212][ T6556] device hsr_slave_1 entered promiscuous mode
[  264.255170][ T6556] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  264.263318][ T6556] Cannot create hsr debugfs directory
[  267.715899][ T6762] netlink: 16 bytes leftover after parsing attributes in process `syz.3.600'.
[  268.812544][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.604'.
[  268.961207][ T6556] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  269.028307][ T6556] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  269.530758][ T6556] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  269.633689][ T6556] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  270.188826][ T6804] device syzkaller0 entered promiscuous mode
[  270.735965][ T6556] 8021q: adding VLAN 0 to HW filter on device bond0
[  270.802542][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  270.883570][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  271.006618][ T6556] 8021q: adding VLAN 0 to HW filter on device team0
[  271.304828][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  271.343148][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  271.430230][ T4325] bridge0: port 1(bridge_slave_0) entered blocking state
[  271.437419][ T4325] bridge0: port 1(bridge_slave_0) entered forwarding state
[  271.447589][ T6834] netlink: 32 bytes leftover after parsing attributes in process `syz.6.614'.
[  271.706526][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  271.730763][ T6830] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  271.775141][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  272.161914][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  272.215340][ T4392] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.222476][ T4392] bridge0: port 2(bridge_slave_1) entered forwarding state
[  272.344190][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  272.398189][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  272.438979][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  272.484684][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  272.523911][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  272.612885][ T6844] netlink: 4 bytes leftover after parsing attributes in process `syz.6.618'.
[  272.835096][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  272.886794][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  272.967760][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  273.002262][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  273.545194][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  274.085553][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  275.359732][ T6556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  276.863379][ T4858] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.084208][ T4858] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.378715][ T6883] device syzkaller0 entered promiscuous mode
[  277.562120][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  277.585265][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  278.070231][ T4858] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.173942][ T6556] 8021q: adding VLAN 0 to HW filter on device batadv0
[  278.953086][ T4858] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.976698][ T6931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.634'.
[  283.036405][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz.6.635'.
[  283.183702][ T6935] device syzkaller0 entered promiscuous mode
[  283.264092][ T6935] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  283.421263][ T6933] tipc: Resetting bearer <eth:syzkaller0>
[  283.655300][ T6933] tipc: Disabling bearer <eth:syzkaller0>
[  286.156775][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  286.212809][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  286.530475][ T6963] device syzkaller0 entered promiscuous mode
[  286.558803][ T6556] device veth0_vlan entered promiscuous mode
[  286.568814][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  286.582828][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  286.741254][ T6556] device veth1_vlan entered promiscuous mode
[  287.394406][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  287.408788][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  287.434420][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  287.628946][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  287.686349][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  287.710532][ T6556] device veth0_macvtap entered promiscuous mode
[  287.758466][ T6556] device veth1_macvtap entered promiscuous mode
[  287.878602][ T6556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.908726][ T6556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.973613][ T6556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  288.065655][ T6556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.077778][ T6556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  288.120147][ T6556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.172579][ T6556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  288.235851][ T6556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.275076][ T6556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  288.320106][ T6556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.352142][ T6556] batman_adv: batadv0: Interface activated: batadv_slave_0
[  288.391649][ T7001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.647'.
[  288.432575][ T7009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.648'.
[  288.604357][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  288.615735][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  288.632871][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  288.682021][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  288.718083][ T6556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  288.749762][ T6556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.780523][ T6556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  288.811790][ T6556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.872759][ T6556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  288.908139][ T6556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.943274][ T7030] netlink: 4 bytes leftover after parsing attributes in process `syz.5.652'.
[  288.962513][ T6556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  288.993277][ T6556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.021713][ T6556] batman_adv: batadv0: Interface activated: batadv_slave_1
[  289.170475][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  289.197852][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  289.231729][ T6556] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  289.271930][ T6556] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  289.301561][ T6556] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  289.331614][ T6556] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  289.719726][ T4858] device hsr_slave_0 left promiscuous mode
[  289.746926][ T4858] device hsr_slave_1 left promiscuous mode
[  289.754821][ T4858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  289.769133][ T4858] batman_adv: batadv0: Removing interface: batadv_slave_0
[  289.782024][ T4858] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  289.793554][ T4858] batman_adv: batadv0: Removing interface: batadv_slave_1
[  289.807751][ T4858] device bridge_slave_1 left promiscuous mode
[  289.814212][ T4858] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.830428][ T4858] device bridge_slave_0 left promiscuous mode
[  289.842607][ T4858] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.849929][    C1] vcan0: j1939_tp_rxtimer: 0xffff88801e410000: rx timeout, send abort
[  289.860803][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801e410000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  289.952752][ T4858] device veth1_macvtap left promiscuous mode
[  289.965875][ T4858] device veth0_macvtap left promiscuous mode
[  290.156540][ T4858] device veth1_vlan left promiscuous mode
[  290.178165][ T4858] device veth0_vlan left promiscuous mode
[  291.368593][ T4858] team0 (unregistering): Port device team_slave_1 removed
[  291.387867][ T4858] team0 (unregistering): Port device team_slave_0 removed
[  291.403520][ T4858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  291.420723][ T4858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  291.509335][ T4858] bond0 (unregistering): Released all slaves
[  291.602126][ T7039] device syzkaller0 entered promiscuous mode
[  291.660373][ T1247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  291.681973][ T1247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  291.726795][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  291.912925][ T4392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  291.945209][ T4392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  292.032790][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  292.228955][ T7084] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5
[  292.487478][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.6.663'.
[  292.530362][ T7091] bond0: option lp_interval: invalid value (0)
[  292.537716][ T7091] bond0: option lp_interval: allowed values 1 - 2147483647
[  292.659362][ T7095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.664'.
[  292.707702][ T7104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.664'.
[  293.867446][ T7119] device syzkaller0 entered promiscuous mode
[  294.263897][ T7128] tipc: MTU too low for tipc bearer
[  294.835153][ T7137] syz.7.675 (7137) used greatest stack depth: 16944 bytes left
[  295.093196][ T7156] netlink: 4 bytes leftover after parsing attributes in process `syz.7.678'.
