last executing test programs:

2m17.880876719s ago: executing program 4 (id=253):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002100), 0x0, 0x0)
read$FUSE(r0, 0x0, 0x0)
chdir(&(0x7f0000000040)='./file0/file0\x00')
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="050000000700000007"], 0x48)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x924400, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f00000001c0)={0x0, 'veth0\x00', 0x3}, 0x18)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @rand_addr=' \x01\x00'}, 0x1c)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0x0, 0x3, 0x0, 0x0, 0xa4}, &(0x7f0000000040)=0x20)
write$FUSE_INIT(r0, &(0x7f0000001240)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0x8}}, 0x50)

2m15.972579953s ago: executing program 4 (id=255):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x1a1)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
getresgid(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c020000020000000800"], 0x1c}}, 0x0)

2m14.971631404s ago: executing program 4 (id=258):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
bpf$ITER_CREATE(0xb, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r4, 0x0, 0x40)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff4c)
close_range(r0, 0xffffffffffffffff, 0x0)

2m11.68120774s ago: executing program 4 (id=260):
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001340)='syz0\x00', 0x200002, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001380)={0x8001, <r1=>0x0}, 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001300)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="ed9100003c200800dd", @ANYRES32=r1, @ANYBLOB, @ANYRES64], 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb9619000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r5)
sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1}]}, 0x2c}}, 0x64000)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0, 0x10}], 0x1, 0xd, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="b601000000000000bd110000000000008510000002000000850000007600000095000000000000009500a5050000000077d8f3b4000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d75357f21699cdc6751dfb265a0e3ccae669e173a649c1cfd6587d472d64e7cc955d77578f4c35235138d5421f9453559c35da860e8ef14142b2a3e314422b854421eed734ceb1efeecb9c66854c3b3ffe1b4ce25d7c983c005c03bf3a48dfe3e26e7a23129d6606fd28a697a9d552af6d9a9df2c3af333e2008e11bbec0727cb3f647535deb6277f5696833a71011a7d06602e2fd5234712596b696418f163d1a13ed38a682f87925bfa753f631cd027edd68149ee99eebc6f7d6dd4ae59af7588c8e1f4efab57644ccb1973d7879b70a70001040000000000000000d7900a820b63278f4e9a217b98ef7042ad2a923132f208fd8289eaf8cd00000000000009d27d753a300800000000000000a5686f2fccc33e3e34c3969c5ad781302d40e97a8ad10ce0cbe17366d5ac6af2fca2360a15b80400d52040ef7b28d300747877e176fe4c4b8e40dbf260f5a9f7eee30293c1b163b795d0aef4deb851a30000f569dc8f39943f889008e1ec914faa9e6cd0b3b4b3b5db666ebeb49d6a62019d76459e70b459543c4ac42e53b4ad4c77cff373ebd95848f01864e456969cd28000170996016aceb583df5ee4dd722e8c350af489f9a900000000a0dcc36b3d7c734a9cce0439f832a20d7cbdcda5dff3ba92dd66afb9d74aa222038994dcd3e7784dbea1e51a15b0f1a040cc63177f8fafa3192fc8e5552da1a982ab8dfe31ad1a0968faa47c2069d6bf09c3aa4f0fc128cb578d99b08a150b4cc4b22f6a464c6398c952519818a44a1b223ff502df87865c276588ea478e328e8277e811b99ce1acfecaf8e2c55ccc4b8eae0a61635514e99ffd438784060f23ba74c0b30b1180d935832deb686d789ba1d436d116394534e88492a42b8bf050c719661a2dc50b3a1dcfbc871e5c27e3d7260f6fa589e40000b89db451ff994845f6b49c12e89291398bcb3c06ef1289f74e0b0e2cab592d35f82a69e7284223a171c616b1f0fee6c4711d7aecb69746064d2c096554975d605ebe646302bf3d5cf32a9a09915ae3f3d4eb96615d7b237da56cd5e9904a19e145f25b6d98eb2c019967f553b61d0e80d6913cee9f8d18469a654a239a84a85debbc02846ac5791278f18c6759e3b513a68284d2efc30587e433431b2896a3bd48020af67e9ac071b2dd6dc3b9efae4ff03558fa619aea909c7f2416e7e7da1c51ccc7e6ac27412f728dc6d80da8adf317ca863ed683897321f8c8bb5a5d953d6783b7a06353ee496bbdff418de3e53234df87756eb99e330253cf5da4aa1a9648a38f07e2d302b4165983db4f7b8972923fffa8c03c288512a3a38fbd7c816a44634f7a03fab30811b7b93257bea4369ba46024dee5e9b0b2c3d3324e9b7c1f99ab9bb3f498b1485373b79ec84a67dad4e37575dab87ce55a9a69ed856a4c4410d1242ac1bd1539094a641cc086c2c53e363beafc74ab4e9ff320373705cbf5644586ffe60d293944fa2d9dc18b55f1af5c42f27747bef1ffd0c1766f062d47d61bf9f64e6ee288fa7fc12d48da526527b9f5c318c93ec447cb8b5eee7aa8a1e85696af3dfef96657c0545c8ebd96528d9c28828e5befd80d684b03b6d153da3e3cbd3bfbf4a9375b8ad04a1d241bcb5d5505cb6cc7a44e2e24bd0b1ca4879caaff59d0ce39dc7f3fea447f4e46967855208e63ec988bd2692afefbed2b001205e4b30ee8fe417defa566a73ace8f01f7181de0ef25f1744896a3c38859e6148c42454949cd64b1a888e7fe9c2d86bb01023b6ddeb67f5eb038af3e460c771518a4126c338b0390d459361e03adf6e6b558b3651a0e33d101b5febfff82794203da18db6fcf89715c2d338f78d8b9220171b41f528f857a7cb79ca990de1208777e13faaa9b9cb9e67797b07d9eb9e909410b50c5d981d9a72aa36498b630519d1530ef0000000000000000000037fcffffffffffffff8db8379bd2044c652dff399a9f8bfa4e9c507f049d18837464276830461ee203ba51f6102d262fc9a26bc3638ecce24e65c55da6efaa462f03d0e119c963a8c7a522b59f5a7b44d018cb2648383073d9e032492cae44350bc0a85697f431392eb22cae093e85954af97d6d7b2e6e8f43353062275ad1578a431594243452a2bfb89f91d8eaac038e9e17136e7c698f73faaabb3d00000000000080014573789425c4c32da528d89356aa6d2ae6da082e756c80cf39053431080ea6cbf9997a5a0ddad0b9d12bc3f880476ab32f0feaac5f16e61f7b72b8c9082eec423c6b3eaecfdcc9ec72795e7696421c83b76c2d6bac19bc875d009679778d8ef97d7e05329649d97b0dc54bea9b650873de2d3d702690176e0b23ee5cb5e469a8d1612d611722e6200e3a297d92f8e1de98326c5ef2b89d4e2d47767cd755783e5d865e373338e96ceb8399f296c59b2d70ca27735ecaff62982616d3ac1ab041733bce119d8002a6c8a2b08b32551b2313b1a2ff41b3f04af61c69c85cb2da48215727271bac2ffdeb62d9f5dc4845f1c3f63dc806e615ee8d28d6d7f181e30807afa27f41d0364c746a65a47464db68f3c433d88dd625db35fded2c86d75af88efaf20c8b37c644b6c4e773a9589200faa553bc92f916b75ddbfa18ab73979f46947b35914286d2499a0b8c970000000000000000f4fe74e0c26ab52329bd600627b256ca44dd121ffc8dbb6e5f70cbe03efccac70375b30cc927574d254d1b46c607e8b1ca7d1511568c3ef4b6b885f4582bdcef74e5e010627fc8e4fe00000000000000000000869d9640f06b11df2971909b90133983308ea4f033de613763f32d913bcbe9dd082a6fff197a20730269e6cfd31275395833f1c2b8a50a94c30cceae2a11fe9b9b835d0da73891c0b3ce22dea6bf31e7f51808cf72f44b4455b77a778440795e152dc1b7bb0a5636aa4742ce4d331a47de5836539cdf289176527277b70c8162aaf6f9475418b478329f3565450acfaf07000000eab8cabfa97e35081967bb92a264b07e8003d2f15537e72a1e4ca5ec1e2aaaf8236ecdefbaf512c75e636b6b6f518ad20521f909b12e9bc97e408e0dc82f950d12705f35708bc862196abb27e8d7991b5273987f38c4706289ff4f6130cee76465d487a07a74452f87da2029bd3debd9870335d58d3fe1ac80574fa3ea312997ab81bc6f569ffdb10ba3f20a86d95128d13e0c778998d3b3114bfb07bd61e4bff8a5e2ce4aa572c63e09b44ca4a181bcfe4eec3ce843c65c4948169fe639a186acc2b4a96c6b8d4d2e6d53ab97bea01eab953e6e89e3af34d4ada217bc6fda0fb2095c49195d0d6f365ca80a955b9ec81240a84ef672afa369fc8e3d444ba35d0f51a0065a3b982d09dfc6874fc0d8079b185447cb8a695e132d4d613a529d9c77e2a8f7320ecf698e8a2b170fd601dc1a9767a38b10788e92d1356f6a6c1bcfb2d31b46e735db13f1be80bac1b6be04fd98610000000000000000000000000000139af5493f74751c5e2501a4936bc4a0fa516117f4ccadc692003adee0a080eba2f1059660c0ee0e9aec72d4d0fe095632e4f641b0e34c611c5b3e0ba05fa36542d40837dda323910672a9097d68398fd3539686e4288db0d6bf7cb8a1835f46dfe11865a66ef47e736dada06677a5bca133d6cbc8fe5c4557e51b006bdccd7c5f32ff1d9e8b130f77df09236870fb3de5b87b4f8acc13df534eba329b86670000000000000000b27a2616c03cdf6c009447a652bca9b325e73c0737d5b717945e4fe7a169c5e2c54fc71a4104aa7cf0f5d30e2fcd9503650edbd8a5971a9a1fde5e5df37469ae204a6e899eacc1e63034cbabc5604739881cb82604bed3e53696a0606b26b879ef232a1a038291389593d1575cb79aa8284cf01a7e1a456acab9d8d608ad69d4c4b56492af7004e7ed9d47c5db3d76a00bea7c804f3a3638408bc1636f1009b7f185f51606918eaa0ab6bef11ae3d300"], &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

2m10.737907486s ago: executing program 4 (id=264):
socket$nl_audit(0x10, 0x3, 0x9)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000500000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00'})
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_DEV_CREATE(r5, 0x5501)
ioctl$UI_DEV_SETUP(r5, 0x405c5503, 0x0)
pipe2(&(0x7f0000001040), 0x0)

2m9.760149495s ago: executing program 4 (id=268):
r0 = socket(0x2, 0x3, 0xff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
connect$l2tp(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$kcm(0x29, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0xf36}], 0x1c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4084004}, 0x10000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
getrlimit(0x4, &(0x7f0000000100))
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10)
write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe020002000000000800040001000000", 0x24)
sendto$inet(r0, &(0x7f0000000280)="12f0dda7f17f60b7c78be42301125e6cb51c467f", 0x14, 0x800, 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sigaltstack(&(0x7f0000000040)={0x0}, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00')
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf)
shmat(0xffffffffffffffff, &(0x7f0000708000/0x1000)=nil, 0x6000)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20)

1m54.703091212s ago: executing program 32 (id=268):
r0 = socket(0x2, 0x3, 0xff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
connect$l2tp(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$kcm(0x29, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0xf36}], 0x1c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4084004}, 0x10000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
getrlimit(0x4, &(0x7f0000000100))
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10)
write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe020002000000000800040001000000", 0x24)
sendto$inet(r0, &(0x7f0000000280)="12f0dda7f17f60b7c78be42301125e6cb51c467f", 0x14, 0x800, 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sigaltstack(&(0x7f0000000040)={0x0}, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00')
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf)
shmat(0xffffffffffffffff, &(0x7f0000708000/0x1000)=nil, 0x6000)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20)

7.033036511s ago: executing program 5 (id=684):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x402, 0x1, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000800)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x2000, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xa, @empty, 0x8000000}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x2)

6.206010098s ago: executing program 3 (id=686):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008400"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000a40)=ANY=[@ANYRES32, @ANYBLOB="00000000000000008fac", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000fcffffff"], 0x50)
vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x604}], 0x1, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x13, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, 0x0, 0x0, 0xf7ffff7e, 0x0, 0x0, 0x0, 0xe}, 0x94)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x9}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

5.998647665s ago: executing program 3 (id=687):
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockopt$rose(r1, 0x104, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
write$cgroup_int(r5, &(0x7f0000000040)=0x3, 0x12)

5.924013211s ago: executing program 5 (id=688):
pipe(&(0x7f0000000000))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000a40)=ANY=[@ANYBLOB="1d000000a100000002000000000000", @ANYRES32, @ANYBLOB="00000000000000008fac0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000fcffffff"], 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, 0x0, 0x0, 0xf7ffff7e, 0x0, 0x0, 0x0, 0xe}, 0x94)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

