last executing test programs:

12.854743166s ago: executing program 2 (id=64):
getpid()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
process_vm_readv(0x0, &(0x7f0000008400), 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xffffffffffffff66)
r3 = msgget$private(0x0, 0x0)
msgrcv(r3, 0x0, 0x0, 0x2, 0x0)

11.630683973s ago: executing program 2 (id=68):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000dcffffff0000000000000000850000003600000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

11.339519442s ago: executing program 2 (id=69):
mknod(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f00000000c0)='./bus\x00', 0x40000100)
fcntl$setstatus(r0, 0x4, 0x42400)
r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r3 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1)
splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0xffffffe1, 0x0)
sendfile(r0, r3, &(0x7f0000000500), 0x8)

10.108811089s ago: executing program 2 (id=75):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000440)=',*:$*,[\x00', &(0x7f0000000480)='wlan0\x00', 0x0)

6.470563246s ago: executing program 2 (id=94):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006}]})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000100)='kfree\x00', r0}, 0x10)
close(0xffffffffffffffff)

6.226207862s ago: executing program 1 (id=97):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=ANY=[@ANYBLOB="640100001000010000000000feff0000ac1414aa000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff000000000000000000000000000000006c000000fe8000000000000000000000080000bb0000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c61746500"/220], 0x164}}, 0x0)

5.555155539s ago: executing program 1 (id=100):
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file0\x00', 0x42, 0x0)
move_mount(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', r0, &(0x7f0000001200)='./file1\x00', 0x110)
socket$inet6(0xa, 0x4, 0x3a)
socket$packet(0x11, 0x2, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0}, 0x90)
socket$key(0xf, 0x3, 0x2)
r1 = msgget$private(0x0, 0x0)
msgget(0x2, 0x4c)
socket$nl_xfrm(0x10, 0x3, 0x6)
msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000440)=""/185)
msgget$private(0x0, 0x0)
msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000100)=""/10)
msgrcv(0x0, &(0x7f00000005c0), 0x8, 0x1, 0x3000)
msgrcv(r1, 0x0, 0x0, 0x0, 0x3000)
msgsnd(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000003e5fa38cf76d0d443a94d603accf82b4bad6a884b34aa0fa9a1cda54fa6a67d5a985310ab3ec851c3933f745d922fc58e2d6b1d34d9df8b0df2c642390a3c609f0c25f9bdac853928064f9cd49ac08d2b34a856707c0ce12033092b75e0c192510706fca23c3eabc9b2e7d07ee8fd4d678e88a68fbf441cadfce72e8fba1503b510c45518affb203ef8915c7ed287f9340cb838091f81c4c4fabc80af056bc9358ee6895be3603aa8408f37cd3018a107e8fecff5bd08dda9019f0e758ce9cfcf8240010000066c17a95a88950d5cfe041ba8e41af6b1cbfc75ad5ec"], 0xe4, 0x800)
msgrcv(0x0, 0x0, 0x0, 0x2, 0x0)
msgctl$IPC_RMID(0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

4.552762454s ago: executing program 2 (id=104):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000440)=',*:$*,[\x00', &(0x7f0000000480)='wlan0\x00', 0x0)

4.522889732s ago: executing program 3 (id=105):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000dcffffff00000000000000008500000036000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.387400997s ago: executing program 1 (id=106):
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$tipc(0x1e, 0x0, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=@udp}, 0x20)
bind$tipc(r0, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4010744d, 0x0)
r1 = socket$inet(0x2, 0x2, 0x1)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x3f, &(0x7f0000000300), 0x4e}}], 0x1, 0x0, 0x0)

4.344622321s ago: executing program 4 (id=107):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x21, 0x0, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)

3.974367077s ago: executing program 3 (id=108):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$can_raw(0x1d, 0x3, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_user\x00', 0x275a, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)='%pS    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000140), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@map=0x1}, 0x20)

3.808985089s ago: executing program 1 (id=109):
socket$inet_sctp(0x2, 0x0, 0x84)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f00)=ANY=[@ANYBLOB="200000005e00250e00000000000000000c000080eec47c8e670527ab04000180"], 0x20}], 0x1}, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})

3.782260718s ago: executing program 4 (id=110):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=ANY=[@ANYBLOB="640100001000010000000000feff0000ac1414aa000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff000000000000000000000000000000006c000000fe8000000000000000000000080000bb0000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c61746500"/236], 0x164}}, 0x0)

3.473198102s ago: executing program 3 (id=111):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14"], 0x7c}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9b000/0x2000)=nil})
r3 = dup(r2)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="449fa00908c01f0894adebc3816a1b4970f0779780c263bb97186b6b1301e73c23aaa78e97ca5fa6ff021a3bf1c3fd08d604e470da872a48fdfc225965a9bb39f7db7fab9000d49a57c0efc3910875213403c32873b8840b315068a0819380ee2a91506a05e07606edc2c1b6bfe9fad30e8ad721c9df73eb8c4a2dd07a99d2947392a5ac7b74a497aefdf5f6090c2da417ed248ede20de39170c44e95ac1a499ea331590eaf1d0a1388a8085805069a0b275", 0xb2}], 0x1, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0x10000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3.117618322s ago: executing program 0 (id=112):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1b, 0x1b, 0x3, [@datasec={0x1, 0x0, 0x0, 0xf, 0x1, [], "f8"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "1ba4"}]}, {0x0, [0x61]}}, 0x0, 0x37}, 0x20)
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000b00)={0xcc, r1, 0x300, 0x70bd25, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0xff}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xd}, {0x6, 0x16, 0x6}, {0x5}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8081}, 0x800)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@ifindex, 0xffffffffffffffff, 0x1b, 0x0, 0x0, @prog_id=0xffffffffffffffff}, 0x20)
socket$inet(0x10, 0x3, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'hsr0\x00'})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.036712969s ago: executing program 4 (id=113):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4}, 0x6)
ioctl$AUTOFS_IOC_CATATONIC(r2, 0x400443c8, 0x20000002)

2.596718019s ago: executing program 3 (id=114):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000100)='kfree\x00', r0}, 0x10)
close(0xffffffffffffffff)