[  295.135261][ T7156] device team0 entered promiscuous mode
[  295.225118][ T7156] device team_slave_0 entered promiscuous mode
[  295.321458][ T7156] device team_slave_1 entered promiscuous mode
[  295.440706][ T7161] device team0 left promiscuous mode
[  295.495268][ T7161] device team_slave_0 left promiscuous mode
[  295.502474][ T7161] device team_slave_1 left promiscuous mode
[  295.997718][ T7184] device syzkaller0 entered promiscuous mode
[  296.424816][ T7194] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  297.565121][ T4233] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  297.845032][ T4233] usb 6-1: Using ep0 maxpacket: 32
[  297.885992][ T4233] usb 6-1: no configurations
[  297.891207][ T4233] usb 6-1: can't read configurations, error -22
[  298.085061][ T4233] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  298.170029][ T7219] device syzkaller0 entered promiscuous mode
[  298.335259][ T4233] usb 6-1: Using ep0 maxpacket: 32
[  298.375859][ T4233] usb 6-1: no configurations
[  298.381169][ T4233] usb 6-1: can't read configurations, error -22
[  298.425660][ T4233] usb usb6-port1: attempt power cycle
[  298.835010][ T4233] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  298.976610][ T4233] usb 6-1: Using ep0 maxpacket: 32
[  299.015798][ T4233] usb 6-1: no configurations
[  299.043291][ T4233] usb 6-1: can't read configurations, error -22
[  299.049549][ T7239] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  299.245052][ T4233] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  299.345652][ T4233] usb 6-1: Using ep0 maxpacket: 32
[  299.385793][ T4233] usb 6-1: no configurations
[  299.391171][ T4233] usb 6-1: can't read configurations, error -22
[  299.465518][ T4233] usb usb6-port1: unable to enumerate USB device
[  301.385166][ T7272] tipc: Started in network mode
[  301.390095][ T7272] tipc: Node identity 46354312c5f8, cluster identity 4711
[  301.474710][ T7272] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  301.505451][ T7273] device syzkaller0 entered promiscuous mode
[  301.684289][ T7272] tipc: Resetting bearer <eth:syzkaller0>
[  301.785174][ T7270] tipc: Resetting bearer <eth:syzkaller0>
[  301.896479][ T7270] tipc: Disabling bearer <eth:syzkaller0>
[  301.918721][ T7275] netlink: 4 bytes leftover after parsing attributes in process `syz.6.706'.
[  302.283370][ T7291] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  302.855174][ T4512] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  303.155765][ T4512] usb 8-1: Using ep0 maxpacket: 32
[  303.871186][ T4233] Bluetooth: hci5: command 0x0406 tx timeout
[  304.562546][ T4512] usb 8-1: no configurations
[  304.648779][ T4512] usb 8-1: can't read configurations, error -22
[  305.489808][ T4512] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  306.075640][ T7315] device syzkaller1 entered promiscuous mode
[  306.135361][ T7320] veth0_vlan: mtu greater than device maximum
[  306.163078][ T7315] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96
[  306.909368][ T7339] device syzkaller0 entered promiscuous mode
[  307.226923][ T7352] netlink: 4 bytes leftover after parsing attributes in process `syz.6.725'.
[  307.277614][ T7350] netlink: 24 bytes leftover after parsing attributes in process `syz.0.726'.
[  307.925266][ T4233] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  308.329799][ T4233] usb 8-1: Using ep0 maxpacket: 32
[  308.895260][ T4233] usb 8-1: unable to read config index 0 descriptor/start: -61
[  308.925109][ T4233] usb 8-1: can't read configurations, error -61
[  309.073575][ T7384] device syzkaller0 entered promiscuous mode
[  309.135057][ T4233] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  309.353312][ T7387] device syzkaller1 entered promiscuous mode
[  309.385123][ T4233] usb 8-1: Using ep0 maxpacket: 32
[  309.426684][ T7392] netlink: 24 bytes leftover after parsing attributes in process `syz.0.739'.
[  309.547455][ T4233] usb 8-1: unable to read config index 0 descriptor/start: -61
[  309.559946][ T4233] usb 8-1: can't read configurations, error -61
[  309.600999][ T4233] usb usb8-port1: attempt power cycle
[  309.612492][ T7400] netlink: 12 bytes leftover after parsing attributes in process `syz.5.742'.
[  309.701338][ T7402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.743'.
[  309.768806][ T7402] device vlan3 entered promiscuous mode
[  309.774408][ T7402] device erspan0 entered promiscuous mode
[  310.025758][ T4233] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  310.135559][ T4233] usb 8-1: Using ep0 maxpacket: 32
[  310.272940][ T7424] netlink: 56 bytes leftover after parsing attributes in process `syz.0.748'.
[  310.315528][ T4233] usb 8-1: unable to read config index 0 descriptor/start: -61
[  310.341418][ T4233] usb 8-1: can't read configurations, error -61
[  311.055095][ T4233] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  311.734160][ T4233] usb 8-1: device not accepting address 7, error -71
[  311.796194][ T4233] usb usb8-port1: unable to enumerate USB device
[  311.908128][ T7438] netlink: 'syz.6.749': attribute type 8 has an invalid length.
[  312.019710][ T7449] netlink: 24 bytes leftover after parsing attributes in process `syz.5.753'.
[  312.488013][ T7457] device syzkaller0 entered promiscuous mode
[  312.860573][ T7473] tipc: Started in network mode
[  312.893484][ T7473] tipc: Node identity aac1486bf981, cluster identity 4711
[  312.992989][ T7473] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  313.034372][ T7479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.760'.
[  313.269282][ T7473] tipc: Disabling bearer <eth:syzkaller0>
[  313.925164][ T4233] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  314.175156][ T4233] usb 1-1: Using ep0 maxpacket: 32
[  314.192031][ T7505] netlink: 24 bytes leftover after parsing attributes in process `syz.6.766'.
[  314.335108][ T4233] usb 1-1: unable to read config index 0 descriptor/start: -61
[  314.345098][ T4233] usb 1-1: can't read configurations, error -61
[  314.495056][ T4233] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  314.672524][ T7517] netlink: 8 bytes leftover after parsing attributes in process `syz.6.768'.
[  314.737352][ T7517] netlink: 44 bytes leftover after parsing attributes in process `syz.6.768'.
[  314.745047][ T4233] usb 1-1: Using ep0 maxpacket: 32
[  314.925148][ T4233] usb 1-1: unable to read config index 0 descriptor/start: -61
[  314.949260][ T4233] usb 1-1: can't read configurations, error -61
[  314.992218][ T4233] usb usb1-port1: attempt power cycle
[  315.141096][ T7531] device syzkaller0 entered promiscuous mode
[  315.435191][ T4233] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  315.535136][ T4233] usb 1-1: Using ep0 maxpacket: 32
[  315.639762][ T7539] device syzkaller0 entered promiscuous mode
[  315.701476][ T4233] usb 1-1: unable to read config index 0 descriptor/start: -61
[  315.733095][ T4233] usb 1-1: can't read configurations, error -61
[  315.907651][ T4233] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  316.025268][ T4233] usb 1-1: Using ep0 maxpacket: 32
[  316.225126][ T4233] usb 1-1: unable to read config index 0 descriptor/start: -71
[  316.233770][ T4233] usb 1-1: can't read configurations, error -71
[  316.241985][ T7546] device syzkaller0 entered promiscuous mode
[  316.262114][ T4233] usb usb1-port1: unable to enumerate USB device
[  317.168658][ T7498] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  317.169025][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  317.196627][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  318.269904][ T7568] device syzkaller0 entered promiscuous mode
[  319.131886][ T7577] netlink: 'syz.0.784': attribute type 8 has an invalid length.
