last executing test programs: 18.273408847s ago: executing program 4 (id=4313): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0xe76da000) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[], 0x3c}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x7) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x24, r6, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040010}, 0x8080) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f00000001c0)={'veth1_to_team\x00', @broadcast}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="000000005200000428bd7000fcdbdf251c0900060001070000000006000200000083cd83736ff4bef4000000"], 0x44}, 0x1, 0x0, 0x0, 0x24000006}, 0x20000090) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) 18.172336927s ago: executing program 1 (id=4317): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000180)="392b5766e5", 0x5}], 0x1) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e1c, @empty}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x800, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000003c0)={&(0x7f0000000240)="97", 0x0, 0x0, 0x0, 0x8, r2}, 0x38) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0xfcbe}], 0x2, &(0x7f0000000040)=[@ip_tos_u8={{0x11, 0x0, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x38}, 0x40010) getpeername(r0, 0x0, &(0x7f0000000240)) 17.982591316s ago: executing program 1 (id=4320): syz_emit_ethernet(0x7c, &(0x7f00000000c0)={@random="856b934629fa", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "fbff00", 0x46, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x8933, [0x4]}, {}, {}, {0xa888}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x2a}}}}}}}}}, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{&(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x20047f7f) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x6, @private2, 0x2}, 0x1c) 17.799705149s ago: executing program 1 (id=4322): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000005c0), 0x10) recvmmsg(r5, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000480)=""/214, 0xd6}], 0x2}, 0x7}], 0x2, 0x10002, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x1, 0x2}, 0x4) sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x180, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x150, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xd4fb, 0x0, 0x0, 0x5c4, 0x8002, 0x0, 0xfffc, 0x3dc], [0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MIN_RATE64={0x70, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x6}, {0xc}, {0xc, 0x3, 0x8000}, {0xc, 0x3, 0x5}, {0xc, 0x3, 0xe}, {0xc, 0x3, 0x8}, {0xc, 0x3, 0x6}, {0xc, 0x3, 0x7}, {0xc, 0x3, 0x8001}]}, @TCA_MQPRIO_MIN_RATE64={0x88, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x9}, {0xc, 0x3, 0x3}, {0xc, 0x3, 0x8}, {0xc, 0x3, 0x4}, {0xc, 0x3, 0x2}, {0xc, 0x3, 0x81}, {0xc, 0x3, 0x9}, {0xc, 0x3, 0x7ff}, {0xc, 0x3, 0x9}, {0xc, 0x3, 0x9}, {0xc, 0x3, 0x300000}]}]}}}]}, 0x180}}, 0x20000000) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0xffffffffffffff43}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0xfffffffffff80000}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 17.798151747s ago: executing program 4 (id=4324): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14050000360001002dbd7000030000000205", @ANYBLOB], 0x514}], 0x1, 0x0, 0x0, 0x24008080}, 0x0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x8}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071100d000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) 17.566216554s ago: executing program 3 (id=4327): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff85000000ae000000b7080000300000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={0x1c, r3, 0x4, 0xfffffffd, 0x0, {{0x7e}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}]]}, 0x1c}}, 0x4000054) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r3, 0xc20, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x2d}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x10) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @remote}, &(0x7f00000000c0)=0xc) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020081000401a8000100fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) (async) sendmsg$kcm(r6, &(0x7f0000000a00)={&(0x7f00000003c0)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000500)="c8d0a14b07fa91616edbd918135207d3a9e0ee250e9c577e16a57eee0fcca2d51dcccc007b79d5708ceaaafb8d", 0x2d}, {&(0x7f0000000540)="183f0d958d90c8d9a6250cd729081d8d9134990fbced338886922d3b9e061ad90fdc2260b9071a9bfd5347a4109f64bc2673f63d3f53540dcb37f62b8345c596914ed865aa8770369c672e1a17d46c30b21d63960a33403a81d01de786cc9b5460c91976e370d6abc60d0a74f0ab7af7c38cdf4728d34d8570dab9a2e50d6b1107a9519769bd0b37f04aed2ed8629413900253e5c99d9d89ae26c065b4f98226b6f59960301559f692dc63f29782a8bbf81e9d419665a15321656bd89d769d7e52c9f5f3bb27fa6e5d014af4147241cbcfc96c338914ffdcececc3559b0d8a331a678ebd973e38ceef8cd8f2ba", 0xed}, {&(0x7f0000000700)="05aecb44444bed3cd8fc119dd3da91332ae274bb49de119fff4f4154e2a6ab065a744824bc21ea4e9abe2a442fc151974789a7e6e84da5b569b44640372a7d93b36561f8306c81623e6e3abae89f81629264ca2dab1a1f8f6e3616c9b426fc0e759f6cc89cc560d2aa818a85abc47b0c4fa18bc7a27eae770ca6f07ddbe7c15dda1682437074a36840ed7b7e284faee69a0e28312a4ea1e35d030b75e142de0e1df4b2a94c54481ef253a3ae8dfde7b7854df7e80c188bdcfb", 0xb9}, {&(0x7f00000007c0)="12b3cff54325bc15a9adcbf0e559c1a1d1ebc0516837cedf21343ad0f97604f3b88714137225bcb6abac2d8a9cdb7938c354ab205238f8f956dea27e2c4a2e0d31d90ab15a01ad4762b63eaf47a0ddb62ee32f996b1121f0cb6ee5f4d66189a74a2dab2c17b1a2523877669afa29882742ec4363794601f2066e0ca15a6a31bd837eee1968e8d4afe179af149042cd59933efe2674a18b709588ea9808bc5d49868b759f2f5f6546a6818bac791832a353a313144d8334fa58649e06f8b658b48dc9510c41e8b048b4d60734093ae28e84f6c0d139fc773c4a8a0fa1bc87928c1e8d0cd55a914b67857f5c6c1b53", 0xee}, {&(0x7f00000008c0)="a7d96f5df65a5c31bd8ae485216eba82fa2e99d5e9e3021c4c520dac181b6bbaae0830be5c9ba085805892fdf0ceb14d4be284dd487ff7b26fb9ababb319ea0123981bbdc3bd2574b7e41dd48a09529b57673c23a61ec296f46851a5ecb0e207b400c1a7f361dd5dbbadd08bab937439d79f28b70852b8556dc107594139271de8acfdf50ca45d7932e5c39b451d9c9a84b7132ce5798a07054bf98d1dbfcdcb0db10881f6a66bee19489ea16935876f23f703d43fe6d0bc82c5c3", 0xbb}, {&(0x7f0000000640)="302417bf9f81a31aaf25b8208afcbb6d144afeaa6d8996a7f11b43b238c522fa8875de619996e8cf98965a8c70e8507b19b9018a74369af5a7a8cced4e10f6417b2c9ff09e3924bef782a40fcba2311de3b5b7b54f0ec9bef6", 0x59}], 0x6}, 0x4) accept4(r0, 0x0, &(0x7f0000000380), 0x180000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="050000000000000071117100000000008510000002000000850000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r5, @fallback=0x1d, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 17.493418582s ago: executing program 3 (id=4328): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)=0xe, 0x4) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x7c}}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, 0x0, 0x32600) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (rerun: 64) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@private1={0xfc, 0x1, '\x00', 0x3}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x24}, 0x9, 0x8, 0x0, 0x0, 0x4, 0x200002}) 17.222335376s ago: executing program 4 (id=4329): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x442400, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/66, 0x42}, {&(0x7f0000000400)=""/239, 0xef}, {&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f0000000040)=""/12, 0xc}, {&(0x7f0000000600)=""/222, 0xde}, {&(0x7f0000000240)=""/12, 0xc}, {&(0x7f00000002c0)=""/43, 0x2b}], 0x7, 0x888, 0x9) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x29, 0x77, 0x9, 0x2, 0x42, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x7800, 0x10, 0x68000, 0x620bca37}}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f0000000740), 0x4) close(r1) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'xfrm0\x00'}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0)='4', 0x1) tee(r7, r6, 0xffffffffffffffff, 0x2) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x5e}, [@NDA_DST_IPV6={0x14, 0x1, @private2}]}, 0x30}}, 0x0) listen(r9, 0x7fffffff) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSACCEPT(r10, 0x89e3) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x1, @broadcast}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000840)='\'', 0x1}], 0x1}, 0x4) 17.175752962s ago: executing program 0 (id=4330): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0xc, 0x5, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3800000012140100000000000000000008004f0000000000080001000000000008004b00130080000800150000000000080003"], 0x38}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3800000012140100000000000000000008004f0000000000080001000000000008004b00130080000800150000000000080003"], 0x38}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) socket(0x15, 0x7, 0x1) (async) socket(0x15, 0x7, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x14, 0x30, 0xb, 0x70bd26}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@deltaction={0x168, 0x31, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6d}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x60}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe9a}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x168}}, 0x40810) 17.041012716s ago: executing program 2 (id=4332): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$nci(r1, 0x0, 0x7) socket$inet_sctp(0x2, 0x1, 0x84) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14, 0x800) (async) r6 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14, 0x800) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0x2e, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x42d, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @alu={0x4, 0x0, 0x4, 0x1, 0x2, 0xfffffffffffffff8, 0x4}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb5}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @exit, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3fe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0xd7, 0x14, &(0x7f00000001c0)=""/20, 0x41000, 0x50, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000240)=[0xffffffffffffffff, r0], &(0x7f00000002c0)=[{0x5, 0x1, 0x4, 0x1}, {0x0, 0x8, 0x9, 0x9}, {0x0, 0x5, 0x5, 0x4}, {0x3, 0x4, 0x9, 0x6}], 0x10, 0x5}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r7, 0xffffffffffffffff, 0x3, 0x0, @void}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @empty, 0x4e23, 0x3, 'ovf\x00', 0x1, 0x7, 0x4f}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r8, r10, 0x25, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r11, r8, 0x4, r8}, 0x10) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r11, r8, 0x4, r8}, 0x10) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e21, 0x12002, 0xf, 0xe1b2, 0xfffffffd}}, 0x44) (async) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e21, 0x12002, 0xf, 0xe1b2, 0xfffffffd}}, 0x44) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r12, &(0x7f0000000780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x60, r13, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x60}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xb}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x276}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x40004) (async) sendmsg$NL80211_CMD_NOTIFY_RADAR(r12, &(0x7f0000000780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x60, r13, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x60}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xb}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x276}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x40004) 16.865895662s ago: executing program 0 (id=4333): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x9383, 0x4}, 0x1}}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}}, 0x0) 16.865456392s ago: executing program 4 (id=4334): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x460}]}, 0x28}}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000080)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e22, @local}, 0x90, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x7fffffffffffffff, 0x8}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@deltaction={0x44, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x44}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000440)={'wg1\x00', 0x0}) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r4, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_FAMILY={0x5, 0xd, 0x2a}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_FLOW={0x6}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x19}}, @GTPA_LINK={0x8, 0x1, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20048004) socket$can_bcm(0x1d, 0x2, 0x2) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r7, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x50, r8, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40000040) bind$bt_l2cap(r6, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c8c5}, 0x8000) listen(r6, 0x0) accept4(r6, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r6) r10 = socket$inet6(0xa, 0x80002, 0x88) sendmmsg$inet(r10, &(0x7f0000003b40)=[{{&(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10, 0x0}}, {{&(0x7f0000001b00)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000037c0)=[@ip_ttl={{0x10, 0x0, 0x2, 0x10001}}], 0x10}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc4}}], 0x3, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) 16.750609953s ago: executing program 0 (id=4335): syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x5}, @device_a, @broadcast, @random="17a4226dd1db", {0x0, 0xff}, @value=@ver_80211n={0x0, 0xc, 0x2, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}}, 0x9, 0x62, @random=0xd63, @void, @val={0x2d, 0x1a, {0x20, 0x1, 0x1, 0x0, {0x3, 0x7, 0x0, 0x2ff, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x800, 0x7f, 0xfd}}, [{0xdd, 0x43, "fe0140d0d1ddb836ea1a48f672241194d0ee193d9adcf8d7f3308336724e0b5502cc0f598e565c54f9a3a74d0671f33fa4a0965c795cc4e519f18bc01e6c551fd45072"}, {0xdd, 0xdb, "bc67378bf2386a4a91f9618c9e9d412dfc63232f249ea86dc3984ab5bbc3764ef151c831993e97169fe17632be85a61b2171ae7017c92d441d097ade9eb0fd28b5f4edbee3115479cda9c9375b32d6b65bb590a926420adb22816fa21868759431e07afe9fe59450dacfd98e1a2f84c9a77b167257d7e76bdbbe2a5e5ae2d5b7591d2c929ad570440df8aa76c28483391feb71d8db487d34e3677a75a0dcdf353919ebba8409b9035a088165f79d8783ff19391e0943e542fcda5792280149d93e12e874d30fe125f7929ba3f8d36dab0916179e70fc466bbb0262"}, {0xdd, 0x2f, "c28bb84563f8e6eda5deeb816aeb2c1501b40d24599404da579da19993b939fa23c12720e37a4c889170d2823329e4"}, {0xdd, 0xf1, "e7758d12cbf042add24876938ac26a80fe94b08c854b764213bf0135cbf0a0c7b911c8fabe9d37b20c37f4ee868463165baa8560e7afa04f843063159100a1806c39607ba245f7a8cae23d7cf223c22fda96b4b2ad1686bd809236dcb988640d044220e7c95fb0f4539c9fc8552b70513ba531a15dc99589fcaa5e01581db06f6912f4d1530304c271643f12d238f8477f05de7640543a7826dedac28d45ff4d071465debfae6f822558f7f34d60bfcbe74964ea8269f2a92ec99794b1c4c41c0a83309a57f6369fe29856445e39ba57694f448f442666ac46d4b160357b9e47eeee8d9ac08bd696402c9a5222b7509aab"}]}, 0x284) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@ifindex, 0x2e, 0x0, 0x2cce, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x5, 0x0, 0x20, @private2, @empty, 0x80, 0x7, 0x8001, 0x1a}}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000580)={0x6, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@ifindex=r3, r1, 0x13, 0x2024, 0x0, @void, @void, @value=r4, @void, r2}, 0x20) ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, &(0x7f00000005c0)={0x18, 0x0, "e410ce9574e35161c137a06636a76b68"}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000600)='blkio.bfq.empty_time\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r7, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1ff}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x24000050) r8 = accept(r0, 0x0, &(0x7f0000000780)) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000800), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, r9, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r10 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$FIBMAP(r10, 0x1, &(0x7f0000000900)=0x46) getsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000940), &(0x7f0000000980)=0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x7c, r11, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x30, 0x33, @mgmt_frame=@deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x7ff8}, @broadcast, @device_b, @from_mac=@device_b, {0xe, 0x3}}, 0x2e, @val={0x8c, 0x10, {0x59b, "0149eb65cccb", @short="5663188780ad63f3"}}}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6006}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4040004}, 0x200000c4) r12 = openat$cgroup(r1, &(0x7f0000000b40)='syz0\x00', 0x200002, 0x0) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r12, 0xc0205866, &(0x7f0000000f00)={&(0x7f0000000b80), 0xdd, &(0x7f0000000bc0)=[{}, {}, {}, {}], &(0x7f0000000ec0)}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000f40)=0x2) sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x34, r11, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x38}}}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x3}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4090}, 0x40) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000001380)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001340)={&(0x7f00000010c0)={0x26c, r11, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x35}}}}, [@NL80211_ATTR_TX_RATES={0x24c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x36, 0xb, 0x6c, 0xb, 0x36, 0xc, 0x24, 0x6, 0x6c, 0x3, 0xc, 0x48, 0x30, 0xc, 0x6c, 0x12, 0x5, 0xc, 0xb, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x2, 0x80, 0x1ff, 0x2000, 0xb73, 0xa9d9, 0x3e9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x0, 0x0, 0x4, 0xfa1b, 0x100, 0xf6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0xa}, {0x2}, {0x0, 0xa}, {0x6, 0x5}, {0x1, 0xa}, {0x1, 0x1}, {0x0, 0x8}, {0x2, 0x9}, {0x4, 0x1}, {0x6, 0x3}, {0x7, 0x6}, {0x6, 0x1}, {0x3, 0x9}, {0x3, 0x1}, {0x0, 0xa}, {0x5, 0x6}, {0x7, 0x8}, {0x6, 0x3}, {0x6, 0x5}, {0x5}, {0x7, 0x1}, {0x0, 0x9}, {0x1}, {0x4, 0x1}, {0x6}, {0x7, 0xa}, {0x3, 0x7}, {0x1, 0x8}, {0x2, 0x2}, {0x3, 0x1}, {0x1, 0x6}, {0x7, 0xa}, {0x1, 0x7}, {0x6, 0xa}, {0x5, 0x5}, {0x1, 0xa}, {0x1, 0x2}, {0x7, 0x9}, {0x7, 0x8}, {0x3, 0x8}, {0x7, 0x5}, {0x1, 0x4}, {0x0, 0x2}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x4, 0x7}, {0x4, 0xa}, {0x1, 0x5}, {0x4, 0x6}, {0x2, 0x2}, {0x4}, {0x3, 0x5}, {0x2, 0x4}, {0x7, 0x2}, {0x1, 0x6}, {0x0, 0x7}, {0x0, 0x2}, {0x2, 0x1}, {0x1}, {0x5, 0x8}, {0x5, 0x5}, {0x3, 0x4}, {0x2, 0x7}, {0x0, 0x2}, {0x1, 0x2}, {0x1, 0x9}, {0x1, 0x3}, {0x1, 0x1}, {0x4, 0x9}, {0x4, 0x7}, {}, {0x1, 0x4}, {0x0, 0xe}, {0x1, 0x5}, {0x1, 0x7}, {0x6, 0x8}]}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x7, 0x2}, {0x1, 0x4}, {0x1, 0x5}, {0x3, 0x2}, {0x1, 0x4}, {0x2, 0x1}, {0x4, 0x5}, {0x0, 0x9}, {0x6, 0x3}, {0x3, 0xa}, {0x0, 0x9}, {0x5}, {0x3, 0x9}, {0x4, 0x3}, {0x5, 0x1}, {0x0, 0x5}, {0x4, 0xa}, {0x0, 0x4}, {}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x9, 0x36, 0x18, 0x60, 0x24, 0x48, 0x6c, 0x6, 0x5]}]}, @NL80211_BAND_2GHZ={0xa8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x1000, 0x4, 0x8, 0x8, 0x5, 0x8001, 0x6]}}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x0, 0x2}, {0x4, 0x3}, {0x0, 0x3}, {0x4, 0x7}, {0x6, 0x7}, {0x4, 0x6}, {0x7, 0x10}, {0x5, 0x3}, {0x6, 0x5}, {0x0, 0x7}, {0x2, 0x1}, {0x1, 0x6}, {0x2, 0x4}, {0x4, 0x5}, {0x1, 0x1}, {0x0, 0x3}, {0x3, 0x9}, {0x1, 0xa}, {0x2, 0x1}, {0x6, 0xa}, {0x1, 0x7}, {0x6, 0x1}, {0x5, 0x5}, {0x2, 0x7}, {0x5, 0x3}, {0x3, 0x9}, {0x4, 0xa}, {0x6, 0x3}, {0x3, 0x9}, {0x7}, {0x4, 0x9}, {0x0, 0x6}, {0x7}, {0x5, 0x9}, {0x1, 0x1}, {0x1}, {0x6, 0x1}, {0x0, 0x8}, {}, {0x0, 0x3}, {0x0, 0x5}, {0x0, 0x6}, {0x5, 0x8}, {0x0, 0xa}, {0x1, 0x9}, {0x0, 0x9}, {0x0, 0x7}, {0x1, 0x5}, {0x6, 0x5}, {0x2, 0x2}, {0x5, 0x7}, {0x4, 0x7}, {0x1}, {0x6, 0x4}, {0x0, 0x2}, {0x1, 0x8}, {0x5, 0x2}, {0x1, 0x8}, {0x0, 0x6}, {0x0, 0x1}, {0x7, 0x6}, {0x6, 0xa}, {0x4, 0x5}, {0x6, 0x8}, {0x4}, {0x1, 0xa}, {0x7}, {0x5, 0x7}, {0x2, 0x1}, {0x5, 0x2}, {0x0, 0xa}, {0x6, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xf3, 0x9, 0x1000, 0x9, 0xc, 0x662, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0x81, 0x6, 0x6, 0x100, 0x2, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc28, 0xfffb, 0x1844, 0xfffc, 0x1, 0x8, 0xfffd, 0x8ac]}}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x7, 0xc, 0x6, 0x7fff, 0x6, 0xe5c6, 0x8c]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3, 0x5, 0x0, 0x3, 0x9, 0x0, 0xf800]}}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xb, 0x16, 0x18, 0x5, 0x36, 0x1b, 0xa, 0x12, 0x6, 0x48, 0x2, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x9, 0x4, 0x9b, 0x1, 0xd3, 0x0, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x7, 0x53, 0xa, 0x4, 0xf7, 0x8, 0xd0]}}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x3, 0x8}, {0x1, 0x1}, {0x6, 0x7}, {0x1, 0x8}, {0x0, 0x4}, {0x1, 0x1}, {0x0, 0x5}, {0x4, 0x8}, {0x2}, {0x6, 0x5}, {0x3, 0x7}, {0x2, 0x2}, {0x2, 0x2}, {0x5, 0x9}, {0x3, 0x5}, {0x7, 0x2}, {0x1}, {0x6, 0x2}, {0x2}, {0x5, 0x7}, {0x4, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0x2, 0x3, 0xe, 0x4, 0x8001, 0x79]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x5, 0x7, 0x4f, 0x6, 0x3, 0x8000, 0x5]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x24044040}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x51008000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x20, r11, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x48050) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000014c0)=0x7, &(0x7f0000001500)=0x2) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001580), r0) sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x48, r13, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0xc0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f00000016c0)) 16.705239719s ago: executing program 2 (id=4336): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x8, 0x6, 0x3, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000000c0)={r3, 0x6, 0x10, 0xce09, 0x2c8}, &(0x7f0000000100)=0x18) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90c1, 0x5c81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x48010) 16.539344772s ago: executing program 1 (id=4337): ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100}, 0x95) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @dev={0xac, 0x14, 0x14, 0x19}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast2}}}}, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000200)=0x3, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 16.539074391s ago: executing program 3 (id=4338): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x5475d, 0xfd6f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20048000}, 0x48000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r4, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010102}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x20000001) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r4, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010102}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x20000001) syz_emit_ethernet(0x66, &(0x7f0000000880)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x1, @remote, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0x600, 