last executing test programs: 1.591710246s ago: executing program 1 (id=2): getsockopt(0xffffffffffffffff, 0x110, 0x6, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8931, &(0x7f00000000c0)={'dummy0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000580)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) read$nci(r1, &(0x7f0000000740)=""/100, 0x64) read$nci(r1, 0x0, 0x0) write$nci(r1, 0x0, 0x0) write$nci(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="4f0601"], 0x4) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448df, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={0x0, 0x54}}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) 1.41874257s ago: executing program 2 (id=9): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r0, &(0x7f0000000180)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @llc={@llc={0x0, 0xff, "b2", "c02d2c33a57a9203485a416abf47a91a3fdce4a70162515eedcf00000000b308b0d5000000"}}}}, 0x36) 1.242902764s ago: executing program 2 (id=10): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r2, @ANYBLOB="020000000000000024001280110001006272696467655f736c6176650000"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 1.153053021s ago: executing program 2 (id=11): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002c40), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002c80)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002cc0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000002d80)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x0) write(r0, &(0x7f0000002dc0)="ffffffffffff0011223344554305000f32000000ffff00112233445500112233445500ff9000", 0xfdef) 643.997613ms ago: executing program 1 (id=12): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="020100090a000000000000000000000002001000000000020000000000000000030005"], 0x50}}, 0x0) 585.175761ms ago: executing program 2 (id=13): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000700)={0x1c, r1, 0x303, 0x4000, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0) 490.428057ms ago: executing program 1 (id=14): socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000003c0)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000400)="3300000008000601010000030001", 0xe) socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0600000004000000040000000e00000010000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000aae99f70d822f6a7ad88fef43a322ba8f51ae570484e3f17372b99cec5669d642923ab5e5d69cc96234c33cf0bbb3dbd6d9e530e0a07c0328af1d2a210ca1a402e13087426d610da0fd52bfc98f7058da66b74e7b9b36056d5d1922515545e6f78ea7e930d53a1de8c9f9ce5932cd82d3ae7026dd8ce7fb8e43202f097fc3bf9052a5be5fd9d7b24a08a39da32383d8652611a2932698e"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000002000000ffff"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f00000004c0)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f0000000580)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050401000000000000000a0000000900010073797a300000000040000000120a050402000000000000000a0000000900010073797a30000000000900020073797a310000000008000300000000050c00048008000100"], 0x88}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c00078008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x10, &(0x7f0000000980)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1}, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="900000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1414aa08000200ac1e00010c00028005000100000000000800074000000004080003400065c53c"], 0x90}, 0x1, 0xbb1414ac}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000000), 0x4) 320.674962ms ago: executing program 1 (id=15): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xc3}, 0x1, 0x100000000000000}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000040), 0x6f5, 0x2000000022, &(0x7f0000000500)={0x77359400}) sendmsg$key(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 314.930322ms ago: executing program 2 (id=16): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000005c0)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={0x0}, 0x1, 0x0, 0x0, 0x4000034}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000880)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56561, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x8}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf118a815524c8bb}, @TCA_TBF_PARMS={0x28, 0x1, {{0xed, 0x2, 0xe1, 0x400, 0xac, 0x8}, {0x36, 0x2, 0x4, 0x2, 0x3, 0x5}, 0x6, 0x9, 0x1e69}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 263.362429ms ago: executing program 3 (id=4): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000100)=ANY=[], 0x342) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'erspan0\x00', 0x0}) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendto(r0, 0x0, 0x0, 0x468fd, &(0x7f00000004c0)=@l2={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x97}, 0x2507, 0x1}, 0x80) 220.014018ms ago: executing program 0 (id=1): bpf$MAP_CREATE(0x100000000000000, &(0x7f00000001c0)=@base={0x14, 0x4, 0x8, 0x6, 0x4, 0x1}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xf014, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}]}, 0x1c}}, 0x2000040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x20}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) 130.067425ms ago: executing program 1 (id=17): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000080)="520000002300010100020600"/41, 0x29) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000ff) close(0x3) close(0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, 0x0, 0x32600) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x34005, 0x0, 0x8010}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x24084000) openat$cgroup_ro(r2, 0x0, 0x0, 0x0) 14.860771ms ago: executing program 0 (id=18): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002e80)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x67, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000d40), 0x0, 0x4000004) r2 = socket(0x1d, 0x2, 0x5) getsockopt$inet_mreqn(r2, 0x6a, 0x4, 0x0, &(0x7f0000000040)=0xffffffffffffff16) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x79, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10) 324.59µs ago: executing program 2 (id=19): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002c40), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002c80)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002cc0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000002d80)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x0) write(r0, &(0x7f0000002dc0)="ffffffffffff0011223344554305000f32000000ffff00112233445500112233445500ff9000", 0xfdef) 0s ago: executing program 3 (id=20): r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000280)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000540)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="400104"], 0x14) socket(0x10, 0x3, 0x0) r5 = socket(0x1e, 0x4, 0x0) write$nci(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="5001", @ANYRES8=r2, @ANYRES16=r5], 