last executing test programs: 17.993795304s ago: executing program 4 (id=2442): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r1, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32, @ANYBLOB="050000"], 0x50) bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[], 0x50) getsockopt$inet_mreqn(r4, 0x0, 0x20, 0x0, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000200)='nv', 0x2) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r4, 0x1) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r5 = openat$cgroup_ro(r2, &(0x7f0000000140)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) sendmsg$nl_route(r0, 0x0, 0x0) 17.920797543s ago: executing program 1 (id=2445): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x3, {0x0, 0x0, 0x12, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0xc4, 0x8]}}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x4}]}}]}, 0x94}}, 0x0) 17.860986703s ago: executing program 0 (id=2447): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f0000000040)='syzkaller\x00', 0x2}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000806910a0000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@ifindex, 0x1d, 0x0, 0x8000, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'macsec0\x00', 0x0}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@ifindex=r2, r0, 0x7, 0x28, 0x0, @void, @void, @void, @value, r1}, 0x20) 17.737057534s ago: executing program 1 (id=2448): sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x70bd2c, 0xffeffffe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$l2tp(0x2, 0x2, 0x73) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07, 0x11}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 17.735648586s ago: executing program 0 (id=2450): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91104e000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 17.709027356s ago: executing program 4 (id=2451): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f00000001c0), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a3100000000080100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c0000800800034000000002140000001100010000000000000000000100000a"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006880)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x4, 0xa}, {}, {0x3, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x80) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006880)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x4, 0xa}, {}, {0x3, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r10, @ANYBLOB="1c005a80180001801400030024000700080001000800050002dd0f"], 0x38}}, 0x0) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r10, @ANYBLOB="1c005a80180001801400030024000700080001000800050002dd0f"], 0x38}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "07682c020b7b37f29f057acc54d4077549f4e34e86f469eb"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0x1170, 0x1398, 0x120, 0x1170, 0x2a8, 0x1398, 0x1398, 0x2a8, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xff, 0xffffffff], [], 'veth1_to_bridge\x00', 'veth0_to_hsr\x00', {}, {}, 0x2b, 0x3b, 0x3}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@set2={{}, {{0x1, 0x3, 0x1}}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x0, 'NFQUEUE\x00', 0x2, {0xfffe, 0x10, 0x2}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x1, 0x0, 0x0, 0x0, 0x0, @loopback, @private0, @loopback, [0x0, 0x0, 0x0, 0xff], [], [0xffffff, 0x0, 0xff000000], 0x0, 0x803}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xffffffffffffff36) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x22, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) socket(0x2a, 0x8, 0x1) 17.550823837s ago: executing program 0 (id=2454): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x3, 0x1, 0x400, 0xfffffff7}, 0x7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x6c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x44, @dev={0xfe, 0x80, '\x00', 0x14}, 0xff8}}, {0x20, 0x2, @in6={0xa, 0x0, 0xfffffffc, @mcast2}}}}]}]}, 0x6c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x38, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x45f}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x11a111}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5c}]}]}, 0x38}}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b703000000090001db020a000000000007000000000000009500000000000a6682f0a61b01e4c027d252f602901b7cbbd5b9097bb8334a5541cf9e345af317e35f0ad53d857708f974879196ac07622b10548ccd2028eaf7610ae297a58e413b22d81494fcb1dbd1e9cb784c590ddd06ee929a27a5dedf301650960d8ae1cf339f6bda65bf6594c2839dcea6e419c9b8b7d17b9e49f392c857ccb0a3f64a59a87332ffa41c17b82700789b163bbc8507f171b46d2c569e75810e60a06b6f69ef41ca39a200"/212], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x2, &(0x7f000000cf3d)=""/195}, 0x23) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r5, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x40, 0x39}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7e}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x6, 0x3, 0x7ff, 0x6, 0x1]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x80, 0x5, 0x3bf, 0xfff, 0x401, 0x81]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x1) 17.465345021s ago: executing program 1 (id=2456): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000006110810000000000950000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f00000003c0)='V', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000180)={0x0, 0x8, 0x4}, 0x8) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @mcast2, 0x3}}, 0x0, 0x0, 0x20, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r4, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x8566}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r6, 0x4058587a, 0x0) r7 = socket(0x8, 0x800, 0x0) ioctl$IMGETCOUNT(r7, 0x400261f3, &(0x7f0000000000)) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r8, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRESDEC=r2, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x4040) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 17.333007198s ago: executing program 4 (id=2459): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @multicast1}}}, 0x88) (async) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000000)=0x9, 0x1) (async) sendmmsg$inet6(r0, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) 17.332639401s ago: executing program 0 (id=2460): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) sendmsg$unix(r2, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r10, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x172c5}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r6, 0x27, 0xe, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) r11 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r11, 0x29, 0xd4, &(0x7f0000000180)=0x1, 0x4) sendmsg$key(r4, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x2, 0x0, 0x70bd28, 0x25cfdbfe}, 0x10}}, 0x40408c0) sendmsg$NFT_BATCH(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000004a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x40091}, 0x40) 17.25995997s ago: executing program 4 (id=2462): r0 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@nfc_llcp, &(0x7f0000000000)=0x80) read(r0, &(0x7f0000000500)=""/4096, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000080)='syzkaller\x00', 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) write$bt_hci(r0, &(0x7f0000000140)={0x1, @le_set_scan_enable={{0x200c, 0x2}, {0x7, 0xf9}}}, 0x6) 