last executing test programs: 1m11.438191897s ago: executing program 1 (id=1234): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r0, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) syz_genetlink_get_family_id$tipc2(0xfffffffffffffffe, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe8}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)={0x70, r7, 0x101, 0x1, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x4000, 0x3, 0x2, 0x0, {0xb, 0x5, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1}, 0x800, 0x9, 0x8}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x0, 0x5, 0x0, {0x5, 0x6, 0x0, 0x80, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x6, 0xed5, 0x4}}]}, 0x70}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r0, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) (async) syz_genetlink_get_family_id$tipc2(0xfffffffffffffffe, 0xffffffffffffffff) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe8}}, 0x40) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)={0x70, r7, 0x101, 0x1, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x4000, 0x3, 0x2, 0x0, {0xb, 0x5, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1}, 0x800, 0x9, 0x8}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x0, 0x5, 0x0, {0x5, 0x6, 0x0, 0x80, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x6, 0xed5, 0x4}}]}, 0x70}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0) (async) 1m11.438149006s ago: executing program 2 (id=674): syz_80211_inject_frame(0x0, 0x0, 0x262) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[{0x18, 0x1, 0x1, 'S\a'}], 0x18}}], 0x1, 0x4010) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) (async, rerun: 32) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10) (rerun: 32) 1m11.438081957s ago: executing program 3 (id=247): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000da00000000611069000000000095000000000000004cdb91ea71"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa4, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x2d}}}}, [@NL80211_ATTR_KEY_SEQ={0x14, 0xa, "aa2db15ff39e96166f879cacfd593782"}, @NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a0d90aaaeb"}, @NL80211_KEY_SEQ={0xe, 0x4, "4f208f79146a699065c1"}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "76f2d30b417e826847c3ae0c91"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "14709e14340579a26305837dfd"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4008090}, 0x0) 1m11.437857017s ago: executing program 1 (id=1234): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r0, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) syz_genetlink_get_family_id$tipc2(0xfffffffffffffffe, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe8}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)={0x70, r7, 0x101, 0x1, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x4000, 0x3, 0x2, 0x0, {0xb, 0x5, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1}, 0x800, 0x9, 0x8}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x0, 0x5, 0x0, {0x5, 0x6, 0x0, 0x80, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x6, 0xed5, 0x4}}]}, 0x70}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r0, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) (async) syz_genetlink_get_family_id$tipc2(0xfffffffffffffffe, 0xffffffffffffffff) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe8}}, 0x40) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)={0x70, r7, 0x101, 0x1, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x4000, 0x3, 0x2, 0x0, {0xb, 0x5, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1}, 0x800, 0x9, 0x8}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x0, 0x5, 0x0, {0x5, 0x6, 0x0, 0x80, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x6, 0xed5, 0x4}}]}, 0x70}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0) (async) 1m11.43782106s ago: executing program 2 (id=674): syz_80211_inject_frame(0x0, 0x0, 0x262) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[{0x18, 0x1, 0x1, 'S\a'}], 0x18}}], 0x1, 0x4010) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) (async, rerun: 32) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10) (rerun: 32) 1m11.437778721s ago: executing program 3 (id=247): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000da00000000611069000000000095000000000000004cdb91ea71"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa4, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x2d}}}}, [@NL80211_ATTR_KEY_SEQ={0x14, 0xa, "aa2db15ff39e96166f879cacfd593782"}, @NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a0d90aaaeb"}, @NL80211_KEY_SEQ={0xe, 0x4, "4f208f79146a699065c1"}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "76f2d30b417e826847c3ae0c91"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "14709e14340579a26305837dfd"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4008090}, 0x0) 1m2.914311739s ago: executing program 1 (id=1234): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r0, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) syz_genetlink_get_family_id$tipc2(0xfffffffffffffffe, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe8}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)={0x70, r7, 0x101, 0x1, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x4000, 0x3, 0x2, 0x0, {0xb, 0x5, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1}, 0x800, 0x9, 0x8}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x0, 0x5, 0x0, {0x5, 0x6, 0x0, 0x80, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x6, 0xed5, 0x4}}]}, 0x70}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r0, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) (async) syz_genetlink_get_family_id$tipc2(0xfffffffffffffffe, 0xffffffffffffffff) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe8}}, 0x40) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)={0x70, r7, 0x101, 0x1, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x4000, 0x3, 0x2, 0x0, {0xb, 0x5, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1}, 0x800, 0x9, 0x8}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x0, 0x5, 0x0, {0x5, 0x6, 0x0, 0x80, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x6, 0xed5, 0x4}}]}, 0x70}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0) (async) 1m1.378376442s ago: executing program 2 (id=674): syz_80211_inject_frame(0x0, 0x0, 0x262) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[{0x18, 0x1, 0x1, 'S\a'}], 0x18}}], 0x1, 0x4010) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) (async, rerun: 32) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10) (rerun: 32) 59.821737056s ago: executing program 3 (id=247): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000da00000000611069000000000095000000000000004cdb91ea71"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa4, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x2d}}}}, [@NL80211_ATTR_KEY_SEQ={0x14, 0xa, "aa2db15ff39e96166f879cacfd593782"}, @NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a0d90aaaeb"}, @NL80211_KEY_SEQ={0xe, 0x4, "4f208f79146a699065c1"}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "76f2d30b417e826847c3ae0c91"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "14709e14340579a26305837dfd"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4008090}, 0x0) 46.847097744s ago: executing program 1 (id=1234): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r0, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) syz_genetlink_get_family_id$tipc2(0xfffffffffffffffe, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe8}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)={0x70, r7, 0x101, 0x1, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x4000, 0x3, 0x2, 0x0, {0xb, 0x5, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1}, 0x800, 0x9, 0x8}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x0, 0x5, 0x0, {0x5, 0x6, 0x0, 0x80, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x6, 0xed5, 0x4}}]}, 0x70}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r0, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) (async) syz_genetlink_get_family_id$tipc2(0xfffffffffffffffe, 0xffffffffffffffff) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe8}}, 0x40) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)={0x70, r7, 0x101, 0x1, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x4000, 0x3, 0x2, 0x0, {0xb, 0x5, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1}, 0x800, 0x9, 0x8}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x0, 0x5, 0x0, {0x5, 0x6, 0x0, 0x80, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x6, 0xed5, 0x4}}]}, 0x70}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0) (async) 45.549110951s ago: executing program 2 (id=674): syz_80211_inject_frame(0x0, 0x0, 0x262) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[{0x18, 0x1, 0x1, 'S\a'}], 0x18}}], 0x1, 0x4010) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) (async, rerun: 32) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10) (rerun: 32) 44.273467482s ago: executing program 3 (id=247): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000da00000000611069000000000095000000000000004cdb91ea71"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa4, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x2d}}}}, [@NL80211_ATTR_KEY_SEQ={0x14, 0xa, "aa2db15ff39e96166f879cacfd593782"}, @NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a0d90aaaeb"}, @NL80211_KEY_SEQ={0xe, 0x4, "4f208f79146a699065c1"}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "76f2d30b417e826847c3ae0c91"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "14709e14340579a26305837dfd"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4008090}, 0x0) 32.733428646s ago: executing program 1 (id=1234): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r0, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) syz_genetlink_get_family_id$tipc2(0xfffffffffffffffe, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe8}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)={0x70, r7, 0x101, 0x1, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x4000, 0x3, 0x2, 0x0, {0xb, 0x5, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1}, 0x800, 0x9, 0x8}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x0, 0x5, 0x0, {0x5, 0x6, 0x0, 0x80, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x6, 0xed5, 0x4}}]}, 0x70}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r0, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) (async) syz_genetlink_get_family_id$tipc2(0xfffffffffffffffe, 0xffffffffffffffff) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe8}}, 0x40) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)={0x70, r7, 0x101, 0x1, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x4000, 0x3, 0x2, 0x0, {0xb, 0x5, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1}, 0x800, 0x9, 0x8}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x0, 0x5, 0x0, {0x5, 0x6, 0x0, 0x80, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x6, 0xed5, 0x4}}]}, 0x70}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0) (async) 31.440978152s ago: executing program 2 (id=674): syz_80211_inject_frame(0x0, 0x0, 0x262) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[{0x18, 0x1, 0x1, 'S\a'}], 0x18}}], 0x1, 0x4010) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) (async, rerun: 32) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10) (rerun: 32) 27.695061807s ago: executing program 3 (id=247): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000da00000000611069000000000095000000000000004cdb91ea71"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa4, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x2d}}}}, [@NL80211_ATTR_KEY_SEQ={0x14, 0xa, "aa2db15ff39e96166f879cacfd593782"}, @NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a0d90aaaeb"}, @NL80211_KEY_SEQ={0xe, 0x4, "4f208f79146a699065c1"}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "76f2d30b417e826847c3ae0c91"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "14709e14340579a26305837dfd"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4008090}, 0x0) 21.392575398s ago: executing program 0 (id=1637): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r0 = socket$rds(0x15, 0x5, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$kcm(0x10, 0x3, 0x10) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) (async) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000612073582c137153e37080c18800bac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r1}, 0x10) (async) socket$inet6_dccp(0xa, 0x6, 0x0) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) (async) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r4, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00)={r6}, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r6}, @ldst={0x1, 0x2, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x90) bind$tipc(r4, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r7 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) (async) sendmsg$tipc(r4, &(0x7f0000001b40)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10, 0x0}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)=""/166, 0xa6}, {&(0x7f0000000b00)=""/176, 0xb0}, {&(0x7f00000043c0)=""/4082, 0xff2}, {&(0x7f0000000280)=""/106, 0x6a}], 0x4}}], 0x1, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r8, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)={0xc4, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x24001000) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_getaddrlabel={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x0) (async) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000003540), 0x4) 21.281212218s ago: executing program 0 (id=1638): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000386dd0a00100000004000000060ec970200140400fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000240)={0x1d, r4}, 0x10) mmap(&(0x7f00008a3000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004100)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001e000101000000000000001c01"], 0x14}], 0x1}, 0x0) mmap(&(0x7f00004e7000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3003, 0xffff96aabfff, 0x832, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair(0x10, 0x1, 0x8, &(0x7f0000000140)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x0, 0x0, 0xfffffffffffffe1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 19.680543196s ago: executing program 0 (id=1646): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) recvmmsg(r3, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001000ff05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={r4}, &(0x7f0000000140)=0x8) socket$inet6_sctp(0xa, 0x5, 0x84) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) (async) recvmmsg(r3, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10) (async) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001000ff05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r7}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={r4}, &(0x7f0000000140)=0x8) (async) 19.550696827s ago: executing program 0 (id=1647): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)={0x20000000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) unshare(0x4000600) socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x3) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x4}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x18, r8, 0x1, 0x0, 0xffffffff, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x58, r8, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x94}, 0x4000) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000440000002000128008000100767469001400028008000500e000000208000100", @ANYRESOCT], 0x40}, 0x1, 0xba01}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f00000014c0)={r9, @in={{0x2, 0x0, @remote}}, [0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, &(0x7f00000015c0)=0x100) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={r9, 0x1, 0x10}, 0xc) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000009d00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000009e00)={0x0, 0x0, &(0x7f0000009dc0)={&(0x7f0000009d40)={0x1c, r10, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000000c0)=ANY=[@ANYBLOB="870a000000000000c204000000090740000000030ec786000300000000000000fcffffffffffffffffffffffffffffff0600000000000000e0fd0000000000002d030000000000000b000000000000000001000001000502022b000000000000"], 0x60) 18.617016719s ago: executing program 0 (id=1651): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a8001600200003400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYRES16=r0], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="1d00030007"], 0xd) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x2, 0x220108, 0x4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r4, &(0x7f0000000100), 0x0}, 0x20) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/718], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@map=r5, r6, 0x28, 0x2000, 0x0, @value=r5}, 0x20) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r7, 0x107, 0x16, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) 15.581465192s ago: executing program 1 (id=1234): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r0, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) syz_genetlink_get_family_id$tipc2(0xfffffffffffffffe, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe8}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)={0x70, r7, 0x101, 0x1, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x4000, 0x3, 0x2, 0x0, {0xb, 0x5, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1}, 0x800, 0x9, 0x8}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x0, 0x5, 0x0, {0x5, 0x6, 0x0, 0x80, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x6, 0xed5, 0x4}}]}, 0x70}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r0, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) (async) syz_genetlink_get_family_id$tipc2(0xfffffffffffffffe, 0xffffffffffffffff) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe8}}, 0x40) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)={0x70, r7, 0x101, 0x1, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x4000, 0x3, 0x2, 0x0, {0xb, 0x5, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1}, 0x800, 0x9, 0x8}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x0, 0x5, 0x0, {0x5, 0x6, 0x0, 0x80, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x6, 0xed5, 0x4}}]}, 0x70}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0) (async) 