0x3c, 0x2, @dev={0xfe, 0x80, '\x00', 0x35}, @local}}}}}}}, 0x0) 16.446254799s ago: executing program 2 (id=4339): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000003c0)={0x0, 0x3}, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 16.2364114s ago: executing program 3 (id=4340): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000140), 0x0}, 0x20) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(0xffffffffffffffff, 0x568) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r3, 0x0, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001000)={r0, &(0x7f0000000c40)="c828ee6acd833ea5f1118812ab46a835775e53fb1daa47f3752d1c0f1b778868323321cdde3e7daedbf3928b643aa67492f28ff8ddc1d985ea1f7df65a9ca9fd4e9bf046", &(0x7f0000000140)=@tcp6=r4, 0x3}, 0x20) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r5, &(0x7f0000000540)}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000"/139], 0xfc}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0x8, 0x620, 0x0, 0x0) (async) shutdown(r1, 0x1) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r7, 0x118, 0x1, 0x0, 0x0) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r7, 0x8983, &(0x7f0000000100)={0x7, 'ip6erspan0\x00', {0x1000}, 0x7}) 16.167765981s ago: executing program 2 (id=4341): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 64) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) (rerun: 64) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) (async) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) (async) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r6, 0x0, r4}, 0x10) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe}, {}, {0x7, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) (async) ioctl$sock_x25_SIOCADDRT(r7, 0x890b, &(0x7f0000000100)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}, 0x7, 'pim6reg0\x00'}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r11, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x1}], 0x1) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x4000010, r10, 0xde0fd000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYRESOCT=0x0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0xcb650946a060a0d3, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 16.090871743s ago: executing program 2 (id=4342): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x20, 0xfc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2200}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 16.086952854s ago: executing program 3 (id=4343): r0 = socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0xae, &(0x7f0000000240)={@random="05b1ff035660", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x78, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1803"}, {0x0, 0x1, "000001000000000000000000"}, {0x0, 0x1, "fe906d26efe3"}]}}}}}}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x201}}, @init={0x18, 0x84, 0x0, {0x9, 0x7, 0xd, 0x434}}], 0x48}, 0x0) 15.943557437s ago: executing program 2 (id=4344): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x2c}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xd, &(0x7f0000000040), 0x4) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000000c0)) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="20002800fddbdf2501000000080002914fc9b1d80d1b8a4b403d51079c940001000000300008802c00078008000600ee00000008000500e6f4fa6008000600270000000800050088d2971a08000600ae0000002c000c801c000b8008000a004d1b000008000900a1c26e2008000a00d57400"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x4004004) r4 = socket$inet(0x2, 0x4fb53158c077ebb9, 0x7) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 15.941632105s ago: executing program 3 (id=4345): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000800)=@ethtool_rxnfc={0x2f, 0x0, 0x0, {0x0, @udp_ip4_spec={@private, @dev}, {0x0, @link_local}, @usr_ip4_spec={@multicast1, @remote}, {0x0, @remote}}}}) r1 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @netrom}, [@rose, @remote, @netrom, @bcast, @rose, @default, @remote, @bcast]}, &(0x7f0000000000)=0x48, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@private1}}, &(0x7f0000000080)=0xe8) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f00000002c0)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, r2}) writev(0xffffffffffffffff, 0x0, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_ax25_SIOCADDRT(r7, 0x890b, &(0x7f0000004800)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x40, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r7, 0x4058587a, &(0x7f00000005c0)={{r0, &(0x7f0000000400)='nfc\x00', 0x2100, &(0x7f0000000440)={@_ha_fsid={[0x89, 0x101]}, {0x3d4b, 0x2, 0xeb, 0xfffffffffffffffd}}, 0x9, &(0x7f00000004c0), &(0x7f0000000500)=0x8}, {[0xe, 0x8001, 0x8c, 0xa]}, 0x8, 0x63, &(0x7f0000000540)=""/99}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000020c0)=@can_delroute={0x3c, 0x19, 0x1, 0x1000, 0x0, {0x1d, 0x1, 0x1}, [@CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "89543896f10eee1e"}, 0x2}}, @CGW_MOD_UID={0x8}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffa, 0x0, 0xfffffffffffffff8}}]}, 0x3c}}, 0x0) socket(0x10, 0x3, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)={0x54, r8, 0x221, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8e}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '#\''}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x54}}, 0x20000004) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r11], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4008054) write$nci(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="7105030908e8d5c40f0d"], 0x19) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$unix(0x1, 0x2, 0x0) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r15, @ANYBLOB="0c0099ff070000700000003000000087530000"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 15.941074298s ago: executing program 0 (id=4346): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x1200000, 0x1000, 0x0, 0x2}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x1321c22, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2, 0x1000000}, 0x10) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000004c0), &(0x7f0000000500)=0x30) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000200)="64881517955001ad5a4d43fe0501552207826f3884b2fe4d13826c76f2a3b7", 0x1f, 0x4000001, &(0x7f0000000240)={0x11, 0x1b, r2, 0x1, 0x6, 0x6, @broadcast}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) 15.903094999s ago: executing program 4 (id=4347): r0 = socket(0x10, 0x3, 0x0) r1 = gettid() sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xff05, 0x70bd28, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x42c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r1}]}, 0x3c}}, 0x8000) 15.678010806s ago: executing program 1 (id=4348): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x36}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000001c0)={r1, &(0x7f00000000c0)='\x00', 0x438000, &(0x7f0000000100)={@_ha_fsid={[0x2]}, {0xe, 0xa5, 0x8, 0xfffffffffffffff8}}, 0x0, &(0x7f0000000140), &(0x7f0000000180)}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5}, 0x50) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0\x00'}, 0x18) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) ioctl$FICLONE(r5, 0x40049409, r5) (async, rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async, rerun: 64) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f00000008c0)={'tunl0\x00', 0x0, 0x1, 0x740, 0x4, 0x6, {{0x26, 0x4, 0x2, 0x0, 0x98, 0x67, 0x0, 0x3, 0x29, 0x0, @empty, @remote, {[@timestamp={0x44, 0x2c, 0xbf, 0x0, 0x7, [0x200, 0x101, 0x4, 0x33afe47, 0xf8, 0xa, 0xf0b0, 0xedf, 0x3ff, 0x3]}, @cipso={0x86, 0x3d, 0x0, [{0x1, 0x10, "aaf724052e5256a1b9d48bc76523"}, {0x7, 0x11, "1686a005331272eee05ee0ee6944b2"}, {0x0, 0x7, "e87a32b83c"}, {0x2, 0xf, "03deb59f1094bbe8c8dd421951"}]}, @rr={0x7, 0x17, 0x68, [@private=0xa010100, @local, @remote, @empty, @loopback]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async, rerun: 64) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) recvfrom$x25(r9, 0x0, 0x0, 0x40, 0x0, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0x20, &(0x7f0000000a80)={&(0x7f0000000980)=""/214, 0xd6, 0x0, &(0x7f0000000540)=""/60, 0x3c}}, 0x10) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b40)=@o_path={&(0x7f0000000b00)='./file0\x00', 0x0, 0xc008, r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x4, 0x3a, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_fd={0x18, 0x6, 0x1, 0x0, r3}, @map_fd={0x18, 0x8, 0x1, 0x0, r4}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @jmp={0x5, 0x0, 0x3, 0x3, 0x0, 0x1, 0xffffffffffffffed}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x93, 0xeb, &(0x7f00000007c0)=""/235, 0x41100, 0x0, '\x00', r8, @fallback=0x3, r9, 0x8, &(0x7f0000000400)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x0, 0x800, 0x4}, 0x10, r10, 0xffffffffffffffff, 0x0, &(0x7f0000000b80)=[r11], 0x0, 0x10, 0x91}, 0x94) (async) r12 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x1, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 15.599762581s ago: executing program 4 (id=4349): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112db000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0xa8, 0x0, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback=0x7f000015}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x52be}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x900) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0x70d, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40806}, 0x24000800) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x80001}, 0x800) 15.564219975s ago: executing program 1 (id=4350): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05042bbd7000fedbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) 15.45978791s ago: executing program 0 (id=4351): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x2, 0x0, 0x70bd2c, 0x25dfdbfb}, 0x10}, 0x1, 0x7}, 0x4008000) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000004c40)={@ipv4={'\x00', '\xff\xff', @remote}, r3}, 0x14) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r1], 0x108}}], 0x2, 0xc040) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x1, @dev={0xac, 0x14, 0x14, 0x32}, @loopback}, "ffffff7f00000000"}}}}}, 0x0) 15.35978438s ago: executing program 0 (id=4352): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3f, 0x70bd27, 0x1, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x8001, 0x3, 0x5, 0xfffffff8}, @multicast1, @multicast1, 0xffffff00, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r4, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r5, 0x29, 0x46, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r9) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r12, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000040)=""/52, 0x34}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4079, 0xfef}, {&(0x7f00000002c0)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1, 0x10022, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xffffffc1) r13 = socket(0x10, 0x803, 0x0) sendfile(r13, r7, &(0x7f0000000000)=0x10, 0x1000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00'}) r14 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r14, &(0x7f0000000240)={0xa, 0x0, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x10}, 0x6}, 0x1c) 247.970792ms ago: executing program 32 (id=4352): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3f, 0x70bd27, 0x1, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x8001, 0x3, 0x5, 0xfffffff8}, @multicast1, @multicast1, 0xffffff00, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r4, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r5, 0x29, 0x46, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r9) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r12, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000040)=""/52, 0x34}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4079, 0xfef}, {&(0x7f00000002c0)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1, 0x10022, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xffffffc1) r13 = socket(0x10, 0x803, 0x0) sendfile(r13, r7, &(0x7f0000000000)=0x10, 0x1000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00'}) r14 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r14, &(0x7f0000000240)={0xa, 0x0, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x10}, 0x6}, 0x1c) 214.327083ms ago: executing program 33 (id=4350): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05042bbd7000fedbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) 156.813042ms ago: executing program 34 (id=4344): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x2c}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xd, &(0x7f0000000040), 0x4) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000000c0)) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="20002800fddbdf2501000000080002914fc9b1d80d1b8a4b403d51079c940001000000300008802c00078008000600ee00000008000500e6f4fa6008000600270000000800050088d2971a08000600ae0000002c000c801c000b8008000a004d1b000008000900a1c26e2008000a00d57400"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x4004004) r4 = socket$inet(0x2, 0x4fb53158c077ebb9, 0x7) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 85.489387ms ago: executing program 35 (id=4345): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000800)=@ethtool_rxnfc={0x2f, 0x0, 0x0, {0x0, @udp_ip4_spec={@private, @dev}, {0x0, @link_local}, @usr_ip4_spec={@multicast1, @remote}, {0x0, @remote}}}}) r1 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @netrom}, [@rose, @remote, @netrom, @bcast, @rose, @default, @remote, @bcast]}, &(0x7f0000000000)=0x48, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@private1}}, &(0x7f0000000080)=0xe8) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f00000002c0)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, r2}) writev(0xffffffffffffffff, 0x0, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_ax25_SIOCADDRT(r7, 0x890b, &(0x7f0000004800)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x40, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r7, 0x4058587a, &(0x7f00000005c0)={{r0, &(0x7f0000000400)='nfc\x00', 0x2100, &(0x7f0000000440)={@_ha_fsid={[0x89, 0x101]}, {0x3d4b, 0x2, 0xeb, 0xfffffffffffffffd}}, 0x9, &(0x7f00000004c0), &(0x7f0000000500)=0x8}, {[0xe, 0x8001, 0x8c, 0xa]}, 0x8, 0x63, &(0x7f0000000540)=""/99}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000020c0)=@can_delroute={0x3c, 0x19, 0x1, 0x1000, 0x0, {0x1d, 0x1, 0x1}, [@CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "89543896f10eee1e"}, 0x2}}, @CGW_MOD_UID={0x8}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffa, 0x0, 0xfffffffffffffff8}}]}, 0x3c}}, 0x0) socket(0x10, 0x3, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)={0x54, r8, 0x221, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8e}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '#\''}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x54}}, 0x20000004) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r11], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4008054) write$nci(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="7105030908e8d5c40f0d"], 0x19) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$unix(0x1, 0x2, 0x0) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r15, @ANYBLOB="0c0099ff070000700000003000000087530000"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 0s ago: executing program 36 (id=4349): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112db000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0xa8, 0x0, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback=0x7f000015}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x52be}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x900) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0x70d, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40806}, 0x24000800) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x80001}, 0x800) kernel console output (not intermixed with test programs): ter on device batadv0 [ 412.183796][T18203] veth0_vlan: entered promiscuous mode [ 412.198805][T18203] veth1_vlan: entered promiscuous mode [ 412.231453][T18203] veth0_macvtap: entered promiscuous mode [ 412.243153][T18203] veth1_macvtap: entered promiscuous mode [ 412.265871][T18203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.287728][T18203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.303551][T10504] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.315963][T10504] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.329922][T10504] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.339063][T10504] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.461006][T10502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.485890][T10502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.574277][T10504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.590345][T10504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.741807][T18487] tipc: Started in network mode [ 412.758421][T18487] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 412.768834][T18487] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 412.779257][T18489] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3249'. [ 412.803172][T18487] tipc: Enabled bearer , priority 10 [ 412.876811][T18494] xt_recent: Unsupported userspace flags (000000b1) [ 412.925763][T18496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.936387][T18496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.996026][T18496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.017851][T18496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.027665][ T5841] Bluetooth: hci0: command tx timeout [ 413.120184][T18510] x_tables: duplicate entry at hook 3 [ 413.182134][T18512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3336'. [ 413.205718][ T5841] block nbd0: Receive control failed (result -107) [ 413.224933][T18514] block nbd0: reconnected socket [ 413.255460][T18514] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3334'. [ 413.378781][T18522] netlink: 'syz.4.3338': attribute type 1 has an invalid length. [ 413.460663][T18529] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3339'. [ 413.544006][T18528] bond3: (slave veth5): Enslaving as an active interface with a down link [ 413.777085][T18545] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 413.826163][T18548] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3347'. [ 413.916575][ T5932] tipc: Node number set to 1 [ 413.980707][T18554] xt_CT: You must specify a L4 protocol and not use inversions on it [ 413.982501][T18554] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3350'. [ 414.033610][T18556] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.3351'. [ 414.079252][T18558] IPVS: length: 162 != 24 [ 414.173458][T18563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3354'. [ 414.223615][T18569] netlink: 'syz.3.3355': attribute type 1 has an invalid length. [ 414.233214][T18569] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3355'. [ 414.333597][T18574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3357'. [ 414.554105][T18588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3363'. [ 414.563319][T18588] veth0_to_bridge: left allmulticast mode [ 414.570293][T18588] veth0_to_bridge: left promiscuous mode [ 414.578877][T18588] bridge0: port 1(veth0_to_bridge) entered disabled state [ 415.603941][T18640] netlink: 'syz.4.3371': attribute type 11 has an invalid length. [ 415.686557][T10491] net_ratelimit: 139 callbacks suppressed [ 415.686582][T10491] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 415.707430][T10491] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 415.733462][T18644] netlink: 'syz.2.3372': attribute type 4 has an invalid length. [ 415.847937][ T49] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 415.876961][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 415.950560][T18655] sctp: [Deprecated]: syz.2.3376 (pid 18655) Use of int in maxseg socket option. [ 415.950560][T18655] Use struct sctp_assoc_value instead [ 416.016578][T10491] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 416.031275][T10491] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 416.166738][ T6845] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 416.174559][ T6845] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 416.310694][ T49] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 416.321393][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 416.961062][T18704] x_tables: duplicate underflow at hook 2 [ 417.123749][T18708] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 417.141226][T18714] tipc: Enabling of bearer rejected, failed to enable media [ 417.505701][T18730] netlink: 'syz.0.3400': attribute type 5 has an invalid length. [ 417.685308][T18737] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20001 [ 418.463256][T18773] __nla_validate_parse: 10 callbacks suppressed [ 418.475217][T18773] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3413'. [ 418.518319][T18777] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3413'. [ 418.533873][T18780] netlink: 'syz.0.3415': attribute type 3 has an invalid length. [ 418.544021][T18777] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3413'. [ 419.107714][T18807] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3421'. [ 419.158300][T18816] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3425'. [ 419.329400][T18821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3427'. [ 419.448926][T18830] netlink: 'syz.0.3428': attribute type 142 has an invalid length. [ 419.758782][T18840] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3432'. [ 419.774798][T18839] netlink: 'syz.0.3432': attribute type 1 has an invalid length. [ 419.807801][T18839] netlink: 'syz.0.3432': attribute type 1 has an invalid length. [ 420.130305][T18856] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3438'. [ 420.171162][T18856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3438'. [ 420.750163][T10491] net_ratelimit: 158 callbacks suppressed [ 420.750196][T10491] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 420.769601][T10491] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 420.886850][T10491] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 420.912114][T10491] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 421.055879][T18878] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.065024][ T6845] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 421.078348][ T6845] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 421.090170][T18882] netlink: 836 bytes leftover after parsing attributes in process `syz.4.3448'. [ 421.110506][T18882] openvswitch: netlink: Flow key attr not present in new flow. [ 421.186718][ T6845] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 421.219262][ T6845] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 