17.109281921s ago: executing program 4 (id=2464): r0 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ac0)=@newqdisc={0x5c, 0x15, 0xf0b, 0x0, 0x0, {0x2}, [@TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x16, 0x2, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0]}}]}]}, 0x5c}}, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x80000005}, 0x1c) 16.812271075s ago: executing program 2 (id=2466): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) (async) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)={0x114, 0x36, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x7}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x4000080}, 0x0) (async) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)={0x114, 0x36, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x7}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x4000080}, 0x0) splice(r0, 0x0, r4, 0x0, 0x80, 0x4) (async) splice(r0, 0x0, r4, 0x0, 0x80, 0x4) write(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @random="ef05b9b215d0"}]}, 0x40}}, 0x0) 16.765770349s ago: executing program 3 (id=2468): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001680)=ANY=[@ANYRESHEX=r0, @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100f96011bdc03f265ce165dd114c94c16a385e56264969374e2a8eca59e23b878360f8174215e332d059419b56f7f336a690306e8446696ec44b57240e78be5d22a041cfed1e7410d7b93bfd12ce2cee492dc48a2d96137e61fcf948", @ANYRESDEC=r1], 0x1c}}, 0x840) (async) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000580)=0x4, 0x4) (async) sendmsg$netlink(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1300000042000106"], 0x1c}], 0x1}, 0x0) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000001300)=ANY=[@ANYBLOB="9feb010018000000000000eb763ef9125273e00002000000000000000100004604000000000000010000000000003d2d2abbe44c18afaa5679b91f1f6838703515baef8fe55ea850aa7998a95049e20917e5b16d965f7100530bf17358802c33656857d6a36ec3cd1c98318082d7696b3708a86f955b27008ed5715d750f080bab5a763a44d94237051f22f96c4b92738a7ac88e05232b6247584435d3e9ae9b5b33308a46b7ecaf558178f89a45502b7127bcc46a1d05ab5de7426ceb911f8e75cce6a63dde813db075401d59678d18a5b81b4ac2afb46f634131d0d233385d"], 0x0, 0x2e, 0x0, 0x1}, 0x20) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000140)={0x80, 0x101, 0x0, 0xffffffff}, 0x10) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001600010000000000fcffffff0a000000", @ANYRES32=0x0, @ANYRESHEX=r4], 0x2c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) (async) unshare(0x1c041800) (async) write(0xffffffffffffffff, 0x0, 0x0) write$nci(r0, &(0x7f0000001400)=ANY=[], 0xfb) (async) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000002c0)={{}, 0x0, 0x0, @inherit={0x48, &(0x7f0000019400)=ANY=[]}, @devid}) (async) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) 16.665909438s ago: executing program 3 (id=2469): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) 16.569461842s ago: executing program 2 (id=2470): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x2300, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x40}], 0x1, &(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x3dc4, 0x4) sendmmsg$inet(r2, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvfrom(r2, 0x0, 0x0, 0x2101, 0x0, 0x0) (async, rerun: 32) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) (rerun: 32) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x1000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000080)="8b091f56f1", 0x5}], 0x1}}], 0x1, 0x20000084) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, r5, 0x1, 0x0, 0x3, {0x22}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmmsg$inet6(r3, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40) (async) shutdown(r3, 0x1) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, 0x0, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 32) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x152829b66759750a}, &(0x7f0000000180)=0x2b) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r7, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x4a) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003b80)=ANY=[@ANYBLOB="2003000043000701fefffffffcdbdf25027c0000040047800803018004030d8006005a00eb0000001400000000000000000000000000000000000000e102a6800400838004003e8008000f00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="14000a000000000000000000000000000000000100000000"], 0x320}}, 0xc000) 16.555966527s ago: executing program 3 (id=2471): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@delqdisc={0x24, 0x25, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xd, 0xffff}, {0xa, 0x5}, {0x8, 0xffe0}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r2, 0x4, 0x50, 0x4, 0x27c, 0x13, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @mcast2, 0x1, 0x10, 0x3, 0xd}}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYBLOB='\b'], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x48c}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) 16.528493818s ago: executing program 1 (id=2472): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r0, &(0x7f0000000ac0)=""/4096, 0x1000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) read(r0, &(0x7f0000000ac0)=""/4096, 0x1000) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) (async) 16.420034677s ago: executing program 2 (id=2473): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)={0x40, r1, 0xe701ac47a3d23ecd, 0x70bd25, 0x1, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x37}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x40}}, 0x0) 16.402488184s ago: executing program 2 (id=2474): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000240)=0x5, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040), 0x8) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x2}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x7, 0x6, [0x6d, 0x0, 0x6, 0x200, 0x400, 0x6]}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000280)={r4, @in={{0x2, 0x4e24, @remote}}, [0x9, 0xd5db, 0x4, 0x8001, 0x4, 0x9, 0xe1, 0x112ae24c, 0x0, 0xffffffffffffffff, 0x6, 0xff, 0x5, 0x4]}, &(0x7f0000000180)=0x100) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000ae4ae78103b09ba7000087e2696c531de994", @ANYRES32=0x0, @ANYBLOB="5d5b0000c748aa0b1c001a8018000a8014000700200100000000000000000000000000021400350077673100"/56], 0x50}}, 0x0) 16.330411998s ago: executing program 3 (id=2475): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000e40)=""/4073, 0xff0, 0x1, 0x0}, &(0x7f0000000140)=0x53) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="58020000", @ANYRES16=r1, @ANYBLOB="050407bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="c000028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000500000038"], 0x258}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) 16.200229423s ago: executing program 0 (id=2476): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x80000) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket(0x14, 0x2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x4, 0xd6, 0x5, 0x47, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x0, 0xb}, 0x48) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x401061f4, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001400)=@newtfilter={0x70, 0x2c, 0xd2b, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x1, 0x4}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x44, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x3, 0x7, 0x7f, 0x7, {0x1, 0x0, 0xf683, 0x0, 0x4}, {0x38, 0x0, 0x9, 0x2, 0x8}, 