2.438479842s ago: executing program 0 (id=115):
r0 = socket$inet(0x2, 0x802, 0x1)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000200)=0x6, 0x4)
write(r0, &(0x7f0000000080)="08008edf773c8000", 0xfd)
readv(r0, &(0x7f0000002740)=[{&(0x7f0000000100)=""/222, 0xde}], 0x1)

2.362848256s ago: executing program 1 (id=116):
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file0\x00', 0x42, 0x0)
move_mount(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', r0, &(0x7f0000001200)='./file1\x00', 0x110)
socket$inet6(0xa, 0x4, 0x3a)
socket$packet(0x11, 0x2, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0}, 0x90)
socket$key(0xf, 0x3, 0x2)
r1 = msgget$private(0x0, 0x0)
msgget(0x2, 0x4c)
socket$nl_xfrm(0x10, 0x3, 0x6)
msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000440)=""/185)
msgget$private(0x0, 0x0)
msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000100)=""/10)
msgrcv(0x0, &(0x7f00000005c0), 0x8, 0x1, 0x3000)
msgrcv(r1, 0x0, 0x0, 0x0, 0x3000)
msgsnd(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="03000000000000003e5fa38cf76d0d443a94d603accf82b4bad6a884b34aa0fa9a1cda54fa6a67d5a985310ab3ec851c3933f745d922fc58e2d6b1d34d9df8b0df2c642390a3c609f0c25f9bdac853928064f9cd49ac08d2b34a856707c0ce12033092b75e0c192510706fca23c3eabc9b2e7d07ee8fd4d678e88a68fbf441cadfce72e8fba1503b510c45518affb203ef8915c7ed287f9340cb838091f81c4c4fabc80af056bc9358ee6895be3603aa8408f37cd3018a107e8fecff5bd08dda9019f0e758ce9cfcf8240010000066c17a95a88950d5cfe041ba8e41af6b1cbfc75ad5ec"], 0xe4, 0x800)
msgrcv(0x0, 0x0, 0x0, 0x2, 0x0)
msgctl$IPC_RMID(0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

1.991569586s ago: executing program 0 (id=117):
syz_emit_ethernet(0x94, &(0x7f00000003c0)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "66f014", 0x5e, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d"}, {0x0, 0x2, "fe906d26efe39393fe08f73eabc5"}]}}}}}}, 0x0)

1.761373061s ago: executing program 4 (id=118):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000680)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x0, @broadcast}})
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x0, @private}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)='batadv_slave_1\x00'})
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0)

1.714208819s ago: executing program 3 (id=119):
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$tipc(0x1e, 0x0, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=@udp}, 0x20)
bind$tipc(r0, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4010744d, 0x0)
r1 = socket$inet(0x2, 0x2, 0x1)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x3f, &(0x7f0000000300), 0x4e}}], 0x1, 0x0, 0x0)

1.505883037s ago: executing program 0 (id=120):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x21, 0x0, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)

1.193666084s ago: executing program 4 (id=121):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$can_raw(0x1d, 0x3, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_user\x00', 0x275a, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)='%pS    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000140), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@map=0x1}, 0x20)

611.912545ms ago: executing program 0 (id=123):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=ANY=[@ANYBLOB="640100001000010000000000feff0000ac1414aa000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff000000000000000000000000000000006c000000fe8000000000000000000000080000bb0000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c61746500"/236], 0x164}}, 0x0)

583.251944ms ago: executing program 1 (id=124):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0500000000000109022400010000000009040001090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x22, 0x20, {[@main=@item_4={0x3, 0x0, 0x0, "b0423536"}, @global, @global=@item_4, @local=@item_4={0x3, 0x2, 0x2, "849b9173"}, @local=@item_4={0x3, 0x2, 0x3, "00001800"}, @global=@item_012={0x1, 0x1, 0x0, "1a"}, @local=@item_012={0x1, 0x2, 0x2, 'j'}, @local=@item_4={0x3, 0x2, 0x0, "dc3e0803"}, @global=@item_012={0x1, 0x1, 0x0, "a7"}]}}, 0x0}, 0x0)

482.004092ms ago: executing program 4 (id=125):
sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000bc0)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001"], 0x90)

366.094939ms ago: executing program 3 (id=126):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x5, 0x4, 0xadd, 0x0, r0}, 0x48)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x700, 0x10, 0x8000, 0x7, {{0x15, 0x4, 0x0, 0x6, 0x54, 0x67, 0x0, 0x7, 0x2f, 0x0, @remote, @remote, {[@generic={0x44, 0x4, "f3f5"}, @timestamp_prespec={0x44, 0x3c, 0x54, 0x3, 0x7, [{@private=0xa010102, 0x8001}, {@empty, 0x3}, {@local, 0x9b}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x2}, {@remote, 0x9ee}, {@broadcast, 0x6521}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1c}]}]}}}}})
getuid()
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@empty, @in6=@remote}}, {{@in=@loopback}, 0x0, @in6=@private2}}, &(0x7f00000003c0)=0xe8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x4}, 0x10)
close(r1)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080100000000000000f8ff00000000bfa20000000000000702000004000000b703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000d1", @ANYRES16, @ANYBLOB], 0x14}}, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00'})
r3 = socket(0x1d, 0x2, 0x6)
bind$unix(r3, &(0x7f00000008c0)=@file={0x1d, './file0\x00'}, 0x6e)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
readv(r4, &(0x7f0000000380)=[{&(0x7f0000000200)=""/77, 0x4d}], 0x1)
socket$nl_rdma(0x10, 0x3, 0x14)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r7 = socket$inet(0x2, 0x3, 0x4)
socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'})
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x80, 0x30, 0xb, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @dev}}, @TCA_CT_NAT_PORT_MIN={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0)