13.160165083s ago: executing program 2 (id=674): syz_80211_inject_frame(0x0, 0x0, 0x262) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[{0x18, 0x1, 0x1, 'S\a'}], 0x18}}], 0x1, 0x4010) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) (async, rerun: 32) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10) (rerun: 32) 8.218671455s ago: executing program 3 (id=247): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000da00000000611069000000000095000000000000004cdb91ea71"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa4, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x2d}}}}, [@NL80211_ATTR_KEY_SEQ={0x14, 0xa, "aa2db15ff39e96166f879cacfd593782"}, @NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a0d90aaaeb"}, @NL80211_KEY_SEQ={0xe, 0x4, "4f208f79146a699065c1"}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "76f2d30b417e826847c3ae0c91"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "14709e14340579a26305837dfd"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4008090}, 0x0) 2.744288815s ago: executing program 4 (id=1689): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000001780)={{0x0, 0x6}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r4, @ANYBLOB="200001"], 0x38}}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="5ef79b3fa0bf41d33620904120615b6230bd91258337bb9a8842a8251e7f95c1c324709fc1fa44ea701ec5dddd6153ac1e09a48ee7fa536922467d7dfcce92301a79e290d289a018835e88b799264296"], 0x34}}, 0x4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x18) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000000)={{0x6, @null}, [@default, @bcast, @default, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) connect$netrom(r6, &(0x7f0000000080)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x10) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) 1.837931142s ago: executing program 4 (id=1690): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x2, 0x10, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtaction={0x44, 0x31, 0x103, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) 982.475139ms ago: executing program 4 (id=1691): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@generic="25b57e35619bf2be9082cfcd8fba0cd0f2934efacde0a223b473fe77f3e5ba760d3793b2b3589c9fb23ff943b7528ea34883bc4a506cf756740574b89d396af9b59638700500000005"]}, @nested={0x11e, 0x6, 0x0, 0x1, [@typed={0xdd, 0x14d, 0x0, 0x0, @binary="0f46f1849e80333a72c47c602d9970739272ca25d0ed59ba2d54f2dbf1ce1d4305d0ef433df7b8370107edbc85bfb216efdc1b0b64d6a716ab6d8204ff7498a0d528471596a2bffd9f39f5d68ca46f729302ab4cb1bca132d999b0a04b1ddb2404cb28de890a87617e79217b4cafbcb340e885260db96e23db715cecc61ce445ad06cf189c29e6fb925cc6f1c5db4e1f43cd4f582f94a84bf0152dfada7b9826bbbfd394d745fd122010a19f7c2e459f59c5e8cccc8d9d0124b01020e16d5fa1f4882dc1043dec61df7983901630639c97157316c9285b79ba"}, @generic="37c14f9a8ead341bf43ea3970236c74b2e318966b7420623d7f5c9fde55324d4c519e80f9f4d6b22b3f1b672c61240c38914eb560eb9ca62fa58"]}]}, 0x184}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0xfffffffffffffeb6, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) setsockopt$sock_int(r2, 0x1, 0x2b, &(0x7f0000000280)=0x40, 0x4) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r1, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xa4, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xd3, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) recvmsg$can_raw(r0, &(0x7f0000000980)={&(0x7f0000000680)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000700)=""/44, 0x2c}, {&(0x7f0000000740)=""/88, 0x58}, {&(0x7f00000007c0)=""/149, 0x95}, {&(0x7f0000000880)=""/182, 0xb6}], 0x4, &(0x7f0000001280)=""/4096, 0x1000}, 0x2163) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000040)=0x8, 0x4) mmap(&(0x7f000000b000/0x4000)=nil, 0x4000, 0x1000005, 0x8012, r5, 0x0) 862.596904ms ago: executing program 4 (id=1692): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/104, 0x68}], 0x1}}], 0x1, 0x0, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)={0x2, 0x8000, 0xfffffff3, 0x40, 0xf}) 504.193932ms ago: executing program 4 (id=1693): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000002000170829bd7000ffdbdf250a00000d"], 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000000800000", @ANYRES64=r0, @ANYBLOB='\tR'], 0x1c}}, 0x0) 484.525665ms ago: executing program 0 (id=1651): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a8001600200003400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYRES16=r0], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="1d00030007"], 0xd) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x2, 0x220108, 0x4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r4, &(0x7f0000000100), 0x0}, 0x20) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/718], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@map=r5, r6, 0x28, 0x2000, 0x0, @value=r5}, 0x20) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r7, 0x107, 0x16, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) 0s ago: executing program 4 (id=1694): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x3100}, [@RTA_OIF={0x8}, @RTA_IP_PROTO={0x5, 0x1b, 0x6}]}, 0x2c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x3, 0x4) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x3}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0xa888, 0x0, 0x5000000}}, @TCA_HTB_DIRECT_QLEN={0x8}]}}]}, 0x50}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x50, 0x140e, 0x3000854dd20ccc16, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfd, {0x0, 0x0, 0x0, r5, {0xd}, {0xffff, 0xffff}, {0x0, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40880}, 0x24044080) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="380011001500000226bd7000ffdbb30384bed1b1ac7126adce08992a7bc1b0ef40155154b983d112dba9681129d1", @ANYRES32=r5, @ANYBLOB="080009000b00000008000200ac1414aa"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3) ioctl$SIOCAX25CTLCON(r6, 0x89e8, &(0x7f0000000000)={@default, @bcast, @null, 0xa, 0x1ff, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_newrule={0x44, 0x20, 0x100, 0x70bd26, 0x25dfdbff, {0xa, 0x20, 0x10, 0x8, 0x9, 0x0, 0x0, 0x4, 0x1000b}, [@FRA_SRC={0x14, 0x2, @loopback}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'pim6reg1\x00'}]}, 0x44}}, 0x30008081) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x3100}, [@RTA_OIF={0x8}, @RTA_IP_PROTO={0x5, 0x1b, 0x6}]}, 0x2c}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet(0x2, 0x3, 0x4) (async) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x3}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0xa888, 0x0, 0x5000000}}, @TCA_HTB_DIRECT_QLEN={0x8}]}}]}, 0x50}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x50, 0x140e, 0x3000854dd20ccc16, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00'}) (async) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfd, {0x0, 0x0, 0x0, r5, {0xd}, {0xffff, 0xffff}, {0x0, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40880}, 0x24044080) (async) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="380011001500000226bd7000ffdbb30384bed1b1ac7126adce08992a7bc1b0ef40155154b983d112dba9681129d1", @ANYRES32=r5, @ANYBLOB="080009000b00000008000200ac1414aa"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x5, 0xc3) (async) ioctl$SIOCAX25CTLCON(r6, 0x89e8, &(0x7f0000000000)={@default, @bcast, @null, 0xa, 0x1ff, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_newrule={0x44, 0x20, 0x100, 0x70bd26, 0x25dfdbff, {0xa, 0x20, 0x10, 0x8, 0x9, 0x0, 0x0, 0x4, 0x1000b}, [@FRA_SRC={0x14, 0x2, @loopback}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'pim6reg1\x00'}]}, 0x44}}, 0x30008081) (async) kernel console output (not intermixed with test programs): 0: port 1(bridge_slave_0) entered forwarding state [ 320.971675][T11347] veth1_macvtap: entered promiscuous mode [ 321.004441][ T6063] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.011664][ T6063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.082350][T11347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.112705][T11347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.124408][T11347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.151939][T11347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.162570][T11509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1501'. [ 321.171342][T11347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.183850][T11347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.189758][T11509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1501'. [ 321.194663][T11347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.226697][T11347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.240639][T11347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.303568][T11347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.323983][T11347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.338428][T11347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.349428][T11347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.359805][T11347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.376951][T11347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.386946][T11347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.398989][T11347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.422281][T11347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.463180][T11347] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.473252][T11347] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.489604][T11347] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.501068][T11347] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.552912][T11521] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 321.669323][ T6063] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.848168][ T6056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.875636][ T6056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.937594][ T6050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.945948][ T6050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.964193][T11351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.004284][ T6063] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.100659][T11351] veth0_vlan: entered promiscuous mode [ 322.111284][T11351] veth1_vlan: entered promiscuous mode [ 322.146917][T11351] veth0_macvtap: entered promiscuous mode [ 322.157326][T11351] veth1_macvtap: entered promiscuous mode [ 322.174450][T11351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.185692][T11351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.195755][T11351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.207579][T11351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.218696][T11351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.230022][T11351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.240553][T11351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.251688][T11351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.261668][T11351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.272396][T11351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.286887][T11351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.302528][T11351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.313670][T11351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.327131][T11351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.338134][T11351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.349302][T11351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.360634][T11351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.375179][T11351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.386351][T11351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.397252][T11351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.407732][T11351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.418939][T11351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.450368][ T6063] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.474677][T11351] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.483997][T11351] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.493271][T11351] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.502179][T11351] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.597698][ T6063] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.750216][ T6071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.769414][ T6071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.882129][ T6541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.894921][ T6541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.984473][ T6063] bridge_slave_1: left allmulticast mode [ 322.992688][ T6063] bridge_slave_1: left promiscuous mode [ 323.008848][ T6063] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.046341][ T6063] bridge_slave_0: left allmulticast mode [ 323.073103][ T6063] bridge_slave_0: left promiscuous mode [ 323.086516][ T6063] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.274383][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 323.285018][ T5229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 323.294296][ T5229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 323.312440][ T5229] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 323.320988][ T5229] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 323.329214][ T5229] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 323.847624][ T6063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.859876][ T6063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.871727][ T6063] bond0 (unregistering): Released all slaves [ 323.959170][T11544] lo speed is unknown, defaulting to 1000 [ 324.139184][ T6063] hsr_slave_0: left promiscuous mode [ 324.153389][ T6063] hsr_slave_1: left promiscuous mode [ 324.160748][ T6063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.170715][ T6063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.178827][ T6063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.186474][ T6063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.208219][ T6063] veth1_macvtap: left promiscuous mode [ 324.213776][ T6063] veth0_macvtap: left promiscuous mode [ 324.219985][ T6063] veth1_vlan: left promiscuous mode [ 324.225457][ T6063] veth0_vlan: left promiscuous mode [ 324.870365][ T6063] team0 (unregistering): Port device team_slave_1 removed [ 324.927906][ T6063] team0 (unregistering): Port device team_slave_0 removed [ 324.944028][ T5229] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 324.955327][ T5229] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 324.966149][ T5229] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 324.986744][ T5229] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 324.995633][ T5229] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 325.002961][ T5229] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 325.401740][T11557] __nla_validate_parse: 2 callbacks suppressed [ 325.401760][T11557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1510'. [ 325.415925][ T54] Bluetooth: hci0: command tx timeout [ 325.433284][T11544] chnl_net:caif_netlink_parms(): no params data found [ 325.510066][T11555] lo speed is unknown, defaulting to 1000 [ 325.600420][T11544] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.613861][T11544] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.624140][T11544] bridge_slave_0: entered allmulticast mode [ 325.631433][T11544] bridge_slave_0: entered promiscuous mode [ 325.654425][T11544] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.661911][T11544] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.669437][T11544] bridge_slave_1: entered allmulticast mode [ 325.676372][T11544] bridge_slave_1: entered promiscuous mode [ 325.717516][T11544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.751961][T11544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.830315][T11544] team0: Port device team_slave_0 added [ 325.840159][T11544] team0: Port device team_slave_1 added [ 325.850195][T11555] chnl_net:caif_netlink_parms(): no params data found [ 325.881388][T11544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.889073][T11544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.916585][T11544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.954653][T11544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.961793][T11544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.989435][T11544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.047078][ T6063] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.111121][T11544] hsr_slave_0: entered promiscuous mode [ 326.120936][T11544] hsr_slave_1: entered promiscuous mode [ 326.127423][T11544] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.137509][T11544] Cannot create hsr debugfs directory [ 326.154044][T11555] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.161319][T11555] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.168583][T11555] bridge_slave_0: entered allmulticast mode [ 326.175832][T11555] bridge_slave_0: entered promiscuous mode [ 326.196966][ T6063] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.214266][T11555] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.221591][T11555] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.229014][T11555] bridge_slave_1: entered allmulticast mode [ 326.236354][T11555] bridge_slave_1: entered promiscuous mode [ 326.347372][ T6063] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.452732][T11555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.557336][ T6063] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.604689][ T5229] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 326.621607][ T5229] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 326.630158][ T5229] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 326.643574][ T5229] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 326.647566][T11555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.657696][ T5229] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 326.674051][ T5229] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 327.092747][ T54] Bluetooth: hci2: command tx timeout [ 327.485436][ T54] Bluetooth: hci0: command tx timeout [ 327.704502][T11580] netlink: 9412 bytes leftover after parsing attributes in process `syz.4.1512'. [ 327.755795][T11555] team0: Port device team_slave_0 added [ 327.778873][T11555] team0: Port device team_slave_1 added [ 327.843551][T11577] lo speed is unknown, defaulting to 1000 [ 327.868454][T11586] lo speed is unknown, defaulting