0x8, 0x2, 0x2}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x893}, 0x20040084) syz_emit_ethernet(0x6e, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYRESHEX=r4], 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000d40)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000080)="fc79ea35d065b9ab3476a577889a62263064a4f9365db73c96a2400dc5e53ae7", 0x20}], 0x1, 0x0, 0x0, 0x20008014}], 0x1, 0x4814) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) connect$qrtr(r2, &(0x7f0000000040), 0xc) r8 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r8, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r8, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) read(r2, &(0x7f0000000100)=""/19, 0x13) 16.194328017s ago: executing program 4 (id=2477): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x9, 0x6, 0x1, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x7800, 0x7, 0xffffff55, 0x6}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="075f0292e0f4cfe8ba8c45711d9e4ac63f04510d2d3d8e03a0bf2e31de32429951559248f70c4eddebf3c8f8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff8a, 0x0, 0x0, 0x10, 0x400000}, 0x90) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, 0x0, 0x20000000) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x40, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xa}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000000)="fef351f64d23421a5b4e415288ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0xa, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x10) 16.091256022s ago: executing program 3 (id=2478): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000000)={@loopback, 0x4f, r1}) readv(0xffffffffffffffff, &(0x7f0000002340)=[{0x0}], 0x1) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000002f80), &(0x7f0000003000)=0x80) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@getchain={0x5c, 0x66, 0x300, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xb, 0xe}, {0x9, 0xd}, {0xf, 0x8}}, [{0x8, 0xb, 0x80d}, {0x8, 0xb, 0x9}, {0x8}, {0x8, 0xb, 0xfffffeff}, {0x8, 0xb, 0xb15f}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x7}]}, 0x5c}}, 0x4004) r5 = socket$netlink(0x10, 0x3, 0x8) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x10080, 0x0) ioctl$PPPIOCGNPMODE(r6, 0xc008744c, &(0x7f00000000c0)={0xc023, 0x2}) sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x88, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x5, 0x8, 0x7]}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x8d99]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x0, 0x975f]}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x9, 0x0, 0x3, 0x4e, 0x7fff]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfffffffffffffdeb, 0x33, 0x2, [@datasec={0x6, 0x2, 0x0, 0xf, 0x3, [{0x4, 0x101}, {0xfffffffe, 0x0, 0x2}], "63d038"}, @const={0x2, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x30, 0x61, 0x71]}}, 0x0, 0x4e, 0x0, 0x0, 0x1}, 0x20) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000000)={@loopback, 0x4f, r1}) (async) readv(0xffffffffffffffff, &(0x7f0000002340)=[{0x0}], 0x1) (async) socket$xdp(0x2c, 0x3, 0x0) (async) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000002f80), &(0x7f0000003000)=0x80) (async) socket(0x2a, 0x2, 0x0) (async) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@getchain={0x5c, 0x66, 0x300, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xb, 0xe}, {0x9, 0xd}, {0xf, 0x8}}, [{0x8, 0xb, 0x80d}, {0x8, 0xb, 0x9}, {0x8}, {0x8, 0xb, 0xfffffeff}, {0x8, 0xb, 0xb15f}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x7}]}, 0x5c}}, 0x4004) (async) socket$netlink(0x10, 0x3, 0x8) (async) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x10080, 0x0) (async) ioctl$PPPIOCGNPMODE(r6, 0xc008744c, &(0x7f00000000c0)={0xc023, 0x2}) (async) sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x88, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x5, 0x8, 0x7]}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x8d99]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x0, 0x975f]}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x9, 0x0, 0x3, 0x4e, 0x7fff]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfffffffffffffdeb, 0x33, 0x2, [@datasec={0x6, 0x2, 0x0, 0xf, 0x3, [{0x4, 0x101}, {0xfffffffe, 0x0, 0x2}], "63d038"}, @const={0x2, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x30, 0x61, 0x71]}}, 0x0, 0x4e, 0x0, 0x0, 0x1}, 0x20) (async) 15.812798152s ago: executing program 2 (id=2479): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40841, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000300)={'ipvlan0\x00', {0x2, 0x0, @empty}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xec0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594012124fc60", 0x14}], 0x1}, 0x1000000) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000002200010a"], 0x20}}, 0x0) (async) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 15.811864782s ago: executing program 3 (id=2480): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x30, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES16=r1], 0x24}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x80800) syz_genetlink_get_family_id$SEG6(&(0x7f0000000480), r3) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x100, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44000800}, 0x841) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x30, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES16=r1], 0x24}}, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) (async) accept4(r2, 0x0, 0x0, 0x80800) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000480), r3) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x100, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44000800}, 0x841) (async) 15.64943383s ago: executing program 1 (id=2481): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000ca00000001000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014002b8008000100", @ANYRES32, @ANYBLOB="080003001900000008001b0000000000"], 0x3c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000010a000000000010000000000000", @ANYRES32=0x0, @ANYBLOB="29b000004a04000008001b000000000014001680100001800c00090009000080"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x40) 15.642780611s ago: executing program 2 (id=2482): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f00000001c0)={0x1d, r3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r0, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000540)={@ipv4={""/10, ""/2, @multicast1}, 0x0}, &(0x7f0000000580)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7fffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r13, {0x3, 0xa}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x9a8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000980)=@deltaction={0x208, 0x31, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800000}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x489}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xdd4}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x4008814}, 0x8011) r14 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r15, {0x4, 0x2}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}}, 