5.792688811s ago: executing program 5 (id=691):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r1 = socket$kcm(0x21, 0x2, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
bpf$ITER_CREATE(0xb, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r5, 0x0, 0x40)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
r6 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff4c)
close_range(r0, 0xffffffffffffffff, 0x0)

5.545839802s ago: executing program 2 (id=692):
socket$nl_route(0x10, 0x3, 0x0)
openat$snapshot(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002340)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000004000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
socket$key(0xf, 0x3, 0x2)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_open_dev$loop(0x0, 0x81, 0x2a82)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000000080)={[{@quota}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x37]}}]})
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r5, &(0x7f0000000300)={0x2020}, 0x2020)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000005c0)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})
r6 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000)
ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001280)={r3, 0x200, {0x2a12, 0x80010000, 0x0, 0x2, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}})

4.843504959s ago: executing program 2 (id=695):
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r0 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r0, &(0x7f0000000340)={0x2, 0xfffb, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f00000000c0)="510003000000", 0x6)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400), 0x0)
ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000080))
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000040)={0x8, 'team_slave_0\x00', {'tunl0\x00'}, 0x4})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000079100000000000006100feff0000000095"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r6}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)

4.652706744s ago: executing program 3 (id=698):
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
socket$nl_netfilter(0x10, 0x3, 0xc)

4.640823815s ago: executing program 2 (id=699):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010)
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
write(r4, &(0x7f00000001c0)="240000005800410f9c00f4f90085b3025cb1fddf08000100050100000800028001000000", 0x24)

3.988134548s ago: executing program 3 (id=703):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x11)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
sysfs$1(0x1, 0x0)
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}})
r2 = socket$inet(0x2, 0x3, 0x30)
getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, 0x0)
ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, &(0x7f0000000340))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
setfsgid(0xee01)
faccessat(0xffffffffffffff9c, 0x0, 0x0)
syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xb1ea, 0x10100, 0x3}, 0x0, &(0x7f00000001c0))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000001}]}]}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)

3.545791293s ago: executing program 0 (id=705):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0xfffffff2, 0x4)

2.656042105s ago: executing program 1 (id=706):
socket$nl_route(0x10, 0x3, 0x0)
openat$snapshot(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002340)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000004000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
socket$key(0xf, 0x3, 0x2)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_open_dev$loop(0x0, 0x81, 0x2a82)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000000080)={[{@quota}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x37]}}]})
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r5, &(0x7f0000000300)={0x2020}, 0x2020)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000005c0)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})
r6 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000)
ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001280)={r3, 0x200, {0x2a12, 0x80010000, 0x0, 0x2, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}})

2.512727677s ago: executing program 5 (id=707):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x280480, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x80002, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)

2.115120409s ago: executing program 5 (id=708):
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockopt$rose(r1, 0x104, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
write$cgroup_int(r5, &(0x7f0000000040)=0x3, 0x12)

2.008004378s ago: executing program 1 (id=709):
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000a40)=ANY=[@ANYRES32, @ANYBLOB="00000000000000008fac00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000fcffffff00"], 0x50)
vmsplice(r0, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x604}], 0x1, 0x9)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x13, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94)
ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00')
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, 0x0, 0x0, 0xf7ffff7e, 0x0, 0x0, 0x0, 0xe}, 0x94)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x9}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000cc0)={0x0, 0xf800, 0x10}, 0xc)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000d00)={0x0, 0x10000, 0x1c}, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x6, 0x5, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x97, 0x0, 0x0, 0x0, 0x7}, [@map_fd={0x18, 0x9}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x56, &(0x7f0000000b00)=""/86, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000c80)={0x5, 0x3, 0x10001, 0x80000000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d40), 0x0, 0x10, 0x3}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

2.007440188s ago: executing program 0 (id=710):
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r0 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r0, &(0x7f0000000340)={0x2, 0xfffb, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f00000000c0)="510003000000", 0x6)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400), 0x0)
ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000080))
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000040)={0x8, 'team_slave_0\x00', {'tunl0\x00'}, 0x4})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000079100000000000006100feff0000000095"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r6}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)

1.947296982s ago: executing program 0 (id=711):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008400"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000a40)=ANY=[@ANYRES32, @ANYBLOB="00000000000000008fac", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000fcffffff"], 0x50)
vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x604}], 0x1, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x13, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, 0x0, 0x0, 0xf7ffff7e, 0x0, 0x0, 0x0, 0xe}, 0x94)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x9}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

1.802742504s ago: executing program 1 (id=712):
socket$nl_route(0x10, 0x3, 0x0)
socket(0x2a, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x8001}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.748251939s ago: executing program 0 (id=713):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r1 = socket$kcm(0x21, 0x2, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
bpf$ITER_CREATE(0xb, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, 0x0, 0x0)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r5, 0x0, 0x40)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
r6 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff4c)
close_range(r0, 0xffffffffffffffff, 0x0)

1.572585863s ago: executing program 2 (id=714):
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
socket$nl_netfilter(0x10, 0x3, 0xc)

1.309288244s ago: executing program 1 (id=715):
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = syz_open_procfs(0x0, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000a40)=""/4096, 0x1000}], 0x1, 0x141, 0x0)

1.202229603s ago: executing program 0 (id=716):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)

1.11269923s ago: executing program 5 (id=717):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r1 = socket$kcm(0x21, 0x2, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
bpf$ITER_CREATE(0xb, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r5, 0x0, 0x40)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
r6 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff4c)
close_range(r0, 0xffffffffffffffff, 0x0)

1.056209354s ago: executing program 2 (id=718):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0xc0241, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0}, 0x27)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)})
bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000140)="ddac4a45", 0x4}], 0x1)
socket$kcm(0x10, 0x3, 0x10)
r3 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0), 0x4)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)='9\x00\x00\x00', 0x4}], 0x1}, 0x0)

882.386379ms ago: executing program 1 (id=719):
socket$nl_route(0x10, 0x3, 0x0)
openat$snapshot(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002340)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000004000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
socket$key(0xf, 0x3, 0x2)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000000080)={[{@quota}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x37]}}]})
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r5, &(0x7f0000000300)={0x2020}, 0x2020)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000005c0)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})
r6 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000)
ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001280)={r3, 0x200, {0x2a12, 0x80010000, 0x0, 0x2, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}})

822.386554ms ago: executing program 3 (id=720):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x280480, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x80002, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)

806.581835ms ago: executing program 0 (id=721):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xcc}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="290b0000000000001c00128009000100626f6e6400"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x4000)
unshare(0x2c060000)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff0000000080000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x59}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000440))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3, 0x0, 0x4}, 0x18)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
recvmmsg$unix(r5, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)

208.002143ms ago: executing program 1 (id=722):
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10)
vmsplice(r0, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x604}], 0x1, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00')
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, 0x0, 0x0, 0xf7ffff7e, 0x0, 0x0, 0x0, 0xe}, 0x94)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

124.12127ms ago: executing program 2 (id=723):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000a40)=ANY=[@ANYRES32, @ANYBLOB="00000000000000008fac", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000fcffffff"], 0x50)
vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x604}], 0x1, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x13, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, 0x0, 0x0, 0xf7ffff7e, 0x0, 0x0, 0x0, 0xe}, 0x94)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x9}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