0s ago: executing program 0 (id=127):
r0 = socket$inet(0x2, 0x802, 0x1)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000200)=0x6, 0x4)
write(r0, &(0x7f0000000080)="08008edf773c8000", 0xfd)
readv(r0, &(0x7f0000002740)=[{&(0x7f0000000100)=""/222, 0xde}], 0x1)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.149' (ED25519) to the list of known hosts.
[  148.278676][ T5163] cgroup: Unknown subsys name 'net'
[  148.433010][ T5163] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[  157.593274][ T1247] ieee802154 phy0 wpan0: encryption failed: -22
[  157.599935][ T1247] ieee802154 phy1 wpan1: encryption failed: -22
[  192.817789][ T5163] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  197.631825][ T5188] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  197.652010][ T5188] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  197.662594][ T5197] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  197.671630][ T5197] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  197.680095][ T5197] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  197.688814][ T5188] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  197.697252][ T5199] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  197.706127][ T5188] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  197.715024][ T5197] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  197.728916][ T5197] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  197.755492][ T5201] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  197.764846][ T5197] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  197.775459][ T5197] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  197.777465][ T5202] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  197.784562][ T5197] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  197.795602][ T5201] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  197.805855][ T5202] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  197.810653][ T5197] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  197.814458][ T5201] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  197.820800][ T5199] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  197.829072][ T5202] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  197.839559][ T5197] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  197.849121][ T5201] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  197.852009][ T5197] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  197.858166][ T5202] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  197.874951][ T5201] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  197.889553][ T5202] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  197.898712][ T5201] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  197.908641][ T5201] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  197.919464][ T5197] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  199.089648][ T5196] chnl_net:caif_netlink_parms(): no params data found
[  199.301698][ T5185] chnl_net:caif_netlink_parms(): no params data found
[  199.637692][ T5184] chnl_net:caif_netlink_parms(): no params data found
[  199.706851][ T5183] chnl_net:caif_netlink_parms(): no params data found
[  199.901775][ T5192] Bluetooth: hci1: command tx timeout
[  199.927748][ T5187] chnl_net:caif_netlink_parms(): no params data found
[  199.980703][ T5192] Bluetooth: hci2: command tx timeout
[  199.981056][ T5197] Bluetooth: hci4: command tx timeout
[  199.986236][ T5192] Bluetooth: hci0: command tx timeout
[  199.993967][ T5188] Bluetooth: hci3: command tx timeout
[  200.277899][ T5196] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.285713][ T5196] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.293580][ T5196] bridge_slave_0: entered allmulticast mode
[  200.302536][ T5196] bridge_slave_0: entered promiscuous mode
[  200.374301][ T5196] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.383247][ T5196] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.391218][ T5196] bridge_slave_1: entered allmulticast mode
[  200.400174][ T5196] bridge_slave_1: entered promiscuous mode
[  200.588241][ T5185] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.596419][ T5185] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.604277][ T5185] bridge_slave_0: entered allmulticast mode
[  200.613242][ T5185] bridge_slave_0: entered promiscuous mode
[  200.745358][ T5185] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.756156][ T5185] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.767507][ T5185] bridge_slave_1: entered allmulticast mode
[  200.776503][ T5185] bridge_slave_1: entered promiscuous mode
[  200.794664][ T5196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  200.878864][ T5196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  200.998400][ T5183] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.006239][ T5183] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.014153][ T5183] bridge_slave_0: entered allmulticast mode
[  201.023084][ T5183] bridge_slave_0: entered promiscuous mode
[  201.081236][ T5185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  201.096229][ T5184] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.104240][ T5184] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.112032][ T5184] bridge_slave_0: entered allmulticast mode
[  201.119933][ T5184] bridge_slave_0: entered promiscuous mode
[  201.131716][ T5183] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.139386][ T5183] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.147224][ T5183] bridge_slave_1: entered allmulticast mode
[  201.156204][ T5183] bridge_slave_1: entered promiscuous mode
[  201.226949][ T5185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  201.236906][ T5184] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.244984][ T5184] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.252844][ T5184] bridge_slave_1: entered allmulticast mode
[  201.263990][ T5184] bridge_slave_1: entered promiscuous mode
[  201.357966][ T5196] team0: Port device team_slave_0 added
[  201.382214][ T5183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  201.522463][ T5187] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.530179][ T5187] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.538100][ T5187] bridge_slave_0: entered allmulticast mode
[  201.546944][ T5187] bridge_slave_0: entered promiscuous mode
[  201.674749][ T5196] team0: Port device team_slave_1 added
[  201.696890][ T5183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  201.710004][ T5187] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.718020][ T5187] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.725887][ T5187] bridge_slave_1: entered allmulticast mode
[  201.734842][ T5187] bridge_slave_1: entered promiscuous mode
[  201.823797][ T5184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  201.952794][ T5185] team0: Port device team_slave_0 added
[  201.968827][ T5187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  201.989038][ T5184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  201.999014][ T5197] Bluetooth: hci1: command tx timeout
[  202.006021][ T5187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  202.061213][ T5197] Bluetooth: hci4: command tx timeout
[  202.065892][ T5188] Bluetooth: hci3: command tx timeout
[  202.071177][ T5197] Bluetooth: hci0: command tx timeout