0x20040054) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000005c0)={0x0, @private, @remote}, &(0x7f0000000600)=0xc) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000940)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000900)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="a0020000", @ANYRES16=0x0, @ANYBLOB="02002bbd7000fcdbdf2513000000200001801400020076657468315f746f5f626f6e6400000008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=0x0, @ANYBLOB="680001800800030001000000140002006d6163766c616e3100000000000000000800030003000000080003002bd8bb5808000300020000001400020076657468305f766c616e00000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020073797a5f74756e000000000000000000500001801400020070696d367265673000000000000000001400020070696d367265673100000000000000001400020074756e6c300000000000000000000000080003000000000008000300020000005c00018008000300020000001400020076657468305f766972745f776966690008000100", @ANYRES32=r1, @ANYBLOB="08000300010000000800010094ebb2dbe7463af884fbb7f5179cc71dcd9ecc1f6bb86a1a580a59313a", @ANYRES32=r3, @ANYBLOB="1400020073797a5f74756e00000000000000000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="3c00018014000200766574683100000000000000000000001400020069703667726530000000000000000000080003000100000008000100", @ANYRES32=r5, @ANYBLOB="6c000180140002006261746164765f736c6176655f30000008000100", @ANYRES32=r7, @ANYBLOB="1400020070696d7265673000000000000000000014000200766c616e300000000000000000000000080003000300000008000100", @ANYRES32=r10, @ANYBLOB="140002006d6163767461703000000000000000001400018008000100", @ANYRES32=r13, @ANYBLOB="080003000000000028000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="1400020069703665727370616e300000000000006800018008000100", @ANYRES32=r15, @ANYBLOB="08000300070000001400020076657468310000000000000000000000140002000000000000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="1400020076657468305f746f5f626f6e640000000800030000000000"], 0x2a0}, 0x1, 0x0, 0x0, 0x10}, 0x8008) r17 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r18, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r19) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r17, 0x1}, 0x1c}}, 0x0) 15.548162754s ago: executing program 1 (id=2483): r0 = socket$kcm(0x1e, 0x1, 0x0) r1 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@pppoe={0x18, 0x0, {0x3, @multicast, 'caif0\x00'}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x20000800) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x840000000002, 0x3, 0xff) (async, rerun: 64) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r5) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002740)=ANY=[@ANYBLOB="30424ff5", @ANYRES16=r6, @ANYBLOB="5d4524bd70a0fedbdf25010000000c0002000100000000000000100007800c00018008000100", @ANYRES32=r4, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000000) (async) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001c0001042bbd7000ffdbdb2507000000", @ANYRES32=r3, @ANYBLOB="40efe4090a000200bb"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) (async) recvmmsg(r0, &(0x7f0000005580)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/111, 0x6f}], 0x1, &(0x7f00000003c0)=""/47, 0x2f}, 0x3}], 0x1, 0x22, 0x0) 15.21729s ago: executing program 0 (id=2484): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x20}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x40000) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r2, @ANYBLOB="040029bd7000fbdbdf25080000003400028005000d000000000006000e004e23000005000d000100000006000b000200000006000b000a00000005000d000000000008000400050000002400018008000b007369700007000600646800000600010002000000070006006e710000080004006d00000008000600030000000800040000100000440001800aa490f9028be1a76578a4b59f0006006c626c637200000014000300fc02000000000000000000000000000108000b0073697000080008000900000008000b00"], 0xd0}, 0x1, 0x0, 0x0, 0x4044}, 0x4000000) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f00000007c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1020}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x14, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x4008005) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9}, 0x6b) 187.191878ms ago: executing program 32 (id=2484): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x20}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x40000) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r2, @ANYBLOB="040029bd7000fbdbdf25080000003400028005000d000000000006000e004e23000005000d000100000006000b000200000006000b000a00000005000d000000000008000400050000002400018008000b007369700007000600646800000600010002000000070006006e710000080004006d00000008000600030000000800040000100000440001800aa490f9028be1a76578a4b59f0006006c626c637200000014000300fc02000000000000000000000000000108000b0073697000080008000900000008000b00"], 0xd0}, 0x1, 0x0, 0x0, 0x4044}, 0x4000000) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f00000007c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1020}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x14, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x4008005) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9}, 0x6b) 154.186999ms ago: executing program 33 (id=2483): r0 = socket$kcm(0x1e, 0x1, 0x0) r1 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@pppoe={0x18, 0x0, {0x3, @multicast, 'caif0\x00'}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x20000800) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x840000000002, 0x3, 0xff) (async, rerun: 64) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r5) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002740)=ANY=[@ANYBLOB="30424ff5", @ANYRES16=r6, @ANYBLOB="5d4524bd70a0fedbdf25010000000c0002000100000000000000100007800c00018008000100", @ANYRES32=r4, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000000) (async) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001c0001042bbd7000ffdbdb2507000000", @ANYRES32=r3, @ANYBLOB="40efe4090a000200bb"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) (async) recvmmsg(r0, &(0x7f0000005580)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/111, 0x6f}], 0x1, &(0x7f00000003c0)=""/47, 0x2f}, 0x3}], 0x1, 0x22, 0x0) 106.240488ms ago: executing program 34 (id=2482): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f00000001c0)={0x1d, r3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r0, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000540)={@ipv4={""/10, ""/2, @multicast1}, 0x0}, &(0x7f0000000580)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7fffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r13, {0x3, 0xa}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x9a8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000980)=@deltaction={0x208, 0x31, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800000}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x489}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xdd4}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x4008814}, 0x8011) r14 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r15, {0x4, 0x2}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}}, 