0s ago: executing program 3 (id=724):
socket$netlink(0x10, 0x3, 0x9)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_tracing={0x1a, 0x22, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xe2bd}, [@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @exit, @alu={0x7, 0x0, 0xb, 0x5, 0x8, 0xffffffffffffffff, 0xffffffffffffffff}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @jmp={0x5, 0x1, 0x0, 0x9, 0x3, 0x30, 0xffffffffffffffff}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000580)='syzkaller\x00', 0x48980000, 0x98, &(0x7f0000000780)=""/152, 0x40f00, 0x12, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000940)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000980)={0x0, 0x10, 0x48, 0xaa00}, 0x10, 0x28c21, r1, 0x6, &(0x7f00000009c0)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1, r1], &(0x7f0000000a00)=[{0x3, 0x2, 0x9, 0xc}, {0x1, 0x5, 0x2, 0x9}, {0x2, 0x1, 0xc, 0xc}, {0x2, 0x5, 0xe, 0x8}, {0x3, 0x2, 0xb, 0x2}, {0x3, 0x3, 0xb, 0x1}], 0x10, 0xffffffff}, 0x94)
ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000))
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r8}, 0x18)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r7, 0x0, 0x0}, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_RATE64={0xc, 0x8, 0x4526dd370cbcddac}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r10, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r11, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c)
connect$rose(r11, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x34}, 0x0, 0x1, 0x0, 0x4, 0xfa, 0x9b0}, 0x20)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.41' (ED25519) to the list of known hosts.
[   48.856409][ T4173] cgroup: Unknown subsys name 'net'
[   48.993899][ T4173] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.260630][ T4173] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   51.545350][ T4190] chnl_net:caif_netlink_parms(): no params data found
[   51.621473][ T4194] chnl_net:caif_netlink_parms(): no params data found
[   51.630695][ T4183] chnl_net:caif_netlink_parms(): no params data found
[   51.736566][ T4189] chnl_net:caif_netlink_parms(): no params data found
[   51.750424][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.757521][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.765884][ T4190] device bridge_slave_0 entered promiscuous mode
[   51.775887][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.783007][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.790939][ T4190] device bridge_slave_1 entered promiscuous mode
[   51.821352][ T4187] chnl_net:caif_netlink_parms(): no params data found
[   51.845778][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.853447][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.861554][ T4194] device bridge_slave_0 entered promiscuous mode
[   51.869585][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.876627][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.884717][ T4194] device bridge_slave_1 entered promiscuous mode
[   51.907920][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.915065][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.922779][ T4183] device bridge_slave_0 entered promiscuous mode
[   51.941860][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   51.955772][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.962952][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.970701][ T4183] device bridge_slave_1 entered promiscuous mode
[   51.992157][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.011770][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.022869][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.067644][ T4190] team0: Port device team_slave_0 added
[   52.088451][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.107885][ T4190] team0: Port device team_slave_1 added
[   52.113753][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.121093][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.128616][ T4189] device bridge_slave_0 entered promiscuous mode
[   52.137086][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.148226][ T4194] team0: Port device team_slave_0 added
[   52.171859][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.179453][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.186971][ T4189] device bridge_slave_1 entered promiscuous mode
[   52.201700][ T4194] team0: Port device team_slave_1 added
[   52.220311][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.227244][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.253324][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.283830][ T4183] team0: Port device team_slave_0 added
[   52.289956][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.297007][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.304973][ T4187] device bridge_slave_0 entered promiscuous mode
[   52.315008][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.322384][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.348257][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.360669][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.378170][ T4183] team0: Port device team_slave_1 added
[   52.384196][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.391415][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.417909][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.432145][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.439365][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.446927][ T4187] device bridge_slave_1 entered promiscuous mode
[   52.458991][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.475514][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.482659][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.508724][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.572912][ T4189] team0: Port device team_slave_0 added
[   52.579346][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.586285][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.612232][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.630124][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.642566][ T4190] device hsr_slave_0 entered promiscuous mode
[   52.649536][ T4190] device hsr_slave_1 entered promiscuous mode
[   52.656607][ T4189] team0: Port device team_slave_1 added
[   52.662800][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.670107][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.696270][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.714781][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.755459][ T4194] device hsr_slave_0 entered promiscuous mode
[   52.762240][ T4194] device hsr_slave_1 entered promiscuous mode
[   52.769434][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   52.777087][ T4194] Cannot create hsr debugfs directory
[   52.807149][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.814124][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.840222][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.876831][ T4187] team0: Port device team_slave_0 added
[   52.883121][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.890312][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.916297][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.937780][ T4183] device hsr_slave_0 entered promiscuous mode
[   52.944428][ T4183] device hsr_slave_1 entered promiscuous mode
[   52.951098][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   52.958642][ T4183] Cannot create hsr debugfs directory
[   52.968671][ T4187] team0: Port device team_slave_1 added
[   53.027213][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.034307][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.060249][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.074447][ T4189] device hsr_slave_0 entered promiscuous mode
[   53.081259][ T4189] device hsr_slave_1 entered promiscuous mode
[   53.087587][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   53.095433][ T4189] Cannot create hsr debugfs directory
[   53.116622][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.123685][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.149683][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.234396][ T4187] device hsr_slave_0 entered promiscuous mode
[   53.241223][ T4187] device hsr_slave_1 entered promiscuous mode
[   53.247645][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   53.255467][ T4187] Cannot create hsr debugfs directory
[   53.279604][   T26] Bluetooth: hci3: command 0x0409 tx timeout
[   53.279604][ T3522] Bluetooth: hci4: command 0x0409 tx timeout
[   53.280100][   T26] Bluetooth: hci0: command 0x0409 tx timeout
[   53.285872][ T3522] Bluetooth: hci1: command 0x0409 tx timeout
[   53.307716][   T26] Bluetooth: hci2: command 0x0409 tx timeout
[   53.443975][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   53.454011][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   53.463464][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   53.472475][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   53.519545][ T4194] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   53.535137][ T4194] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   53.547507][ T4194] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   53.557121][ T4194] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   53.615411][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   53.625467][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   53.634027][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   53.653600][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   53.674401][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.717585][ T4190] 8021q: adding VLAN 0 to HW filter on device team0
[   53.730170][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   53.740587][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   53.749713][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   53.758030][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   53.781097][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   53.790284][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   53.813440][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   53.823410][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   53.832426][ T1278] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.839673][ T1278] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.847959][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   53.858193][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   53.866532][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.873569][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.882078][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   53.890891][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   53.912337][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.934979][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   53.956529][ T4194] 8021q: adding VLAN 0 to HW filter on device team0
[   53.971543][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   53.983261][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   53.992724][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   54.001867][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   54.010675][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   54.019422][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   54.027680][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   54.035659][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   54.044383][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   54.053133][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.061704][ T1278] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.068783][ T1278] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.076400][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   54.084967][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   54.094835][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   54.103071][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   54.119643][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.132209][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   54.144102][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   54.156777][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   54.166645][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.175061][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.182117][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.190540][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   54.200510][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   54.208670][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   54.216872][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   54.225270][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   54.233939][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   54.246940][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   54.256836][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.273262][  T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   54.281812][  T684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   54.303494][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.328643][ T4183] 8021q: adding VLAN 0 to HW filter on device team0
[   54.345028][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   54.353695][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   54.368191][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   54.376404][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   54.386755][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   54.395842][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   54.418975][  T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   54.427457][  T684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.437934][  T684] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.445043][  T684] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.454021][  T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   54.464641][  T684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.473904][  T684] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.480996][  T684] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.495094][  T684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   54.511710][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   54.527248][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.536942][  T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   54.556508][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.571594][  T684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   54.584934][  T684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   54.593785][  T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   54.606714][  T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   54.630911][ T4189] 8021q: adding VLAN 0 to HW filter on device team0
[   54.644651][  T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   54.677465][  T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   54.687528][  T684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   54.697278][  T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   54.707058][  T684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   54.715704][  T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   54.724204][  T684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   54.732797][  T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   54.741749][  T684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.750329][  T684] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.757346][  T684] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.766177][  T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   54.774780][  T684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.783390][  T684] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.790444][  T684] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.797905][  T684] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   54.812704][  T684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   54.829758][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.841942][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   54.855513][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   54.867577][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   54.882767][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   54.891281][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   54.899508][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   54.907970][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   54.923166][ T4187] 8021q: adding VLAN 0 to HW filter on device team0