421.235891][T18884] netlink: 'syz.2.3450': attribute type 1 has an invalid length. [ 421.269399][T18888] netlink: 'syz.0.3449': attribute type 11 has an invalid length. [ 421.361971][T18892] netlink: 'syz.4.3452': attribute type 4 has an invalid length. [ 421.459814][T18896] hsr_slave_0: left promiscuous mode [ 421.466302][T18896] hsr_slave_1: left promiscuous mode [ 421.983167][T18934] net veth1_virt_wifi : renamed from virt_wifi0 [ 422.165266][T18949] vlan2: entered allmulticast mode [ 422.171743][T18949] bridge_slave_0: entered allmulticast mode [ 422.446024][ T5932] IPVS: starting estimator thread 0... [ 422.536538][T18965] IPVS: using max 27 ests per chain, 64800 per kthread [ 422.828922][T18993] syz_tun: entered allmulticast mode [ 422.933555][T18993] bridge_slave_0: left allmulticast mode [ 422.966998][T18993] bridge_slave_0: left promiscuous mode [ 422.975704][T18993] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.995636][T18993] bridge_slave_1: left allmulticast mode [ 423.002952][T18993] bridge_slave_1: left promiscuous mode [ 423.011781][T18993] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.037217][T18993] bond0: (slave bond_slave_0): Releasing backup interface [ 423.060541][T18993] bond0: (slave bond_slave_1): Releasing backup interface [ 423.089226][T18993] team0: Port device team_slave_0 removed [ 423.121166][T18993] team0: Port device team_slave_1 removed [ 423.128307][T18993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.135745][T18993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.158436][T18993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.169290][T18993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.208416][T19018] netlink: 'syz.0.3484': attribute type 9 has an invalid length. [ 423.854656][T19054] netlink: 'syz.4.3496': attribute type 58 has an invalid length. [ 423.863093][T19054] __nla_validate_parse: 21 callbacks suppressed [ 423.863116][T19054] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3496'. [ 423.884651][T19057] xt_socket: unknown flags 0x50 [ 423.911215][T19058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3496'. [ 424.415700][T19086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3507'. [ 424.497373][T19083] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3506'. [ 424.627028][T19096] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3510'. [ 424.638331][T19096] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3510'. [ 424.779621][T19098] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3511'. [ 424.924731][T19115] netlink: 'syz.0.3514': attribute type 32 has an invalid length. [ 424.950417][T19115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3514'. [ 425.032346][T19115] bond1: Setting coupled_control to off (0) [ 425.050019][T19122] tunl0: entered promiscuous mode [ 425.111458][T19122] netlink: 'syz.0.3514': attribute type 3 has an invalid length. [ 425.131919][T19122] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3514'. [ 425.295463][T19139] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3519'. [ 425.392138][T19149] syzkaller1: entered promiscuous mode [ 425.403419][T19149] syzkaller1: entered allmulticast mode [ 425.699857][T19164] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 425.725016][T19164] bond2 (unregistering): Released all slaves [ 425.772774][ T6845] net_ratelimit: 105 callbacks suppressed [ 425.772817][ T6845] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 425.827831][T10496] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 425.868085][T10490] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 425.907953][ T6847] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 425.978702][T10491] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 426.041857][T10491] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 426.196648][T10502] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 426.208200][T10502] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 426.248775][T19201] netlink: 'syz.3.3532': attribute type 4 has an invalid length. [ 426.279405][T19201] .`: renamed from bond0 (while UP) [ 426.347748][T10496] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 426.362122][T10496] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 426.581197][T19208] netlink: 'syz.1.3537': attribute type 3 has an invalid length. [ 426.589679][T19208] netlink: 'syz.1.3537': attribute type 1 has an invalid length. [ 426.741043][T19223] netlink: 'syz.3.3540': attribute type 13 has an invalid length. [ 426.749819][T19223] syz_tun: refused to change device tx_queue_len [ 427.214631][T19239] erspan0: entered promiscuous mode [ 427.224516][T19239] erspan0: entered allmulticast mode [ 427.480863][T19251] xt_hashlimit: size too large, truncated to 1048576 [ 427.671334][T19247] syzkaller0: entered promiscuous mode [ 427.687844][T19247] syzkaller0: entered allmulticast mode [ 427.910639][ T1918] block nbd3: Possible stuck request ffff888026a30000: control (read@0,1024B). Runtime 30 seconds [ 427.927669][ T1918] block nbd3: Possible stuck request ffff888026a30200: control (read@1024,1024B). Runtime 30 seconds [ 427.939384][ T1918] block nbd3: Possible stuck request ffff888026a30400: control (read@2048,1024B). Runtime 30 seconds [ 427.951283][ T1918] block nbd3: Possible stuck request ffff888026a30600: control (read@3072,1024B). Runtime 30 seconds [ 429.727277][T19279] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 430.097226][T19304] __nla_validate_parse: 11 callbacks suppressed [ 430.097248][T19304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3563'. [ 430.159695][T19304] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3563'. [ 430.185098][T19297] netlink: 'syz.4.3562': attribute type 83 has an invalid length. [ 430.337314][T19312] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.3565'. [ 430.403598][T19312] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 430.460155][T19312] bond0: (slave lo): Enslaving as an active interface with an up link [ 430.738438][T19330] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3573'. [ 430.797529][T19330] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3573'. [ 430.869042][T10496] net_ratelimit: 156 callbacks suppressed [ 430.869066][T10496] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 430.909623][T10496] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 430.937082][T10496] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 430.963108][T10496] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 430.996582][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 431.022696][T10502] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 431.050219][T10502] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 431.082990][T10502] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 431.117001][T10502] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 431.136769][T10502] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 432.955116][T19345] x_tables: unsorted underflow at hook 1 [ 432.982502][T19354] netlink: 'syz.2.3581': attribute type 21 has an invalid length. [ 433.049658][T19354] IPv6: NLM_F_CREATE should be specified when creating new route [ 433.089040][T19354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 433.096327][T19354] IPv6: NLM_F_CREATE should be set when creating new route [ 433.103674][T19354] IPv6: NLM_F_CREATE should be set when creating new route [ 433.110975][T19354] IPv6: NLM_F_CREATE should be set when creating new route [ 433.145037][T19362] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3582'. [ 433.419633][T19375] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3584'. [ 433.794969][T19397] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 433.856162][T19391] syzkaller1: entered promiscuous mode [ 433.874327][T19391] syzkaller1: entered allmulticast mode [ 434.034272][T19411] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3596'. [ 434.087567][T19413] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3597'. [ 434.313492][T19423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3602'. [ 434.391008][T19425] s5: renamed from vlan1 (while UP) [ 434.440383][T19429] xt_ecn: cannot match TCP bits for non-tcp packets [ 434.613087][T19443] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 434.650134][T19433] syzkaller0: entered promiscuous mode [ 434.658380][T19433] syzkaller0: entered allmulticast mode [ 435.886670][T10502] net_ratelimit: 196 callbacks suppressed [ 435.886693][T10502] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 435.916719][T10502] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 435.936854][T10502] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 435.957163][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 435.976656][T10502] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 435.996695][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 436.019209][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 436.049427][T10502] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 436.082814][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 436.106758][T10502] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 436.602873][T19450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3609'. [ 436.602954][T19457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3609'. [ 436.641114][ T6845] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.650279][T19457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3609'. [ 436.667112][ T6845] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.708171][T19450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3609'. [ 436.733975][T10502] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.755851][T10502] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.047719][T19487] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3619'. [ 437.052023][T19470] block nbd4: not configured, cannot reconfigure [ 437.261321][T19500] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3622'. [ 437.813083][T19526] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3627'. [ 437.873785][T19527] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3628'. [ 437.921299][T19530] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3629'. [ 438.241376][T19543] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3634'. [ 438.541333][T19558] vlan2: entered allmulticast mode [ 438.557011][T19558] bond0: entered allmulticast mode [ 438.673296][T19558] bond0 (unregistering): Released all slaves [ 439.352913][T19610] netlink: 'syz.3.3653': attribute type 15 has an invalid length. [ 439.444058][T19612] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 439.455970][T19612] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 439.466357][T19612] team0: Failed to send options change via netlink (err -105) [ 439.474542][T19610] netlink: 'syz.3.3653': attribute type 21 has an invalid length. [ 439.484143][T19612] team0: Port device batadv1 added [ 439.638330][T19621] Bluetooth: MGMT ver 1.23 [ 439.713983][T19624] netlink: 'syz.2.3656': attribute type 1 has an invalid length. [ 440.229902][T19661] netlink: 'syz.3.3670': attribute type 1 has an invalid length. [ 440.577576][T19683] netlink: 'syz.2.3677': attribute type 12 has an invalid length. [ 440.599492][T19683] netlink: 'syz.2.3677': attribute type 12 has an invalid length. [ 440.738908][T19692] syzkaller0: entered promiscuous mode [ 440.744752][T19692] syzkaller0: entered allmulticast mode [ 440.959596][T19708] netlink: 'syz.4.3683': attribute type 1 has an invalid length. [ 440.976893][T10502] net_ratelimit: 124 callbacks suppressed [ 440.976918][T10502] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 441.017427][T10502] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 441.046743][T10502] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 441.062704][T19708] 8021q: adding VLAN 0 to HW filter on device bond4 [ 441.077008][T10502] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 441.117481][ T6845] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 441.137579][T10502] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 441.174667][T19716] bond4: (slave veth7): Enslaving as an active interface with a down link [ 441.184801][T10502] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 441.220369][T19718] vlan2: entered allmulticast mode [ 441.225746][T19718] geneve1: entered allmulticast mode [ 441.231495][T10490] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 441.255016][T19733] netlink: 'syz.2.3690': attribute type 4 has an invalid length. [ 441.275360][T10496] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 441.302082][T19720] bond4: (slave veth0_to_bond): making interface the new active one [ 441.327224][ T49] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 441.345101][T19720] veth0_to_bond: entered promiscuous mode [ 441.362673][T19720] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 441.469497][T19708] bond4: (slave veth9): Enslaving as an active interface with a down link [ 441.599845][T19708] bond4: (slave veth11): Enslaving as an active interface with a down link [ 441.652287][T19748] netlink: 'syz.3.3693': attribute type 1 has an invalid length. [ 441.661186][T19748] __nla_validate_parse: 86 callbacks suppressed [ 441.661208][T19748] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3693'. [ 442.068901][T19771] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3703'. [ 442.492724][T19790] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 442.541980][T19793] tipc: Enabled bearer , priority 0 [ 442.584141][T19794] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3711'. [ 442.653034][T19793] tipc: Disabling bearer [ 442.787843][T19805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3713'. [ 442.866156][T19810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3714'. [ 443.200567][T19827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3721'. [ 443.327848][T19841] xt_socket: unknown flags 0x50 [ 443.495596][T19857] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3725'. [ 443.605766][T19863] netlink: 'syz.0.3733': attribute type 1 has an invalid length. [ 443.761443][T19872] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3737'. [ 443.774667][T19871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3736'. [ 443.919343][T19883] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.3741'. [ 444.065361][T19882] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 444.642815][T19934] syzkaller0: entered promiscuous mode [ 444.648574][T19934] syzkaller0: entered allmulticast mode [ 444.659733][T19934] tipc: Enabled bearer , priority 0 [ 444.695180][T19937] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 444.712986][T19933] tipc: Resetting bearer [ 444.723153][T19942] validate_nla: 1 callbacks suppressed [ 444.723173][T19942] netlink: 'syz.4.3763': attribute type 21 has an invalid length. [ 444.776975][T19933] tipc: Disabling bearer [ 445.022944][T19959] xt_cgroup: path and classid specified [ 445.073553][T19963] netlink: 'syz.3.3767': attribute type 2 has an invalid length. [ 445.082311][T19963] netlink: 'syz.3.3767': attribute type 2 has an invalid length. [ 445.097365][T19965] syzkaller0: entered promiscuous mode [ 445.109498][T19965] syzkaller0: entered allmulticast mode [ 445.238075][T19975] netlink: 'syz.4.3771': attribute type 2 has an invalid length. [ 445.983428][T20023] netlink: 'syz.3.3787': attribute type 1 has an invalid length. [ 446.076995][ T49] net_ratelimit: 113 callbacks suppressed [ 446.077018][ T49] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 446.127030][ T49] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 446.142124][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 446.268405][ T49] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 446.277349][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 446.397477][T10502] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 446.405383][T10502] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 446.526655][T10502] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 446.535087][T10502] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 446.646942][ T6845] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 447.042279][T20066] __nla_validate_parse: 16 callbacks suppressed [ 447.042302][T20066] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3796'. [ 447.303753][T20083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3800'. [ 447.343151][T20091] netlink: 'syz.4.3804': attribute type 1 has an invalid length. [ 447.409461][T20096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3806'. [ 447.442471][T20083] syzkaller0: entered promiscuous mode [ 447.448315][T20083] syzkaller0: entered allmulticast mode [ 447.523102][T20104] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 447.555926][T20104] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 447.569396][T20104] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 447.631651][T20091] bond5: (slave vcan1): The slave device specified does not support setting the MAC address [ 447.653376][T20091] bond5: (slave vcan1): making interface the new active one [ 447.661957][T20091] bond5: (slave vcan1): Enslaving as an active interface with an up link [ 447.681494][T20115] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3809'. [ 448.021187][T20132] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3813'. [ 449.709368][T20145] syzkaller0: entered promiscuous mode [ 449.714925][T20145] syzkaller0: entered allmulticast mode [ 449.895195][T20162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3819'. [ 449.907802][T20164] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3818'. [ 449.946695][T20161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3819'. [ 450.374502][T20188] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3830'. [ 450.462237][T20192] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3832'. [ 450.520965][T20190] syzkaller0: entered allmulticast mode [ 450.669592][T20205] netlink: 'syz.1.3835': attribute type 21 has an invalid length. [ 450.915178][T20221] netlink: 'syz.0.3840': attribute type 1 has an invalid length. [ 450.990725][T20221] 8021q: adding VLAN 0 to HW filter on device bond3 [ 451.052809][T20221] veth3: entered promiscuous mode [ 451.081575][T20221] bond3: (slave veth3): Enslaving as an active interface with a down link [ 451.096834][T10491] net_ratelimit: 153 callbacks suppressed [ 451.096860][T10491] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 451.136968][ T49] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 451.166538][ T49] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 451.179119][T20228] vlan1: entered allmulticast mode [ 451.191165][T20228] bond3: entered allmulticast mode [ 451.200668][ T49] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 451.229798][T20228] bond3: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 451.271373][T10491] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 451.306614][T10491] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 451.337083][T10491] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 451.345121][T10491] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 451.377849][T20237] pimreg: entered allmulticast mode [ 451.476635][ T49] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 451.496136][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 451.540411][T20248] ip6t_REJECT: ECHOREPLY is not supported [ 451.714074][T20254] xt_CT: No such helper "pptp" [ 452.224305][T20293] __nla_validate_parse: 6 callbacks suppressed [ 452.224327][T20293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3864'. [ 452.295728][T20301] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3862'. [ 452.401936][T20305] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3867'. [ 452.617526][ T13] veth0_to_bond: left promiscuous mode [ 452.950179][T20329] bond3: option arp_all_targets: invalid value (18446744073709551613) [ 452.971119][T20329] bond3 (unregistering): Released all slaves [ 453.031675][T20325] syzkaller0: entered promiscuous mode [ 453.049674][T20325] syzkaller0: entered allmulticast mode [ 453.068357][T20352] netlink: 'syz.4.3875': attribute type 16 has an invalid length. [ 453.097608][T20352] netlink: 'syz.4.3875': attribute type 17 has an invalid length. [ 453.188642][T20345] syzkaller0: entered promiscuous mode [ 453.194558][T20345] syzkaller0: entered allmulticast mode [ 455.184305][T20377] xt_cluster: node mask cannot exceed total number of nodes [ 455.209179][T20380] netlink: 'syz.2.3885': attribute type 1 has an invalid length. [ 455.237127][T20377] netlink: 'syz.2.3885': attribute type 1 has an invalid length. [ 455.262834][T20377] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3885'. [ 455.451668][T20401] syzkaller0: entered promiscuous mode [ 455.484357][T20401] syzkaller0: entered allmulticast mode [ 455.680160][T20414] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.3895'. [ 455.699405][T20413] netlink: 'syz.4.3896': attribute type 10 has an invalid length. [ 455.713407][T20413] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.721244][T20413] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.116934][T10502] net_ratelimit: 162 callbacks suppressed [ 456.116957][T10502] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 456.162884][T20439] macvtap0: mtu less than device minimum [ 456.167146][T10502] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 456.177622][T20439] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3904'. [ 456.216754][T10502] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 456.237744][ T49] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 456.296628][ T49] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 456.336772][ T49] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 456.390154][ T49] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 456.437098][ T49] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 456.456883][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 456.498558][T20454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3908'. [ 456.550870][T20454] team0: entered promiscuous mode [ 456.606632][T20454] team0: entered allmulticast mode [ 456.742866][T20465] bridge_slave_0: left allmulticast mode [ 456.779997][T20465] bridge_slave_0: left promiscuous mode [ 456.785874][T20465] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.805084][T20465] bridge_slave_1: left allmulticast mode [ 456.811645][T20465] bridge_slave_1: left promiscuous mode [ 456.820158][T20465] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.881506][T20465] bond4: (slave veth0_to_bond): Releasing active interface [ 456.925974][T20465] bond0: (slave bond_slave_0): Releasing backup interface [ 456.954773][T20465] bond0: (slave bond_slave_1): Releasing backup interface [ 456.991524][T20465] team0: Port device team_slave_0 removed [ 457.022941][T20465] team0: Port device team_slave_1 removed [ 457.095611][T20486] netlink: 'syz.0.3921': attribute type 9 has an invalid length. [ 457.105419][T20483] syzkaller0: entered promiscuous mode [ 457.114752][T20483] syzkaller0: entered allmulticast mode [ 457.126660][T20486] netlink: 'syz.0.3921': attribute type 