[  319.835628][ T4305] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  320.084965][ T4305] usb 4-1: Using ep0 maxpacket: 32
[  320.401337][ T4305] usb 4-1: unable to read config index 0 descriptor/start: -61
[  320.409050][ T4305] usb 4-1: can't read configurations, error -61
[  320.433152][ T7607] device syzkaller0 entered promiscuous mode
[  320.875623][ T4305] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  320.976164][ T7623] device syzkaller0 entered promiscuous mode
[  321.115008][ T4305] usb 4-1: Using ep0 maxpacket: 32
[  321.275236][ T4305] usb 4-1: unable to read config index 0 descriptor/start: -61
[  321.295045][ T4305] usb 4-1: can't read configurations, error -61
[  321.328565][ T4305] usb usb4-port1: attempt power cycle
[  321.766281][ T7637] device syzkaller0 entered promiscuous mode
[  321.815044][ T4305] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  321.915452][ T4305] usb 4-1: Using ep0 maxpacket: 32
[  322.075282][ T4305] usb 4-1: unable to read config index 0 descriptor/start: -61
[  322.089774][ T4305] usb 4-1: can't read configurations, error -61
[  322.274975][ T4305] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  322.375257][ T4305] usb 4-1: Using ep0 maxpacket: 32
[  322.614945][ T4305] usb 4-1: unable to read config index 0 descriptor/start: -71
[  322.622668][ T4305] usb 4-1: can't read configurations, error -71
[  322.669980][ T4305] usb usb4-port1: unable to enumerate USB device
[  322.856192][ T7654] device syzkaller0 entered promiscuous mode
[  323.382284][ T7665] netlink: 'syz.3.801': attribute type 8 has an invalid length.
[  324.168264][ T7627] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  326.164966][ T4235] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  326.250454][ T7706] device syzkaller0 entered promiscuous mode
[  326.326817][ T7706] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  326.405026][ T4235] usb 6-1: Using ep0 maxpacket: 32
[  326.459463][ T7705] tipc: Resetting bearer <eth:syzkaller0>
[  326.526965][ T7705] tipc: Disabling bearer <eth:syzkaller0>
[  326.565108][ T4235] usb 6-1: unable to read config index 0 descriptor/start: -61
[  326.572743][ T4235] usb 6-1: can't read configurations, error -61
[  326.764933][ T4235] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  326.954707][ T7716] device syzkaller0 entered promiscuous mode
[  327.005027][ T4235] usb 6-1: Using ep0 maxpacket: 32
[  327.030207][ T7718] netlink: 72 bytes leftover after parsing attributes in process `syz.0.814'.
[  327.120727][ T7718] netlink: 'syz.0.814': attribute type 1 has an invalid length.
[  327.168602][ T4235] usb 6-1: unable to read config index 0 descriptor/start: -61
[  327.188621][ T4235] usb 6-1: can't read configurations, error -61
[  327.208955][ T4235] usb usb6-port1: attempt power cycle
[  327.614913][ T4235] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  327.755475][ T4235] usb 6-1: Using ep0 maxpacket: 32
[  327.915308][ T4235] usb 6-1: unable to read config index 0 descriptor/start: -61
[  327.922940][ T4235] usb 6-1: can't read configurations, error -61
[  328.175025][ T4235] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  328.275455][ T4235] usb 6-1: Using ep0 maxpacket: 32
[  328.417802][ T7746] netlink: 'syz.6.817': attribute type 8 has an invalid length.
[  328.435405][ T4235] usb 6-1: unable to read config index 0 descriptor/start: -61
[  328.443306][ T4235] usb 6-1: can't read configurations, error -61
[  328.471985][ T4235] usb usb6-port1: unable to enumerate USB device
[  330.724089][ T7784] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  330.787731][ T7787] device syzkaller0 entered promiscuous mode
[  330.947688][ T7787] tipc: Resetting bearer <eth:syzkaller0>
[  331.051996][ T7787] tipc: Disabling bearer <eth:syzkaller0>
[  331.369784][ T7808] IPv6: sit1: Disabled Multicast RS
[  331.392068][ T7808] netlink: 44 bytes leftover after parsing attributes in process `syz.5.829'.
[  332.580192][ T4512] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  332.865539][ T4512] usb 7-1: Using ep0 maxpacket: 32
[  333.023558][ T7850] device syzkaller0 entered promiscuous mode
[  333.049112][ T4512] usb 7-1: unable to read config index 0 descriptor/start: -61
[  333.074082][ T4512] usb 7-1: can't read configurations, error -61
[  333.096625][ T7850] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  333.135656][ T7848] tipc: Resetting bearer <eth:syzkaller0>
[  333.275906][ T4512] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  333.315070][ T7848] tipc: Disabling bearer <eth:syzkaller0>
[  333.586032][ T4512] usb 7-1: Using ep0 maxpacket: 32
[  333.665207][ T7857] netlink: 16 bytes leftover after parsing attributes in process `syz.5.838'.
[  333.785599][ T4512] usb 7-1: unable to read config index 0 descriptor/start: -61
[  333.807460][ T7856] device syzkaller0 entered promiscuous mode
[  333.815059][ T4512] usb 7-1: can't read configurations, error -61
[  333.838946][ T4512] usb usb7-port1: attempt power cycle
[  334.346439][ T4512] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  334.485611][ T4512] usb 7-1: Using ep0 maxpacket: 32
[  334.675474][ T4512] usb 7-1: unable to read config index 0 descriptor/start: -61
[  334.696180][ T4512] usb 7-1: can't read configurations, error -61
[  334.905018][ T4512] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  335.025774][ T4512] usb 7-1: Using ep0 maxpacket: 32
[  335.222652][ T7885] tipc: Started in network mode
[  335.245982][ T7885] tipc: Node identity 36448b76748, cluster identity 4711
[  335.272131][ T7885] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  335.297656][ T4512] usb 7-1: unable to read config index 0 descriptor/start: -71
[  335.310895][ T4512] usb 7-1: can't read configurations, error -71
[  335.318851][ T7887] device syzkaller0 entered promiscuous mode
[  335.335933][ T4512] usb usb7-port1: unable to enumerate USB device
[  335.553390][ T7894] device syzkaller0 entered promiscuous mode
[  335.616595][ T7894] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  335.638663][ T7884] tipc: Resetting bearer <eth:syzkaller0>
[  335.722057][ T7884] tipc: Disabling bearer <eth:syzkaller0>
[  335.769205][ T7893] tipc: Resetting bearer <eth:syzkaller0>
[  335.835281][ T7893] tipc: Disabling bearer <eth:syzkaller0>
[  336.079514][ T7914] netlink: 16 bytes leftover after parsing attributes in process `syz.3.851'.
