last executing test programs: 2m0.399171147s ago: executing program 4 (id=1403): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_TUPLE_REPLY={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x3c}}, 0x0) 1m43.37600445s ago: executing program 0 (id=1404): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x68000000}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="08019e0000641800"], 0x24}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000003680)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa9886dd00000000008000000000000000bbff0200000000000000000000000000018900907800000000000000000000000000000001ff0000aa5a8000000000000000000000008000"/94], 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="e0435200bd03e73f8fa8fa542c41d3181cec24cbd8e0c9a19420e4ed670265e37c58008c7d1f29d677ceea5a5a08066ab244866407bd2eaa1c391c7cd71b422741ee2573604969949ca41bb9c0cd1b616e9c1a59dd295965d6d34674d8f20c99c5fc661a6a9735fb0a8ba48c50ecf43bf651066568a3fcea3d44c1fb5e8d17ce0386feb15e6d3d95577097656b61d426a0e98f741882f9f280b4a083fab7deaa38263543125be4346647fd6ba7a3990d42a369693f34dad69336f24570ddb4d750ca519a114564f62f09d6fba8de815c120d280d8dc5793dd6926d515dabb7fabee79391713d4b47f941d92dfde5d7be265848344bab9592a94a63184b441b3a6b166fc1fa775747f486c6c5106b7d1c754ef74e9b77488cef60aa82f3a6f2ba1c824b57357e858b216eec73ef46b56167aa4bde2304767680c2bd961e013c8da4531b65a3797a50c66d13cf6131c7ff138d9f64accdaae40e7077d362e0628af3f7d0cc82719745246c33174450f3cbda52db7659", 0x175}], 0x1}, 0x48094) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x7, 0x7, 0x100, 0x1, {{0x6, 0x4, 0x2, 0xe, 0x18, 0x67, 0x0, 0x1e, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @noop]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x1, 0x5b, 0x8a, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x2005}, 0x48) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r8) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r10, 0x8004745a, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x6}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r12}, 0x10) 1m43.042262008s ago: executing program 3 (id=1625): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/17, 0x11}}], 0x1, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x6a, 0x2, 0x20000000, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0xcc}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100001727694500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r4, &(0x7f0000006080)=[{{&(0x7f0000000680)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001780)=[{&(0x7f00000006c0)="8e978a0f3e", 0x5}], 0x1}}], 0x1, 0x4000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000006380)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x4, 0x0, 0xaa11, 0x81, 0x11}, &(0x7f0000006440)=0x98) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095000000000000002507739f99c037611e0668cd5456e371"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0x8, 0xc, &(0x7f0000000380)="0000ffffffffa000", &(0x7f0000000080)=""/12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000002100000000000000f8ffffff0100"/28], 0x1c}}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r7, &(0x7f0000000240)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6}, 0xe) getsockopt$IPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x43, &(0x7f00000003c0)={'IDLETIMER\x00'}, &(0x7f0000000500)=0x1e) getsockopt$bt_l2cap_L2CAP_CONNINFO(r7, 0x6, 0x2, 0x0, &(0x7f0000000140)) recvmsg$kcm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES32=r5], 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1m42.720881951s ago: executing program 2 (id=1405): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000000000000182300b0", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m41.679189204s ago: executing program 4 (id=1403): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_TUPLE_REPLY={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x3c}}, 0x0) 1m27.789228684s ago: executing program 3 (id=1625): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/17, 0x11}}], 0x1, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x6a, 0x2, 0x20000000, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0xcc}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100001727694500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r4, &(0x7f0000006080)=[{{&(0x7f0000000680)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001780)=[{&(0x7f00000006c0)="8e978a0f3e", 0x5}], 0x1}}], 0x1, 0x4000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000006380)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x4, 0x0, 0xaa11, 0x81, 0x11}, &(0x7f0000006440)=0x98) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095000000000000002507739f99c037611e0668cd5456e371"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0x8, 0xc, &(0x7f0000000380)="0000ffffffffa000", &(0x7f0000000080)=""/12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000002100000000000000f8ffffff0100"/28], 0x1c}}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r7, &(0x7f0000000240)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6}, 0xe) getsockopt$IPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x43, &(0x7f00000003c0)={'IDLETIMER\x00'}, &(0x7f0000000500)=0x1e) getsockopt$bt_l2cap_L2CAP_CONNINFO(r7, 0x6, 0x2, 0x0, &(0x7f0000000140)) recvmsg$kcm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES32=r5], 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1m26.49119013s ago: executing program 0 (id=1404): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x68000000}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="08019e0000641800"], 0x24}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000003680)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa9886dd00000000008000000000000000bbff0200000000000000000000000000018900907800000000000000000000000000000001ff0000aa5a8000000000000000000000008000"/94], 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="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", 0x175}], 0x1}, 0x48094) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x7, 0x7, 0x100, 0x1, {{0x6, 0x4, 0x2, 0xe, 0x18, 0x67, 0x0, 0x1e, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @noop]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x1, 0x5b, 0x8a, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x2005}, 0x48) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r8) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r10, 0x8004745a, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x6}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r12}, 0x10) 1m24.380695146s ago: executing program 2 (id=1405): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000000000000182300b0", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m22.403693487s ago: executing program 4 (id=1403): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_TUPLE_REPLY={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x3c}}, 0x0) 1m10.124191265s ago: executing program 3 (id=1625): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/17, 0x11}}], 0x1, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x6a, 0x2, 0x20000000, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0xcc}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100001727694500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r4, &(0x7f0000006080)=[{{&(0x7f0000000680)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001780)=[{&(0x7f00000006c0)="8e978a0f3e", 0x5}], 0x1}}], 0x1, 0x4000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000006380)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x4, 0x0, 0xaa11, 0x81, 0x11}, &(0x7f0000006440)=0x98) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095000000000000002507739f99c037611e0668cd5456e371"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0x8, 0xc, &(0x7f0000000380)="0000ffffffffa000", &(0x7f0000000080)=""/12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000002100000000000000f8ffffff0100"/28], 0x1c}}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r7, &(0x7f0000000240)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6}, 0xe) getsockopt$IPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x43, &(0x7f00000003c0)={'IDLETIMER\x00'}, &(0x7f0000000500)=0x1e) getsockopt$bt_l2cap_L2CAP_CONNINFO(r7, 0x6, 0x2, 0x0, &(0x7f0000000140)) recvmsg$kcm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES32=r5], 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1m9.250121359s ago: executing program 0 (id=1404): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x68000000}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="08019e0000641800"], 0x24}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000003680)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa9886dd00000000008000000000000000bbff0200000000000000000000000000018900907800000000000000000000000000000001ff0000aa5a8000000000000000000000008000"/94], 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="e0435200bd03e73f8fa8fa542c41d3181cec24cbd8e0c9a19420e4ed670265e37c58008c7d1f29d677ceea5a5a08066ab244866407bd2eaa1c391c7cd71b422741ee2573604969949ca41bb9c0cd1b616e9c1a59dd295965d6d34674d8f20c99c5fc661a6a9735fb0a8ba48c50ecf43bf651066568a3fcea3d44c1fb5e8d17ce0386feb15e6d3d95577097656b61d426a0e98f741882f9f280b4a083fab7deaa38263543125be4346647fd6ba7a3990d42a369693f34dad69336f24570ddb4d750ca519a114564f62f09d6fba8de815c120d280d8dc5793dd6926d515dabb7fabee79391713d4b47f941d92dfde5d7be265848344bab9592a94a63184b441b3a6b166fc1fa775747f486c6c5106b7d1c754ef74e9b77488cef60aa82f3a6f2ba1c824b57357e858b216eec73ef46b56167aa4bde2304767680c2bd961e013c8da4531b65a3797a50c66d13cf6131c7ff138d9f64accdaae40e7077d362e0628af3f7d0cc82719745246c33174450f3cbda52db7659", 0x175}], 0x1}, 0x48094) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x7, 0x7, 0x100, 0x1, {{0x6, 0x4, 0x2, 0xe, 0x18, 0x67, 0x0, 0x1e, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @noop]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x1, 0x5b, 0x8a, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x2005}, 0x48) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r8) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r10, 0x8004745a, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x6}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r12}, 0x10) 1m6.795305979s ago: executing program 2 (id=1405): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000000000000182300b0", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m2.468284588s ago: executing program 4 (id=1403): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_TUPLE_REPLY={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x3c}}, 0x0) 50.857142605s ago: executing program 3 (id=1625): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/17, 0x11}}], 0x1, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x6a, 0x2, 0x20000000, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0xcc}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100001727694500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r4, &(0x7f0000006080)=[{{&(0x7f0000000680)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001780)=[{&(0x7f00000006c0)="8e978a0f3e", 0x5}], 0x1}}], 0x1, 0x4000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000006380)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x4, 0x0, 0xaa11, 0x81, 0x11}, &(0x7f0000006440)=0x98) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095000000000000002507739f99c037611e0668cd5456e371"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0x8, 0xc, &(0x7f0000000380)="0000ffffffffa000", &(0x7f0000000080)=""/12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000002100000000000000f8ffffff0100"/28], 0x1c}}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r7, &(0x7f0000000240)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6}, 0xe) getsockopt$IPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x43, &(0x7f00000003c0)={'IDLETIMER\x00'}, &(0x7f0000000500)=0x1e) getsockopt$bt_l2cap_L2CAP_CONNINFO(r7, 0x6, 0x2, 0x0, &(0x7f0000000140)) recvmsg$kcm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES32=r5], 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x0) 49.762143623s ago: executing program 0 (id=1404): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x68000000}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="08019e0000641800"], 0x24}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000003680)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa9886dd00000000008000000000000000bbff0200000000000000000000000000018900907800000000000000000000000000000001ff0000aa5a8000000000000000000000008000"/94], 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="e0435200bd03e73f8fa8fa542c41d3181cec24cbd8e0c9a19420e4ed670265e37c58008c7d1f29d677ceea5a5a08066ab244866407bd2eaa1c391c7cd71b422741ee2573604969949ca41bb9c0cd1b616e9c1a59dd295965d6d34674d8f20c99c5fc661a6a9735fb0a8ba48c50ecf43bf651066568a3fcea3d44c1fb5e8d17ce0386feb15e6d3d95577097656b61d426a0e98f741882f9f280b4a083fab7deaa38263543125be4346647fd6ba7a3990d42a369693f34dad69336f24570ddb4d750ca519a114564f62f09d6fba8de815c120d280d8dc5793dd6926d515dabb7fabee79391713d4b47f941d92dfde5d7be265848344bab9592a94a63184b441b3a6b166fc1fa775747f486c6c5106b7d1c754ef74e9b77488cef60aa82f3a6f2ba1c824b57357e858b216eec73ef46b56167aa4bde2304767680c2bd961e013c8da4531b65a3797a50c66d13cf6131c7ff138d9f64accdaae40e7077d362e0628af3f7d0cc82719745246c33174450f3cbda52db7659", 0x175}], 0x1}, 0x48094) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x7, 0x7, 0x100, 0x1, {{0x6, 0x4, 0x2, 0xe, 0x18, 0x67, 0x0, 0x1e, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @noop]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x1, 0x5b, 0x8a, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x2005}, 0x48) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r8) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r10, 0x8004745a, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x6}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r12}, 0x10) 47.684729725s ago: executing program 2 (id=1405): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000000000000182300b0", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 39.470574692s ago: executing program 4 (id=1403): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_TUPLE_REPLY={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x3c}}, 0x0) 27.681379686s ago: executing program 3 (id=1625): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/17, 0x11}}], 0x1, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x6a, 0x2, 0x20000000, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000017c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20009c23000a0103000000000000000034000000030a01020000000000000000010000050900030073797a320000000008000540000000000900010073797a300000000a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800b000100736f636b6574000014000280080002400000000e0800014000000026fc30b39cf97cc63b005049001400000011000100e1baa367f545c844cfdc1fa4df9eaa737068fdd0886ac905a89c7aebffd7ba1618b35340e2830aa047764c837adfdbe929ac12e315eee28040154b21a3899a58f42d56d1d8f0156734bf301dabc020650a7c00815e565aa75a86b618803eb98e1d193f3da4382a40ecb5ccb0189ff9838f142b8d08f0cbe7b1461e3f983ffeeabb7d46329c6fe655a201f81dca008c97fed6df2fc6cd027d55c29c6a5ff05879a5d33cd8b2ac8db366bb856e9994d6d8c6d5aae2a89efd57b4b294627b2ce60891b705d43f8bc6af2417def2822beadd6d27839fae9239dfe00b3b2da118c8dae045d0930e3e25be33c896bfcf385c450eb9154720ab7c6feaa2ce01d63c96b42dfa416f"], 0xcc}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100001727694500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r4, &(0x7f0000006080)=[{{&(0x7f0000000680)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001780)=[{&(0x7f00000006c0)="8e978a0f3e", 0x5}], 0x1}}], 0x1, 0x4000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000006380)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x4, 0x0, 0xaa11, 0x81, 0x11}, &(0x7f0000006440)=0x98) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095000000000000002507739f99c037611e0668cd5456e371"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0x8, 0xc, &(0x7f0000000380)="0000ffffffffa000", &(0x7f0000000080)=""/12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000002100000000000000f8ffffff0100"/28], 