to 1000 [ 328.018686][T11555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.026314][T11555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.055323][T11555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.171807][T11555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.179038][T11555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.210376][T11555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.280196][ T6063] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.429217][T11600] xt_hashlimit: size too large, truncated to 1048576 [ 328.468189][ T6063] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.601042][T11555] hsr_slave_0: entered promiscuous mode [ 328.633802][T11555] hsr_slave_1: entered promiscuous mode [ 328.649558][T11609] netlink: 'syz.4.1518': attribute type 5 has an invalid length. [ 328.676090][T11555] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.683692][T11555] Cannot create hsr debugfs directory [ 328.753398][ T6063] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.771192][ T54] Bluetooth: hci4: command tx timeout [ 328.916412][ T6063] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.174459][ T54] Bluetooth: hci2: command tx timeout [ 329.196350][T11577] chnl_net:caif_netlink_parms(): no params data found [ 329.286388][T11633] xt_CT: You must specify a L4 protocol and not use inversions on it [ 329.346071][T11544] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 329.378647][T11636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1527'. [ 329.386397][T11544] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 329.407922][T11544] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 329.460965][T11544] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 329.492250][ T6063] bridge_slave_1: left allmulticast mode [ 329.507122][ T6063] bridge_slave_1: left promiscuous mode [ 329.521054][ T6063] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.537621][ T6063] bridge_slave_0: left allmulticast mode [ 329.543374][ T6063] bridge_slave_0: left promiscuous mode [ 329.553452][ T6063] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.574172][ T54] Bluetooth: hci0: command tx timeout [ 329.581784][T11645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.600850][ T6063] bridge_slave_1: left allmulticast mode [ 329.607647][ T6063] bridge_slave_1: left promiscuous mode [ 329.613376][ T6063] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.624673][ T6063] bridge_slave_0: left allmulticast mode [ 329.630889][ T6063] bridge_slave_0: left promiscuous mode [ 329.636988][ T6063] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.261477][ T6063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.279574][ T6063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.292885][ T6063] bond0 (unregistering): Released all slaves [ 330.412405][ T6063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.423643][ T6063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.437077][ T6063] bond0 (unregistering): Released all slaves [ 330.489402][T11645] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1529'. [ 330.550906][T11648] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1530'. [ 330.707985][T11577] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.716526][T11577] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.723761][T11577] bridge_slave_0: entered allmulticast mode [ 330.734046][T11577] bridge_slave_0: entered promiscuous mode [ 330.744971][T11577] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.752174][T11577] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.759878][T11577] bridge_slave_1: entered allmulticast mode [ 330.768067][T11577] bridge_slave_1: entered promiscuous mode [ 330.845164][ T54] Bluetooth: hci4: command tx timeout [ 330.961431][T11577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.999220][T11577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.233269][T11577] team0: Port device team_slave_0 added [ 331.246468][ T54] Bluetooth: hci2: command tx timeout [ 331.281539][T11675] xt_hashlimit: size too large, truncated to 1048576 [ 331.286777][T11577] team0: Port device team_slave_1 added [ 331.288660][T11675] xt_hashlimit: max too large, truncated to 1048576 [ 331.303116][T11675] xt_hashlimit: overflow, try lower: 0/0 [ 331.360209][ T6063] hsr_slave_0: left promiscuous mode [ 331.371786][ T6063] hsr_slave_1: left promiscuous mode [ 331.381750][ T6063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.389909][ T6063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.399932][ T6063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.408030][ T6063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.421687][ T6063] hsr_slave_0: left promiscuous mode [ 331.431768][ T6063] hsr_slave_1: left promiscuous mode [ 331.439019][ T6063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.446670][ T6063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.454382][ T6063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.462579][ T6063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.499904][ T6063] veth1_macvtap: left promiscuous mode [ 331.505677][ T6063] veth0_macvtap: left promiscuous mode [ 331.511314][ T6063] veth1_vlan: left promiscuous mode [ 331.517690][ T6063] veth0_vlan: left promiscuous mode [ 331.523896][ T6063] veth1_macvtap: left promiscuous mode [ 331.529580][ T6063] veth0_macvtap: left promiscuous mode [ 331.536448][ T6063] veth1_vlan: left promiscuous mode [ 331.541738][ T6063] veth0_vlan: left promiscuous mode [ 331.645153][ T54] Bluetooth: hci0: command tx timeout [ 332.176385][ T6063] team0 (unregistering): Port device team_slave_1 removed [ 332.219802][ T6063] team0 (unregistering): Port device team_slave_0 removed [ 332.940311][ T54] Bluetooth: hci4: command tx timeout [ 332.984558][ T6063] team0 (unregistering): Port device team_slave_1 removed [ 333.032547][ T6063] team0 (unregistering): Port device team_slave_0 removed [ 333.334970][ T54] Bluetooth: hci2: command tx timeout [ 333.487336][T11687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1541'. [ 333.499538][T11577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.517118][T11577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.553992][T11577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.577374][T11577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.584333][T11577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.610937][T11577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.640302][T11690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1542'. [ 333.659950][T11690] tipc: Started in network mode [ 333.665456][T11690] tipc: Node identity , cluster identity 8 [ 333.803095][T11544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.816482][T11577] hsr_slave_0: entered promiscuous mode [ 333.823099][T11577] hsr_slave_1: entered promiscuous mode [ 333.830362][T11577] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.838760][T11577] Cannot create hsr debugfs directory [ 333.869668][T11555] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 333.976326][T11555] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 334.015401][T11555] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 334.042138][T11706] x_tables: duplicate underflow at hook 1 [ 334.068557][T11555] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 334.125528][T11544] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.162399][ T3028] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.169578][ T3028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.260263][ T6056] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.267473][ T6056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.589667][T11555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.722856][T11555] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.838367][ T6048] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.845579][ T6048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.869211][ T6048] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.876426][ T6048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.008259][ T54] Bluetooth: hci4: command tx timeout [ 335.022176][T11544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.059674][T11577] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 335.091127][T11577] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 335.144637][T11577] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 335.171495][T11577] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 335.379627][T11544] veth0_vlan: entered promiscuous mode [ 335.380830][T11732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1552'. [ 335.428227][T11544] veth1_vlan: entered promiscuous mode [ 335.511787][T11577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.550563][T11739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1553'. [ 335.579944][T11739] dummy0: entered promiscuous mode [ 335.642526][T11555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.691201][T11577] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.722124][T11544] veth0_macvtap: entered promiscuous mode [ 335.780162][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.787377][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.826092][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.833275][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.846533][T11544] veth1_macvtap: entered promiscuous mode [ 335.869345][T11751] pimreg: entered allmulticast mode [ 335.883119][T11753] netlink: 'syz.0.1556': attribute type 3 has an invalid length. [ 335.891747][T11753] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1556'. [ 335.916742][T11751] pimreg: left allmulticast mode [ 335.983327][T11544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.995554][T11544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.006316][T11544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.018317][T11544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.029269][T11544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.041039][T11544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.053566][T11544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.097923][T11544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.119832][T11544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.131745][T11544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.142589][T11544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.153005][T11544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.164131][T11544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.176433][T11544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.209614][T11555] veth0_vlan: entered promiscuous mode [ 336.222129][T11544] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.242070][T11544] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.253879][T11544] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.264993][T11544] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.317724][T11555] veth1_vlan: entered promiscuous mode [ 336.494586][ T6056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.512833][ T6056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.539788][T11555] veth0_macvtap: entered promiscuous mode [ 336.573446][T11555] veth1_macvtap: entered promiscuous mode [ 336.619041][ T6063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.659417][ T6063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.699294][T11555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.734961][T11555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.753030][T11555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.773345][T11555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.790488][T11555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.802640][T11555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.821078][T11555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.832013][T11555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.844060][T11555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.867952][T11555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.878678][T11555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.889437][T11555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.900313][T11555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.910704][T11555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.931235][T11555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.945185][T11555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.963254][T11555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.997209][T11555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.017499][T11555] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.041376][T11555] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.055250][T11555] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.064404][T11555] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.155287][T11577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.164486][T11788] bond_slave_0: entered allmulticast mode [ 337.328583][ T6063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.341427][ T6063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.350330][T11577] veth0_vlan: entered promiscuous mode [ 337.404476][T11577] veth1_vlan: entered promiscuous mode [ 337.420538][ T3028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.436613][ T3028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.524653][T11795] netlink: 'syz.0.1568': attribute type 13 has an invalid length. [ 337.538874][T11796] netlink: 'syz.0.1568': attribute type 13 has an invalid length. [ 337.582348][T11577] veth0_macvtap: entered promiscuous mode [ 337.599233][T11577] veth1_macvtap: entered promiscuous mode [ 337.640248][T11796] IPVS: Scheduler module ip_vs_ not found [ 337.704434][T11798] IPVS: Scheduler module ip_vs_ not found [ 337.748600][ T6048] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.786973][T11577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.797913][T11577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.808546][T11577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.820637][T11577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.830791][T11577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.841818][T11577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.852099][T11577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.863041][T11577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.877233][T11577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.893600][T11577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.910013][T11577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.935581][T11577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.956796][T11577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.977995][T11577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.991891][T11577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.003072][T11577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.013797][T11577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.024014][T11577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.035443][T11577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.045764][T11577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.056436][T11577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.068328][T11577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.082427][T11577] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.093059][T11577] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.102466][T11577] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.112641][T11577] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.181105][ T6071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.189667][ T6071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.236800][ T6048] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.259719][ T6071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.269786][ T6071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.399449][ T6048] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.503801][ T6048] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.635932][ T6048] bridge_slave_1: left allmulticast mode [ 338.641619][ T6048] bridge_slave_1: left promiscuous mode [ 338.649894][ T6048] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.659615][ T6048] bridge_slave_0: left allmulticast mode [ 338.666684][ T6048] bridge_slave_0: left promiscuous mode [ 338.672356][ T6048] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.122278][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 339.139576][ T5229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 339.148269][ T5229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 339.173446][ T5232] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 339.192187][ T5232] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 339.206081][ T5232] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 339.283214][ T6048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.294614][ T6048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.311416][ T6048] bond0 (unregistering): Released all slaves [ 339.359153][T11804] lo speed is unknown, defaulting to 1000 [ 339.581087][T11804] chnl_net:caif_netlink_parms(): no params data found [ 339.662184][ T6048] hsr_slave_0: left promiscuous mode [ 339.669198][ T6048] hsr_slave_1: left promiscuous mode [ 339.675672][ T6048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.683093][ T6048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.691080][ T6048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.703338][ T6048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.727288][ T6048] veth1_macvtap: left promiscuous mode [ 339.732824][ T6048] veth0_macvtap: left promiscuous mode [ 339.738938][ T6048] veth1_vlan: left promiscuous mode [ 339.744216][ T6048] veth0_vlan: left promiscuous mode [ 340.530996][ T6048] team0 (unregistering): Port device team_slave_1 removed [ 340.596478][ T6048] team0 (unregistering): Port device team_slave_0 removed [ 340.615328][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 340.626793][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 340.640833][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 340.660115][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 340.680428][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 340.700453][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 