[  202.072409][ T5186] Bluetooth: hci2: command tx timeout
[  202.097442][ T5183] team0: Port device team_slave_0 added
[  202.111517][ T5185] team0: Port device team_slave_1 added
[  202.125102][ T5183] team0: Port device team_slave_1 added
[  202.223705][ T5196] batman_adv: batadv0: Adding interface: batadv_slave_0
[  202.231094][ T5196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.257541][ T5196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  202.400086][ T5187] team0: Port device team_slave_0 added
[  202.409352][ T5196] batman_adv: batadv0: Adding interface: batadv_slave_1
[  202.417259][ T5196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.444250][ T5196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  202.458038][ T5183] batman_adv: batadv0: Adding interface: batadv_slave_0
[  202.465390][ T5183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.491662][ T5183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  202.508267][ T5183] batman_adv: batadv0: Adding interface: batadv_slave_1
[  202.515792][ T5183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.542199][ T5183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  202.585092][ T5184] team0: Port device team_slave_0 added
[  202.594298][ T5185] batman_adv: batadv0: Adding interface: batadv_slave_0
[  202.601564][ T5185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.627979][ T5185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  202.651710][ T5187] team0: Port device team_slave_1 added
[  202.661116][ T5185] batman_adv: batadv0: Adding interface: batadv_slave_1
[  202.668318][ T5185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.694705][ T5185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  202.742513][ T5184] team0: Port device team_slave_1 added
[  202.832483][ T5187] batman_adv: batadv0: Adding interface: batadv_slave_0
[  202.839646][ T5187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.866261][ T5187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  202.920901][ T5187] batman_adv: batadv0: Adding interface: batadv_slave_1
[  202.928047][ T5187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.954508][ T5187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  203.032681][ T5184] batman_adv: batadv0: Adding interface: batadv_slave_0
[  203.039851][ T5184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  203.066279][ T5184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  203.182941][ T5184] batman_adv: batadv0: Adding interface: batadv_slave_1
[  203.190092][ T5184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  203.217675][ T5184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  203.257635][ T5196] hsr_slave_0: entered promiscuous mode
[  203.268784][ T5196] hsr_slave_1: entered promiscuous mode
[  203.326607][ T5183] hsr_slave_0: entered promiscuous mode
[  203.336976][ T5183] hsr_slave_1: entered promiscuous mode
[  203.346192][ T5183] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  203.354415][ T5183] Cannot create hsr debugfs directory
[  203.505801][ T5185] hsr_slave_0: entered promiscuous mode
[  203.515083][ T5185] hsr_slave_1: entered promiscuous mode
[  203.524546][ T5185] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  203.532507][ T5185] Cannot create hsr debugfs directory
[  203.590747][ T5187] hsr_slave_0: entered promiscuous mode
[  203.599252][ T5187] hsr_slave_1: entered promiscuous mode
[  203.607562][ T5187] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  203.615584][ T5187] Cannot create hsr debugfs directory
[  203.821022][ T5184] hsr_slave_0: entered promiscuous mode
[  203.831332][ T5184] hsr_slave_1: entered promiscuous mode
[  203.839705][ T5184] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  203.847643][ T5184] Cannot create hsr debugfs directory
[  204.076921][ T5188] Bluetooth: hci1: command tx timeout
[  204.146606][ T5188] Bluetooth: hci0: command tx timeout
[  204.159577][ T5186] Bluetooth: hci3: command tx timeout
[  204.165498][ T5186] Bluetooth: hci4: command tx timeout
[  204.171190][ T5186] Bluetooth: hci2: command tx timeout
[  204.906452][ T5196] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  204.978416][ T5196] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  205.008785][ T5196] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  205.039458][ T5196] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  205.073325][ T5183] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  205.155401][ T5183] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  205.199745][ T5183] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  205.240594][ T5183] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  205.277703][ T5185] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  205.316705][ T5185] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  205.371115][ T5185] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  205.447871][ T5185] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  205.626075][ T5187] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  205.716522][ T5187] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  205.781881][ T5187] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  205.829512][ T5184] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  205.853282][ T5184] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  205.875846][ T5187] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  205.936261][ T5184] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  206.007427][ T5184] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  206.181843][ T5188] Bluetooth: hci1: command tx timeout
[  206.226003][ T5188] Bluetooth: hci2: command tx timeout
[  206.232101][ T5188] Bluetooth: hci4: command tx timeout
[  206.237698][ T5188] Bluetooth: hci3: command tx timeout
[  206.243891][ T5188] Bluetooth: hci0: command tx timeout
[  206.422184][ T5196] 8021q: adding VLAN 0 to HW filter on device bond0
[  206.443416][ T5183] 8021q: adding VLAN 0 to HW filter on device bond0
[  206.598889][ T5196] 8021q: adding VLAN 0 to HW filter on device team0
[  206.711533][ T5183] 8021q: adding VLAN 0 to HW filter on device team0
[  206.744326][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.752126][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[  206.875251][   T44] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.883028][   T44] bridge0: port 2(bridge_slave_1) entered forwarding state
[  206.946075][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.953942][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[  207.073484][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.081262][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[  207.156491][ T5185] 8021q: adding VLAN 0 to HW filter on device bond0
[  207.246330][ T5187] 8021q: adding VLAN 0 to HW filter on device bond0
[  207.524470][ T5185] 8021q: adding VLAN 0 to HW filter on device team0
[  207.583332][ T5187] 8021q: adding VLAN 0 to HW filter on device team0
[  207.676455][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.684455][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[  207.817280][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.825081][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[  207.842875][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.850836][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[  207.872856][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.880697][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[  207.906585][ T5184] 8021q: adding VLAN 0 to HW filter on device bond0