[  336.590239][ T7923] device syzkaller0 entered promiscuous mode
[  336.656144][ T7929] device syzkaller0 entered promiscuous mode
[  337.880739][ T7952] netlink: 'syz.6.858': attribute type 12 has an invalid length.
[  337.891847][ T7952] netlink: 132 bytes leftover after parsing attributes in process `syz.6.858'.
[  338.093372][ T7955] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  338.129842][ T7955] device syzkaller0 entered promiscuous mode
[  338.216383][ T7955] tipc: Resetting bearer <eth:syzkaller0>
[  338.292145][ T7953] tipc: Resetting bearer <eth:syzkaller0>
[  338.350569][ T7953] tipc: Disabling bearer <eth:syzkaller0>
[  338.425747][ T7959] device syzkaller0 entered promiscuous mode
[  338.487196][ T7962] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  338.648908][ T7957] tipc: Resetting bearer <eth:syzkaller0>
[  338.739736][ T7957] tipc: Disabling bearer <eth:syzkaller0>
[  339.067882][ T7981] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  339.686932][ T4512] Bluetooth: hci4: command 0x0406 tx timeout
[  343.250588][ T7992] netlink: 104 bytes leftover after parsing attributes in process `syz.0.869'.
[  343.393988][ T7996] netlink: 24 bytes leftover after parsing attributes in process `syz.3.871'.
[  343.739212][ T8008] netlink: 16 bytes leftover after parsing attributes in process `syz.0.872'.
[  343.966694][ T4856] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.124703][ T4856] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.250721][ T4856] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.379917][ T8032] device syzkaller0 entered promiscuous mode
[  344.420441][ T4856] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.006923][ T8016] chnl_net:caif_netlink_parms(): no params data found
[  345.038468][ T4856] tipc: Left network mode
[  345.843110][ T4231] Bluetooth: hci1: command 0x0409 tx timeout
[  347.127165][ T8026] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  349.142151][ T8072] netlink: 24 bytes leftover after parsing attributes in process `syz.6.883'.
[  349.376554][ T8071] netlink: 16 bytes leftover after parsing attributes in process `syz.0.885'.
[  349.526477][ T8016] bridge0: port 1(bridge_slave_0) entered blocking state
[  349.583661][ T8016] bridge0: port 1(bridge_slave_0) entered disabled state
[  349.630534][ T8016] device bridge_slave_0 entered promiscuous mode
[  349.663702][ T8016] bridge0: port 2(bridge_slave_1) entered blocking state
[  349.698128][ T8016] bridge0: port 2(bridge_slave_1) entered disabled state
[  349.755729][ T8016] device bridge_slave_1 entered promiscuous mode
[  349.781796][ T8094] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  349.869514][ T8085] device syzkaller0 entered promiscuous mode
[  349.924557][ T8088] device syzkaller0 entered promiscuous mode
[  349.994974][ T4234] Bluetooth: hci1: command 0x041b tx timeout
[  350.016717][ T8100] tipc: Resetting bearer <eth:syzkaller0>
[  350.122582][ T8016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  350.149223][ T8086] tipc: Resetting bearer <eth:syzkaller0>
[  350.175801][ T8086] tipc: Disabling bearer <eth:syzkaller0>
[  350.204312][ T8016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  350.349508][ T8016] team0: Port device team_slave_0 added
[  350.441474][ T8016] team0: Port device team_slave_1 added
[  350.606118][ T8016] batman_adv: batadv0: Adding interface: batadv_slave_0
[  350.636341][ T8016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  350.693029][ T8016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  350.725213][ T8127] netlink: 24 bytes leftover after parsing attributes in process `syz.3.896'.
[  350.789401][ T8016] batman_adv: batadv0: Adding interface: batadv_slave_1
[  350.808381][ T8016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  350.881053][ T8016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  351.068091][ T8132] netlink: 16 bytes leftover after parsing attributes in process `syz.6.897'.
[  351.364711][ T4856] device hsr_slave_0 left promiscuous mode
[  351.401580][ T4856] device hsr_slave_1 left promiscuous mode
[  351.449568][ T4856] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  351.473935][ T4856] batman_adv: batadv0: Removing interface: batadv_slave_0
[  351.499503][ T4856] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  351.529711][ T4856] batman_adv: batadv0: Removing interface: batadv_slave_1
[  351.575606][ T4856] device bridge_slave_1 left promiscuous mode
[  351.581947][ T4856] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.641216][ T4856] device bridge_slave_0 left promiscuous mode
[  351.675559][ T4856] bridge0: port 1(bridge_slave_0) entered disabled state
[  351.735858][ T4856] device veth1_macvtap left promiscuous mode
[  351.741944][ T4856] device veth0_macvtap left promiscuous mode
[  351.781502][ T4856] device veth1_vlan left promiscuous mode
[  351.801779][ T4856] device veth0_vlan left promiscuous mode
[  352.075132][ T4231] Bluetooth: hci1: command 0x040f tx timeout
[  352.153873][ T4856] team0 (unregistering): Port device team_slave_1 removed
[  352.171669][ T4856] team0 (unregistering): Port device team_slave_0 removed
[  352.188441][ T4856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  352.206810][ T4856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  352.298459][ T4856] bond0 (unregistering): Released all slaves
[  352.351753][ T8016] device hsr_slave_0 entered promiscuous mode
[  352.365222][ T8016] device hsr_slave_1 entered promiscuous mode
[  352.392171][ T8141] netlink: 120 bytes leftover after parsing attributes in process `syz.6.900'.
[  352.427499][ T8142] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4
[  352.475099][ T8142] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4
[  352.485489][ T8142] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  352.799393][ T8170] netlink: 24 bytes leftover after parsing attributes in process `syz.3.907'.
[  353.009787][ T8016] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  353.017891][ T8177] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  353.148170][ T8016] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  353.239378][ T8186] netlink: 16 bytes leftover after parsing attributes in process `syz.0.909'.
[  353.285702][ T8016] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  353.307924][ T8016] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  353.355896][ T8182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.910'.