[   54.942307][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   54.950138][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   54.957669][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   54.968210][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   54.976346][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   54.984701][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   54.993380][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   55.001777][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.009082][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.016912][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   55.025937][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   55.034334][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   55.043264][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   55.054994][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.079014][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   55.087725][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   55.104593][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   55.118100][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   55.130684][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.137755][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.150728][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   55.171758][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   55.185518][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.201250][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   55.216949][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   55.228613][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   55.243176][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   55.252589][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   55.261415][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   55.272894][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   55.282849][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   55.290969][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   55.298542][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   55.309380][ T4190] device veth0_vlan entered promiscuous mode
[   55.340594][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   55.349715][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   55.359198][ T3521] Bluetooth: hci2: command 0x041b tx timeout
[   55.360711][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   55.365487][ T3521] Bluetooth: hci0: command 0x041b tx timeout
[   55.380045][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   55.388590][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   55.398890][ T3521] Bluetooth: hci1: command 0x041b tx timeout
[   55.409132][ T3521] Bluetooth: hci4: command 0x041b tx timeout
[   55.411538][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   55.416775][ T3521] Bluetooth: hci3: command 0x041b tx timeout
[   55.438386][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   55.454048][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   55.471884][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   55.480722][ T4190] device veth1_vlan entered promiscuous mode
[   55.491077][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   55.504327][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   55.515632][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   55.528119][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   55.546503][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.577966][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   55.591902][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   55.606120][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   55.617200][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   55.624910][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   55.639523][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.663400][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   55.677443][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   55.698095][ T4194] device veth0_vlan entered promiscuous mode
[   55.718082][ T4190] device veth0_macvtap entered promiscuous mode
[   55.727488][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   55.736773][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   55.745158][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   55.753642][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   55.763017][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   55.781282][ T4190] device veth1_macvtap entered promiscuous mode
[   55.792128][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   55.800018][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   55.807566][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   55.816360][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   55.828993][ T4194] device veth1_vlan entered promiscuous mode
[   55.846194][ T4189] device veth0_vlan entered promiscuous mode
[   55.866575][ T4183] device veth0_vlan entered promiscuous mode
[   55.872961][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   55.881315][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   55.889507][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   55.897579][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   55.906906][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   55.926441][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.939778][ T4189] device veth1_vlan entered promiscuous mode
[   55.947717][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.958117][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   55.966052][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   55.974523][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   55.982311][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   55.990822][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   55.998362][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   56.006383][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   56.014017][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   56.021643][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   56.031840][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   56.051920][ T4183] device veth1_vlan entered promiscuous mode
[   56.072731][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.081694][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   56.090219][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   56.098469][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   56.107097][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   56.115960][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   56.124593][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   56.133366][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   56.141925][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   56.153953][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   56.162764][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   56.174918][ T4194] device veth0_macvtap entered promiscuous mode
[   56.184850][ T4189] device veth0_macvtap entered promiscuous mode
[   56.194412][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.203337][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.212968][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.221737][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.246030][ T4189] device veth1_macvtap entered promiscuous mode
[   56.261451][ T4194] device veth1_macvtap entered promiscuous mode
[   56.274985][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   56.283419][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   56.292802][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   56.301773][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   56.310145][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   56.317894][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   56.328122][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   56.336344][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   56.344131][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   56.353084][ T4187] device veth0_vlan entered promiscuous mode
[   56.366025][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   56.377004][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.388375][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.415366][  T684] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   56.424064][  T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   56.440118][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   56.450724][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.464008][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.491846][ T4183] device veth0_macvtap entered promiscuous mode
[   56.499468][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   56.508564][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   56.518579][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   56.528183][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   56.539587][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.548293][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.557122][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.567659][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.581049][ T4187] device veth1_vlan entered promiscuous mode
[   56.593474][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   56.604215][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.614148][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   56.625781][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.636772][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.647274][ T4183] device veth1_macvtap entered promiscuous mode
[   56.656066][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   56.664927][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   56.673301][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   56.681992][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   56.691576][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   56.730387][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   56.741148][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.752447][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   56.763266][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.774541][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.813343][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   56.822117][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   56.831516][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   56.841165][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   56.852558][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.861391][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.870374][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.884783][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.898444][ T4187] device veth0_macvtap entered promiscuous mode
[   56.933545][ T1278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.942203][ T1278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.944370][ T4187] device veth1_macvtap entered promiscuous mode
[   56.961716][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   56.974277][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.984385][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   56.995814][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.005909][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   57.016372][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.027726][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.049954][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   57.057965][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   57.068858][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   57.077407][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   57.087696][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   57.104213][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   57.115009][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.125820][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   57.136355][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.146885][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   57.157525][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.167341][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   57.177926][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.189563][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.197808][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   57.211060][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.221084][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   57.232223][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.242394][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   57.253755][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.264537][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.285505][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   57.294543][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   57.303504][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   57.312250][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   57.323683][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   57.334339][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.344374][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   57.355945][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.366406][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   57.377064][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.387147][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   57.398203][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.409340][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.436906][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   57.448660][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   57.457471][   T13] Bluetooth: hci3: command 0x040f tx timeout
[   57.465897][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.474906][   T13] Bluetooth: hci4: command 0x040f tx timeout
[   57.475021][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.480939][   T13] Bluetooth: hci1: command 0x040f tx timeout
[   57.480968][   T13] Bluetooth: hci0: command 0x040f tx timeout
[   57.480992][   T13] Bluetooth: hci2: command 0x040f tx timeout
[   57.508066][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.517012][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.540333][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.549183][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.557869][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.567666][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.590556][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.598625][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.621493][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.630671][  T684] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   57.639887][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.656744][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.665420][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.688010][  T684] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   57.697330][  T684] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   57.756447][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.780437][ T1278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.788366][ T1278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.797903][  T684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.824121][  T684] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.830501][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.837825][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   57.859228][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   57.901871][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   57.951191][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.977061][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.984884][  T684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.998639][  T684] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.027634][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   58.057879][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   58.122088][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.173191][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.211072][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   58.576204][ T4312] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6'.
[   59.720816][ T4247] Bluetooth: hci3: command 0x0419 tx timeout
[   59.981290][   T13] Bluetooth: hci2: command 0x0419 tx timeout
[   59.987328][   T13] Bluetooth: hci0: command 0x0419 tx timeout
[   60.000797][   T13] Bluetooth: hci1: command 0x0419 tx timeout
[   60.011955][   T13] Bluetooth: hci4: command 0x0419 tx timeout
[   60.938604][ T4328] device team_slave_0 entered promiscuous mode
[   60.945169][ T4328] device team_slave_1 entered promiscuous mode
[   60.990018][ T4328] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   61.008343][ T4328] team0: Device macvtap1 is already an upper device of the team interface
[   61.075431][ T4328] device team_slave_0 left promiscuous mode
[   61.081460][ T4328] device team_slave_1 left promiscuous mode
[   61.558764][ T4346] device syzkaller0 entered promiscuous mode
[   61.962633][ T4353] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.140107][ T4357] netlink: 40 bytes leftover after parsing attributes in process `syz.2.18'.
[   62.720987][ T4353] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.785234][ T4364] netlink: 32 bytes leftover after parsing attributes in process `syz.2.21'.
[   62.795352][ T4364] netlink: set zone limit has 8 unknown bytes
[   62.847152][ T4353] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.014684][ T4353] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.057513][ T4370] Zero length message leads to an empty skb
[   63.712010][ T4353] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.843600][ T4353] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.286639][ T4353] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.354449][ T4353] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.872688][ T4401] netlink: 40 bytes leftover after parsing attributes in process `syz.2.31'.
