last executing test programs:

1m10.698599125s ago: executing program 4 (id=315):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="5300030002"], 0x8)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
listen(r2, 0x8)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r5, &(0x7f00000000c0)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@empty, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0xc}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, @in6=@local, 0xff, 0x1, 0x0, 0x2, 0x2, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}}, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000000), 0x2)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000b40)={'dummy0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000580)={'batadv0\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0)

56.004249912s ago: executing program 4 (id=315):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="5300030002"], 0x8)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
listen(r2, 0x8)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r5, &(0x7f00000000c0)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@empty, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0xc}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, @in6=@local, 0xff, 0x1, 0x0, 0x2, 0x2, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}}, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000000), 0x2)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000b40)={'dummy0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000580)={'batadv0\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0)

46.244693872s ago: executing program 4 (id=315):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="5300030002"], 0x8)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
listen(r2, 0x8)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r5, &(0x7f00000000c0)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@empty, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0xc}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, @in6=@local, 0xff, 0x1, 0x0, 0x2, 0x2, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}}, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000000), 0x2)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000b40)={'dummy0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000580)={'batadv0\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0)

35.192412316s ago: executing program 4 (id=315):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="5300030002"], 0x8)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
listen(r2, 0x8)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r5, &(0x7f00000000c0)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@empty, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0xc}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, @in6=@local, 0xff, 0x1, 0x0, 0x2, 0x2, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}}, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000000), 0x2)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000b40)={'dummy0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000580)={'batadv0\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0)

23.69108306s ago: executing program 4 (id=315):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="5300030002"], 0x8)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
listen(r2, 0x8)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r5, &(0x7f00000000c0)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@empty, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0xc}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, @in6=@local, 0xff, 0x1, 0x0, 0x2, 0x2, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}}, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000000), 0x2)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000b40)={'dummy0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000580)={'batadv0\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0)

8.061475658s ago: executing program 4 (id=315):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="5300030002"], 0x8)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
listen(r2, 0x8)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r5, &(0x7f00000000c0)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@empty, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0xc}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, @in6=@local, 0xff, 0x1, 0x0, 0x2, 0x2, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}}, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000000), 0x2)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000b40)={'dummy0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000580)={'batadv0\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0)

2.121548085s ago: executing program 0 (id=816):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_META_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x2002}, {0x1, 0x1000}]}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x5}, @struct={0xf, 0x3, 0x0, 0x4, 0x0, 0x4, [{0x0, 0x1, 0x8}, {0xf, 0x2, 0x8f9}, {0xc, 0x2, 0x7}]}]}}, &(0x7f0000000f40)=""/4089, 0x7e, 0xff9, 0x1, 0x0, 0x0, @void, @value}, 0x28)

1.939568435s ago: executing program 0 (id=818):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0)
unshare(0x2040400)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=ANY=[@ANYBLOB="01000000220800000700000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="044d06007b848cc21d550f2c7207e40000c0010000001005562afee553ee96fcdd12acbdf2a8ef9d47852e07cbd842b9d7890f5c8dca9d5b80fcc4952e9fd386b4a697424bcd9c79958c63903c25c285400e54066127"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x40)
sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x1, 0xa32, 0x0, {}, {0x77359400}, {0x2000000}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0xf, 0x1, 0x0, 0x0, "105a17684d469812d9e3b65161f924bdca7287ec94784a2a48f783913066c072902faf3cca44912a495a6565f00d31343c2c58143b7024e6707f5ca0bbaf6402"}}, 0x80}}, 0x0)
socketpair(0x1a, 0x1, 0x8, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000340)={<r4=>0x0, @in={{0x2, 0x4e21, @loopback}}, [0x0, 0x5, 0x2, 0x61e0, 0x1c00000000000000, 0x50d, 0x1, 0x0, 0xf, 0x9, 0x8, 0x3, 0x3, 0x9, 0x3]}, &(0x7f0000000180)=0x100)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r4, 0xc6, 0x7}, 0xc)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x4, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x8, r0}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r5, <r7=>0xffffffffffffffff}, &(0x7f0000000480), &(0x7f0000000980)=r6}, 0x20)
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000bc0), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x14, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf2}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@generic={0x8, 0xe, 0x6, 0xbb5, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000ac0)='GPL\x00', 0x81, 0xaa, &(0x7f0000000b00)=""/170, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x36, r8, 0x8, &(0x7f0000000c00)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000c40)={0x0, 0xa, 0x100400, 0x6}, 0x10, 0x0, r6, 0xa, &(0x7f0000000c80)=[r5], &(0x7f0000000cc0)=[{0x2, 0x3, 0x1}, {0x2, 0x1, 0x2, 0x6}, {0x0, 0x3, 0x4, 0x2}, {0x1, 0x5, 0x7, 0x1}, {0x0, 0x5, 0x0, 0x1}, {0x2, 0x5, 0xa, 0x4}, {0x4, 0x1, 0xe, 0x9}, {0x3, 0x2, 0x4, 0x5}, {0x1, 0x4, 0x3, 0x9}, {0x4, 0x4, 0x8, 0x9}], 0x10, 0x9, @void, @value}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r5, &(0x7f0000000140), 0x0}, 0x20)
close(0x4)
readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000001600)=""/4112, 0x1010}], 0x1)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r12=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_newaddr={0x44, 0x14, 0xa09, 0x0, 0x0, {0x2, 0x1f, 0xc8, 0xfe, r12}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x24}}, @IFA_LABEL={0x14, 0x3, 'dummy0\x00'}, @IFA_ADDRESS={0xfffffffffffffd71, 0x1, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r12}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

1.816239635s ago: executing program 2 (id=820):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$packet(0x11, 0x2, 0x300)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x47)
sendto$packet(r4, 0x0, 0x0, 0x30, &(0x7f0000000140)={0x11, 0x10, r3, 0x1, 0x1, 0x6, @broadcast}, 0x14)

1.699876351s ago: executing program 3 (id=821):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg(r1, &(0x7f0000001040)=[{{&(0x7f0000000140)=@caif=@util={0x25, "0648da2408299af0d155fdd1db4a434d"}, 0x80, 0x0}}], 0x1, 0x4000)
shutdown(r0, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000001a40)={0xff, @dev={0xac, 0x14, 0x14, 0x29}, 0x4e23, 0x2, 'sh\x00', 0x18, 0x80006, 0x71}, 0x2c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x78}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFINDEX(r2, 0x400454da, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000))
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5, @bcast, @bpq0, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]})
r6 = accept(r3, &(0x7f0000001700)=@ax25={{}, [@null, @default, @default, @rose, @default, @remote, @remote, @default]}, &(0x7f00000012c0)=0x80)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001b80)={<r7=>0x0, @in6={{0xa, 0x4e24, 0x80000001, @private2, 0xbd64}}, 0xc, 0x4df}, &(0x7f0000001a80)=0x90)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000001ac0)=@sack_info={r7, 0x736, 0x4}, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x9, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r9, <r10=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r8}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r10, &(0x7f0000000240), 0x0}, 0x20)
r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r11, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]})

1.546697299s ago: executing program 1 (id=822):
unshare(0x2a020480)
unshare(0x60480)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0700000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="ffff65e18a63056bebff00000000000000000000a5eb5b9fb43be64f1dd1f3be2e783ff4faaa5ced2ff4565a06a84529eb7197ae16239f648aabfd1db7e43172e37782e931c13c58950d496dd3c837a6966ce8894098609e7fa397a3516bd9bef36b3dc7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ppoll(&(0x7f0000000300)=[{r1, 0x100}], 0x1, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0, 0x0)
close(r1)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r2, &(0x7f0000000000)="0a000000010001", 0x7)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffd000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000002d00090027bd70000000000002"], 0x20}}, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0xc8, &(0x7f0000000040)=ANY=[@ANYBLOB="ff1b66b12ef8ffffffffffff8848000000000000000000000000000000000000000000000000b1795687a9de18511971f4bc1f523e82f8d4fdc0646d1fb43f659644f827230b327e0aa00e3ad6e540aa8f8bb94cf91d9587981c7feb80b425615c62d42b43a6eba3044e39c77af481234594da7439963180be54df2a21ecc9ff4963819a6a27bcc5b8730c3c91d4381548a8cbc1f414caa6e400c175a01296190b27c404abae30f7d58841edb66626f963fa67477fce3ea59dfbf6386986d0fea3067af6cf9017af"], &(0x7f0000000180)={0x1, 0x1, [0x402, 0x391, 0xbcf, 0x979]})

1.470106069s ago: executing program 3 (id=823):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x891b, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001200375f3fbd7000fddbdf2507000000", @ANYRES32=0x0, @ANYBLOB="82d2cba70fbda1df7280000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0xc0)

1.24406266s ago: executing program 3 (id=824):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xc7, '\x00', 0x86dc, 0x3, 0x100, 0xc}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x6c}}, 0x4000010)

1.240379861s ago: executing program 2 (id=825):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = socket$unix(0x1, 0x1, 0x0)
accept$unix(r3, &(0x7f0000000300)=@abs, &(0x7f0000000380)=0x6e)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="24005a802000018014000300040010000700e70000000900040004000500040017"], 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x40000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb4, r5, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IE={0x25, 0x2a, [@prep={0x83, 0x1f, {{}, 0x7, 0x3, @device_b, 0x6, @void, 0xd, 0x5}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x67}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x16}, @NL80211_ATTR_IE={0x56, 0x2a, [@tim={0x5, 0x50, {0x7, 0x4d, 0x4, "6a775f7dbd2a7ec54ec4ad1fcac708ff356cb4143e9b939f9eaa34af93674ba137a8c09d4afe7d2dd9e893d879bbf3a3fa66bb95ad36043c2e758ee06f957e2902d58997b6b5e4c441981faa19"}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x46}]}, 0xb4}, 0x1, 0x0, 0x0, 0x11}, 0x800)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028008000500012000000800010000000000080029007e6b0000080028"], 0x104}}, 0x0)

1.233602241s ago: executing program 0 (id=826):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) (async)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0xb4, r4, 0x421, 0x0, 0x4, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x8c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbb1e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x237226aa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8c71}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8187}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdb24}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1181}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6a5b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a869a1a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x91e6}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57581d36}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6056c0b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x182b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d2e2ac5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13ec011b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x23d7}]}]}]}, 0xb4}}, 0x4)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x48, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x6d}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0xfffffec1, 0x118, 0x10}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]]}, 0x48}}, 0x0)

1.195777043s ago: executing program 1 (id=827):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4000})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) (async, rerun: 64)
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x13) (async, rerun: 64)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32)
r2 = socket$unix(0x1, 0x1, 0x0) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)=r5}, 0x20) (async, rerun: 64)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0xfee5, 0x1000, &(0x7f0000000080)="6eda8ed65f7d3c8b", &(0x7f0000001300)=""/4096, 0x0, 0x0, 0x3b, 0xf8, &(0x7f00000000c0)="82eef3a24e6c53da33bc33d7503fe45669498f85e231a9fbc1baa2cb8042ba80a5bb1286eefec762043ab500"/59, &(0x7f0000000600)="8aeb1fff6a27a2aeebdc9eaaf4cd80782e7540cc29e849b82fc93bb1211c6627d6199efe676377c71a05adcb3e04a29ec0872d0f69b0f784d2b897a39c7f92c14e503b2bf7e6d0e178dc764d5105c907f7716f11380fe7999cc83837ed0781ce753b11038aa5c09a08f9381143d3c56ef8c21d43e872678db524fbfb658bebe0c21474b7bd34521588a59d156d92791884ee0c9bfc0bd2b33a5dc46d066b602f53e7e393760a60a205529c3d84886417660d785df525e8b89ec1a3c38def97ec54d5ad9f21e05ff22261ed4e32c624bd069fece5e797b468d58111bcc62c578cdf51e1926f5e64ce264c67860148902ebdb5691e7811f1e5", 0x3, 0x0, 0x4}, 0x50) (async, rerun: 64)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async, rerun: 32)
setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000240)='multiq\x00', 0x7) (rerun: 32)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000055c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xd, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0xf3}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
socket$nl_audit(0x10, 0x3, 0x9) (async, rerun: 32)
r6 = socket$inet(0x2, 0x80001, 0x84)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan1\x00'})
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x74, &(0x7f0000000200)={r7, 0xfffe, 0x20}, &(0x7f00000001c0)=0x18) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r10=>0x0}) (async, rerun: 32)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (rerun: 32)
sendmsg$NL80211_CMD_SET_CQM(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r10, @ANYBLOB="60005e80080006000002000008000700f605000008000900000000000c0001000500000002000000080005"], 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8d0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r12, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)=""/102, 0x66}, {&(0x7f0000003780)=""/4099, 0x1003}, {&(0x7f0000000380)=""/177, 0xb1}], 0x3}, 0x9}], 0x1, 0x10000, 0x0)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000200)={r7, 0xb}, 0x8)

1.034224418s ago: executing program 3 (id=828):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmmsg$inet(r0, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000240)="41fc6c112cdc", 0x6}], 0x1}}, {{&(0x7f0000002880)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000002bc0)=[{&(0x7f00000028c0)="d678111595", 0x5}], 0x1}}], 0x2, 0x40040)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}]}}}]}, 0x50}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r4 = openat$cgroup_devices(r3, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r4, &(0x7f0000000200)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0xb)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e)
getsockname(r1, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x2c, r11, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a0d4e01051d6ff63"}]}]}, 0x2c}}, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000003000000580001800d0001007564703a73797a300000000044000400200001000a004e2400000044000000002e003a2d000000000000004c37160000200002000a"], 0x6c}}, 0x0)
r13 = socket$alg(0x26, 0x5, 0x0)
setsockopt$SO_ATTACH_FILTER(r13, 0x1, 0x1a, &(0x7f0000000340)={0x9, &(0x7f0000000140)=[{0xffff, 0x4, 0xd, 0xfff}, {0xce00, 0x2, 0x9, 0x9}, {0x8, 0x81, 0x39, 0x1}, {0x1200, 0x1, 0x2e, 0x4}, {0x5, 0xd7, 0xb, 0xfff}, {0x40, 0x63, 0x2, 0x7}, {0x3, 0x2, 0xff, 0x8}, {0x4, 0x0, 0x9, 0x1}, {0x18, 0xf, 0x6, 0x80000000}]}, 0x10)
bind$alg(r13, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r13, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5820fae9d6dcd3292ea54c7bef549", 0x12)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001200576d100000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000002000255000008001d00ca"], 0x3c}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="54000000000000001c00128009000100622f6e64000000000c00028008001400ffffffff"], 0x3c}}, 0x0)

976.128707ms ago: executing program 0 (id=829):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32], 0x4c}}, 0x0)

975.457474ms ago: executing program 2 (id=830):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00'}, 0x10) (async)
socket$kcm(0x2b, 0x1, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@ipv6_newnexthop={0x3c, 0x68, 0x5fb9a818fb7378e9, 0x20000, 0x0, {}, [@NHA_GROUP={0x24, 0x2, [{0x2, 0x6}, {0x0, 0xa}, {0x1, 0x6}, {0x1, 0x20}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x44000) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) (async)
sendmsg$FOU_CMD_ADD(r1, 0x0, 0x4008800) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
socket(0xa, 0x3, 0x3a) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$packet(0x11, 0x2, 0x300) (async)
socket$pppoe(0x18, 0x1, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$inet6(0xa, 0x80803, 0x87) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x7a44, 0x1700) (async, rerun: 32)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010102000000000000000002000000240002800c000280040001003a00000014000180080001cd4bde2a0192000000000000000c001980080002"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0)

820.523474ms ago: executing program 0 (id=831):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000068000100030010000000008000000000000000000400020004000b00060003000010"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000)
recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000080)=""/35, 0x23}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000002fc0)=""/4093, 0xffd}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x6}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x27}, {{0x0, 0x0, 0x0}, 0x401}], 0x6, 0x20, 0x0)

812.057911ms ago: executing program 1 (id=832):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={r2, 0xffff}, 0x8)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
writev(r0, &(0x7f0000002840)=[{&(0x7f0000000440)="30bca90dfbbde0e8fe0a47a40a3c77e052f2a38ae7c19642a2057fc39448936b07fd71041d20e23a6472f17d949da0aa2cecbe49a8da6ebeaea8728b6735dc25a6b40b00f6", 0x45}], 0x1000000000000213)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0xc000001)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "634a274e559af603", "211467d513c84265f6c4c963a6a2efb4fe7be352ebf6dcf154daedf47f12262d", "ac8335aa", "3f591eb161c74566"}, 0x38)