11 has an invalid length. [ 457.134552][T20486] netlink: 'syz.0.3921': attribute type 12 has an invalid length. [ 457.155795][T20486] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.3921'. [ 457.189200][T20492] netlink: 'syz.0.3921': attribute type 25 has an invalid length. [ 457.211355][T20486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3921'. [ 457.448194][T20507] netlink: 277 bytes leftover after parsing attributes in process `syz.3.3924'. [ 457.952035][T20524] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 457.986023][T20524] bond4: (slave lo): Enslaving as an active interface with an up link [ 457.998680][ T1918] block nbd3: Possible stuck request ffff888026a30000: control (read@0,1024B). Runtime 60 seconds [ 458.009886][ T1918] block nbd3: Possible stuck request ffff888026a30200: control (read@1024,1024B). Runtime 60 seconds [ 458.020974][ T1918] block nbd3: Possible stuck request ffff888026a30400: control (read@2048,1024B). Runtime 60 seconds [ 458.032015][ T1918] block nbd3: Possible stuck request ffff888026a30600: control (read@3072,1024B). Runtime 60 seconds [ 458.312843][T20546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3934'. [ 458.362437][T20546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3934'. [ 458.372061][T20546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3934'. [ 458.471257][T20550] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 458.492353][T20556] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 458.635974][T20561] syzkaller0: entered promiscuous mode [ 458.656805][T20561] syzkaller0: entered allmulticast mode [ 458.686495][T20561] Cannot find del_set index 5 as target [ 458.824679][T20572] netlink: 'syz.0.3942': attribute type 6 has an invalid length. [ 459.072337][T20586] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3945'. [ 459.487178][T20611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.499605][T20611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.524444][T20611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.562169][T20611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.581200][T20615] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3953'. [ 459.957300][T20637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3957'. [ 459.994193][T20637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3957'. [ 460.029286][T20642] netlink: 165 bytes leftover after parsing attributes in process `syz.0.3960'. [ 460.208894][T20651] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3963'. [ 460.400931][T20666] netlink: 'syz.4.3967': attribute type 1 has an invalid length. [ 460.456995][T20666] syzkaller0: entered promiscuous mode [ 460.462778][T20666] syzkaller0: entered allmulticast mode [ 461.080344][T20710] netlink: 'syz.4.3981': attribute type 24 has an invalid length. [ 461.206945][T10491] net_ratelimit: 128 callbacks suppressed [ 461.206968][T10491] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 461.241516][T20718] hsr0 speed is unknown, defaulting to 1000 [ 461.248741][T10491] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 461.262754][T20718] hsr0 speed is unknown, defaulting to 1000 [ 461.281517][T20718] hsr0 speed is unknown, defaulting to 1000 [ 461.318599][T20721] netem: unknown loss type 0 [ 461.345876][T20720] xt_socket: unknown flags 0x50 [ 461.350936][T20721] netem: change failed [ 461.361185][T20718] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 461.370061][ T49] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 461.397133][T10491] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 461.413269][T10491] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 461.474461][T20718] hsr0 speed is unknown, defaulting to 1000 [ 461.503360][T20718] hsr0 speed is unknown, defaulting to 1000 [ 461.513834][T20718] hsr0 speed is unknown, defaulting to 1000 [ 461.525593][T20718] hsr0 speed is unknown, defaulting to 1000 [ 461.534200][T20718] hsr0 speed is unknown, defaulting to 1000 [ 461.542769][T20718] hsr0 speed is unknown, defaulting to 1000 [ 461.549981][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 461.559175][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 461.607257][T20718] hsr0 speed is unknown, defaulting to 1000 [ 461.614691][T20718] hsr0 speed is unknown, defaulting to 1000 [ 461.630320][T20718] hsr0 speed is unknown, defaulting to 1000 [ 461.648707][T20718] hsr0 speed is unknown, defaulting to 1000 [ 461.686778][ T6845] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 461.694801][ T6845] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 461.838434][ T6845] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 462.567589][T20793] netlink: 'syz.3.4007': attribute type 13 has an invalid length. [ 462.575764][T20793] __nla_validate_parse: 27 callbacks suppressed [ 462.575782][T20793] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4007'. [ 462.785323][T20804] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4011'. [ 463.200427][T20817] netlink: 'syz.2.4017': attribute type 10 has an invalid length. [ 463.283212][T20822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4018'. [ 463.303068][T20822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4018'. [ 463.491714][T20832] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4022'. [ 463.632603][T20840] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4024'. [ 463.745936][T20838] syzkaller0: entered promiscuous mode [ 463.768083][T20838] syzkaller0: entered allmulticast mode [ 463.859114][T20824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4019'. [ 464.124976][ T5883] IPVS: starting estimator thread 0... [ 464.246518][T20851] IPVS: using max 31 ests per chain, 74400 per kthread [ 464.670383][ T5192] udevd[5192]: worker [13263] /devices/virtual/block/nbd3 is taking a long time [ 464.903070][T20873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4029'. [ 466.097741][T20884] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 466.105017][T20884] IPv6: NLM_F_CREATE should be set when creating new route [ 466.112587][T20884] IPv6: NLM_F_CREATE should be set when creating new route [ 466.119909][T20884] IPv6: NLM_F_CREATE should be set when creating new route [ 466.209169][T20884] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 466.223973][T20888] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4033'. [ 466.246965][ T49] net_ratelimit: 151 callbacks suppressed [ 466.246985][ T49] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 466.279828][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 466.337779][ T49] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 466.346714][ T49] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 466.369450][T19125] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 466.401549][T20894] ip6t_srh: unknown srh match flags 4000 [ 466.438306][ T49] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 466.446220][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 466.454412][T19125] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 466.577385][T10496] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 466.590397][T20894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4036'. [ 466.616494][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 466.624294][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 466.677556][T19125] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 466.761592][T10490] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 466.774050][T10490] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 466.907843][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 467.137247][T20951] veth1_virt_wifi: entered allmulticast mode [ 469.711893][T20916] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 469.986971][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 470.094476][T20984] netlink: 'syz.4.4055': attribute type 1 has an invalid length. [ 470.102579][T20984] __nla_validate_parse: 7 callbacks suppressed [ 470.102599][T20984] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4055'. [ 470.224703][T20988] netlink: 'syz.0.4056': attribute type 83 has an invalid length. [ 470.290731][T20995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4058'. [ 470.375750][T21000] netlink: 'syz.4.4060': attribute type 1 has an invalid length. [ 470.390845][T21000] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4060'. [ 470.402031][T21000] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4060'. [ 470.426498][T21000] netlink: 'syz.4.4060': attribute type 1 has an invalid length. [ 470.456494][T21000] netlink: 'syz.4.4060': attribute type 8 has an invalid length. [ 470.464287][T21000] netlink: 606 bytes leftover after parsing attributes in process `syz.4.4060'. [ 470.537253][T21008] netlink: 'syz.3.4061': attribute type 21 has an invalid length. [ 470.546754][T21008] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4061'. [ 470.637252][T21014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4063'. [ 470.663205][T21014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4063'. [ 470.737837][T21020] x_tables: duplicate underflow at hook 1 [ 470.970271][T21017] veth13: entered allmulticast mode [ 470.988672][T21023] bridge5: entered promiscuous mode [ 470.995146][T21023] bridge5: entered allmulticast mode [ 471.006623][T21023] team0: Port device bridge5 added [ 471.127685][T21034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.145065][T21035] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4068'. [ 471.178527][T21037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4069'. [ 471.200186][T21038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.289233][T21045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.336526][T10490] net_ratelimit: 94 callbacks suppressed [ 471.336546][T10490] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 471.379154][T10496] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 471.406532][T10496] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 471.557315][ T49] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 471.573017][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 471.686918][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 471.690916][T21072] ip6gre1: entered promiscuous mode [ 471.716615][ T6845] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 471.737230][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 471.745039][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 471.762436][T21086] netlink: 'syz.4.4075': attribute type 4 has an invalid length. [ 471.822765][T21087] netlink: 'syz.4.4075': attribute type 4 has an invalid length. [ 471.857737][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 472.230332][T21110] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 472.267232][T21113] netlink: 'syz.3.4084': attribute type 6 has an invalid length. [ 472.268348][T21109] netlink: 'syz.3.4084': attribute type 6 has an invalid length. [ 472.310569][T19123] IPVS: starting estimator thread 0... [ 472.418278][T21116] IPVS: using max 25 ests per chain, 60000 per kthread [ 472.583116][T21126] syzkaller0: entered promiscuous mode [ 472.607775][T21126] syzkaller0: entered allmulticast mode [ 472.924153][T21152] x_tables: unsorted underflow at hook 3 [ 473.445968][T21184] syzkaller0: entered promiscuous mode [ 473.464693][T21184] syzkaller0: entered allmulticast mode [ 473.587773][T21192] SET target dimension over the limit! [ 473.633734][T21200] ip6tnl0: entered promiscuous mode [ 473.873758][T21206] xt_hashlimit: max too large, truncated to 1048576 [ 474.217296][T21217] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 474.327617][T21221] sctp: [Deprecated]: syz.4.4116 (pid 21221) Use of int in maxseg socket option. [ 474.327617][T21221] Use struct sctp_assoc_value instead [ 474.454809][T21199] ip6tnl0: left promiscuous mode [ 474.910700][T21262] bridge0: port 1(ipvlan2) entered blocking state [ 474.919363][T21262] bridge0: port 1(ipvlan2) entered disabled state [ 474.928610][T21262] ipvlan2: entered allmulticast mode [ 474.934039][T21262] bridge0: entered allmulticast mode [ 474.941874][T21262] ipvlan2: left allmulticast mode [ 474.949547][T21262] bridge0: left allmulticast mode [ 475.356346][T21292] ip6gre0: entered allmulticast mode [ 475.494182][T21300] __nla_validate_parse: 14 callbacks suppressed [ 475.494205][T21300] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4138'. [ 475.760803][T21314] validate_nla: 4 callbacks suppressed [ 475.760826][T21314] netlink: 'syz.1.4142': attribute type 10 has an invalid length. [ 475.820173][T21318] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 475.860811][T21316] Bluetooth: MGMT ver 1.23 [ 475.904232][T21323] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4144'. [ 476.027834][T21331] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4147'. [ 476.083897][T21336] netlink: 'syz.4.4149': attribute type 1 has an invalid length. [ 476.155372][T21336] 8021q: adding VLAN 0 to HW filter on device bond6 [ 476.182713][T21344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4152'. [ 476.216117][T21345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4152'. [ 476.241680][T21347] netlink: 'syz.3.4154': attribute type 10 has an invalid length. [ 476.312579][T21356] bond0: (slave ip_vti0): Device is not bonding slave [ 476.323720][T21356] bond0: option active_slave: invalid value (ip_vti0) [ 476.335552][T21356] bond0 (unregistering): Released all slaves [ 476.356619][ T13] net_ratelimit: 107 callbacks suppressed [ 476.356641][ T13] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 476.388625][T10496] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 476.426936][T10496] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 476.454206][T21347] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.463156][T10496] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 476.476056][T21347] bridge_slave_1: left allmulticast mode [ 476.486042][T21347] bridge_slave_1: left promiscuous mode [ 476.492355][T21347] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.499217][T10496] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 476.536691][T10496] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 476.550725][T21347] .`: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 476.579553][T10496] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 476.618295][T10496] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 476.642537][T21362] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4156'. [ 476.658200][T10496] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 476.696665][T10496] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 476.772980][T21370] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4159'. [ 476.794652][T21367] netlink: 'syz.2.4158': attribute type 1 has an invalid length. [ 476.824941][T21370] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4159'. [ 476.866245][T21367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4158'. [ 477.095453][T21393] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.4168'. [ 477.134367][T21397] IPVS: set_ctl: invalid protocol: 60 10.1.1.2:20004 [ 477.143966][T21389] netlink: 'syz.0.4165': attribute type 1 has an invalid length. [ 477.167187][T21389] netlink: 'syz.0.4165': attribute type 1 has an invalid length. [ 477.500676][T21417] nbd: illegal input index 2958377 [ 477.563988][T21422] netlink: 'syz.2.4179': attribute type 12 has an invalid length. [ 477.578896][T21419] team0: Port device ip6gre1 added [ 477.678439][T21422] bond2: option primary_reselect: invalid value (255) [ 477.720444][T21422] bond2 (unregistering): Released all slaves [ 477.771272][T21439] xt_CT: You must specify a L4 protocol and not use inversions on it [ 477.792164][T21433] smc: net device virt_wifi0 applied user defined pnetid SYZ0 [ 477.826590][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 477.847982][T21437] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 477.855295][T21437] IPv6: NLM_F_CREATE should be set when creating new route [ 477.957875][ T29] audit: type=1804 audit(1772567321.599:4): pid=21442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4183" name="/newroot/235/cgroup.controllers" dev="tmpfs" ino=1213 res=1 errno=0 [ 478.007218][ T29] audit: type=1800 audit(1772567321.649:5): pid=21442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4183" name="cgroup.controllers" dev="tmpfs" ino=1213 res=0 errno=0 [ 478.080787][T21452] netlink: 'syz.4.4186': attribute type 10 has an invalid length. [ 478.142248][T21456] rds_bind: 23 callbacks suppressed [ 478.142331][T21456] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 478.181071][T21463] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 478.181480][T21451] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 478.200919][ T6845] nci: nci_rx_work: unknown MT 0x1 [ 478.224423][T21459] netlink: 'syz.3.4188': attribute type 10 has an invalid length. [ 478.243604][T21467] netlink: 'syz.4.4190': attribute type 16 has an invalid length. [ 478.544930][T21489] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 478.646786][T21498] tipc: Failed to remove unknown binding: 66,1,1/1:309075140/309075142 [ 478.972762][T21525] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 478.980191][T21525] IPv6: NLM_F_CREATE should be set when creating new route [ 478.987533][T21525] IPv6: NLM_F_CREATE should be set when creating new route [ 478.994803][T21525] IPv6: NLM_F_CREATE should be set when creating new route [ 479.015424][T21525] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 479.021212][T21498] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.569282][T21498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.589434][T21498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.395752][T21498] veth1_vlan: left allmulticast mode [ 480.618935][T21513] __nla_validate_parse: 3 callbacks suppressed [ 480.618958][T21513] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4204'. [ 480.686961][T21545] syzkaller0: entered promiscuous mode [ 480.692502][T21545] syzkaller0: entered allmulticast mode [ 480.727605][T21547] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.735023][T21547] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.773444][T21560] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4206'. [ 480.806300][T10490] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.836553][T10490] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.861531][T10490] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.886705][T10490] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.910281][T10490] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.942861][T10490] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.975530][T10490] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.985241][T10490] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.300348][T21596] sctp: [Deprecated]: syz.0.4216 (pid 21596) Use of int in max_burst socket option. [ 481.300348][T21596] Use struct sctp_assoc_value instead [ 481.324098][T21597] validate_nla: 5 callbacks suppressed [ 481.324118][T21597] netlink: 'syz.4.4215': attribute type 15 has an invalid length. [ 481.393568][T21590] net_ratelimit: 157 callbacks suppressed [ 481.393589][T21590] openvswitch: netlink: Message has 8 unknown bytes. [ 481.399971][ T49] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 481.410131][T21590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 481.419900][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 481.566942][T10502] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 481.585410][T10502] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 481.716693][T10502] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 481.748214][T10490] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 481.767815][T10490] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 481.884571][T21628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4222'. [ 481.912392][T21627] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 481.923917][T10496] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 481.932718][T21627] : renamed from macsec0 (while UP) [ 482.060828][T21635] netlink: 300 bytes leftover after parsing attributes in process `syz.0.4223'. [ 482.086030][T21636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4224'. [ 482.108448][T21636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4224'. [ 482.318445][T21651] netlink: 212304 bytes leftover after parsing attributes in process `syz.0.4228'. [ 482.352004][T21651] netlink: 'syz.0.4228': attribute type 10 has an invalid length. [ 482.367605][T21651] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4228'. [ 482.416692][T21651] dummy0: entered promiscuous mode [ 482.449704][T21651] bridge0: port 3(dummy0) entered blocking state [ 482.498475][T21651] bridge0: port 3(dummy0) entered disabled state [ 482.541453][T21651] dummy0: entered allmulticast mode [ 482.919872][T21648] syzkaller0: entered promiscuous mode [ 482.925420][T21648] syzkaller0: entered allmulticast mode [ 483.360832][T21713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4234'. [ 485.069112][T21713] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 485.098613][T21713] team0: Port device batadv2 added [ 485.145712][T21723] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20004 [ 485.154088][T21721] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4239'. [ 485.427635][T21739] syz_tun: entered allmulticast mode [ 485.445000][T21739] syz_tun: left allmulticast mode [ 485.855909][T21781] netlink: 'syz.3.4253': attribute type 4 has an invalid length. [ 485.867274][T21781] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4253'. [ 486.021370][T21786] ip_vti0: entered promiscuous mode [ 486.054400][T21786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4251'. [ 486.275483][T21798] bridge_slave_0: invalid flags given to default FDB implementation [ 486.467394][T10504] net_ratelimit: 163 callbacks suppressed [ 486.467420][T10504] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 486.526479][T10504] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 486.566478][T10504] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 486.606532][T10504] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 486.646538][ T49] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 486.689144][ T49] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 486.728596][ T49] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 486.767567][T10502] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 486.797285][T10491] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 486.817175][T10491] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 486.920081][T21834] xt_TCPMSS: Only works on TCP SYN packets [ 486.960413][T21834] xt_hashlimit: size too large, truncated to 1048576 [ 487.248165][T21842] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4269'. [ 487.714575][T21835] hsr0 speed is unknown, defaulting to 1000 [ 487.833906][T21880] netlink: 'syz.0.4281': attribute type 1 has an invalid length. [ 487.843286][T21880] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4281'. [ 487.863885][T21880] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4281'. [ 487.874879][T21880] netlink: 'syz.0.4281': attribute type 1 has an invalid length. [ 487.884461][T21880] netlink: 'syz.0.4281': attribute type 8 has an invalid length. [ 487.896728][T21880] netlink: 606 bytes leftover after parsing attributes in process `syz.0.4281'. [ 487.946293][T21884] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4280'. [ 488.006231][T21887] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 488.035408][T21887] syzkaller0: entered promiscuous mode [ 488.051249][T21887] syzkaller0: entered allmulticast mode [ 488.067263][ T1918] block nbd3: Possible stuck request ffff888026a30000: control (read@0,1024B). Runtime 90 seconds [ 488.078347][ T1918] block nbd3: Possible stuck request ffff888026a30200: control (read@1024,1024B). Runtime 90 seconds [ 488.090211][ T1918] block nbd3: Possible stuck request ffff888026a30400: control (read@2048,1024B). Runtime 90 seconds [ 488.101985][ T1918] block nbd3: Possible stuck request ffff888026a30600: control (read@3072,1024B). Runtime 90 seconds [ 488.141458][T21884] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4280'. [ 488.345254][T21890] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4283'. [ 488.355332][T21890] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4283'. [ 488.572246][T21905] netlink: 'syz.2.4287': attribute type 11 has an invalid length. [ 488.634189][T21913] netlink: 'syz.3.4290': attribute type 5 has an invalid length. [ 489.051129][T21941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.099478][T21943] erspan0: entered promiscuous mode [ 489.130344][T21941] netlink: 'syz.1.4297': attribute type 1 has an invalid length. [ 489.139852][T21943] erspan0: entered allmulticast mode [ 489.926645][ T29] audit: type=1107 audit(1772567333.559:6): pid=21996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='rں?dHm/*."