[   65.616731][ T4405] device syzkaller0 entered promiscuous mode
[   67.528655][ T4435] netlink: 40 bytes leftover after parsing attributes in process `syz.3.45'.
[   68.160400][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[   68.225019][ T4440] tipc: Started in network mode
[   68.236145][ T4440] tipc: Node identity 12460997b8cd, cluster identity 4711
[   68.250705][ T4440] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.277045][ T4441] tipc: Started in network mode
[   68.296928][ T4441] tipc: Node identity 02cf9ccaa0e2, cluster identity 4711
[   68.311797][ T4441] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.318799][ T4445] device syzkaller0 entered promiscuous mode
[   68.334015][ T4446] device syzkaller0 entered promiscuous mode
[   68.362452][ T4440] tipc: Resetting bearer <eth:syzkaller0>
[   68.403029][ T4441] tipc: Resetting bearer <eth:syzkaller0>
[   68.430558][ T4439] tipc: Resetting bearer <eth:syzkaller0>
[   68.455490][ T4439] tipc: Disabling bearer <eth:syzkaller0>
[   68.467481][ T4437] tipc: Resetting bearer <eth:syzkaller0>
[   68.481208][ T4437] tipc: Disabling bearer <eth:syzkaller0>
[   68.722910][ T4450] device syzkaller0 entered promiscuous mode
[   70.060639][ T4473] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   70.190811][ T4475] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.308080][ T4475] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.411378][ T4475] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.538016][ T4475] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.707956][ T4475] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.730362][ T4475] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.749345][ T4475] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.773053][ T4475] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.124631][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[   71.131126][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[   71.159833][ T4491] tipc: Started in network mode
[   71.166295][ T4491] tipc: Node identity 46cb98ba53ee, cluster identity 4711
[   71.174221][ T4491] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.182226][ T4493] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.190139][ T4493] device syzkaller0 entered promiscuous mode
[   71.197598][ T4491] device syzkaller0 entered promiscuous mode
[   71.216634][ T4492] tipc: Resetting bearer <eth:syzkaller0>
[   71.244302][ T4492] tipc: Disabling bearer <eth:syzkaller0>
[   71.288437][ T4491] tipc: Resetting bearer <eth:syzkaller0>
[   71.302335][ T4490] tipc: Resetting bearer <eth:syzkaller0>
[   71.314254][ T4490] tipc: Disabling bearer <eth:syzkaller0>
[   73.802216][ T4535] syz.4.80 uses obsolete (PF_INET,SOCK_PACKET)
[   75.002613][ T4558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.85'.
[   76.255560][ T1325] cfg80211: failed to load regulatory.db
[   77.278629][ T4595] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.287562][ T4595] device syzkaller0 entered promiscuous mode
[   77.343193][ T4595] tipc: Resetting bearer <eth:syzkaller0>
[   77.351973][ T4594] tipc: Resetting bearer <eth:syzkaller0>
[   77.407344][ T4594] tipc: Disabling bearer <eth:syzkaller0>
[   77.407741][ T4600] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[   77.419750][ T4600] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   77.433350][ T4600] vhci_hcd vhci_hcd.0: Device attached
[   77.480069][ T4598] device syzkaller0 entered promiscuous mode
[   77.744439][ T4612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.108'.
[   77.755719][ T4612] IPv6: Can't replace route, no match found
[   77.797781][ T4617] ksmbd: Unknown IPC event: 0, ignore.
[   77.819496][ T1325] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   77.827429][ T4246] usb 39-1: new low-speed USB device number 2 using vhci_hcd
[   79.118573][ T4634] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.134243][ T4634] device syzkaller0 entered promiscuous mode
[   79.176492][ T4634] tipc: Resetting bearer <eth:syzkaller0>
[   79.197653][ T4638] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.211525][ T4633] tipc: Resetting bearer <eth:syzkaller0>
[   79.224900][ T4633] tipc: Disabling bearer <eth:syzkaller0>
[   79.238891][ T4638] device syzkaller0 entered promiscuous mode
[   79.255596][ T4637] tipc: Resetting bearer <eth:syzkaller0>
[   79.273671][ T4637] tipc: Disabling bearer <eth:syzkaller0>
[   79.392355][ T1325] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[   79.402048][ T1325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.418870][ T1325] usb 4-1: Product: syz
[   79.423045][ T1325] usb 4-1: Manufacturer: syz
[   79.436007][ T1325] usb 4-1: SerialNumber: syz
[   80.852911][ T4651] netlink: 40 bytes leftover after parsing attributes in process `syz.4.120'.
[   81.062552][ T4601] vhci_hcd: connection reset by peer
[   81.078981][ T1325] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[   81.108803][ T4373] vhci_hcd: stop threads
[   81.123400][ T4373] vhci_hcd: release socket
[   81.153765][ T1325] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[   81.187279][ T4373] vhci_hcd: disconnect device
[   81.269091][ T1325] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[   81.309133][ T1325] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[   81.335731][ T1325] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[   81.367518][ T1325] lan78xx: probe of 4-1:1.0 failed with error -71
[   81.393396][ T1325] usb 4-1: USB disconnect, device number 2
[   81.611913][ T4673] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.660644][ T4673] device syzkaller0 entered promiscuous mode
[   81.752455][ T4673] tipc: Resetting bearer <eth:syzkaller0>
[   81.820576][ T4672] tipc: Resetting bearer <eth:syzkaller0>
[   81.837177][ T4672] tipc: Disabling bearer <eth:syzkaller0>
[   82.083111][ T4691] netlink: 40 bytes leftover after parsing attributes in process `syz.1.133'.
[   83.291348][ T4246] vhci_hcd: vhci_device speed not set
[   83.621073][ T4710] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[   83.627617][ T4710] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   83.642509][ T4710] vhci_hcd vhci_hcd.0: Device attached
[   83.793373][ T4719] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   83.920513][   T21] usb 37-1: new low-speed USB device number 2 using vhci_hcd
[   84.108275][ T1108] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   84.697306][ T4738] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.790306][ T4738] device syzkaller0 entered promiscuous mode
[   85.917491][ T3521] tipc: Node number set to 2720898250
[   85.925100][ T4738] tipc: Resetting bearer <eth:syzkaller0>
[   85.960367][ T4739] netlink: 40 bytes leftover after parsing attributes in process `syz.4.150'.
[   85.992559][ T4736] tipc: Resetting bearer <eth:syzkaller0>
[   86.007703][ T4736] tipc: Disabling bearer <eth:syzkaller0>
[   86.545637][ T4756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.160'.
[   86.580256][ T4756] netlink: 64 bytes leftover after parsing attributes in process `syz.1.160'.
[   86.767960][ T4711] vhci_hcd: connection reset by peer
[   86.793493][  T154] vhci_hcd: stop threads
[   86.797761][  T154] vhci_hcd: release socket
[   86.802823][ T1108] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[   86.857639][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.875399][  T154] vhci_hcd: disconnect device
[   86.889392][ T4765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.162'.
[   86.905661][ T4767] netlink: 'syz.1.163': attribute type 8 has an invalid length.
[   86.959077][ T1108] usb 3-1: Product: syz
[   86.991404][ T1108] usb 3-1: Manufacturer: syz
[   87.198923][ T1108] usb 3-1: can't set config #1, error -71
[   87.963332][ T1108] usb 3-1: USB disconnect, device number 2
[   88.100490][ T4783] tipc: Started in network mode
[   88.121070][ T4783] tipc: Node identity 868f57221824, cluster identity 4711
[   88.139135][ T4783] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.183031][ T4783] device syzkaller0 entered promiscuous mode
[   88.471089][ T4783] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   88.795659][ T4790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.167'.
[   89.020266][ T4782] tipc: Resetting bearer <eth:syzkaller0>
[   89.062458][ T4782] tipc: Disabling bearer <eth:syzkaller0>
[   89.220244][ T4798] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.714516][   T21] vhci_hcd: vhci_device speed not set
[   89.866304][ T4808] tipc: Disabling bearer <eth:syzkaller0>
[   89.878898][ T4812] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[   89.885418][ T4812] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   89.916240][ T4812] vhci_hcd vhci_hcd.0: Device attached
[   90.930909][ T1108] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   90.948356][   T21] usb 37-1: device descriptor read/64, error -110
[   91.418824][   T21] usb 37-1: new low-speed USB device number 3 using vhci_hcd
[   91.458696][    C0] sched: RT throttling activated
[   91.805544][ T4846] netlink: 40 bytes leftover after parsing attributes in process `syz.3.180'.
[   91.839801][ T1108] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[   91.873622][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.942872][ T1108] usb 3-1: Product: syz
[   91.979651][ T1108] usb 3-1: Manufacturer: syz
[   92.019493][ T1108] usb 3-1: SerialNumber: syz
[   92.282578][ T3521] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   92.928982][ T4813] vhci_hcd: connection reset by peer
[   93.031311][ T3521] usb 5-1: Using ep0 maxpacket: 16
[   93.102562][ T1108] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[   93.129468][  T684] vhci_hcd: stop threads
[   93.165341][ T1108] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71
[   93.181949][  T684] vhci_hcd: release socket
[   93.262653][  T684] vhci_hcd: disconnect device
[   93.359198][ T1108] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[   93.383572][ T3521] usb 5-1: device descriptor read/all, error -71
[   93.432275][ T1108] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[   93.461281][ T4858] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.500486][ T1108] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[   93.508442][ T4858] device syzkaller0 entered promiscuous mode
[   93.523653][ T1108] lan78xx: probe of 3-1:1.0 failed with error -71
[   93.531790][ T4865] netlink: 'syz.1.190': attribute type 12 has an invalid length.
[   93.550002][ T4865] netlink: 'syz.1.190': attribute type 29 has an invalid length.
[   93.561324][ T1108] usb 3-1: USB disconnect, device number 3
[   93.581423][ T4865] netlink: 148 bytes leftover after parsing attributes in process `syz.1.190'.
[   93.607979][ T4865] netlink: 43 bytes leftover after parsing attributes in process `syz.1.190'.
[   93.713270][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!!
[   93.742496][ T4874] tipc: Resetting bearer <eth:syzkaller0>
[   93.760590][ T4855] tipc: Resetting bearer <eth:syzkaller0>
[   94.396657][ T4855] tipc: Disabling bearer <eth:syzkaller0>
[   94.723692][ T4884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.194'.
[   95.292049][ T4878] device syzkaller0 entered promiscuous mode
[   96.659015][   T21] vhci_hcd: vhci_device speed not set
[   97.737686][ T4909] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[   97.737708][ T4909] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   97.881662][ T4909] vhci_hcd vhci_hcd.0: Device attached
[   98.199017][   T21] usb 37-1: device descriptor read/64, error -110
[   98.355911][ T4226] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   98.363638][   T21] usb usb37-port1: attempt power cycle
[   99.388800][   T21] usb 37-1: new low-speed USB device number 4 using vhci_hcd
[   99.396260][   T21] usb 37-1: SetAddress Request (4) to port 0
[   99.458727][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[   99.759571][ T4226] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[   99.770268][ T4226] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.778495][ T4226] usb 3-1: Product: syz
[   99.783437][ T4226] usb 3-1: Manufacturer: syz
[   99.788962][ T4226] usb 3-1: SerialNumber: syz
[   99.968906][ T4910] vhci_hcd: connection reset by peer
[  100.103201][ T4226] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  100.128969][ T4373] vhci_hcd: stop threads
[  100.134469][ T4373] vhci_hcd: release socket
[  100.139945][ T4226] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  100.173833][ T4373] vhci_hcd: disconnect device
[  101.229387][ T4226] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[  101.243596][ T4226] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  101.287127][ T4226] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  101.875587][ T4226] lan78xx: probe of 3-1:1.0 failed with error -71
[  101.893111][ T4226] usb 3-1: USB disconnect, device number 4
[  102.860426][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!!
[  102.878741][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[  102.887690][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[  102.896635][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[  102.905573][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[  102.914529][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[  102.923483][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[  102.932434][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[  103.046989][ T4226] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  103.231054][ T4962] tipc: Started in network mode
[  103.235955][ T4962] tipc: Node identity b6fb56765431, cluster identity 4711
[  103.278867][ T4962] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.448480][ T4962] device syzkaller0 entered promiscuous mode
[  104.381110][ T4962] tipc: Resetting bearer <eth:syzkaller0>
[  104.479411][   T21] usb 37-1: device descriptor read/8, error -110
[  104.671371][ T4961] tipc: Resetting bearer <eth:syzkaller0>
[  104.699278][   T21] vhci_hcd: vhci_device speed not set
[  104.718434][ T4246] tipc: Node number set to 3804911222
[  104.826804][ T4961] tipc: Disabling bearer <eth:syzkaller0>
[  104.884753][ T4980] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  104.891290][ T4980] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  104.905738][ T4980] vhci_hcd vhci_hcd.0: Device attached
[  105.238976][ T4246] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  105.779115][ T4246] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  105.825184][ T4246] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.889062][ T4246] usb 3-1: Product: syz
[  105.893310][ T4246] usb 3-1: Manufacturer: syz
[  106.043254][   T21] usb 37-1: new low-speed USB device number 5 using vhci_hcd
[  106.050804][   T21] usb 37-1: SetAddress Request (5) to port 0
[  107.716303][ T4998] netlink: 40 bytes leftover after parsing attributes in process `syz.0.223'.
[  107.826080][ T4246] usb 3-1: SerialNumber: syz
[  107.996957][ T4981] vhci_hcd: connection reset by peer
[  108.009076][ T4246] usb 3-1: can't set config #1, error -71
[  108.042460][ T5007] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.060111][ T4358] vhci_hcd: stop threads
[  108.064370][ T4358] vhci_hcd: release socket
[  108.069120][ T4246] usb 3-1: USB disconnect, device number 6
[  108.099018][ T4358] vhci_hcd: disconnect device
[  108.109802][ T5007] device syzkaller0 entered promiscuous mode
[  108.130987][ T5005] tipc: Resetting bearer <eth:syzkaller0>
[  108.217782][ T5005] tipc: Disabling bearer <eth:syzkaller0>
[  111.711246][   T21] usb 37-1: device descriptor read/8, error -110
[  112.635563][   T21] usb usb37-port1: unable to enumerate USB device
[  113.118936][ T4226] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  113.538919][ T4226] usb 5-1: Using ep0 maxpacket: 16
[  114.339002][ T4226] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  115.096868][ T4226] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice=5f.00
[  115.146100][ T4226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.331216][ T4226] usb 5-1: config 0 descriptor??
[  115.372164][ T4226] usb 5-1: can't set config #0, error -71
[  115.568513][ T4226] usb 5-1: USB disconnect, device number 4
[  121.653908][ T5127] netlink: 40 bytes leftover after parsing attributes in process `syz.3.256'.
[  123.658881][ T4233] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  124.489974][ T4233] usb 1-1: Using ep0 maxpacket: 16
[  124.831591][ T4233] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  124.844449][ T4233] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice=5f.00
[  124.853823][ T4233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.120870][ T4233] usb 1-1: config 0 descriptor??
[  125.259158][ T4233] usb 1-1: can't set config #0, error -71
[  125.445228][ T4233] usb 1-1: USB disconnect, device number 2
[  132.410112][ T4226] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  132.561834][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  140.771277][ T4226] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  146.296104][ T4254] Bluetooth: hci5: command 0x0409 tx timeout
[  147.073582][ T5292] chnl_net:caif_netlink_parms(): no params data found
[  148.900898][   T21] Bluetooth: hci5: command 0x041b tx timeout
[  149.751322][ T5292] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.776515][ T5292] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.795006][ T5292] device bridge_slave_0 entered promiscuous mode