0x14) sendmsg$nl_crypto(r0, 0x0, 0x40080) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.144' (ED25519) to the list of known hosts. [ 74.401607][ T5762] cgroup: Unknown subsys name 'net' [ 74.530370][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.977437][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.684622][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.684629][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.685592][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.695732][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.717207][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.721868][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.743655][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.751137][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.761222][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.767104][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.769665][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.794440][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.794869][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.811631][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.812118][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.828344][ T5789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.828620][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.843619][ T5789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.844196][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.852155][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.861463][ T5784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.869978][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.886098][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.886268][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.277007][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 78.425196][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 78.447899][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.461160][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.469773][ T5776] bridge_slave_0: entered allmulticast mode [ 78.476735][ T5776] bridge_slave_0: entered promiscuous mode [ 78.489905][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.503265][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.511105][ T5776] bridge_slave_1: entered allmulticast mode [ 78.518042][ T5776] bridge_slave_1: entered promiscuous mode [ 78.561330][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.605917][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.668257][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 78.686319][ T5776] team0: Port device team_slave_0 added [ 78.694621][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 78.718279][ T5776] team0: Port device team_slave_1 added [ 78.771748][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.781757][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.810408][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.829516][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.837215][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.847028][ T5777] bridge_slave_0: entered allmulticast mode [ 78.854476][ T5777] bridge_slave_0: entered promiscuous mode [ 78.871884][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.880054][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.907757][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.936023][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.944524][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.953184][ T5777] bridge_slave_1: entered allmulticast mode [ 78.964166][ T5777] bridge_slave_1: entered promiscuous mode [ 79.038651][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.059855][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.067471][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.075055][ T5774] bridge_slave_0: entered allmulticast mode [ 79.083264][ T5774] bridge_slave_0: entered promiscuous mode [ 79.091019][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.098231][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.106559][ T5774] bridge_slave_1: entered allmulticast mode [ 79.114340][ T5774] bridge_slave_1: entered promiscuous mode [ 79.128412][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.192017][ T5776] hsr_slave_0: entered promiscuous mode [ 79.199001][ T5776] hsr_slave_1: entered promiscuous mode [ 79.239177][ T5777] team0: Port device team_slave_0 added [ 79.249023][ T5777] team0: Port device team_slave_1 added [ 79.269504][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.284415][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.297305][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.305906][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.313350][ T5775] bridge_slave_0: entered allmulticast mode [ 79.320347][ T5775] bridge_slave_0: entered promiscuous mode [ 79.328701][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.336008][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.343675][ T5775] bridge_slave_1: entered allmulticast mode [ 79.350435][ T5775] bridge_slave_1: entered promiscuous mode [ 79.427049][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.434480][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.469433][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.491423][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.503512][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.535653][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.570807][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.585326][ T5774] team0: Port device team_slave_0 added [ 79.594414][ T5774] team0: Port device team_slave_1 added [ 79.620097][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.643702][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.650858][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.678245][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.725397][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.732587][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.759565][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.799871][ T5775] team0: Port device team_slave_0 added [ 79.810951][ T5777] hsr_slave_0: entered promiscuous mode [ 79.818531][ T5777] hsr_slave_1: entered promiscuous mode [ 79.825544][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.833598][ T5777] Cannot create hsr debugfs directory [ 79.859260][ T5775] team0: Port device team_slave_1 added [ 79.924490][ T5788] Bluetooth: hci0: command tx timeout [ 79.925445][ T5784] Bluetooth: hci1: command tx timeout [ 79.948915][ T5774] hsr_slave_0: entered promiscuous mode [ 79.955646][ T5774] hsr_slave_1: entered promiscuous mode [ 79.961964][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.970641][ T5774] Cannot create hsr debugfs directory [ 80.000606][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.007839][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.014991][ T5788] Bluetooth: hci3: command tx timeout [ 80.034174][ T5784] Bluetooth: hci2: command tx timeout [ 80.046629][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.060158][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.068035][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.094889][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.248932][ T5775] hsr_slave_0: entered promiscuous mode [ 80.257030][ T5775] hsr_slave_1: entered promiscuous mode [ 80.263240][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.271928][ T5775] Cannot create hsr debugfs directory [ 80.300945][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.315294][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.354337][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.365360][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.604016][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.621206][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.636267][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.650593][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.796145][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.827640][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.850790][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.897122][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.930293][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.941783][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.959936][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.986922][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.003391][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.080666][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.109427][ T3464] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.116829][ T3464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.135608][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.157935][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.165634][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.255882][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.288349][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.312535][ T3439] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.319693][ T3439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.352882][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.365586][ T3439] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.372907][ T3439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.427201][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.456554][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.485699][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.493096][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.511870][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.519326][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.555732][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.563169][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.579354][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.586900][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.769108][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.906083][ T5776] veth0_vlan: entered promiscuous mode [ 81.956581][ T5776] veth1_vlan: entered promiscuous mode [ 82.004045][ T5788] Bluetooth: hci0: command tx timeout [ 82.004579][ T5784] Bluetooth: hci1: command tx timeout [ 82.085794][ T5784] Bluetooth: hci3: command tx timeout [ 82.086975][ T5788] Bluetooth: hci2: command tx timeout [ 82.100885][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.144973][ T5776] veth0_macvtap: entered promiscuous mode [ 82.184407][ T5776] veth1_macvtap: entered promiscuous mode [ 82.242410][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.265608][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.302832][ T5774] veth0_vlan: entered promiscuous mode [ 82.312001][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.325410][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.335926][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.345374][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.371910][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.388146][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.407123][ T5774] veth1_vlan: entered promiscuous mode [ 82.499391][ T5774] veth0_macvtap: entered promiscuous mode [ 82.529109][ T5774] veth1_macvtap: entered promiscuous mode [ 82.572756][ T5777] veth0_vlan: entered promiscuous mode [ 82.606142][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.622210][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.631318][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.646528][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.659527][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.689839][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.701515][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.713308][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.722009][ T5777] veth1_vlan: entered promiscuous mode [ 82.732214][ T5775] veth0_vlan: entered promiscuous mode [ 82.760335][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.769259][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.781841][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.792622][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.809416][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.819194][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.849042][ T5775] veth1_vlan: entered promiscuous mode [ 82.932281][ T5777] veth0_macvtap: entered promiscuous mode [ 82.979139][ T5777] veth1_macvtap: entered promiscuous mode [ 83.025898][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.037882][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.049220][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.061386][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.073382][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.110201][ T5775] veth0_macvtap: entered promiscuous mode [ 83.120610][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.131933][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.147481][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.162397][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.183896][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.199799][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.215635][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.242981][ T5775] veth1_macvtap: entered promiscuous mode [ 83.262301][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.278461][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.289986][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.302533][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.331523][ T4311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.331874][ T5845] netlink: 'syz.2.6': attribute type 12 has an invalid length. [ 83.342692][ T4311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.355044][ T5845] netlink: 