341.207734][T11804] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.218149][T11804] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.228338][T11804] bridge_slave_0: entered allmulticast mode [ 341.237321][T11804] bridge_slave_0: entered promiscuous mode [ 341.245292][ T5232] Bluetooth: hci0: command tx timeout [ 341.259694][T11804] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.274641][T11804] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.284310][T11804] bridge_slave_1: entered allmulticast mode [ 341.292654][T11804] bridge_slave_1: entered promiscuous mode [ 341.357198][T11804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.370278][T11823] lo speed is unknown, defaulting to 1000 [ 341.386228][T11804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.451936][T11804] team0: Port device team_slave_0 added [ 341.480147][T11804] team0: Port device team_slave_1 added [ 341.530444][T11804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.541434][T11804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.572641][T11804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.596350][T11804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.603291][T11804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.629863][T11804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.702450][T11804] hsr_slave_0: entered promiscuous mode [ 341.709136][T11804] hsr_slave_1: entered promiscuous mode [ 341.719023][T11804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.727528][T11804] Cannot create hsr debugfs directory [ 341.813280][T11823] chnl_net:caif_netlink_parms(): no params data found [ 342.028108][ T6048] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.191157][ T6048] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.237700][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 342.249942][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 342.251580][T11823] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.265094][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 342.273224][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 342.273773][T11823] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.290783][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 342.298846][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 342.301670][T11823] bridge_slave_0: entered allmulticast mode [ 342.326478][T11823] bridge_slave_0: entered promiscuous mode [ 342.359367][ T6048] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.393775][T11823] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.401347][T11823] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.409107][T11823] bridge_slave_1: entered allmulticast mode [ 342.416662][T11823] bridge_slave_1: entered promiscuous mode [ 342.454443][ T6048] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.514937][T11823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.533527][T11823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.542729][T11845] lo speed is unknown, defaulting to 1000 [ 342.599059][T11823] team0: Port device team_slave_0 added [ 342.611479][T11823] team0: Port device team_slave_1 added [ 342.683643][T11823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.691013][T11823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.719231][T11823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.747727][T11823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.758040][T11823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.785013][ T54] Bluetooth: hci2: command tx timeout [ 342.791303][T11823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.907764][T11804] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 342.921283][T11823] hsr_slave_0: entered promiscuous mode [ 342.931665][T11823] hsr_slave_1: entered promiscuous mode [ 342.938733][T11823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.949742][T11823] Cannot create hsr debugfs directory [ 342.999555][ T6048] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.033436][T11804] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 343.045530][T11804] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 343.080042][T11849] bond0: entered promiscuous mode [ 343.085413][T11849] bond_slave_0: entered promiscuous mode [ 343.091155][T11849] bond_slave_1: entered promiscuous mode [ 343.142362][T11804] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 343.225668][ T6048] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.325763][ T54] Bluetooth: hci0: command tx timeout [ 343.371595][T11861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1576'. [ 343.420389][ T6048] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.492405][ T6048] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.509470][T11845] chnl_net:caif_netlink_parms(): no params data found [ 343.780775][T11845] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.790571][T11845] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.798541][T11845] bridge_slave_0: entered allmulticast mode [ 343.808832][T11845] bridge_slave_0: entered promiscuous mode [ 343.817641][T11845] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.826425][T11845] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.833656][T11845] bridge_slave_1: entered allmulticast mode [ 343.842108][T11845] bridge_slave_1: entered promiscuous mode [ 343.901233][T11845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.929127][ T6048] bridge_slave_1: left allmulticast mode [ 343.936070][ T6048] bridge_slave_1: left promiscuous mode [ 343.941899][ T6048] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.952093][ T6048] bridge_slave_0: left allmulticast mode [ 343.958350][ T6048] bridge_slave_0: left promiscuous mode [ 343.964063][ T6048] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.984060][ T6048] bridge_slave_1: left allmulticast mode [ 343.990068][ T6048] bridge_slave_1: left promiscuous mode [ 343.996144][ T6048] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.006966][ T6048] bridge_slave_0: left allmulticast mode [ 344.012626][ T6048] bridge_slave_0: left promiscuous mode [ 344.020856][ T6048] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.365863][ T54] Bluetooth: hci4: command tx timeout [ 344.649153][ T6048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.660602][ T6048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.673686][ T6048] bond0 (unregistering): Released all slaves [ 344.814064][ T6048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.831181][ T6048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.842138][ T6048] bond0 (unregistering): Released all slaves [ 344.849846][ T54] Bluetooth: hci2: command tx timeout [ 344.873985][T11845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.898760][T11804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.932724][T11875] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1579'. [ 345.093890][T11845] team0: Port device team_slave_0 added [ 345.108078][T11845] team0: Port device team_slave_1 added [ 345.247395][T11845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.254350][T11845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.282255][T11845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.297514][T11845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.304468][T11845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.332598][T11845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.364222][T11804] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.405606][ T54] Bluetooth: hci0: command tx timeout [ 345.433310][ T3028] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.440517][ T3028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.476209][T11845] hsr_slave_0: entered promiscuous mode [ 345.482542][T11845] hsr_slave_1: entered promiscuous mode [ 345.489771][T11845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 345.498523][T11845] Cannot create hsr debugfs directory [ 345.521053][ T3028] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.528274][ T3028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.673079][T11823] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 345.698375][ T6048] hsr_slave_0: left promiscuous mode [ 345.704273][ T6048] hsr_slave_1: left promiscuous mode [ 345.710863][ T6048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.719819][ T6048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.728649][ T6048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.736641][ T6048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.748748][ T6048] hsr_slave_0: left promiscuous mode [ 345.754491][ T6048] hsr_slave_1: left promiscuous mode [ 345.760568][ T6048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.768184][ T6048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.776983][ T6048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.784388][ T6048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.829370][ T6048] veth1_macvtap: left promiscuous mode [ 345.836546][ T6048] veth0_macvtap: left promiscuous mode [ 345.842104][ T6048] veth1_vlan: left promiscuous mode [ 345.847554][ T6048] veth0_vlan: left promiscuous mode [ 345.853950][ T6048] veth1_macvtap: left promiscuous mode [ 345.859875][ T6048] veth0_macvtap: left promiscuous mode [ 345.865809][ T6048] veth1_vlan: left promiscuous mode [ 345.871223][ T6048] veth0_vlan: left promiscuous mode [ 346.452752][ T54] Bluetooth: hci4: command tx timeout [ 346.472926][ T6048] team0 (unregistering): Port device team_slave_1 removed [ 346.513882][ T6048] team0 (unregistering): Port device team_slave_0 removed [ 346.942357][ T54] Bluetooth: hci2: command tx timeout [ 347.450245][ T5232] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 347.467259][ T5232] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 347.476762][ T5232] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 347.489416][ T5232] Bluetooth: hci0: command tx timeout [ 347.491747][ T5229] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 347.503903][ T5229] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 347.511194][ T5229] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 347.581537][ T6048] team0 (unregistering): Port device team_slave_1 removed [ 347.629960][ T6048] team0 (unregistering): Port device team_slave_0 removed [ 348.044051][T11823] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 348.069174][T11823] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 348.131240][T11823] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 348.237511][T11883] lo speed is unknown, defaulting to 1000 [ 348.313570][T11886] syz.0.1582[11886] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 348.313733][T11886] syz.0.1582[11886] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 348.525720][ T5229] Bluetooth: hci4: command tx timeout [ 348.689542][T11804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.772472][T11823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.917316][T11823] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.943059][ T6071] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.950219][ T6071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.968395][T11804] veth0_vlan: entered promiscuous mode [ 348.986246][ T6071] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.993402][ T6071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.008928][ T5229] Bluetooth: hci2: command tx timeout [ 349.083655][T11883] chnl_net:caif_netlink_parms(): no params data found [ 349.109019][T11804] veth1_vlan: entered promiscuous mode [ 349.222689][T11845] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 349.242959][T11845] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 349.275211][T11845] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 349.312846][T11845] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 349.375714][T11883] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.383241][T11883] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.409620][T11883] bridge_slave_0: entered allmulticast mode [ 349.426510][T11912] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.1587'. [ 349.429056][T11883] bridge_slave_0: entered promiscuous mode [ 349.474234][T11883] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.493676][T11883] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.501976][T11883] bridge_slave_1: entered allmulticast mode [ 349.516773][T11883] bridge_slave_1: entered promiscuous mode [ 349.561174][T11916] netlink: 766 bytes leftover after parsing attributes in process `syz.0.1588'. [ 349.570390][ T5229] Bluetooth: hci7: command tx timeout [ 349.608434][T11883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.668286][T11804] veth0_macvtap: entered promiscuous mode [ 349.690513][T11883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.713927][T11804] veth1_macvtap: entered promiscuous mode [ 349.822963][T11883] team0: Port device team_slave_0 added [ 349.861367][T11883] team0: Port device team_slave_1 added [ 349.887491][T11823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.912030][T11804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.923672][T11804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.935744][T11804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.946488][T11804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.956358][T11804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.975569][T11804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.987410][T11804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.015951][T11926] 8021q: VLANs not supported on ipvlan0 [ 350.022253][T11883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.033952][T11883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.064606][T11883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.078050][T11883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.092312][T11883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.120072][T11883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.151612][T11804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.162345][T11804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.175179][T11804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.185996][T11804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.196128][T11804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.206727][ T5229] Bluetooth: hci3: command 0x0406 tx timeout [ 350.215388][T11804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.231077][T11804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.290825][T11883] hsr_slave_0: entered promiscuous mode [ 350.298640][T11883] hsr_slave_1: entered promiscuous mode [ 350.304957][T11883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.312526][T11883] Cannot create hsr debugfs directory [ 350.325619][T11804] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.334345][T11804] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.343564][T11804] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.352500][T11804] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.465159][T11845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.543379][T11823] veth0_vlan: entered promiscuous mode [ 350.605035][ T54] Bluetooth: hci4: command tx timeout [ 350.607000][T11845] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.640447][T11823] veth1_vlan: entered promiscuous mode [ 350.653052][T11935] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1595'. [ 350.732322][ T3028] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.739537][ T3028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.750114][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.774959][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.839782][T11883] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.872950][ T3028] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.880157][ T3028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.922995][T11823] veth0_macvtap: entered promiscuous mode [ 350.977566][T11883] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.060876][T11823] veth1_macvtap: entered promiscuous mode [ 351.070406][ T6063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.094076][ T6063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.124245][T11883] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.222399][T11823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.244681][T11823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.265919][T11823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.276576][T11823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.286473][T11823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.298646][T11823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.308535][T11823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.319112][T11823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.332022][T11823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.417691][T11883] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.505758][T11823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.539507][T11962] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1601'. [ 351.544786][T11823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.572309][T11823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.583276][T11823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.594306][T11823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.606191][T11823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.616518][T11823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.627187][T11823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.650067][ T54] Bluetooth: hci7: command tx timeout [ 351.668219][T11823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.707985][T11823] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.718383][T11823] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.733260][T11823] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.743061][T11823] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.918211][ T6071] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.999395][T11845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.120602][ T6071] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.271613][ T6071] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.311758][T11883] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 352.323712][T11883] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 352.350912][T11845] veth0_vlan: entered promiscuous mode [ 352.356211][ T6079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.364657][ T6079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.390590][ T6071] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.409942][T11883] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 352.441384][T11883] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 352.473461][ T6050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.485790][T11845] veth1_vlan: entered promiscuous mode [ 352.504373][ T6050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.599356][T11845] veth0_macvtap: entered promiscuous mode [ 352.648186][T11845] veth1_macvtap: entered promiscuous mode [ 352.714546][T11845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.726071][T11845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.737113][T11845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.747676][T11845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.757951][T11845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.770576][T11845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.780543][T11845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.791238][T11845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.801614][T11845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.812078][T11845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.824573][T11845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.844045][ T6071] bridge_slave_1: left allmulticast mode [ 352.850511][ T6071] bridge_slave_1: left promiscuous mode [ 352.861147][ T6071] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.870033][ T6071] bridge_slave_0: left allmulticast mode [ 352.882385][ T6071] bridge_slave_0: left promiscuous mode [ 352.888544][ T6071] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.455747][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 353.471750][ T5229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 353.492641][ T5229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 353.514319][ T5229] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 353.523000][ T5229] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 353.539634][ T5229] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 353.547545][ T6071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.576104][ T6071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.590334][ T6071] bond0 (unregistering): Released all slaves [ 353.617936][T11845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.629412][T11845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.641536][T11845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.652608][T11845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.664204][T11845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.675233][T11845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.685492][T11845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.696173][T11845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.708296][T11845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.719096][T11845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.729393][ T5229] Bluetooth: hci7: command tx timeout [ 353.736395][T11845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.783532][T11883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.800663][T11989] lo speed is unknown, defaulting to 1000 [ 353.883356][T11845] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.897555][T11845] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.906442][T11845] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.915249][T11845] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.937796][T11883] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.967587][ T6079] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.974812][ T6079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.026638][ T6079] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.033721][ T6079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.099068][ T6071] hsr_slave_0: left promiscuous mode [ 354.111879][ T6071] hsr_slave_1: left promiscuous mode [ 354.118302][ T6071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.135562][ T6071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.148885][ T6071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.156420][ T6071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.181027][ T6071] veth1_macvtap: left promiscuous mode [ 354.186735][ T6071] veth0_macvtap: left promiscuous mode [ 354.192272][ T6071] veth1_vlan: left promiscuous mode [ 354.202403][ T6071] veth0_vlan: left promiscuous mode [ 354.669725][ T6071] team0 (unregistering): Port device team_slave_1 removed [ 354.722003][ T6071] team0 (unregistering): Port device team_slave_0 removed [ 355.256809][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 355.265540][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 355.284576][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 355.313174][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 355.321044][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 355.336530][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 355.584972][ T6056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.592831][ T6056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.642630][ T6048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.651951][T12003] lo speed is unknown, defaulting to 1000 [ 355.655918][ T5229] Bluetooth: hci0: command tx timeout [ 355.695262][ T6048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.711683][T11989] chnl_net:caif_netlink_parms(): no params data found [ 355.804909][ T5229] Bluetooth: hci7: command tx timeout [ 355.862247][T12016] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1608'. [ 356.067346][T11989] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.084636][T11989] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.105413][T11989] bridge_slave_0: entered allmulticast mode [ 356.121076][T11989] bridge_slave_0: entered promiscuous mode [ 356.153921][T11883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.171879][T11989] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.197578][T11989] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.221607][T11989] bridge_slave_1: entered allmulticast mode [ 356.244580][T11989] bridge_slave_1: entered promiscuous mode [ 356.393718][T11989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.406103][T12040] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1613'. [ 356.472918][T11989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.607134][ T6071] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.693790][T12003] chnl_net:caif_netlink_parms(): no params data found [ 356.724618][ T6071] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.743592][T11989] team0: Port device team_slave_0 added [ 356.757282][T11989] team0: Port device team_slave_1 added [ 356.920660][ T6071] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.956038][T11989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.964360][T11989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.990823][T11989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.003744][T11989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.011424][T11989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.038261][T11989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.096203][ T6071] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.152536][T12003] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.161187][T12003] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.171117][T12003] bridge_slave_0: entered allmulticast mode [ 357.179731][T12003] bridge_slave_0: entered promiscuous mode [ 357.199059][T11989] hsr_slave_0: entered promiscuous mode [ 357.206240][T11989] hsr_slave_1: entered promiscuous mode [ 357.212309][T11989] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 357.220415][T11989] Cannot create hsr debugfs directory [ 357.233991][T12003] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.245263][T12003] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.252605][T12003] bridge_slave_1: entered allmulticast mode [ 357.260466][T12003] bridge_slave_1: entered promiscuous mode [ 357.268844][T11883] veth0_vlan: entered promiscuous mode [ 357.373076][T12003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.384693][T11883] veth1_vlan: entered promiscuous mode [ 357.404271][ T6071] bridge_slave_1: left allmulticast mode [ 357.410208][ T5229] Bluetooth: hci2: command tx timeout [ 357.416845][ T6071] bridge_slave_1: left promiscuous mode [ 357.422596][ T6071] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.431944][ T6071] bridge_slave_0: left allmulticast mode [ 357.437938][ T6071] bridge_slave_0: left promiscuous mode [ 357.444117][ T6071] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.735708][ T5229] Bluetooth: hci0: command tx timeout [ 357.824077][ T6071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.836912][ T6071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.848698][ T6071] bond0 (unregistering): Released all slaves [ 357.867037][T12003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.944841][T12003] team0: Port device team_slave_0 added [ 358.003113][T12003] team0: Port device team_slave_1 added [ 358.071933][T11883] veth0_macvtap: entered promiscuous mode [ 358.098146][T12003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.105364][T12003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.132605][T12003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.157785][T11883] veth1_macvtap: entered promiscuous mode [ 358.191455][T12003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.198615][T12003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.225889][T12003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.311992][T11883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.323742][T11883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.334166][T11883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.344985][T11883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.355021][T11883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.368603][T11883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.379007][T11883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.389745][T11883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.404494][T11883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.415980][T11883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.431990][T11883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.472458][T11883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.486304][T11883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.496302][T11883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.507307][T11883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.517305][T11883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.528509][T11883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.538645][T11883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.549451][T11883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.559350][T11883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.570230][T11883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.581387][T11883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.608431][ T6071] hsr_slave_0: left promiscuous mode [ 358.614578][ T6071] hsr_slave_1: left promiscuous mode [ 358.621727][ T6071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.630476][ T6071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.640481][ T6071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.648370][ T6071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.671773][ T6071] veth1_macvtap: left promiscuous mode [ 358.677482][ T6071] veth0_macvtap: left promiscuous mode [ 358.683015][ T6071] veth1_vlan: left promiscuous mode [ 358.688796][ T6071] veth0_vlan: left promiscuous mode [ 359.176059][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 359.185468][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 359.193608][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 359.218192][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 359.226102][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 359.243050][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 359.416401][ T6071] team0 (unregistering): Port device team_slave_1 removed [ 359.455828][ T6071] team0 (unregistering): Port device team_slave_0 removed [ 359.494966][ T54] Bluetooth: hci2: command tx timeout [ 359.806563][ T54] Bluetooth: hci0: command tx timeout [ 359.903410][T12003] hsr_slave_0: entered promiscuous mode [ 359.912374][T12003] hsr_slave_1: entered promiscuous mode [ 359.922402][T12003] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 359.931890][T12003] Cannot create hsr debugfs directory [ 359.991583][T12062] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.001254][T12062] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.142011][T12066] Bluetooth: MGMT ver 1.23 [ 360.146869][T11883] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.146905][T11883] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.146932][T11883] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.146959][T11883] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.368409][T12063] lo speed is unknown, defaulting to 1000 [ 360.503337][T11989] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 360.511571][ T6050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.521179][ T6050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.538557][T11989] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 360.608344][T11989] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 360.631487][T11989] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 360.732927][ T6063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.749849][ T6063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.988061][T12076] Cannot find add_set index 0 as target [ 360.994582][ T6071] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.145939][ T6071] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.310857][ T6071] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.325900][ T54] Bluetooth: hci4: command tx timeout [ 361.377942][T12063] chnl_net:caif_netlink_parms(): no params data found [ 361.458319][ T6071] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.464996][T12087] can: request_module (can-proto-0) failed. [ 361.536525][T12087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1625'. [ 361.559781][T12089] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1625'. [ 361.568952][ T54] Bluetooth: hci2: command tx timeout [ 361.722797][T12063] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.730635][T12063] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.738831][T12063] bridge_slave_0: entered allmulticast mode [ 361.749457][T12063] bridge_slave_0: entered promiscuous mode [ 361.766695][T12063] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.775060][T12063] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.782645][T12063] bridge_slave_1: entered allmulticast mode [ 361.790143][T12063] bridge_slave_1: entered promiscuous mode [ 361.797578][T12100] Cannot find set identified by id 0 to match [ 361.886422][ T54] Bluetooth: hci0: command tx timeout [ 361.968605][T11989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.008128][T12003] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 362.028312][T12003] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 362.058918][T12063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.091808][T12063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.119293][T11989] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.140112][T12003] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 362.163117][T12003] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 362.181540][ T6071] bridge_slave_1: left allmulticast mode [ 362.195522][ T6071] bridge_slave_1: left promiscuous mode [ 362.202973][ T6071] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.224384][ T6071] bridge_slave_0: left allmulticast mode [ 362.230234][ T6071] bridge_slave_0: left promiscuous mode [ 362.236504][ T6071] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.613536][ T6071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.626100][ T6071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.643718][ T6071] bond0 (unregistering): Released all slaves [ 362.741810][ T6056] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.749022][ T6056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.824528][T12063] team0: Port device team_slave_0 added [ 362.895123][T12063] team0: Port device team_slave_1 added [ 362.919942][ T6048] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.927152][ T6048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.016259][T12063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.023246][T12063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.052323][T12063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.078391][T12137] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1637'. [ 363.142317][T12063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.161735][T12063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.209802][T12063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.255726][ T6071] hsr_slave_0: left promiscuous mode [ 363.262536][ T6071] hsr_slave_1: left promiscuous mode [ 363.273328][ T6071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.295064][ T6071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.312135][ T6071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.331818][ T6071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.396224][ T6071] veth1_macvtap: left promiscuous mode [ 363.401928][ T6071] veth0_macvtap: left promiscuous mode [ 363.410610][ T54] Bluetooth: hci4: command tx timeout [ 363.417029][ T6071] veth1_vlan: left promiscuous mode [ 363.426556][ T6071] veth0_vlan: left promiscuous mode [ 363.645213][ T5229] Bluetooth: hci2: command tx timeout [ 364.080716][ T6071] team0 (unregistering): Port device team_slave_1 removed [ 364.133962][ T6071] team0 (unregistering): Port device team_slave_0 removed [ 364.686523][T12160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1645'. [ 364.757494][T12063] hsr_slave_0: entered promiscuous mode [ 364.786392][T12063] hsr_slave_1: entered promiscuous mode [ 364.811653][T12063] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.822420][T12165] netlink: 'syz.0.1646': attribute type 16 has an invalid