[  149.800951][ T3521] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  149.822112][ T5292] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.829490][ T5292] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.837450][ T5292] device bridge_slave_1 entered promiscuous mode
[  150.058939][ T3521] usb 2-1: Using ep0 maxpacket: 16
[  151.238900][ T3521] usb 2-1: device descriptor read/all, error -71
[  151.279538][ T4226] Bluetooth: hci5: command 0x040f tx timeout
[  151.344944][  T684] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.962548][  T684] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.227009][ T5292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  153.470458][ T4233] Bluetooth: hci5: command 0x0419 tx timeout
[  153.801064][ T5292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  154.680363][  T684] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.556161][ T5292] team0: Port device team_slave_0 added
[  155.710630][  T684] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.746696][ T5292] team0: Port device team_slave_1 added
[  156.058204][ T5292] batman_adv: batadv0: Adding interface: batadv_slave_0
[  156.067325][ T5292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.164634][ T5292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  156.257644][ T5292] batman_adv: batadv0: Adding interface: batadv_slave_1
[  156.276340][ T5292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.379911][ T5292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  156.429985][ T5292] device hsr_slave_0 entered promiscuous mode
[  156.443378][ T5292] device hsr_slave_1 entered promiscuous mode
[  156.488091][ T5292] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  156.750351][ T5292] Cannot create hsr debugfs directory
[  157.960599][  T684] tipc: Left network mode
[  158.170327][ T5292] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  158.198784][ T1108] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  158.215128][ T5292] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  158.228069][ T5292] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  158.335379][ T5292] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  158.448974][ T1108] usb 3-1: Using ep0 maxpacket: 16
[  158.581450][ T1108] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  158.740858][ T1108] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice=5f.00
[  159.011945][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.153435][ T1108] usb 3-1: config 0 descriptor??
[  161.311804][ T5292] 8021q: adding VLAN 0 to HW filter on device bond0
[  161.332692][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  161.344443][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  161.728039][ T5292] 8021q: adding VLAN 0 to HW filter on device team0
[  161.760757][ T5292] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  161.771147][ T5292] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  161.799684][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  161.833057][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  161.851919][ T4359] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.859034][ T4359] bridge0: port 1(bridge_slave_0) entered forwarding state
[  161.897566][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  161.923279][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  161.964667][ T4359] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.971786][ T4359] bridge0: port 2(bridge_slave_1) entered forwarding state
[  162.012131][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  162.028873][ T1108] usb 3-1: can't set config #0, error -71
[  162.278014][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  162.417562][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  162.585446][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  162.661566][ T1108] usb 3-1: USB disconnect, device number 8
[  162.681161][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  162.703794][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  162.719906][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  162.738543][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  162.796958][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  162.807110][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  163.012613][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  163.022661][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  163.035699][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  163.318100][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  163.330263][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  163.365742][ T5292] 8021q: adding VLAN 0 to HW filter on device batadv0
[  164.073082][  T684] device hsr_slave_0 left promiscuous mode
[  164.858947][  T684] device hsr_slave_1 left promiscuous mode
[  164.865519][  T684] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  164.888489][  T684] batman_adv: batadv0: Removing interface: batadv_slave_0
[  164.897627][  T684] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  164.905367][  T684] batman_adv: batadv0: Removing interface: batadv_slave_1
[  164.913403][  T684] device bridge_slave_1 left promiscuous mode
[  164.941778][  T684] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.072793][  T684] device bridge_slave_0 left promiscuous mode
[  165.094353][  T684] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.582710][  T684] device veth1_macvtap left promiscuous mode
[  165.606938][  T684] device veth0_macvtap left promiscuous mode
[  165.634433][  T684] device veth1_vlan left promiscuous mode
[  165.669776][  T684] device veth0_vlan left promiscuous mode
[  166.154247][  T684] team0 (unregistering): Port device team_slave_1 removed
[  166.169448][  T684] team0 (unregistering): Port device team_slave_0 removed
[  166.188598][  T684] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  166.213263][  T684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  166.315111][  T684] bond0 (unregistering): Released all slaves
[  167.142199][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  167.181765][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  167.236348][ T5292] device veth0_vlan entered promiscuous mode
[  167.247827][ T5292] device veth1_vlan entered promiscuous mode
[  167.273680][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  167.305274][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  167.335707][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  167.478082][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  167.506240][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  167.542883][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  168.025255][ T5557] device syzkaller0 entered promiscuous mode
[  168.053863][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  168.083015][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  169.353520][ T5292] device veth0_macvtap entered promiscuous mode
[  169.373178][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  169.421933][ T5292] device veth1_macvtap entered promiscuous mode
[  169.502407][ T5292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  169.540307][ T5292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.576937][ T5292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  169.788937][ T5292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.799384][ T5292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  169.810285][ T5292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.821653][ T5292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  169.833105][ T5292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.851340][ T5292] batman_adv: batadv0: Interface activated: batadv_slave_0
[  169.880776][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  169.922898][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  169.944919][ T5292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  169.996163][ T5292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.016196][ T5292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  170.057154][ T5292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.077397][ T5292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  170.094241][ T5292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.114359][ T5292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  170.132925][ T5292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.156368][ T5292] batman_adv: batadv0: Interface activated: batadv_slave_1
[  170.185906][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  170.225280][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  171.232528][ T5292] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  171.358062][ T5292] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  171.367951][ T5613] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  171.374469][ T5613] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  171.413349][ T5292] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  171.467269][ T5613] vhci_hcd vhci_hcd.0: Device attached
[  171.528829][ T5292] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  171.828930][ T4247] usb 33-1: new low-speed USB device number 2 using vhci_hcd
[  172.023813][ T4832] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  172.480293][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.539815][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  172.853467][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  172.884652][ T4280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.969015][ T4280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  172.979703][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  173.188980][ T4832] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  173.202787][ T4832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.232756][ T4832] usb 1-1: Product: syz
[  173.255409][ T4832] usb 1-1: Manufacturer: syz
[  173.280275][ T4832] usb 1-1: SerialNumber: syz
[  173.610519][ T5646] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  173.627030][ T5646] device syzkaller0 entered promiscuous mode
[  173.754552][ T5643] tipc: Resetting bearer <eth:syzkaller0>
[  173.810440][ T5615] vhci_hcd: connection reset by peer
[  173.826127][  T154] vhci_hcd: stop threads
[  173.830679][ T4832] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  173.843039][  T154] vhci_hcd: release socket
[  173.862962][  T154] vhci_hcd: disconnect device
[  173.898869][ T4832] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71
[  173.999056][ T4832] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[  174.091005][ T4832] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  174.147718][ T4832] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  174.170876][ T5643] tipc: Disabling bearer <eth:syzkaller0>
[  174.294202][ T4832] lan78xx: probe of 1-1:1.0 failed with error -71
[  174.682516][ T4832] usb 1-1: USB disconnect, device number 3
[  175.598921][   T26] Bluetooth: hci3: command 0x0406 tx timeout
[  175.613644][   T26] Bluetooth: hci2: command 0x0406 tx timeout
[  175.699204][ T4246] Bluetooth: hci1: command 0x0406 tx timeout
[  175.712730][ T4246] Bluetooth: hci0: command 0x0406 tx timeout
[  175.958883][ T4832] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  176.248934][ T4832] usb 1-1: Using ep0 maxpacket: 16
[  176.369012][ T4832] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  176.425197][ T4832] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice=5f.00
[  176.476640][ T4832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.251600][ T4247] vhci_hcd: vhci_device speed not set
[  177.264910][ T5651] netlink: 40 bytes leftover after parsing attributes in process `syz.5.297'.
[  177.275548][ T4832] usb 1-1: config 0 descriptor??
[  177.332928][ T4832] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input19
[  177.586101][ T5707] tipc: Started in network mode
[  177.599693][ T5707] tipc: Node identity 5227f185b55b, cluster identity 4711
[  177.615348][ T5707] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  177.630439][ T5707] device syzkaller0 entered promiscuous mode
[  177.688906][ T5705] tipc: Resetting bearer <eth:syzkaller0>
[  177.720569][ T5705] tipc: Disabling bearer <eth:syzkaller0>
[  179.238844][ T3547] bcm5974 1-1:0.0: could not read from device
[  179.359230][ T4832] bcm5974 1-1:0.0: could not read from device
[  179.490144][ T5729] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  179.496711][ T5729] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  179.520455][ T5729] vhci_hcd vhci_hcd.0: Device attached
[  179.553527][ T4832] input: failed to attach handler mousedev to device input19, error: -5
[  179.741596][ T4832] usb 1-1: USB disconnect, device number 4
[  180.428886][ T4246] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  180.436537][ T4293] usb 35-1: new low-speed USB device number 2 using vhci_hcd
[  181.421069][ T5755] device syzkaller0 entered promiscuous mode
[  181.693914][ T4246] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  181.724148][ T4246] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.759899][ T4246] usb 2-1: Product: syz
[  181.764107][ T4246] usb 2-1: Manufacturer: syz
[  181.792417][ T4246] usb 2-1: SerialNumber: syz
[  181.916677][ T5773] netlink: 40 bytes leftover after parsing attributes in process `syz.2.390'.
[  182.072650][ T5777] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  182.089400][ T5777] device syzkaller0 entered promiscuous mode
[  182.126181][ T5776] tipc: Resetting bearer <eth:syzkaller0>
[  182.175349][ T5776] tipc: Disabling bearer <eth:syzkaller0>
[  182.275253][ T5730] vhci_hcd: connection reset by peer
[  182.280857][ T4332] vhci_hcd: stop threads
[  182.288942][ T4246] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  182.309146][ T4332] vhci_hcd: release socket
[  182.322236][ T4332] vhci_hcd: disconnect device
[  182.378952][ T4246] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71
[  182.448914][ T4246] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[  182.468783][ T4246] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  182.494255][ T4246] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  182.512634][ T4246] lan78xx: probe of 2-1:1.0 failed with error -71
[  182.726450][ T4246] usb 2-1: USB disconnect, device number 4
[  183.658869][ T4225] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  184.468978][ T4225] usb 6-1: Using ep0 maxpacket: 16
[  184.588979][ T4225] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  184.634644][ T4225] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice=5f.00
[  184.675481][ T4225] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.716775][ T4225] usb 6-1: config 0 descriptor??
[  184.763853][ T4225] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input20
[  184.914082][ T5835] device syzkaller0 entered promiscuous mode
[  185.600132][ T4293] vhci_hcd: vhci_device speed not set
[  185.923848][ T5855] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  185.930389][ T5855] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  186.002970][ T5855] vhci_hcd vhci_hcd.0: Device attached
[  186.078985][ T3547] bcm5974 6-1:0.0: could not read from device
[  186.099304][ T4225] bcm5974 6-1:0.0: could not read from device
[  186.149884][ T3547] bcm5974 6-1:0.0: could not read from device
[  186.162304][ T4225] input: failed to attach handler mousedev to device input20, error: -5
[  186.209204][ T3547] bcm5974 6-1:0.0: could not read from device
[  186.218322][ T4225] usb 6-1: USB disconnect, device number 2
[  186.253023][ T3547] bcm5974 6-1:0.0: could not read from device
[  186.289575][ T4247] usb 37-1: new low-speed USB device number 6 using vhci_hcd
[  186.358786][ T1325] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  186.939002][ T1325] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  186.958314][ T1325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.028467][ T1325] usb 3-1: Product: syz
[  187.047086][ T1325] usb 3-1: Manufacturer: syz
[  187.055629][ T1325] usb 3-1: SerialNumber: syz
[  187.728855][ T1325] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  187.748821][ T5857] vhci_hcd: connection reset by peer
[  187.766863][ T4332] vhci_hcd: stop threads
[  187.773744][ T4332] vhci_hcd: release socket
[  187.798535][ T4332] vhci_hcd: disconnect device
[  187.818892][ T1325] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71
[  187.879217][ T1325] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[  187.894299][ T5894] device syzkaller0 entered promiscuous mode
[  187.903527][ T1325] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  187.918416][ T1325] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  187.964150][ T1325] lan78xx: probe of 3-1:1.0 failed with error -71
[  187.995766][ T1325] usb 3-1: USB disconnect, device number 9
[  189.882243][ T5929] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  189.895575][ T5929] device syzkaller0 entered promiscuous mode
[  189.984690][ T5928] tipc: Resetting bearer <eth:syzkaller0>
[  190.024236][ T5928] tipc: Disabling bearer <eth:syzkaller0>
[  191.060740][ T5951] device batadv_slave_1 entered promiscuous mode
[  191.165797][ T5947] device syzkaller0 entered promiscuous mode
[  191.241357][ T5950] device batadv_slave_1 left promiscuous mode
[  191.438928][ T4247] vhci_hcd: vhci_device speed not set
[  192.695632][ T5996] netlink: 40 bytes leftover after parsing attributes in process `syz.2.435'.