[  353.710512][ T8201] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  353.863274][ T8201] device syzkaller0 entered promiscuous mode
[  353.942202][ T8016] 8021q: adding VLAN 0 to HW filter on device bond0
[  354.015400][ T8201] tipc: Resetting bearer <eth:syzkaller0>
[  354.041380][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  354.091099][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  354.193062][ T8016] 8021q: adding VLAN 0 to HW filter on device team0
[  354.201648][ T4303] Bluetooth: hci1: command 0x0419 tx timeout
[  354.246024][ T8195] tipc: Resetting bearer <eth:syzkaller0>
[  354.289658][ T8195] tipc: Disabling bearer <eth:syzkaller0>
[  354.361009][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  354.398209][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  354.446610][ T4316] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.454755][ T4316] bridge0: port 1(bridge_slave_0) entered forwarding state
[  354.509439][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  354.538342][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  354.577548][ T4316] bridge0: port 2(bridge_slave_1) entered blocking state
[  354.584871][ T4316] bridge0: port 2(bridge_slave_1) entered forwarding state
[  354.715523][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  354.723802][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  354.802340][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  354.866159][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  354.902670][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  354.986504][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  355.060124][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  355.136472][ T8242] netlink: 24 bytes leftover after parsing attributes in process `syz.3.919'.
[  355.197901][ T8016] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  355.273903][ T8016] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  355.315169][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  355.331887][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  355.375508][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  355.410454][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  355.452274][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  355.494107][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  356.367011][ T8016] 8021q: adding VLAN 0 to HW filter on device batadv0
[  356.374143][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  356.448855][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  356.523672][ T8277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.927'.
[  356.627370][ T8283] netlink: 16 bytes leftover after parsing attributes in process `syz.0.929'.
[  356.916273][ T8293] netlink: 24 bytes leftover after parsing attributes in process `syz.0.931'.
[  357.561779][ T8308] device syzkaller0 entered promiscuous mode
[  358.054533][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  358.097858][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  358.180585][ T8322] netlink: 16 bytes leftover after parsing attributes in process `syz.5.940'.
[  358.262456][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  358.301760][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  358.337331][ T8016] device veth0_vlan entered promiscuous mode
[  358.369232][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  358.409620][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  358.450776][ T8016] device veth1_vlan entered promiscuous mode
[  359.841794][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  360.288304][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  361.545671][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  362.225211][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  362.360113][ T8016] device veth0_macvtap entered promiscuous mode
[  362.434580][ T8016] device veth1_macvtap entered promiscuous mode
[  362.559292][ T8016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  362.606127][ T8016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  362.650539][ T8016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  362.841950][ T8016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  362.899767][ T8016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  362.953826][ T8016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  363.011411][ T8016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  363.053984][ T8016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  363.132828][ T8016] batman_adv: batadv0: Interface activated: batadv_slave_0
[  363.210375][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  363.258055][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  363.322174][ T8016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  363.386378][ T8016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  363.454925][ T8016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  363.515245][ T8016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  363.542187][ T8016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  363.603496][ T8016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  363.651870][ T8016] batman_adv: batadv0: Interface activated: batadv_slave_1
[  363.678874][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  363.718073][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  363.825441][ T8016] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  363.872926][ T8016] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  363.938641][ T8016] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  363.995858][ T8016] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  364.071761][ T8379] netlink: 4 bytes leftover after parsing attributes in process `syz.5.950'.
[  364.265598][ T8382] netlink: 16 bytes leftover after parsing attributes in process `syz.3.951'.
[  364.315675][ T8378] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4
[  364.365044][ T8378] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4
[  364.445790][ T8378] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  364.721363][ T4317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  364.748685][ T4317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  364.831296][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  364.986657][ T4858] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  365.020248][ T4858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  365.082087][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  369.436105][ T8428] netlink: 16 bytes leftover after parsing attributes in process `syz.5.962'.
[  369.913899][ T8440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.964'.
[  372.119542][ T8497] netlink: 16 bytes leftover after parsing attributes in process `syz.5.980'.
[  372.188688][ T8500] device syzkaller0 entered promiscuous mode
[  372.281711][ T8504] netlink: 24 bytes leftover after parsing attributes in process `syz.5.981'.
[  372.448561][ T8507] netlink: 'syz.5.982': attribute type 29 has an invalid length.
[  372.461856][ T8507] netlink: 'syz.5.982': attribute type 29 has an invalid length.
[  372.504412][ T8511] netlink: 'syz.5.982': attribute type 29 has an invalid length.
[  372.543886][ T8507] netlink: 'syz.5.982': attribute type 29 has an invalid length.
[  372.591708][ T8507] netlink: 'syz.5.982': attribute type 29 has an invalid length.
[  373.661035][ T8474] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  374.003020][ T8550] device syzkaller0 entered promiscuous mode
[  374.047080][ T8553] netlink: 16 bytes leftover after parsing attributes in process `syz.5.991'.
[  374.504503][ T8563] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  375.029673][ T8562] tipc: Disabling bearer <eth:syzkaller0>
[  375.072013][ T8572] netlink: 'syz.0.998': attribute type 8 has an invalid length.
[  375.432685][ T8594] device syzkaller0 entered promiscuous mode
[  376.226551][ T8602] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1006'.
[  378.561467][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  378.568645][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  378.846467][ T8619] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1009'.
[  378.886332][ T8618] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1010'.
[  378.926090][ T8620] netlink: 'syz.0.1008': attribute type 10 has an invalid length.
[  378.945523][ T8620] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1008'.
[  378.972289][ T8620] batman_adv: batadv0: Adding interface: virt_wifi0
[  378.991654][ T8620] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  379.027536][ T8620] batman_adv: batadv0: Interface activated: virt_wifi0
[  379.525660][ T8633] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  379.579979][ T8632] tipc: Disabling bearer <eth:syzkaller0>
[  379.660544][ T8630] netlink: 'syz.0.1012': attribute type 8 has an invalid length.
[  384.024026][ T8663] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1020'.
[  385.777239][ T8684] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  385.879911][ T8682] tipc: Disabling bearer <eth:syzkaller0>
[  385.922743][ T8693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1028'.
[  387.139346][ T8712] device syzkaller0 entered promiscuous mode
[  387.155047][ T4234] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  387.484984][ T4234] usb 1-1: Using ep0 maxpacket: 32
[  388.924962][ T4234] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  388.933369][ T4234] usb 1-1: config 0 has no interface number 0
[  390.352587][ T4234] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  390.365101][ T4234] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  390.375328][ T4234] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  390.384603][ T4234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  390.886310][ T4234] usb 1-1: config 0 descriptor??
[  391.037047][ T4234] usb 1-1: can't set config #0, error -71
[  391.054912][ T4234] usb 1-1: USB disconnect, device number 9
[  391.580715][ T8747] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  391.648777][ T8746] tipc: Disabling bearer <eth:syzkaller0>
[  391.963912][ T8754] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  392.341205][ T8767] device syzkaller0 entered promiscuous mode
[  393.042442][ T8785] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1048'.