length. [ 364.824846][T12063] Cannot create hsr debugfs directory [ 364.830476][T12165] netlink: 'syz.0.1646': attribute type 3 has an invalid length. [ 364.843505][T12165] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1646'. [ 364.856171][T12162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1645'. [ 365.055940][T12003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.130802][T12003] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.171595][ T6048] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.178804][ T6048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.291506][ T6050] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.298725][ T6050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.418921][T11989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.486263][ T5229] Bluetooth: hci4: command tx timeout [ 365.534225][T12003] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 365.657641][T11989] veth0_vlan: entered promiscuous mode [ 365.699729][T11989] veth1_vlan: entered promiscuous mode [ 365.804057][T11989] veth0_macvtap: entered promiscuous mode [ 365.839822][T11989] veth1_macvtap: entered promiscuous mode [ 365.871587][T12063] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 365.903952][T12003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.983931][ T6063] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.995456][ T6063] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.017168][T12063] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 366.030201][T12063] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 366.117825][ T6063] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.146027][ T6063] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.161641][T12063] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 366.200988][T11989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.227338][T11989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.246918][T11989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.268519][T11989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.284467][T11989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.296751][T11989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.316484][T11989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.335681][T11989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.348808][T11989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.364480][T12194] xt_TCPMSS: Only works on TCP SYN packets [ 366.376558][T11989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.387599][T11989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.398215][T11989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.409155][T11989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.423299][T11989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.437357][T11989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.448230][T11989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.449385][ T5229] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 366.464792][T11989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.484269][T11989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.488232][ T5229] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 366.499966][ T5229] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 366.509979][ T5229] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 366.528851][ T5229] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 366.538232][ T5229] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 366.580345][ T6063] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.603451][ T6063] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.643267][T11989] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.653424][T11989] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.674833][T11989] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.684226][T11989] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.747064][ T6063] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.760816][ T6063] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.832551][T12195] lo speed is unknown, defaulting to 1000 [ 366.921620][T12003] veth0_vlan: entered promiscuous mode [ 366.937476][T12003] veth1_vlan: entered promiscuous mode [ 367.066158][T12206] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 367.083494][T12206] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 367.105214][T12206] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 367.148752][ T6056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.167044][ T6056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.183050][ T6063] bridge_slave_1: left allmulticast mode [ 367.190482][ T6063] bridge_slave_1: left promiscuous mode [ 367.202455][ T6063] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.212547][ T6063] bridge_slave_0: left allmulticast mode [ 367.222989][ T6063] bridge_slave_0: left promiscuous mode [ 367.229766][ T6063] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.565342][ T5229] Bluetooth: hci4: command tx timeout [ 367.774673][ T6063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.787558][ T6063] bond_slave_0: left promiscuous mode [ 367.797767][ T6063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.812667][ T6063] bond_slave_1: left promiscuous mode [ 367.820862][ T6063] bond0 (unregistering): Released all slaves [ 367.837718][ T6063] bond1 (unregistering): Released all slaves [ 367.871495][T12063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.922987][T12003] veth0_macvtap: entered promiscuous mode [ 367.973477][T12003] veth1_macvtap: entered promiscuous mode [ 367.986188][ T6079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.994643][ T6079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.153087][T12063] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.273348][T12003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.284680][T12003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.295462][T12003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.306793][T12003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.318747][T12003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.329324][T12003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.339358][T12003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.350659][T12003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.360774][T12003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.371896][T12003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.387593][T12003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.415074][T12003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.435122][T12003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.453250][T12003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.465148][T12003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.475330][T12003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.487576][T12003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.497925][T12003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.509670][T12003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.519867][T12003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.530881][T12003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.542806][T12003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.578476][ T6048] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.585737][ T6048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.603036][ T6056] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.610208][ T6056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.623897][ T5229] Bluetooth: hci6: command tx timeout [ 368.660774][T12195] chnl_net:caif_netlink_parms(): no params data found [ 368.733138][T12003] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.743672][T12003] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.752696][T12003] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.765039][T12003] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.849290][ T6063] hsr_slave_0: left promiscuous mode [ 368.856444][ T6063] hsr_slave_1: left promiscuous mode [ 368.862490][ T6063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.871422][ T6063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.885408][ T6063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.934257][ T6063] dummy0: left promiscuous mode [ 368.940116][ T6063] veth1_macvtap: left promiscuous mode [ 368.945882][ T6063] veth0_macvtap: left promiscuous mode [ 368.951639][ T6063] veth1_vlan: left promiscuous mode [ 368.957418][ T6063] veth0_vlan: left promiscuous mode [ 369.563917][ T6063] team0 (unregistering): Port device team_slave_1 removed [ 369.613610][ T6063] team0 (unregistering): Port device team_slave_0 removed [ 370.063569][T12195] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.071586][T12195] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.080033][T12195] bridge_slave_0: entered allmulticast mode [ 370.087085][T12195] bridge_slave_0: entered promiscuous mode [ 370.165083][T12195] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.174259][T12195] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.196983][T12195] bridge_slave_1: entered allmulticast mode [ 370.204378][T12195] bridge_slave_1: entered promiscuous mode [ 370.297159][T12195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.327800][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.347969][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.383517][T12195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.562785][T12195] team0: Port device team_slave_0 added [ 370.601440][ T6071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.627173][T12195] team0: Port device team_slave_1 added [ 370.627824][ T6071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.663106][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 370.678787][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 370.688675][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 370.697428][ T54] Bluetooth: hci6: command tx timeout [ 370.699869][ T5232] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 370.714964][ T5232] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 370.722349][ T5232] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 370.782953][T12195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.791361][T12195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.818554][T12195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.872980][T12250] netlink: 'syz.4.1666': attribute type 10 has an invalid length. [ 370.924533][T12250] team0: Device veth0_macvtap failed to register rx_handler [ 370.962102][T12195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.972289][T12195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.006366][T12195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.146020][T12245] lo speed is unknown, defaulting to 1000 [ 371.174260][T12195] hsr_slave_0: entered promiscuous mode [ 371.191247][T12195] hsr_slave_1: entered promiscuous mode [ 371.205053][T12195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 371.222638][T12195] Cannot create hsr debugfs directory [ 371.320992][ T6063] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.490131][ T6063] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.576579][ T6063] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.605560][T12063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.693841][ T6063] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.758504][T12063] veth0_vlan: entered promiscuous mode [ 371.862520][T12063] veth1_vlan: entered promiscuous mode [ 371.950495][T12245] chnl_net:caif_netlink_parms(): no params data found [ 372.012303][ T6063] bridge_slave_1: left allmulticast mode [ 372.019925][ T6063] bridge_slave_1: left promiscuous mode [ 372.026325][ T6063] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.036683][ T6063] bridge_slave_0: left allmulticast mode [ 372.042345][ T6063] bridge_slave_0: left promiscuous mode [ 372.050883][ T6063] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.420442][ T6063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.431906][ T6063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.444071][ T6063] bond0 (unregistering): Released all slaves [ 372.523613][T12063] veth0_macvtap: entered promiscuous mode [ 372.640208][T12063] veth1_macvtap: entered promiscuous mode [ 372.648215][T12245] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.656748][T12245] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.664042][T12245] bridge_slave_0: entered allmulticast mode [ 372.671232][T12245] bridge_slave_0: entered promiscuous mode [ 372.709020][T12245] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.716574][T12245] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.723936][T12245] bridge_slave_1: entered allmulticast mode [ 372.731433][T12245] bridge_slave_1: entered promiscuous mode [ 372.770328][ T5232] Bluetooth: hci6: command tx timeout [ 372.775159][ T5229] Bluetooth: hci0: command tx timeout [ 372.798721][T12245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.812976][T12063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.824379][T12063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.834693][T12063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.850479][T12063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.860750][T12063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.876805][T12063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.890270][T12063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.901052][T12063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.911954][T12063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.922850][T12063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.935537][T12063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.974150][T12245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.999881][ T6063] hsr_slave_0: left promiscuous mode [ 373.008260][ T6063] hsr_slave_1: left promiscuous mode [ 373.014429][ T6063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.022104][ T6063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.030066][ T6063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.038186][ T6063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.058894][ T6063] veth1_macvtap: left promiscuous mode [ 373.064424][ T6063] veth0_macvtap: left promiscuous mode [ 373.070437][ T6063] veth1_vlan: left promiscuous mode [ 373.076082][ T6063] veth0_vlan: left promiscuous mode [ 373.223386][T12275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1671'. [ 373.527015][ T5232] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 373.537448][ T5232] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 373.548608][ T5232] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 373.572263][ T5232] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 373.591462][ T5232] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 373.598954][ T5232] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 373.793475][ T6063] team0 (unregistering): Port device team_slave_1 removed [ 373.840206][ T6063] team0 (unregistering): Port device team_slave_0 removed [ 374.340948][T12063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.364124][T12063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.391297][T12063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.403394][T12063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.413668][T12063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.424854][T12063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.435118][T12063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.448063][T12063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.458295][T12063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.469740][T12063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.481884][T12063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.518634][T12245] team0: Port device team_slave_0 added [ 374.570512][T12195] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 374.608439][T12195] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 374.630231][T12245] team0: Port device team_slave_1 added [ 374.649469][T12063] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.658320][T12063] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.667645][T12063] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.676656][T12063] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.689703][T12277] lo speed is unknown, defaulting to 1000 [ 374.689747][T12195] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 374.722746][T12195] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 374.756472][T12245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.763461][T12245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.791756][T12245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.815324][T12245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.822349][T12245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.850454][ T5229] Bluetooth: hci6: command tx timeout [ 374.855998][ T5232] Bluetooth: hci0: command tx timeout [ 374.862707][T12245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.093426][T12245] hsr_slave_0: entered promiscuous mode [ 375.109367][T12245] hsr_slave_1: entered promiscuous mode [ 375.118513][T12245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 375.131097][T12245] Cannot create hsr debugfs directory [ 375.383241][ T6063] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.459084][ T6048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.494917][ T6048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.582354][ T6063] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.646330][ T5232] Bluetooth: hci2: command tx timeout [ 375.711678][ T6063] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.793579][ T6071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.794950][T12309] netlink: 'syz.4.1676': attribute type 3 has an invalid length. [ 375.812495][ T6071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.821025][T12309] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1676'. [ 375.855656][ T6063] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.927189][T12195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.947402][T12277] chnl_net:caif_netlink_parms(): no params data found [ 376.099702][T12315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1678'. [ 376.119398][T12315] netlink: zone id is out of range [ 