643.819353ms ago: executing program 2 (id=833):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg(r1, &(0x7f0000001040)=[{{&(0x7f0000000140)=@caif=@util={0x25, "0648da2408299af0d155fdd1db4a434d"}, 0x80, 0x0}}], 0x1, 0x4000)
shutdown(r0, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000001a40)={0xff, @dev={0xac, 0x14, 0x14, 0x29}, 0x4e23, 0x2, 'sh\x00', 0x18, 0x80006, 0x71}, 0x2c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x78}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFINDEX(r2, 0x400454da, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000))
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5, @bcast, @bpq0, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]})
r6 = accept(r3, &(0x7f0000001700)=@ax25={{}, [@null, @default, @default, @rose, @default, @remote, @remote, @default]}, &(0x7f00000012c0)=0x80)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001b80)={<r7=>0x0, @in6={{0xa, 0x4e24, 0x80000001, @private2, 0xbd64}}, 0xc, 0x4df}, &(0x7f0000001a80)=0x90)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000001ac0)=@sack_info={r7, 0x736, 0x4}, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x9, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r9, <r10=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r8}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r10, &(0x7f0000000240), 0x0}, 0x20)
r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r11, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]})

579.352747ms ago: executing program 1 (id=834):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000ff0100000000000000181378b339005f19dfd0b000000000000000"], 0x48) (async)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async)
writev(r2, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) (async)
splice(r1, 0x0, r5, 0x0, 0x80, 0x6) (async)
write(r5, &(0x7f0000003300)="ac", 0x1) (async)
write(r3, 0x0, 0x0) (async)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async)
write(r6, &(0x7f0000000340)="18000000010003", 0x7) (async)
r7 = socket(0x10, 0x80002, 0x0)
r8 = accept4(r7, &(0x7f0000000180)=@l2={0x1f, 0x0, @none}, &(0x7f0000000200)=0x80, 0x80000) (async)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)=""/219, 0x10e, 0xdb, 0x1, 0x3, 0x10000, @value}, 0x28)
r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='memory.swap.events\x00', 0x0, 0x0)
openat$cgroup_procs(r10, &(0x7f0000000580)='cgroup.procs\x00', 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e00000005000000000200000001200000000000", @ANYRES32=r0, @ANYBLOB="6499fc2f00"/20, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="0300000004000000010000000400"/28], 0x50)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r11, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) (async)
setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async)
connect$inet(r11, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async)
setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmsg$inet(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="e9", 0x1}], 0x1}, 0x11) (async)
sendmmsg$inet(r11, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{0x0, 0x4b}, {0x0}, {&(0x7f0000002b40)='-', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb17", 0x52}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140)='N', 0x1}, {&(0x7f0000000340)="e4", 0x1}], 0x2}}], 0x4, 0x4000000) (async)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x7, 0x25dfdbff, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x2, 0x1, 0x3, {@in6_addr=@empty, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044800}, 0x40004c0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tlb_flush\x00', r12}, 0x10) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)

546.782886ms ago: executing program 0 (id=835):
readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)=""/227, 0xe3}], 0x1)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0), 0x4)
pipe(&(0x7f00000007c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
splice(r1, 0x0, r2, 0x0, 0xfffd, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f0000000500)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x8}, @generic={0xe, 0x1, 0x6, 0xa8, 0xe45b}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff9}], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x51, @void, @value}, 0x94)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_TABLE(r4, 0x0, 0xcf, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x18)
pselect6(0x40, &(0x7f0000000100)={0xfffffffffffffffd, 0xffffffffffffffff, 0x8, 0x4, 0x3, 0x9, 0x9, 0xb881}, &(0x7f0000000140)={0x2ce5, 0x6, 0x10, 0x33, 0x8, 0xfffffffffffeffff, 0x0, 0xd3}, &(0x7f0000000180)={0x3, 0x5, 0xb, 0x1, 0xfffffffffffffff7, 0x5, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x3938700}, &(0x7f0000000380)={&(0x7f0000000340)={[0x5]}, 0x8})
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001e0001eb25bd70000000000001"], 0x114}], 0x1}, 0x0)

497.119866ms ago: executing program 2 (id=836):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000001600)=""/4112, 0x1010}], 0x1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000180)={'vcan0\x00', 0x8})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r3=>0x0})
ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f00000001c0)={0x76a1, 0x9})
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001400090a0000000000000000021fc8fe6b3b8a778c9c5bba59faf3257c70de242fabe2643c5b7b32088d96c1035d24919d9677797ce7da4dc0d488cd0baaadca533d0b306f05f2b82e5854300f763bafff4864eb5c363e9dd6c013d53060db6297214f15c2c04ba93d9ffe02bc4d9bea990fb61426580a9fd33af3ac23d414", @ANYRES32=r3, @ANYBLOB="08000200e000000208000400ac1414241400030064756d6d79300000000000000000000071fd0100ac141421"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x8000, 0x4)
accept4(r4, &(0x7f0000000140)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, &(0x7f0000000200)=0x80, 0x80000)
sendto$inet6(r4, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xfff7}], 0x1}}], 0x1, 0x0)
r5 = socket(0xa, 0x2400000001, 0x0)
getsockopt$inet6_buf(r5, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r3}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

439.755308ms ago: executing program 3 (id=837):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)={0x44, r1, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x0) (async)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000000, 0x50, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10012, r2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1a, 0x10, 0x0, &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000814, &(0x7f0000000380)={0xa, 0x4e20, 0x6, @remote}, 0x1c) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) (async)
r4 = socket(0x40000000002, 0x3, 0x80000000002)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='wg1\x00', 0x10)
sendto$unix(r4, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) (async)
ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000080))
r5 = accept4(r3, 0x0, 0x0, 0x80800) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00'})
sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000000c0)={0xa, 0x4e20, 0x401, @rand_addr=' \x01\x00', 0x3}, 0x1c, &(0x7f0000000340), 0x0, &(0x7f00000006c0)=ANY=[], 0x138}, 0x4044005) (async)
sendmsg$alg(r5, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x1}], 0x2}, 0x4c0d5) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0, 0x32, 0x0, 0x1, 0x1, 0x0, @void, @value}, 0x28)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = socket$rds(0x15, 0x5, 0x0) (async)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r2)
sendmsg$TIPC_NL_BEARER_DISABLE(r5, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r9, 0x400, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8040)
setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) (async)
ioctl$sock_proto_private(r8, 0x89e0, &(0x7f0000001080))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0xc3}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x30}, 0x1, 0xffffa888}, 0x8810)

413.489494ms ago: executing program 1 (id=838):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xc7, '\x00', 0x86dc, 0x3, 0x100, 0xc}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x6c}}, 0x4000010)

54.135412ms ago: executing program 2 (id=839):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f000000aac0)={'ip6_vti0\x00', 0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
readv(r3, &(0x7f0000000180)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c80000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800840000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYBLOB="080023000600000006002200c7f300006800348014003500636169663000000000000000000000001400350076657468315f746f5f68737200000000140035006d6163766c616e310000000000000000140035006970365f76746930f5ff00000000000014003500627269646765200000000000000000000a000200bb"], 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f000000aac0)={'ip6_vti0\x00', 0x0}) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x1, 0x803, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async)
readv(r3, &(0x7f0000000180)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1) (async)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c80000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800840000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYBLOB="080023000600000006002200c7f300006800348014003500636169663000000000000000000000001400350076657468315f746f5f68737200000000140035006d6163766c616e310000000000000000140035006970365f76746930f5ff00000000000014003500627269646765200000000000000000000a000200bb"], 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async)

49.7732ms ago: executing program 3 (id=840):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000001000)=0x8e, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'sit0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})

0s ago: executing program 1 (id=841):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r2=>0x0})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) (async, rerun: 64)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (rerun: 64)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee38", 0x14}], 0x3}], 0x1, 0x40800) (async)
recvmmsg$unix(r4, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/57, 0x39}, {&(0x7f0000000180)=""/74, 0x4a}], 0x2}}], 0x1, 0x10000, 0x0) (async, rerun: 64)
setsockopt$inet6_buf(r4, 0x29, 0xa0, &(0x7f0000000080)="526ee0d61a70539810c3cbf35b9d9ee30f474ff51bbfde991e235be57e2542d8a4d86f39c6fb1024263d596c8dd448d6412ec8b8c3b90813478fb21a0bee0ca3285a527ccb2304c95fa1ea19452d3de00c995471a2b15a65b9fc384a070b3f78ce864c2ec5039a5067a53e72ccbc51a513e302410456574cacdafbcd91723b59d453119a9403cfcd2425240fa5a5e088551d54f95f0a65279206c2d7b6a617169e6c334b21a122d011ade5385b6f2129482e7b63518efcac97134bb3a14af0f9698f2712a5c59e", 0xc7) (rerun: 64)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_CONFIG={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xdf34}]}, 0x34}}, 0x0)

kernel console output (not intermixed with test programs):