'syz.2.6': attribute type 29 has an invalid length. [ 83.367371][ T5845] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6'. [ 83.377323][ T5845] netlink: 59 bytes leftover after parsing attributes in process `syz.2.6'. [ 83.442820][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.461054][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.471648][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.477334][ T5847] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 83.483043][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.506496][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.519488][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.541925][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.600349][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.613211][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.628726][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.642467][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.654988][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.665784][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.677706][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.711401][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.737129][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.753570][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.766030][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.895017][ T1087] nci: nci_rsp_packet: unsupported rsp opcode 0xf06 [ 84.017499][ T5860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10'. [ 84.037974][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.084706][ T5788] Bluetooth: hci1: command tx timeout [ 84.084718][ T5784] Bluetooth: hci0: command tx timeout [ 84.114822][ T5862] batman_adv: batadv0: Adding interface: syzkaller0 [ 84.121459][ T5862] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.147682][ T5862] batman_adv: batadv0: Interface activated: syzkaller0 [ 84.170146][ T5784] Bluetooth: hci2: command tx timeout [ 84.463025][ T5784] Bluetooth: hci3: command tx timeout [ 84.477944][ T5861] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 84.500625][ T5851] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 84.512809][ T5861] batman_adv: batadv0: Removing interface: syzkaller0 [ 84.617879][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.645376][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.704071][ T4311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.711950][ T4311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.759963][ T5868] Bluetooth: MGMT ver 1.22 [ 84.765210][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.765231][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.800823][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.834651][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.847423][ T5868] Zero length message leads to an empty skb [ 85.075490][ T5878] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 85.174978][ T5784] list_del corruption, ffff88803165a480->next is LIST_POISON1 (dead000000000100) [ 85.185609][ T5784] ------------[ cut here ]------------ [ 85.191127][ T5784] kernel BUG at lib/list_debug.c:58! [ 85.196967][ T5784] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 85.203084][ T5784] CPU: 0 PID: 5784 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 85.210655][ T5784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.220730][ T5784] Workqueue: hci0 hci_cmd_sync_work [ 85.225992][ T5784] RIP: 0010:__list_del_entry_valid_or_report+0xe9/0x130 [ 85.233051][ T5784] Code: 48 89 de e8 89 c1 4b 06 0f 0b 48 c7 c7 e0 54 1d 8b 48 89 de e8 78 c1 4b 06 0f 0b 48 c7 c7 40 55 1d 8b 48 89 de e8 67 c1 4b 06 <0f> 0b 48 c7 c7 a0 55 1d 8b 48 89 de e8 56 c1 4b 06 0f 0b 48 c7 c7 [ 85.252680][ T5784] RSP: 0018:ffffc900046afa00 EFLAGS: 00010246 [ 85.258806][ T5784] RAX: 000000000000004e RBX: ffff88803165a480 RCX: 906665f494aebf00 [ 85.266796][ T5784] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 85.274761][ T5784] RBP: 1ffff110062cb493 R08: ffffc900046af707 R09: 1ffff920008d5ee0 [ 85.282724][ T5784] R10: dffffc0000000000 R11: fffff520008d5ee1 R12: dffffc0000000000 [ 85.290693][ T5784] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 85.298681][ T5784] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 85.307608][ T5784] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.314187][ T5784] CR2: 000055557deb0a38 CR3: 0000000060e26000 CR4: 00000000003506f0 [ 85.322151][ T5784] Call Trace: [ 85.325441][ T5784] [ 85.328371][ T5784] mgmt_pending_remove+0x53/0x1f0 [ 85.333394][ T5784] mgmt_add_adv_patterns_monitor_complete+0x45d/0x730 [ 85.340174][ T5784] ? mgmt_add_adv_patterns_monitor_sync+0x90/0x90 [ 85.346587][ T5784] ? msft_monitor_supported+0x69/0x80 [ 85.351953][ T5784] ? hci_add_adv_monitor+0x17d/0x2a0 [ 85.357232][ T5784] ? mgmt_add_adv_patterns_monitor_sync+0x90/0x90 [ 85.363647][ T5784] hci_cmd_sync_work+0x24b/0x380 [ 85.369057][ T5784] ? process_scheduled_works+0x975/0x1600 [ 85.375072][ T5784] process_scheduled_works+0xa60/0x1600 [ 85.380998][ T5784] ? worker_attach_to_pool+0x370/0x370 [ 85.386488][ T5784] ? assign_work+0x3cc/0x5d0 [ 85.391181][ T5784] worker_thread+0xa5e/0xfe0 [ 85.395773][ T5784] ? _raw_spin_unlock+0x40/0x40 [ 85.400623][ T5784] ? __kthread_parkme+0x71/0x1c0 [ 85.405561][ T5784] kthread+0x2fa/0x390 [ 85.409626][ T5784] ? pr_cont_work+0x550/0x550 [ 85.414296][ T5784] ? kthread_blkcg+0xd0/0xd0 [ 85.418876][ T5784] ret_from_fork+0x48/0x80 [ 85.423304][ T5784] ? kthread_blkcg+0xd0/0xd0 [ 85.427981][ T5784] ret_from_fork_asm+0x11/0x20 [ 85.432892][ T5784] [ 85.435943][ T5784] Modules linked in: [ 85.443056][ T5784] ---[ end trace 0000000000000000 ]--- [ 85.451937][ T5784] RIP: 0010:__list_del_entry_valid_or_report+0xe9/0x130 [ 85.452732][ T5887] ip_tables: iptables: counters copy to user failed while replacing table [ 85.459063][ T5784] Code: 48 89 de e8 89 c1 4b 06 0f 0b 48 c7 c7 e0 54 1d 8b 48 89 de e8 78 c1 4b 06 0f 0b 48 c7 c7 40 55 1d 8b 48 89 de e8 67 c1 4b 06 <0f> 0b 48 c7 c7 a0 55 1d 8b 48 89 de e8 56 c1 4b 06 0f 0b 48 c7 c7 [ 85.459085][ T5784] RSP: 0018:ffffc900046afa00 EFLAGS: 00010246 [ 85.459102][ T5784] RAX: 000000000000004e RBX: ffff88803165a480 RCX: 906665f494aebf00 [ 85.459114][ T5784] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 85.459123][ T5784] RBP: 1ffff110062cb493 R08: ffffc900046af707 R09: 1ffff920008d5ee0 [ 85.459134][ T5784] R10: dffffc0000000000 R11: fffff520008d5ee1 R12: dffffc0000000000 [ 85.459146][ T5784] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 85.459159][ T5784] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 85.459172][ T5784] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.557482][ T5784] CR2: 00007f9bf5c27dac CR3: 00000000315bc000 CR4: 00000000003506f0 [ 85.565960][ T5784] Kernel panic - not syncing: Fatal exception [ 85.567592][ T5887] can: request_module (can-proto-5) failed. [ 85.578428][ T5784] Kernel Offset: disabled [ 85.583006][ T5784] Rebooting in 86400 seconds..