376.187273][T12195] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.276711][ T6048] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.283891][ T6048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.328251][ T6048] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.335520][ T6048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.379874][T12277] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.399063][T12277] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.406805][T12277] bridge_slave_0: entered allmulticast mode [ 376.414234][T12277] bridge_slave_0: entered promiscuous mode [ 376.452500][T12277] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.459723][T12277] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.467261][T12277] bridge_slave_1: entered allmulticast mode [ 376.474005][T12277] bridge_slave_1: entered promiscuous mode [ 376.493166][ T6063] bridge_slave_1: left allmulticast mode [ 376.501539][ T6063] bridge_slave_1: left promiscuous mode [ 376.510336][ T6063] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.521370][ T6063] bridge_slave_0: left allmulticast mode [ 376.528240][ T6063] bridge_slave_0: left promiscuous mode [ 376.533907][ T6063] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.873651][ T6063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.885257][ T6063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.901954][ T6063] bond0 (unregistering): Released all slaves [ 376.925334][ T5232] Bluetooth: hci0: command tx timeout [ 376.998712][T12277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.014349][T12277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.061105][T12245] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 377.126643][T12245] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 377.156855][T12277] team0: Port device team_slave_0 added [ 377.180336][T12245] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 377.203415][T12245] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 377.214304][T12277] team0: Port device team_slave_1 added [ 377.368132][T12277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.378559][T12277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.405620][T12277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.422114][T12277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.431595][T12277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.459199][T12277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.484429][ T6063] hsr_slave_0: left promiscuous mode [ 377.492206][ T6063] hsr_slave_1: left promiscuous mode [ 377.499218][ T6063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.506740][ T6063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.516493][ T6063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.523899][ T6063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.548151][ T6063] veth1_macvtap: left promiscuous mode [ 377.553679][ T6063] veth0_macvtap: left promiscuous mode [ 377.559847][ T6063] veth1_vlan: left promiscuous mode [ 377.566598][ T6063] veth0_vlan: left promiscuous mode [ 377.735184][ T5232] Bluetooth: hci2: command tx timeout [ 378.032900][ T6063] team0 (unregistering): Port device team_slave_1 removed [ 378.083010][ T6063] team0 (unregistering): Port device team_slave_0 removed [ 378.653390][ T5229] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 378.669365][ T5229] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 378.678299][ T5229] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 378.697150][ T5229] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 378.717681][ T5229] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 378.736291][ T5229] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 378.801121][T12195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.841474][T12332] lo speed is unknown, defaulting to 1000 [ 378.857774][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.904304][T12277] hsr_slave_0: entered promiscuous mode [ 378.911823][T12277] hsr_slave_1: entered promiscuous mode [ 378.918794][T12277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 378.927198][T12277] Cannot create hsr debugfs directory [ 379.006599][ T5229] Bluetooth: hci0: command tx timeout [ 379.161169][T12245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.181164][T12195] veth0_vlan: entered promiscuous mode [ 379.275945][T12245] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.290331][T12195] veth1_vlan: entered promiscuous mode [ 379.333663][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.340826][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.432238][T12338] openvswitch: netlink: Message has 4 unknown bytes. [ 379.462761][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.469959][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.517282][T12338] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1682'. [ 379.526565][T12338] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1682'. [ 379.613268][ T6063] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.648190][T12342] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1683'. [ 379.671260][T12332] chnl_net:caif_netlink_parms(): no params data found [ 379.699708][T12343] bridge_slave_1: left allmulticast mode [ 379.705636][T12343] bridge_slave_1: left promiscuous mode [ 379.711412][T12343] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.723210][T12343] bridge1: port 1(bridge_slave_1) entered blocking state [ 379.735140][T12343] bridge1: port 1(bridge_slave_1) entered disabled state [ 379.742327][T12343] bridge_slave_1: entered allmulticast mode [ 379.756091][T12343] bridge_slave_1: entered promiscuous mode [ 379.762839][T12343] bridge1: port 1(bridge_slave_1) entered blocking state [ 379.770035][T12343] bridge1: port 1(bridge_slave_1) entered forwarding state [ 379.812950][ T6063] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.823942][ T5229] Bluetooth: hci2: command tx timeout [ 379.843995][T12342] bridge1: port 2(veth1_to_bond) entered blocking state [ 379.851224][T12342] bridge1: port 2(veth1_to_bond) entered disabled state [ 379.858550][T12342] veth1_to_bond: entered allmulticast mode [ 379.865721][T12342] veth1_to_bond: entered promiscuous mode [ 379.881408][T12342] bridge1: port 2(veth1_to_bond) entered blocking state [ 379.888448][T12342] bridge1: port 2(veth1_to_bond) entered forwarding state [ 379.976682][ T6063] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.006434][T12195] veth0_macvtap: entered promiscuous mode [ 380.151340][ T6063] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.206795][T12348] netlink: 'syz.4.1685': attribute type 9 has an invalid length. [ 380.220380][T12348] bond_slave_0: entered promiscuous mode [ 380.226115][T12348] bond_slave_1: entered promiscuous mode [ 380.232682][T12348] macvlan3: entered promiscuous mode [ 380.239700][T12348] bond0: entered promiscuous mode [ 380.245567][T12348] macvlan3: entered allmulticast mode [ 380.250956][T12348] bond0: entered allmulticast mode [ 380.257591][T12348] bond_slave_0: entered allmulticast mode [ 380.263326][T12348] bond_slave_1: entered allmulticast mode [ 380.270155][T12348] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 380.290280][T12332] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.299987][T12332] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.307793][T12332] bridge_slave_0: entered allmulticast mode [ 380.315910][T12332] bridge_slave_0: entered promiscuous mode [ 380.324587][T12195] veth1_macvtap: entered promiscuous mode [ 380.388232][T12332] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.405695][T12332] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.412961][T12332] bridge_slave_1: entered allmulticast mode [ 380.420236][T12332] bridge_slave_1: entered promiscuous mode [ 380.490209][T12332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.511631][T12195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.524262][T12195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.535335][T12195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.546119][T12195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.556592][T12195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.567475][T12195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.578626][T12195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.590631][T12195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.602753][T12195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.652702][T12332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.672169][T12358] Bluetooth: MGMT ver 1.23 [ 380.703663][T12195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.722277][T12195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.733211][T12195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.744646][T12195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.755202][T12195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.767747][T12195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.774989][ T5229] Bluetooth: hci4: command tx timeout [ 380.778243][T12195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.796484][T12195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.806603][T12195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.817406][T12195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.838746][T12195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.854619][T12195] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.874909][T12195] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.883627][T12195] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.903297][T12195] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.967419][T12277] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 380.988339][T12277] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 381.028344][T12245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.050002][T12332] team0: Port device team_slave_0 added [ 381.066702][T12277] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 381.087996][T12277] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 381.109473][ T6063] bridge_slave_1: left allmulticast mode [ 381.116116][ T6063] bridge_slave_1: left promiscuous mode [ 381.121805][ T6063] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.132132][ T6063] bridge_slave_0: left allmulticast mode [ 381.140070][ T6063] bridge_slave_0: left promiscuous mode [ 381.149683][ T6063] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.218969][T12367] ipt_REJECT: ECHOREPLY no longer supported. [ 381.572300][ T6063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.590697][ T6063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.607212][ T6063] bond0 (unregistering): Released all slaves [ 381.631212][T12332] team0: Port device team_slave_1 added [ 381.678651][T12367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1688'. [ 381.731111][T12332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.745086][T12332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.781014][T12332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.851394][T12332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.860541][T12332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.886607][ T5229] Bluetooth: hci2: command tx timeout [ 381.892654][T12332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.049962][T12332] hsr_slave_0: entered promiscuous mode [ 382.057967][T12332] hsr_slave_1: entered promiscuous mode [ 382.064376][T12332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.072898][T12332] Cannot create hsr debugfs directory [ 382.144090][ T6079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.153592][ T6079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.167532][ T6063] hsr_slave_0: left promiscuous mode [ 382.173437][ T6063] hsr_slave_1: left promiscuous mode [ 382.184629][ T6063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.195120][ T6063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.203189][ T6063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.211468][ T6063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.235208][ T6063] veth1_macvtap: left promiscuous mode [ 382.240911][ T6063] veth0_macvtap: left promiscuous mode [ 382.247339][ T6063] veth1_vlan: left promiscuous mode [ 382.252706][ T6063] veth0_vlan: left promiscuous mode [ 382.695686][ T5229] Bluetooth: hci0: command tx timeout [ 382.770778][ T6063] team0 (unregistering): Port device team_slave_1 removed [ 382.811811][ T6063] team0 (unregistering): Port device team_slave_0 removed [ 382.855010][ T5229] Bluetooth: hci4: command tx timeout [ 383.278911][T12245] veth0_vlan: entered promiscuous mode [ 383.322191][T12373] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 383.422211][T12245] veth1_vlan: entered promiscuous mode [ 383.481975][ T6079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.505018][ T6079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.638724][T12245] veth0_macvtap: entered promiscuous mode [ 383.702862][T12277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.712098][T12245] veth1_macvtap: entered promiscuous mode [ 383.766576][T12277] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.807317][T12245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.818787][T12245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.830971][T12245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.842106][T12245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.852513][T12245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.864337][T12245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.875076][T12245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.887344][T12245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.899719][T12245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.948093][ T3028] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.955281][ T3028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.971766][ T3028] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.978951][ T3028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.038288][T12245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.064782][T12245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.095805][T12245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.114950][T12245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.135905][T12245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.158079][T12245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.179160][T12245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.222886][T12245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.254462][T12245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.289041][T12245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.320781][T12245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.344043][T12245] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.358167][T12245] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.379582][T12245] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.398095][T12245] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.590006][ T6063] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.605778][ T30] INFO: task syz.0.1213:10278 blocked for more than 143 seconds. [ 384.613546][ T30] Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 384.637820][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 384.681218][ T30] task:syz.0.1213 state:D stack:23824 pid:10278 tgid:10277 ppid:5397 flags:0x00000004 [ 384.731564][T12383] syz-executor: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 384.744840][ T30] Call Trace: [ 384.752783][ T30] [ 384.772116][ T30] __schedule+0x1800/0x4a60 [ 384.784866][ T30] ? __pfx___schedule+0x10/0x10 [ 384.789772][ T30] ? __pfx_lock_release+0x10/0x10 [ 384.804806][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 384.810325][ T30] ? schedule+0x90/0x320 [ 384.814595][ T30] schedule+0x14b/0x320 [ 384.819213][T12383] CPU: 0 UID: 0 PID: 12383 Comm: syz-executor Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 384.829826][T12383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 384.836161][ T30] schedule_preempt_disabled+0x13/0x30 [ 384.839877][T12383] Call Trace: [ 384.848619][T12383] [ 384.851558][T12383] dump_stack_lvl+0x241/0x360 [ 384.855064][ T30] __mutex_lock+0x6a4/0xd70 [ 384.856241][T12383] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.860730][ T30] ? __mutex_lock+0x527/0xd70 [ 384.865898][T12383] ? __pfx__printk+0x10/0x10 [ 384.865929][T12383] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 384.865952][T12383] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 384.865976][T12383] warn_alloc+0x278/0x410 [ 384.866012][T12383] ? __pfx_warn_alloc+0x10/0x10 [ 384.866040][T12383] ? kcov_ioctl+0x59/0x640 [ 384.885921][ T30] ? nfsd_nl_version_get_doit+0x181/0x790 [ 384.888148][T12383] ? __get_vm_area_node+0x23d/0x270 [ 384.892458][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 384.897286][T12383] __vmalloc_node_range_noprof+0x6a2/0x1400 [ 384.897334][T12383] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 384.897365][T12383] vmalloc_user_noprof+0x74/0x80 [ 384.915090][ T30] ? genlmsg_put+0x145/0x2e0 [ 384.917641][T12383] ? kcov_ioctl+0x59/0x640 [ 384.923518][ T30] nfsd_nl_version_get_doit+0x181/0x790 [ 384.929811][T12383] kcov_ioctl+0x59/0x640 [ 384.929837][T12383] ? bpf_lsm_file_ioctl+0x9/0x10 [ 384.929861][T12383] ? security_file_ioctl+0x87/0xb0 [ 384.929885][T12383] ? __pfx_kcov_ioctl+0x10/0x10 [ 384.929909][T12383] __se_sys_ioctl+0xfc/0x170 [ 384.929933][T12383] do_syscall_64+0xf3/0x230 [ 384.954893][ T30] ? genl_get_cmd+0x65d/0xbe0 [ 384.958490][T12383] ? clear_bhb_loop+0x35/0x90 [ 384.963588][ T30] ? __asan_memcpy+0x40/0x70 [ 384.968415][T12383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.968438][T12383] RIP: 0033:0x7fd021f7dafb [ 384.968456][T12383] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 384.985309][ T30] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 384.986835][T12383] RSP: 002b:00007ffc07de6970 EFLAGS: 00000246 [ 384.991943][ T30] ? genl_get_cmd+0x65d/0xbe0 [ 384.997271][T12383] ORIG_RAX: 0000000000000010 [ 384.997283][T12383] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007fd021f7dafb [ 384.997297][T12383] RDX: 0000000000100000 RSI: ffffffff80086301 RDI: 00000000000000d7 [ 384.997310][T12383] RBP: 00007fd022135f40 R08: 00000000000000da R09: 0000000000000000 [ 384.997323][T12383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.997335][T12383] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 