2 family 0 port 6081 - 0
[   95.386021][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.396095][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.405375][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.434812][ T5841] veth1_macvtap: entered promiscuous mode
[   95.451457][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.462905][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.501992][ T5853] veth0_macvtap: entered promiscuous mode
[   95.539871][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.551609][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.561530][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.572107][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.583779][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.595305][ T5853] veth1_macvtap: entered promiscuous mode
[   95.608586][ T5838] veth0_macvtap: entered promiscuous mode
[   95.621744][ T5838] veth1_macvtap: entered promiscuous mode
[   95.640143][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.651305][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.661851][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.672452][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.683934][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.696223][ T5841] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.706207][ T5841] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.716716][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.724008][ T5841] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.733976][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.740193][ T5841] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.821347][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.837220][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.848145][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.864293][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.875039][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.887516][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.899493][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.925150][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   95.959306][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.971552][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.985590][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.996163][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.006230][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.020222][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.033223][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.048475][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.066123][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.079798][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.092646][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.104565][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.116790][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.132498][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.144505][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.156720][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.184187][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.197656][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.220968][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.233619][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.244824][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.256074][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.265960][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.278505][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.288473][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.299263][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.311212][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.331781][ T5853] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.341612][ T5853] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.350921][ T5853] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.361677][ T5853] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.437397][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.447939][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.453959][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.457646][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.464950][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.480832][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.989230][   T55] Bluetooth: hci0: command tx timeout
[   96.989712][ T5843] Bluetooth: hci3: command tx timeout
[   97.069320][   T55] Bluetooth: hci2: command tx timeout
[   97.074920][ T5843] Bluetooth: hci4: command tx timeout
[   97.075525][    T9] cfg80211: failed to load regulatory.db
[   97.085020][   T55] Bluetooth: hci1: command tx timeout
[   97.399192][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.407068][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.509435][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.517313][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.547618][ T5931] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   97.590885][  T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.605021][  T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.702362][  T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.736237][  T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.803511][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.837114][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.906085][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.921677][ T5940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'.
[   97.931637][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.963677][ T5940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'.
[   98.000487][ T5940] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.121411][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_1
[   98.308866][ T5948] netlink: 'syz.0.7': attribute type 16 has an invalid length.
[   98.316549][ T5948] netlink: 'syz.0.7': attribute type 17 has an invalid length.
[   98.443744][ T5948] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   98.613082][ T5956] tipc: Failed to remove unknown binding: 66,1,1/0:537678688/537678690
[   98.627730][ T5956] tipc: Failed to remove unknown binding: 66,1,1/0:537678688/537678690
[   98.682345][ T5953] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2'.
[   98.702305][ T5953] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2'.
[   98.723777][ T5955] Zero length message leads to an empty skb
[   99.127872][ T5966] unknown channel width for channel at 909000KHz?
[   99.150387][ T5843] Bluetooth: hci4: command tx timeout
[   99.780972][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16'.
[   99.841511][ T6005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16'.
[  100.605951][ T6005] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.798910][ T6005] batman_adv: batadv0: Removing interface: batadv_slave_1
[  101.294284][ T6046] syz.3.17 uses obsolete (PF_INET,SOCK_PACKET)
[  101.417444][ T6053] syzkaller0: entered promiscuous mode
[  101.424884][ T6053] syzkaller0: entered allmulticast mode
[  101.565436][ T6059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19'.
[  101.846671][ T6062] tc_dump_action: action bad kind
[  103.808132][ T6108] warning: `syz.0.25' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  104.162125][ T6124] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  104.469968][ T6136] netlink: 96 bytes leftover after parsing attributes in process `syz.3.35'.
[  104.552435][ T6138] can: request_module (can-proto-0) failed.
[  104.590664][ T6136] tipc: Started in network mode
[  104.595673][ T6136] tipc: Node identity , cluster identity 4711
[  104.610461][ T6136] tipc: Failed to set node id, please configure manually
[  104.626911][ T6136] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  105.014310][ T6149] netlink: 16 bytes leftover after parsing attributes in process `syz.3.38'.
[  105.730106][ T6163] netlink: 'syz.0.44': attribute type 5 has an invalid length.
[  105.753890][ T6163] netlink: 'syz.0.44': attribute type 5 has an invalid length.
[  106.006114][ T6172] netlink: 'syz.3.46': attribute type 1 has an invalid length.
[  106.018799][ T6172] netlink: 'syz.3.46': attribute type 2 has an invalid length.
[  106.027687][ T6176] netlink: 20 bytes leftover after parsing attributes in process `syz.1.43'.
[  106.351816][ T6189] ipvlan0: entered promiscuous mode
[  106.626809][ T6197] delete_channel: no stack
[  106.690226][ T6196] delete_channel: no stack
[  107.372503][ T6220] netlink: 'syz.1.55': attribute type 1 has an invalid length.
[  107.925383][ T6231] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  108.954959][ T6248] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  109.309628][ T6256] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.67'.
[  109.338866][ T6256] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  110.306635][ T6282] trusted_key: syz.1.73 sent an empty control message without MSG_MORE.
[  110.472759][ T6280] syzkaller0: entered promiscuous mode
[  110.512789][ T6280] syzkaller0: entered allmulticast mode
[  110.523405][ T6289] netlink: 20 bytes leftover after parsing attributes in process `syz.3.74'.
[  110.683702][ T6291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.75'.
[  111.645138][ T6144] Set syz1 is full, maxelem 65536 reached
[  111.755080][ T6303] netlink: 'syz.4.77': attribute type 1 has an invalid length.
[  112.664028][ T6291] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  112.708415][ T6291] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  112.967826][ T6317] Driver unsupported XDP return value 0 on prog  (id 45) dev N/A, expect packet loss!
[  113.032511][ T6319] netlink: 24 bytes leftover after parsing attributes in process `syz.4.83'.
[  113.124248][ T6333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.85'.
[  113.610558][ T6336] tipc: Started in network mode
[  113.615512][ T6336] tipc: Node identity fee00000000000000079940000000001, cluster identity 4711
[  113.626831][ T6336] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  114.212132][ T6359] Bluetooth: MGMT ver 1.23
[  114.237780][ T6359] netlink: 28 bytes leftover after parsing attributes in process `syz.4.92'.
[  114.353807][ T6370] IPVS: set_ctl: invalid protocol: 98 172.30.0.3:20000
[  114.416711][ T6370] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20002
[  114.501174][ T6373] netlink: 256 bytes leftover after parsing attributes in process `syz.3.96'.
[  114.843195][ T6377] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  115.185816][ T6387] geneve0: entered allmulticast mode
[  116.023362][ T6383] netlink: 312 bytes leftover after parsing attributes in process `syz.3.98'.
[  116.079143][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.98'.
[  116.175519][ T6437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.106'.
[  116.248320][ T6434] tipc: Started in network mode
[  116.291007][ T6434] tipc: Node identity 7f000001, cluster identity 4711
[  116.313225][ T6434] tipc: Enabled bearer <udp:sy>, priority 10
[  116.523382][ T6449] can: request_module (can-proto-0) failed.
[  117.432144][    T9] tipc: Node number set to 2130706433
[  117.692644][ T6500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.119'.
[  117.702000][ T6500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.119'.
[  117.714760][ T6500] netlink: 10 bytes leftover after parsing attributes in process `syz.1.119'.
[  117.979462][ T6519] netlink: 32 bytes leftover after parsing attributes in process `syz.1.121'.
[  118.233769][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.125'.
[  118.272353][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.124'.
[  118.424816][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.125'.
[  118.820376][ T6560] netlink: 'syz.4.128': attribute type 2 has an invalid length.
[  118.891766][ T6559] netlink: 'syz.0.130': attribute type 5 has an invalid length.
[  118.933109][ T6559] netlink: 'syz.0.130': attribute type 5 has an invalid length.
[  119.409884][ T6586] raw_sendmsg: syz.3.140 forgot to set AF_INET. Fix it!
[  119.443448][ T6585] netlink: 'syz.0.139': attribute type 7 has an invalid length.
[  119.640016][ T6588] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  119.741403][ T6587] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  120.205476][ T6625] sctp: [Deprecated]: syz.1.148 (pid 6625) Use of struct sctp_assoc_value in delayed_ack socket option.
[  120.205476][ T6625] Use struct sctp_sack_info instead
[  121.773420][ T6645] tipc: Started in network mode
[  121.778423][ T6645] tipc: Node identity 4, cluster identity 4711
[  121.786249][ T6645] tipc: Node number set to 4
[  121.986267][ T6669] __nla_validate_parse: 4 callbacks suppressed
[  121.986291][ T6669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.160'.
[  121.989034][ T6643] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.994428][ T6669] netlink: 24 bytes leftover after parsing attributes in process `syz.1.160'.
[  122.147386][ T6643] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.269411][ T6643] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.354745][ T6643] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.537523][ T6643] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.586202][ T6643] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.629418][ T6643] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.677407][ T6643] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.892399][ T6697] netlink: 'syz.3.168': attribute type 1 has an invalid length.
[  122.913980][ T6697] netlink: 3 bytes leftover after parsing attributes in process `syz.3.168'.
[  122.945567][ T6697] batadv1: entered promiscuous mode
[  122.951569][ T6697] batadv1: entered allmulticast mode
[  123.006684][ T6707] netlink: 3 bytes leftover after parsing attributes in process `syz.3.168'.
[  123.093876][ T6707] batadv1: entered promiscuous mode
[  123.117422][ T6707] batadv1: entered allmulticast mode
[  123.128260][ T6725] dccp_invalid_packet: P.Data Offset(102) too large
[  123.147470][ T6724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.174'.
[  123.491632][ T6734] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7
[  123.972159][ T6752] syz.3.182: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  124.007987][ T6752] CPU: 0 UID: 0 PID: 6752 Comm: syz.3.182 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) 
[  124.008020][ T6752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  124.008039][ T6752] Call Trace:
[  124.008048][ T6752]  <TASK>
[  124.008058][ T6752]  dump_stack_lvl+0x241/0x360
[  124.008109][ T6752]  ? __pfx_dump_stack_lvl+0x10/0x10
[  124.008148][ T6752]  ? __wake_up_klogd+0xcc/0x110
[  124.008189][ T6752]  warn_alloc+0x27c/0x410
[  124.008211][ T6752]  ? is_mmconf_reserved+0x3a1/0x3f0
[  124.008235][ T6752]  ? __vmalloc_node_range_noprof+0x108/0x1390
[  124.008259][ T6752]  ? __pfx_warn_alloc+0x10/0x10
[  124.008282][ T6752]  ? kasan_save_track+0x3f/0x80
[  124.008304][ T6752]  ? __kasan_kmalloc+0x9d/0xb0
[  124.008337][ T6752]  ? xsk_setsockopt+0x449/0x840
[  124.008361][ T6752]  ? do_sock_setsockopt+0x3b1/0x710
[  124.008381][ T6752]  ? __x64_sys_setsockopt+0x1ee/0x280
[  124.008400][ T6752]  ? do_syscall_64+0xf3/0x230
[  124.008425][ T6752]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.008457][ T6752]  __vmalloc_node_range_noprof+0x128/0x1390
[  124.008528][ T6752]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  124.008556][ T6752]  ? __kasan_kmalloc+0x9d/0xb0
[  124.008588][ T6752]  vmalloc_user_noprof+0x74/0x80
[  124.008613][ T6752]  ? xskq_create+0xb6/0x170
[  124.008632][ T6752]  xskq_create+0xb6/0x170
[  124.008657][ T6752]  xsk_init_queue+0xa1/0x100
[  124.008681][ T6752]  xsk_setsockopt+0x449/0x840
[  124.008710][ T6752]  ? __pfx_xsk_setsockopt+0x10/0x10
[  124.008729][ T6752]  ? __lock_acquire+0xad5/0xd80
[  124.008752][ T6752]  ? __pfx_aa_sk_perm+0x10/0x10
[  124.008784][ T6752]  ? aa_sock_opt_perm+0x79/0x120
[  124.008820][ T6752]  ? __pfx_xsk_setsockopt+0x10/0x10
[  124.008839][ T6752]  do_sock_setsockopt+0x3b1/0x710
[  124.008869][ T6752]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  124.008887][ T6752]  ? __fget_files+0x2a/0x420
[  124.008911][ T6752]  ? __fget_files+0x39d/0x420
[  124.008929][ T6752]  ? __fget_files+0x2a/0x420
[  124.008957][ T6752]  __x64_sys_setsockopt+0x1ee/0x280
[  124.008987][ T6752]  do_syscall_64+0xf3/0x230
[  124.009013][ T6752]  ? clear_bhb_loop+0x45/0xa0
[  124.009039][ T6752]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.009059][ T6752] RIP: 0033:0x7f039338d169
[  124.009087][ T6752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  124.009105][ T6752] RSP: 002b:00007f0394298038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  124.009127][ T6752] RAX: ffffffffffffffda RBX: 00007f03935a5fa0 RCX: 00007f039338d169
[  124.009143][ T6752] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  124.009155][ T6752] RBP: 00007f039340e2a0 R08: 0000000000000004 R09: 0000000000000000
[  124.009169][ T6752] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  124.009182][ T6752] R13: 0000000000000000 R14: 00007f03935a5fa0 R15: 00007ffe643c6098
[  124.009216][ T6752]  </TASK>
[  124.321422][ T6752] Mem-Info:
[  124.324604][ T6752] active_anon:4146 inactive_anon:0 isolated_anon:0
[  124.324604][ T6752]  active_file:1458 inactive_file:38311 isolated_file:0
[  124.324604][ T6752]  unevictable:768 dirty:104 writeback:0
[  124.324604][ T6752]  slab_reclaimable:9846 slab_unreclaimable:98261
[  124.324604][ T6752]  mapped:28703 shmem:1578 pagetables:806
[  124.324604][ T6752]  sec_pagetables:0 bounce:0
[  124.324604][ T6752]  kernel_misc_reclaimable:0
[  124.324604][ T6752]  free:1342085 free_pcp:1436 free_cma:0
[  124.453886][ T6752] Node 0 active_anon:21184kB inactive_anon:0kB active_file:5832kB inactive_file:153168kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119412kB dirty:412kB writeback:0kB shmem:9376kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11116kB pagetables:3224kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  124.572868][ T6752] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  124.607670][ T6752] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  124.635022][ T6752] lowmem_reserve[]: 0 2487 2487 2487 2487
[  124.641010][ T6752] Node 0 DMA32 free:1438664kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:27476kB inactive_anon:0kB active_file:5832kB inactive_file:153076kB unevictable:1536kB writepending:412kB present:3129332kB managed:2547256kB mlocked:0kB bounce:0kB free_pcp:6772kB local_pcp:5808kB free_cma:0kB
[  124.684719][ T6752] lowmem_reserve[]: 0 0 0 0 0
[  124.705343][ T6752] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  124.737764][ T6752] lowmem_reserve[]: 0 0 0 0 0
[  124.764811][ T6752] Node 1 Normal free:3902488kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  124.883635][ T6752] lowmem_reserve[]: 0 0 0 0 0
[  124.888509][ T6752] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  124.977434][ T6767] netlink: 148 bytes leftover after parsing attributes in process `syz.1.184'.
[  124.994514][ T6752] Node 0 DMA32: 76*4kB (UME) 4*8kB (UME) 22*16kB (UME) 67*32kB (UME) 64*64kB (UME) 51*128kB (UME) 22*256kB (UME) 10*512kB (UM) 5*1024kB (UM) 3*2048kB (M) 344*4096kB (UM) = 1444496kB
[  125.021862][ T6767] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  125.062566][ T6752] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  125.075150][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.185'.
[  125.097397][ T6774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.185'.
[  125.118720][ T6752] Node 1 Normal: 224*4kB (UME) 58*8kB (UME) 39*16kB (UME) 229*32kB (UME) 98*64kB (UME) 31*128kB (UME) 14*256kB (UME) 5*512kB (UME) 4*1024kB (UM) 3*2048kB (UE) 944*4096kB (M) = 3902560kB
[  125.150391][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.185'.
[  125.173930][ T6752] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  125.255824][ T6752] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  125.293006][ T6752] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  125.371621][ T6752] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  125.386602][ T6752] 41526 total pagecache pages