[  208.148104][ T5184] 8021q: adding VLAN 0 to HW filter on device team0
[  208.226398][ T5185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  208.266569][ T5249] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.274314][ T5249] bridge0: port 1(bridge_slave_0) entered forwarding state
[  208.525211][ T5249] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.533040][ T5249] bridge0: port 2(bridge_slave_1) entered forwarding state
[  208.746332][ T5184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  208.757431][ T5184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  209.548473][ T5196] 8021q: adding VLAN 0 to HW filter on device batadv0
[  209.659707][ T5183] 8021q: adding VLAN 0 to HW filter on device batadv0
[  210.148893][ T5196] veth0_vlan: entered promiscuous mode
[  210.276183][ T5185] 8021q: adding VLAN 0 to HW filter on device batadv0
[  210.289815][ T5183] veth0_vlan: entered promiscuous mode
[  210.350000][ T5196] veth1_vlan: entered promiscuous mode
[  210.372859][ T5183] veth1_vlan: entered promiscuous mode
[  210.658021][ T5187] 8021q: adding VLAN 0 to HW filter on device batadv0
[  210.707569][ T5183] veth0_macvtap: entered promiscuous mode
[  210.788595][ T5183] veth1_macvtap: entered promiscuous mode
[  210.882621][ T5196] veth0_macvtap: entered promiscuous mode
[  210.906722][ T5185] veth0_vlan: entered promiscuous mode
[  210.972709][ T5196] veth1_macvtap: entered promiscuous mode
[  210.996705][ T5184] 8021q: adding VLAN 0 to HW filter on device batadv0
[  211.038860][ T5185] veth1_vlan: entered promiscuous mode
[  211.105394][ T5183] batman_adv: batadv0: Interface activated: batadv_slave_0
[  211.191239][ T5183] batman_adv: batadv0: Interface activated: batadv_slave_1
[  211.255469][ T5196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  211.270234][ T5196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.285256][ T5196] batman_adv: batadv0: Interface activated: batadv_slave_0
[  211.349909][ T5183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  211.359965][ T5183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  211.369240][ T5183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  211.378517][ T5183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  211.431652][ T5196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  211.442463][ T5196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.457606][ T5196] batman_adv: batadv0: Interface activated: batadv_slave_1
[  211.621942][ T5185] veth0_macvtap: entered promiscuous mode
[  211.685083][ T5196] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  211.694715][ T5196] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  211.703982][ T5196] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  211.713139][ T5196] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  211.735325][ T5184] veth0_vlan: entered promiscuous mode
[  211.768905][ T5185] veth1_macvtap: entered promiscuous mode
[  211.829974][ T5184] veth1_vlan: entered promiscuous mode
[  211.928362][ T5185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  211.939674][ T5185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.950864][ T5185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  211.961589][ T5185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.976369][ T5185] batman_adv: batadv0: Interface activated: batadv_slave_0
[  212.172706][ T5184] veth0_macvtap: entered promiscuous mode
[  212.284452][ T5185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  212.300562][ T5185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.311693][ T5185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  212.322455][ T5185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.337845][ T5185] batman_adv: batadv0: Interface activated: batadv_slave_1
[  212.352040][ T5184] veth1_macvtap: entered promiscuous mode
[  212.514504][ T5185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  212.523670][ T5185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  212.532887][ T5185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  212.545096][ T5185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  212.588821][ T5184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  212.601286][ T5184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.612158][ T5184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  212.622947][ T5184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.633129][ T5184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  212.643904][ T5184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.658808][ T5184] batman_adv: batadv0: Interface activated: batadv_slave_0
[  212.930030][ T5184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  212.946047][ T5184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.960859][ T5184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  212.971751][ T5184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.981834][ T5184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  212.992630][ T5184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.007623][ T5184] batman_adv: batadv0: Interface activated: batadv_slave_1
[  213.082812][ T5184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  213.094578][ T5184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  213.108021][ T5184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  213.118682][ T5184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  213.456871][ T5187] veth0_vlan: entered promiscuous mode
[  213.578745][ T5187] veth1_vlan: entered promiscuous mode
[  213.972239][ T5187] veth0_macvtap: entered promiscuous mode
[  214.095073][ T5187] veth1_macvtap: entered promiscuous mode
[  214.317134][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.329723][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.340059][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.351303][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.361440][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.374596][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.386370][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.397914][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.413199][ T5187] batman_adv: batadv0: Interface activated: batadv_slave_0
[  214.456632][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  214.469597][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.481081][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  214.491941][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.502044][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  214.512954][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.523075][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  214.533913][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.549712][ T5187] batman_adv: batadv0: Interface activated: batadv_slave_1