0x1c}}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r7, &(0x7f0000000240)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6}, 0xe) getsockopt$IPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x43, &(0x7f00000003c0)={'IDLETIMER\x00'}, &(0x7f0000000500)=0x1e) getsockopt$bt_l2cap_L2CAP_CONNINFO(r7, 0x6, 0x2, 0x0, &(0x7f0000000140)) recvmsg$kcm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES32=r5], 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x0) 26.809666961s ago: executing program 0 (id=1404): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x68000000}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="08019e0000641800"], 0x24}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000003680)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa9886dd00000000008000000000000000bbff0200000000000000000000000000018900907800000000000000000000000000000001ff0000aa5a8000000000000000000000008000"/94], 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="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", 0x175}], 0x1}, 0x48094) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x7, 0x7, 0x100, 0x1, {{0x6, 0x4, 0x2, 0xe, 0x18, 0x67, 0x0, 0x1e, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @noop]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x1, 0x5b, 0x8a, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x2005}, 0x48) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r8) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r10, 0x8004745a, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x6}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r12}, 0x10) 24.670204337s ago: executing program 2 (id=1405): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000000000000182300b0", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 14.603733177s ago: executing program 4 (id=1403): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_TUPLE_REPLY={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x3c}}, 0x0) 6.789285105s ago: executing program 3 (id=1625): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/17, 0x11}}], 0x1, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x6a, 0x2, 0x20000000, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000017c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20009c23000a0103000000000000000034000000030a01020000000000000000010000050900030073797a320000000008000540000000000900010073797a300000000a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800b000100736f636b6574000014000280080002400000000e0800014000000026fc30b39cf97cc63b005049001400000011000100e1baa367f545c844cfdc1fa4df9eaa737068fdd0886ac905a89c7aebffd7ba1618b35340e2830aa047764c837adfdbe929ac12e315eee28040154b21a3899a58f42d56d1d8f0156734bf301dabc020650a7c00815e565aa75a86b618803eb98e1d193f3da4382a40ecb5ccb0189ff9838f142b8d08f0cbe7b1461e3f983ffeeabb7d46329c6fe655a201f81dca008c97fed6df2fc6cd027d55c29c6a5ff05879a5d33cd8b2ac8db366bb856e9994d6d8c6d5aae2a89efd57b4b294627b2ce60891b705d43f8bc6af2417def2822beadd6d27839fae9239dfe00b3b2da118c8dae045d0930e3e25be33c896bfcf385c450eb9154720ab7c6feaa2ce01d63c96b42dfa416f"], 0xcc}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100001727694500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r4, &(0x7f0000006080)=[{{&(0x7f0000000680)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001780)=[{&(0x7f00000006c0)="8e978a0f3e", 0x5}], 0x1}}], 0x1, 0x4000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000006380)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x4, 0x0, 0xaa11, 0x81, 0x11}, &(0x7f0000006440)=0x98) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095000000000000002507739f99c037611e0668cd5456e371"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0x8, 0xc, &(0x7f0000000380)="0000ffffffffa000", &(0x7f0000000080)=""/12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000002100000000000000f8ffffff0100"/28], 0x1c}}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r7, &(0x7f0000000240)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6}, 0xe) getsockopt$IPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x43, &(0x7f00000003c0)={'IDLETIMER\x00'}, &(0x7f0000000500)=0x1e) getsockopt$bt_l2cap_L2CAP_CONNINFO(r7, 0x6, 0x2, 0x0, &(0x7f0000000140)) recvmsg$kcm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES32=r5], 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x0) 5.754270322s ago: executing program 0 (id=1404): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x68000000}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="08019e0000641800"], 0x24}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000003680)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa9886dd00000000008000000000000000bbff0200000000000000000000000000018900907800000000000000000000000000000001ff0000aa5a8000000000000000000000008000"/94], 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="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", 0x175}], 0x1}, 0x48094) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x7, 0x7, 0x100, 0x1, {{0x6, 0x4, 0x2, 0xe, 0x18, 0x67, 0x0, 0x1e, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @noop]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x1, 0x5b, 0x8a, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x2005}, 0x48) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r8) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r10, 0x8004745a, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x6}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r12}, 0x10) 3.767290395s ago: executing program 2 (id=1405): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000000000000182300b0", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.074495131s ago: executing program 1 (id=1770): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{}, 0x0, 0x0}, 0x20) 502.178954ms ago: executing program 1 (id=1771): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 435.663077ms ago: executing program 1 (id=1772): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000370400"/20, @ANYRES32=r3, @ANYBLOB="92"], 0x20}}, 0x0) 178.572125ms ago: executing program 1 (id=1773): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 132.029797ms ago: executing program 1 (id=1774): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000100000000fdffffffffffffff00", @ANYRES32, @ANYBLOB="000000000000000014001680100001800c0004000c0000000000000008000d"], 0x3c}}, 0x0) 0s ago: executing program 1 (id=1775): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000008850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001b0006000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) kernel console output (not intermixed with test programs): gly recommended to keep mac addresses unique to avoid problems! [ 422.576135][T12269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.586736][T12269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.596923][T12269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.608341][T12269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.620627][T12269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.740790][T12269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.753844][T12269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.763864][T12269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.774759][T12269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.785048][T12269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.795599][T12269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.806178][T12269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.817127][T12269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.831215][T12269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.841811][T12269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.852386][T12269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.864368][T12269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.875325][T12269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.886431][T12269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.897821][T12269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.938528][ T6289] bridge_slave_1: left allmulticast mode [ 422.944206][ T6289] bridge_slave_1: left promiscuous mode [ 422.952679][ T6289] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.965080][ T6289] bridge_slave_0: left allmulticast mode [ 422.971528][ T6289] bridge_slave_0: left promiscuous mode [ 422.978226][ T6289] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.230715][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 423.245551][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 423.260817][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 423.271674][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 423.283851][ T5240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 423.291657][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 423.465182][ T6289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.481211][ T6289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.492881][ T6289] bond0 (unregistering): Released all slaves [ 423.521153][T12269] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.530127][T12269] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.538963][T12269] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.547702][T12269] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.602203][ T7294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.616053][ T7294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.716925][T12283] veth0_vlan: entered promiscuous mode [ 423.740785][T12283] veth1_vlan: entered promiscuous mode [ 423.775611][T12327] lo speed is unknown, defaulting to 1000 [ 423.775829][ T7296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.794411][ T7296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.908383][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.927499][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.000143][ T5240] Bluetooth: hci0: command tx timeout [ 424.090048][ T6286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.112261][ T6286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.266395][ T6289] hsr_slave_0: left promiscuous mode [ 424.277863][ T6289] hsr_slave_1: left promiscuous mode [ 424.290744][ T6289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.304396][ T6289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.313275][ T6289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.322459][ T6289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.346123][ T6289] veth1_macvtap: left promiscuous mode [ 424.352046][ T6289] veth0_macvtap: left promiscuous mode [ 424.358212][ T6289] veth1_vlan: left promiscuous mode [ 424.364060][ T6289] veth0_vlan: left promiscuous mode [ 424.976659][ T6289] team0 (unregistering): Port device team_slave_1 removed [ 425.020735][ T6289] team0 (unregistering): Port device team_slave_0 removed [ 425.359292][ T5240] Bluetooth: hci1: command tx timeout [ 425.457138][T12335] pim6reg: entered allmulticast mode [ 425.462953][T12336] pim6reg: left allmulticast mode [ 425.533561][T12319] chnl_net:caif_netlink_parms(): no params data found [ 425.573117][T12283] veth0_macvtap: entered promiscuous mode [ 425.640156][T12283] veth1_macvtap: entered promiscuous mode [ 425.678994][T12339] Bluetooth: MGMT ver 1.23 [ 425.826571][ T5230] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 425.838408][ T5230] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 425.846605][ T5230] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 425.860634][ T5230] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 425.892049][T12319] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.899546][ T5230] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 425.906714][T12319] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.915398][ T5230] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 425.924034][T12319] bridge_slave_0: entered allmulticast mode [ 425.939276][T12319] bridge_slave_0: entered promiscuous mode [ 425.966802][T12283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.977847][T12283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.987981][T12283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.000024][T12283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.009936][T12283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.020561][T12283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.032396][T12283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.043472][T12283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.053497][T12283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.063974][T12283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.073890][T12283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.087445][ T5230] Bluetooth: hci0: command tx timeout [ 426.093354][T12283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.104726][T12283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.120719][T12283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.132011][T12283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.142254][T12283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.153756][T12283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.164352][T12283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.175567][T12283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.185621][T12283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.196086][T12283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.206091][T12283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.216784][T12283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.226952][T12283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.241338][T12283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.251477][T12283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.262576][T12283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.273710][T12283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.283289][T12319] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.294912][T12319] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.302794][T12319] bridge_slave_1: entered allmulticast mode [ 426.309687][T12319] bridge_slave_1: entered promiscuous mode [ 426.350195][T12350] pim6reg: entered allmulticast mode [ 426.376550][T12351] pim6reg: left allmulticast mode [ 426.407924][T12319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.449354][T12283] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.466709][T12283] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.475563][T12283] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.497570][T12283] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.521005][T12319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.579812][T12319] team0: Port device team_slave_0 added [ 426.607349][T12344] lo speed is unknown, defaulting to 1000 [ 426.620042][T12319] team0: Port device team_slave_1 added [ 426.673973][T12327] chnl_net:caif_netlink_parms(): no params data found [ 426.719787][T12319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.736562][T12319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.764651][T12319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.811060][T12319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.821380][T12319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.856231][T12319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.027697][ T6289] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.156150][T12319] hsr_slave_0: entered promiscuous mode [ 427.172802][T12319] hsr_slave_1: entered promiscuous mode [ 427.200797][ T6289] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.236788][T12366] FAULT_INJECTION: forcing a failure. [ 427.236788][T12366] name failslab, interval 1, probability 0, space 0, times 0 [ 427.250435][T12366] CPU: 0 UID: 0 PID: 12366 Comm: syz.1.1659 Not tainted 6.11.0-rc4-syzkaller-00566-g7d3aed652d09 #0 [ 427.261228][T12366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 427.271320][T12366] Call Trace: [ 427.274585][T12366] [ 427.277502][T12366] dump_stack_lvl+0x241/0x360 [ 427.282163][T12366] ? __pfx_dump_stack_lvl+0x10/0x10 [ 427.287348][T12366] ? __pfx__printk+0x10/0x10 [ 427.291920][T12366] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 