0x20040054) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000005c0)={0x0, @private, @remote}, &(0x7f0000000600)=0xc) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000940)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000900)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="a0020000", @ANYRES16=0x0, @ANYBLOB="02002bbd7000fcdbdf2513000000200001801400020076657468315f746f5f626f6e6400000008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=0x0, @ANYBLOB="680001800800030001000000140002006d6163766c616e3100000000000000000800030003000000080003002bd8bb5808000300020000001400020076657468305f766c616e00000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020073797a5f74756e000000000000000000500001801400020070696d367265673000000000000000001400020070696d367265673100000000000000001400020074756e6c300000000000000000000000080003000000000008000300020000005c00018008000300020000001400020076657468305f766972745f776966690008000100", @ANYRES32=r1, @ANYBLOB="08000300010000000800010094ebb2dbe7463af884fbb7f5179cc71dcd9ecc1f6bb86a1a580a59313a", @ANYRES32=r3, @ANYBLOB="1400020073797a5f74756e00000000000000000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="3c00018014000200766574683100000000000000000000001400020069703667726530000000000000000000080003000100000008000100", @ANYRES32=r5, @ANYBLOB="6c000180140002006261746164765f736c6176655f30000008000100", @ANYRES32=r7, @ANYBLOB="1400020070696d7265673000000000000000000014000200766c616e300000000000000000000000080003000300000008000100", @ANYRES32=r10, @ANYBLOB="140002006d6163767461703000000000000000001400018008000100", @ANYRES32=r13, @ANYBLOB="080003000000000028000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="1400020069703665727370616e300000000000006800018008000100", @ANYRES32=r15, @ANYBLOB="08000300070000001400020076657468310000000000000000000000140002000000000000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="1400020076657468305f746f5f626f6e640000000800030000000000"], 0x2a0}, 0x1, 0x0, 0x0, 0x10}, 0x8008) r17 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r18, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r19) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r17, 0x1}, 0x1c}}, 0x0) 59.392952ms ago: executing program 35 (id=2480): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x30, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES16=r1], 0x24}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x80800) syz_genetlink_get_family_id$SEG6(&(0x7f0000000480), r3) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x100, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44000800}, 0x841) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x30, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES16=r1], 0x24}}, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) (async) accept4(r2, 0x0, 0x0, 0x80800) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000480), r3) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x100, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44000800}, 0x841) (async) 0s ago: executing program 36 (id=2477): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x9, 0x6, 0x1, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x7800, 0x7, 0xffffff55, 0x6}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="075f0292e0f4cfe8ba8c45711d9e4ac63f04510d2d3d8e03a0bf2e31de32429951559248f70c4eddebf3c8f8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff8a, 0x0, 0x0, 0x10, 0x400000}, 0x90) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, 0x0, 0x20000000) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x40, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xa}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x40}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000000)="fef351f64d23421a5b4e415288ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0xa, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x10) kernel console output (not intermixed with test programs): 3(syz_tun) entered disabled state [ 147.601884][ T9518] netlink: 32 bytes leftover after parsing attributes in process `syz.3.979'. [ 147.614932][ T9512] xt_hashlimit: size too large, truncated to 1048576 [ 147.632790][ T9519] x_tables: duplicate underflow at hook 1 [ 147.816419][ T9540] x_tables: duplicate underflow at hook 1 [ 147.826446][ T3096] IPVS: starting estimator thread 0... [ 147.858391][ T9540] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 147.948062][ T9542] IPVS: using max 34 ests per chain, 81600 per kthread [ 148.132201][ T9556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.988'. [ 148.204169][ T9561] netlink: 'syz.4.990': attribute type 4 has an invalid length. [ 148.385394][ T9584] netlink: 144 bytes leftover after parsing attributes in process `syz.3.996'. [ 148.530811][ T9594] netlink: 'syz.2.998': attribute type 21 has an invalid length. [ 148.539008][ T9594] IPv6: NLM_F_CREATE should be specified when creating new route [ 148.585013][ T9599] netlink: 32 bytes leftover after parsing attributes in process `syz.2.999'. [ 151.192055][ T9567] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 151.573476][ T9616] IPv6: sit1: Disabled Multicast RS [ 151.686674][ T9638] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 153.020132][ T9655] tipc: Started in network mode [ 153.025073][ T9655] tipc: Node identity 2a1ecbcc9dad, cluster identity 4711 [ 153.049947][ T9655] tipc: Enabled bearer , priority 0 [ 153.057184][ T9657] syzkaller0: entered promiscuous mode [ 153.071314][ T9657] syzkaller0: entered allmulticast mode [ 153.193758][ T9671] syzkaller0: entered promiscuous mode [ 153.212141][ T9671] syzkaller0: entered allmulticast mode [ 153.231663][ T9665] tipc: Resetting bearer [ 153.263622][ T9665] tipc: Disabling bearer [ 153.784567][ T9706] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 153.804301][ T9706] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 153.828060][ T9706] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 153.850144][ T9707] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1027'. [ 153.859211][ T9708] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 153.859260][ T9708] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 153.859278][ T9708] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 153.909669][ T9707] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1027'. [ 153.979195][ T9718] bond2: option all_slaves_active: invalid value (222) [ 153.990715][ T9718] bond2 (unregistering): Released all slaves [ 154.055842][ T9728] netlink: 'syz.1.1033': attribute type 9 has an invalid length. [ 154.085143][ T9728] netlink: 'syz.1.1033': attribute type 11 has an invalid length. [ 154.120273][ T9728] netlink: 'syz.1.1033': attribute type 12 has an invalid length. [ 154.167841][ T9728] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.1033'. [ 154.301008][ T9744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1039'. [ 154.454625][ T9758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1041'. [ 154.644212][ T9781] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1046'. [ 154.741821][ T9786] netlink: 'syz.3.1048': attribute type 15 has an invalid length. [ 154.755216][ T9786] unsupported nlmsg_type 40 [ 154.770885][ T9788] netlink: 'syz.3.1048': attribute type 15 has an invalid length. [ 155.165723][ T9824] netlink: 'syz.2.1055': attribute type 15 has an invalid length. [ 155.179733][ T9824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1055'. [ 155.189272][ T9824] netlink: 'syz.2.1055': attribute type 15 has an invalid length. [ 155.198547][ T9824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1055'. [ 155.339600][ T9841] netlink: 'syz.0.1060': attribute type 1 has an invalid length. [ 155.451110][ T9841] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.467146][ T9841] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1060'. [ 155.581960][ T9850] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1063'. [ 155.717322][ T9798] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 155.854872][ T9856] bond0: entered promiscuous mode [ 155.862200][ T9856] bond_slave_0: entered promiscuous mode [ 155.885197][ T9856] bond_slave_1: entered promiscuous mode [ 155.895593][ T9856] bond0: left promiscuous mode [ 155.901751][ T9856] bond_slave_0: left promiscuous mode [ 155.907412][ T9856] bond_slave_1: left promiscuous mode [ 155.946116][ T9858] lo speed is unknown, defaulting to 1000 [ 156.345995][ T9883] can: request_module (can-proto-4) failed. [ 156.872186][ T9925] netlink: 'syz.4.1086': attribute type 1 has an invalid length. [ 157.205730][ T9925] bond2: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 157.228001][ T9925] bond2: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 157.264397][ T9925] bond2: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 157.545311][ T9962] Bluetooth: MGMT ver 1.23 [ 157.791615][ T9982] syzkaller1: entered promiscuous mode [ 157.810072][ T9982] syzkaller1: entered allmulticast mode [ 157.823449][ T9982] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 158.222248][T10017] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 158.392469][T10026] netlink: 'syz.4.1107': attribute type 21 has an invalid length. [ 158.715693][T10045] vlan0: entered promiscuous mode [ 158.731304][T10045] geneve1: entered promiscuous mode [ 158.736745][T10045] vlan0: entered allmulticast mode [ 158.747847][T10045] geneve1: entered allmulticast mode [ 158.758052][T10049] bridge: RTM_NEWNEIGH with invalid ether address [ 158.766347][T10055] bridge: RTM_NEWNEIGH with invalid ether address [ 158.793605][T10048] sit0: entered promiscuous mode [ 158.920363][T10061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.971911][T10064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.136856][T10083] validate_nla: 1 callbacks suppressed [ 159.136875][T10083] netlink: 'syz.2.1123': attribute type 2 has an invalid length. [ 159.158281][T10083] netlink: 'syz.2.1123': attribute type 1 has an invalid length. [ 159.257614][T10086] __nla_validate_parse: 15 callbacks suppressed [ 159.257635][T10086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1126'. [ 159.622876][T10123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1131'. [ 159.813942][T10128] syzkaller0: entered promiscuous mode [ 159.828224][T10134] netlink: 'syz.2.1135': attribute type 1 has an invalid length. [ 159.859050][T10128] syzkaller0: entered allmulticast mode [ 159.939551][T10134] bond6: (slave veth3): Enslaving as an active interface with a down link [ 159.976311][T10134] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1135'. [ 159.996693][T10152] netlink: 'syz.0.1139': attribute type 1 has an invalid length. [ 161.143691][T10134] 8021q: adding VLAN 0 to HW filter on device bond6 [ 161.261828][T10162] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1141'. [ 161.310337][T10160] syzkaller0: entered promiscuous mode [ 161.315861][T10160] syzkaller0: entered allmulticast mode [ 161.449216][T10176] netlink: 'syz.1.1145': attribute type 1 has an invalid length. [ 161.535972][T10176] 8021q: adding VLAN 0 to HW filter on device bond2 [ 161.579818][T10172] tipc: Started in network mode [ 161.596242][T10172] tipc: Node identity 5611fd10a4ed, cluster identity 4711 [ 161.620831][T10172] tipc: Enabled bearer , priority 0 [ 161.632815][T10188] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1146'. [ 161.664475][T10181] bond2: (slave geneve3): making interface the new active one [ 161.694397][T10181] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 161.798767][T10182] syzkaller0: entered promiscuous mode [ 161.806786][T10182] syzkaller0: entered allmulticast mode [ 161.813602][T10182] tipc: Resetting bearer [ 161.869429][T10166] tipc: Resetting bearer [ 162.188519][T10215] openvswitch: netlink: IP tunnel dst address not specified [ 162.250916][T10211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1153'. [ 163.458886][T10166] tipc: Disabling bearer [ 163.498448][ T5933] tipc: Node number set to 4076666128 [ 163.626523][T10238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1160'. [ 164.415246][T10317] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1180'. [ 164.696469][T10335] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1186'. [ 164.789482][T10346] netlink: 'syz.1.1189': attribute type 1 has an invalid length. [ 164.851307][T10346] netlink: 'syz.1.1189': attribute type 2 has an invalid length. [ 164.876746][T10347] netlink: 'syz.1.1189': attribute type 1 has an invalid length. [ 164.953930][T10347] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 165.041273][T10371] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1195'. [ 165.061358][T10373] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.082923][T10371] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1195'. [ 165.095122][T10371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1195'. [ 165.107904][T10368] tipc: Enabled bearer , priority 0 [ 165.189790][T10368] syzkaller0: entered promiscuous mode [ 165.195405][T10368] syzkaller0: entered allmulticast mode [ 165.202198][T10368] tipc: Resetting bearer [ 165.215067][T10384] openvswitch: netlink: Duplicate or invalid key (type 0). [ 165.224421][T10367] tipc: Resetting bearer [ 165.230750][T10384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.613467][T10404] sctp: [Deprecated]: syz.0.1201 (pid 10404) Use of int in max_burst socket option. [ 165.613467][T10404] Use struct sctp_assoc_value instead [ 165.645671][T10404] netlink: 'syz.0.1201': attribute type 64 has an invalid length. [ 165.969724][T10414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1205'. [ 166.074736][T10419] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1206'. [ 166.178065][T10420] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1206'. [ 166.710568][T10367] tipc: Disabling bearer [ 166.723124][ T796] tipc: Node number set to 3082013644 [ 166.874858][T10424] netlink: 'syz.0.1207': attribute type 1 has an invalid length. [ 166.883615][T10429] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1209'. [ 166.883944][T10430] netlink: 'syz.4.1209': attribute type 4 has an invalid length. [ 166.903640][T10427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.922801][T10433] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.933275][T10432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1211'. [ 166.935611][T10424] bond6: entered promiscuous mode [ 166.951742][T10424] 8021q: adding VLAN 0 to HW filter on device bond6 [ 167.027426][ T5932] lo speed is unknown, defaulting to 1000 [ 167.076733][ T5932] syz0: Port: 1 Link DOWN [ 167.092171][T10438] 8021q: adding VLAN 0 to HW filter on device bond6 [ 167.107688][T10438] bond6: (slave vcan1): The slave device specified does not support setting the MAC address [ 167.119103][T10438] bond6: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 167.134356][T10438] bond6: (slave vcan1): making interface the new active one [ 167.140407][T10448] vcan0: tx drop: invalid sa for name 0xffffffffffffff7b [ 167.145421][T10438] vcan1: entered promiscuous mode [ 167.157598][T10438] bond6: (slave vcan1): Enslaving as an active interface with an up link [ 167.167816][T10443] vcan0: tx drop: invalid sa for name 0xffffffffffffff7b [ 167.168673][ T9] lo speed is unknown, defaulting to 1000 [ 167.181716][T10449] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.219260][ T5932] lo speed is unknown, defaulting to 1000 [ 167.371395][T10460] syzkaller1: entered promiscuous mode [ 167.378985][T10460] syzkaller1: entered allmulticast mode [ 167.839393][T10477] netlink: 'syz.4.1223': attribute type 39 has an invalid length. [ 