׵ۙ*+˽F4ˋWyDyZYJշf/ʥK,HJxJKtW{ʴF6;$Ȅ*A›QVopz "_QJGdW˻O=LY&4% [ 489.926645][ T29] ZNpXV>ik<+^b _4' [ 489.984122][T21995] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 490.036753][T21995] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 490.063831][T21995] hsr0: entered promiscuous mode [ 490.079256][T21995] hsr0: entered allmulticast mode [ 490.096074][T21995] hsr_slave_0: entered allmulticast mode [ 490.128251][T21995] hsr_slave_1: entered allmulticast mode [ 490.514744][T22040] netlink: 'syz.3.4327': attribute type 21 has an invalid length. [ 490.524359][T22040] IPv6: NLM_F_CREATE should be specified when creating new route [ 490.533575][T22040] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 490.540922][T22040] IPv6: NLM_F_CREATE should be set when creating new route [ 490.548242][T22040] IPv6: NLM_F_CREATE should be set when creating new route [ 490.555523][T22040] IPv6: NLM_F_CREATE should be set when creating new route [ 490.655740][T22027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 490.717195][T22027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.744829][T22027] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 490.770176][T22027] bond0 (unregistering): Released all slaves [ 491.211866][T22065] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 491.228663][T21527] IPVS: starting estimator thread 0... [ 491.274499][T22061] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 491.316640][T22066] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 491.371876][T22073] netlink: 'syz.4.4334': attribute type 1 has an invalid length. [ 491.407253][T22067] IPVS: using max 26 ests per chain, 62400 per kthread [ 491.423761][T22075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 491.474206][T22077] team0: Device gtp0 is up. Set it down before adding it as a team port [ 491.556939][T10502] net_ratelimit: 138 callbacks suppressed [ 491.556964][T10502] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 491.572979][T10502] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 491.687884][T10504] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 491.716632][T10491] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 491.747500][T10490] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 491.776612][T10502] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 491.796525][T10502] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 491.824851][T10502] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 491.838437][T10502] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 491.976576][T10502] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 492.335930][T22121] veth15: entered allmulticast mode [ 492.821133][T22147] syzkaller0: entered promiscuous mode [ 492.826776][T22147] syzkaller0: entered allmulticast mode [ 496.646842][ T49] net_ratelimit: 128 callbacks suppressed [ 496.646868][ T49] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 496.661235][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 496.776620][T10490] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 496.784404][T10490] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 496.896656][T10490] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 496.904742][T10490] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 497.016778][T10504] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 497.024575][T10504] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 497.136718][ T49] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 497.144600][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 501.676703][ T6845] net_ratelimit: 80 callbacks suppressed [ 501.676726][ T6845] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 501.692100][ T6845] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 501.807210][T10491] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 501.815722][T10491] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 501.927201][T10491] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 501.934987][T10491] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 502.047273][ T6845] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 502.055077][ T6845] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 502.167121][T10491] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 502.174933][T10491] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 506.726600][T10491] net_ratelimit: 80 callbacks suppressed [ 506.726624][T10491] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 506.740825][T10491] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 506.856677][ T49] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 506.864494][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 506.976907][T10491] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 506.984722][T10491] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 507.096629][ T49] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 507.104418][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 507.216692][T10504] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 507.224506][T10504] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 508.173255][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 508.183850][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 508.194995][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 508.204760][ T5827] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 508.215325][ T5827] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 508.225270][ T5827] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 508.235025][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 508.243092][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 508.253904][ T5841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 508.267345][ T5841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 508.360630][ T5841] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 508.372255][ T5841] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 508.383694][ T5841] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 508.392945][ T5841] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 508.404194][ T5841] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 508.470842][ T5841] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 508.481734][ T5841] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 508.498053][ T5841] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 508.518059][ T5841] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 508.525784][ T5841] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 508.592722][ T5841] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 508.604121][ T5841] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 508.613865][ T5841] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 508.622142][ T5841] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 508.632393][ T5841] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 508.776026][T22185] hsr0 speed is unknown, defaulting to 1000 [ 508.984561][T22185] chnl_net:caif_netlink_parms(): no params data found [ 509.022846][T22186] hsr0 speed is unknown, defaulting to 1000 [ 509.190866][T22185] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.198717][T22185] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.206092][T22185] bridge_slave_0: entered allmulticast mode [ 509.215312][T22185] bridge_slave_0: entered promiscuous mode [ 509.239441][T22185] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.247127][T22185] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.254748][T22185] bridge_slave_1: entered allmulticast mode [ 509.262980][T22185] bridge_slave_1: entered promiscuous mode [ 509.326622][T22189] hsr0 speed is unknown, defaulting to 1000 [ 509.344196][T22185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.376885][T22185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.482207][T22185] team0: Port device team_slave_0 added [ 509.528054][T22185] team0: Port device team_slave_1 added [ 509.623872][T22186] chnl_net:caif_netlink_parms(): no params data found [ 509.652833][T22185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.661499][T22185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.689067][T22185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.702348][T22185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.709663][T22185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.736625][T22185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.777831][T22191] hsr0 speed is unknown, defaulting to 1000 [ 509.949242][T22185] hsr_slave_0: entered promiscuous mode [ 509.955898][T22185] hsr_slave_1: entered promiscuous mode [ 509.977888][T22185] debugfs: 'hsr0' already exists in 'hsr' [ 509.983683][T22185] Cannot create hsr debugfs directory [ 510.059510][T22193] hsr0 speed is unknown, defaulting to 1000 [ 510.101265][T22189] chnl_net:caif_netlink_parms(): no params data found [ 510.224855][T22186] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.233048][T22186] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.241379][T22186] bridge_slave_0: entered allmulticast mode [ 510.249571][T22186] bridge_slave_0: entered promiscuous mode [ 510.263063][T22186] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.270460][T22186] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.277848][T22186] bridge_slave_1: entered allmulticast mode [ 510.285719][T22186] bridge_slave_1: entered promiscuous mode [ 510.307600][ T5841] Bluetooth: hci1: command tx timeout [ 510.388292][ T5841] Bluetooth: hci6: command tx timeout [ 510.426096][T22186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.466957][ T5841] Bluetooth: hci7: command tx timeout [ 510.480279][T22186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.532712][T22189] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.540065][T22189] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.548416][T22189] bridge_slave_0: entered allmulticast mode [ 510.555983][T22189] bridge_slave_0: entered promiscuous mode [ 510.579707][T22186] team0: Port device team_slave_0 added [ 510.602562][T22189] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.610165][T22189] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.618033][T22189] bridge_slave_1: entered allmulticast mode [ 510.625899][T22189] bridge_slave_1: entered promiscuous mode [ 510.632090][ T5841] Bluetooth: hci8: command tx timeout [ 510.642685][T22186] team0: Port device team_slave_1 added [ 510.706808][ T5841] Bluetooth: hci9: command tx timeout [ 510.749959][T22189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.762540][T22186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.769844][T22186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.799235][T22186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.812292][T22186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.819774][T22186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.846468][T22186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.890210][T22189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.011568][T22189] team0: Port device team_slave_0 added [ 511.045586][T22189] team0: Port device team_slave_1 added [ 511.066113][T22191] chnl_net:caif_netlink_parms(): no params data found [ 511.090225][T22186] hsr_slave_0: entered promiscuous mode [ 511.100053][T22186] hsr_slave_1: entered promiscuous mode [ 511.114989][T22186] debugfs: 'hsr0' already exists in 'hsr' [ 511.121213][T22186] Cannot create hsr debugfs directory [ 511.208680][T22189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.215782][T22189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.243192][T22189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.269043][T22193] chnl_net:caif_netlink_parms(): no params data found [ 511.291624][T22189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.299084][T22189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.325847][T22189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.509757][T22189] hsr_slave_0: entered promiscuous mode [ 511.517445][T22189] hsr_slave_1: entered promiscuous mode [ 511.523793][T22189] debugfs: 'hsr0' already exists in 'hsr' [ 511.529909][T22189] Cannot create hsr debugfs directory [ 511.580306][T22191] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.588174][T22191] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.596969][T22191] bridge_slave_0: entered allmulticast mode [ 511.604569][T22191] bridge_slave_0: entered promiscuous mode [ 511.613330][T22191] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.620632][T22191] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.628126][T22191] bridge_slave_1: entered allmulticast mode [ 511.635627][T22191] bridge_slave_1: entered promiscuous mode [ 511.701880][T22193] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.709460][T22193] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.717273][T22193] bridge_slave_0: entered allmulticast mode [ 511.724820][T22193] bridge_slave_0: entered promiscuous mode [ 511.751412][T10491] net_ratelimit: 157 callbacks suppressed [ 511.751436][T10491] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 511.776573][T10491] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 511.787243][T22193] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.795481][T22193] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.803559][T22193] bridge_slave_1: entered allmulticast mode [ 511.807678][T10491] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 511.816938][T22193] bridge_slave_1: entered promiscuous mode [ 511.836934][T10491] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 511.868062][T22191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.878661][T10504] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 511.888212][T22191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.916777][T10491] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 511.947565][T10504] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 511.962818][T22193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.972092][T10504] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 511.987832][T10504] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 512.008652][T10502] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 512.046218][T22193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.073882][T22191] team0: Port device team_slave_0 added [ 512.083472][T22191] team0: Port device team_slave_1 added [ 512.143482][T22193] team0: Port device team_slave_0 added [ 512.193839][T22191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.200937][T22191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.227777][T22191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.241879][T22193] team0: Port device team_slave_1 added [ 512.265160][T22191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.272845][T22191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.300457][T22191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.387626][ T51] Bluetooth: hci1: command tx timeout [ 512.394678][T22193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.402066][T22193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.429043][T22193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.467520][T22193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.474512][T22193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.500565][ T51] Bluetooth: hci6: command tx timeout [ 512.508078][T22193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.548083][ T51] Bluetooth: hci7: command tx timeout [ 512.556708][T22191] hsr_slave_0: entered promiscuous mode [ 512.563384][T22191] hsr_slave_1: entered promiscuous mode [ 512.571851][T22191] debugfs: 'hsr0' already exists in 'hsr' [ 512.577761][T22191] Cannot create hsr debugfs directory [ 512.602372][T22193] hsr_slave_0: entered promiscuous mode [ 512.610538][T22193] hsr_slave_1: entered promiscuous mode [ 512.617555][T22193] debugfs: 'hsr0' already exists in 'hsr' [ 512.623394][T22193] Cannot create hsr debugfs directory [ 512.706739][ T51] Bluetooth: hci8: command tx timeout [ 512.786790][ T51] Bluetooth: hci9: command tx timeout [ 514.468357][ T51] Bluetooth: hci1: command tx timeout [ 514.546706][ T51] Bluetooth: hci6: command tx timeout [ 514.626799][ T51] Bluetooth: hci7: command tx timeout [ 514.786873][ T51] Bluetooth: hci8: command tx timeout [ 514.866907][ T51] Bluetooth: hci9: command tx timeout [ 516.547188][ T51] Bluetooth: hci1: command tx timeout [ 516.626731][ T51] Bluetooth: hci6: command tx timeout [ 516.707420][ T51] Bluetooth: hci7: command tx timeout [ 516.836848][T10504] net_ratelimit: 114 callbacks suppressed [ 516.836874][T10504] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 516.850596][T10504] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 516.870646][ T51] Bluetooth: hci8: command tx timeout [ 516.947267][ T51] Bluetooth: hci9: command tx timeout [ 516.966693][ T6847] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 516.974925][ T6847] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 517.086624][ T6847] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 517.094417][ T6847] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 517.206671][ T6847] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 517.214485][ T6847] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 517.327284][T10490] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 517.335093][T10490] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 518.157837][ T1918] block nbd3: Possible stuck request ffff888026a30000: control (read@0,1024B). Runtime 120 seconds [ 518.169162][ T1918] block nbd3: Possible stuck request ffff888026a30200: control (read@1024,1024B). Runtime 120 seconds [ 518.180243][ T1918] block nbd3: Possible stuck request ffff888026a30400: control (read@2048,1024B). Runtime 120 seconds [ 518.191303][ T1918] block nbd3: Possible stuck request ffff888026a30600: control (read@3072,1024B). Runtime 120 seconds [ 521.856910][T10504] net_ratelimit: 80 callbacks suppressed [ 521.856933][T10504] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 521.871148][T10504] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 521.992854][ T6847] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 522.001136][ T6847] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 522.116846][ T6845] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 522.124639][ T6845] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 522.238498][T10504] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 522.246306][T10504] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 522.356929][T10491] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 522.364749][T10491] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 524.066649][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 526.896611][ T49] net_ratelimit: 80 callbacks suppressed [ 526.896637][ T49] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 526.911476][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 527.027394][T10490] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 527.035280][T10490] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 527.146608][T10504] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 527.154472][T10504] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 527.266672][ T49] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 527.274484][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 527.387096][ T49] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 527.394895][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 531.926702][ T6847] net_ratelimit: 80 callbacks suppressed [ 531.926726][ T6847] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 531.940893][ T6847] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 532.067683][T10504] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 532.075989][T10504] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 532.187088][T10504] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 532.194878][T10504] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 532.307350][T10491] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 532.315182][T10491] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 532.427375][T10491] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 532.435623][T10491] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 536.966767][ T49] net_ratelimit: 80 callbacks suppressed [ 536.966791][ T49] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 536.980483][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 537.097322][T10490] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 537.109907][T10490] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 537.227261][T10490] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 537.235063][T10490] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 537.353038][ T49] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 537.361337][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 537.476688][ T6847] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 537.484515][ T6847] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 542.006761][T10490] net_ratelimit: 80 callbacks suppressed [ 542.006787][T10490] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 542.020461][T10490] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 