[  194.002888][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  196.163530][ T6056] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  196.206890][ T6056] tipc: Resetting bearer <eth:syzkaller0>
[  196.270428][ T6055] tipc: Disabling bearer <eth:syzkaller0>
[  196.599614][ T6062] netlink: 40 bytes leftover after parsing attributes in process `syz.1.452'.
[  197.199854][ T4254] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  199.028870][ T4254] usb 6-1: Using ep0 maxpacket: 16
[  199.169594][ T4254] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  199.198179][ T4254] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice=5f.00
[  199.208079][ T4254] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.306116][ T4254] usb 6-1: config 0 descriptor??
[  199.381328][ T4254] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input22
[  199.615665][ T6103] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  199.622200][ T6103] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  199.664925][ T6103] vhci_hcd vhci_hcd.0: Device attached
[  199.948853][ T4247] usb 39-1: new low-speed USB device number 3 using vhci_hcd
[  199.958919][ T4832] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  200.118075][ T6122] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  200.151989][ T6122] tipc: Resetting bearer <eth:syzkaller0>
[  200.175868][ T6120] tipc: Disabling bearer <eth:syzkaller0>
[  200.318575][ T6131] device syzkaller0 entered promiscuous mode
[  200.518946][ T4832] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  200.540361][ T4832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.559942][ T4832] usb 4-1: Product: syz
[  200.564110][ T4832] usb 4-1: Manufacturer: syz
[  200.579078][ T4832] usb 4-1: SerialNumber: syz
[  200.641894][ T3547] bcm5974 6-1:0.0: could not read from device
[  200.689433][ T3547] bcm5974 6-1:0.0: could not read from device
[  200.858526][ T4254] usb 6-1: USB disconnect, device number 3
[  200.870033][ T3547] bcm5974 6-1:0.0: could not read from device
[  200.883143][ T6155] tap0: tun_chr_ioctl cmd 1074025677
[  200.888564][ T6155] tap0: linktype set to 800
[  201.159219][ T4832] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  201.177711][ T6104] vhci_hcd: connection reset by peer
[  201.269001][ T5678] vhci_hcd: stop threads
[  201.276055][ T5678] vhci_hcd: release socket
[  201.325243][ T5678] vhci_hcd: disconnect device
[  201.367205][ T4832] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71
[  201.568857][ T4832] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[  201.642726][ T4832] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  201.682497][ T4832] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  201.771274][ T4832] lan78xx: probe of 4-1:1.0 failed with error -71
[  201.947724][ T4832] usb 4-1: USB disconnect, device number 4
[  202.865876][ T6181] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  202.920569][ T6181] tipc: Resetting bearer <eth:syzkaller0>
[  202.952509][ T6178] tipc: Disabling bearer <eth:syzkaller0>
[  203.610553][ T1108] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  203.998892][ T1108] usb 3-1: Using ep0 maxpacket: 16
[  204.034336][ T6206] device syzkaller0 entered promiscuous mode
[  204.122416][ T1108] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  204.156201][ T1108] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice=5f.00
[  204.198726][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.280158][ T1108] usb 3-1: config 0 descriptor??
[  204.315125][ T6217] netlink: 36 bytes leftover after parsing attributes in process `syz.0.484'.
[  204.331326][ T1108] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input24
[  204.391958][ T6217] netlink: 36 bytes leftover after parsing attributes in process `syz.0.484'.
[  204.629740][ T6217] netlink: 36 bytes leftover after parsing attributes in process `syz.0.484'.
[  205.701410][ T4247] vhci_hcd: vhci_device speed not set
[  205.732542][ T6245] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  205.770544][ T6245] tipc: Resetting bearer <eth:syzkaller0>
[  205.787451][ T6244] tipc: Disabling bearer <eth:syzkaller0>
[  206.058913][ T3547] bcm5974 3-1:0.0: could not read from device
[  206.146265][ T1108] usb 3-1: USB disconnect, device number 10
[  208.929889][ T6313] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  209.428303][ T6318] tipc: Resetting bearer <eth:syzkaller0>
[  209.551167][ T6310] tipc: Disabling bearer <eth:syzkaller0>
[  209.744811][ T6328] device syzkaller0 entered promiscuous mode
[  209.787111][ T6331] ieee802154 phy0 wpan0: encryption failed: -22
[  210.111663][ T6337] device veth1_macvtap left promiscuous mode
[  212.905190][ T6373] device syzkaller0 entered promiscuous mode
[  212.945939][ T6378] device syzkaller0 entered promiscuous mode
[  214.740974][ T6395] device syzkaller0 entered promiscuous mode
[  217.953097][ T6422] device syzkaller0 entered promiscuous mode
[  219.218200][ T6442] netlink: 'syz.2.541': attribute type 1 has an invalid length.
[  219.376977][ T6445] device bond1 entered promiscuous mode
[  219.486377][ T6445] 8021q: adding VLAN 0 to HW filter on device bond1
[  219.750572][ T6448] 8021q: adding VLAN 0 to HW filter on device bond2
[  220.284460][ T6448] device bond2 entered promiscuous mode
[  220.340624][ T6448] bond1: (slave bond2): Enslaving as a backup interface with a down link
[  221.014799][ T6456] device syzkaller0 entered promiscuous mode
[  225.120183][ T6514] device syzkaller0 entered promiscuous mode
[  225.343656][ T6523] netlink: 108 bytes leftover after parsing attributes in process `syz.1.566'.
[  225.360658][ T6523] netlink: 20 bytes leftover after parsing attributes in process `syz.1.566'.
[  225.950651][ T4254] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  226.709478][ T4254] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  226.809682][ T4254] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.818600][ T4254] usb 1-1: Product: syz
[  226.823249][ T4254] usb 1-1: Manufacturer: syz
[  226.828018][ T4254] usb 1-1: SerialNumber: syz
[  226.907479][ T6539] device syzkaller0 entered promiscuous mode
[  227.299322][ T4254] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  227.413224][ T4254] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71
[  227.489230][ T4254] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[  227.537762][ T4254] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  227.650865][ T4254] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  227.743369][ T4254] lan78xx: probe of 1-1:1.0 failed with error -71
[  227.889114][ T4254] usb 1-1: USB disconnect, device number 5
[  228.350025][ T6560] device syzkaller0 entered promiscuous mode
[  229.392299][ T6570] netlink: 28 bytes leftover after parsing attributes in process `syz.3.582'.
[  229.939519][ T4225] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  230.489005][ T4225] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  230.525454][ T4225] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.620716][ T4225] usb 6-1: Product: syz
[  230.726179][ T4225] usb 6-1: Manufacturer: syz
[  230.819127][ T4225] usb 6-1: SerialNumber: syz
[  231.189539][ T6604] netlink: 'syz.3.591': attribute type 1 has an invalid length.
[  231.255500][ T6604] 8021q: adding VLAN 0 to HW filter on device bond1
[  231.309350][ T6606] bond1: (slave vlan3): making interface the new active one
[  231.335471][ T6606] bond1: (slave vlan3): Enslaving as an active interface with an up link
[  231.349929][ T5678] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  231.603444][ T4225] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  233.130590][ T4246] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  233.168894][ T4225] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71
[  233.218845][ T4225] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[  233.244464][ T4225] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  233.258006][ T6618] device syzkaller0 entered promiscuous mode
[  233.268614][ T6622] netlink: 28 bytes leftover after parsing attributes in process `syz.3.597'.
[  233.291687][ T4225] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  233.309026][ T4225] lan78xx: probe of 6-1:1.0 failed with error -71
[  233.348996][ T4225] usb 6-1: USB disconnect, device number 4
[  233.369323][ T4246] usb 1-1: device descriptor read/64, error -71
[  233.892990][ T4246] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  236.212952][ T6664] netlink: 28 bytes leftover after parsing attributes in process `syz.2.609'.
[  236.348837][ T4247] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  236.380719][ T6669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.612'.
[  236.461525][ T6669] bridge1: port 1(veth3) entered blocking state
[  236.483313][ T6669] bridge1: port 1(veth3) entered disabled state
[  236.491122][ T6669] device veth3 entered promiscuous mode
[  236.511376][ T6669] bridge1: port 2(veth0_to_bond) entered blocking state
[  236.528189][ T6669] bridge1: port 2(veth0_to_bond) entered disabled state
[  236.704811][ T6669] device veth0_to_bond entered promiscuous mode
[  236.913941][ T4247] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  237.022958][ T4247] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.230795][ T4247] usb 4-1: Product: syz
[  237.249807][ T4247] usb 4-1: Manufacturer: syz
[  237.257488][ T4247] usb 4-1: SerialNumber: syz
[  238.349096][ T4247] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  238.406995][ T6689] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  238.409039][ T4247] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71
[  238.417821][ T6689] tipc: Resetting bearer <eth:syzkaller0>
[  238.437191][ T6688] tipc: Disabling bearer <eth:syzkaller0>
[  238.442410][ T4233] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  238.472337][ T4247] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[  238.636532][ T4247] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  238.647146][ T4247] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  238.656882][ T4247] lan78xx: probe of 4-1:1.0 failed with error -71
[  238.678871][ T4247] usb 4-1: USB disconnect, device number 5
[  238.684408][ T6695] netlink: 32 bytes leftover after parsing attributes in process `syz.5.620'.
[  238.695296][ T6695] netlink: set zone limit has 8 unknown bytes
[  238.701638][ T4233] usb 3-1: device descriptor read/64, error -71
[  239.441275][ T6708] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  239.451063][ T6708] tipc: Resetting bearer <eth:syzkaller0>
[  239.458996][ T6707] tipc: Disabling bearer <eth:syzkaller0>
[  239.688826][ T4233] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  239.908939][ T4233] usb 3-1: device descriptor read/64, error -71
[  240.044338][ T4233] usb usb3-port1: attempt power cycle
[  241.089030][ T4233] usb usb3-port1: Cannot enable. Maybe the USB cable is bad?
[  241.448852][ T4233] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  242.330383][ T6759] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  242.371906][ T6759] tipc: Resetting bearer <eth:syzkaller0>
[  242.382559][ T6755] tipc: Disabling bearer <eth:syzkaller0>
[  242.646568][ T4233] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  242.658736][ T4233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.678282][ T4233] usb 3-1: Product: syz
[  242.701888][ T4233] usb 3-1: Manufacturer: syz
[  242.706664][ T4233] usb 3-1: SerialNumber: syz
[  243.138930][ T4832] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  243.368908][ T4832] usb 2-1: device descriptor read/64, error -71
[  243.448967][ T4233] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  243.498914][ T4233] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71
[  243.538825][ T4233] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[  243.558948][ T4233] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  243.579150][ T4233] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  243.587940][ T4233] lan78xx: probe of 3-1:1.0 failed with error -71
[  243.638800][ T4832] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  243.690402][ T4233] usb 3-1: USB disconnect, device number 14
[  243.838813][ T4832] usb 2-1: device descriptor read/64, error -71
[  243.960369][ T4832] usb usb2-port1: attempt power cycle
[  244.389258][ T4832] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  244.529685][ T4832] usb 2-1: device descriptor read/8, error -71
[  244.632251][ T6796] device bpq0 entered promiscuous mode
[  244.818861][ T4832] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  244.974156][ T6806] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  245.000705][ T6808] device bpq0 left promiscuous mode
[  245.008438][ T6808] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  245.018999][ T4832] usb 2-1: device descriptor read/8, error -71
[  245.033890][ T6806] tipc: Resetting bearer <eth:syzkaller0>
[  245.067673][ T6805] tipc: Disabling bearer <eth:syzkaller0>
[  245.154489][ T4832] usb usb2-port1: unable to enumerate USB device
[  245.717251][ T6840] netlink: 28 bytes leftover after parsing attributes in process `syz.0.666'.
[  246.509558][ T6849] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  246.596422][ T6849] tipc: Resetting bearer <eth:syzkaller0>
[  246.717853][ T6847] tipc: Disabling bearer <eth:syzkaller0>
[  247.446800][ T4233] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  247.707583][ T1108] Bluetooth: hci5: command 0x0405 tx timeout
[  247.778860][ T4233] usb 3-1: device descriptor read/64, error -71
[  248.058781][ T4233] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  248.278805][ T4233] usb 3-1: device descriptor read/64, error -71
[  248.409082][ T4233] usb usb3-port1: attempt power cycle
[  248.839113][ T4233] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  248.979119][ T4233] usb 3-1: device descriptor read/8, error -71
[  249.258875][ T4233] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  249.389947][ T4233] usb 3-1: device descriptor read/8, error -71
[  249.519127][ T4233] usb usb3-port1: unable to enumerate USB device
[  251.088569][ T6944] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  251.124554][ T6944] tipc: Resetting bearer <eth:syzkaller0>
[  251.200171][ T6943] tipc: Disabling bearer <eth:syzkaller0>
[  252.828948][ T4246] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  253.049077][ T4246] usb 4-1: device descriptor read/64, error -71
[  253.498182][ T6982] netlink: 32 bytes leftover after parsing attributes in process `syz.1.709'.
[  253.509043][ T4246] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  253.558462][ T6982] netlink: set zone limit has 8 unknown bytes
[  253.715792][ T6989] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  253.875687][ T4246] usb 4-1: device descriptor read/64, error -71
[  254.194485][ T4246] usb usb4-port1: attempt power cycle
[  255.132559][ T7026] netlink: 20 bytes leftover after parsing attributes in process `syz.0.721'.
[  255.193419][ T7026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.721'.
[  255.304811][ T7026] device bond1 entered promiscuous mode
[  255.311331][ T7026] 8021q: adding VLAN 0 to HW filter on device bond1
[  255.439285][    C1] ==================================================================
[  255.441549][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  255.447635][    C1] BUG: KASAN: use-after-free in rose_timer_expiry+0x470/0x490
[  255.461320][    C1] Read of size 2 at addr ffff88806296542a by task syz-executor/4190
[  255.469294][    C1] 
[  255.471623][    C1] CPU: 1 PID: 4190 Comm: syz-executor Not tainted 5.15.189-syzkaller #0
[  255.479950][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  255.490016][    C1] Call Trace:
[  255.493293][    C1]  <IRQ>
[  255.496137][    C1]  dump_stack_lvl+0x168/0x230
[  255.500827][    C1]  ? show_regs_print_info+0x20/0x20
[  255.506024][    C1]  ? _printk+0xcc/0x110
[  255.510180][    C1]  ? rose_timer_expiry+0x470/0x490
[  255.515324][    C1]  ? load_image+0x3b0/0x3b0
[  255.519835][    C1]  print_address_description+0x60/0x2d0
[  255.525385][    C1]  ? rose_timer_expiry+0x470/0x490
[  255.530507][    C1]  kasan_report+0xdf/0x130
[  255.534930][    C1]  ? rose_timer_expiry+0x470/0x490
[  255.540050][    C1]  rose_timer_expiry+0x470/0x490
[  255.544989][    C1]  ? rose_start_t1timer+0xd0/0xd0
[  255.550014][    C1]  call_timer_fn+0x16c/0x530
[  255.554605][    C1]  ? rose_start_t1timer+0xd0/0xd0
[  255.559631][    C1]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  255.565617][    C1]  ? __run_timers+0x7c0/0x7c0
[  255.570302][    C1]  ? rcu_is_watching+0x11/0xa0
[  255.575063][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  255.580262][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  255.585464][    C1]  ? rose_start_t1timer+0xd0/0xd0
[  255.590502][    C1]  __run_timers+0x525/0x7c0
[  255.595026][    C1]  ? detach_timer+0x2b0/0x2b0
[  255.599704][    C1]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  255.605692][    C1]  ? sched_clock_cpu+0x15/0x3c0
[  255.610544][    C1]  ? ktime_get_real_ts64+0x420/0x420
[  255.615839][    C1]  run_timer_softirq+0x63/0xf0
[  255.620607][    C1]  handle_softirqs+0x328/0x820
[  255.625375][    C1]  ? __irq_exit_rcu+0x12f/0x220
[  255.630228][    C1]  ? do_softirq+0x200/0x200
[  255.634734][    C1]  __irq_exit_rcu+0x12f/0x220
[  255.639409][    C1]  ? irq_exit_rcu+0x20/0x20
[  255.643923][    C1]  irq_exit_rcu+0x5/0x20
[  255.648167][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  255.653801][    C1]  </IRQ>