427.297884][T12366] ? __pfx___might_resched+0x10/0x10 [ 427.303152][T12366] should_fail_ex+0x3b0/0x4e0 [ 427.307828][T12366] should_failslab+0xac/0x100 [ 427.312528][T12366] ? __alloc_skb+0x1c3/0x440 [ 427.317130][T12366] kmem_cache_alloc_node_noprof+0x71/0x320 [ 427.322947][T12366] __alloc_skb+0x1c3/0x440 [ 427.327358][T12366] ? __pfx___alloc_skb+0x10/0x10 [ 427.332278][T12366] ? netlink_ack_tlv_len+0x6e/0x200 [ 427.337458][T12366] netlink_ack+0x13f/0xa30 [ 427.341860][T12366] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 427.347323][T12366] netlink_rcv_skb+0x262/0x430 [ 427.352073][T12366] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 427.357539][T12366] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 427.362866][T12366] ? netlink_deliver_tap+0x2e/0x1b0 [ 427.368077][T12366] netlink_unicast+0x7f6/0x990 [ 427.372863][T12366] ? __pfx_netlink_unicast+0x10/0x10 [ 427.378152][T12366] ? __virt_addr_valid+0x183/0x530 [ 427.383333][T12366] ? __check_object_size+0x49c/0x900 [ 427.388609][T12366] ? bpf_lsm_netlink_send+0x9/0x10 [ 427.393708][T12366] netlink_sendmsg+0x8e4/0xcb0 [ 427.398456][T12366] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.403720][T12366] ? __import_iovec+0x536/0x820 [ 427.408566][T12366] ? aa_sock_msg_perm+0x91/0x160 [ 427.413517][T12366] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 427.418805][T12366] ? security_socket_sendmsg+0x87/0xb0 [ 427.424247][T12366] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.429531][T12366] __sock_sendmsg+0x221/0x270 [ 427.434190][T12366] ____sys_sendmsg+0x525/0x7d0 [ 427.438941][T12366] ? __pfx_____sys_sendmsg+0x10/0x10 [ 427.444218][T12366] __sys_sendmsg+0x2b0/0x3a0 [ 427.448790][T12366] ? __pfx___sys_sendmsg+0x10/0x10 [ 427.453881][T12366] ? vfs_write+0x7c4/0xc90 [ 427.458336][T12366] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 427.464685][T12366] ? do_syscall_64+0x100/0x230 [ 427.469454][T12366] ? do_syscall_64+0xb6/0x230 [ 427.474112][T12366] do_syscall_64+0xf3/0x230 [ 427.478595][T12366] ? clear_bhb_loop+0x35/0x90 [ 427.483258][T12366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.489132][T12366] RIP: 0033:0x7f11b2779e79 [ 427.493528][T12366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.513130][T12366] RSP: 002b:00007f11b360a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 427.521554][T12366] RAX: ffffffffffffffda RBX: 00007f11b2915f80 RCX: 00007f11b2779e79 [ 427.529511][T12366] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 427.537466][T12366] RBP: 00007f11b360a090 R08: 0000000000000000 R09: 0000000000000000 [ 427.545416][T12366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.553366][T12366] R13: 0000000000000000 R14: 00007f11b2915f80 R15: 00007ffd7468c5a8 [ 427.561353][T12366] [ 427.566422][ T5230] Bluetooth: hci1: command tx timeout [ 427.654580][T12327] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.663865][T12327] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.671116][T12327] bridge_slave_0: entered allmulticast mode [ 427.679557][T12327] bridge_slave_0: entered promiscuous mode [ 427.701871][ T6289] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.730952][ T7318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.756192][ T7318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.773976][T12327] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.781447][T12327] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.789186][T12327] bridge_slave_1: entered allmulticast mode [ 427.796665][T12327] bridge_slave_1: entered promiscuous mode [ 427.855109][ T6289] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.945962][T12327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.961018][T12327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.997862][ T5230] Bluetooth: hci2: command tx timeout [ 428.102017][T12378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1662'. [ 428.160108][ T5230] Bluetooth: hci0: command tx timeout [ 428.182322][T12327] team0: Port device team_slave_0 added [ 428.203280][T12327] team0: Port device team_slave_1 added [ 428.220279][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.230394][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.256968][T12344] chnl_net:caif_netlink_parms(): no params data found [ 428.306483][T12327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.313913][T12327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.340490][T12327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.375740][T12381] netlink: 'syz.1.1663': attribute type 10 has an invalid length. [ 428.407195][T12381] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 428.439899][T12327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.446882][T12327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.497860][T12327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.689198][T12383] wg2: entered promiscuous mode [ 428.694099][T12383] wg2: entered allmulticast mode [ 428.752465][T12327] hsr_slave_0: entered promiscuous mode [ 428.760185][T12327] hsr_slave_1: entered promiscuous mode [ 428.766455][T12327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 428.781187][T12327] Cannot create hsr debugfs directory [ 428.855545][ T6289] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.050473][ T6289] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.106186][T12344] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.127546][T12344] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.134793][T12344] bridge_slave_0: entered allmulticast mode [ 429.144235][T12344] bridge_slave_0: entered promiscuous mode [ 429.222001][ T6289] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.239803][T12344] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.246948][T12344] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.265655][T12344] bridge_slave_1: entered allmulticast mode [ 429.273659][T12344] bridge_slave_1: entered promiscuous mode [ 429.359427][ T6289] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.434060][T12344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.455756][T12344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.597873][ T5230] Bluetooth: hci1: command tx timeout [ 429.633186][T12344] team0: Port device team_slave_0 added [ 429.674580][T12344] team0: Port device team_slave_1 added [ 429.695100][T12319] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 429.705748][T12319] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 429.734029][T12319] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 429.754859][T12344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.762438][T12344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.789085][T12344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.803719][T12319] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 429.832264][T12344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.840100][T12344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.892341][T12344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.948220][T12391] netlink: 'syz.1.1665': attribute type 7 has an invalid length. [ 429.956079][T12391] netlink: 'syz.1.1665': attribute type 39 has an invalid length. [ 430.041569][T12393] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1666'. [ 430.075642][ T6289] bridge_slave_1: left allmulticast mode [ 430.090381][ T6289] bridge_slave_1: left promiscuous mode [ 430.090868][ T5230] Bluetooth: hci2: command tx timeout [ 430.096131][ T6289] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.111788][ T6289] bridge_slave_0: left allmulticast mode [ 430.142097][ T6289] bridge_slave_0: left promiscuous mode [ 430.158135][ T6289] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.178131][T12394] ip6t_REJECT: ECHOREPLY is not supported [ 430.190453][ T6289] bridge_slave_1: left allmulticast mode [ 430.196123][ T6289] bridge_slave_1: left promiscuous mode [ 430.216321][ T6289] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.239026][ T5235] Bluetooth: hci0: command tx timeout [ 430.241601][ T5233] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 430.256524][ T6289] bridge_slave_0: left allmulticast mode [ 430.256701][ T5233] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 430.264600][ T6289] bridge_slave_0: left promiscuous mode [ 430.275703][ T6289] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.276447][ T5233] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 430.293518][ T5233] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 430.308032][ T5233] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 430.315787][ T5233] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 430.950410][ T6289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.962817][ T6289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.974013][ T6289] bond0 (unregistering): Released all slaves [ 431.073243][ T6289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.086434][ T6289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.099947][ T6289] bond0 (unregistering): Released all slaves [ 431.190178][T12344] hsr_slave_0: entered promiscuous mode [ 431.196991][T12344] hsr_slave_1: entered promiscuous mode [ 431.217429][T12344] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 431.225016][T12344] Cannot create hsr debugfs directory [ 431.352017][T12395] lo speed is unknown, defaulting to 1000 [ 431.445434][T12399] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1667'. [ 431.553740][T12399] netlink: 'syz.1.1667': attribute type 3 has an invalid length. [ 431.639001][T12399] xt_hashlimit: size too large, truncated to 1048576 [ 431.645881][T12399] xt_hashlimit: max too large, truncated to 1048576 [ 431.679644][T12399] xt_hashlimit: overflow, try lower: 0/0 [ 431.697821][ T5240] Bluetooth: hci1: command tx timeout [ 431.836503][T12402] lo speed is unknown, defaulting to 1000 [ 432.001735][T12319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.065522][T12327] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 432.114784][T12327] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 432.168058][ T5240] Bluetooth: hci2: command tx timeout [ 432.186672][T12319] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.233094][T12327] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 432.246252][T12327] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 432.397823][ T5240] Bluetooth: hci3: command tx timeout [ 432.472173][ T6290] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.479386][ T6290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.557969][ T6289] hsr_slave_0: left promiscuous mode [ 432.565021][ T6289] hsr_slave_1: left promiscuous mode [ 432.578773][ T6289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.587444][ T6289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.595868][ T6289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.603553][ T6289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.626249][ T6289] hsr_slave_0: left promiscuous mode [ 432.632988][ T6289] hsr_slave_1: left promiscuous mode [ 432.660634][ T6289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.668132][ T6289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.675882][ T6289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.686642][ T6289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.724818][ T6289] veth1_macvtap: left promiscuous mode [ 432.730615][ T6289] veth0_macvtap: left promiscuous mode [ 432.736254][ T6289] veth1_vlan: left promiscuous mode [ 432.741641][ T6289] veth0_vlan: left promiscuous mode [ 432.748210][ T6289] veth1_macvtap: left promiscuous mode [ 432.753719][ T6289] veth0_macvtap: left promiscuous mode [ 432.759424][ T6289] veth1_vlan: left promiscuous mode [ 432.764878][ T6289] veth0_vlan: left promiscuous mode [ 433.319639][ T6289] team0 (unregistering): Port device team_slave_1 removed [ 433.358822][ T6289] team0 (unregistering): Port device team_slave_0 removed [ 434.055075][ T6289] team0 (unregistering): Port device team_slave_1 removed [ 434.093952][ T6289] team0 (unregistering): Port device team_slave_0 removed [ 434.248002][ T5240] Bluetooth: hci2: command 0x0419 tx timeout [ 434.477469][ T5230] Bluetooth: hci3: command tx timeout [ 434.519438][ T7287] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.526592][ T7287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.665996][T12395] chnl_net:caif_netlink_parms(): no params data found [ 435.025763][T12344] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 435.119784][T12344] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 435.130485][T12344] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 435.142646][T12344] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 435.178364][T12395] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.187838][T12395] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.195225][T12395] bridge_slave_0: entered allmulticast mode [ 435.204615][T12395] bridge_slave_0: entered promiscuous mode [ 435.218284][T12395] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.225414][T12395] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.233686][T12395] bridge_slave_1: entered allmulticast mode [ 435.241020][T12395] bridge_slave_1: entered promiscuous mode [ 435.300365][T12395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.340183][T12395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.454019][T12395] team0: Port device team_slave_0 added [ 435.455926][T12416] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1669'. [ 435.463535][T12395] team0: Port device team_slave_1 added [ 435.502443][T12319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.515517][T12327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.519900][T12417] ip6t_REJECT: ECHOREPLY is not supported [ 435.588775][T12395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.599786][T12395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.629511][T12395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.643084][T12395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.651863][T12395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.678796][T12395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.763821][T12327] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.876289][T12395] hsr_slave_0: entered promiscuous mode [ 435.883326][T12395] hsr_slave_1: entered promiscuous mode [ 435.889869][T12395] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 435.897783][T12395] Cannot create hsr debugfs directory [ 435.934912][ T7318] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.942100][ T7318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.953339][T12319] veth0_vlan: entered promiscuous mode [ 436.033466][ T6289] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.062024][T12422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1671'. [ 436.092921][ T7294] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.100046][ T7294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.145087][T12319] veth1_vlan: entered promiscuous mode [ 436.165249][T12422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1671'. [ 436.194072][T12344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.231930][T12423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1671'. [ 436.259674][T12344] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.317557][ T5240] Bluetooth: hci2: command 0x0419 tx timeout [ 436.338690][ T7296] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.345793][ T7296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.359121][ T7296] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.366261][ T7296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.450441][ T6289] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.548683][T12319] veth0_macvtap: entered promiscuous mode [ 436.567570][ T5240] Bluetooth: hci3: command tx timeout [ 436.649771][ T6289] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.695314][T12319] veth1_macvtap: entered promiscuous mode [ 436.811983][ T6289] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.894864][T12319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.914068][T12319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.937729][T12319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.965433][T12319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.977814][T12319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.001412][T12319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.012430][T12319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.036999][T12319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.048699][T12319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.059352][T12319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.070668][T12319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.084372][T12319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.095550][T12319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.106184][T12319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.119909][T12319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.136546][T12319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.148258][T12319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.159164][T12319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.169636][T12319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.179645][T12319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.192271][T12319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.202273][T12319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.212794][T12319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.223956][T12319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.280283][T12319] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.297478][T12319] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.306197][T12319] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.320408][T12319] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.382136][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 437.460265][T12327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.578265][ T6289] bridge_slave_1: left allmulticast mode [ 437.583953][ T6289] bridge_slave_1: left promiscuous mode [ 437.591137][ T6289] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.628297][ T6289] bridge_slave_0: left allmulticast mode [ 437.634154][ T6289] bridge_slave_0: left promiscuous mode [ 437.640191][ T6289] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.076539][ T6289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.089340][ T6289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.101393][ T6289] bond0 (unregistering): Released all slaves [ 438.164672][ T6286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.207615][ T6286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.408498][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.428675][T12327] veth0_vlan: entered promiscuous mode [ 438.437484][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.535483][T12327] veth1_vlan: entered promiscuous mode [ 438.590871][T12344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.637545][ T5240] Bluetooth: hci3: command 0x0419 tx timeout [ 438.673504][T12327] veth0_macvtap: entered promiscuous mode [ 438.701806][T12327] veth1_macvtap: entered promiscuous mode [ 438.746069][T12327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.756870][T12327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.766857][T12327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.777524][T12327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.787519][T12327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.805852][T12327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.821883][T12327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.847442][T12327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.867428][T12327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.879146][T12327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.893929][T12327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.917934][T12327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.935931][T12327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.962561][T12327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.981053][T12327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.995650][T12327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.006440][T12327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.016290][T12327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.026813][T12327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.040805][T12327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.052261][T12327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.065047][T12327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.075807][T12327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.085738][T12327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.096186][T12327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.106309][T12327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.117005][T12327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.131224][T12327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.173089][ T6289] hsr_slave_0: left promiscuous mode [ 439.185430][ T6289] hsr_slave_1: left promiscuous mode [ 439.192734][ T6289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.202153][ T6289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.211269][ T6289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.219380][ T6289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.244698][ T6289] veth1_macvtap: left promiscuous mode [ 439.250361][ T6289] veth0_macvtap: left promiscuous mode [ 439.255910][ T6289] veth1_vlan: left promiscuous mode [ 439.261502][ T6289] veth0_vlan: left promiscuous mode [ 439.756224][ T6289] team0 (unregistering): Port device team_slave_1 removed [ 439.803134][ T6289] team0 (unregistering): Port device team_slave_0 removed [ 440.282915][T12327] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.292890][T12327] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.301854][T12327] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.313743][T12327] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.445712][T12344] veth0_vlan: entered promiscuous mode [ 440.504825][T12344] veth1_vlan: entered promiscuous mode [ 440.549015][T12395] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 440.611102][T12395] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 440.648471][T12395] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 440.719306][ T5230] Bluetooth: hci3: command 0x0419 tx timeout [ 440.723697][T12395] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 440.839572][ T7294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.860298][ T7294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.900766][T12344] veth0_macvtap: entered promiscuous mode [ 440.924844][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.933291][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.939444][T12344] veth1_macvtap: entered promiscuous mode [ 441.022396][T12344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.035295][T12344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.047837][T12344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.059089][T12344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.069419][T12344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.083759][T12344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.093858][T12344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.104537][T12344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.114533][T12344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.128223][T12344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.138253][T12344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.148848][T12344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.170992][T12344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.240040][T12344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.251346][T12344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.262593][T12344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.294424][T12344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.314396][T12344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.336605][T12344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.347087][T12344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.371785][T12344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.384279][T12344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.395001][T12344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.405460][T12344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.419667][T12344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.430233][T12344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.441008][T12344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.452724][T12344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.542497][ T7287] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.585147][ T5240] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 441.595588][ T5240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 441.606175][ T5240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 441.657795][ T5240] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 441.668858][ T5240] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 441.676224][ T5240] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 441.689120][T12344] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.705945][T12344] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.714990][T12344] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.723807][T12344] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.800527][ T7287] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.960045][ T7287] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.028715][T12470] lo speed is unknown, defaulting to 1000 [ 442.091326][T12395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.180140][ T7287] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.207165][T12395] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.236959][ T6290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.269367][ T6290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.281876][ T7294] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.289051][ T7294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.302403][ T7294] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.309567][ T7294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.409817][ T7294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.430006][ T7294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.676348][ T7287] bridge_slave_1: left allmulticast mode [ 442.685511][ T7287] bridge_slave_1: left promiscuous mode [ 442.691578][ T7287] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.702799][ T7287] bridge_slave_0: left allmulticast mode [ 442.709489][ T7287] bridge_slave_0: left promiscuous mode [ 442.717036][ T7287] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.316088][ T7287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.335494][ T5230] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 443.346796][ T5230] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 443.355686][ T5230] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 443.365079][ T5230] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 443.374565][ T5230] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 443.382241][ T5230] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 443.382354][ T7287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.405726][ T7287] bond0 (unregistering): Released all slaves [ 443.758782][ T5230] Bluetooth: hci0: command tx timeout [ 443.824785][T12395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.901996][T12470] chnl_net:caif_netlink_parms(): no params data found [ 444.066905][T12485] lo speed is unknown, defaulting to 1000 [ 444.319453][T12470] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.326616][T12470] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.347784][T12470] bridge_slave_0: entered allmulticast mode [ 444.358398][T12470] bridge_slave_0: entered promiscuous mode [ 444.376715][T12470] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.384285][T12470] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.397871][T12470] bridge_slave_1: entered allmulticast mode [ 444.405212][T12470] bridge_slave_1: entered promiscuous mode [ 444.536365][T12470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.573263][T12470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.605257][ T7287] hsr_slave_0: left promiscuous mode [ 444.611546][ T7287] hsr_slave_1: left promiscuous mode [ 444.617777][ T7287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.625193][ T7287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.633494][ T7287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.641793][ T7287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.671721][ T7287] veth1_macvtap: left promiscuous mode [ 444.677249][ T7287] veth0_macvtap: left promiscuous mode [ 444.682853][ T7287] veth1_vlan: left promiscuous mode [ 444.688392][ T7287] veth0_vlan: left promiscuous mode [ 444.895938][T12500] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1681'. [ 444.974869][T12501] ip6t_REJECT: ECHOREPLY is not supported [ 445.242502][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 445.261828][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 445.270346][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 445.295429][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 445.315927][ T5233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 445.329577][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 445.360431][ T7287] team0 (unregistering): Port device team_slave_1 removed [ 445.406352][ T7287] team0 (unregistering): Port device team_slave_0 removed [ 445.440550][ T5240] Bluetooth: hci1: command tx timeout [ 445.838517][ T5240] Bluetooth: hci0: command tx timeout [ 446.144227][T12470] team0: Port device team_slave_0 added [ 446.215926][T12470] team0: Port device team_slave_1 added [ 446.337137][T12503] lo speed is unknown, defaulting to 1000 [ 446.378520][T12470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.385506][T12470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.457621][T12470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.474865][T12395] veth0_vlan: entered promiscuous mode [ 446.511756][T12510] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1683'. [ 446.530289][T12470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.552195][T12470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.586730][T12470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.597252][T12511] ip6t_REJECT: ECHOREPLY is not supported [ 446.701076][T12395] veth1_vlan: entered promiscuous mode [ 446.778506][T12470] hsr_slave_0: entered promiscuous mode [ 446.792182][T12470] hsr_slave_1: entered promiscuous mode [ 446.881880][T12485] chnl_net:caif_netlink_parms(): no params data found [ 447.076128][T12395] veth0_macvtap: entered promiscuous mode [ 447.139193][ T7287] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.184157][T12395] veth1_macvtap: entered promiscuous mode [ 447.210020][T12523] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1686'. [ 447.316624][ T7287] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.360741][ T5233] Bluetooth: hci2: command tx timeout [ 447.400072][T12523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1686'. [ 447.426261][T12485] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.433988][T12485] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.441517][T12485] bridge_slave_0: entered allmulticast mode [ 447.452325][T12485] bridge_slave_0: entered promiscuous mode [ 447.477589][ T7287] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.517681][ T5233] Bluetooth: hci1: command 0x041b tx timeout [ 447.518981][T12485] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.551729][T12485] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.574996][T12485] bridge_slave_1: entered allmulticast mode [ 447.583106][T12485] bridge_slave_1: entered promiscuous mode [ 447.635787][ T7287] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.685354][T12503] chnl_net:caif_netlink_parms(): no params data found [ 