542.136716][T10490] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 542.144508][T10490] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 542.256613][ T49] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 542.264807][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 542.376742][T10504] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 542.384545][T10504] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 542.496756][ T49] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 542.504564][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 547.016664][T10491] net_ratelimit: 80 callbacks suppressed [ 547.016694][T10491] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 547.031158][T10491] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 547.147060][ T6847] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 547.154863][ T6847] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 547.267854][ T6847] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 547.275720][ T6847] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 547.397181][ T6847] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 547.404980][ T6847] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 547.517167][ T49] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 547.524979][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 548.227085][ T1918] block nbd3: Possible stuck request ffff888026a30000: control (read@0,1024B). Runtime 150 seconds [ 548.238259][ T1918] block nbd3: Possible stuck request ffff888026a30200: control (read@1024,1024B). Runtime 150 seconds [ 548.249919][ T1918] block nbd3: Possible stuck request ffff888026a30400: control (read@2048,1024B). Runtime 150 seconds [ 548.261149][ T1918] block nbd3: Possible stuck request ffff888026a30600: control (read@3072,1024B). Runtime 150 seconds [ 552.047018][T10490] net_ratelimit: 80 callbacks suppressed [ 552.047044][T10490] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 552.061688][T10490] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 552.176768][T10490] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 552.184565][T10490] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 552.296744][T10504] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 552.304901][T10504] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 552.416763][T10490] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 552.424573][T10490] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 552.536647][ T49] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 552.544489][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 557.066616][T10491] net_ratelimit: 80 callbacks suppressed [ 557.066638][T10491] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 557.080522][T10491] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 557.196719][T10491] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 557.204517][T10491] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 557.316798][ T49] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 557.324574][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 557.436770][ T6847] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 557.444582][ T6847] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 557.556691][ T49] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 557.564486][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 557.843123][T10490] bridge_slave_0: left allmulticast mode [ 557.849252][T10490] bridge_slave_0: left promiscuous mode [ 557.856710][T10490] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.008308][T10490] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 558.125869][T10490] dvmrp6 (unregistering): left allmulticast mode [ 558.541025][T10490] bond6 (unregistering): (slave bridge9): Releasing backup interface [ 558.550149][T10490] bridge9 (unregistering): left promiscuous mode [ 558.612908][T10490] bond1 (unregistering): (slave lo): Releasing backup interface [ 558.621497][T10490] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 558.634430][T10490] bond1 (unregistering): Released all slaves [ 558.651762][T10490] bond2 (unregistering): Released all slaves [ 558.666482][T10490] bond3 (unregistering): Released all slaves [ 558.682298][T10490] bond4 (unregistering): Released all slaves [ 558.702157][T10490] bond5 (unregistering): Released all slaves [ 558.718567][T10490] bond6 (unregistering): Released all slaves [ 558.734974][T10490] bond7 (unregistering): (slave veth0_to_bond): Releasing active interface [ 558.746141][T10490] bond7 (unregistering): Released all slaves [ 558.770617][T10490] bond8 (unregistering): Released all slaves [ 558.898688][T10490] 9: left promiscuous mode [ 558.969281][T10490] tipc: Left network mode [ 559.540962][T10490] hsr_slave_0: left promiscuous mode [ 559.553096][T10490] hsr_slave_1: left promiscuous mode [ 559.560566][T10490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 559.568799][T10490] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 559.597928][T10490] veth0_macvtap: left allmulticast mode [ 559.603753][T10490] veth1_macvtap: left promiscuous mode [ 559.610607][T10490] veth0_macvtap: left promiscuous mode [ 559.618944][T10490] veth1_vlan: left promiscuous mode [ 559.624338][T10490] veth1_macvtap: left promiscuous mode [ 560.064658][T10490] team0 (unregistering): Port device team_slave_1 removed [ 560.106900][T10491] smc: removing ib device syz1 [ 563.407788][T10490] IPVS: stop unused estimator thread 0... [ 568.081733][ T5841] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 568.092695][ T5841] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 568.107321][ T5829] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 568.117585][ T5829] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 568.127775][ T5829] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 568.139467][ T5829] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 568.148149][T22341] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 568.154917][ T5829] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 568.164011][ T5829] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 568.173651][ T5829] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 568.228979][T22337] hsr0 speed is unknown, defaulting to 1000 [ 568.245136][T22339] hsr0 speed is unknown, defaulting to 1000 [ 568.475917][T22339] chnl_net:caif_netlink_parms(): no params data found [ 568.511479][T22337] chnl_net:caif_netlink_parms(): no params data found [ 568.659804][T22339] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.667421][T22339] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.674731][T22339] bridge_slave_0: entered allmulticast mode [ 568.683168][T22339] bridge_slave_0: entered promiscuous mode [ 568.692569][T22337] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.701270][T22337] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.709877][T22337] bridge_slave_0: entered allmulticast mode [ 568.717834][T22337] bridge_slave_0: entered promiscuous mode [ 568.725619][T22339] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.733714][T22339] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.741156][T22339] bridge_slave_1: entered allmulticast mode [ 568.749147][T22339] bridge_slave_1: entered promiscuous mode [ 568.769814][T22337] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.777441][T22337] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.785099][T22337] bridge_slave_1: entered allmulticast mode [ 568.793941][T22337] bridge_slave_1: entered promiscuous mode [ 568.843090][T22339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.855865][T22339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.871044][T22337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.895063][T22337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.930197][T22339] team0: Port device team_slave_0 added [ 568.950282][T22339] team0: Port device team_slave_1 added [ 568.959100][T22337] team0: Port device team_slave_0 added [ 568.986034][T22337] team0: Port device team_slave_1 added [ 569.039267][T22339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.046277][T22339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.127278][T22339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.206510][T22339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.213519][T22339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.274003][ T5841] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 569.284078][T22339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.296071][ T5841] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 569.307280][ T5841] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 569.315547][ T5841] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 569.324698][ T5841] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 569.364562][T22337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.373477][T22337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.404621][T22337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.414026][ T5829] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 569.423650][T22337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.432940][T22337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.434096][ T5829] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 569.470769][ T5829] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 569.477863][T22337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.490490][ T5829] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 569.501608][ T5829] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 569.572442][T22341] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 569.583654][T22341] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 569.594684][T22341] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 569.605610][T22341] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 569.630503][T22341] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 569.691311][T22337] hsr_slave_0: entered promiscuous mode [ 569.700922][T22337] hsr_slave_1: entered promiscuous mode [ 569.708215][T22337] debugfs: 'hsr0' already exists in 'hsr' [ 569.713962][T22337] Cannot create hsr debugfs directory [ 569.755612][T22339] hsr_slave_0: entered promiscuous mode [ 569.763141][T22339] hsr_slave_1: entered promiscuous mode [ 569.769897][T22339] debugfs: 'hsr0' already exists in 'hsr' [ 569.775653][T22339] Cannot create hsr debugfs directory [ 569.781525][T22357] hsr0 speed is unknown, defaulting to 1000 [ 569.845452][T22359] hsr0 speed is unknown, defaulting to 1000 [ 569.915472][T22361] hsr0 speed is unknown, defaulting to 1000 [ 570.226972][ T5829] Bluetooth: hci10: command tx timeout [ 570.233234][ T5829] Bluetooth: hci11: command tx timeout [ 570.442649][T22357] chnl_net:caif_netlink_parms(): no params data found [ 570.517581][T22361] chnl_net:caif_netlink_parms(): no params data found [ 570.593233][T22359] chnl_net:caif_netlink_parms(): no params data found [ 570.686082][T22357] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.693678][T22357] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.701405][T22357] bridge_slave_0: entered allmulticast mode [ 570.710206][T22357] bridge_slave_0: entered promiscuous mode [ 570.747550][T22357] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.754803][T22357] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.762739][T22357] bridge_slave_1: entered allmulticast mode [ 570.770876][T22357] bridge_slave_1: entered promiscuous mode [ 570.879134][T22357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.911013][T22361] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.918419][T22361] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.925960][T22361] bridge_slave_0: entered allmulticast mode [ 570.935429][T22361] bridge_slave_0: entered promiscuous mode [ 570.946135][T22357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.979520][T22361] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.988971][T22361] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.996696][T22361] bridge_slave_1: entered allmulticast mode [ 571.004268][T22361] bridge_slave_1: entered promiscuous mode [ 571.034284][T22359] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.043492][T22359] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.051793][T22359] bridge_slave_0: entered allmulticast mode [ 571.059559][T22359] bridge_slave_0: entered promiscuous mode [ 571.081786][T22357] team0: Port device team_slave_0 added [ 571.088221][T22359] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.096102][T22359] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.104464][T22359] bridge_slave_1: entered allmulticast mode [ 571.112990][T22359] bridge_slave_1: entered promiscuous mode [ 571.138272][T22357] team0: Port device team_slave_1 added [ 571.162371][T22361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.210693][T22361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.253240][T22359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.286633][T22357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.293703][T22357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.320539][T22357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.334681][T22359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.349590][T22361] team0: Port device team_slave_0 added [ 571.356287][T22357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.364508][T22357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.391659][T22357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.416125][T22361] team0: Port device team_slave_1 added [ 571.428933][ T5829] Bluetooth: hci12: command tx timeout [ 571.514887][T22359] team0: Port device team_slave_0 added [ 571.522207][T22361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.529630][T22361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.556270][T22361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.583248][T22357] hsr_slave_0: entered promiscuous mode [ 571.590792][T22357] hsr_slave_1: entered promiscuous mode [ 571.596893][ T5829] Bluetooth: hci13: command tx timeout [ 571.600138][T22357] debugfs: 'hsr0' already exists in 'hsr' [ 571.610926][T22357] Cannot create hsr debugfs directory [ 571.635650][T22359] team0: Port device team_slave_1 added [ 571.642522][T22361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.650351][T22361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.678882][ T5829] Bluetooth: hci14: command tx timeout [ 571.685324][T22361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.778787][T22359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.785789][T22359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.817445][T22359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.830900][T22359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.842999][T22359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.870547][T22359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.901023][T22361] hsr_slave_0: entered promiscuous mode [ 571.910723][T22361] hsr_slave_1: entered promiscuous mode [ 571.920081][T22361] debugfs: 'hsr0' already exists in 'hsr' [ 571.925841][T22361] Cannot create hsr debugfs directory [ 572.047976][T22359] hsr_slave_0: entered promiscuous mode [ 572.054693][T22359] hsr_slave_1: entered promiscuous mode [ 572.061975][T22359] debugfs: 'hsr0' already exists in 'hsr' [ 572.068123][T22359] Cannot create hsr debugfs directory [ 572.317506][ T5829] Bluetooth: hci11: command tx timeout [ 572.323063][ T5829] Bluetooth: hci10: command tx timeout [ 573.507944][T22341] Bluetooth: hci12: command tx timeout [ 573.666915][T22341] Bluetooth: hci13: command tx timeout [ 573.746959][T22341] Bluetooth: hci14: command tx timeout [ 574.386596][T22341] Bluetooth: hci10: command tx timeout [ 574.387064][ T5841] Bluetooth: hci11: command tx timeout [ 575.266677][ T5841] Bluetooth: hci4: command 0x040f tx timeout [ 575.591687][ T5829] Bluetooth: hci12: command tx timeout [ 575.747086][ T5829] Bluetooth: hci13: command tx timeout [ 575.826986][ T5829] Bluetooth: hci14: command tx timeout [ 576.466614][ T5829] Bluetooth: hci10: command tx timeout [ 576.466632][ T5841] Bluetooth: hci11: command tx timeout [ 577.672340][ T5829] Bluetooth: hci12: command tx timeout [ 577.826837][ T5829] Bluetooth: hci13: command tx timeout [ 577.907238][ T5829] Bluetooth: hci14: command tx timeout [ 578.280968][ T5192] udevd[5192]: worker [13263] /devices/virtual/block/nbd3 timeout; kill it [ 578.290905][ T5192] udevd[5192]: seq 21459 '/devices/virtual/block/nbd3' killed [ 578.346632][ T1918] block nbd3: Possible stuck request ffff888026a30000: control (read@0,1024B). Runtime 180 seconds [ 578.357694][ T1918] block nbd3: Possible stuck request ffff888026a30200: control (read@1024,1024B). Runtime 180 seconds [ 578.369674][ T1918] block nbd3: Possible stuck request ffff888026a30400: control (read@2048,1024B). Runtime 180 seconds [ 578.381664][ T1918] block nbd3: Possible stuck request ffff888026a30600: control (read@3072,1024B). Runtime 180 seconds [ 593.865672][T10504] dvmrp0 (unregistering): left allmulticast mode [ 594.062843][T10504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 594.073654][T10504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 594.084696][T10504] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 594.094469][T10504] bond0 (unregistering): Released all slaves [ 594.107112][T10504] bond1 (unregistering): Released all slaves [ 594.122499][T10504] bond2 (unregistering): Released all slaves [ 594.140281][T10504] bond3 (unregistering): Released all slaves [ 594.155913][T10504] bond4 (unregistering): Released all slaves [ 594.175660][T10504] bond5 (unregistering): (slave team_slave_0): Releasing backup interface [ 594.186926][T10504] bond5 (unregistering): Released all slaves [ 594.201870][T10504] bond6 (unregistering): Released all slaves [ 594.217902][T10504] bond7 (unregistering): Released all slaves [ 594.235740][T10504] bond8 (unregistering): Released all slaves [ 594.258987][T10504] bond9 (unregistering): Released all slaves [ 594.278160][T10504] bond10 (unregistering): Released all slaves [ 594.438847][T10504] tipc: Disabling bearer [ 594.456855][T10504] tipc: Left network mode [ 594.563616][T10504] IPVS: stopping backup sync thread 8961 ... [ 594.897846][T10504] hsr_slave_0: left promiscuous mode [ 594.904005][T10504] hsr_slave_1: left promiscuous mode [ 594.912382][T10504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.920426][T10504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.078967][T10504] team0 (unregistering): Port device team_slave_1 removed [ 595.178542][T10504] smc: removing net device team0 with user defined pnetid SYZ2 [ 595.430360][T10504] IPVS: stop unused estimator thread 0... [ 608.390341][ T1918] block nbd3: Possible stuck request ffff888026a30000: control (read@0,1024B). Runtime 210 seconds [ 608.401213][ T1918] block nbd3: Possible stuck request ffff888026a30200: control (read@1024,1024B). Runtime 210 seconds [ 608.412708][ T1918] block nbd3: Possible stuck request ffff888026a30400: control (read@2048,1024B). Runtime 210 seconds [ 608.424801][ T1918] block nbd3: Possible stuck request ffff888026a30600: control (read@3072,1024B). Runtime 210 seconds [ 624.400827][ T6845] veth0_to_bridge: left allmulticast mode [ 624.406792][ T6845] veth0_to_bridge: left promiscuous mode [ 624.412611][ T6845] bridge0: port 3(veth0_to_bridge) entered disabled state [ 624.422618][ T6845] bridge_slave_1: left allmulticast mode [ 624.428916][ T6845] bridge_slave_1: left promiscuous mode [ 624.434667][ T6845] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.448097][ T6845] bridge_slave_0: left allmulticast mode [ 624.453771][ T6845] bridge_slave_0: left promiscuous mode [ 624.460534][ T6845] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.610620][ T6845] dvmrp6 (unregistering): left allmulticast mode [ 624.754960][ T6845] bond13 (unregistering): (slave bridge2): Releasing backup interface [ 624.943521][ T6845]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 624.955108][ T6845]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 624.966830][ T6845]  (unregistering): Released all slaves [ 624.977866][ T6845] bond1 (unregistering): Released all slaves [ 624.992803][ T6845] bond2 (unregistering): Released all slaves [ 625.008107][ T6845] bond3 (unregistering): Released all slaves [ 625.024103][ T6845] bond4 (unregistering): Released all slaves [ 625.041406][ T6845] bond5 (unregistering): Released all slaves [ 625.062611][ T6845] bond0 (unregistering): Released all slaves [ 625.079453][ T6845] bond6 (unregistering): Released all slaves [ 625.095028][ T6845] bond7 (unregistering): Released all slaves [ 625.111165][ T6845] bond8 (unregistering): Released all slaves [ 625.129400][ T6845] bond9 (unregistering): Released all slaves [ 625.147528][ T6845] bond10 (unregistering): Released all slaves [ 625.167059][ T6845] bond11 (unregistering): Released all slaves [ 625.183754][ T6845] bond12 (unregistering): Released all slaves [ 625.199999][ T6845] bond13 (unregistering): Released all slaves [ 625.222468][ T6845] bond14 (unregistering): Released all slaves [ 625.237260][ T6845] bond15 (unregistering): Released all slaves [ 625.253428][ T6845] bond16 (unregistering): Released all slaves [ 625.267883][ T6845] bond17 (unregistering): Released all slaves [ 625.284087][ T6845] bond18 (unregistering): (slave vxcan5): Releasing backup interface [ 625.293238][ T6845] bond18 (unregistering): Released all slaves [ 625.320818][ T6845] bond19 (unregistering): Released all slaves [ 625.335759][ T6845] bond20 (unregistering): Released all slaves [ 625.595771][ T6845] 9: left promiscuous mode [ 625.688700][ T6845] tipc: Left network mode [ 626.111473][ T6845] hsr_slave_0: left promiscuous mode [ 626.117972][ T6845] hsr_slave_1: left promiscuous mode [ 626.123966][ T6845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.134009][ T6845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.385658][ T6845] team0 (unregistering): Port device team_slave_1 removed [ 626.415709][ T6845] team0 (unregistering): Port device team_slave_0 removed [ 626.920660][ T6845] IPVS: stop unused estimator thread 0... [ 628.634249][ T5841] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 628.650642][ T5841] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 628.659726][ T5841] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 628.672722][ T51] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 628.680298][T22341] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 628.683716][ T51] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 628.696612][T22341] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 628.718020][ T5829] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 628.729432][ T5829] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 628.739000][ T5829] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 628.759859][T22388] hsr0 speed is unknown, defaulting to 1000 [ 628.828460][T22390] hsr0 speed is unknown, defaulting to 1000 [ 629.010664][T22388] chnl_net:caif_netlink_parms(): no params data found [ 629.081454][T22390] chnl_net:caif_netlink_parms(): no params data