[  125.408368][ T6788] netlink: 36 bytes leftover after parsing attributes in process `syz.2.188'.
[  125.415088][ T6752] 0 pages in swap cache
[  125.455783][ T6752] Free swap  = 124996kB
[  125.478682][ T6752] Total swap = 124996kB
[  125.482915][ T6752] 2097051 pages RAM
[  125.486737][ T6752] 0 pages HighMem/MovableOnly
[  125.500577][ T6752] 428579 pages reserved
[  125.530006][ T6752] 0 pages cma reserved
[  125.640357][ T6794] bridge_slave_0: left allmulticast mode
[  125.708362][ T6794] bridge_slave_0: left promiscuous mode
[  125.785262][ T6794] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.855426][ T6794] bridge_slave_1: left allmulticast mode
[  125.867245][ T6794] bridge_slave_1: left promiscuous mode
[  125.888242][ T6794] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.907845][ T6805] netlink: 'syz.3.193': attribute type 39 has an invalid length.
[  125.951534][ T6794] bond0: (slave bond_slave_0): Releasing backup interface
[  126.116106][ T6794] bond0: (slave bond_slave_1): Releasing backup interface
[  126.153198][ T6794] team0: Port device team_slave_0 removed
[  126.179218][ T6794] team0: Port device team_slave_1 removed
[  126.187893][ T6794] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  126.197610][ T6794] batman_adv: batadv0: Removing interface: batadv_slave_0
[  127.012858][ T6847] __nla_validate_parse: 7 callbacks suppressed
[  127.012879][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.206'.
[  127.819242][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.217'.
[  128.021414][ T6898] netlink: 'syz.4.221': attribute type 1 has an invalid length.
[  128.032979][ T6898] netlink: 228 bytes leftover after parsing attributes in process `syz.4.221'.
[  128.054674][ T6898] netlink: 'syz.4.221': attribute type 1 has an invalid length.
[  128.085256][ T6898] netlink: 228 bytes leftover after parsing attributes in process `syz.4.221'.
[  128.232871][ T6910] netlink: 48 bytes leftover after parsing attributes in process `syz.2.224'.
[  128.535166][ T6927] netlink: 'syz.1.228': attribute type 10 has an invalid length.
[  128.700896][ T6927] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  128.807012][ T6936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.230'.
[  128.851663][ T6937] netlink: 28 bytes leftover after parsing attributes in process `syz.2.231'.
[  128.906168][ T6937] netlink: 28 bytes leftover after parsing attributes in process `syz.2.231'.
[  129.031630][ T6937] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  129.088074][ T6937] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  129.596141][ T6973] veth0_to_bridge: entered promiscuous mode
[  129.624415][ T6973] netlink: 24 bytes leftover after parsing attributes in process `syz.0.239'.
[  129.647349][ T6973] netlink: 24 bytes leftover after parsing attributes in process `syz.0.239'.
[  129.704592][ T6972] veth0_to_bridge: left promiscuous mode
[  129.771439][ T6989] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  129.823013][ T6989] +
: renamed from syzkaller0
[  129.870466][ T6989] tipc: Disabling bearer <eth:syzkaller0>
[  130.301063][ T7014] netlink: 'syz.2.251': attribute type 9 has an invalid length.
[  130.323002][ T7014] dccp_invalid_packet: pskb_may_pull failed
[  131.625894][ T7066] netlink: 'syz.4.267': attribute type 10 has an invalid length.
[  131.790786][ T7066] team0: Device veth0_macvtap failed to register rx_handler
[  131.831057][ T7066] syz.4.267 (7066) used greatest stack depth: 19248 bytes left
[  132.037450][ T7083] netlink: 'syz.2.268': attribute type 10 has an invalid length.
[  132.364435][ T7098] xt_hashlimit: size too large, truncated to 1048576
[  132.410463][ T7098] xt_hashlimit: max too large, truncated to 1048576
[  132.475475][ T7104] __nla_validate_parse: 4 callbacks suppressed
[  132.475492][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.277'.
[  132.495231][ T7104] netlink: 'syz.2.277': attribute type 2 has an invalid length.
[  132.509792][ T7101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.276'.
[  132.544594][ T7101] netlink: 12 bytes leftover after parsing attributes in process `syz.4.276'.
[  132.911124][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.920701][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.934066][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.991155][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  133.310640][ T7128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.285'.
[  133.388858][ T7128] netlink: 'syz.1.285': attribute type 10 has an invalid length.
[  133.441544][ T7128] 8021q: adding VLAN 0 to HW filter on device batadv0
[  133.471613][ T7128] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  133.880263][ T7149] netlink: 96 bytes leftover after parsing attributes in process `syz.0.291'.
[  133.948997][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  134.039033][ T5891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  134.215187][ T7164] netlink: 40 bytes leftover after parsing attributes in process `syz.4.297'.
[  134.232060][ T7164] netlink: 40 bytes leftover after parsing attributes in process `syz.4.297'.
[  134.509155][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  134.682159][ T7190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.304'.
[  134.781013][ T7197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.304'.
[  134.792113][ T7197] netlink: 20 bytes leftover after parsing attributes in process `syz.2.304'.
[  134.988796][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  135.033036][ T7213] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20000
[  135.062882][ T7212] netlink: 'syz.0.312': attribute type 4 has an invalid length.
[  135.072372][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  135.583964][ T1095] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.609241][ T7226] netlink: 'syz.2.314': attribute type 5 has an invalid length.
[  135.623589][ T7236] veth1_to_bond: entered allmulticast mode
[  135.698434][ T7199] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.755293][ T7204] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.780505][ T7204] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address
[  135.806498][ T7204] bond0: (slave wireguard0): Error -95 calling set_mac_address
[  135.926941][ T1095] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.947435][ T7236] veth1_to_bond: left allmulticast mode
[  136.028938][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  136.085188][ T1095] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.114367][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  136.268256][ T1095] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.339800][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  136.349787][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  136.357759][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  136.366662][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  136.376116][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  136.723344][ T1095] bridge_slave_1: left allmulticast mode
[  136.733717][ T1095] bridge_slave_1: left promiscuous mode
[  136.747509][ T1095] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.770004][ T1095] bridge_slave_0: left allmulticast mode
[  136.775709][ T1095] bridge_slave_0: left promiscuous mode
[  136.788714][ T1095] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.792342][ T7276] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8
[  137.068882][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  137.161784][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  137.280451][ T1095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  137.296331][ T1095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  137.307475][ T1095] bond0 (unregistering): Released all slaves
[  137.549077][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  138.016171][ T7258] chnl_net:caif_netlink_parms(): no params data found
[  138.036642][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  138.046916][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  138.155397][ T1095] hsr_slave_0: left promiscuous mode
[  138.171485][ T1095] hsr_slave_1: left promiscuous mode
[  138.178265][ T1095] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  138.199926][ T1095] batman_adv: batadv0: Removing interface: batadv_slave_0
[  138.252101][ T1095] veth1_macvtap: left promiscuous mode
[  138.263988][ T1095] veth1_vlan: left promiscuous mode
[  138.276622][ T1095] veth0_vlan: left promiscuous mode
[  138.430435][ T5843] Bluetooth: hci2: command tx timeout
[  138.437500][ T7316] __nla_validate_parse: 3 callbacks suppressed
[  138.437520][ T7316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.334'.
[  138.776785][ T1095] team0 (unregistering): Port device team_slave_1 removed
[  138.814254][ T1095] team0 (unregistering): Port device team_slave_0 removed
[  140.508989][ T5843] Bluetooth: hci2: command tx timeout
[  140.605165][ T7332] netlink: 'syz.0.339': attribute type 75 has an invalid length.
[  140.703121][ T7325] syzkaller0: entered promiscuous mode
[  140.749047][ T7325] syzkaller0: entered allmulticast mode
[  140.772037][ T7258] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.782934][ T7258] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.794353][ T7258] bridge_slave_0: entered allmulticast mode
[  140.805032][ T7258] bridge_slave_0: entered promiscuous mode
[  140.843598][ T7258] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.867551][ T7258] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.891319][ T7258] bridge_slave_1: entered allmulticast mode
[  140.931460][ T7258] bridge_slave_1: entered promiscuous mode
[  142.153426][ T7258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  142.247743][ T7258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  142.345378][ T7365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.346'.
[  142.514573][ T7258] team0: Port device team_slave_0 added
[  142.530449][ T7258] team0: Port device team_slave_1 added
[  142.593431][ T5843] Bluetooth: hci2: command tx timeout
[  142.640946][ T7369] sctp: [Deprecated]: syz.3.347 (pid 7369) Use of int in max_burst socket option deprecated.
[  142.640946][ T7369] Use struct sctp_assoc_value instead
[  142.689175][ T7258] batman_adv: batadv0: Adding interface: batadv_slave_0
[  142.696399][ T7258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.724608][ T7258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  142.759503][ T7258] batman_adv: batadv0: Adding interface: batadv_slave_1
[  142.766496][ T7258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.827989][ T7258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  142.877196][ T7400] netlink: 36 bytes leftover after parsing attributes in process `syz.1.352'.
[  142.886472][ T7400] netlink: 16 bytes leftover after parsing attributes in process `syz.1.352'.
[  142.908937][ T7400] netlink: 36 bytes leftover after parsing attributes in process `syz.1.352'.
[  142.917892][ T7400] netlink: 36 bytes leftover after parsing attributes in process `syz.1.352'.
[  143.087918][ T7405] xt_l2tp: v2 doesn't support IP mode
[  143.101840][ T7408] netlink: 40 bytes leftover after parsing attributes in process `syz.0.355'.
[  143.230606][ T7258] hsr_slave_0: entered promiscuous mode
[  143.237468][ T7258] hsr_slave_1: entered promiscuous mode
[  143.270155][ T7258] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  143.277773][ T7258] Cannot create hsr debugfs directory
[  143.325898][ T7414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.357'.
[  143.338930][ T7414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.357'.
[  143.497456][    T9] IPVS: starting estimator thread 0...
[  143.599200][ T7420] IPVS: using max 24 ests per chain, 57600 per kthread
[  143.798168][ T7430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.361'.
[  144.475424][ T5929] IPVS: starting estimator thread 0...
[  144.544893][ T7258] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  144.573585][ T7453] IPVS: using max 30 ests per chain, 72000 per kthread
[  144.595277][ T7258] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  144.637044][ T7258] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  144.685743][ T5843] Bluetooth: hci2: command tx timeout
[  144.704132][ T7258] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  144.801567][ T7472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.372'.
[  144.925930][ T7475] netlink: 28 bytes leftover after parsing attributes in process `syz.3.371'.
[  144.974514][ T7475] netlink: 28 bytes leftover after parsing attributes in process `syz.3.371'.
[  145.083225][ T7475] bridge0: entered promiscuous mode
[  145.095309][ T7475] erspan0: entered promiscuous mode
[  145.118356][ T7475] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network
[  145.133922][ T7475] hsr1: Slave B (erspan0) is not up; please bring it up to get a fully working HSR network
[  145.198274][ T7258] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.256096][ T7258] 8021q: adding VLAN 0 to HW filter on device team0
[  145.288670][ T6024] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.295866][ T6024] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.337115][ T6024] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.344352][ T6024] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.566149][ T7508] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0
[  145.582695][ T7507] IPVS: stopping backup sync thread 7508 ...
[  145.740790][ T7258] 8021q: adding VLAN 0 to HW filter on device batadv0
[  146.253099][ T7258] veth0_vlan: entered promiscuous mode
[  146.267406][ T7532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.385'.
[  146.300782][ T7532] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  146.373610][ T7532] batman_adv: batadv0: Removing interface: batadv_slave_1
[  146.482222][ T7258] veth1_vlan: entered promiscuous mode
[  146.592744][ T7543] netlink: 28 bytes leftover after parsing attributes in process `syz.0.388'.
[  146.604405][ T7258] veth0_macvtap: entered promiscuous mode
[  146.620472][ T7543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.388'.
[  146.642259][ T7258] veth1_macvtap: entered promiscuous mode
[  146.706101][ T7546] netlink: 28 bytes leftover after parsing attributes in process `syz.2.389'.
[  146.736256][ T7258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  146.750115][ T7258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.760425][ T7258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  146.772013][ T7258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.820046][ T7515] syz.3.383 (7515) used greatest stack depth: 17112 bytes left
[  146.829517][ T7258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  146.868858][ T7258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.896266][ T7258] batman_adv: batadv0: Interface activated: batadv_slave_0
[  146.904950][ T7554] netlink: 20 bytes leftover after parsing attributes in process `syz.0.391'.
[  146.932748][ T7258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  146.948235][ T7258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.966297][ T7258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  146.977332][ T7258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.997979][ T7558] netlink: 20 bytes leftover after parsing attributes in process `syz.0.391'.
[  147.017886][ T7258] batman_adv: batadv0: Interface activated: batadv_slave_1
[  147.101703][ T7258] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  147.111935][ T7258] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  147.123555][ T7258] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  147.138768][ T7258] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  147.411745][   T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.428794][   T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.086048][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.107876][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.229059][ T7587] __nla_validate_parse: 1 callbacks suppressed
[  149.229080][ T7587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.401'.
[  149.315381][ T5843] Bluetooth: hci2: command tx timeout
[  149.412808][ T7593] vlan0: entered promiscuous mode
[  149.613648][ T7597] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  149.985135][ T7613] tipc: Failed to remove unknown binding: 66,1,1/4:3137048559/3137048561
[  150.014515][ T7614] netlink: 'syz.3.407': attribute type 5 has an invalid length.
[  150.025067][ T7602] ieee802154 phy0 wpan0: encryption failed: -22
[  150.035067][ T7613] tipc: Failed to remove unknown binding: 66,1,1/4:3137048559/3137048561
[  150.055667][ T7614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.407'.
[  150.235897][ T7621] netlink: 88 bytes leftover after parsing attributes in process `syz.0.410'.
[  150.245399][ T7621] netlink: 48 bytes leftover after parsing attributes in process `syz.0.410'.
[  150.749383][ T7634] netlink: 'syz.1.411': attribute type 16 has an invalid length.
[  150.757732][ T7634] netlink: 'syz.1.411': attribute type 17 has an invalid length.
[  150.885711][ T7634] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  151.020508][ T7646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.415'.
[  151.426027][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  151.436849][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  151.445386][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  151.458396][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  151.466779][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  151.695395][ T7664] netlink: 3 bytes leftover after parsing attributes in process `syz.1.419'.
[  151.772537][ T7664] 0ªX¹¦À: renamed from caif0
[  151.786711][ T7664] 0ªX¹¦À: entered allmulticast mode
[  151.795204][ T7664] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  151.905014][ T7656] chnl_net:caif_netlink_parms(): no params data found
[  152.087253][ T7676] bond_slave_0: entered promiscuous mode
[  152.093217][ T7676] bond_slave_1: entered promiscuous mode
[  152.099074][ T7676] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[  152.107320][ T7676] batadv0: entered promiscuous mode
[  152.119193][ T7676] macsec1: entered promiscuous mode
[  152.124453][ T7676] bond0: entered promiscuous mode
[  152.136300][ T7676] bond0: left promiscuous mode
[  152.143570][ T7676] bond_slave_0: left promiscuous mode
[  152.149044][ T7676] bond_slave_1: left promiscuous mode
[  152.154620][ T7676] mac80211_hwsim hwsim11 wlan1: left promiscuous mode
[  152.161603][ T7676] batadv0: left promiscuous mode
[  152.220295][ T7685] bond_slave_0: entered promiscuous mode
[  152.226294][ T7685] bond_slave_1: entered promiscuous mode
[  152.232496][ T7685] vlan3: entered promiscuous mode
[  152.237570][ T7685] bond0: entered promiscuous mode
[  152.329109][ T7656] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.350089][ T7656] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.352128][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.427'.
[  152.357396][ T7656] bridge_slave_0: entered allmulticast mode
[  152.395696][ T7656] bridge_slave_0: entered promiscuous mode
[  152.434652][ T7656] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.453063][ T7656] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.474467][ T7656] bridge_slave_1: entered allmulticast mode
[  152.480237][ T7697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.428'.
[  152.498259][ T7656] bridge_slave_1: entered promiscuous mode
[  152.607319][ T7656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  152.651260][ T7656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  152.691407][ T7708] xt_l2tp: v2 tid > 0xffff: 4294967295
[  152.715445][ T7705] macsec1: entered promiscuous mode
[  152.746014][ T7705] macsec1: entered allmulticast mode
[  152.894329][ T7656] team0: Port device team_slave_0 added
[  152.940445][ T7656] team0: Port device team_slave_1 added