447.715249][T12395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.733204][T12395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.759906][T12395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.784568][T12395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.794664][T12395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.805432][T12395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.815458][T12395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.825977][T12395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.837080][T12395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.848967][T12395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.860236][T12532] Cannot find add_set index 0 as target [ 447.865936][T12395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.877720][T12395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.889410][T12395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.906602][T12485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.918312][ T5230] Bluetooth: hci0: command tx timeout [ 447.990892][T12485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.057855][T12530] delete_channel: no stack [ 448.072023][T12395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.084589][T12395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.095450][T12395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.105998][T12395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.115843][T12395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.126431][T12395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.136306][T12395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.148741][T12395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.172433][T12395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.197810][T12395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.223868][T12395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.234856][T12395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.256870][T12395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.275021][T12395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.286687][T12395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.334614][T12485] team0: Port device team_slave_0 added [ 448.355798][T12485] team0: Port device team_slave_1 added [ 448.473266][T12395] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.484113][T12395] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.493830][T12395] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.502726][T12395] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.555191][T12544] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1691'. [ 448.604246][T12485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.615398][T12485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.645132][T12485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.685901][T12503] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.696162][T12545] ip6t_REJECT: ECHOREPLY is not supported [ 448.702177][T12503] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.709933][T12503] bridge_slave_0: entered allmulticast mode [ 448.717096][T12503] bridge_slave_0: entered promiscuous mode [ 448.762265][ T7287] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.791073][T12485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.798753][T12485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.825136][T12485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.847140][T12503] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.864818][T12503] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.873121][T12503] bridge_slave_1: entered allmulticast mode [ 448.881268][T12503] bridge_slave_1: entered promiscuous mode [ 448.961422][ T7287] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.023721][T12503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.071505][T12503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.088985][T12485] hsr_slave_0: entered promiscuous mode [ 449.095367][T12485] hsr_slave_1: entered promiscuous mode [ 449.101968][T12485] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 449.109656][T12485] Cannot create hsr debugfs directory [ 449.131957][ T7287] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.162906][T12470] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 449.266878][T12470] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 449.308060][ T7287] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.424647][T12470] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 449.440050][ T5230] Bluetooth: hci2: command 0x041b tx timeout [ 449.459167][T12470] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 449.483498][T12503] team0: Port device team_slave_0 added [ 449.494208][T12503] team0: Port device team_slave_1 added [ 449.576387][T12503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.597370][T12503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.623474][ T5240] Bluetooth: hci1: command 0x041b tx timeout [ 449.633484][T12503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.676729][ T7318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.701365][T12503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.717719][ T7318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.725288][T12503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.776127][T12503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.975372][T12503] hsr_slave_0: entered promiscuous mode [ 449.985267][T12503] hsr_slave_1: entered promiscuous mode [ 449.992441][T12503] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 450.000996][T12503] Cannot create hsr debugfs directory [ 450.007663][ T5240] Bluetooth: hci0: command tx timeout [ 450.028083][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.035934][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.076602][ T7287] bridge_slave_1: left allmulticast mode [ 450.104115][ T7287] bridge_slave_1: left promiscuous mode [ 450.118101][ T7287] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.137246][ T7287] bridge_slave_0: left allmulticast mode [ 450.148120][ T7287] bridge_slave_0: left promiscuous mode [ 450.153890][ T7287] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.182492][ T7287] bridge_slave_1: left allmulticast mode [ 450.198376][ T7287] bridge_slave_1: left promiscuous mode [ 450.204134][ T7287] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.230164][ T7287] bridge_slave_0: left allmulticast mode [ 450.246020][ T7287] bridge_slave_0: left promiscuous mode [ 450.252242][ T7287] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.082886][ T7287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.095876][ T7287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.106340][ T7287] bond0 (unregistering): Released all slaves [ 451.221037][ T7287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.235140][ T7287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.246708][ T7287] bond0 (unregistering): Released all slaves [ 451.517587][ T5240] Bluetooth: hci2: command 0x041b tx timeout [ 451.677849][ T5240] Bluetooth: hci1: command 0x041b tx timeout [ 451.954045][T12470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.197182][T12470] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.277225][T12485] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 452.322545][ T7289] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.329756][ T7289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.364049][T12485] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 452.375993][T12485] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 452.464541][ T6286] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.471734][ T6286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.494375][T12485] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 452.535812][ T7287] hsr_slave_0: left promiscuous mode [ 452.545871][ T7287] hsr_slave_1: left promiscuous mode [ 452.553663][ T7287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.562355][ T7287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.570782][ T7287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.578309][ T7287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.593298][ T7287] hsr_slave_0: left promiscuous mode [ 452.601648][ T7287] hsr_slave_1: left promiscuous mode [ 452.607973][ T7287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.615407][ T7287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.626448][ T7287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.634993][ T7287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.680400][ T7287] veth1_macvtap: left promiscuous mode [ 452.685937][ T7287] veth0_macvtap: left promiscuous mode [ 452.691638][ T7287] veth1_vlan: left promiscuous mode [ 452.696920][ T7287] veth0_vlan: left promiscuous mode [ 452.703512][ T7287] veth1_macvtap: left promiscuous mode [ 452.709388][ T7287] veth0_macvtap: left promiscuous mode [ 452.716363][ T7287] veth1_vlan: left promiscuous mode [ 452.722648][ T7287] veth0_vlan: left promiscuous mode [ 453.225157][ T5230] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 453.235452][ T5230] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 453.261782][ T5230] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 453.293805][ T5230] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 453.306130][ T5230] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 453.313644][ T5230] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 453.549145][ T7287] team0 (unregistering): Port device team_slave_1 removed [ 453.595755][ T7287] team0 (unregistering): Port device team_slave_0 removed [ 453.604936][ T5240] Bluetooth: hci2: command 0x041b tx timeout [ 453.767064][ T5240] Bluetooth: hci1: command 0x041b tx timeout [ 454.363179][ T7287] team0 (unregistering): Port device team_slave_1 removed [ 454.429134][ T7287] team0 (unregistering): Port device team_slave_0 removed [ 454.996939][T12576] lo speed is unknown, defaulting to 1000 [ 455.246259][T12485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.304818][T12485] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.356303][ T7289] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.363521][ T7289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.372513][ T5240] Bluetooth: hci3: command tx timeout [ 455.457340][ T6290] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.464507][ T6290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.482886][T12503] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 455.494178][T12503] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 455.539330][T12503] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 455.550076][T12503] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 455.613422][T12470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.678933][ T5240] Bluetooth: hci2: command 0x041b tx timeout [ 455.860028][T12470] veth0_vlan: entered promiscuous mode [ 455.896629][T12576] chnl_net:caif_netlink_parms(): no params data found [ 455.925531][T12470] veth1_vlan: entered promiscuous mode [ 456.194286][ T7287] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.201118][T12600] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1702'. [ 456.274809][T12470] veth0_macvtap: entered promiscuous mode [ 456.314150][T12576] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.325558][T12601] ip6t_REJECT: ECHOREPLY is not supported [ 456.335175][T12576] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.342976][T12576] bridge_slave_0: entered allmulticast mode [ 456.350528][T12576] bridge_slave_0: entered promiscuous mode [ 456.358646][T12576] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.365775][T12576] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.373508][T12576] bridge_slave_1: entered allmulticast mode [ 456.381546][T12576] bridge_slave_1: entered promiscuous mode [ 456.400597][T12470] veth1_macvtap: entered promiscuous mode [ 456.427880][ T7287] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.534790][T12576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.568155][T12503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.602110][ T7287] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.626811][T12604] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1703'. [ 456.636577][T12604] 0ͺXΉ¦Dφ»: renamed from gretap0 (while UP) [ 456.647858][T12604] 0ͺXΉ¦Dφ»: entered allmulticast mode [ 456.659326][T12576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.730337][ T7287] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.782008][T12576] team0: Port device team_slave_0 added [ 456.799947][T12470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.811590][T12470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.821840][T12470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.833071][T12470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.843196][T12470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.854310][T12470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.864556][T12470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.875071][T12470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.885922][T12470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.896861][T12470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.909407][T12470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.920651][T12485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.929757][T12606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1704'. [ 456.950520][T12576] team0: Port device team_slave_1 added [ 456.986711][T12470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.997996][T12470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.998518][T12607] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 457.008391][T12470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.008413][T12470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.008426][T12470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.008440][T12470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.008460][T12470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.008475][T12470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.008498][T12470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.008512][T12470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.008528][T12470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.008542][T12470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.009988][T12470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.079222][T12607] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 457.138393][T12607] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 457.173720][T12503] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.188496][ T7287] bridge_slave_1: left allmulticast mode [ 457.194271][ T7287] bridge_slave_1: left promiscuous mode [ 457.201724][ T7287] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.210805][ T7287] bridge_slave_0: left allmulticast mode [ 457.216441][ T7287] bridge_slave_0: left promiscuous mode [ 457.222504][ T7287] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.236069][ T7287] bridge_slave_1: left allmulticast mode [ 457.241918][ T7287] bridge_slave_1: left promiscuous mode [ 457.248003][ T7287] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.257120][ T7287] bridge_slave_0: left allmulticast mode [ 457.265415][ T7287] bridge_slave_0: left promiscuous mode [ 457.271581][ T7287] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.437769][ T5230] Bluetooth: hci3: command tx timeout [ 457.767664][ T5230] Bluetooth: hci2: command 0x041b tx timeout [ 457.936121][ T7287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.950497][ T7287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.964971][ T7287] bond0 (unregistering): Released all slaves [ 458.072138][ T7287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.081855][ T7287] bond_slave_0: left promiscuous mode [ 458.091148][ T7287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.101470][ T7287] bond_slave_1: left promiscuous mode [ 458.109524][ T7287] bond0 (unregistering): Released all slaves [ 