found [ 629.152913][T22388] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.160265][T22388] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.168649][T22388] bridge_slave_0: entered allmulticast mode [ 629.176019][T22388] bridge_slave_0: entered promiscuous mode [ 629.191488][T22388] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.198898][T22388] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.207283][T22388] bridge_slave_1: entered allmulticast mode [ 629.215869][T22388] bridge_slave_1: entered promiscuous mode [ 629.273868][T22388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.298529][T22388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.321962][T22390] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.329518][T22390] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.337602][T22390] bridge_slave_0: entered allmulticast mode [ 629.345260][T22390] bridge_slave_0: entered promiscuous mode [ 629.368371][T22390] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.375585][T22390] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.383697][T22390] bridge_slave_1: entered allmulticast mode [ 629.391635][T22390] bridge_slave_1: entered promiscuous mode [ 629.401483][T22388] team0: Port device team_slave_0 added [ 629.422286][T22388] team0: Port device team_slave_1 added [ 629.457760][T22390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.470842][T22390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.503893][T22388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 629.522432][T22388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 629.551100][T22388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 629.618398][T22388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 629.625412][T22388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 629.655558][T22388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 629.713534][T22390] team0: Port device team_slave_0 added [ 629.725835][T22390] team0: Port device team_slave_1 added [ 629.787254][T22410] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 629.799787][T22410] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 629.809424][T22410] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 629.819909][T22410] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 629.828895][T22410] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 629.941736][T22390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 629.956543][T22390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 629.990486][T22405] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 630.006902][T22405] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 630.016263][T22390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 630.028075][T22405] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 630.038113][T22405] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 630.048568][T22405] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 630.063304][T22404] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 630.068902][T22388] hsr_slave_0: entered promiscuous mode [ 630.078622][T22388] hsr_slave_1: entered promiscuous mode [ 630.089111][T22404] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 630.099207][T22404] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 630.107552][T22404] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 630.115807][T22404] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 630.153361][T22390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 630.161645][T22390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 630.188373][T22390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 630.209661][T22409] hsr0 speed is unknown, defaulting to 1000 [ 630.290895][T22414] hsr0 speed is unknown, defaulting to 1000 [ 630.337270][T22412] hsr0 speed is unknown, defaulting to 1000 [ 630.368739][T22390] hsr_slave_0: entered promiscuous mode [ 630.375521][T22390] hsr_slave_1: entered promiscuous mode [ 630.382124][T22390] debugfs: 'hsr0' already exists in 'hsr' [ 630.389375][T22390] Cannot create hsr debugfs directory [ 630.707666][T22405] Bluetooth: hci15: command tx timeout [ 630.786571][T22405] Bluetooth: hci16: command tx timeout [ 630.870002][T22414] chnl_net:caif_netlink_parms(): no params data found [ 630.998182][T22409] chnl_net:caif_netlink_parms(): no params data found [ 631.057284][T22412] chnl_net:caif_netlink_parms(): no params data found [ 631.176070][T22414] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.183502][T22414] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.191924][T22414] bridge_slave_0: entered allmulticast mode [ 631.199893][T22414] bridge_slave_0: entered promiscuous mode [ 631.209023][T22414] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.216168][T22414] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.223640][T22414] bridge_slave_1: entered allmulticast mode [ 631.232411][T22414] bridge_slave_1: entered promiscuous mode [ 631.329925][T22409] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.338965][T22409] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.347029][T22409] bridge_slave_0: entered allmulticast mode [ 631.354986][T22409] bridge_slave_0: entered promiscuous mode [ 631.372521][T22414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.382173][T22409] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.389971][T22409] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.397824][T22409] bridge_slave_1: entered allmulticast mode [ 631.405491][T22409] bridge_slave_1: entered promiscuous mode [ 631.436280][T22414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.508669][T22412] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.515907][T22412] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.523697][T22412] bridge_slave_0: entered allmulticast mode [ 631.531449][T22412] bridge_slave_0: entered promiscuous mode [ 631.551306][T22414] team0: Port device team_slave_0 added [ 631.562557][T22414] team0: Port device team_slave_1 added [ 631.571993][T22409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.587942][T22405] Bluetooth: hci6: command 0x0406 tx timeout [ 631.595987][T22409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.597940][T22405] Bluetooth: hci7: command 0x0406 tx timeout [ 631.607530][T22412] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.616234][T22404] Bluetooth: hci8: command 0x0406 tx timeout [ 631.618733][T22417] Bluetooth: hci1: command 0x0406 tx timeout [ 631.630651][T22404] Bluetooth: hci9: command 0x0406 tx timeout [ 631.650164][T22412] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.658643][T22412] bridge_slave_1: entered allmulticast mode [ 631.683538][T22412] bridge_slave_1: entered promiscuous mode [ 631.761416][T22409] team0: Port device team_slave_0 added [ 631.787075][T22414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.794061][T22414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.821957][T22414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.835135][T22414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.842335][T22414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.871835][T22414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 631.885335][T22409] team0: Port device team_slave_1 added [ 631.894756][T22412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.910508][T22412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.921499][ T5827] Bluetooth: hci17: command tx timeout [ 631.986971][T22409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.994104][T22409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.020478][T22409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.033696][T22409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.041011][T22409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.067592][T22409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.098509][T22412] team0: Port device team_slave_0 added [ 632.108107][T22412] team0: Port device team_slave_1 added [ 632.152209][ T5827] Bluetooth: hci18: command tx timeout [ 632.152217][ T5841] Bluetooth: hci19: command tx timeout [ 632.195928][T22412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.203775][T22412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.232292][T22412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.246301][T22412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.253612][T22412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.281291][T22412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.300897][T22414] hsr_slave_0: entered promiscuous mode [ 632.309004][T22414] hsr_slave_1: entered promiscuous mode [ 632.315503][T22414] debugfs: 'hsr0' already exists in 'hsr' [ 632.322073][T22414] Cannot create hsr debugfs directory [ 632.419726][T22409] hsr_slave_0: entered promiscuous mode [ 632.427544][T22409] hsr_slave_1: entered promiscuous mode [ 632.434363][T22409] debugfs: 'hsr0' already exists in 'hsr' [ 632.440406][T22409] Cannot create hsr debugfs directory [ 632.510236][T22412] hsr_slave_0: entered promiscuous mode [ 632.518377][T22412] hsr_slave_1: entered promiscuous mode [ 632.524809][T22412] debugfs: 'hsr0' already exists in 'hsr' [ 632.530978][T22412] Cannot create hsr debugfs directory [ 632.786694][ T5827] Bluetooth: hci15: command tx timeout [ 632.867651][ T5827] Bluetooth: hci16: command tx timeout [ 633.986657][ T5827] Bluetooth: hci17: command tx timeout [ 634.226659][ T5827] Bluetooth: hci18: command tx timeout [ 634.227938][ T5841] Bluetooth: hci19: command tx timeout [ 634.866698][ T5841] Bluetooth: hci15: command tx timeout [ 634.956738][ T5841] Bluetooth: hci16: command tx timeout [ 636.066701][ T5841] Bluetooth: hci17: command tx timeout [ 636.306576][ T5841] Bluetooth: hci19: command tx timeout [ 636.307350][ T5827] Bluetooth: hci18: command tx timeout [ 636.946667][ T5827] Bluetooth: hci15: command tx timeout [ 637.026672][ T5827] Bluetooth: hci16: command tx timeout [ 638.150966][ T5827] Bluetooth: hci17: command tx timeout [ 638.386745][ T5827] Bluetooth: hci19: command tx timeout [ 638.386756][ T5841] Bluetooth: hci18: command tx timeout [ 638.467967][ T1918] block nbd3: Possible stuck request ffff888026a30000: control (read@0,1024B). Runtime 240 seconds [ 638.479453][ T1918] block nbd3: Possible stuck request ffff888026a30200: control (read@1024,1024B). Runtime 240 seconds [ 638.490980][ T1918] block nbd3: Possible stuck request ffff888026a30400: control (read@2048,1024B). Runtime 240 seconds [ 638.502177][ T1918] block nbd3: Possible stuck request ffff888026a30600: control (read@3072,1024B). Runtime 240 seconds [ 654.466960][ T30] INFO: task syz.3.4345:22109 blocked for more than 143 seconds. [ 654.474756][ T30] Not tainted syzkaller #0 [ 654.480233][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 654.489957][ T30] task:syz.3.4345 state:D stack:26520 pid:22109 tgid:22108 ppid:17328 task_flags:0x400140 flags:0x00080002 [ 654.502534][ T30] Call Trace: [ 654.505968][ T30] [ 654.509522][ T30] __schedule+0x1585/0x5340 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 654.514277][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 654.520069][ T30] ? __pfx___schedule+0x10/0x10 [ 654.524996][ T30] ? schedule+0x90/0x360 [ 654.529460][ T30] schedule+0x164/0x360 [ 654.533677][ T30] schedule_preempt_disabled+0x13/0x30 [ 654.539773][ T30] __mutex_lock+0x7fe/0x1300 [ 654.544427][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 654.550508][ T30] ? __mutex_lock+0x5ac/0x1300 [ 654.555348][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 654.560446][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 654.565548][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 654.571486][ T30] ? radix_tree_lookup+0x240/0x290 [ 654.577042][ T30] genl_rcv_msg+0x10b/0x7a0 [ 654.581644][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 654.587266][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 654.606462][ T30] netlink_rcv_skb+0x232/0x4b0 [ 654.611343][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 654.641639][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 654.651810][ T30] ? down_read+0x272/0x2e0 [ 654.657231][ T30] ? genl_rcv+0xd/0x40 [ 654.661377][ T30] genl_rcv+0x28/0x40 [ 654.665409][ T30] netlink_unicast+0x80f/0x9b0 [ 654.670902][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 654.676242][ T30] ? netlink_sendmsg+0x650/0xb40 [ 654.686245][ T30] ? skb_put+0x11b/0x210 [ 654.691417][ T30] netlink_sendmsg+0x813/0xb40 [ 654.696247][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 654.703099][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 654.708833][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 654.714297][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 654.720454][ T30] __sys_sendto+0x672/0x710 [ 654.725179][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 654.730790][ T30] ? fd_install+0x94/0x3d0 [ 654.735319][ T30] ? fd_install+0x306/0x3d0 [ 654.740386][ T30] __x64_sys_sendto+0xde/0x100 [ 654.745213][ T30] do_syscall_64+0x14d/0xf80 [ 654.750733][ T30] ? trace_irq_disable+0x3b/0x150 [ 654.755815][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.762615][ T30] ? clear_bhb_loop+0x40/0x90 [ 654.767679][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.773629][ T30] RIP: 0033:0x7f61bef5cfce [ 654.778629][ T30] RSP: 002b:00007f61bfdf6e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 654.787523][ T30] RAX: ffffffffffffffda RBX: 00007f61bfdf86c0 RCX: 00007f61bef5cfce [ 654.795540][ T30] RDX: 0000000000000020 RSI: 00007f61bfdf7000 RDI: 000000000000000d [ 654.804324][ T30] RBP: 0000000000000000 R08: 00007f61bfdf6f04 R09: 000000000000000c [ 654.812860][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 654.820981][ T30] R13: 00007f61bfdf6f58 R14: 00007f61bfdf7000 R15: 0000000000000000 [ 654.829109][ T30] [ 654.832190][ T30] INFO: task syz.3.4345:22119 blocked for more than 143 seconds. [ 654.840410][ T30] Not tainted syzkaller #0 [ 654.845382][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 654.854226][ T30] task:syz.3.4345 state:D stack:26240 pid:22119 tgid:22108 ppid:17328 task_flags:0x480140 flags:0x00080002 [ 654.866927][ T30] Call Trace: [ 654.870249][ T30] [ 654.873216][ T30] __schedule+0x1585/0x5340 [ 654.877918][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 654.882987][ T30] ? __pfx___schedule+0x10/0x10 [ 654.888104][ T30] ? schedule+0x90/0x360 [ 654.892397][ T30] schedule+0x164/0x360 [ 654.896931][ T30] blk_mq_freeze_queue_wait+0x101/0x180 [ 654.903001][ T30] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 654.909201][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 654.915339][ T30] queue_limits_commit_update_frozen+0x55/0xd0 [ 654.921813][ T30] nbd_set_size+0x454/0x680 [ 654.926847][ T30] ? __pfx_nbd_set_size+0x10/0x10 [ 654.931925][ T30] ? nla_memcpy+0x5b/0xc0 [ 654.936440][ T30] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 654.941802][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 654.948035][ T30] ? rcu_is_watching+0x15/0xb0 [ 654.952850][ T30] ? trace_kmalloc+0x2a/0x110 [ 654.958086][ T30] ? __nla_parse+0x40/0x60 [ 654.962554][ T30] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 654.969076][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 654.974673][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 654.981078][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 654.986072][ T30] genl_rcv_msg+0x61c/0x7a0 [ 654.991083][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 654.996178][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 655.002165][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 655.007622][ T30] netlink_rcv_skb+0x232/0x4b0 [ 655.012432][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 655.017874][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 655.023218][ T30] ? down_read+0x272/0x2e0 [ 655.028099][ T30] ? genl_rcv+0xd/0x40 [ 655.032227][ T30] genl_rcv+0x28/0x40 [ 655.036267][ T30] netlink_unicast+0x80f/0x9b0 [ 655.041233][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 655.046910][ T30] ? netlink_sendmsg+0x650/0xb40 [ 655.051870][ T30] ? skb_put+0x11b/0x210 [ 655.056140][ T30] netlink_sendmsg+0x813/0xb40 [ 655.061080][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 655.066607][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 655.071602][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 655.077372][ T30] ____sys_sendmsg+0x972/0x9f0 [ 655.082236][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 655.087867][ T30] ? import_iovec+0x73/0xa0 [ 655.092520][ T30] ___sys_sendmsg+0x2a5/0x360 [ 655.097324][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 655.102586][ T30] ? futex_wake+0x4ac/0x580 [ 655.110875][ T30] ? __fget_files+0x2a/0x420 [ 655.115544][ T30] ? __fget_files+0x3a0/0x420 [ 655.120482][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 655.125487][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 655.131104][ T30] ? rcu_is_watching+0x15/0xb0 [ 655.135932][ T30] do_syscall_64+0x14d/0xf80 [ 655.141075][ T30] ? trace_irq_disable+0x3b/0x150 [ 655.146137][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.152366][ T30] ? clear_bhb_loop+0x40/0x90 [ 655.157175][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.163104][ T30] RIP: 0033:0x7f61bef9c799 [ 655.167919][ T30] RSP: 002b:00007f61bfdd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 655.176611][ T30] RAX: ffffffffffffffda RBX: 00007f61bf216090 RCX: 00007f61bef9c799 [ 655.184626][ T30] RDX: 0000000020000004 RSI: 0000200000000280 RDI: 0000000000000007 [ 655.192967][ T30] RBP: 00007f61bf032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 655.201602][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 655.210181][ T30] R13: 00007f61bf216128 R14: 00007f61bf216090 R15: 00007ffc56d55808 [ 655.218378][ T30] [ 655.221496][ T30] INFO: task syz.3.4345:22123 blocked for more than 144 seconds. [ 655.229654][ T30] Not tainted syzkaller #0 [ 655.234627][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 655.243442][ T30] task:syz.3.4345 state:D stack:27632 pid:22123 tgid:22108 ppid:17328 task_flags:0x400040 flags:0x00080002 [ 655.255667][ T30] Call Trace: [ 655.259451][ T30] [ 655.262436][ T30] __schedule+0x1585/0x5340 [ 655.267356][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 655.272359][ T30] ? __pfx___schedule+0x10/0x10 [ 655.277406][ T30] ? schedule+0x90/0x360 [ 655.281696][ T30] schedule+0x164/0x360 [ 655.285885][ T30] schedule_preempt_disabled+0x13/0x30 [ 655.291872][ T30] __mutex_lock+0x7fe/0x1300 [ 655.296567][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 655.301958][ T30] ? __mutex_lock+0x5ac/0x1300 [ 655.307632][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 655.312790][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 655.318285][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 655.323666][ T30] ? radix_tree_lookup+0x240/0x290 [ 655.329013][ T30] genl_rcv_msg+0x10b/0x7a0 [ 655.333618][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 655.338798][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 655.343805][ T30] netlink_rcv_skb+0x232/0x4b0 [ 655.349374][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 655.354468][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 655.360096][ T30] ? down_read+0x272/0x2e0 [ 655.364590][ T30] ? genl_rcv+0xd/0x40 [ 655.368830][ T30] genl_rcv+0x28/0x40 [ 655.372856][ T30] netlink_unicast+0x80f/0x9b0 [ 655.378061][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 655.383398][ T30] ? netlink_sendmsg+0x650/0xb40 [ 655.388466][ T30] ? skb_put+0x11b/0x210 [ 655.392762][ T30] netlink_sendmsg+0x813/0xb40 [ 655.397768][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 655.403100][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 655.408516][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 655.414358][ T30] ____sys_sendmsg+0x972/0x9f0 [ 655.419504][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 655.424868][ T30] ? import_iovec+0x73/0xa0 [ 655.429694][ T30] ___sys_sendmsg+0x2a5/0x360 [ 655.434411][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 655.440098][ T30] ? futex_wake+0x4ac/0x580 [ 655.444659][ T30] ? __fget_files+0x2a/0x420 [ 655.449397][ T30] ? __fget_files+0x3a0/0x420 [ 655.454140][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 655.459210][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 655.464729][ T30] ? rcu_is_watching+0x15/0xb0 [ 655.469998][ T30] do_syscall_64+0x14d/0xf80 [ 655.475053][ T30] ? trace_irq_disable+0x3b/0x150 [ 655.480312][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.486507][ T30] ? clear_bhb_loop+0x40/0x90 [ 655.491232][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.497534][ T30] RIP: 0033:0x7f61bef9c799 [ 655.501991][ T30] RSP: 002b:00007f61bfdb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 655.510710][ T30] RAX: ffffffffffffffda RBX: 00007f61bf216180 RCX: 00007f61bef9c799 [ 655.519446][ T30] RDX: 0000000004008054 RSI: 0000200000000200 RDI: 0000000000000006 [ 655.528080][ T30] RBP: 00007f61bf032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 655.536243][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 655.544397][ T30] R13: 00007f61bf216218 R14: 00007f61bf216180 R15: 00007ffc56d55808 [ 655.552575][ T30] [ 655.555650][ T30] INFO: task syz.2.4344:22117 blocked for more than 144 seconds. [ 655.567462][ T30] Not tainted syzkaller #0 [ 655.572454][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 655.581341][ T30] task:syz.2.4344 state:D stack:27840 pid:22117 tgid:22116 ppid:16519 task_flags:0x400140 flags:0x00080002 [ 655.594099][ T30] Call Trace: [ 655.597497][ T30] [ 655.600480][ T30] __schedule+0x1585/0x5340 [ 655.605063][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 655.610166][ T30] ? __pfx___schedule+0x10/0x10 [ 655.615094][ T30] ? schedule+0x90/0x360 [ 655.620245][ T30] schedule+0x164/0x360 [ 655.624477][ T30] schedule_preempt_disabled+0x13/0x30 [ 655.630102][ T30] __mutex_lock+0x7fe/0x1300 [ 655.634747][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 655.640305][ T30] ? __mutex_lock+0x5ac/0x1300 [ 655.645149][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 655.650372][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 655.658882][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 655.663873][ T30] ? radix_tree_lookup+0x240/0x290 [ 655.669535][ T30] genl_rcv_msg+0x10b/0x7a0 [ 655.674083][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 655.679535][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 655.684622][ T30] netlink_rcv_skb+0x232/0x4b0 [ 655.690399][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 655.695468][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 655.700901][ T30] ? down_read+0x272/0x2e0 [ 655.705351][ T30] ? genl_rcv+0xd/0x40 [ 655.709912][ T30] genl_rcv+0x28/0x40 [ 655.713925][ T30] netlink_unicast+0x80f/0x9b0 [ 655.719705][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 655.725409][ T30] ? netlink_sendmsg+0x650/0xb40 [ 655.730619][ T30] ? skb_put+0x11b/0x210 [ 655.734915][ T30] netlink_sendmsg+0x813/0xb40 [ 655.740094][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 655.745409][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 