[  214.648081][ T5187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  214.658801][ T5187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  214.669444][ T5187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  214.679104][ T5187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  218.069177][ T4363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  218.078497][ T4363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  218.314357][ T3348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  218.322537][ T3348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  218.581739][ T3262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  218.589871][ T3262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  218.819887][ T3262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  218.828180][ T3262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.042515][ T1247] ieee802154 phy0 wpan0: encryption failed: -22
[  219.049298][ T1247] ieee802154 phy1 wpan1: encryption failed: -22
[  219.372411][  T970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.380932][  T970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.561292][  T970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.569346][  T970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.739946][  T970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.749618][  T970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.774967][ T4363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.783225][ T4363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.879280][ T5376] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  220.726541][   T44] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  220.964861][   T44] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  220.981394][   T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  220.994270][   T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  221.005794][   T44] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  221.019153][   T44] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  221.028597][   T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.088056][   T44] usb 2-1: config 0 descriptor??
[  221.096538][ T5384] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  221.456448][ T4363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  221.465066][ T4363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  221.745771][ T3167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  221.754206][ T3167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  221.913052][   T44] usbhid 2-1:0.0: can't add hid device: -71
[  221.919806][   T44] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  221.967077][   T44] usb 2-1: USB disconnect, device number 2
[  221.999746][ T5402] netlink: 'syz.3.13': attribute type 4 has an invalid length.
[  222.126391][ T5402] netlink: 'syz.3.13': attribute type 4 has an invalid length.
[  222.314897][ T5402] netlink: 68 bytes leftover after parsing attributes in process `syz.3.13'.
[  222.447312][ T5407] Bluetooth: MGMT ver 1.23
[  223.657183][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888042365e00: rx timeout, send abort
[  224.165841][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888042365e00: abort rx timeout. Force session deactivation
[  224.948785][ T5188] Bluetooth: hci0: unexpected subevent 0x01 length: 78 > 18
[  225.392013][ T5446] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  225.852103][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  225.862143][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  225.881318][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  225.892876][    T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!!
[  226.076869][    T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!!
[  226.193400][    T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!!
[  226.989426][ T5472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.38'.
[  227.731086][   T25] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  228.000747][   T25] usb 5-1: New USB device found, idVendor=0baf, idProduct=00f5, bcdDevice=df.c2
[  228.010290][   T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.018758][   T25] usb 5-1: Product: syz
[  228.023327][   T25] usb 5-1: Manufacturer: syz
[  228.028152][   T25] usb 5-1: SerialNumber: syz
[  228.110006][   T25] usb 5-1: config 0 descriptor??
[  228.229027][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888042d17600: rx timeout, send abort
[  228.393220][   T25] usb 5-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF5) Rev (0XDFC2): Eagle I
[  228.738009][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888042d17600: abort rx timeout. Force session deactivation
[  228.856588][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  228.901187][   T25] usb 5-1: [UEAGLE-ATM] interface 1 not found
[  228.907638][   T25] ueagle-atm 5-1:0.0: usbatm_usb_probe: bind failed: -19!
[  228.975554][   T25] usb 5-1: USB disconnect, device number 2
[  229.051710][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  229.188890][   T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  229.411235][   T25] usb 5-1: Using ep0 maxpacket: 8
[  229.471038][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  229.479607][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  229.492708][   T25] usb 5-1: New USB device found, idVendor=0baf, idProduct=00f5, bcdDevice=df.c2
[  229.503613][   T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.512059][   T25] usb 5-1: Product: syz
[  229.516431][   T25] usb 5-1: Manufacturer: syz
[  229.521338][   T25] usb 5-1: SerialNumber: syz
[  229.623467][   T25] usb 5-1: config 0 descriptor??
[  229.903793][   T25] usb 5-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF5) Rev (0XDFC2): Eagle I
[  230.010675][ T5513] nbd0: detected capacity change from 0 to 6
[  230.170239][ T5520] block nbd0: shutting down sockets
[  230.211057][    C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  230.220687][    C0] Buffer I/O error on dev nbd0, logical block 0, async page read
[  230.229636][ T5519] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  230.239420][ T5519] Buffer I/O error on dev nbd0, logical block 0, async page read
[  230.248346][ T5519] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  230.257809][ T5519] Buffer I/O error on dev nbd0, logical block 0, async page read
[  230.266206][ T5519] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  230.275769][ T5519] Buffer I/O error on dev nbd0, logical block 0, async page read
[  230.287332][ T5519] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  230.298149][ T5519] Buffer I/O error on dev nbd0, logical block 0, async page read
[  230.306338][ T5519] ldm_validate_partition_table(): Disk read failed.
[  230.313454][ T5519] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  230.323004][ T5519] Buffer I/O error on dev nbd0, logical block 0, async page read
[  230.331391][ T5519] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  230.340929][ T5519] Buffer I/O error on dev nbd0, logical block 0, async page read
[  230.349356][ T5519] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  230.358890][ T5519] Buffer I/O error on dev nbd0, logical block 0, async page read
[  230.367207][ T5519] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  230.376853][ T5519] Buffer I/O error on dev nbd0, logical block 0, async page read
[  230.382507][ T5523] netlink: 44 bytes leftover after parsing attributes in process `syz.2.58'.
[  230.384933][ T5519] Dev nbd0: unable to read RDB block 0