458.122749][T12576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.129932][T12576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.156021][T12576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.178788][T12576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.193879][T12576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.231831][T12576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.263422][T12470] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.287807][T12470] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.296531][T12470] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.313226][T12470] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.336319][ T7287] Κό: left promiscuous mode [ 458.354058][T12615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1708'. [ 458.377886][ T6286] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.385125][ T6286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.510622][ T7318] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.517854][ T7318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.605870][T12485] veth0_vlan: entered promiscuous mode [ 458.616681][T12576] hsr_slave_0: entered promiscuous mode [ 458.624062][T12576] hsr_slave_1: entered promiscuous mode [ 458.644785][T12576] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 458.658624][T12576] Cannot create hsr debugfs directory [ 459.518764][ T5230] Bluetooth: hci3: command 0x040f tx timeout [ 460.131212][ T7287] hsr_slave_0: left promiscuous mode [ 460.197888][ T7287] hsr_slave_1: left promiscuous mode [ 460.238344][ T7287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.245887][ T7287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.320909][ T7287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.347762][ T7287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.457597][ T7287] hsr_slave_0: left promiscuous mode [ 460.537501][ T7287] hsr_slave_1: left promiscuous mode [ 460.585848][ T7287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.594257][ T7287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.616184][ T7287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.623729][ T7287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.707078][ T7287] veth1_macvtap: left promiscuous mode [ 460.713931][ T7287] veth0_macvtap: left promiscuous mode [ 460.719915][ T7287] veth1_vlan: left promiscuous mode [ 460.725250][ T7287] veth0_vlan: left promiscuous mode [ 460.735125][ T7287] veth1_macvtap: left promiscuous mode [ 460.740844][ T7287] veth0_macvtap: left promiscuous mode [ 460.746490][ T7287] veth1_vlan: left promiscuous mode [ 460.752013][ T7287] veth0_vlan: left promiscuous mode [ 461.333053][ T7287] team0 (unregistering): Port device team_slave_1 removed [ 461.379722][ T7287] team0 (unregistering): Port device team_slave_0 removed [ 461.607785][ T5240] Bluetooth: hci3: command 0x040f tx timeout [ 462.084730][ T7287] team0 (unregistering): Port device team_slave_1 removed [ 462.126573][ T7287] team0 (unregistering): Port device team_slave_0 removed [ 462.592374][T12485] veth1_vlan: entered promiscuous mode [ 462.737920][ T6290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.745775][ T6290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.943855][ T6286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.960988][T12485] veth0_macvtap: entered promiscuous mode [ 462.977441][ T6286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.053698][T12485] veth1_macvtap: entered promiscuous mode [ 463.121592][T12503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.141574][T12485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.160362][T12485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.171051][T12485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.181654][T12485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.191878][T12485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.204619][T12485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.215240][T12485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.225896][T12485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.253515][T12485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.264657][T12485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.275467][T12485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.285853][T12485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.297554][T12485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.307978][T12485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.318874][T12485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.328873][T12485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.339797][T12485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.349931][T12485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.361721][T12485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.373160][T12485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.454754][T12485] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.485101][T12485] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.507525][T12485] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.516277][T12485] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.550053][T12637] netlink: 'syz.1.1715': attribute type 1 has an invalid length. [ 463.678850][ T5240] Bluetooth: hci3: command 0x040f tx timeout [ 463.801412][ T7318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.837970][ T7318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.885398][T12503] veth0_vlan: entered promiscuous mode [ 463.945866][T12503] veth1_vlan: entered promiscuous mode [ 463.975273][T12576] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 463.999855][T12576] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 464.014710][ T7318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.027571][ T7318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.043689][T12576] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 464.080029][T12576] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 464.151333][ T7287] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.220102][T12503] veth0_macvtap: entered promiscuous mode [ 464.246101][ T7287] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.274804][T12503] veth1_macvtap: entered promiscuous mode [ 464.316740][T12503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.328886][T12503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.341165][T12503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.352483][T12503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.362418][T12503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.373023][T12503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.383263][T12503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.394819][T12503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.406062][T12503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.417304][T12503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.429220][T12503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.461208][ T7287] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.486438][T12503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.497805][T12503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.512862][T12503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.537406][T12503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.557525][T12503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.577401][T12503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.597397][T12503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.628869][T12503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.647325][T12503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.667858][T12503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.687309][T12503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.717900][T12503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.739030][T12503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.844608][ T7287] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.908589][ T5230] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 464.908723][T12576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.917490][ T5230] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 464.933290][T12503] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.943302][ T5230] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 464.954563][T12503] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.957371][ T5230] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 464.971429][T12503] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.976063][ T5230] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 464.980200][T12503] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.007630][ T5230] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 465.056432][T12576] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.101526][ T7318] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.108711][ T7318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.148834][ T7318] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.155994][ T7318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.180271][T12641] lo speed is unknown, defaulting to 1000 [ 465.206406][ T7287] bridge_slave_1: left allmulticast mode [ 465.227381][ T7287] bridge_slave_1: left promiscuous mode [ 465.233130][ T7287] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.256280][ T7287] bridge_slave_0: left allmulticast mode [ 465.262634][ T7287] bridge_slave_0: left promiscuous mode [ 465.269070][ T7287] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.622585][ T7287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.633617][ T7287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.645194][ T7287] bond0 (unregistering): Released all slaves [ 465.713093][ T6286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.763519][ T6286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.988838][ T7296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.037482][ T7296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.178618][ T5230] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 466.190037][ T5230] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 466.208772][ T5230] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 466.220524][ T5230] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 466.230527][ T5230] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 466.238062][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 466.249428][T12655] netlink: 'syz.1.1720': attribute type 10 has an invalid length. [ 466.324911][T12655] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 466.335909][T12655] team0: Failed to send options change via netlink (err -105) [ 466.344359][T12655] team0: Port device netdevsim0 added [ 466.587216][T12652] lo speed is unknown, defaulting to 1000 [ 466.598049][T12662] netlink: 'syz.1.1722': attribute type 29 has an invalid length. [ 466.617157][T12662] netlink: 'syz.1.1722': attribute type 29 has an invalid length. [ 466.651376][T12576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.708464][ T7287] hsr_slave_0: left promiscuous mode [ 466.714824][ T7287] hsr_slave_1: left promiscuous mode [ 466.752009][ T7287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.778938][ T7287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.818441][ T7287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.828367][ T7287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.901423][ T7287] veth1_macvtap: left promiscuous mode [ 466.912650][ T7287] veth0_macvtap: left promiscuous mode [ 466.925287][ T7287] veth1_vlan: left promiscuous mode [ 466.932008][ T7287] veth0_vlan: left promiscuous mode [ 467.038620][ T5240] Bluetooth: hci0: command tx timeout [ 467.434574][ T7287] team0 (unregistering): Port device team_slave_1 removed [ 467.477547][ T7287] team0 (unregistering): Port device team_slave_0 removed [ 467.864952][T12662] netlink: 'syz.1.1722': attribute type 29 has an invalid length. [ 468.018619][T12670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1723'. [ 468.040079][T12670] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1723'. [ 468.164622][T12641] chnl_net:caif_netlink_parms(): no params data found [ 468.317727][ T5240] Bluetooth: hci1: command tx timeout [ 468.399682][ T5230] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 468.425662][ T5230] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 468.434088][ T5230] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 468.479594][ T5230] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 468.485199][T12641] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.502555][ T5230] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 468.510221][ T5230] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 468.512898][T12641] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.527746][T12641] bridge_slave_0: entered allmulticast mode [ 468.535420][T12641] bridge_slave_0: entered promiscuous mode [ 468.548919][T12641] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.556085][T12641] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.563861][T12641] bridge_slave_1: entered allmulticast mode [ 468.572537][T12641] bridge_slave_1: entered promiscuous mode [ 468.623770][T12641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.672830][T12641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.714603][T12683] netlink: 'syz.1.1725': attribute type 6 has an invalid length. [ 468.782282][T12641] team0: Port device team_slave_0 added [ 468.845755][T12680] lo speed is unknown, defaulting to 1000 [ 468.880814][T12641] team0: Port device team_slave_1 added [ 468.916108][T12576] veth0_vlan: entered promiscuous mode [ 468.951724][T12652] chnl_net:caif_netlink_parms(): no params data found [ 469.115393][T12641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.124179][ T5230] Bluetooth: hci0: command tx timeout [ 469.147526][T12641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.191482][T12641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.271585][ T7287] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.361006][T12641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.369040][T12641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.396729][T12641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.447117][ T7287] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.466517][T12576] veth1_vlan: entered promiscuous mode [ 469.538419][ T7287] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.589654][T12706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.646687][T12652] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.668194][T12652] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.675463][T12652] bridge_slave_0: entered allmulticast mode [ 469.684661][T12652] bridge_slave_0: entered promiscuous mode [ 469.709459][T12641] hsr_slave_0: entered promiscuous mode [ 469.715726][T12641] hsr_slave_1: entered promiscuous mode [ 469.738615][ T7287] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.783353][T12652] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.794567][T12652] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.807944][T12652] bridge_slave_1: entered allmulticast mode [ 469.816196][T12652] bridge_slave_1: entered promiscuous mode [ 469.898287][T12652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.912509][T12652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.980709][T12576] veth0_macvtap: entered promiscuous mode [ 470.038977][T12652] team0: Port device team_slave_0 added [ 470.056716][T12652] team0: Port device team_slave_1 added [ 470.136552][T12576] veth1_macvtap: entered promiscuous mode [ 470.159955][T12652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.166922][T12652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.194845][T12652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.277760][ T7287] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.298580][T12652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.305553][T12652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.333080][T12652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.399408][ T5230] Bluetooth: hci1: command tx timeout [ 470.435448][ T7287] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.491157][T12576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.502199][T12576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.512240][T12576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.523070][T12576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.533036][T12576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.543661][T12576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.553593][T12576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.565195][ T5230] Bluetooth: hci2: command tx timeout [ 470.573328][T12576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.585075][T12576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.594925][T12576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.605572][T12576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.615657][T12576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.626322][T12576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.636539][T12576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.647837][T12576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.657713][T12576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.668293][T12576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.680046][T12576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.690691][T12576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.700721][T12576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.711470][T12576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.723171][T12576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.776585][T12652] hsr_slave_0: entered promiscuous mode [ 470.784247][T12652] hsr_slave_1: entered promiscuous mode [ 470.791330][T12652] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 470.799451][T12652] Cannot create hsr debugfs directory [ 470.824389][ T7287] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.852136][T12680] chnl_net:caif_netlink_parms(): no params data found [ 470.973542][ T7287] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.072697][T12576] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.096017][T12576] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.118454][T12576] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.127235][T12576] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.197558][ T5230] Bluetooth: hci0: command tx timeout [ 471.251737][T12728] netlink: 'syz.1.1741': attribute type 29 has an invalid length. [ 471.304484][T12728] netlink: 'syz.1.1741': attribute type 29 has an invalid length. [ 471.344313][T12680] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.353419][T12680] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.366331][T12680] bridge_slave_0: entered allmulticast mode [ 471.374313][T12680] bridge_slave_0: entered promiscuous mode [ 471.383556][T12680] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.391664][T12680] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.400932][T12680] bridge_slave_1: entered allmulticast mode [ 471.408091][T12680] bridge_slave_1: entered promiscuous mode [ 471.423618][T12730] netlink: 'syz.1.1741': attribute type 29 has an invalid length. [ 471.568257][ T7287] bridge_slave_1: left allmulticast mode [ 471.573948][ T7287] bridge_slave_1: left promiscuous mode [ 471.580299][ T7287] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.591083][ T7287] bridge_slave_0: left allmulticast mode [ 471.597063][ T7287] bridge_slave_0: left promiscuous mode [ 471.604454][ T7287] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.615376][ T7287] bridge_slave_1: left allmulticast mode [ 471.621519][ T7287] bridge_slave_1: left promiscuous mode [ 471.627283][ T7287] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.638834][ T7287] bridge_slave_0: left allmulticast mode [ 471.644589][ T7287] bridge_slave_0: left promiscuous mode [ 471.651003][ T7287] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.256797][ T7287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.272077][ T7287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.283749][ T7287] bond0 (unregistering): Released all slaves [ 472.410266][ T7287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.423457][ T7287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.434294][ T7287] bond0 (unregistering): Released all slaves [ 472.481204][T12680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.490726][ T5230] Bluetooth: hci1: command tx timeout [ 472.517181][T12680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.637718][ T5230] Bluetooth: hci2: command tx timeout [ 472.671778][T12735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1743'. [ 473.285216][ T5230] Bluetooth: hci0: command tx timeout [ 473.487149][T12680] team0: Port device team_slave_0 added [ 473.509142][T12641] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 473.541230][T12641] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 473.564033][T12680] team0: Port device team_slave_1 added [ 473.617483][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.625310][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.635696][T12641] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 473.737601][T12680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.744855][T12680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.837821][T12680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.874973][T12680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.909062][T12680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.977464][T12680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.001753][T12641] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 474.129013][ T7287] hsr_slave_0: left promiscuous mode [ 474.135141][ T7287] hsr_slave_1: left promiscuous mode [ 474.144561][ T7287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.152648][ T7287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.166579][ T7287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.174589][ T7287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.196492][ T7287] hsr_slave_0: left promiscuous mode [ 474.204795][ T7287] hsr_slave_1: left promiscuous mode [ 474.213822][ T7287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.221445][ T7287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.233522][ T7287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.242154][ T7287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.290390][ T7287] veth1_macvtap: left promiscuous mode [ 474.295977][ T7287] veth0_macvtap: left promiscuous mode [ 474.301639][ T7287] veth1_vlan: left promiscuous mode [ 474.306925][ T7287] veth0_vlan: left promiscuous mode [ 474.314532][ T7287] veth1_macvtap: left promiscuous mode [ 474.320946][ T7287] veth0_macvtap: left promiscuous mode [ 474.326598][ T7287] veth1_vlan: left promiscuous mode [ 474.332262][ T7287] veth0_vlan: left promiscuous mode [ 474.557633][ T5230] Bluetooth: hci1: command tx timeout [ 474.732363][ T5230] Bluetooth: hci2: command tx timeout [ 474.905057][ T7287] team0 (unregistering): Port device team_slave_1 removed [ 474.945145][ T7287] team0 (unregistering): Port device team_slave_0 removed [ 475.684693][ T7287] team0 (unregistering): Port device team_slave_1 removed [ 475.727365][ T7287] team0 (unregistering): Port device team_slave_0 removed [ 476.149759][ T7318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.163498][ T7318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.172687][T12743] lo speed is unknown, defaulting to 1000 [ 476.235159][T12744] geneve2: entered promiscuous mode [ 476.250211][T12744] geneve2: entered allmulticast mode [ 476.291958][T12680] hsr_slave_0: entered promiscuous mode [ 476.314525][T12680] hsr_slave_1: entered promiscuous mode [ 476.329810][T12680] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 476.347730][T12680] Cannot create hsr debugfs directory [ 476.414443][T12652] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 476.442164][T12652] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 476.546748][T12652] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 476.604488][T12652] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 476.807826][ T5230] Bluetooth: hci2: command tx timeout [ 477.162526][T12641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.184354][T12652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.224067][T12641] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.261243][T12652] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.284258][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.291414][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.324841][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.332033][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.356853][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.364044][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.411843][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.419019][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.595080][ T7287] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.648052][T12680] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 477.667238][T12680] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 477.686654][T12680] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 477.729288][ T7287] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.748371][T12680] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 477.821950][ T7287] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.967055][ T7287] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.036882][T12652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.258154][T12680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.280349][ T7287] bridge_slave_1: left allmulticast mode [ 478.286170][ T7287] bridge_slave_1: left promiscuous mode [ 478.294074][ T7287] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.333608][ T7287] bridge_slave_0: left allmulticast mode [ 478.345008][ T7287] bridge_slave_0: left promiscuous mode [ 478.357621][ T7287] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.466263][ T5230] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 478.476687][ T5230] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 478.485823][ T5230] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 478.496354][ T5230] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 478.505490][ T5230] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 478.513280][ T5230] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 479.064143][ T7287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.076640][ T7287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.094561][ T7287] bond0 (unregistering): Released all slaves [ 479.202497][T12680] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.233375][T12760] lo speed is unknown, defaulting to 1000 [ 479.239476][T12652] veth0_vlan: entered promiscuous mode [ 479.258911][T12641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.410625][ T6290] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.417809][ T6290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.569233][ T7296] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.576399][ T7296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.634243][T12652] veth1_vlan: entered promiscuous mode [ 479.695018][T12680] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 479.709311][T12680] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 479.754749][T12641] veth0_vlan: entered promiscuous mode [ 479.888921][ T7287] hsr_slave_0: left promiscuous mode [ 479.894759][ T7287] hsr_slave_1: left promiscuous mode [ 479.902952][ T7287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.910792][ T7287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.920840][ T7287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.928371][ T7287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.952779][ T7287] veth1_macvtap: left promiscuous mode [ 479.958421][ T7287] veth0_macvtap: left promiscuous mode [ 479.964055][ T7287] veth1_vlan: left promiscuous mode [ 479.969648][ T7287] veth0_vlan: left promiscuous mode [ 480.385847][ T7287] team0 (unregistering): Port device team_slave_1 removed [ 480.441150][ T7287] team0 (unregistering): Port device team_slave_0 removed [ 480.557802][ T5230] Bluetooth: hci3: command tx timeout [ 482.286513][T12641] veth1_vlan: entered promiscuous mode [ 482.362937][T12652] veth0_macvtap: entered promiscuous mode [ 482.401875][T12652] veth1_macvtap: entered promiscuous mode [ 482.536997][T12641] veth0_macvtap: entered promiscuous mode [ 482.590815][T12641] veth1_macvtap: entered promiscuous mode [ 482.632090][T12786] siw: device registration error -23 [ 482.639075][ T5230] Bluetooth: hci3: command tx timeout [ 482.646004][T12652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.667166][T12652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.678467][T12652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.689581][T12652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.701131][T12652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.780423][T12641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.798721][T12641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.809410][T12641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.820016][T12641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.831000][T12641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.841539][T12641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.853334][T12641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.884897][T12652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.895647][T12652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.906305][T12652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.916880][T12652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.926722][T12652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.937487][T12652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.949732][T12652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.960849][T12652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.972097][T12652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.015424][T12680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.029070][T12641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.040345][T12641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.051309][T12641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.063117][T12641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.073186][T12641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.084090][T12641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.094094][T12641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.105050][T12641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.114980][T12641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.127168][T12641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.139290][T12641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.151344][T12760] chnl_net:caif_netlink_parms(): no params data found [ 483.171878][T12652] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.181061][T12652] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.189905][T12652] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.203271][T12652] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.257810][T12641] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.266675][T12641] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.275507][T12641] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.287358][T12641] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.355260][T12760] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.366598][T12760] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.374271][T12760] bridge_slave_0: entered allmulticast mode [ 483.383761][T12760] bridge_slave_0: entered promiscuous mode [ 483.392600][T12760] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.400140][T12760] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.413121][T12760] bridge_slave_1: entered allmulticast mode [ 483.420073][T12760] bridge_slave_1: entered promiscuous mode [ 483.490327][T12760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.516844][T12760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.600857][T12760] team0: Port device team_slave_0 added [ 483.648187][ T7318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.656046][ T7318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.670267][ T7296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.675698][T12680] veth0_vlan: entered promiscuous mode [ 483.699096][ T7296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.701231][T12760] team0: Port device team_slave_1 added [ 483.733538][T12680] veth1_vlan: entered promiscuous mode [ 483.768924][T12797] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1758'. [ 483.780819][T12797] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.788514][T12797] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.851697][T12760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.871337][T12760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.898914][T12760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.938803][T12760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.945766][T12760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.984195][T12760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.993118][T12801] xt_hashlimit: size too large, truncated to 1048576 [ 484.026596][ T7289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.039378][ T7289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.151881][T12760] hsr_slave_0: entered promiscuous mode [ 484.171399][T12760] hsr_slave_1: entered promiscuous mode [ 484.197734][T12760] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 484.212481][T12760] Cannot create hsr debugfs directory [ 484.270034][T12680] veth0_macvtap: entered promiscuous mode [ 484.293058][T12680] veth1_macvtap: entered promiscuous mode [ 484.315792][ T7296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.337299][ T7296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.489056][T12680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.506146][T12680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.524645][T12680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.547429][T12680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.577955][T12680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.609521][T12680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.627467][T12680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.649562][T12680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.673880][T12680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.722057][ T5230] Bluetooth: hci3: command tx timeout [ 484.844259][ T7296] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.999489][T12680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.010938][T12680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.021490][T12680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.033439][T12680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.043429][T12680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.054247][T12680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.064478][T12680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.074992][T12680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.085321][T12680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.096026][T12680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.106210][T12680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.132081][T12680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.157168][T12680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.192622][ T7296] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.311193][ T7296] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.381426][T12680] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.400809][T12680] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.417575][T12680] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.426300][T12680] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.549907][ T7296] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.972472][ T5240] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 485.984089][ T5240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 485.992915][ T5240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 486.009468][ T5240] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 486.016568][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.026730][ T5240] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 486.033932][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.047782][ T5240] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 486.067879][ T7296] bridge_slave_1: left allmulticast mode [ 486.073562][ T7296] bridge_slave_1: left promiscuous mode [ 486.080029][ T7296] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.089974][ T7296] bridge_slave_0: left allmulticast mode [ 486.095643][ T7296] bridge_slave_0: left promiscuous mode [ 486.102212][ T7296] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.543992][ T7296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.556426][ T7296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.569794][ T7296] bond0 (unregistering): Released all slaves [ 486.721841][T12805] lo speed is unknown, defaulting to 1000 [ 486.817417][ T5240] Bluetooth: hci3: command tx timeout [ 486.838969][ T7318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.867394][ T7318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.133978][T12760] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 487.141518][ T5230] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 487.158162][ T5230] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 487.169136][ T5230] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 487.196760][ T5230] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 487.210736][T12760] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 487.220617][ T5230] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 487.229204][ T5230] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 487.311404][T12760] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 487.410324][T12760] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 487.583430][T12808] lo speed is unknown, defaulting to 1000 [ 487.697643][ T7296] hsr_slave_0: left promiscuous mode [ 487.758147][ T7296] hsr_slave_1: left promiscuous mode [ 487.764423][ T7296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.788496][ T7296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.808399][ T7296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.815826][ T7296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.878733][ T7296] veth1_macvtap: left promiscuous mode [ 487.884307][ T7296] veth0_macvtap: left promiscuous mode [ 487.890003][ T7296] veth1_vlan: left promiscuous mode [ 487.895324][ T7296] veth0_vlan: left promiscuous mode [ 488.078060][ T5240] Bluetooth: hci0: command tx timeout [ 488.795721][ T7296] team0 (unregistering): Port device team_slave_1 removed [ 488.834694][ T7296] team0 (unregistering): Port device team_slave_0 removed [ 489.277799][ T5240] Bluetooth: hci1: command tx timeout [ 489.324531][ T5230] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 489.344174][ T5230] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 489.352568][ T5230] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 489.377601][ T5230] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 489.386176][ T5230] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 489.402205][ T5230] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 489.563259][T12819] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1764'. [ 489.573313][T12819] veth1_macvtap: left promiscuous mode [ 489.614619][T12822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1764'. [ 489.626869][T12822] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1764'. [ 489.637480][T12822] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 489.764143][T12820] lo speed is unknown, defaulting to 1000 [ 489.873830][T12805] chnl_net:caif_netlink_parms(): no params data found [ 489.980480][T12829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1766'. [ 490.118205][T12760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.158718][ T5230] Bluetooth: hci0: command tx timeout [ 490.820247][ T7296] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.855760][T12805] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.863540][T12805] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.871296][T12805] bridge_slave_0: entered allmulticast mode [ 490.881614][T12805] bridge_slave_0: entered promiscuous mode [ 490.899120][T12805] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.906331][T12805] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.914562][T12805] bridge_slave_1: entered allmulticast mode [ 490.922318][T12805] bridge_slave_1: entered promiscuous mode [ 490.976378][ T7296] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.080860][T12808] chnl_net:caif_netlink_parms(): no params data found [ 491.109375][ T7296] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.146583][T12760] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.160107][T12805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.175883][T12805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.266693][ T7296] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.284522][ T7318] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.291652][ T7318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.368445][ T5230] Bluetooth: hci1: command tx timeout [ 491.375935][T12805] team0: Port device team_slave_0 added [ 491.386737][T12820] chnl_net:caif_netlink_parms(): no params data found [ 491.412399][ T7318] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.419585][ T7318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.444966][T12856] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000f8: 0000 [#1] PREEMPT SMP KASAN PTI [ 491.457596][T12856] KASAN: null-ptr-deref in range [0x00000000000007c0-0x00000000000007c7] [ 491.466033][T12856] CPU: 1 UID: 0 PID: 12856 Comm: syz.1.1775 Not tainted 6.11.0-rc4-syzkaller-00566-g7d3aed652d09 #0 [ 491.476799][T12856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 491.486853][T12856] RIP: 0010:phy_start_cable_test_tdr+0x3a/0x5c0 [ 491.493096][T12856] Code: ec 38 48 89 54 24 18 49 89 f6 48 89 fb 49 bd 00 00 00 00 00 fc ff df e8 74 26 2b fb 48 8d bb c0 07 00 00 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 2a 68 92 fb 48 8b 83 c0 07 00 00 48 89 44 [ 491.512784][T12856] RSP: 0018:ffffc90002f0f230 EFLAGS: 00010202 [ 491.518852][T12856] RAX: 00000000000000f8 RBX: 0000000000000000 RCX: 0000000000040000 [ 491.526811][T12856] RDX: ffffc9000a0fa000 RSI: 0000000000000ae7 RDI: 00000000000007c0 [ 491.534776][T12856] RBP: ffffc90002f0f470 R08: ffffffff89cb108d R09: 1ffff1100ab7c415 [ 491.542739][T12856] R10: dffffc0000000000 R11: ffffffff866864a0 R12: ffffc90002f0f3f0 [ 491.550705][T12856] R13: dffffc0000000000 R14: ffffc90002f0f740 R15: 0000000000000000 [ 491.558678][T12856] FS: 00007f11b360a6c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 491.567610][T12856] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 491.574186][T12856] CR2: 00007f3c32c47d60 CR3: 000000002e19c000 CR4: 00000000003506f0 [ 491.582156][T12856] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 491.590118][T12856] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 491.598082][T12856] Call Trace: [ 491.601348][T12856] [ 491.604265][T12856] ? __die_body+0x88/0xe0 [ 491.608590][T12856] ? die_addr+0x108/0x140 [ 491.612916][T12856] ? exc_general_protection+0x3dd/0x5d0 [ 491.618460][T12856] ? netdev_get_by_index+0x7a/0xb0 [ 491.623561][T12856] ? asm_exc_general_protection+0x26/0x30 [ 491.629270][T12856] ? __pfx_phy_start_cable_test_tdr+0x10/0x10 [ 491.635326][T12856] ? ethnl_act_cable_test_tdr+0x5ad/0x10d0 [ 491.641121][T12856] ? phy_start_cable_test_tdr+0x3a/0x5c0 [ 491.646742][T12856] ? ethnl_ops_begin+0x1ae/0x1f0 [ 491.651663][T12856] ? __pfx_phy_start_cable_test_tdr+0x10/0x10 [ 491.657718][T12856] ethnl_act_cable_test_tdr+0x607/0x10d0 [ 491.663341][T12856] ? __pfx_ethnl_act_cable_test_tdr+0x10/0x10 [ 491.669394][T12856] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 491.675641][T12856] ? __nla_parse+0x40/0x60 [ 491.680059][T12856] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 491.686383][T12856] genl_rcv_msg+0xb14/0xec0 [ 491.690880][T12856] ? mark_lock+0x9a/0x350 [ 491.695214][T12856] ? __pfx_genl_rcv_msg+0x10/0x10 [ 491.700242][T12856] ? __pfx_lock_acquire+0x10/0x10 [ 491.705269][T12856] ? __pfx_ethnl_act_cable_test_tdr+0x10/0x10 [ 491.711331][T12856] ? __pfx___might_resched+0x10/0x10 [ 491.716611][T12856] netlink_rcv_skb+0x1e3/0x430 [ 491.721454][T12856] ? __pfx_genl_rcv_msg+0x10/0x10 [ 491.726469][T12856] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 491.731744][T12856] ? __netlink_deliver_tap+0x77e/0x7c0 [ 491.737195][T12856] genl_rcv+0x28/0x40 [ 491.741167][T12856] netlink_unicast+0x7f6/0x990 [ 491.745924][T12856] ? __pfx_netlink_unicast+0x10/0x10 [ 491.751200][T12856] ? __virt_addr_valid+0x183/0x530 [ 491.756299][T12856] ? __check_object_size+0x49c/0x900 [ 491.761571][T12856] ? bpf_lsm_netlink_send+0x9/0x10 [ 491.766672][T12856] netlink_sendmsg+0x8e4/0xcb0 [ 491.771516][T12856] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.776787][T12856] ? __import_iovec+0x536/0x820 [ 491.781801][T12856] ? aa_sock_msg_perm+0x91/0x160 [ 491.786727][T12856] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 491.792017][T12856] ? security_socket_sendmsg+0x87/0xb0 [ 491.797469][T12856] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.802756][T12856] __sock_sendmsg+0x221/0x270 [ 491.807443][T12856] ____sys_sendmsg+0x525/0x7d0 [ 491.812214][T12856] ? __pfx_____sys_sendmsg+0x10/0x10 [ 491.817500][T12856] __sys_sendmsg+0x2b0/0x3a0 [ 491.822136][T12856] ? __pfx___sys_sendmsg+0x10/0x10 [ 491.827276][T12856] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 491.833204][T12856] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 491.839538][T12856] ? do_syscall_64+0x100/0x230 [ 491.844298][T12856] ? do_syscall_64+0xb6/0x230 [ 491.848961][T12856] do_syscall_64+0xf3/0x230 [ 491.853455][T12856] ? clear_bhb_loop+0x35/0x90 [ 491.858126][T12856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.864008][T12856] RIP: 0033:0x7f11b2779e79 [ 491.868412][T12856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.888005][T12856] RSP: 002b:00007f11b360a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 491.896406][T12856] RAX: ffffffffffffffda RBX: 00007f11b2915f80 RCX: 00007f11b2779e79 [ 491.904362][T12856] RDX: 0000000000000000 RSI: 0000000020001ac0 RDI: 0000000000000005 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 491.912318][T12856] RBP: 00007f11b27e793e R08: 0000000000000000 R09: 0000000000000000 [ 491.920274][T12856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 491.928229][T12856] R13: 0000000000000000 R14: 00007f11b2915f80 R15: 00007ffd7468c5a8 [ 491.936196][T12856] [ 491.939220][T12856] Modules linked in: [ 491.945296][T12856] ---[ end trace 0000000000000000 ]--- [ 491.961064][ T5230] Bluetooth: hci2: command tx timeout [ 491.967482][T12856] RIP: 0010:phy_start_cable_test_tdr+0x3a/0x5c0 [ 491.975572][T12856] Code: ec 38 48 89 54 24 18 49 89 f6 48 89 fb 49 bd 00 00 00 00 00 fc ff df e8 74 26 2b fb 48 8d bb c0 07 00 00 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 2a 68 92 fb 48 8b 83 c0 07 00 00 48 89 44 [ 491.995435][T12856] RSP: 0018:ffffc90002f0f230 EFLAGS: 00010202 [ 492.002000][T12856] RAX: 00000000000000f8 RBX: 0000000000000000 RCX: 0000000000040000 [ 492.010115][T12856] RDX: ffffc9000a0fa000 RSI: 0000000000000ae7 RDI: 00000000000007c0 [ 492.018181][T12856] RBP: ffffc90002f0f470 R08: ffffffff89cb108d R09: 1ffff1100ab7c415 [ 492.026658][T12856] R10: dffffc0000000000 R11: ffffffff866864a0 R12: ffffc90002f0f3f0 [ 492.035086][T12856] R13: dffffc0000000000 R14: ffffc90002f0f740 R15: 0000000000000000 [ 492.043150][T12856] FS: 00007f11b360a6c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 492.052159][T12856] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 492.059240][T12856] CR2: 00007f157ce47d60 CR3: 000000002e19c000 CR4: 00000000003506f0 [ 492.067217][T12856] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 492.075757][T12856] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 492.084708][T12856] Kernel panic - not syncing: Fatal exception [ 492.091002][T12856] Kernel Offset: disabled [ 492.095318][T12856] Rebooting in 86400 seconds..