[  255.656728][    C1]  <TASK>
[  255.659656][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  255.665642][    C1] RIP: 0010:kasan_check_range+0x74/0x290
[  255.671282][    C1] Code: df 4f 8d 0c 03 48 8d 5c 37 ff 48 c1 eb 03 4e 8d 14 3b 4d 89 d6 4d 29 ce 49 83 fe 10 7f 26 4d 85 f6 0f 84 39 01 00 00 48 f7 d3 <4c> 01 db 41 80 39 00 0f 85 c1 01 00 00 49 ff c1 48 ff c3 75 ee e9
[  255.690895][    C1] RSP: 0018:ffffc90002f1f340 EFLAGS: 00000202
[  255.696970][    C1] RAX: 0000000000000001 RBX: e00000000e52d22a RCX: ffffffff815c77b9
[  255.704938][    C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8d696ea8
[  255.712909][    C1] RBP: ffffc90002f1f470 R08: dffffc0000000000 R09: fffffbfff1ad2dd5
[  255.720879][    C1] R10: fffffbfff1ad2dd6 R11: 1ffffffff1ad2dd5 R12: 00007fff213a60f2
[  255.728850][    C1] R13: dffffc0000000000 R14: 0000000000000001 R15: dffffc0000000001
[  255.736829][    C1]  ? lock_release+0xa9/0x870
[  255.741429][    C1]  lock_release+0xa9/0x870
[  255.745847][    C1]  ? __might_sleep+0xf0/0xf0
[  255.750443][    C1]  ? __might_fault+0xb7/0x110
[  255.755118][    C1]  ? __might_sleep+0xf0/0xf0
[  255.759707][    C1]  ? __lock_acquire+0x7c60/0x7c60
[  255.764738][    C1]  ? __might_fault+0xb3/0x110
[  255.769418][    C1]  _copy_to_user+0x29/0x130
[  255.773923][    C1]  xt_obj_to_user+0xab/0x120
[  255.778520][    C1]  xt_target_to_user+0x97/0x270
[  255.783368][    C1]  ? _copy_to_user+0xf0/0x130
[  255.788043][    C1]  do_arpt_get_ctl+0xb9b/0xf40
[  255.792814][    C1]  ? do_arpt_set_ctl+0xef0/0xef0
[  255.797769][    C1]  ? nf_getsockopt+0x21b/0x280
[  255.802539][    C1]  ? nf_getsockopt+0x30/0x280
[  255.807222][    C1]  ? __lock_acquire+0x7c60/0x7c60
[  255.812250][    C1]  ? __mutex_lock_common+0x431/0x2390
[  255.817637][    C1]  ? __mutex_unlock_slowpath+0x19e/0x6a0
[  255.823283][    C1]  ? mutex_unlock+0x10/0x10
[  255.827794][    C1]  ? __might_fault+0xb7/0x110
[  255.832479][    C1]  ? __lock_acquire+0x7c60/0x7c60
[  255.837512][    C1]  ? __local_bh_enable_ip+0x12a/0x1b0
[  255.842888][    C1]  nf_getsockopt+0x25e/0x280
[  255.847484][    C1]  ip_getsockopt+0x115a/0x1590
[  255.852265][    C1]  ? ip_setsockopt+0x3070/0x3070
[  255.857212][    C1]  ? stack_trace_save+0x98/0xe0
[  255.862064][    C1]  ? stack_trace_snprint+0xf0/0xf0
[  255.867184][    C1]  ? __kasan_slab_alloc+0xb3/0xd0
[  255.872214][    C1]  ? __kasan_slab_alloc+0x9c/0xd0
[  255.877239][    C1]  ? slab_post_alloc_hook+0x4c/0x380
[  255.882520][    C1]  ? kmem_cache_alloc+0x100/0x290
[  255.887543][    C1]  ? security_file_alloc+0x30/0x110
[  255.892742][    C1]  ? __alloc_file+0xc2/0x240
[  255.897328][    C1]  ? alloc_empty_file+0x90/0x180
[  255.902264][    C1]  ? alloc_file+0x5b/0x4f0
[  255.906684][    C1]  ? alloc_file_pseudo+0x17a/0x1f0
[  255.911791][    C1]  ? sock_alloc_file+0xb3/0x240
[  255.916635][    C1]  ? __sys_socket+0x11d/0x170
[  255.921308][    C1]  ? __x64_sys_socket+0x76/0x80
[  255.926159][    C1]  ? do_syscall_64+0x4c/0xa0
[  255.930748][    C1]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  255.936824][    C1]  ? mark_lock+0x94/0x320
[  255.941161][    C1]  ? mark_lock+0x94/0x320
[  255.945502][    C1]  ? __lock_acquire+0x13ad/0x7c60
[  255.950531][    C1]  tcp_getsockopt+0x1e3/0x2390
[  255.955310][    C1]  ? tcp_bpf_bypass_getsockopt+0x40/0x40
[  255.960947][    C1]  ? aa_label_sk_perm+0x37e/0x490
[  255.965975][    C1]  ? aa_sk_perm+0x8f0/0x8f0
[  255.970458][    C1]  ? __raw_spin_lock_init+0x41/0x100
[  255.975741][    C1]  ? __might_sleep+0xf0/0xf0
[  255.980321][    C1]  ? percpu_counter_add_batch+0x13b/0x160
[  255.986022][    C1]  ? aa_sk_perm+0x7b4/0x8f0
[  255.990515][    C1]  ? aa_af_perm+0x2b0/0x2b0
[  255.995043][    C1]  ? aa_sock_opt_perm+0x74/0x100
[  255.999974][    C1]  ? sock_common_getsockopt+0x29/0xa0
[  256.005322][    C1]  ? sock_recv_errqueue+0x4b0/0x4b0
[  256.010495][    C1]  __sys_getsockopt+0x1b0/0x230
[  256.015333][    C1]  __x64_sys_getsockopt+0xb1/0xc0
[  256.020344][    C1]  do_syscall_64+0x4c/0xa0
[  256.024742][    C1]  ? clear_bhb_loop+0x30/0x80
[  256.029394][    C1]  ? clear_bhb_loop+0x30/0x80
[  256.034049][    C1]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  256.039926][    C1] RIP: 0033:0x7ff6c0ad292a
[  256.044339][    C1] Code: ff c3 66 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb b8 0f 1f 44 00 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7
[  256.063924][    C1] RSP: 002b:00007fff213a5ce8 EFLAGS: 00000212 ORIG_RAX: 0000000000000037
[  256.072315][    C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff6c0ad292a
[  256.080269][    C1] RDX: 0000000000000061 RSI: 0000000000000000 RDI: 0000000000000003
[  256.088231][    C1] RBP: 00007fff213a5d50 R08: 00007fff213a5cfc R09: 00007fff213a60e7
[  256.096184][    C1] R10: 00007fff213a5d50 R11: 0000000000000212 R12: 00007fff213a5cfc
[  256.104162][    C1] R13: 00000000000927c0 R14: 000000000003e589 R15: 00007fff213a6430
[  256.112137][    C1]  </TASK>
[  256.115145][    C1] 
[  256.117447][    C1] Allocated by task 4486:
[  256.121752][    C1]  __kasan_kmalloc+0xb5/0xf0
[  256.126319][    C1]  rose_add_node+0x227/0xdb0
[  256.130882][    C1]  rose_rt_ioctl+0x9db/0xe20
[  256.135450][    C1]  rose_ioctl+0x27a/0x790
[  256.139779][    C1]  sock_do_ioctl+0xd3/0x2f0
[  256.144278][    C1]  sock_ioctl+0x4ed/0x6e0
[  256.148583][    C1]  __se_sys_ioctl+0xfa/0x170
[  256.153155][    C1]  do_syscall_64+0x4c/0xa0
[  256.157566][    C1]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  256.163440][    C1] 
[  256.165741][    C1] Freed by task 6796:
[  256.169692][    C1]  kasan_set_track+0x4b/0x70
[  256.174261][    C1]  kasan_set_free_info+0x1f/0x40
[  256.179178][    C1]  ____kasan_slab_free+0xd5/0x110
[  256.184181][    C1]  slab_free_freelist_hook+0xea/0x170
[  256.189540][    C1]  kfree+0xef/0x2a0
[  256.193344][    C1]  rose_rt_device_down+0x4e2/0x530
[  256.198447][    C1]  rose_device_event+0x5ec/0x680
[  256.203365][    C1]  raw_notifier_call_chain+0xcb/0x160
[  256.208729][    C1]  __dev_notify_flags+0x178/0x2d0
[  256.213728][    C1]  dev_change_flags+0xe3/0x1a0
[  256.218465][    C1]  dev_ifsioc+0x147/0xe70
[  256.222869][    C1]  dev_ioctl+0x55f/0xe50
[  256.227093][    C1]  sock_do_ioctl+0x222/0x2f0
[  256.231659][    C1]  sock_ioctl+0x4ed/0x6e0
[  256.235965][    C1]  __se_sys_ioctl+0xfa/0x170
[  256.240540][    C1]  do_syscall_64+0x4c/0xa0
[  256.244961][    C1]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  256.250852][    C1] 
[  256.253151][    C1] The buggy address belongs to the object at ffff888062965400
[  256.253151][    C1]  which belongs to the cache kmalloc-512 of size 512
[  256.267176][    C1] The buggy address is located 42 bytes inside of
[  256.267176][    C1]  512-byte region [ffff888062965400, ffff888062965600)
[  256.280343][    C1] The buggy address belongs to the page:
[  256.285946][    C1] page:ffffea00018a5900 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x62964
[  256.296096][    C1] head:ffffea00018a5900 order:2 compound_mapcount:0 compound_pincount:0
[  256.304394][    C1] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  256.312357][    C1] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016841c80
[  256.320917][    C1] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  256.329467][    C1] page dumped because: kasan: bad access detected
[  256.335853][    C1] page_owner tracks the page as allocated
[  256.341543][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4183, ts 51484787501, free_ts 51482122312
[  256.360622][    C1]  get_page_from_freelist+0x1b77/0x1c60
[  256.366153][    C1]  __alloc_pages+0x1e1/0x470
[  256.370725][    C1]  new_slab+0xc0/0x4b0
[  256.374769][    C1]  ___slab_alloc+0x81e/0xdf0
[  256.379335][    C1]  __kmalloc_node_track_caller+0x1fc/0x3a0
[  256.385117][    C1]  __alloc_skb+0x22c/0x750
[  256.389510][    C1]  alloc_uevent_skb+0x7d/0x230
[  256.394255][    C1]  kobject_uevent_net_broadcast+0x17e/0x530
[  256.400122][    C1]  kobject_uevent_env+0x556/0x890
[  256.405122][    C1]  net_rx_queue_update_kobjects+0x221/0x490
[  256.410994][    C1]  netdev_register_kobject+0x223/0x310
[  256.416439][    C1]  register_netdevice+0x1019/0x16b0
[  256.421640][    C1]  ip6gre_newlink_common+0x39a/0x530
[  256.426918][    C1]  ip6gre_newlink+0x1d4/0x530
[  256.431578][    C1]  rtnl_newlink+0x114c/0x17d0
[  256.436237][    C1]  rtnetlink_rcv_msg+0x9b9/0xe60
[  256.441157][    C1] page last free stack trace:
[  256.445816][    C1]  free_unref_page_prepare+0x637/0x6c0
[  256.451259][    C1]  free_unref_page+0x94/0x280
[  256.455913][    C1]  stack_depot_save+0x418/0x440
[  256.460740][    C1]  __kasan_slab_alloc+0xb3/0xd0
[  256.465567][    C1]  slab_post_alloc_hook+0x4c/0x380
[  256.470661][    C1]  kmem_cache_alloc+0x100/0x290
[  256.475507][    C1]  __debug_object_init+0x811/0xa40
[  256.480599][    C1]  netdevice_event+0x71f/0x900
[  256.485346][    C1]  raw_notifier_call_chain+0xcb/0x160
[  256.490698][    C1]  __dev_notify_flags+0x178/0x2d0
[  256.495700][    C1]  dev_change_flags+0xe3/0x1a0
[  256.500440][    C1]  do_setlink+0xc01/0x3980
[  256.504835][    C1]  rtnl_newlink+0x1419/0x17d0
[  256.509487][    C1]  rtnetlink_rcv_msg+0x9b9/0xe60
[  256.514403][    C1]  netlink_rcv_skb+0x1e0/0x430
[  256.519152][    C1]  netlink_unicast+0x774/0x920
[  256.523897][    C1] 
[  256.526201][    C1] Memory state around the buggy address:
[  256.531811][    C1]  ffff888062965300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  256.539851][    C1]  ffff888062965380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  256.547896][    C1] >ffff888062965400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  256.555930][    C1]                                   ^
[  256.561277][    C1]  ffff888062965480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  256.569317][    C1]  ffff888062965500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  256.577350][    C1] ==================================================================
[  256.585383][    C1] Disabling lock debugging due to kernel taint
[  256.591617][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  256.598798][    C1] CPU: 1 PID: 4190 Comm: syz-executor Tainted: G    B             5.15.189-syzkaller #0
[  256.608499][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  256.618536][    C1] Call Trace:
[  256.621795][    C1]  <IRQ>
[  256.624619][    C1]  dump_stack_lvl+0x168/0x230
[  256.629280][    C1]  ? show_regs_print_info+0x20/0x20
[  256.634453][    C1]  ? load_image+0x3b0/0x3b0
[  256.638938][    C1]  panic+0x2c9/0x7f0
[  256.642814][    C1]  ? bpf_jit_dump+0xd0/0xd0
[  256.647294][    C1]  ? _raw_spin_unlock_irqrestore+0xa5/0x100
[  256.653164][    C1]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  256.659037][    C1]  ? _raw_spin_unlock+0x40/0x40
[  256.663864][    C1]  ? print_memory_metadata+0x314/0x400
[  256.669307][    C1]  ? rose_timer_expiry+0x470/0x490
[  256.674401][    C1]  check_panic_on_warn+0x80/0xa0
[  256.679323][    C1]  ? rose_timer_expiry+0x470/0x490
[  256.684423][    C1]  end_report+0x6d/0xf0
[  256.688554][    C1]  kasan_report+0x102/0x130
[  256.693032][    C1]  ? rose_timer_expiry+0x470/0x490
[  256.698120][    C1]  rose_timer_expiry+0x470/0x490
[  256.703039][    C1]  ? rose_start_t1timer+0xd0/0xd0
[  256.708046][    C1]  call_timer_fn+0x16c/0x530
[  256.712621][    C1]  ? rose_start_t1timer+0xd0/0xd0
[  256.717626][    C1]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  256.723587][    C1]  ? __run_timers+0x7c0/0x7c0
[  256.728244][    C1]  ? rcu_is_watching+0x11/0xa0
[  256.733016][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  256.738195][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  256.743387][    C1]  ? rose_start_t1timer+0xd0/0xd0
[  256.748398][    C1]  __run_timers+0x525/0x7c0
[  256.752892][    C1]  ? detach_timer+0x2b0/0x2b0
[  256.757547][    C1]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  256.763507][    C1]  ? sched_clock_cpu+0x15/0x3c0
[  256.768334][    C1]  ? ktime_get_real_ts64+0x420/0x420
[  256.773597][    C1]  run_timer_softirq+0x63/0xf0
[  256.778341][    C1]  handle_softirqs+0x328/0x820
[  256.783088][    C1]  ? __irq_exit_rcu+0x12f/0x220
[  256.787932][    C1]  ? do_softirq+0x200/0x200
[  256.792433][    C1]  __irq_exit_rcu+0x12f/0x220
[  256.797088][    C1]  ? irq_exit_rcu+0x20/0x20
[  256.801574][    C1]  irq_exit_rcu+0x5/0x20
[  256.805793][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  256.811406][    C1]  </IRQ>
[  256.814318][    C1]  <TASK>
[  256.817228][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  256.823190][    C1] RIP: 0010:kasan_check_range+0x74/0x290
[  256.828806][    C1] Code: df 4f 8d 0c 03 48 8d 5c 37 ff 48 c1 eb 03 4e 8d 14 3b 4d 89 d6 4d 29 ce 49 83 fe 10 7f 26 4d 85 f6 0f 84 39 01 00 00 48 f7 d3 <4c> 01 db 41 80 39 00 0f 85 c1 01 00 00 49 ff c1 48 ff c3 75 ee e9
[  256.848387][    C1] RSP: 0018:ffffc90002f1f340 EFLAGS: 00000202
[  256.854436][    C1] RAX: 0000000000000001 RBX: e00000000e52d22a RCX: ffffffff815c77b9
[  256.862387][    C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8d696ea8
[  256.870340][    C1] RBP: ffffc90002f1f470 R08: dffffc0000000000 R09: fffffbfff1ad2dd5
[  256.878288][    C1] R10: fffffbfff1ad2dd6 R11: 1ffffffff1ad2dd5 R12: 00007fff213a60f2
[  256.886236][    C1] R13: dffffc0000000000 R14: 0000000000000001 R15: dffffc0000000001
[  256.894187][    C1]  ? lock_release+0xa9/0x870
[  256.898759][    C1]  lock_release+0xa9/0x870
[  256.903159][    C1]  ? __might_sleep+0xf0/0xf0
[  256.907726][    C1]  ? __might_fault+0xb7/0x110
[  256.912378][    C1]  ? __might_sleep+0xf0/0xf0
[  256.916947][    C1]  ? __lock_acquire+0x7c60/0x7c60
[  256.921948][    C1]  ? __might_fault+0xb3/0x110
[  256.926600][    C1]  _copy_to_user+0x29/0x130
[  256.931081][    C1]  xt_obj_to_user+0xab/0x120
[  256.935647][    C1]  xt_target_to_user+0x97/0x270
[  256.940560][    C1]  ? _copy_to_user+0xf0/0x130
[  256.945211][    C1]  do_arpt_get_ctl+0xb9b/0xf40
[  256.949951][    C1]  ? do_arpt_set_ctl+0xef0/0xef0
[  256.954869][    C1]  ? nf_getsockopt+0x21b/0x280
[  256.959607][    C1]  ? nf_getsockopt+0x30/0x280
[  256.964259][    C1]  ? __lock_acquire+0x7c60/0x7c60
[  256.969262][    C1]  ? __mutex_lock_common+0x431/0x2390
[  256.974616][    C1]  ? __mutex_unlock_slowpath+0x19e/0x6a0
[  256.980225][    C1]  ? mutex_unlock+0x10/0x10
[  256.984703][    C1]  ? __might_fault+0xb7/0x110
[  256.989356][    C1]  ? __lock_acquire+0x7c60/0x7c60
[  256.994358][    C1]  ? __local_bh_enable_ip+0x12a/0x1b0
[  256.999706][    C1]  nf_getsockopt+0x25e/0x280
[  257.004275][    C1]  ip_getsockopt+0x115a/0x1590
[  257.009018][    C1]  ? ip_setsockopt+0x3070/0x3070
[  257.013930][    C1]  ? stack_trace_save+0x98/0xe0
[  257.018753][    C1]  ? stack_trace_snprint+0xf0/0xf0
[  257.023842][    C1]  ? __kasan_slab_alloc+0xb3/0xd0
[  257.028843][    C1]  ? __kasan_slab_alloc+0x9c/0xd0
[  257.033842][    C1]  ? slab_post_alloc_hook+0x4c/0x380
[  257.039100][    C1]  ? kmem_cache_alloc+0x100/0x290
[  257.044101][    C1]  ? security_file_alloc+0x30/0x110
[  257.049275][    C1]  ? __alloc_file+0xc2/0x240
[  257.053839][    C1]  ? alloc_empty_file+0x90/0x180
[  257.058749][    C1]  ? alloc_file+0x5b/0x4f0
[  257.063143][    C1]  ? alloc_file_pseudo+0x17a/0x1f0
[  257.068228][    C1]  ? sock_alloc_file+0xb3/0x240
[  257.073053][    C1]  ? __sys_socket+0x11d/0x170
[  257.077704][    C1]  ? __x64_sys_socket+0x76/0x80
[  257.082531][    C1]  ? do_syscall_64+0x4c/0xa0
[  257.087097][    C1]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  257.093144][    C1]  ? mark_lock+0x94/0x320
[  257.097450][    C1]  ? mark_lock+0x94/0x320
[  257.101756][    C1]  ? __lock_acquire+0x13ad/0x7c60
[  257.106758][    C1]  tcp_getsockopt+0x1e3/0x2390
[  257.111500][    C1]  ? tcp_bpf_bypass_getsockopt+0x40/0x40
[  257.117110][    C1]  ? aa_label_sk_perm+0x37e/0x490
[  257.122111][    C1]  ? aa_sk_perm+0x8f0/0x8f0
[  257.126592][    C1]  ? __raw_spin_lock_init+0x41/0x100
[  257.131852][    C1]  ? __might_sleep+0xf0/0xf0
[  257.136416][    C1]  ? percpu_counter_add_batch+0x13b/0x160
[  257.142117][    C1]  ? aa_sk_perm+0x7b4/0x8f0
[  257.146601][    C1]  ? aa_af_perm+0x2b0/0x2b0
[  257.151080][    C1]  ? aa_sock_opt_perm+0x74/0x100
[  257.155994][    C1]  ? sock_common_getsockopt+0x29/0xa0
[  257.161339][    C1]  ? sock_recv_errqueue+0x4b0/0x4b0
[  257.166511][    C1]  __sys_getsockopt+0x1b0/0x230
[  257.171339][    C1]  __x64_sys_getsockopt+0xb1/0xc0
[  257.176341][    C1]  do_syscall_64+0x4c/0xa0
[  257.180736][    C1]  ? clear_bhb_loop+0x30/0x80
[  257.185389][    C1]  ? clear_bhb_loop+0x30/0x80
[  257.190040][    C1]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  257.195912][    C1] RIP: 0033:0x7ff6c0ad292a
[  257.200311][    C1] Code: ff c3 66 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb b8 0f 1f 44 00 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7
[  257.219891][    C1] RSP: 002b:00007fff213a5ce8 EFLAGS: 00000212 ORIG_RAX: 0000000000000037
[  257.228279][    C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007ff6c0ad292a
[  257.236226][    C1] RDX: 0000000000000061 RSI: 0000000000000000 RDI: 0000000000000003
[  257.244173][    C1] RBP: 00007fff213a5d50 R08: 00007fff213a5cfc R09: 00007fff213a60e7
[  257.252120][    C1] R10: 00007fff213a5d50 R11: 0000000000000212 R12: 00007fff213a5cfc
[  257.260069][    C1] R13: 00000000000927c0 R14: 000000000003e589 R15: 00007fff213a6430
[  257.268021][    C1]  </TASK>
[  257.271218][    C1] Kernel Offset: disabled
[  257.275529][    C1] Rebooting in 86400 seconds..