[  393.319509][ T8790] device syzkaller0 entered promiscuous mode
[  395.227350][ T8801] overlayfs: failed to resolve './file1/file0': -2
[  398.292360][ T8830] device syzkaller0 entered promiscuous mode
[  398.831010][ T8813] netlink: 'syz.5.1054': attribute type 8 has an invalid length.
[  403.080417][ T8848] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1064'.
[  406.529976][ T8894] device syzkaller1 entered promiscuous mode
[  406.667802][ T8903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1074'.
[  410.148738][ T8918] sched: RT throttling activated
[  414.549074][ T8933] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1083'.
[  415.138105][ T8948] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1085'.
[  415.148658][ T4233] usb 1-1: new low-speed USB device number 10 using dummy_hcd
[  415.567876][ T4233] usb 1-1: unable to get BOS descriptor set
[  415.745220][ T4233] usb 1-1: config 0 has no interfaces?
[  416.278572][ T4233] usb 1-1: string descriptor 0 read error: -22
[  416.286237][ T4233] usb 1-1: New USB device found, idVendor=10c4, idProduct=1601, bcdDevice= 7.1c
[  416.315820][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  416.463947][ T8988] lo speed is unknown, defaulting to 1000
[  416.471176][ T8988] lo speed is unknown, defaulting to 1000
[  416.481643][ T8988] lo speed is unknown, defaulting to 1000
[  416.507499][ T8988] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  416.554754][ T8988] lo speed is unknown, defaulting to 1000
[  416.566445][ T8988] lo speed is unknown, defaulting to 1000
[  416.575421][ T8988] lo speed is unknown, defaulting to 1000
[  416.584053][ T8988] lo speed is unknown, defaulting to 1000
[  416.593110][ T8988] lo speed is unknown, defaulting to 1000
[  416.601219][ T8988] lo speed is unknown, defaulting to 1000
[  417.721485][ T4233] usb 1-1: config 0 descriptor??
[  417.721858][ T8969] chnl_net:caif_netlink_parms(): no params data found
[  417.755498][   T13] Bluetooth: hci3: command 0x0409 tx timeout
[  417.861544][ T9010] 9pnet: Insufficient options for proto=fd
[  419.621499][ T4231] Bluetooth: hci2: command 0x0406 tx timeout
[  419.835195][ T4231] Bluetooth: hci3: command 0x041b tx timeout
[  419.922996][ T9045] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1100'.
[  420.284738][ T8969] bridge0: port 1(bridge_slave_0) entered blocking state
[  420.386165][ T8969] bridge0: port 1(bridge_slave_0) entered disabled state
[  421.805225][ T4233] usb 1-1: can't set config #0, error -71
[  421.914973][ T4234] Bluetooth: hci3: command 0x040f tx timeout
[  421.968643][ T4233] usb 1-1: USB disconnect, device number 10
[  421.971332][ T8969] device bridge_slave_0 entered promiscuous mode
[  422.146460][ T8969] bridge0: port 2(bridge_slave_1) entered blocking state
[  422.174102][ T8969] bridge0: port 2(bridge_slave_1) entered disabled state
[  422.264330][ T8969] device bridge_slave_1 entered promiscuous mode
[  423.276072][ T8969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  423.308702][ T9072] rdma_rxe: rxe_register_device failed with error -23
[  423.942195][ T9071] input: syz1 as /devices/virtual/input/input6
[  423.980307][ T8969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  423.995782][   T23] Bluetooth: hci3: command 0x0419 tx timeout
[  424.175826][ T9072] rdma_rxe: failed to add bond_slave_1
[  424.344099][ T4234] libceph: connect (1)[c::]:6789 error -101
[  424.353084][ T9077] loop5: detected capacity change from 0 to 7
[  424.362660][ T4234] libceph: mon0 (1)[c::]:6789 connect error
[  424.443558][ T9058] ceph: No mds server is up or the cluster is laggy
[  424.455762][ T4745] Dev loop5: unable to read RDB block 7
[  424.461817][ T4745]  loop5: unable to read partition table
[  424.472259][ T8969] team0: Port device team_slave_0 added
[  424.498436][ T4745] loop5: partition table beyond EOD, truncated
[  424.502553][ T8969] team0: Port device team_slave_1 added
[  424.553354][ T8969] batman_adv: batadv0: Adding interface: batadv_slave_0
[  424.574459][ T8969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  424.619506][ T8969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  424.633252][ T9077] Dev loop5: unable to read RDB block 7
[  424.708886][ T8969] batman_adv: batadv0: Adding interface: batadv_slave_1
[  424.715331][ T9077]  loop5: unable to read partition table
[  424.755379][ T9077] loop5: partition table beyond EOD, truncated
[  424.762520][ T9077] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  424.772005][ T8969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  424.772290][ T8969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  424.904426][ T9087] device syzkaller1 entered promiscuous mode
[  425.006065][ T8969] device hsr_slave_0 entered promiscuous mode
[  425.256287][ T8969] device hsr_slave_1 entered promiscuous mode
[  425.752344][ T8969] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  425.787852][ T8969] Cannot create hsr debugfs directory
[  478.080775][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  478.087148][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  500.951645][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  500.958267][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  530.613046][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  530.620032][    C1] rcu: 	0-...0: (1 GPs behind) idle=cc5/1/0x4000000000000000 softirq=25694/25695 fqs=667 
[  530.631048][    C1] 	(detected by 1, t=10502 jiffies, g=39237, q=251)
[  530.637662][    C1] Sending NMI from CPU 1 to CPUs 0:
[  530.642892][    C0] NMI backtrace for cpu 0
[  530.642905][    C0] CPU: 0 PID: 9110 Comm: syz.0.1114 Not tainted syzkaller #0
[  530.642923][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  530.642931][    C0] RIP: 0010:kasan_check_range+0x5e/0x290