[  230.404704][ T5519] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  230.414155][ T5519] Buffer I/O error on dev nbd0, logical block 0, async page read
[  230.422709][ T5519]  nbd0: unable to read partition table
[  230.438458][ T5519] nbd0: partition table beyond EOD, truncated
[  230.484446][ T5360] ldm_validate_partition_table(): Disk read failed.
[  230.497814][ T5360] Dev nbd0: unable to read RDB block 0
[  230.505744][ T5360]  nbd0: unable to read partition table
[  230.608699][ T5360] nbd0: partition table beyond EOD, truncated
[  230.637628][ T5360] ldm_validate_partition_table(): Disk read failed.
[  230.645343][ T5360] Dev nbd0: unable to read RDB block 0
[  230.651726][ T5360]  nbd0: unable to read partition table
[  230.690701][ T5360] nbd0: partition table beyond EOD, truncated
[  230.805063][   T25] usb 5-1: [UEAGLE-ATM] interface 1 not found
[  230.813946][   T25] ueagle-atm 5-1:0.0: usbatm_usb_probe: bind failed: -19!
[  230.924796][   T25] usb 5-1: USB disconnect, device number 3
[  231.381297][   T29] audit: type=1326 audit(1721993831.575:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.1.62" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f350cd77299 code=0x0
[  231.912407][ T1502] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  232.134018][ T1502] usb 1-1: Using ep0 maxpacket: 16
[  232.159733][ T1502] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8
[  232.193681][ T1502] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  232.203706][ T1502] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.212306][ T1502] usb 1-1: Product: syz
[  232.216702][ T1502] usb 1-1: Manufacturer: syz
[  232.221862][ T1502] usb 1-1: SerialNumber: syz
[  232.256370][ T1502] usb 1-1: config 0 descriptor??
[  232.277725][ T1502] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  232.288604][ T1502] usb 1-1: Detected FT232R
[  232.428032][    C0] hrtimer: interrupt took 226354 ns
[  232.553106][ T1502] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  232.575249][ T1502] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  232.601529][ T1502] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71
[  232.625362][ T1502] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  232.694914][ T1502] usb 1-1: USB disconnect, device number 2
[  232.773514][ T1502] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  232.785981][ T1502] ftdi_sio 1-1:0.0: device disconnected
[  233.211818][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888042d1ac00: rx timeout, send abort
[  233.631115][ T5554] nbd0: detected capacity change from 0 to 6
[  233.708693][ T5559] netlink: 44 bytes leftover after parsing attributes in process `syz.3.71'.
[  233.720851][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888042d1ac00: abort rx timeout. Force session deactivation
[  233.803000][ T5561] block nbd0: shutting down sockets
[  233.816565][ T5396] ldm_validate_partition_table(): Disk read failed.
[  233.824424][ T5396] Dev nbd0: unable to read RDB block 0
[  233.830998][ T5396]  nbd0: unable to read partition table
[  233.837610][ T5396] nbd0: partition table beyond EOD, truncated
[  233.848960][ T5557] ldm_validate_partition_table(): Disk read failed.
[  233.856816][ T5557] Dev nbd0: unable to read RDB block 0
[  233.863316][ T5557]  nbd0: unable to read partition table
[  233.884348][ T5557] nbd0: partition table beyond EOD, truncated
[  233.894855][ T5396] ldm_validate_partition_table(): Disk read failed.
[  233.902583][ T5396] Dev nbd0: unable to read RDB block 0
[  233.908873][ T5396]  nbd0: unable to read partition table
[  233.957660][ T5396] nbd0: partition table beyond EOD, truncated
[  234.774505][   T29] audit: type=1326 audit(1721993834.945:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5571 comm="syz.4.77" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd724d77299 code=0x0
[  235.807161][ T5578] Bluetooth: Found 0 CAPI controller(s) on device 10:aa:aa:aa:aa:aa
[  235.865429][ T5588] netlink: 44 bytes leftover after parsing attributes in process `syz.3.83'.
[  236.649294][ T5598] loop3: detected capacity change from 0 to 2048
[  236.723956][ T5598] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  236.796615][ T5598] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  236.804628][ T5598] UDF-fs: Scanning with blocksize 512 failed
[  236.905367][ T5598] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  237.321114][ T5598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.87'.
[  238.438675][ T5616] netlink: 44 bytes leftover after parsing attributes in process `syz.1.97'.
[  238.680021][   T29] audit: type=1326 audit(1721993838.845:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5618 comm="syz.2.94" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e89b77299 code=0x0
[  239.140839][ T5614] Bluetooth: Found 0 CAPI controller(s) on device 10:aa:aa:aa:aa:aa
[  240.190135][ T5637] loop0: detected capacity change from 0 to 2048
[  240.269420][ T5637] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  240.301321][ T5637] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  240.309212][ T5637] UDF-fs: Scanning with blocksize 512 failed
[  240.406193][ T5637] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  240.926768][ T5637] netlink: 900 bytes leftover after parsing attributes in process `syz.0.102'.
[  241.011637][ T5654] netlink: 44 bytes leftover after parsing attributes in process `syz.4.110'.
[  241.557272][ T5661] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  242.037590][   T29] audit: type=1326 audit(1721993842.185:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.3.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7804177299 code=0x7ffc0000
[  242.064082][   T29] audit: type=1326 audit(1721993842.185:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.3.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7804177299 code=0x7ffc0000
[  242.092141][   T29] audit: type=1326 audit(1721993842.215:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.3.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7804177299 code=0x7ffc0000
[  242.119492][   T29] audit: type=1326 audit(1721993842.215:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.3.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7804177299 code=0x7ffc0000
[  242.142096][   T29] audit: type=1326 audit(1721993842.215:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.3.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7804177299 code=0x7ffc0000
[  242.168194][   T29] audit: type=1326 audit(1721993842.225:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.3.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7804177299 code=0x7ffc0000
[  242.191951][   T29] audit: type=1326 audit(1721993842.235:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.3.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7804177299 code=0x7ffc0000
[  242.214644][   T29] audit: type=1326 audit(1721993842.235:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.3.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7804177299 code=0x7ffc0000
[  242.237191][   T29] audit: type=1326 audit(1721993842.235:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.3.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7804177299 code=0x7ffc0000
[  242.390307][ T5663] Bluetooth: Found 0 CAPI controller(s) on device 10:aa:aa:aa:aa:aa
[  244.091376][ T5691] netlink: 44 bytes leftover after parsing attributes in process `syz.0.123'.