655.751141][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 655.756611][ T30] ____sys_sendmsg+0x972/0x9f0 [ 655.761438][ T30] ? futex_unqueue+0x211/0x240 [ 655.766289][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 655.772189][ T30] ? import_iovec+0x73/0xa0 [ 655.776824][ T30] ___sys_sendmsg+0x2a5/0x360 [ 655.781600][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 655.787002][ T30] ? futex_wait+0x29a/0x380 [ 655.791611][ T30] ? __fget_files+0x2a/0x420 [ 655.796227][ T30] ? __fget_files+0x3a0/0x420 [ 655.801490][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 655.806614][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 655.812135][ T30] ? rcu_is_watching+0x15/0xb0 [ 655.817037][ T30] do_syscall_64+0x14d/0xf80 [ 655.821688][ T30] ? trace_irq_disable+0x3b/0x150 [ 655.827855][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.834004][ T30] ? clear_bhb_loop+0x40/0x90 [ 655.838882][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.844817][ T30] RIP: 0033:0x7fb4e799c799 [ 655.849435][ T30] RSP: 002b:00007fb4e5bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 655.858401][ T30] RAX: ffffffffffffffda RBX: 00007fb4e7c15fa0 RCX: 00007fb4e799c799 [ 655.866501][ T30] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 655.874510][ T30] RBP: 00007fb4e7a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 655.882682][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 655.890979][ T30] R13: 00007fb4e7c16038 R14: 00007fb4e7c15fa0 R15: 00007ffff986a9f8 [ 655.899134][ T30] [ 655.902213][ T30] INFO: task syz.2.4344:22126 blocked for more than 144 seconds. [ 655.910553][ T30] Not tainted syzkaller #0 [ 655.915530][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 655.924683][ T30] task:syz.2.4344 state:D stack:28752 pid:22126 tgid:22116 ppid:16519 task_flags:0x400040 flags:0x00080002 [ 655.937310][ T30] Call Trace: [ 655.940733][ T30] [ 655.943705][ T30] __schedule+0x1585/0x5340 [ 655.948796][ T30] ? __pfx___schedule+0x10/0x10 [ 655.953733][ T30] ? schedule+0x90/0x360 [ 655.958134][ T30] schedule+0x164/0x360 [ 655.962342][ T30] schedule_preempt_disabled+0x13/0x30 [ 655.968328][ T30] __mutex_lock+0x7fe/0x1300 [ 655.972989][ T30] ? __mutex_lock+0x5ac/0x1300 [ 655.978178][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 655.982947][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 655.988290][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 655.993290][ T30] ? radix_tree_lookup+0x240/0x290 [ 655.998575][ T30] genl_rcv_msg+0x10b/0x7a0 [ 656.003146][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 656.008735][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 656.013733][ T30] netlink_rcv_skb+0x232/0x4b0 [ 656.018846][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 656.023931][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 656.029903][ T30] ? down_read+0x272/0x2e0 [ 656.034374][ T30] ? genl_rcv+0xd/0x40 [ 656.038908][ T30] genl_rcv+0x28/0x40 [ 656.042949][ T30] netlink_unicast+0x80f/0x9b0 [ 656.047830][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 656.053158][ T30] ? netlink_sendmsg+0x650/0xb40 [ 656.058864][ T30] ? skb_put+0x11b/0x210 [ 656.063188][ T30] netlink_sendmsg+0x813/0xb40 [ 656.068490][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 656.073838][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 656.079105][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 656.084447][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 656.089974][ T30] __sys_sendto+0x672/0x710 [ 656.094564][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 656.100110][ T30] ? exc_page_fault+0x6a/0xc0 [ 656.104845][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 656.110308][ T30] __x64_sys_sendto+0xde/0x100 [ 656.115124][ T30] do_syscall_64+0x14d/0xf80 [ 656.119866][ T30] ? trace_irq_disable+0x3b/0x150 [ 656.124944][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.131966][ T30] ? clear_bhb_loop+0x40/0x90 [ 656.136794][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.142727][ T30] RIP: 0033:0x7fb4e795cfce [ 656.147779][ T30] RSP: 002b:00007fb4e578fe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 656.156261][ T30] RAX: ffffffffffffffda RBX: 00007fb4e57916c0 RCX: 00007fb4e795cfce [ 656.164765][ T30] RDX: 0000000000000028 RSI: 00007fb4e5790000 RDI: 0000000000000004 [ 656.173005][ T30] RBP: 0000000000000000 R08: 00007fb4e578ff04 R09: 000000000000000c [ 656.181139][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 656.189769][ T30] R13: 00007fb4e578ff58 R14: 00007fb4e5790000 R15: 0000000000000000 [ 656.197905][ T30] [ 656.200991][ T30] INFO: task syz.4.4349:22134 blocked for more than 145 seconds. [ 656.209016][ T30] Not tainted syzkaller #0 [ 656.214492][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 656.223604][ T30] task:syz.4.4349 state:D stack:26120 pid:22134 tgid:22132 ppid:16877 task_flags:0x400140 flags:0x00080002 [ 656.236495][ T30] Call Trace: [ 656.239830][ T30] [ 656.242806][ T30] __schedule+0x1585/0x5340 [ 656.247808][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 656.252829][ T30] ? __pfx___schedule+0x10/0x10 [ 656.257816][ T30] ? schedule+0x90/0x360 [ 656.262106][ T30] schedule+0x164/0x360 [ 656.266590][ T30] schedule_preempt_disabled+0x13/0x30 [ 656.272098][ T30] __mutex_lock+0x7fe/0x1300 [ 656.277144][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 656.282404][ T30] ? __mutex_lock+0x5ac/0x1300 [ 656.287293][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 656.292032][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 656.297419][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 656.302428][ T30] ? radix_tree_lookup+0x240/0x290 [ 656.308184][ T30] genl_rcv_msg+0x10b/0x7a0 [ 656.312766][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 656.318015][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 656.323022][ T30] netlink_rcv_skb+0x232/0x4b0 [ 656.327921][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 656.333005][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 656.339321][ T30] ? down_read+0x272/0x2e0 [ 656.343875][ T30] ? genl_rcv+0xd/0x40 [ 656.348255][ T30] genl_rcv+0x28/0x40 [ 656.352303][ T30] netlink_unicast+0x80f/0x9b0 [ 656.357265][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 656.362620][ T30] ? netlink_sendmsg+0x650/0xb40 [ 656.368001][ T30] ? skb_put+0x11b/0x210 [ 656.372300][ T30] netlink_sendmsg+0x813/0xb40 [ 656.377213][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 656.382594][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 656.387924][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 656.393363][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 656.399413][ T30] __sys_sendto+0x672/0x710 [ 656.404009][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 656.409378][ T30] ? exc_page_fault+0x6a/0xc0 [ 656.414151][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 656.420111][ T30] __x64_sys_sendto+0xde/0x100 [ 656.424972][ T30] do_syscall_64+0x14d/0xf80 [ 656.430540][ T30] ? trace_irq_disable+0x3b/0x150 [ 656.435650][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.442288][ T30] ? clear_bhb_loop+0x40/0x90 [ 656.447399][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.453353][ T30] RIP: 0033:0x7f76ed15cfce [ 656.458750][ T30] RSP: 002b:00007f76edfbae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 656.467888][ T30] RAX: ffffffffffffffda RBX: 00007f76edfbc6c0 RCX: 00007f76ed15cfce [ 656.475965][ T30] RDX: 0000000000000024 RSI: 00007f76edfbb000 RDI: 0000000000000004 [ 656.484515][ T30] RBP: 0000000000000000 R08: 00007f76edfbaf04 R09: 000000000000000c [ 656.493016][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 656.501352][ T30] R13: 00007f76edfbaf58 R14: 00007f76edfbb000 R15: 0000000000000000 [ 656.509498][ T30] [ 656.512609][ T30] INFO: task syz.1.4350:22136 blocked for more than 145 seconds. [ 656.521434][ T30] Not tainted syzkaller #0 [ 656.526507][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 656.535210][ T30] task:syz.1.4350 state:D stack:27880 pid:22136 tgid:22135 ppid:18203 task_flags:0x400040 flags:0x00080002 [ 656.548339][ T30] Call Trace: [ 656.551673][ T30] [ 656.554625][ T30] __schedule+0x1585/0x5340 [ 656.559348][ T30] ? __pfx___schedule+0x10/0x10 [ 656.564285][ T30] ? schedule+0x90/0x360 [ 656.568846][ T30] schedule+0x164/0x360 [ 656.573094][ T30] schedule_preempt_disabled+0x13/0x30 [ 656.579042][ T30] __mutex_lock+0x7fe/0x1300 [ 656.583685][ T30] ? __mutex_lock+0x5ac/0x1300 [ 656.588674][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 656.593443][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 656.598678][ T30] ? radix_tree_lookup+0x240/0x290 [ 656.603849][ T30] genl_rcv_msg+0x10b/0x7a0 [ 656.609004][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 656.614116][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 656.619319][ T30] netlink_rcv_skb+0x232/0x4b0 [ 656.624176][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 656.630143][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 656.635512][ T30] ? down_read+0x272/0x2e0 [ 656.640435][ T30] ? genl_rcv+0xd/0x40 [ 656.645037][ T30] genl_rcv+0x28/0x40 [ 656.649261][ T30] netlink_unicast+0x80f/0x9b0 [ 656.654120][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 656.659708][ T30] ? netlink_sendmsg+0x650/0xb40 [ 656.664692][ T30] ? skb_put+0x11b/0x210 [ 656.669517][ T30] netlink_sendmsg+0x813/0xb40 [ 656.674444][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 656.680083][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 656.685092][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 656.690613][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 656.695954][ T30] __sys_sendto+0x672/0x710 [ 656.700907][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 656.705999][ T30] ? exc_page_fault+0x6a/0xc0 [ 656.711329][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 656.716888][ T30] __x64_sys_sendto+0xde/0x100 [ 656.721722][ T30] do_syscall_64+0x14d/0xf80 [ 656.726875][ T30] ? trace_irq_disable+0x3b/0x150 [ 656.731969][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.738592][ T30] ? clear_bhb_loop+0x40/0x90 [ 656.743333][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.749903][ T30] RIP: 0033:0x7fdfe835cfce [ 656.754366][ T30] RSP: 002b:00007fdfe916fe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 656.763294][ T30] RAX: ffffffffffffffda RBX: 00007fdfe91716c0 RCX: 00007fdfe835cfce [ 656.771571][ T30] RDX: 0000000000000020 RSI: 00007fdfe9170000 RDI: 0000000000000004 [ 656.779789][ T30] RBP: 0000000000000000 R08: 00007fdfe916ff04 R09: 000000000000000c [ 656.788324][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 656.796514][ T30] R13: 00007fdfe916ff58 R14: 00007fdfe9170000 R15: 0000000000000000 [ 656.804557][ T30] [ 656.807891][ T30] INFO: task syz.0.4352:22146 blocked for more than 145 seconds. [ 656.815654][ T30] Not tainted syzkaller #0 [ 656.821177][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 656.830170][ T30] task:syz.0.4352 state:D stack:24864 pid:22146 tgid:22144 ppid:17871 task_flags:0x400140 flags:0x00080002 [ 656.842290][ T30] Call Trace: [ 656.845636][ T30] [ 656.849575][ T30] __schedule+0x1585/0x5340 [ 656.854163][ T30] ? __pfx___schedule+0x10/0x10 [ 656.859154][ T30] ? schedule+0x90/0x360 [ 656.863477][ T30] schedule+0x164/0x360 [ 656.867923][ T30] schedule_preempt_disabled+0x13/0x30 [ 656.873444][ T30] __mutex_lock+0x7fe/0x1300 [ 656.878600][ T30] ? __mutex_lock+0x5ac/0x1300 [ 656.883511][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 656.888470][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 656.893573][ T30] ? radix_tree_lookup+0x240/0x290 [ 656.898948][ T30] genl_rcv_msg+0x10b/0x7a0 [ 656.903516][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 656.909005][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 656.913994][ T30] netlink_rcv_skb+0x232/0x4b0 [ 656.918953][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 656.924047][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 656.929477][ T30] ? down_read+0x272/0x2e0 [ 656.933934][ T30] ? genl_rcv+0xd/0x40 [ 656.938528][ T30] genl_rcv+0x28/0x40 [ 656.942557][ T30] netlink_unicast+0x80f/0x9b0 [ 656.947668][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 656.953508][ T30] ? netlink_sendmsg+0x650/0xb40 [ 656.958792][ T30] ? skb_put+0x11b/0x210 [ 656.963064][ T30] netlink_sendmsg+0x813/0xb40 [ 656.968257][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 656.973679][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 656.978763][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 656.984083][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 656.990641][ T30] __sys_sendto+0x672/0x710 [ 656.995207][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 657.000798][ T30] __x64_sys_sendto+0xde/0x100 [ 657.005707][ T30] do_syscall_64+0x14d/0xf80 [ 657.010597][ T30] ? trace_irq_disable+0x3b/0x150 [ 657.015692][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.021890][ T30] ? clear_bhb_loop+0x40/0x90 [ 657.027313][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.033294][ T30] RIP: 0033:0x7fe8af55cfce [ 657.037990][ T30] RSP: 002b:00007fe8b0540e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 657.046634][ T30] RAX: ffffffffffffffda RBX: 00007fe8b05426c0 RCX: 00007fe8af55cfce [ 657.055144][ T30] RDX: 0000000000000020 RSI: 00007fe8b0541000 RDI: 0000000000000006 [ 657.063628][ T30] RBP: 0000000000000000 R08: 00007fe8b0540f04 R09: 000000000000000c [ 657.071972][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 657.080133][ T30] R13: 00007fe8b0540f58 R14: 00007fe8b0541000 R15: 0000000000000000 [ 657.088499][ T30] [ 657.091654][ T30] [ 657.091654][ T30] Showing all locks held in the system: [ 657.099820][ T30] 1 lock held by khungtaskd/30: [ 657.104710][ T30] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 657.114853][ T30] 1 lock held by klogd/5181: [ 657.120005][ T30] 2 locks held by getty/5583: [ 657.124885][ T30] #0: ffff888036a520a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 657.135061][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 657.145533][ T30] 1 lock held by udevd/13263: [ 657.150796][ T30] #0: ffff888026252358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 657.160966][ T30] 2 locks held by syz.3.4345/22109: [ 657.166212][ T30] #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 657.174708][ T30] #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 657.184294][ T30] 6 locks held by syz.3.4345/22119: [ 657.190019][ T30] #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 657.198403][ T30] #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 657.207807][ T30] #2: ffff888026985a78 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 657.218389][ T30] #3: ffff888025d0c978 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 657.228023][ T30] #4: ffff888025d0c318 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 657.240511][ T30] #5: ffff888025d0c350 (&q->q_usage_counter(queue)#36){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 657.252983][ T30] 2 locks held by syz.3.4345/22123: [ 657.258757][ T30] #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 657.268294][ T30] #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 657.278584][ T30] 2 locks held by syz.2.4344/22117: [ 657.284089][ T30] #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 657.292772][ T30] #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 657.302135][ T30] 2 locks held by syz.2.4344/22126: [ 657.307526][ T30] #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 657.315783][ T30] #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 657.325180][ T30] 2 locks held by syz.4.4349/22134: [ 657.330974][ T30] #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 657.339440][ T30] #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 657.348672][ T30] 2 locks held by syz.1.4350/22136: [ 657.353906][ T30] #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 657.363029][ T30] #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 657.372471][ T30] 2 locks held by syz.0.4352/22146: [ 657.377827][ T30] #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 657.386094][ T30] #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 657.395584][ T30] 2 locks held by syz-executor/22185: [ 657.401556][ T30] #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 657.409908][ T30] #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 657.419322][ T30] 2 locks held by syz-executor/22186: [ 657.424708][ T30] #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 657.433290][ T30] #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 657.442535][ T30] 2 locks held by syz-executor/22189: [ 657.448411][ T30] #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 657.456760][ T30] #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 657.466713][ T30] 2 locks held by syz-executor/22191: [ 657.472125][ T30] #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 657.480709][ T30] #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 657.489874][ T30] 2 locks held by syz-executor/22193: [ 657.495257][ T30] #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 657.503608][ T30] #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 657.513674][ T30] 2 locks held by syz-executor/22337: [ 657.519201][ T30] #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 657.527548][ T30] #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 657.537033][ T30] 2 locks held by syz-executor/22339: [ 657.542454][ T30] #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 657.550811][ T30] #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 657.560027][ T30] 2 locks held by syz-executor/22357: [ 657.565820][ T30] #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 657.574564][ T30] #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 657.583717][ T30] 2 locks held by syz-executor/22359: [ 657.589226][ T30] #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 657.597911][ T30] #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 657.607038][ T30] 2 locks held by syz-executor/22361: [ 657.612446][ T30] #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 657.621019][ T30] #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 657.630579][ T30] 2 locks held by syz-executor/22388: [ 657.635969][ T30] #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 657.644302][ T30] #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 657.653518][ T30] 2 locks held by syz-executor/22390: [ 657.659285][ T30] #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 657.668875][ T30] #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 657.678173][ T30] 2 locks held by syz-executor/22409: [ 657.683588][ T30] #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 657.692321][ T30] #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 657.701445][ T30] 2 locks held by syz-executor/22412: [ 657.707068][ T30] #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 657.715338][ T30] #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 657.724790][ T30] 2 locks held by syz-executor/22414: [ 657.730642][ T30] #0: ffffffff8fc3a670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 657.738992][ T30] #1: ffffffff8fc3a488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 657.748785][ T30] [ 657.751144][ T30] ============================================= [ 657.751144][ T30] [ 657.760617][ T30] NMI backtrace for cpu 0 [ 657.760647][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 657.760672][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 657.760686][ T30] Call Trace: [ 657.760694][ T30] [ 657.760703][ T30] dump_stack_lvl+0xe8/0x150 [ 657.760761][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 657.760789][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 657.760821][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 657.760850][ T30] sys_info+0x135/0x170 [ 657.760870][ T30] watchdog+0xfd9/0x1030 [ 657.760917][ T30] ? watchdog+0x21a/0x1030 [ 657.760957][ T30] kthread+0x388/0x470 [ 657.760986][ T30] ? __pfx_watchdog+0x10/0x10 [ 657.761016][ T30] ? __pfx_kthread+0x10/0x10 [ 657.761039][ T30] ret_from_fork+0x51e/0xb90 [ 657.761076][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 657.761103][ T30] ? __switch_to+0xc7d/0x1450 [ 657.761144][ T30] ? __pfx_kthread+0x10/0x10 [ 657.761166][ T30] ret_from_fork_asm+0x1a/0x30 [ 657.761214][ T30] [ 657.761223][ T30] Sending NMI from CPU 0 to CPUs 1: [ 657.875108][ C1] NMI backtrace for cpu 1 [ 657.875126][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 657.875146][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 657.875158][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 657.875190][ C1] Code: 6e 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 0d 1c 00 fb f4 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 657.875206][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 657.875223][ C1] RAX: 0000000000211739 RBX: ffffffff819a80dd RCX: 0000000080000001 [ 657.875236][ C1] RDX: 0000000000000001 RSI: ffffffff8def2d30 RDI: ffffffff8c27aa00 [ 657.875248][ C1] RBP: ffffc90000197f10 R08: ffff8880b873395b R09: 1ffff110170e672b [ 657.875261][ C1] R10: dffffc0000000000 R11: ffffed10170e672c R12: ffffffff901186b0 [ 657.875275][ C1] R13: 1ffff11003b5b000 R14: 0000000000000001 R15: 0000000000000001 [ 657.875287][ C1] FS: 0000000000000000(0000) GS:ffff888125564000(0000) knlGS:0000000000000000 [ 657.875301][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 657.875313][ C1] CR2: 000055d6ce541ee8 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 657.875329][ C1] Call Trace: [ 657.875336][ C1] [ 657.875343][ C1] default_idle+0x9/0x20 [ 657.875360][ C1] default_idle_call+0x72/0xb0 [ 657.875379][ C1] do_idle+0x1bd/0x500 [ 657.875407][ C1] ? __pfx_do_idle+0x10/0x10 [ 657.875433][ C1] ? do_idle+0xc/0x500 [ 657.875457][ C1] cpu_startup_entry+0x43/0x60 [ 657.875482][ C1] start_secondary+0x101/0x110 [ 657.875503][ C1] common_startup_64+0x13e/0x147 [ 657.875530][ C1] [ 658.044418][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 658.051293][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 658.060413][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 658.070485][ T30] Call Trace: [ 658.073780][ T30] [ 658.076753][ T30] vpanic+0x56c/0xa60 [ 658.080785][ T30] ? __pfx___schedule+0x10/0x10 [ 658.085660][ T30] ? __pfx_vpanic+0x10/0x10 [ 658.090180][ T30] ? __pfx_console_unlock+0x10/0x10 [ 658.095425][ T30] panic+0xc5/0xd0 [ 658.099187][ T30] ? __pfx_panic+0x10/0x10 [ 658.103663][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 658.109112][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 658.115324][ T30] watchdog+0x1023/0x1030 [ 658.119723][ T30] ? watchdog+0x21a/0x1030 [ 658.124180][ T30] kthread+0x388/0x470 [ 658.128283][ T30] ? __pfx_watchdog+0x10/0x10 [ 658.133018][ T30] ? __pfx_kthread+0x10/0x10 [ 658.137639][ T30] ret_from_fork+0x51e/0xb90 [ 658.142273][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 658.147440][ T30] ? __switch_to+0xc7d/0x1450 [ 658.152203][ T30] ? __pfx_kthread+0x10/0x10 [ 658.156863][ T30] ret_from_fork_asm+0x1a/0x30 [ 658.161681][ T30] [ 658.165331][ T30] Kernel Offset: disabled [ 658.169663][ T30] Rebooting in 86400 seconds..