[  153.165196][ T7656] batman_adv: batadv0: Adding interface: batadv_slave_0
[  153.172789][ T7656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.201843][ T7656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  153.215447][ T7656] batman_adv: batadv0: Adding interface: batadv_slave_1
[  153.234805][ T7656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.268935][ T7656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  153.492427][ T7656] hsr_slave_0: entered promiscuous mode
[  153.511983][ T7656] hsr_slave_1: entered promiscuous mode
[  153.518494][ T7656] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  153.535170][ T7726] netlink: 32 bytes leftover after parsing attributes in process `syz.3.437'.
[  153.544498][ T7656] Cannot create hsr debugfs directory
[  153.559158][ T5843] Bluetooth: hci2: command tx timeout
[  153.630927][ T7726] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  154.051635][ T7656] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.103733][ T7736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.439'.
[  154.215581][ T7656] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.255493][ T7743] netlink: 48 bytes leftover after parsing attributes in process `syz.3.441'.
[  154.380067][ T7656] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.504431][ T7656] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.365308][ T7656] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  155.382872][ T7656] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  155.405855][ T7656] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  155.421156][ T7656] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  155.632598][ T5843] Bluetooth: hci2: command tx timeout
[  155.651480][ T7656] 8021q: adding VLAN 0 to HW filter on device bond0
[  155.719553][ T7786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.454'.
[  155.733215][ T7784] netlink: 'syz.1.453': attribute type 3 has an invalid length.
[  155.744686][ T7656] 8021q: adding VLAN 0 to HW filter on device team0
[  155.794142][   T82] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.801454][   T82] bridge0: port 1(bridge_slave_0) entered forwarding state
[  155.834449][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.841781][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state
[  155.980690][ T7791] team_slave_0: entered promiscuous mode
[  155.986670][ T7791] team_slave_1: entered promiscuous mode
[  155.993269][ T7791] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  156.002096][ T7791] macvlan2: entered promiscuous mode
[  156.007665][ T7791] team0: entered promiscuous mode
[  156.022325][ T7791] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[  156.231487][ T7804] netlink: 20 bytes leftover after parsing attributes in process `syz.3.459'.
[  156.330983][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.461'.
[  156.355506][ T7809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.461'.
[  156.613967][ T7656] 8021q: adding VLAN 0 to HW filter on device batadv0
[  156.686169][ T7820] veth1: mtu greater than device maximum
[  156.803721][ T7824] gtp0: entered promiscuous mode
[  156.820207][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.466'.
[  156.854587][ T7829] netlink: 24 bytes leftover after parsing attributes in process `syz.2.467'.
[  157.123174][ T7839] netlink: 32 bytes leftover after parsing attributes in process `syz.3.469'.
[  157.363243][ T7854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.472'.
[  157.441165][ T7656] veth0_vlan: entered promiscuous mode
[  157.447816][ T7854] netlink: 24 bytes leftover after parsing attributes in process `syz.2.472'.
[  157.475364][ T7656] veth1_vlan: entered promiscuous mode
[  157.593899][ T7656] veth0_macvtap: entered promiscuous mode
[  157.611336][ T7656] veth1_macvtap: entered promiscuous mode
[  157.679950][ T7656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.699632][ T7656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.715179][ T7656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.718940][ T5843] Bluetooth: hci2: command tx timeout
[  157.732446][ T7656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.742444][ T7656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.754791][ T7656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.766650][ T7656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.778306][ T7656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.803660][ T7656] batman_adv: batadv0: Interface activated: batadv_slave_0
[  157.833159][ T7656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  157.888864][ T7656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.914744][ T7656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  157.916407][   T10] IPVS: starting estimator thread 0...
[  157.942701][ T7656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.978488][ T7656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.001000][ T7656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.036646][ T7656] batman_adv: batadv0: Interface activated: batadv_slave_1
[  158.063266][ T7870] IPVS: using max 27 ests per chain, 64800 per kthread
[  158.106155][ T7656] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  158.148545][ T7656] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  158.157715][ T7656] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  158.208690][ T7656] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  158.463638][ T7869] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  158.482039][ T7869] tipc: Enabled bearer <udp:s>, priority 10
[  158.598850][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  158.738693][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  158.856302][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.878270][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.888699][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  159.028744][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  159.168803][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  159.198420][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.230036][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.308979][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  159.435761][ T7909] netlink: 'syz.1.486': attribute type 21 has an invalid length.
[  159.459371][   T10] tipc: Node number set to 4271477761
[  159.481901][ T7909] __nla_validate_parse: 3 callbacks suppressed
[  159.481923][ T7909] netlink: 156 bytes leftover after parsing attributes in process `syz.1.486'.
[  159.527051][ T7909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.486'.
[  159.598807][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  159.666807][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.491'.
[  159.878905][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  159.928168][ T7931] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.937134][ T7931] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.232423][ T7939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.495'.
[  160.282709][ T7946] netlink: 'syz.3.497': attribute type 11 has an invalid length.
[  160.323632][ T7947] netlink: 'syz.1.496': attribute type 1 has an invalid length.
[  160.380531][ T7947] bond1: entered promiscuous mode
[  160.386189][ T7947] 8021q: adding VLAN 0 to HW filter on device bond1
[  160.386356][ T7949] netlink: 24 bytes leftover after parsing attributes in process `syz.1.496'.
[  160.600523][ T7954] netlink: 20 bytes leftover after parsing attributes in process `syz.3.499'.
[  160.888101][ T7964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.503'.
[  160.946763][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  160.956934][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  160.967228][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  160.981100][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  160.990012][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  161.210556][ T7974] netlink: 36 bytes leftover after parsing attributes in process `syz.2.506'.
[  161.435343][ T7982] netlink: 209832 bytes leftover after parsing attributes in process `syz.1.508'.
[  161.694521][ T7966] chnl_net:caif_netlink_parms(): no params data found
[  161.846460][   T30] audit: type=1800 audit(1743921448.004:2): pid=7983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.507" name="cgroup.controllers" dev="tmpfs" ino=655 res=0 errno=0
[  161.849529][ T5832] IPVS: starting estimator thread 0...
[  162.047281][ T7995] IPVS: using max 25 ests per chain, 60000 per kthread
[  162.133733][ T8004] netlink: 16 bytes leftover after parsing attributes in process `syz.0.513'.
[  162.281202][ T7966] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.346192][ T7966] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.355818][ T7966] bridge_slave_0: entered allmulticast mode
[  162.364184][ T7966] bridge_slave_0: entered promiscuous mode
[  162.374857][ T7966] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.383622][ T7966] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.394522][ T7966] bridge_slave_1: entered allmulticast mode
[  162.427845][ T7966] bridge_slave_1: entered promiscuous mode
[  162.518795][    C0] net_ratelimit: 4 callbacks suppressed
[  162.518818][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  162.610250][ T7966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  162.758387][ T7966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  162.920792][ T7966] team0: Port device team_slave_0 added
[  162.927990][ T8024] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  162.975773][ T7966] team0: Port device team_slave_1 added
[  163.071100][ T5843] Bluetooth: hci2: command tx timeout
[  163.152668][ T7966] batman_adv: batadv0: Adding interface: batadv_slave_0
[  163.167033][ T7966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.199939][ T7966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  163.249684][ T7966] batman_adv: batadv0: Adding interface: batadv_slave_1
[  163.268906][ T7966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.310540][ T7966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  163.527002][ T7966] hsr_slave_0: entered promiscuous mode
[  163.551291][ T7966] hsr_slave_1: entered promiscuous mode
[  163.557772][ T7966] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  163.558772][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  163.596686][ T7966] Cannot create hsr debugfs directory
[  164.348048][ T8065] team0: entered promiscuous mode
[  164.435591][ T8063] team0: left promiscuous mode
[  164.598774][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  164.697947][ T8085] __nla_validate_parse: 5 callbacks suppressed
[  164.697969][ T8085] netlink: 44 bytes leftover after parsing attributes in process `syz.0.529'.
[  164.751964][ T8091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.529'.
[  165.082924][ T7966] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.149222][ T5843] Bluetooth: hci2: command tx timeout
[  165.262495][ T7966] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.424857][ T8111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.532'.
[  165.453372][ T7966] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.557334][ T7966] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.628706][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  165.673237][ T8115] pimreg: entered allmulticast mode
[  165.680486][ T8115] x_tables: duplicate underflow at hook 1
[  165.687287][ T8114] pimreg: left allmulticast mode
[  165.975265][ T7966] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  165.987306][ T8124] netlink: 28 bytes leftover after parsing attributes in process `syz.3.538'.
[  166.024010][ T7966] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  166.064529][ T7966] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  166.087914][ T7966] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  166.207127][ T8127] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9
[  166.478290][ T7966] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.545303][ T7966] 8021q: adding VLAN 0 to HW filter on device team0
[  166.577545][ T6016] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.584778][ T6016] bridge0: port 1(bridge_slave_0) entered forwarding state
[  166.618200][ T6016] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.625431][ T6016] bridge0: port 2(bridge_slave_1) entered forwarding state
[  166.668835][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  167.180091][ T8170] netlink: 140 bytes leftover after parsing attributes in process `syz.2.547'.
[  167.185400][ T7966] 8021q: adding VLAN 0 to HW filter on device batadv0
[  167.228866][ T5843] Bluetooth: hci2: command tx timeout
[  167.548453][ T8176] netlink: 'syz.0.548': attribute type 21 has an invalid length.
[  167.590617][ T8176] netlink: 132 bytes leftover after parsing attributes in process `syz.0.548'.
[  167.718842][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  167.778344][ T7966] veth0_vlan: entered promiscuous mode
[  167.834659][ T7966] veth1_vlan: entered promiscuous mode
[  168.001293][ T7966] veth0_macvtap: entered promiscuous mode
[  168.042340][ T7966] veth1_macvtap: entered promiscuous mode
[  168.097651][ T8197] IPv6: Can't replace route, no match found
[  168.159838][ T7966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  168.186780][ T7966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.216143][ T7966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  168.248699][ T7966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.279046][ T7966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  168.311023][ T7966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.327217][ T8209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.554'.
[  168.338752][ T7966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  168.359613][ T8212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.555'.
[  168.368721][ T7966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.398862][ T7966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  168.412286][ T8213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.555'.
[  168.438946][ T7966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.471140][ T7966] batman_adv: batadv0: Interface activated: batadv_slave_0
[  168.561430][ T7966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.579088][ T7966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.589241][ T7966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.599988][ T7966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.624757][ T7966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.645712][ T7966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.694337][ T7966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.750022][ T7966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.750628][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  168.770387][ T7966] batman_adv: batadv0: Interface activated: batadv_slave_1
[  168.822387][ T7966] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.834866][ T8225] netlink: 40 bytes leftover after parsing attributes in process `syz.2.559'.
[  168.873241][ T7966] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.905465][ T7966] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.914657][ T7966] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  169.201901][ T8246] xt_cgroup: xt_cgroup: no path or classid specified
[  169.309157][ T5843] Bluetooth: hci2: command tx timeout
[  169.629170][ T6027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.648798][ T6027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.742458][ T8260] __nla_validate_parse: 2 callbacks suppressed
[  169.742478][ T8260] netlink: 24 bytes leftover after parsing attributes in process `syz.0.568'.
[  169.789857][ T8260] netlink: 24 bytes leftover after parsing attributes in process `syz.0.568'.
[  169.799090][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  169.816321][ T8260] netlink: 16 bytes leftover after parsing attributes in process `syz.0.568'.
[  169.841268][ T8260] xt_hashlimit: size too large, truncated to 1048576
[  170.151169][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  170.168275][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.172812][ T8268] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  170.182869][ T8268] IPv6: NLM_F_CREATE should be set when creating new route
[  170.217450][ T8267] vlan3: entered promiscuous mode
[  170.307803][ T8271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.570'.
[  170.828720][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  171.002069][ T8291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.575'.
[  171.029006][ T8292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.575'.
[  171.057731][ T8291] xt_NFQUEUE: number of total queues is 0
[  171.771723][ T8304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.580'.
[  171.794806][ T8304] FAULT_INJECTION: forcing a failure.
[  171.794806][ T8304] name failslab, interval 1, probability 0, space 0, times 1
[  171.823787][ T8302] sctp: [Deprecated]: syz.1.578 (pid 8302) Use of int in maxseg socket option.
[  171.823787][ T8302] Use struct sctp_assoc_value instead
[  171.846160][ T8302] netlink: 16 bytes leftover after parsing attributes in process `syz.1.578'.
[  171.868887][ T8304] CPU: 1 UID: 0 PID: 8304 Comm: syz.3.580 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) 
[  171.868919][ T8304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  171.868937][ T8304] Call Trace:
[  171.868945][ T8304]  <TASK>
[  171.868954][ T8304]  dump_stack_lvl+0x241/0x360
[  171.868995][ T8304]  ? __pfx_dump_stack_lvl+0x10/0x10
[  171.869026][ T8304]  ? __pfx__printk+0x10/0x10
[  171.869054][ T8304]  ? __lock_acquire+0xad5/0xd80
[  171.869089][ T8304]  should_fail_ex+0x424/0x570
[  171.869117][ T8304]  should_failslab+0xac/0x100
[  171.869148][ T8304]  kmem_cache_alloc_noprof+0x78/0x390
[  171.869177][ T8304]  ? skb_clone+0x20c/0x390
[  171.869206][ T8304]  skb_clone+0x20c/0x390
[  171.869234][ T8304]  __netlink_deliver_tap+0x3c4/0x7f0
[  171.869278][ T8304]  ? netlink_deliver_tap+0x2e/0x1b0
[  171.869305][ T8304]  netlink_deliver_tap+0x19d/0x1b0
[  171.869335][ T8304]  netlink_unicast+0x7c6/0x9a0
[  171.869372][ T8304]  ? __pfx_netlink_unicast+0x10/0x10
[  171.869401][ T8304]  ? skb_put+0x114/0x1f0
[  171.869427][ T8304]  netlink_sendmsg+0x8c3/0xcd0
[  171.869471][ T8304]  ? __pfx_netlink_sendmsg+0x10/0x10
[  171.869506][ T8304]  ? aa_sock_msg_perm+0x91/0x160
[  171.869543][ T8304]  ? __pfx_netlink_sendmsg+0x10/0x10
[  171.869570][ T8304]  __sock_sendmsg+0x221/0x270
[  171.869608][ T8304]  ____sys_sendmsg+0x523/0x860
[  171.869642][ T8304]  ? __pfx_____sys_sendmsg+0x10/0x10
[  171.869662][ T8304]  ? __fget_files+0x2a/0x420
[  171.869685][ T8304]  ? __fget_files+0x2a/0x420
[  171.869715][ T8304]  __sys_sendmsg+0x271/0x360
[  171.869744][ T8304]  ? __pfx___sys_sendmsg+0x10/0x10
[  171.869828][ T8304]  ? do_syscall_64+0xb6/0x230
[  171.869858][ T8304]  do_syscall_64+0xf3/0x230
[  171.869884][ T8304]  ? clear_bhb_loop+0x45/0xa0
[  171.869909][ T8304]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.869929][ T8304] RIP: 0033:0x7f039338d169
[  171.869948][ T8304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  171.869965][ T8304] RSP: 002b:00007f0394298038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  171.869987][ T8304] RAX: ffffffffffffffda RBX: 00007f03935a5fa0 RCX: 00007f039338d169
[  171.870003][ T8304] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[  171.870016][ T8304] RBP: 00007f0394298090 R08: 0000000000000000 R09: 0000000000000000
[  171.870029][ T8304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  171.870041][ T8304] R13: 0000000000000000 R14: 00007f03935a5fa0 R15: 00007ffe643c6098
[  171.870074][ T8304]  </TASK>
[  171.870207][ T8304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.580'.
[  171.879295][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  172.142031][ T8312] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0