[  530.642956][    C0] Code: bc 01 00 00 00 00 fc ff df 49 89 fe 49 c1 ee 03 49 ba 00 00 00 00 00 fc ff df 4f 8d 1c 16 4c 8d 44 3e ff 4d 89 c1 49 c1 e9 03 <4b> 8d 1c 21 49 89 df 4d 29 df 49 83 ff 10 7f 29 4d 85 ff 0f 84 38
[  530.642969][    C0] RSP: 0018:ffffc900000078d0 EFLAGS: 00000803
[  530.642984][    C0] RAX: 0000000000000001 RBX: 0000000000000061 RCX: ffffffff815d2513
[  530.642994][    C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff901d60c8
[  530.643004][    C0] RBP: ffffc90000007b50 R08: ffffffff901d60cf R09: 1ffffffff203ac19
[  530.643020][    C0] R10: dffffc0000000000 R11: fffffbfff203ac19 R12: dffffc0000000001
[  530.643031][    C0] R13: ffff8880592ad940 R14: 1ffffffff203ac19 R15: ffff8880592ae430
[  530.643042][    C0] FS:  00007f30dcc946c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  530.643055][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  530.643066][    C0] CR2: 00007f30dcc93ff8 CR3: 000000004b867000 CR4: 00000000003506f0
[  530.643081][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  530.643090][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  530.643099][    C0] Call Trace:
[  530.643106][    C0]  <IRQ>
[  530.643113][    C0]  __lock_acquire+0xdc3/0x7d10
[  530.643137][    C0]  ? __lock_acquire+0x13bc/0x7d10
[  530.643152][    C0]  ? trace_pelt_se_tp+0x39/0x100
[  530.643166][    C0]  ? verify_lock_unused+0x140/0x140
[  530.643181][    C0]  ? mark_lock+0x94/0x320
[  530.643193][    C0]  ? verify_lock_unused+0x140/0x140
[  530.643218][    C0]  ? __pv_queued_spin_lock_slowpath+0x7e6/0x9c0
[  530.643236][    C0]  lock_acquire+0x19e/0x400
[  530.643251][    C0]  ? __hrtimer_run_queues+0x5a9/0xb70
[  530.643271][    C0]  ? read_lock_is_recursive+0x10/0x10
[  530.643287][    C0]  ? __rwlock_init+0x140/0x140
[  530.643302][    C0]  _raw_spin_lock_irq+0xab/0xf0
[  530.643317][    C0]  ? __hrtimer_run_queues+0x5a9/0xb70
[  530.643333][    C0]  ? _raw_spin_lock_irqsave+0x100/0x100
[  530.643349][    C0]  __hrtimer_run_queues+0x5a9/0xb70
[  530.643370][    C0]  ? hrtimer_interrupt+0x8d0/0x8d0
[  530.643385][    C0]  ? ktime_get_update_offsets_now+0x3ce/0x3e0
[  530.643402][    C0]  hrtimer_interrupt+0x3bb/0x8d0
[  530.643424][    C0]  __sysvec_apic_timer_interrupt+0x137/0x4a0
[  530.643441][    C0]  sysvec_apic_timer_interrupt+0x9b/0xc0
[  530.643458][    C0]  </IRQ>
[  530.643462][    C0]  <TASK>
[  530.643467][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  530.643482][    C0] RIP: 0010:lock_is_held_type+0x13a/0x190
[  530.643498][    C0] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f
[  530.643509][    C0] RSP: 0018:ffffc90004b77b38 EFLAGS: 00000206
[  530.643521][    C0] RAX: a3fa529420b2c800 RBX: ffff8880592ad940 RCX: a3fa529420b2c800
[  530.643531][    C0] RDX: 0000000000000000 RSI: ffffffff8a2b43a0 RDI: ffffffff8a7a0700
[  530.643541][    C0] RBP: 0000000000000000 R08: ffffffff8d89f82f R09: 1ffffffff1b13f05
[  530.643551][    C0] R10: dffffc0000000000 R11: fffffbfff1b13f06 R12: dffffc0000000000
[  530.643561][    C0] R13: 0000000000000246 R14: ffffffff8c31f380 R15: 00000000ffffffff
[  530.643578][    C0]  ___might_sleep+0x9b/0x610
[  530.643594][    C0]  ? __might_fault+0xb7/0x110
[  530.643608][    C0]  ? __might_sleep+0xf0/0xf0
[  530.643621][    C0]  ? __lock_acquire+0x7d10/0x7d10
[  530.643639][    C0]  ? __might_fault+0xb3/0x110
[  530.643652][    C0]  do_recvmmsg+0x56f/0x850
[  530.643672][    C0]  ? __sys_recvmmsg+0x290/0x290
[  530.643691][    C0]  ? __lock_acquire+0x7d10/0x7d10
[  530.643710][    C0]  __x64_sys_recvmmsg+0x195/0x250
[  530.643726][    C0]  ? do_recvmmsg+0x850/0x850
[  530.643742][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  530.643758][    C0]  do_syscall_64+0x4c/0xa0
[  530.643771][    C0]  ? clear_bhb_loop+0x30/0x80
[  530.643784][    C0]  ? clear_bhb_loop+0x30/0x80
[  530.643804][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  530.643819][    C0] RIP: 0033:0x7f30dea5be59
[  530.643832][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  530.643843][    C0] RSP: 002b:00007f30dcc94028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  530.643858][    C0] RAX: ffffffffffffffda RBX: 00007f30decd5090 RCX: 00007f30dea5be59
[  530.643868][    C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003
[  530.643878][    C0] RBP: 00007f30deaf1d6f R08: 0000000000000000 R09: 0000000000000000
[  530.643887][    C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  530.643895][    C0] R13: 00007f30decd5128 R14: 00007f30decd5090 R15: 00007ffca74c7f58
[  530.643910][    C0]  </TASK>
[  530.644888][    C1] rcu: rcu_preempt kthread starved for 5026 jiffies! g39237 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  531.130955][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  531.140961][    C1] rcu: RCU grace-period kthread stack dump:
[  531.146868][    C1] task:rcu_preempt     state:R  running task     stack:28016 pid:   15 ppid:     2 flags:0x00004000
[  531.157761][    C1] Call Trace:
[  531.161148][    C1]  <TASK>
[  531.164110][    C1]  __schedule+0x11ef/0x43c0
[  531.168663][    C1]  ? release_firmware_map_entry+0x190/0x190
[  531.174581][    C1]  ? __mod_timer+0x91e/0xd00
[  531.179202][    C1]  schedule+0x11b/0x1e0
[  531.183375][    C1]  schedule_timeout+0x184/0x2d0
[  531.188237][    C1]  ? console_conditional_schedule+0x40/0x40
[  531.194140][    C1]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  531.200132][    C1]  ? update_process_times+0x200/0x200
[  531.205583][    C1]  ? prepare_to_swait_event+0x331/0x350
[  531.211191][    C1]  rcu_gp_fqs_loop+0x2be/0x11d0
[  531.216065][    C1]  ? dyntick_save_progress_counter+0x230/0x230
[  531.222413][    C1]  ? rcu_gp_init+0x10f0/0x10f0