[  244.227419][ T1502] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  244.461855][ T5696] =====================================================
[  244.469117][ T5696] BUG: KMSAN: uninit-value in tcf_ct_flow_table_get+0x611/0x2260
[  244.469743][ T1502] usb 2-1: Using ep0 maxpacket: 16
[  244.477280][ T5696]  tcf_ct_flow_table_get+0x611/0x2260
[  244.488101][ T5696]  tcf_ct_init+0xa67/0x2890
[  244.492923][ T5696]  tcf_action_init_1+0x6cc/0xb30
[  244.498070][ T5696]  tcf_action_init+0x458/0xf00
[  244.503188][ T5696]  tc_ctl_action+0x4be/0x19d0
[  244.508106][ T5696]  rtnetlink_rcv_msg+0x12fc/0x1410
[  244.513586][ T5696]  netlink_rcv_skb+0x375/0x650
[  244.524915][ T5696]  rtnetlink_rcv+0x34/0x40
[  244.529523][ T5696]  netlink_unicast+0xf52/0x1260
[  244.533916][ T1502] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  244.536702][ T5696]  netlink_sendmsg+0x10da/0x11e0
[  244.545894][ T1502] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  244.550755][ T5696]  __sock_sendmsg+0x30f/0x380
[  244.560573][ T1502] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  244.565276][ T5696]  ____sys_sendmsg+0x877/0xb60
[  244.565385][ T5696]  ___sys_sendmsg+0x28d/0x3c0
[  244.578296][ T1502] usb 2-1: config 0 interface 0 has no altsetting 0
[  244.584677][ T5696]  __x64_sys_sendmsg+0x307/0x4a0
[  244.588032][ T1502] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00
[  244.595156][ T5696]  x64_sys_call+0x2dd6/0x3c10
[  244.599725][ T1502] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.608852][ T5696]  do_syscall_64+0xcd/0x1e0
[  244.608993][ T5696]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.609142][ T5696] 
[  244.609164][ T5696] Local variable key created at:
[  244.609196][ T5696]  tcf_ct_flow_table_get+0x4a/0x2260
[  244.609304][ T5696]  tcf_ct_init+0xa67/0x2890
[  244.669140][ T5696] 
[  244.671738][ T5696] CPU: 1 UID: 0 PID: 5696 Comm: syz.3.126 Not tainted 6.10.0-syzkaller-12562-g1722389b0d86 #0
[  244.682310][ T5696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  244.692704][ T5696] =====================================================
[  244.699758][ T5696] Disabling lock debugging due to kernel taint
[  244.710027][ T5696] Kernel panic - not syncing: kmsan.panic set ...
[  244.716603][ T5696] CPU: 1 UID: 0 PID: 5696 Comm: syz.3.126 Tainted: G    B              6.10.0-syzkaller-12562-g1722389b0d86 #0
[  244.728555][ T5696] Tainted: [B]=BAD_PAGE
[  244.732907][ T5696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  244.743120][ T5696] Call Trace:
[  244.746521][ T5696]  <TASK>
[  244.749557][ T5696]  dump_stack_lvl+0x216/0x2d0
[  244.754446][ T5696]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  244.760457][ T5696]  dump_stack+0x1e/0x30
[  244.764800][ T5696]  panic+0x4e2/0xcd0
[  244.768880][ T5696]  ? kmsan_get_metadata+0xf1/0x1c0
[  244.774216][ T5696]  kmsan_report+0x2c7/0x2d0
[  244.778933][ T5696]  ? pcpu_alloc_area+0x114e/0x12c0
[  244.784403][ T5696]  ? __msan_warning+0x95/0x120
[  244.789353][ T5696]  ? tcf_ct_flow_table_get+0x611/0x2260
[  244.795078][ T5696]  ? tcf_ct_init+0xa67/0x2890
[  244.799905][ T5696]  ? tcf_action_init_1+0x6cc/0xb30
[  244.805192][ T5696]  ? tcf_action_init+0x458/0xf00
[  244.810385][ T5696]  ? tc_ctl_action+0x4be/0x19d0
[  244.815510][ T5696]  ? rtnetlink_rcv_msg+0x12fc/0x1410
[  244.820972][ T5696]  ? netlink_rcv_skb+0x375/0x650
[  244.826082][ T5696]  ? rtnetlink_rcv+0x34/0x40
[  244.830847][ T5696]  ? netlink_unicast+0xf52/0x1260
[  244.836083][ T5696]  ? netlink_sendmsg+0x10da/0x11e0
[  244.841446][ T5696]  ? __sock_sendmsg+0x30f/0x380
[  244.846474][ T5696]  ? ____sys_sendmsg+0x877/0xb60
[  244.851565][ T5696]  ? ___sys_sendmsg+0x28d/0x3c0
[  244.856569][ T5696]  ? __x64_sys_sendmsg+0x307/0x4a0
[  244.861838][ T5696]  ? x64_sys_call+0x2dd6/0x3c10
[  244.866874][ T5696]  ? do_syscall_64+0xcd/0x1e0
[  244.871740][ T5696]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.878006][ T5696]  ? kmsan_get_metadata+0x13e/0x1c0
[  244.883426][ T5696]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  244.889940][ T5696]  ? kmsan_get_metadata+0x13e/0x1c0
[  244.895328][ T5696]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  244.901350][ T5696]  ? _raw_spin_unlock_irqrestore+0x3f/0x60
[  244.907343][ T5696]  ? kmsan_get_metadata+0x13e/0x1c0
[  244.912726][ T5696]  ? kmsan_get_metadata+0x13e/0x1c0
[  244.918197][ T5696]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  244.924226][ T5696]  ? kmsan_get_metadata+0x13e/0x1c0
[  244.929623][ T5696]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  244.935637][ T5696]  __msan_warning+0x95/0x120
[  244.940402][ T5696]  tcf_ct_flow_table_get+0x611/0x2260
[  244.945961][ T5696]  ? nf_ct_tmpl_alloc+0xbd/0x2d0
[  244.951085][ T5696]  ? kmsan_get_metadata+0x13e/0x1c0
[  244.956487][ T5696]  tcf_ct_init+0xa67/0x2890
[  244.961197][ T5696]  tcf_action_init_1+0x6cc/0xb30
[  244.966341][ T5696]  ? __pfx_tcf_ct_init+0x10/0x10
[  244.971477][ T5696]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  244.977502][ T5696]  tcf_action_init+0x458/0xf00
[  244.982463][ T5696]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  244.989060][ T5696]  tc_ctl_action+0x4be/0x19d0
[  244.993926][ T5696]  ? kmsan_get_metadata+0x13e/0x1c0
[  244.999457][ T5696]  ? __pfx_tc_ctl_action+0x10/0x10
[  245.004743][ T5696]  ? __pfx_tc_ctl_action+0x10/0x10
[  245.010463][ T5696]  rtnetlink_rcv_msg+0x12fc/0x1410
[  245.015740][ T5696]  ? kmsan_get_metadata+0x13e/0x1c0
[  245.021159][ T5696]  netlink_rcv_skb+0x375/0x650
[  245.026095][ T5696]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  245.031739][ T5696]  ? __pfx_rtnetlink_rcv+0x10/0x10
[  245.037013][ T5696]  rtnetlink_rcv+0x34/0x40
[  245.041580][ T5696]  netlink_unicast+0xf52/0x1260
[  245.046651][ T5696]  netlink_sendmsg+0x10da/0x11e0
[  245.051764][ T5696]  ? __pfx_netlink_sendmsg+0x10/0x10
[  245.057295][ T5696]  ? __pfx_netlink_sendmsg+0x10/0x10
[  245.062761][ T5696]  __sock_sendmsg+0x30f/0x380
[  245.067709][ T5696]  ____sys_sendmsg+0x877/0xb60
[  245.072653][ T5696]  ___sys_sendmsg+0x28d/0x3c0
[  245.077761][ T5696]  ? __rcu_read_unlock+0x7b/0xe0
[  245.082897][ T5696]  ? __fget_files+0x4fe/0x5d0
[  245.087751][ T5696]  ? kmsan_get_metadata+0x13e/0x1c0
[  245.093150][ T5696]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  245.099161][ T5696]  __x64_sys_sendmsg+0x307/0x4a0
[  245.104295][ T5696]  x64_sys_call+0x2dd6/0x3c10
[  245.109156][ T5696]  do_syscall_64+0xcd/0x1e0
[  245.113855][ T5696]  ? clear_bhb_loop+0x25/0x80
[  245.118680][ T5696]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.124773][ T5696] RIP: 0033:0x7f7804177299
[  245.129326][ T5696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  245.149129][ T5696] RSP: 002b:00007f7804f6e048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  245.157996][ T5696] RAX: ffffffffffffffda RBX: 00007f7804306058 RCX: 00007f7804177299
[  245.166109][ T5696] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000010
[  245.174208][ T5696] RBP: 00007f78041e48e6 R08: 0000000000000000 R09: 0000000000000000
[  245.182307][ T5696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  245.190495][ T5696] R13: 000000000000006e R14: 00007f7804306058 R15: 00007ffd6eac3d28
[  245.198619][ T5696]  </TASK>
[  245.201848][ T5696] Kernel Offset: disabled
[  245.206237][ T5696] Rebooting in 86400 seconds..