[  172.158077][ T8304] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  172.285869][ T8304] batman_adv: batadv0: Removing interface: batadv_slave_1
[  172.548481][ T8328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.584'.
[  172.626201][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  172.637890][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  172.646384][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  172.657696][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  172.667029][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  172.909364][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  173.186829][ T8331] chnl_net:caif_netlink_parms(): no params data found
[  173.424697][ T8371] netlink: 'syz.1.597': attribute type 21 has an invalid length.
[  173.498139][ T8376] FAULT_INJECTION: forcing a failure.
[  173.498139][ T8376] name failslab, interval 1, probability 0, space 0, times 0
[  173.514765][ T8331] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.532267][ T8376] CPU: 0 UID: 0 PID: 8376 Comm: syz.0.596 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) 
[  173.532298][ T8376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  173.532311][ T8376] Call Trace:
[  173.532319][ T8376]  <TASK>
[  173.532328][ T8376]  dump_stack_lvl+0x241/0x360
[  173.532367][ T8376]  ? __pfx_dump_stack_lvl+0x10/0x10
[  173.532397][ T8376]  ? __pfx__printk+0x10/0x10
[  173.532431][ T8376]  ? __pfx___might_resched+0x10/0x10
[  173.532462][ T8376]  should_fail_ex+0x424/0x570
[  173.532525][ T8376]  should_failslab+0xac/0x100
[  173.532557][ T8376]  kmem_cache_alloc_node_noprof+0x7d/0x3b0
[  173.532587][ T8376]  ? __alloc_skb+0x1c2/0x480
[  173.532611][ T8376]  __alloc_skb+0x1c2/0x480
[  173.532637][ T8376]  ? __pfx___alloc_skb+0x10/0x10
[  173.532655][ T8376]  ? __pfx_rtnl_dellink+0x10/0x10
[  173.532689][ T8376]  ? netlink_ack_tlv_len+0x6e/0x200
[  173.532720][ T8376]  netlink_ack+0x147/0xa70
[  173.532744][ T8376]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  173.532792][ T8376]  netlink_rcv_skb+0x296/0x480
[  173.532821][ T8376]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  173.532852][ T8376]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  173.532899][ T8376]  ? __pfx_rtnetlink_rcv+0x10/0x10
[  173.532927][ T8376]  ? netlink_deliver_tap+0x109/0x1b0
[  173.532964][ T8376]  netlink_unicast+0x7f8/0x9a0
[  173.532999][ T8376]  ? __pfx_netlink_unicast+0x10/0x10
[  173.533028][ T8376]  ? skb_put+0x114/0x1f0
[  173.533052][ T8376]  netlink_sendmsg+0x8c3/0xcd0
[  173.533097][ T8376]  ? __pfx_netlink_sendmsg+0x10/0x10
[  173.533131][ T8376]  ? aa_sock_msg_perm+0x91/0x160
[  173.533166][ T8376]  ? __pfx_netlink_sendmsg+0x10/0x10
[  173.533193][ T8376]  __sock_sendmsg+0x221/0x270
[  173.533225][ T8376]  ____sys_sendmsg+0x523/0x860
[  173.533257][ T8376]  ? __pfx_____sys_sendmsg+0x10/0x10
[  173.533276][ T8376]  ? __fget_files+0x2a/0x420
[  173.533299][ T8376]  ? __fget_files+0x2a/0x420
[  173.533328][ T8376]  __sys_sendmsg+0x271/0x360
[  173.533356][ T8376]  ? __pfx___sys_sendmsg+0x10/0x10
[  173.533436][ T8376]  ? do_syscall_64+0xb6/0x230
[  173.533472][ T8376]  do_syscall_64+0xf3/0x230
[  173.533498][ T8376]  ? clear_bhb_loop+0x45/0xa0
[  173.533523][ T8376]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.533543][ T8376] RIP: 0033:0x7f3799b8d169
[  173.533561][ T8376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  173.533578][ T8376] RSP: 002b:00007f379aa13038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  173.533601][ T8376] RAX: ffffffffffffffda RBX: 00007f3799da6080 RCX: 00007f3799b8d169
[  173.533616][ T8376] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[  173.533629][ T8376] RBP: 00007f379aa13090 R08: 0000000000000000 R09: 0000000000000000
[  173.533642][ T8376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  173.533653][ T8376] R13: 0000000000000000 R14: 00007f3799da6080 R15: 00007ffc5de3f868
[  173.533686][ T8376]  </TASK>
[  173.534098][ T8331] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.842691][ T8331] bridge_slave_0: entered allmulticast mode
[  173.859860][ T8331] bridge_slave_0: entered promiscuous mode
[  173.881000][ T8331] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.888316][ T8331] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.896751][ T8331] bridge_slave_1: entered allmulticast mode
[  173.905019][ T8331] bridge_slave_1: entered promiscuous mode
[  173.958743][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  174.047201][ T8331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  174.096695][ T8331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  174.231544][ T8331] team0: Port device team_slave_0 added
[  174.254165][ T8331] team0: Port device team_slave_1 added
[  174.391456][ T8331] batman_adv: batadv0: Adding interface: batadv_slave_0
[  174.398551][ T8331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.445313][ T8331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  174.472701][ T8331] batman_adv: batadv0: Adding interface: batadv_slave_1
[  174.480145][ T8331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.506413][ T8331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  174.672941][ T8331] hsr_slave_0: entered promiscuous mode
[  174.680204][ T8331] hsr_slave_1: entered promiscuous mode
[  174.686626][ T8331] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  174.694555][ T8331] Cannot create hsr debugfs directory
[  174.756796][   T55] Bluetooth: hci2: command tx timeout
[  174.894530][ T8404] ip6erspan0: entered promiscuous mode
[  174.949363][ T8409] __nla_validate_parse: 9 callbacks suppressed
[  174.949383][ T8409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'.
[  174.988675][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  175.004575][ T8415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.607'.
[  175.034478][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.608'.
[  175.086263][ T8418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.608'.
[  175.109488][ T8420] xt_nfacct: accounting object `syz1' does not exists
[  175.194184][ T8413] openvswitch: netlink: EtherType 0 is less than min 600
[  175.203691][ T8413] netlink: 'syz.0.609': attribute type 10 has an invalid length.
[  175.270173][ T8423] bridge0: port 3(syz_tun) entered blocking state
[  175.289778][ T8423] bridge0: port 3(syz_tun) entered disabled state
[  175.296455][ T8423] syz_tun: entered allmulticast mode
[  175.341449][ T8423] syz_tun: entered promiscuous mode
[  175.361674][ T8423] bridge0: port 3(syz_tun) entered blocking state
[  175.364803][ T8430] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20003
[  175.368541][ T8423] bridge0: port 3(syz_tun) entered forwarding state
[  175.408416][ T8413] syz_tun: entered promiscuous mode
[  175.464344][ T8413] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  175.668942][ T8431] netlink: 'syz.3.612': attribute type 1 has an invalid length.
[  175.735859][ T8440] dvmrp0: entered allmulticast mode
[  175.868388][ T8431] 8021q: adding VLAN 0 to HW filter on device bond1
[  175.897132][ T8429] bond1: (slave gretap2): making interface the new active one
[  175.906501][ T8429] bond1: (slave gretap2): Enslaving as an active interface with an up link
[  175.934353][ T8449] netlink: 'syz.0.615': attribute type 4 has an invalid length.
[  176.028840][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  176.053524][ T8450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.615'.
[  176.080569][ T8453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.616'.
[  176.178507][ T8452] vlan3: entered promiscuous mode
[  176.184500][ T8452] vlan3: entered allmulticast mode
[  176.189849][ T8452] hsr_slave_1: entered allmulticast mode
[  176.359186][ T8331] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.378433][ T8455] tipc: New replicast peer: 255.255.255.255
[  176.386829][ T8455] tipc: Enabled bearer <udp:syz0>, priority 10
[  176.521371][ T8331] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.647183][ T8331] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.674310][ T8481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.622'.
[  176.726599][ T8485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.622'.
[  176.735657][ T8485] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  176.758682][ T8485] FAULT_INJECTION: forcing a failure.
[  176.758682][ T8485] name failslab, interval 1, probability 0, space 0, times 0
[  176.789020][ T8485] CPU: 0 UID: 0 PID: 8485 Comm: syz.2.622 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) 
[  176.789053][ T8485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  176.789066][ T8485] Call Trace:
[  176.789073][ T8485]  <TASK>
[  176.789082][ T8485]  dump_stack_lvl+0x241/0x360
[  176.789121][ T8485]  ? __pfx_dump_stack_lvl+0x10/0x10
[  176.789158][ T8485]  ? __pfx__printk+0x10/0x10
[  176.789192][ T8485]  ? __pfx___might_resched+0x10/0x10
[  176.789224][ T8485]  should_fail_ex+0x424/0x570
[  176.789252][ T8485]  should_failslab+0xac/0x100
[  176.789284][ T8485]  kmem_cache_alloc_node_noprof+0x7d/0x3b0
[  176.789315][ T8485]  ? __alloc_skb+0x1c2/0x480
[  176.789337][ T8485]  __alloc_skb+0x1c2/0x480
[  176.789353][ T8485]  ? rtnl_prop_list_size+0x1e/0x1e0
[  176.789384][ T8485]  ? __pfx___alloc_skb+0x10/0x10
[  176.789404][ T8485]  ? if_nlmsg_size+0x5b9/0x820
[  176.789429][ T8485]  ? if_nlmsg_size+0x5b9/0x820
[  176.789457][ T8485]  rtmsg_ifinfo_build_skb+0x84/0x260
[  176.789492][ T8485]  rtmsg_ifinfo+0x91/0x1b0
[  176.789526][ T8485]  dev_close_many+0x2e3/0x4c0
[  176.789562][ T8485]  ? __pfx_dev_close_many+0x10/0x10
[  176.789590][ T8485]  ? __mutex_trylock_common+0x184/0x2e0
[  176.789625][ T8485]  unregister_netdevice_many_notify+0x628/0x2510
[  176.789662][ T8485]  ? trace_contention_end+0x3c/0x120
[  176.789689][ T8485]  ? __mutex_lock+0x380/0x10c0
[  176.789719][ T8485]  ? stack_trace_save+0x11a/0x1d0
[  176.789748][ T8485]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  176.789794][ T8485]  ? unregister_netdevice_queue+0x2c4/0x400
[  176.789830][ T8485]  ? veth_dellink+0xef/0x140
[  176.789855][ T8485]  ? __pfx_veth_dellink+0x10/0x10
[  176.789883][ T8485]  rtnl_dellink+0x53c/0x8c0
[  176.789920][ T8485]  ? __pfx_rtnl_dellink+0x10/0x10
[  176.790050][ T8485]  ? __pfx_rtnl_dellink+0x10/0x10
[  176.790081][ T8485]  rtnetlink_rcv_msg+0x80f/0xd70
[  176.790108][ T8485]  ? rtnetlink_rcv_msg+0x1ba/0xd70
[  176.790142][ T8485]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  176.790186][ T8485]  ? ref_tracker_free+0x63e/0x7e0
[  176.790218][ T8485]  netlink_rcv_skb+0x208/0x480
[  176.790249][ T8485]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  176.790281][ T8485]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  176.790330][ T8485]  ? netlink_deliver_tap+0x2e/0x1b0
[  176.790362][ T8485]  ? netlink_deliver_tap+0x2e/0x1b0
[  176.790394][ T8485]  netlink_unicast+0x7f8/0x9a0
[  176.790431][ T8485]  ? __pfx_netlink_unicast+0x10/0x10
[  176.790460][ T8485]  ? skb_put+0x114/0x1f0
[  176.790485][ T8485]  netlink_sendmsg+0x8c3/0xcd0
[  176.790538][ T8485]  ? __pfx_netlink_sendmsg+0x10/0x10
[  176.790573][ T8485]  ? aa_sock_msg_perm+0x91/0x160
[  176.790609][ T8485]  ? __pfx_netlink_sendmsg+0x10/0x10
[  176.790636][ T8485]  __sock_sendmsg+0x221/0x270
[  176.790668][ T8485]  ____sys_sendmsg+0x523/0x860
[  176.790701][ T8485]  ? __pfx_____sys_sendmsg+0x10/0x10
[  176.790721][ T8485]  ? __fget_files+0x2a/0x420
[  176.790744][ T8485]  ? __fget_files+0x2a/0x420
[  176.790774][ T8485]  __sys_sendmsg+0x271/0x360
[  176.790802][ T8485]  ? __pfx___sys_sendmsg+0x10/0x10
[  176.790887][ T8485]  ? do_syscall_64+0xb6/0x230
[  176.790916][ T8485]  do_syscall_64+0xf3/0x230
[  176.790941][ T8485]  ? clear_bhb_loop+0x45/0xa0
[  176.790967][ T8485]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.790987][ T8485] RIP: 0033:0x7fc7ef38d169
[  176.791005][ T8485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  176.791022][ T8485] RSP: 002b:00007fc7f0131038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  176.791045][ T8485] RAX: ffffffffffffffda RBX: 00007fc7ef5a6080 RCX: 00007fc7ef38d169
[  176.791060][ T8485] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[  176.791073][ T8485] RBP: 00007fc7f0131090 R08: 0000000000000000 R09: 0000000000000000
[  176.791086][ T8485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  176.791098][ T8485] R13: 0000000000000001 R14: 00007fc7ef5a6080 R15: 00007ffc0dc1f308
[  176.791131][ T8485]  </TASK>
[  176.810902][ T8488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.623'.
[  176.839297][   T55] Bluetooth: hci2: command tx timeout
[  177.073301][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  177.247620][ T8485] batman_adv: batadv0: Removing interface: batadv_slave_1
[  177.313189][ T8484] netlink: 56 bytes leftover after parsing attributes in process `syz.1.621'.
[  177.388347][ T8498] netlink: 'syz.0.625': attribute type 1 has an invalid length.
[  177.441081][ T8495] IPVS: Scheduler module ip_vs_ not found
[  177.502188][ T8331] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.571811][ T8499] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  177.642828][ T8501] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.660446][ T8501] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.067938][ T8331] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  178.108799][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  178.121881][ T8331] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  178.171178][ T8331] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  178.253374][ T8331] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  178.455639][ T8545] FAULT_INJECTION: forcing a failure.
[  178.455639][ T8545] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  178.479050][ T8545] CPU: 1 UID: 0 PID: 8545 Comm: syz.0.637 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) 
[  178.479084][ T8545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  178.479097][ T8545] Call Trace:
[  178.479105][ T8545]  <TASK>
[  178.479114][ T8545]  dump_stack_lvl+0x241/0x360
[  178.479153][ T8545]  ? __pfx_dump_stack_lvl+0x10/0x10
[  178.479183][ T8545]  ? __pfx__printk+0x10/0x10
[  178.479225][ T8545]  should_fail_ex+0x424/0x570
[  178.479254][ T8545]  _copy_to_user+0x31/0xb0
[  178.479286][ T8545]  simple_read_from_buffer+0xc4/0x170
[  178.479320][ T8545]  proc_fail_nth_read+0x1ef/0x260
[  178.479353][ T8545]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  178.479378][ T8545]  ? rw_verify_area+0x246/0x630
[  178.479401][ T8545]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  178.479424][ T8545]  vfs_read+0x21f/0xb90
[  178.479471][ T8545]  ? __pfx___mutex_lock+0x10/0x10
[  178.479498][ T8545]  ? __pfx_vfs_read+0x10/0x10
[  178.479524][ T8545]  ? __fget_files+0x2a/0x420
[  178.479545][ T8545]  ? __fget_files+0x39d/0x420
[  178.479561][ T8545]  ? __fget_files+0x2a/0x420
[  178.479591][ T8545]  ksys_read+0x19d/0x2d0
[  178.479617][ T8545]  ? __pfx_ksys_read+0x10/0x10
[  178.479647][ T8545]  ? do_syscall_64+0xb6/0x230
[  178.479676][ T8545]  do_syscall_64+0xf3/0x230
[  178.479701][ T8545]  ? clear_bhb_loop+0x45/0xa0
[  178.479727][ T8545]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.479747][ T8545] RIP: 0033:0x7f3799b8bb7c
[  178.479765][ T8545] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  178.479782][ T8545] RSP: 002b:00007f379aa13030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  178.479809][ T8545] RAX: ffffffffffffffda RBX: 00007f3799da6080 RCX: 00007f3799b8bb7c
[  178.479824][ T8545] RDX: 000000000000000f RSI: 00007f379aa130a0 RDI: 0000000000000006
[  178.479837][ T8545] RBP: 00007f379aa13090 R08: 0000000000000000 R09: 0000000000000000
[  178.479849][ T8545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  178.479861][ T8545] R13: 0000000000000000 R14: 00007f3799da6080 R15: 00007ffc5de3f868
[  178.479893][ T8545]  </TASK>
[  178.770919][ T8331] 8021q: adding VLAN 0 to HW filter on device bond0
[  178.794164][ T8331] 8021q: adding VLAN 0 to HW filter on device team0
[  178.808510][ T6016] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.815724][ T6016] bridge0: port 1(bridge_slave_0) entered forwarding state
[  178.997268][ T6016] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.004548][ T6016] bridge0: port 2(bridge_slave_1) entered forwarding state
[  179.060092][ T8331] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  179.149048][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  179.229249][   T55] Bluetooth: hci2: command tx timeout
[  179.272022][ T8556] xt_CT: No such helper "snmp"
[  179.516171][ T8581] xt_l2tp: missing protocol rule (udp|l2tpip)
[  179.754082][ T8331] 8021q: adding VLAN 0 to HW filter on device batadv0
[  180.188807][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  180.725040][ T8622] __nla_validate_parse: 6 callbacks suppressed
[  180.725062][ T8622] netlink: 136 bytes leftover after parsing attributes in process `syz.2.653'.
[  180.768828][ T8622] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  180.871312][ T8331] veth0_vlan: entered promiscuous mode
[  180.900685][ T8331] veth1_vlan: entered promiscuous mode
[  181.012925][ T8331] veth0_macvtap: entered promiscuous mode
[  181.040511][ T8331] veth1_macvtap: entered promiscuous mode
[  181.063857][ T8331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.070584][ T8635] netlink: 'syz.1.656': attribute type 1 has an invalid length.
[  181.075081][ T8331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.138676][ T8331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.154685][ T8331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.169540][ T8331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.180170][ T8331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.190868][ T8331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.201985][ T8331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.212743][ T8331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.228911][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  181.240812][ T8331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.251083][ T8331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.261756][ T8331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.271992][ T8644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.658'.
[  181.287325][ T8644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.658'.
[  181.296450][ T8644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.658'.
[  181.309477][   T55] Bluetooth: hci2: command tx timeout
[  181.316844][ T8331] batman_adv: batadv0: Interface activated: batadv_slave_0
[  181.350705][ T8643] bond0: entered promiscuous mode
[  181.355798][ T8643] bond_slave_0: entered promiscuous mode
[  181.379261][ T8643] bond_slave_1: entered promiscuous mode
[  181.385220][ T8643] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[  181.417592][ T8643] batadv0: entered promiscuous mode
[  181.454230][ T8643] bond0: left promiscuous mode
[  181.461559][ T8643] bond_slave_0: left promiscuous mode
[  181.481416][ T8643] bond_slave_1: left promiscuous mode
[  181.496100][ T8643] mac80211_hwsim hwsim11 wlan1: left promiscuous mode
[  181.512937][ T8643] batadv0: left promiscuous mode
[  181.562435][ T8331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.577600][ T8331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.587677][ T8331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.598173][ T8331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.608182][ T8331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.618727][ T8331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.641575][ T8331] batman_adv: batadv0: Interface activated: batadv_slave_1
[  181.684303][ T8331] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  181.701428][ T8331] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  181.716766][ T8331] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  181.728232][ T8331] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  181.926480][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  181.950111][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.011636][ T6016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.032447][ T6016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.268817][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  182.291025][ T8662] netlink: 20 bytes leftover after parsing attributes in process `syz.1.663'.