[  531.227193][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  531.232489][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  531.237705][    C1]  rcu_gp_kthread+0x9b/0x370
[  531.242312][    C1]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  531.248222][    C1]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  531.253436][    C1]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  531.259436][    C1]  ? __kthread_parkme+0x157/0x1b0
[  531.264493][    C1]  kthread+0x436/0x520
[  531.268575][    C1]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  531.273699][    C1]  ? kthread_blkcg+0xd0/0xd0
[  531.278354][    C1]  ret_from_fork+0x1f/0x30
[  531.282890][    C1]  </TASK>
[  531.285921][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  531.292251][    C1] NMI backtrace for cpu 1
[  531.296588][    C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0
[  531.303632][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  531.313705][    C1] Call Trace:
[  531.317014][    C1]  <IRQ>
[  531.319913][    C1]  dump_stack_lvl+0x188/0x250
[  531.324633][    C1]  ? show_regs_print_info+0x20/0x20
[  531.329857][    C1]  ? load_image+0x400/0x400
[  531.334382][    C1]  ? irq_work_queue+0xbf/0x140
[  531.339167][    C1]  nmi_cpu_backtrace+0x3a2/0x3d0
[  531.344212][    C1]  ? nmi_trigger_cpumask_backtrace+0x280/0x280
[  531.350470][    C1]  ? _printk+0xda/0x130
[  531.354647][    C1]  ? cpu_online+0x1d/0x30
[  531.358991][    C1]  ? load_image+0x400/0x400
[  531.363516][    C1]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  531.369601][    C1]  nmi_trigger_cpumask_backtrace+0x163/0x280
[  531.375602][    C1]  rcu_check_gp_kthread_starvation+0x1cd/0x250
[  531.381778][    C1]  print_other_cpu_stall+0x1110/0x1270
[  531.387365][    C1]  ? print_cpu_stall+0x5f0/0x5f0
[  531.392324][    C1]  ? timekeeping_advance+0x7f6/0xac0
[  531.397710][    C1]  ? __lock_acquire+0x7d10/0x7d10
[  531.402852][    C1]  rcu_sched_clock_irq+0x843/0x1120
[  531.408068][    C1]  ? rcutree_dead_cpu+0x20/0x20
[  531.412936][    C1]  ? account_process_tick+0x22a/0x3a0
[  531.418421][    C1]  update_process_times+0x193/0x200
[  531.423641][    C1]  tick_sched_timer+0x37d/0x560
[  531.428508][    C1]  ? tick_setup_sched_timer+0x2c0/0x2c0
[  531.434070][    C1]  __hrtimer_run_queues+0x4b4/0xb70
[  531.439306][    C1]  ? hrtimer_interrupt+0x8d0/0x8d0
[  531.444524][    C1]  ? ktime_get_update_offsets_now+0x3ce/0x3e0
[  531.450612][    C1]  hrtimer_interrupt+0x3bb/0x8d0
[  531.455593][    C1]  __sysvec_apic_timer_interrupt+0x137/0x4a0
[  531.461601][    C1]  sysvec_apic_timer_interrupt+0x9b/0xc0
[  531.467272][    C1]  </IRQ>
[  531.470214][    C1]  <TASK>
[  531.473159][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  531.479162][    C1] RIP: 0010:default_idle+0xb/0x10
[  531.484210][    C1] Code: b7 48 89 df e8 f6 3a f8 f7 eb ad e8 4f af f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d 97 b5 5f 00 fb f4 <c3> 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48
[  531.503840][    C1] RSP: 0018:ffffc90000d67d48 EFLAGS: 000002c2
[  531.510039][    C1] RAX: e8b24b541babcf00 RBX: ffff8880179c8000 RCX: e8b24b541babcf00
[  531.518039][    C1] RDX: 0000000000000001 RSI: ffffffff8a2b3100 RDI: ffffffff8a7a0700
[  531.526124][    C1] RBP: ffffc90000d67e80 R08: ffff8880b913b30b R09: 1ffff11017227661
[  531.534120][    C1] R10: dffffc0000000000 R11: ffffed1017227662 R12: 1ffff920001acfb4
[  531.542112][    C1] R13: dffffc0000000000 R14: 1ffff11002f39000 R15: 0000000000000000
[  531.550119][    C1]  default_idle_call+0x81/0xc0
[  531.554910][    C1]  do_idle+0x251/0x650
[  531.559031][    C1]  ? idle_inject_timer_fn+0x60/0x60
[  531.564452][    C1]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  531.570657][    C1]  ? schedule_idle+0x57/0x90
[  531.575370][    C1]  cpu_startup_entry+0x14/0x20
[  531.580167][    C1]  start_secondary+0x330/0x430
[  531.585171][    C1]  ? arch_scale_freq_tick+0x120/0x120
[  531.590568][    C1]  secondary_startup_64_no_verify+0xb1/0xbb
[  531.596502][    C1]  </TASK>
[  531.663420][   T23] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-... } 10597 jiffies s: 13657 root: 0x1/.
[  531.676014][   T23] rcu: blocking rcu_node structures (internal RCU debug):
[  531.683189][   T23] Task dump for CPU 0:
[  531.687272][   T23] task:syz.0.1114      state:R  running task     stack:27056 pid: 9110 ppid:  4188 flags:0x0000000c
[  531.698324][   T23] Call Trace:
[  531.701647][   T23]  <TASK>
[  531.704637][   T23]  ? unix_unhash+0x10/0x10
[  531.709101][   T23]  ? lockdep_hardirqs_on+0x94/0x140
[  531.714359][   T23]  ? mark_lock+0x94/0x320
[  531.718712][   T23]  ? __lock_acquire+0x13bc/0x7d10
[  531.723830][   T23]  ? unix_dgram_recvmsg+0xb2/0xd0
[  531.728908][   T23]  ? ____sys_recvmsg+0x431/0x5e0
[  531.733968][   T23]  ? rcu_is_watching+0x11/0xa0
[  531.738779][   T23]  ? sysvec_apic_timer_interrupt+0x80/0xc0
[  531.744638][   T23]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  531.750922][   T23]  ? lock_is_held_type+0x13a/0x190
[  531.756099][   T23]  ? ___might_sleep+0x9b/0x610
[  531.761189][   T23]  ? __might_fault+0xb7/0x110
[  531.765973][   T23]  ? __might_sleep+0xf0/0xf0
[  531.770693][   T23]  ? __lock_acquire+0x7d10/0x7d10
[  531.775779][   T23]  ? __might_fault+0xb3/0x110
[  531.780486][   T23]  ? do_recvmmsg+0x56f/0x850
[  531.785134][   T23]  ? __sys_recvmmsg+0x290/0x290
[  531.790034][   T23]  ? __lock_acquire+0x7d10/0x7d10
[  531.795187][   T23]  ? __x64_sys_recvmmsg+0x195/0x250
[  531.800421][   T23]  ? do_recvmmsg+0x850/0x850
[  531.805064][   T23]  ? lockdep_hardirqs_on+0x94/0x140
[  531.810288][   T23]  ? do_syscall_64+0x4c/0xa0
[  531.814933][   T23]  ? clear_bhb_loop+0x30/0x80
[  531.819634][   T23]  ? clear_bhb_loop+0x30/0x80
[  531.824360][   T23]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  531.830551][   T23]  </TASK>