384.997363][T12383] [ 385.044106][ T5229] Bluetooth: hci4: command tx timeout [ 385.063808][T12383] Mem-Info: [ 385.068075][ T30] ? dev_hard_start_xmit+0x773/0x7e0 [ 385.085318][T12383] active_anon:3241 inactive_anon:0 isolated_anon:0 [ 385.085318][T12383] active_file:1345 inactive_file:38407 isolated_file:0 [ 385.085318][T12383] unevictable:768 dirty:56 writeback:0 [ 385.085318][T12383] slab_reclaimable:9827 slab_unreclaimable:113149 [ 385.085318][T12383] mapped:28516 shmem:1244 pagetables:515 [ 385.085318][T12383] sec_pagetables:0 bounce:0 [ 385.085318][T12383] kernel_misc_reclaimable:0 [ 385.085318][T12383] free:1318235 free_pcp:3202 free_cma:0 [ 385.087544][ T30] genl_rcv_msg+0xb14/0xec0 [ 385.093565][T12383] Node 0 active_anon:12964kB inactive_anon:0kB active_file:5380kB inactive_file:153548kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114064kB dirty:224kB writeback:0kB shmem:3440kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11028kB pagetables:2060kB sec_pagetables:0kB all_unreclaimable? no [ 385.096578][ T30] ? mark_lock+0x9a/0x350 [ 385.096621][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 385.096673][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 385.096699][ T30] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 385.096725][ T30] ? __pfx___might_resched+0x10/0x10 [ 385.096761][ T30] netlink_rcv_skb+0x1e3/0x430 [ 385.096789][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 385.096814][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 385.112453][T12383] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 385.149736][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 385.193952][T12383] Node 0 [ 385.195691][ T30] genl_rcv+0x28/0x40 [ 385.199699][T12383] DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 385.205170][ T30] netlink_unicast+0x7f6/0x990 [ 385.205214][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 385.205238][ T30] ? __virt_addr_valid+0x183/0x530 [ 385.205263][ T30] ? __check_object_size+0x49c/0x900 [ 385.205288][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 385.205316][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 385.205356][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.205386][ T30] ? __import_iovec+0x536/0x820 [ 385.205408][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 385.205433][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 385.205456][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 385.205484][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.205509][ T30] __sock_sendmsg+0x221/0x270 [ 385.205539][ T30] ____sys_sendmsg+0x525/0x7d0 [ 385.205571][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 385.205610][ T30] __sys_sendmsg+0x2b0/0x3a0 [ 385.205635][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 385.220943][T12383] lowmem_reserve[]: [ 385.226210][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 385.269055][T12383] 0 [ 385.272732][ T30] ? do_syscall_64+0x100/0x230 [ 385.305664][T12383] 2467 [ 385.308349][ T30] ? do_syscall_64+0xb6/0x230 [ 385.312294][T12383] 2468 [ 385.317673][ T30] do_syscall_64+0xf3/0x230 [ 385.340718][T12383] 0 [ 385.343088][ T30] ? clear_bhb_loop+0x35/0x90 [ 385.348033][T12383] 0 [ 385.353829][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.367243][T12383] [ 385.368770][ T30] RIP: 0033:0x7fa04ad7def9 [ 385.373463][T12383] Node 0 [ 385.380920][ T30] RSP: 002b:00007fa04bb8a038 EFLAGS: 00000246 [ 385.400949][T12383] DMA32 free:1310368kB boost:0kB min:34228kB low:42784kB high:51340kB reserved_highatomic:0KB active_anon:12880kB inactive_anon:0kB active_file:5380kB inactive_file:152736kB unevictable:1536kB writepending:220kB present:3129332kB managed:2554992kB mlocked:0kB bounce:0kB free_pcp:7980kB local_pcp:796kB free_cma:0kB [ 385.401007][T12383] lowmem_reserve[]: 0 0 0 0 0 [ 385.401050][T12383] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:816kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 385.401102][T12383] lowmem_reserve[]: 0 0 0 0 0 [ 385.401144][T12383] Node 1 Normal free:3946316kB boost:0kB min:55660kB low:69572kB high:83484kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:5364kB local_pcp:5036kB free_cma:0kB [ 385.401197][T12383] lowmem_reserve[]: 0 0 0 0 0 [ 385.401238][T12383] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 385.401370][T12383] Node 0 DMA32: 186*4kB (ME) 137*8kB (ME) 63*16kB (ME) 106*32kB (ME) 64*64kB (ME) 44*128kB (UME) 42*256kB (UME) 23*512kB (UM) 14*1024kB (UM) 4*2048kB (UM) 305*4096kB (M) = 1310304kB [ 385.401555][T12383] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB [ 385.406006][ T30] ORIG_RAX: 000000000000002e [ 385.421208][T12383] 0*64kB [ 385.424528][ T30] RAX: ffffffffffffffda RBX: 00007fa04af35f80 RCX: 00007fa04ad7def9 [ 385.426521][T12383] 0*128kB [ 385.432375][ T30] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000005 [ 385.434443][T12383] 0*256kB [ 385.439445][ T30] RBP: 00007fa04adf0b76 R08: 0000000000000000 R09: 0000000000000000 [ 385.450241][T12383] 0*512kB [ 385.478034][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 385.478055][ T30] R13: 0000000000000000 R14: 00007fa04af35f80 R15: 00007ffcb2583838 [ 385.478089][ T30] [ 385.478137][ T30] [ 385.478137][ T30] Showing all locks held in the system: [ 385.509592][T12383] 0*1024kB 0*2048kB 0*4096kB = 8kB [ 385.509636][T12383] Node 1 Normal: 3*4kB (UM) 2*8kB (M) 3*16kB (UM) 2*32kB (M) 1*64kB (M) 1*128kB (M) 0*256kB 1*512kB (M) 1*1024kB (U) 0*2048kB 963*4096kB (UM) = 3946316kB [ 385.509797][T12383] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 385.509815][T12383] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 385.509830][T12383] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 385.509847][T12383] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 385.509864][T12383] 40998 total pagecache pages [ 385.509872][T12383] 0 pages in swap cache [ 385.509880][T12383] Free swap = 124996kB [ 385.509889][T12383] Total swap = 124996kB [ 385.509898][T12383] 2097051 pages RAM [ 385.509907][T12383] 0 pages HighMem/MovableOnly [ 385.509915][T12383] 426965 pages reserved [ 385.509923][T12383] 0 pages cma reserved [ 385.753317][ T30] 1 lock held by khungtaskd/30: [ 385.758288][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 385.768252][ T30] 3 locks held by kworker/1:2/944: [ 385.773379][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 385.784459][ T30] #1: ffffc90004637d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 385.794901][ T30] #2: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 385.807526][ T30] 2 locks held by getty/4985: [ 385.812228][ T30] #0: ffff88803094b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 385.822638][ T30] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 385.833140][ T30] 3 locks held by kworker/1:6/5338: [ 385.838714][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 385.850097][ T30] #1: ffffc90004857d00 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 385.864182][ T30] #2: ffffffff8e93d5c0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 385.874537][ T30] 3 locks held by kworker/0:7/5388: [ 385.880108][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 385.894836][ T30] #1: ffffc90004c67d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 385.916289][ T30] #2: ffffffff8fc88588 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 385.927479][ T30] 4 locks held by kworker/u8:13/6056: [ 385.932872][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 385.953966][ T30] #1: ffffc900052d7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 385.968812][ T30] #2: ffffffff8fc88588 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 385.978192][ T30] #3: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 385.989518][ T30] 6 locks held by kworker/u8:15/6063: [ 385.995263][ T30] #0: ffff88801bae5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 386.006556][ T30] #1: ffffc90005307d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 386.018605][ T30] #2: ffffffff8fc7ba90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 386.028901][ T30] #3: ffff88807a7730e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 386.039254][ T30] #4: ffff88805325b250 (&devlink->lock_key#56){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 386.050963][ T30] #5: ffffffff8e93d5c0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 386.061716][ T30] 3 locks held by kworker/u8:18/6071: [ 386.067443][ T30] #0: ffff88802f6c3948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 386.082095][ T30] #1: ffffc900053ffd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 386.095368][ T30] #2: ffffffff8fc88588 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 386.105137][ T30] 2 locks held by syz.4.1130/9955: [ 386.110265][ T30] #0: ffffffff8fcee2b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 386.120405][ T30] #1: ffffffff8ec0b768 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 386.131951][ T30] 2 locks held by syz.0.1213/10278: [ 386.137602][ T30] #0: ffffffff8fcee2b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 386.146125][ T30] #1: ffffffff8ec0b768 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_version_get_doit+0x181/0x790 [ 386.165002][ T30] 2 locks held by syz.4.1565/11789: [ 386.170227][ T30] #0: ffffffff8fcee2b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 386.179416][ T30] #1: ffffffff8ec0b768 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 386.191736][ T30] 1 lock held by syz-executor/12245: [ 386.197380][ T30] #0: ffffffff8fc88588 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 386.207164][ T30] 3 locks held by syz-executor/12277: [ 386.212548][ T30] #0: ffff88805a22cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 386.223364][ T30] #1: ffff88805a22c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 386.233435][ T30] #2: ffffffff8fdf4d28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 386.243606][ T30] 7 locks held by syz-executor/12332: [ 386.249153][ T30] #0: ffff88802fd70420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 386.258404][ T30] #1: ffff888025375c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 386.268396][ T30] #2: ffff888028e0d0f8 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 386.278561][ T30] #3: ffffffff8f527488 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 386.289645][ T30] #4: ffff88805a2320e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 386.300339][ T30] #5: ffff88805a233250 (&devlink->lock_key#55){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 386.310630][ T30] #6: ffffffff8fc88588 (rtnl_mutex){+.+.}-{3:3}, at: unregister_netdevice_notifier_net+0x89/0x3a0 [ 386.322517][ T30] 1 lock held by syz.4.1694/12385: [ 386.327797][ T30] #0: ffffffff8fc88588 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 386.337459][ T30] 1 lock held by syz.4.1694/12386: [ 386.342571][ T30] #0: ffffffff8fc88588 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 386.396561][ T30] [ 386.398936][ T30] ============================================= [ 386.398936][ T30] [ 386.428640][ T30] NMI backtrace for cpu 1 [ 386.433017][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 386.443180][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 386.453233][ T30] Call Trace: [ 386.456508][ T30] [ 386.459435][ T30] dump_stack_lvl+0x241/0x360 [ 386.464122][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 386.469319][ T30] ? __pfx__printk+0x10/0x10 [ 386.473904][ T30] ? vprintk_emit+0x667/0x7c0 [ 386.478577][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 386.483597][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 386.488541][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 386.493993][ T30] ? _printk+0xd5/0x120 [ 386.498144][ T30] ? __pfx__printk+0x10/0x10 [ 386.502729][ T30] ? __wake_up_klogd+0xcc/0x110 [ 386.507576][ T30] ? __pfx__printk+0x10/0x10 [ 386.512165][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 386.517185][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 386.523170][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 386.529160][ T30] watchdog+0xff4/0x1040 [ 386.533405][ T30] ? watchdog+0x1ea/0x1040 [ 386.537830][ T30] ? __pfx_watchdog+0x10/0x10 [ 386.542509][ T30] kthread+0x2f0/0x390 [ 386.546579][ T30] ? __pfx_watchdog+0x10/0x10 [ 386.551256][ T30] ? __pfx_kthread+0x10/0x10 [ 386.555847][ T30] ret_from_fork+0x4b/0x80 [ 386.560257][ T30] ? __pfx_kthread+0x10/0x10 [ 386.564847][ T30] ret_from_fork_asm+0x1a/0x30 [ 386.569619][ T30] [ 386.575128][ T30] Sending NMI from CPU 1 to CPUs 0: [ 386.581533][ C0] NMI backtrace for cpu 0 [ 386.581545][ C0] CPU: 0 UID: 0 PID: 5388 Comm: kworker/0:7 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 386.581565][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 386.581576][ C0] Workqueue: events nsim_dev_trap_report_work [ 386.581599][ C0] RIP: 0010:__sanitizer_cov_trace_switch+0x90/0x120 [ 386.581622][ C0] Code: 85 d2 75 14 e9 9a 00 00 00 41 b8 05 00 00 00 4d 85 d2 0f 84 8b 00 00 00 4c 8b 4c 24 20 65 4c 8b 1c 25 80 d4 03 00 31 d2 eb 08 <48> ff c2 49 39 d2 74 71 4c 8b 74 d6 10 65 8b 05 b4 41 70 7e 25 00 [ 386.581636][ C0] RSP: 0018:ffffc90004c67580 EFLAGS: 00000293 [ 386.581650][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff888078c59e00 [ 386.581662][ C0] RDX: 0000000000000005 RSI: ffffffff8e7a3da0 RDI: 0000000000000005 [ 386.581673][ C0] RBP: 0000000000000005 R08: 0000000000000005 R09: ffffffff81412f0e [ 386.581684][ C0] R10: 0000000000000008 R11: ffff888078c59e00 R12: ffffffff9029820c [ 386.581696][ C0] R13: dffffc0000000000 R14: 0000000000000007 R15: 1ffff9200098ced0 [ 386.581708][ C0] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 386.581723][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 386.581734][ C0] CR2: 00007fd022135f40 CR3: 000000000e734000 CR4: 00000000003506f0 [ 386.581749][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 386.581760][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 386.581771][ C0] Call Trace: [ 386.581778][ C0] [ 386.581785][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 386.581804][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 386.581826][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 386.581843][ C0] ? nmi_handle+0x2a/0x5a0 [ 386.581868][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 386.581888][ C0] ? nmi_handle+0x14f/0x5a0 [ 386.581903][ C0] ? nmi_handle+0x2a/0x5a0 [ 386.581920][ C0] ? __sanitizer_cov_trace_switch+0x90/0x120 [ 386.581945][ C0] ? default_do_nmi+0x63/0x160 [ 386.581964][ C0] ? exc_nmi+0x123/0x1f0 [ 386.581982][ C0] ? end_repeat_nmi+0xf/0x53 [ 386.582003][ C0] ? unwind_next_frame+0x7be/0x2a00 [ 386.582026][ C0] ? __sanitizer_cov_trace_switch+0x90/0x120 [ 386.582046][ C0] ? __sanitizer_cov_trace_switch+0x90/0x120 [ 386.582068][ C0] ? __sanitizer_cov_trace_switch+0x90/0x120 [ 386.582087][ C0] [ 386.582093][ C0] [ 386.582101][ C0] unwind_next_frame+0x7be/0x2a00 [ 386.582127][ C0] ? worker_thread+0x870/0xd30 [ 386.582146][ C0] ? worker_thread+0x870/0xd30 [ 386.582164][ C0] ? __kernel_text_address+0xd/0x40 [ 386.582180][ C0] ? worker_thread+0x870/0xd30 [ 386.582197][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 386.582217][ C0] arch_stack_walk+0x151/0x1b0 [ 386.582236][ C0] ? worker_thread+0x870/0xd30 [ 386.582257][ C0] stack_trace_save+0x118/0x1d0 [ 386.582277][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 386.582297][ C0] ? mark_lock+0x9a/0x350 [ 386.582321][ C0] kasan_save_track+0x3f/0x80 [ 386.582340][ C0] ? kasan_save_track+0x3f/0x80 [ 386.582356][ C0] ? kasan_save_free_info+0x40/0x50 [ 386.582372][ C0] ? poison_slab_object+0xe0/0x150 [ 386.582392][ C0] ? __kasan_slab_free+0x37/0x60 [ 386.582410][ C0] ? kmem_cache_free+0x145/0x350 [ 386.582425][ C0] ? nsim_dev_trap_report_work+0x765/0xaa0 [ 386.582441][ C0] ? process_scheduled_works+0xa2c/0x1830 [ 386.582459][ C0] ? worker_thread+0x870/0xd30 [ 386.582505][ C0] ? nsim_dev_trap_report_work+0x765/0xaa0 [ 386.582521][ C0] kasan_save_free_info+0x40/0x50 [ 386.582538][ C0] poison_slab_object+0xe0/0x150 [ 386.582558][ C0] ? nsim_dev_trap_report_work+0x765/0xaa0 [ 386.582574][ C0] __kasan_slab_free+0x37/0x60 [ 386.582593][ C0] kmem_cache_free+0x145/0x350 [ 386.582612][ C0] nsim_dev_trap_report_work+0x765/0xaa0 [ 386.582639][ C0] ? process_scheduled_works+0x945/0x1830 [ 386.582657][ C0] process_scheduled_works+0xa2c/0x1830 [ 386.582691][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 386.582716][ C0] ? assign_work+0x364/0x3d0 [ 386.582737][ C0] worker_thread+0x870/0xd30 [ 386.582760][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 386.582783][ C0] ? __kthread_parkme+0x169/0x1d0 [ 386.582805][ C0] ? __pfx_worker_thread+0x10/0x10 [ 386.582824][ C0] kthread+0x2f0/0x390 [ 386.582844][ C0] ? __pfx_worker_thread+0x10/0x10 [ 386.582861][ C0] ? __pfx_kthread+0x10/0x10 [ 386.582882][ C0] ret_from_fork+0x4b/0x80 [ 386.582901][ C0] ? __pfx_kthread+0x10/0x10 [ 386.582920][ C0] ret_from_fork_asm+0x1a/0x30 [ 386.582953][ C0] [ 386.586934][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 386.586950][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 386.586972][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 386.586983][ T30] Call Trace: [ 386.586991][ T30] [ 386.587000][ T30] dump_stack_lvl+0x241/0x360 [ 386.587031][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 386.587057][ T30] ? __pfx__printk+0x10/0x10 [ 386.587078][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 386.587108][ T30] ? vscnprintf+0x5d/0x90 [ 386.587130][ T30] panic+0x349/0x860 [ 386.587155][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 386.587176][ T30] ? __pfx_panic+0x10/0x10 [ 386.587197][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 386.587218][ T30] ? __irq_work_queue_local+0x137/0x410 [ 386.587242][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 386.587262][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 386.587281][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 386.587304][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 386.587328][ T30] watchdog+0x1033/0x1040 [ 386.587353][ T30] ? watchdog+0x1ea/0x1040 [ 386.587382][ T30] ? __pfx_watchdog+0x10/0x10 [ 386.587405][ T30] kthread+0x2f0/0x390 [ 386.587436][ T30] ? __pfx_watchdog+0x10/0x10 [ 386.587458][ T30] ? __pfx_kthread+0x10/0x10 [ 386.587483][ T30] ret_from_fork+0x4b/0x80 [ 386.587504][ T30] ? __pfx_kthread+0x10/0x10 [ 386.587528][ T30] ret_from_fork_asm+0x1a/0x30 [ 386.587565][ T30] [ 386.589432][ T30] Kernel Offset: disabled [ 387.178829][ T30] Rebooting in 86400 seconds..