[  182.301525][ T8662] netlink: 20 bytes leftover after parsing attributes in process `syz.1.663'.
[  182.331532][ T8664] gtp0: entered promiscuous mode
[  182.342651][ T8664] gtp0: entered allmulticast mode
[  182.431836][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.664'.
[  183.308516][ T8676] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  183.321580][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  183.346991][ T8677] netlink: 'syz.2.668': attribute type 26 has an invalid length.
[  183.995679][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  184.006310][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  184.016984][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  184.025999][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  184.040151][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  184.348789][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  184.517465][ T8709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.676'.
[  184.653122][ T8709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.676'.
[  184.679197][ T8713] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  184.815176][ T8715] netlink: 40 bytes leftover after parsing attributes in process `syz.3.678'.
[  184.909697][ T8721] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  184.917151][ T8721] macvlan0: entered promiscuous mode
[  185.305955][ T8695] chnl_net:caif_netlink_parms(): no params data found
[  185.404599][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  185.744251][ T8695] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.757923][ T8695] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.769407][ T8763] __nla_validate_parse: 1 callbacks suppressed
[  185.769429][ T8763] netlink: 56 bytes leftover after parsing attributes in process `syz.3.684'.
[  185.803557][ T8695] bridge_slave_0: entered allmulticast mode
[  185.819799][ T8695] bridge_slave_0: entered promiscuous mode
[  185.857922][ T8695] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.881233][ T8695] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.914559][ T8695] bridge_slave_1: entered allmulticast mode
[  185.932482][ T8695] bridge_slave_1: entered promiscuous mode
[  186.091227][ T8695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  186.119011][ T5843] Bluetooth: hci2: command tx timeout
[  186.150802][ T8695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  186.289870][ T8779] netlink: 12 bytes leftover after parsing attributes in process `syz.3.689'.
[  186.385718][ T8779] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  186.396233][ T8779] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  186.406119][ T8779] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  186.415609][ T8779] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  186.428709][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  186.443646][ T8782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.689'.
[  186.482903][ T8779] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  186.493333][ T8779] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  186.502834][ T8779] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  186.512566][ T8779] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  186.574629][ T8695] team0: Port device team_slave_0 added
[  186.604627][ T8782] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  186.614854][ T8782] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  186.624782][ T8782] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  186.634205][ T8782] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  186.656391][ T8782] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  186.665831][ T8782] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  186.677358][ T8782] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  186.687609][ T8782] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  186.741564][ T8695] team0: Port device team_slave_1 added
[  186.774996][ T8792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.691'.
[  186.856968][ T8695] batman_adv: batadv0: Adding interface: batadv_slave_0
[  186.879887][ T8695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.936277][ T8695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  186.972535][ T8695] batman_adv: batadv0: Adding interface: batadv_slave_1
[  186.983670][ T8695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.991267][   T30] audit: type=1800 audit(1743921473.154:3): pid=8797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.694" name="blkio.bfq.time_recursive" dev="tmpfs" ino=829 res=0 errno=0
[  187.027081][ T8695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  187.079464][ T8798] netlink: 136 bytes leftover after parsing attributes in process `syz.0.693'.
[  187.149243][   T30] audit: type=1800 audit(1743921473.204:4): pid=8797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.694" name="blkio.bfq.time_recursive" dev="tmpfs" ino=829 res=0 errno=0
[  187.227275][ T8802] pim6reg: entered allmulticast mode
[  187.367796][ T8802] pim6reg: left allmulticast mode
[  187.423123][ T8695] hsr_slave_0: entered promiscuous mode
[  187.430744][ T8695] hsr_slave_1: entered promiscuous mode
[  187.437905][ T8695] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  187.447278][ T8695] Cannot create hsr debugfs directory
[  187.466697][ T8810] netlink: 24 bytes leftover after parsing attributes in process `syz.3.698'.
[  187.475694][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  187.561506][ T8814] xt_bpf: check failed: parse error
[  187.569065][ T8814] netlink: 124 bytes leftover after parsing attributes in process `syz.1.699'.
[  188.123635][ T8695] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.190404][ T5843] Bluetooth: hci2: command tx timeout
[  188.201967][ T8842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.707'.
[  188.246910][ T8695] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.362939][ T8695] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.469996][ T8856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.711'.
[  188.484279][ T8695] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.508690][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  188.538241][ T8855] 8021q: adding VLAN 0 to HW filter on device bond1
[  188.552516][ T8855] bond1: entered promiscuous mode
[  188.559110][ T8855] team0: Port device bond1 added
[  188.604409][ T8856] Cannot find add_set index 4 as target
[  188.773836][ T8870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.715'.
[  189.022084][ T8695] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  189.063367][ T8695] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  189.092783][ T8695] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  189.128542][ T8893] netlink: 'syz.1.718': attribute type 9 has an invalid length.
[  189.144395][ T8695] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  189.201753][ T8886] syzkaller0: entered allmulticast mode
[  189.558804][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  189.884032][ T8900] syz_tun: left promiscuous mode
[  190.270780][ T5843] Bluetooth: hci2: command tx timeout
[  190.598664][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  191.136224][ T8900] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  191.145353][ T8900] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  191.168970][ T8900] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  191.177368][ T8900] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  191.261148][ T8907] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  191.613784][ T8944] veth0_to_bridge: entered promiscuous mode
[  191.629514][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  191.817445][ T8695] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.917555][ T8695] 8021q: adding VLAN 0 to HW filter on device team0
[  191.981267][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.988461][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state
[  192.034722][ T8943] veth0_to_bridge: left promiscuous mode
[  192.051242][ T6027] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.058412][ T6027] bridge0: port 2(bridge_slave_1) entered forwarding state
[  192.360262][ T5843] Bluetooth: hci2: command tx timeout
[  192.668819][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  192.677429][ T8961] __nla_validate_parse: 1 callbacks suppressed
[  192.677449][ T8961] netlink: 44 bytes leftover after parsing attributes in process `syz.2.732'.
[  192.714176][ T8969] syzkaller0: entered promiscuous mode
[  192.726078][ T8969] syzkaller0: entered allmulticast mode
[  192.748444][ T8983] netlink: 'syz.3.738': attribute type 10 has an invalid length.
[  192.764372][ T8983] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  192.779091][ T8979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.732'.
[  192.815299][ T8695] 8021q: adding VLAN 0 to HW filter on device batadv0
[  193.713053][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  194.753433][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  195.161504][ T9003] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  195.241122][ T9005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.741'.
[  195.260132][ T8695] veth0_vlan: entered promiscuous mode
[  195.366027][ T9010] netlink: 16 bytes leftover after parsing attributes in process `syz.0.742'.
[  195.382007][ T8695] veth1_vlan: entered promiscuous mode
[  195.455347][ T9016] netlink: 16 bytes leftover after parsing attributes in process `syz.0.742'.
[  195.527381][ T8695] veth0_macvtap: entered promiscuous mode
[  195.587969][ T8695] veth1_macvtap: entered promiscuous mode
[  195.749878][ T8695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  195.785108][ T8695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.795126][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  195.811969][ T8695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  195.823428][ T8695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.834671][ T8695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  195.859624][ T8695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.884928][ T8695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  195.940458][ T8695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.970071][ T8695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.009907][ T8695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.031610][ T8695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.043204][ T8695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.069057][ T8695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.089370][ T8695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.122445][ T8695] batman_adv: batadv0: Interface activated: batadv_slave_0
[  196.135303][ T9030] team0: entered allmulticast mode
[  196.223076][ T9036] pimreg: entered allmulticast mode
[  196.270145][ T9029] pimreg: left allmulticast mode
[  196.471597][ T8695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.487348][ T8695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.506929][ T8695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.528135][ T8695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.538333][ T8695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.574616][ T8695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.594183][ T8695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.608071][ T8695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.613880][ T9051] openvswitch: netlink: Key type 30 is not supported
[  196.632904][ T8695] batman_adv: batadv0: Interface activated: batadv_slave_1
[  196.637947][   T30] audit: type=1804 audit(1743921482.794:5): pid=9051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.751" name="/newroot/176/cgroup.controllers" dev="tmpfs" ino=927 res=1 errno=0
[  196.649928][ T8695] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  196.676343][ T8695] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  196.687582][ T8695] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  196.688103][   T30] audit: type=1800 audit(1743921482.834:6): pid=9051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.751" name="cgroup.controllers" dev="tmpfs" ino=927 res=0 errno=0
[  196.697315][ T8695] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  196.720966][ T9054] openvswitch: netlink: Key type 30 is not supported
[  196.828668][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  196.840217][ T9058] netlink: 12 bytes leftover after parsing attributes in process `syz.0.752'.
[  197.002054][ T9064] netlink: 48 bytes leftover after parsing attributes in process `syz.1.754'.
[  197.140930][ T6027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.168107][ T6027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.188185][ T9071] netlink: 72 bytes leftover after parsing attributes in process `syz.1.756'.
[  197.272258][ T6030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.296932][ T6030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.503005][ T9081] netlink: 40 bytes leftover after parsing attributes in process `syz.0.759'.
[  197.868659][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  197.926020][ T9099] netlink: 'syz.0.764': attribute type 1 has an invalid length.
[  198.213060][ T9112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.765'.
[  198.259988][ T9112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.765'.
[  198.908688][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  199.328168][ T9131] vlan2: entered allmulticast mode
[  199.345353][ T9131] bond0: entered allmulticast mode
[  199.355491][ T9131] bond_slave_0: entered allmulticast mode
[  199.365953][ T9131] bond_slave_1: entered allmulticast mode
[  199.377819][ T9131] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  199.396145][ T9131] batadv0: entered allmulticast mode
[  199.407246][ T9131] bridge0: port 3(vlan2) entered blocking state
[  199.424471][ T9131] bridge0: port 3(vlan2) entered disabled state
[  199.434257][ T9131] vlan2: entered promiscuous mode
[  199.440391][ T9131] bond0: entered promiscuous mode
[  199.447510][ T9131] bond_slave_0: entered promiscuous mode
[  199.454463][ T9131] bond_slave_1: entered promiscuous mode
[  199.464355][ T9137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.773'.
[  199.478983][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  199.479186][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  199.494010][ T9131] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[  199.502042][ T9131] batadv0: entered promiscuous mode
[  199.605877][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  199.615618][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  199.625715][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  199.641320][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  199.663777][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  199.734194][ T9142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.775'.
[  199.949435][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  200.224638][ T9160] x_tables: duplicate underflow at hook 3
[  200.303488][ T9139] chnl_net:caif_netlink_parms(): no params data found
[  200.421088][ T9175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.783'.
[  200.596491][ T9180] syz.1.784: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  200.615565][ T9180] CPU: 0 UID: 0 PID: 9180 Comm: syz.1.784 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) 
[  200.615597][ T9180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  200.615611][ T9180] Call Trace:
[  200.615619][ T9180]  <TASK>
[  200.615627][ T9180]  dump_stack_lvl+0x241/0x360
[  200.615667][ T9180]  ? __pfx_dump_stack_lvl+0x10/0x10
[  200.615698][ T9180]  ? __pfx__printk+0x10/0x10
[  200.615725][ T9180]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  200.615759][ T9180]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  200.615789][ T9180]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[  200.615823][ T9180]  warn_alloc+0x27c/0x410
[  200.615851][ T9180]  ? __pfx_warn_alloc+0x10/0x10
[  200.615879][ T9180]  ? xskq_create+0xb6/0x170
[  200.615900][ T9180]  ? __get_vm_area_node+0x1c8/0x2d0
[  200.615931][ T9180]  ? __get_vm_area_node+0x25c/0x2d0
[  200.615969][ T9180]  __vmalloc_node_range_noprof+0x634/0x1390
[  200.616024][ T9180]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  200.616050][ T9180]  ? __kasan_kmalloc+0x9d/0xb0
[  200.616081][ T9180]  vmalloc_user_noprof+0x74/0x80
[  200.616102][ T9180]  ? xskq_create+0xb6/0x170
[  200.616121][ T9180]  xskq_create+0xb6/0x170
[  200.616145][ T9180]  xsk_init_queue+0xa1/0x100
[  200.616170][ T9180]  xsk_setsockopt+0x4f9/0x840
[  200.616194][ T9180]  ? __pfx_xsk_setsockopt+0x10/0x10
[  200.616214][ T9180]  ? __pfx_aa_sk_perm+0x10/0x10
[  200.616245][ T9180]  ? aa_sock_opt_perm+0x79/0x120
[  200.616280][ T9180]  ? __pfx_xsk_setsockopt+0x10/0x10
[  200.616299][ T9180]  do_sock_setsockopt+0x3b1/0x710
[  200.616328][ T9180]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  200.616354][ T9180]  ? __fget_files+0x2a/0x420
[  200.616379][ T9180]  ? __fget_files+0x39d/0x420
[  200.616396][ T9180]  ? __fget_files+0x2a/0x420
[  200.616425][ T9180]  __x64_sys_setsockopt+0x1ee/0x280
[  200.616455][ T9180]  do_syscall_64+0xf3/0x230
[  200.616481][ T9180]  ? clear_bhb_loop+0x45/0xa0
[  200.616506][ T9180]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.616526][ T9180] RIP: 0033:0x7fc2a798d169
[  200.616545][ T9180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  200.616563][ T9180] RSP: 002b:00007fc2a57f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  200.616585][ T9180] RAX: ffffffffffffffda RBX: 00007fc2a7ba5fa0 RCX: 00007fc2a798d169
[  200.616601][ T9180] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000003
[  200.616614][ T9180] RBP: 00007fc2a7a0e2a0 R08: 0000000000000004 R09: 0000000000000000
[  200.616627][ T9180] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000
[  200.616640][ T9180] R13: 0000000000000000 R14: 00007fc2a7ba5fa0 R15: 00007ffeda644028
[  200.616674][ T9180]  </TASK>
[  200.616682][ T9180] Mem-Info:
[  200.917860][ T9139] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.925198][ T9180] active_anon:3864 inactive_anon:0 isolated_anon:0
[  200.925198][ T9180]  active_file:1668 inactive_file:38361 isolated_file:0
[  200.925198][ T9180]  unevictable:768 dirty:162 writeback:0
[  200.925198][ T9180]  slab_reclaimable:10694 slab_unreclaimable:117483
[  200.925198][ T9180]  mapped:28564 shmem:1428 pagetables:788
[  200.925198][ T9180]  sec_pagetables:0 bounce:0
[  200.925198][ T9180]  kernel_misc_reclaimable:0
[  200.925198][ T9180]  free:1317093 free_pcp:1421 free_cma:0
[  200.945809][ T9139] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.978379][ T9180] Node 0 active_anon:15556kB inactive_anon:0kB active_file:6672kB inactive_file:153368kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114356kB dirty:644kB writeback:0kB shmem:4176kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12668kB pagetables:3052kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  201.012307][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  201.024836][ T9139] bridge_slave_0: entered allmulticast mode
[  201.051630][ T9139] bridge_slave_0: entered promiscuous mode
[  201.065041][ T9180] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  201.133799][ T9180] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  201.163625][ T9180] lowmem_reserve[]: 0 2487 2487 2487 2487
[  201.176242][ T9180] Node 0 DMA32 free:1354424kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:15664kB inactive_anon:0kB active_file:6672kB inactive_file:153276kB unevictable:1536kB writepending:640kB present:3129332kB managed:2547256kB mlocked:0kB bounce:0kB free_pcp:1244kB local_pcp:172kB free_cma:0kB
[  201.176618][ T9139] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.249215][ T9180] lowmem_reserve[]: 0 0 0 0 0
[  201.254203][ T9180] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  201.282121][ T9139] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.301090][ T9139] bridge_slave_1: entered allmulticast mode
[  201.314111][ T9180] lowmem_reserve[]: 0 0 0 0 0
[  201.319692][ T9180] Node 1 Normal free:3902824kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  201.324920][ T9139] bridge_slave_1: entered promiscuous mode
[  201.369403][ T9180] lowmem_reserve[]: 0 0 0 0 0
[  201.374332][ T9180] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  201.389818][ T9180] Node 0 DMA32: 58*4kB (ME) 162*8kB (UME) 163*16kB (UME) 122*32kB (UME) 54*64kB (UME) 37*128kB (UME) 12*256kB (ME) 15*512kB (UM) 7*1024kB (UME) 7*2048kB (UM) 319*4096kB (UM) = 1355112kB
[  201.412461][ T9180] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  201.426016][ T9180] Node 1 Normal: 232*4kB (UME) 59*8kB (UME) 39*16kB (UME) 224*32kB (UME) 98*64kB (UME) 30*128kB (UME) 14*256kB (UME) 6*512kB (UME) 4*1024kB (UM) 3*2048kB (UE) 944*4096kB (M) = 3902824kB
[  201.445454][ T9180] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  201.455106][ T9180] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  201.467047][ T9180] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  201.493243][ T9180] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  201.517424][ T9180] 41457 total pagecache pages
[  201.523315][ T9180] 0 pages in swap cache
[  201.527717][ T9180] Free swap  = 124996kB
[  201.533421][ T9180] Total swap = 124996kB
[  201.537612][ T9180] 2097051 pages RAM
[  201.542319][ T9180] 0 pages HighMem/MovableOnly
[  201.582762][ T9180] 428579 pages reserved
[  201.586987][ T9180] 0 pages cma reserved
[  201.618336][ T9139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  201.683236][ T9139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  201.709356][ T5843] Bluetooth: hci2: command tx timeout
[  201.818395][ T9139] team0: Port device team_slave_0 added
[  201.838433][ T9139] team0: Port device team_slave_1 added
[  201.908857][ T9212] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input10
[  201.933640][ T9139] batman_adv: batadv0: Adding interface: batadv_slave_0
[  201.957825][ T9139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.029300][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  202.065495][ T9139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  202.087992][ T9139] batman_adv: batadv0: Adding interface: batadv_slave_1
[  202.097549][ T9139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.131079][ T9139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  202.364957][ T9139] hsr_slave_0: entered promiscuous mode
[  202.390157][ T9139] hsr_slave_1: entered promiscuous mode
[  202.411299][ T9139] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  202.451376][ T9139] Cannot create hsr debugfs directory
[  202.637759][ T9230] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  202.653140][ T9236] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  202.765921][ T9237] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  202.990625][ T9249] bond0: (slave syz_tun): Releasing backup interface
[  203.001349][ T9248] bridge0: port 3(hsr0) entered blocking state
[  203.007825][ T9248] bridge0: port 3(hsr0) entered disabled state
[  203.037332][ T9248] hsr0: entered allmulticast mode
[  203.045511][ T9248] hsr_slave_0: entered allmulticast mode
[  203.056138][ T9248] hsr_slave_1: entered allmulticast mode
[  203.068699][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  203.089463][ T9248] hsr0: entered promiscuous mode
[  203.135843][ T9250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.806'.
[  203.166901][ T9254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.807'.
[  203.252349][ T9139] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.372092][ T9264] netlink: 16 bytes leftover after parsing attributes in process `syz.1.811'.
[  203.552272][ T9264] netlink: 28 bytes leftover after parsing attributes in process `syz.1.811'.
[  203.601583][ T9139] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.789673][ T5843] Bluetooth: hci2: command tx timeout
[  203.843080][ T9139] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.989996][ T9282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.815'.
[  204.108152][ T9139] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.128669][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  204.187192][ T9295] xt_hashlimit: size too large, truncated to 1048576
[  204.577096][ T9139] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  204.657340][ T9139] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  204.682582][ T9139] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  204.701474][ T9139] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  204.747064][ T9311] Bluetooth: MGMT ver 1.23
[  204.927937][ T9314] netlink: 176 bytes leftover after parsing attributes in process `syz.2.825'.
[  204.953470][ T9139] 8021q: adding VLAN 0 to HW filter on device bond0
[  205.019433][ T9321] tap0: tun_chr_ioctl cmd 1074025673
[  205.024896][ T9321] tap0: tun_chr_ioctl cmd 1074025673
[  205.050606][ T9322] tap0: tun_chr_ioctl cmd 1074025678
[  205.056035][ T9322] tap0: group set to 0
[  205.099862][ T9139] 8021q: adding VLAN 0 to HW filter on device team0
[  205.127627][ T6026] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.134846][ T6026] bridge0: port 1(bridge_slave_0) entered forwarding state
[  205.148724][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  205.167306][ T9327] netlink: 16 bytes leftover after parsing attributes in process `syz.0.829'.
[  205.205693][ T6026] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.212939][ T6026] bridge0: port 2(bridge_slave_1) entered forwarding state
[  205.219948][ T9330] netlink: 'syz.3.828': attribute type 8 has an invalid length.
[  205.307288][ T9330] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  205.318309][ T9330] netlink: 20 bytes leftover after parsing attributes in process `syz.3.828'.
[  205.734441][ T9353] bridge0: port 3(hsr0) entered blocking state
[  205.740846][ T9353] bridge0: port 3(hsr0) entered forwarding state
[  205.747534][ T9353] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.754715][ T9353] bridge0: port 2(bridge_slave_1) entered forwarding state
[  205.762347][ T9353] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.769554][ T9353] bridge0: port 1(bridge_slave_0) entered forwarding state
[  205.782157][ T9359] netlink: 44 bytes leftover after parsing attributes in process `syz.2.836'.
[  205.826218][ T9359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.836'.
[  205.847928][ T9353] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  205.877042][ T5843] Bluetooth: hci2: command tx timeout
[  206.162222][ T9373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.839'.
[  206.189826][ T3587] 
[  206.192217][ T3587] ============================================
[  206.198473][ T3587] WARNING: possible recursive locking detected
[  206.198774][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  206.204619][ T3587] 6.14.0-syzkaller-13305-g61f96e684edd #0 Not tainted
[  206.204633][ T3587] --------------------------------------------
[  206.204642][ T3587] kworker/1:2/3587 is trying to acquire lock:
[  206.204653][ T3587] ffff88805624af30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x18a/0x210
[  206.240391][ T3587] 
[  206.240391][ T3587] but task is already holding lock:
[  206.247799][ T3587] ffff88803433af30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x18a/0x210
[  206.256883][ T3587] 
[  206.256883][ T3587] other info that might help us debug this:
[  206.264955][ T3587]  Possible unsafe locking scenario:
[  206.264955][ T3587] 
[  206.272411][ T3587]        CPU0
[  206.275698][ T3587]        ----
[  206.279413][ T3587]   lock(&hsr->seqnr_lock);
[  206.283963][ T3587]   lock(&hsr->seqnr_lock);
[  206.288476][ T3587] 
[  206.288476][ T3587]  *** DEADLOCK ***
[  206.288476][ T3587] 
[  206.296617][ T3587]  May be due to missing lock nesting notation
[  206.296617][ T3587] 
[  206.305026][ T3587] 11 locks held by kworker/1:2/3587:
[  206.310361][ T3587]  #0: ffff888030ad0548 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0
[  206.321092][ T3587]  #1: ffffc9000c767c60 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0
[  206.334245][ T3587]  #2: ffff88807bb07538 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x2d/0xd90
[  206.343489][ T3587]  #3: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x1ea/0xdc0
[  206.352733][ T3587]  #4: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: ip6_finish_output2+0x701/0x1750
[  206.362591][ T3587]  #5: ffffffff8ed3e040 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2f9/0x3f60
[  206.372534][ T3587]  #6: ffff88803433af30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x18a/0x210
[  206.382043][ T3587]  #7: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xb8/0x2d20
[  206.391542][ T3587]  #8: ffffffff8ed3e040 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2f9/0x3f60
[  206.401477][ T3587]  #9: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x220/0x1c00
[  206.410738][ T3587]  #10: ffffffff8ed3e040 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2f9/0x3f60
[  206.420762][ T3587] 
[  206.420762][ T3587] stack backtrace:
[  206.426659][ T3587] CPU: 1 UID: 0 PID: 3587 Comm: kworker/1:2 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) 
[  206.426682][ T3587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  206.426695][ T3587] Workqueue: mld mld_ifc_work
[  206.426718][ T3587] Call Trace:
[  206.426724][ T3587]  <TASK>
[  206.426731][ T3587]  dump_stack_lvl+0x241/0x360
[  206.426758][ T3587]  ? __pfx_dump_stack_lvl+0x10/0x10
[  206.426781][ T3587]  ? __pfx__printk+0x10/0x10
[  206.426808][ T3587]  print_deadlock_bug+0x2be/0x2d0
[  206.426830][ T3587]  validate_chain+0x928/0x24e0
[  206.426859][ T3587]  ? sock_def_readable+0xd7/0x5a0
[  206.426884][ T3587]  __lock_acquire+0xad5/0xd80
[  206.426904][ T3587]  lock_acquire+0x116/0x2f0
[  206.426920][ T3587]  ? hsr_dev_xmit+0x18a/0x210
[  206.426947][ T3587]  ? hsr_dev_xmit+0x18a/0x210
[  206.426973][ T3587]  _raw_spin_lock_bh+0x35/0x50
[  206.426989][ T3587]  ? hsr_dev_xmit+0x18a/0x210
[  206.427012][ T3587]  hsr_dev_xmit+0x18a/0x210
[  206.427037][ T3587]  dev_hard_start_xmit+0x2d4/0x840
[  206.427061][ T3587]  __dev_queue_xmit+0x1b80/0x3f60
[  206.427086][ T3587]  ? __dev_queue_xmit+0x2f9/0x3f60
[  206.427106][ T3587]  ? __pfx___dev_queue_xmit+0x10/0x10
[  206.427123][ T3587]  ? __local_bh_enable_ip+0x168/0x200
[  206.427140][ T3587]  ? lockdep_hardirqs_on+0x9d/0x150
[  206.427159][ T3587]  ? __local_bh_enable_ip+0x168/0x200
[  206.427175][ T3587]  ? ebt_do_table+0x2858/0x2a60
[  206.427197][ T3587]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  206.427220][ T3587]  ? ebt_do_table+0x2858/0x2a60
[  206.427244][ T3587]  ? ebt_do_table+0x2858/0x2a60
[  206.427268][ T3587]  ? lockdep_hardirqs_on+0x9d/0x150
[  206.427292][ T3587]  ? __local_bh_enable_ip+0x168/0x200
[  206.427313][ T3587]  ? skb_push+0x97/0x100
[  206.427337][ T3587]  br_dev_queue_push_xmit+0x771/0x950
[  206.427356][ T3587]  ? br_nf_post_routing+0x1ef/0xe80
[  206.427377][ T3587]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  206.427395][ T3587]  ? NF_HOOK+0xa1/0x460
[  206.427412][ T3587]  NF_HOOK+0x3ac/0x460
[  206.427428][ T3587]  ? NF_HOOK+0xa1/0x460
[  206.427443][ T3587]  ? __pfx_NF_HOOK+0x10/0x10
[  206.427459][ T3587]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  206.427480][ T3587]  br_forward_finish+0xd8/0x130
[  206.427495][ T3587]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  206.427514][ T3587]  NF_HOOK+0x3ac/0x460
[  206.427531][ T3587]  ? NF_HOOK+0xa1/0x460
[  206.427545][ T3587]  ? __pfx_NF_HOOK+0x10/0x10
[  206.427562][ T3587]  ? __pfx_br_forward_finish+0x10/0x10
[  206.427582][ T3587]  __br_forward+0x46a/0x640
[  206.427597][ T3587]  ? __pfx_br_forward_finish+0x10/0x10
[  206.427616][ T3587]  ? __pfx___br_forward+0x10/0x10
[  206.427634][ T3587]  ? skb_clone+0x240/0x390
[  206.427653][ T3587]  maybe_deliver+0xb3/0x150
[  206.427670][ T3587]  br_flood+0x2e4/0x680
[  206.427690][ T3587]  br_dev_xmit+0x12ac/0x1c00
[  206.427713][ T3587]  ? br_dev_xmit+0x220/0x1c00
[  206.427736][ T3587]  ? __pfx_br_dev_xmit+0x10/0x10
[  206.427759][ T3587]  ? dev_queue_xmit_nit+0x2b/0xcf0
[  206.427783][ T3587]  ? dev_queue_xmit_nit+0x2b/0xcf0
[  206.427808][ T3587]  ? dev_queue_xmit_nit+0xc4d/0xcf0
[  206.427833][ T3587]  ? dev_queue_xmit_nit+0x2b/0xcf0
[  206.427861][ T3587]  dev_hard_start_xmit+0x2d4/0x840
[  206.427884][ T3587]  __dev_queue_xmit+0x1b80/0x3f60
[  206.427909][ T3587]  ? __dev_queue_xmit+0x2f9/0x3f60
[  206.427929][ T3587]  ? __pfx___dev_queue_xmit+0x10/0x10
[  206.427948][ T3587]  ? __copy_skb_header+0xa7/0x5a0
[  206.427967][ T3587]  ? __asan_memcpy+0x40/0x70
[  206.427985][ T3587]  ? __pskb_copy_fclone+0x9fb/0x10e0
[  206.428004][ T3587]  ? __asan_memcpy+0x40/0x70
[  206.428020][ T3587]  ? __pskb_copy_fclone+0x9fb/0x10e0
[  206.428042][ T3587]  ? hsr_create_tagged_frame+0x4de/0xef0
[  206.428059][ T3587]  ? __asan_memmove+0x40/0x70
[  206.428080][ T3587]  ? hsr_addr_subst_dest+0x30d/0xac0
[  206.428109][ T3587]  hsr_forward_skb+0x184c/0x2d20
[  206.428130][ T3587]  ? hsr_forward_skb+0xb8/0x2d20
[  206.428152][ T3587]  ? __pfx_hsr_forward_skb+0x10/0x10
[  206.428170][ T3587]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  206.428195][ T3587]  ? hsr_dev_xmit+0x18a/0x210
[  206.428224][ T3587]  hsr_dev_xmit+0x195/0x210
[  206.428249][ T3587]  dev_hard_start_xmit+0x2d4/0x840
[  206.428273][ T3587]  __dev_queue_xmit+0x1b80/0x3f60
[  206.428294][ T3587]  ? __lock_acquire+0xad5/0xd80
[  206.428312][ T3587]  ? __dev_queue_xmit+0x2f9/0x3f60
[  206.428332][ T3587]  ? __pfx___dev_queue_xmit+0x10/0x10
[  206.428351][ T3587]  ? neigh_connected_output+0x1d5/0x450
[  206.428374][ T3587]  ? read_seqbegin+0x15c/0x2c0
[  206.428393][ T3587]  ? lockdep_hardirqs_on+0x9d/0x150
[  206.428412][ T3587]  ? read_seqbegin+0x202/0x2c0
[  206.428434][ T3587]  ? __pfx_read_seqbegin+0x10/0x10
[  206.428455][ T3587]  ? eth_header+0x11c/0x1f0
[  206.428470][ T3587]  ? __asan_memcpy+0x40/0x70
[  206.428486][ T3587]  ? eth_header+0x11c/0x1f0
[  206.428502][ T3587]  ? __pfx_eth_header+0x10/0x10
[  206.428515][ T3587]  ? neigh_connected_output+0x3a7/0x450
[  206.428543][ T3587]  ip6_finish_output2+0x1296/0x1750
[  206.428570][ T3587]  ? ip6_finish_output2+0x701/0x1750
[  206.428602][ T3587]  ? __pfx_ip6_finish_output2+0x10/0x10
[  206.428627][ T3587]  ? ip6_mtu+0x81/0x3f0
[  206.428647][ T3587]  ? ip6_mtu+0x81/0x3f0
[  206.428668][ T3587]  ip6_finish_output+0x421/0x840
[  206.428691][ T3587]  NF_HOOK+0xa0/0x440
[  206.428711][ T3587]  ? NF_HOOK+0xfe/0x440
[  206.428731][ T3587]  ? __pfx_NF_HOOK+0x10/0x10
[  206.428752][ T3587]  ? __pfx_dst_output+0x10/0x10
[  206.428774][ T3587]  ? icmp6_dst_alloc+0x3aa/0x420
[  206.428796][ T3587]  mld_sendpack+0x84a/0xdc0
[  206.428817][ T3587]  ? __pfx_mld_newpack+0x10/0x10
[  206.428844][ T3587]  ? mld_sendpack+0x1ea/0xdc0
[  206.428865][ T3587]  ? __pfx_mld_sendpack+0x10/0x10
[  206.428895][ T3587]  mld_ifc_work+0x7d9/0xd90
[  206.428918][ T3587]  ? process_scheduled_works+0x9cb/0x18e0
[  206.428936][ T3587]  process_scheduled_works+0xac3/0x18e0
[  206.428968][ T3587]  ? __pfx_process_scheduled_works+0x10/0x10
[  206.428991][ T3587]  ? assign_work+0x367/0x3d0
[  206.429010][ T3587]  worker_thread+0x870/0xd50
[  206.429036][ T3587]  ? __kthread_parkme+0x1a8/0x200
[  206.429058][ T3587]  ? __pfx_worker_thread+0x10/0x10
[  206.429077][ T3587]  kthread+0x7b7/0x940
[  206.429100][ T3587]  ? __pfx_worker_thread+0x10/0x10
[  206.429119][ T3587]  ? __pfx_kthread+0x10/0x10
[  206.429140][ T3587]  ? __pfx_kthread+0x10/0x10
[  206.429162][ T3587]  ? __pfx_kthread+0x10/0x10
[  206.429183][ T3587]  ? __pfx_kthread+0x10/0x10
[  206.429204][ T3587]  ? _raw_spin_unlock_irq+0x23/0x50
[  206.429226][ T3587]  ? lockdep_hardirqs_on+0x9d/0x150
[  206.429243][ T3587]  ? __pfx_kthread+0x10/0x10
[  206.429265][ T3587]  ret_from_fork+0x4b/0x80
[  206.429283][ T3587]  ? __pfx_kthread+0x10/0x10
[  206.429305][ T3587]  ret_from_fork_asm+0x1a/0x30
[  206.429328][ T3587]  </TASK>
[  207.079575][ T5843] Bluetooth: hci0: command tx timeout
[  207.172144][ T9139] 8021q: adding VLAN 0 to HW filter on device batadv0
[  207.228783][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  207.391438][ T9139] veth0_vlan: entered promiscuous mode
[  207.415396][ T9139] veth1_vlan: entered promiscuous mode
[  207.441530][ T9139] veth0_macvtap: entered promiscuous mode
[  207.453298][ T9139] veth1_macvtap: entered promiscuous mode
[  207.468022][ T9139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  207.480874][ T9139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.491278][ T9139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  207.502467][ T9139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.514585][ T9139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  207.526587][ T9139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.537968][ T9139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  207.549474][ T9139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.562036][ T9139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  207.573391][ T9139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.584039][ T9139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  207.594828][ T9139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.604793][ T9139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  207.616243][ T9139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.627253][ T9139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  207.640882][ T9139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.652755][ T9139] batman_adv: batadv0: Interface activated: batadv_slave_0
[  207.665810][ T9139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  207.677025][ T9139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.687836][ T9139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  207.699377][ T9139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.709552][ T9139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  207.720347][ T9139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.731779][ T9139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  207.742793][ T9139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.753669][ T9139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  207.764586][ T9139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.776231][ T9139] batman_adv: batadv0: Interface activated: batadv_slave_1
[  207.787417][ T9139] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  207.797580][ T9139] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  207.806997][ T9139] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  207.816461][ T9139] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  207.850895][ T9139] ieee80211 phy25: Selected rate control algorithm 'minstrel_ht'
[  207.874356][ T6026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.876017][ T9139] ieee80211 phy26: Selected rate control algorithm 'minstrel_ht'
[  207.886112][ T6026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.911535][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.922383][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.948990][ T5843] Bluetooth: hci2: command tx timeout
[  208.278670][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  209.308719][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  210.351292][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  211.388660][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  211.795449][ T5850] Bluetooth: hci1: command 0x0406 tx timeout
[  211.801941][ T5151] Bluetooth: hci3: command 0x0406 tx timeout
[  211.802311][ T5845] Bluetooth: hci0: command 0x0406 tx timeout
[  212.428657][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  213.468662][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  214.508671][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  215.548651][    C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available