167.869837][T10481] netlink: 'syz.2.1221': attribute type 1 has an invalid length. [ 167.971254][T10496] Cannot find add_set index 2 as target [ 167.984298][T10481] 8021q: adding VLAN 0 to HW filter on device bond7 [ 168.035563][T10495] 8021q: adding VLAN 0 to HW filter on device bond7 [ 168.056718][T10495] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 168.073035][T10495] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 168.171971][T10498] veth5: entered promiscuous mode [ 168.199401][T10498] bond7: (slave veth5): Enslaving as an active interface with a down link [ 168.208429][T10500] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 168.240881][T10508] vlan4: entered allmulticast mode [ 168.256141][T10508] bond7: entered allmulticast mode [ 168.470317][T10520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.508700][T10520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.607758][T10530] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 170.734331][T10470] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 170.935838][T10553] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20002 [ 171.170561][T10569] __nla_validate_parse: 6 callbacks suppressed [ 171.170580][T10569] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1243'. [ 171.268169][ T5334] block nbd4: Possible stuck request ffff8880266d0000: control (read@0,1024B). Runtime 90 seconds [ 171.278937][ T5334] block nbd4: Possible stuck request ffff8880266d0200: control (read@1024,1024B). Runtime 90 seconds [ 171.290051][ T5334] block nbd4: Possible stuck request ffff8880266d0400: control (read@2048,1024B). Runtime 90 seconds [ 171.301154][ T5334] block nbd4: Possible stuck request ffff8880266d0600: control (read@3072,1024B). Runtime 90 seconds [ 171.392561][T10582] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1244'. [ 171.406364][T10580] netlink: 'syz.2.1245': attribute type 5 has an invalid length. [ 171.460078][T10588] netlink: 'syz.0.1246': attribute type 1 has an invalid length. [ 171.468190][T10588] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1246'. [ 171.671737][T10601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1252'. [ 171.861378][T10613] batadv0: entered allmulticast mode [ 171.873359][T10617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1255'. [ 172.022314][T10632] xt_CT: You must specify a L4 protocol and not use inversions on it [ 172.121421][T10640] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1262'. [ 172.243951][T10654] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 172.276303][T10640] bond7 (unregistering): Released all slaves [ 172.283786][T10654] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 172.316618][T10662] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1268'. [ 172.347167][T10654] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 172.361042][T10654] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 172.369217][T10654] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 172.376896][T10654] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 172.384825][T10654] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 172.395218][T10654] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 172.405822][T10666] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1266'. [ 172.430134][T10654] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 172.438007][T10654] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 172.511355][T10668] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 172.551456][T10672] netlink: 412 bytes leftover after parsing attributes in process `syz.0.1271'. [ 172.605302][T10672] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1271'. [ 174.432499][T10720] netlink: 'syz.0.1281': attribute type 11 has an invalid length. [ 174.477725][T10724] netlink: 'syz.4.1283': attribute type 1 has an invalid length. [ 174.705117][T10741] netlink: 'syz.2.1289': attribute type 1 has an invalid length. [ 174.725030][T10741] netlink: 'syz.2.1289': attribute type 2 has an invalid length. [ 174.735431][T10741] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.858216][T10750] netlink: 'syz.3.1292': attribute type 10 has an invalid length. [ 176.500303][T10788] __nla_validate_parse: 7 callbacks suppressed [ 176.500321][T10788] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1304'. [ 176.585062][T10797] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1306'. [ 176.653221][T10801] netlink: 'syz.2.1307': attribute type 1 has an invalid length. [ 176.826146][T10813] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1307'. [ 176.881104][T10819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1310'. [ 176.905368][T10820] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1307'. [ 176.986120][T10830] IPVS: set_ctl: invalid protocol: 92 172.20.20.38:20000 [ 177.011543][T10801] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1307'. [ 177.040607][T10813] 8021q: adding VLAN 0 to HW filter on device bond8 [ 177.076082][T10812] syzkaller0: entered promiscuous mode [ 177.081806][T10812] syzkaller0: entered allmulticast mode [ 177.187341][T10836] SET target dimension over the limit! [ 177.231634][T10838] netlink: 'syz.4.1314': attribute type 1 has an invalid length. [ 177.611870][T10864] netlink: 'syz.3.1320': attribute type 6 has an invalid length. [ 178.606922][T10847] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 178.833439][T10879] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 178.842040][T10885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1329'. [ 178.879299][T10879] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1325'. [ 178.891440][T10885] 8021q: adding VLAN 0 to HW filter on device bond9 [ 178.916858][T10889] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1327'. [ 179.027328][T10891] openvswitch: netlink: IP tunnel TTL not specified. [ 179.082441][T10897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1331'. [ 179.397674][T10911] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.710310][T10949] tipc: Started in network mode [ 179.715456][T10949] tipc: Node identity 9a072cdadaed, cluster identity 4711 [ 179.741130][T10949] tipc: Enabled bearer , priority 11 [ 180.183646][T10977] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.258886][T10980] syzkaller1: entered promiscuous mode [ 180.264406][T10980] syzkaller1: entered allmulticast mode [ 180.301403][T10996] sctp: [Deprecated]: syz.3.1358 (pid 10996) Use of struct sctp_assoc_value in delayed_ack socket option. [ 180.301403][T10996] Use struct sctp_sack_info instead [ 180.444233][T10977] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.562951][T10977] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.692451][T11014] syzkaller0: create flow: hash 4040135137 index 1 [ 180.717864][T10977] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.748634][ T1090] syzkaller0: tun_net_xmit 76 [ 180.758404][ T1090] syzkaller0: tun_net_xmit 48 [ 180.781368][ T796] syzkaller0: tun_net_xmit 76 [ 180.835298][T11014] syzkaller0: delete flow: hash 4040135137 index 1 [ 181.268084][ T5827] Bluetooth: hci0: command 0x0c1a tx timeout [ 181.285543][ T5837] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 182.055314][ T5932] tipc: Node number set to 1089088730 [ 182.169427][ T1090] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.201332][T11029] __nla_validate_parse: 17 callbacks suppressed [ 182.201350][T11029] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1368'. [ 182.225163][ T319] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.238934][T11036] nftables ruleset with unbound chain [ 182.244510][ T319] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.261387][ T319] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.279224][T11033] tipc: Enabling of bearer rejected, failed to enable media [ 182.404809][T11046] tap0: tun_chr_ioctl cmd 1074025673 [ 182.420274][T11046] tap0: tun_chr_ioctl cmd 1074025673 [ 182.437155][T11046] tap0: tun_chr_ioctl cmd 1074025673 [ 182.445081][T11055] sctp: [Deprecated]: syz.2.1374 (pid 11055) Use of struct sctp_assoc_value in delayed_ack socket option. [ 182.445081][T11055] Use struct sctp_sack_info instead [ 182.472318][T11046] tap0: tun_chr_ioctl cmd 1074025673 [ 182.480482][T11046] tap0: tun_chr_ioctl cmd 1074025673 [ 182.486473][T11045] tap0: tun_chr_ioctl cmd 2148553947 [ 182.515306][T11046] tap0: tun_chr_ioctl cmd 1074025673 [ 182.591587][T11074] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1376'. [ 182.721989][T11079] netlink: 'syz.2.1377': attribute type 2 has an invalid length. [ 182.794283][T11079] 9: entered promiscuous mode [ 182.817455][T11082] ip6tnl2: entered allmulticast mode [ 183.026498][T11098] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1385'. [ 183.070165][T11098] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1385'. [ 183.096940][T11098] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.104204][T11098] bridge0: port 2(bridge_slave_1) entered listening state [ 183.111655][T11098] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.118856][T11098] bridge0: port 1(bridge_slave_0) entered listening state [ 183.160830][T11098] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1385'. [ 183.202139][T11098] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.209460][T11098] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.234471][T11112] netlink: 'syz.1.1388': attribute type 1 has an invalid length. [ 183.369494][T11118] gretap1: entered promiscuous mode [ 183.469728][T11123] bond4: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 183.483314][T11123] bond4: entered promiscuous mode [ 183.497536][T11123] bond4: entered allmulticast mode [ 183.503714][T11123] 8021q: adding VLAN 0 to HW filter on device bond4 [ 183.811639][T11149] veth1: mtu greater than device maximum [ 183.818428][T11149] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1396'. [ 184.136973][T11177] bond0: (slave bridge0): Releasing backup interface [ 184.153050][T11177] bridge_slave_0: left allmulticast mode [ 184.160556][T11177] bridge_slave_0: left promiscuous mode [ 184.166370][T11177] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.176179][T11177] bridge_slave_1: left allmulticast mode [ 184.183698][T11177] bridge_slave_1: left promiscuous mode [ 184.190832][T11177] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.203416][T11177] bond0: (slave bond_slave_0): Releasing backup interface [ 184.214892][T11177] bond0: (slave bond_slave_1): Releasing backup interface [ 184.230212][T11177] team0: Port device team_slave_0 removed [ 184.240403][T11177] team0: Port device team_slave_1 removed [ 184.246802][T11177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.254792][T11177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.264917][T11177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.273756][T11177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.282455][T11177] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 184.334175][T11181] lo speed is unknown, defaulting to 1000 [ 184.356606][T11186] netlink: 'syz.2.1405': attribute type 11 has an invalid length. [ 184.391410][T11146] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 184.587650][T11196] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1406'. [ 184.622864][T11192] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1406'. [ 184.661132][T11201] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 184.703292][T11190] netlink: 'syz.1.1408': attribute type 1 has an invalid length. [ 184.712741][T11190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1408'. [ 184.763427][T11206] netlink: 'syz.4.1410': attribute type 11 has an invalid length. [ 184.818207][T11206] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1410'. [ 184.866261][T11216] openvswitch: netlink: Flow key attr not present in new flow. [ 185.062625][T11223] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 185.150558][T11220] syzkaller0: entered promiscuous mode [ 185.156224][T11220] syzkaller0: entered allmulticast mode [ 185.187500][T11225] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 185.295238][T11235] ip6gretap0: entered promiscuous mode [ 185.309402][T11235] ip6gretap0: left promiscuous mode [ 185.697135][T11255] syzkaller1: entered allmulticast mode [ 185.735233][T11251] syzkaller1: entered promiscuous mode [ 185.742683][T11251] syzkaller1: entered allmulticast mode [ 189.216931][T11293] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 189.430965][T11361] __nla_validate_parse: 13 callbacks suppressed [ 189.430984][T11361] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1454'. [ 189.543613][T11370] netlink: 'syz.3.1458': attribute type 3 has an invalid length. [ 189.547350][T11373] netlink: 'syz.1.1459': attribute type 1 has an invalid length. [ 189.561451][T11373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1459'. [ 189.574612][T11373] netlink: 'syz.1.1459': attribute type 1 has an invalid length. [ 189.701071][T11382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1461'. [ 189.747409][T11382] syzkaller0: entered promiscuous mode [ 189.757218][T11382] syzkaller0: entered allmulticast mode [ 189.801377][T11390] netlink: 'syz.2.1463': attribute type 16 has an invalid length. [ 189.809564][T11390] netlink: 'syz.2.1463': attribute type 17 has an invalid length. [ 189.853730][T11393] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1463'. [ 189.872434][T11390] batadv0: left allmulticast mode [ 189.880348][T11390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.891802][T11397] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1465'. [ 189.953640][T11390] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 189.973425][T11390] vlan2: left promiscuous mode [ 189.981268][T11390] bridge0: left promiscuous mode [ 190.011197][T11390] 8021q: adding VLAN 0 to HW filter on device bond1 [ 190.021617][T11390] bond0: entered promiscuous mode [ 190.027405][T11390] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 190.040353][T11390] sit1: left promiscuous mode [ 190.045187][T11390] sit1: left allmulticast mode [ 190.052165][T11390] bond2: left allmulticast mode [ 190.057569][T11390] 8021q: adding VLAN 0 to HW filter on device bond2 [ 190.069576][T11390] 8021q: adding VLAN 0 to HW filter on device bond3 [ 190.080811][T11390] 8021q: adding VLAN 0 to HW filter on device bond4 [ 190.090076][T11390] macvlan3: left promiscuous mode [ 190.095335][T11390] bond5: left promiscuous mode [ 190.100743][T11390] macvlan3: left allmulticast mode [ 190.105991][T11390] bond5: left allmulticast mode [ 190.172321][T11390] 8021q: adding VLAN 0 to HW filter on device bond7 [ 190.184003][T11390] veth5: left promiscuous mode [ 190.264398][ T7843] bond6: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 190.274868][ T7843] bond6: (slave veth3): making interface the new active one [ 190.306797][ T7843] bond6: active interface up! [ 190.344421][ T1090] bond7: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 190.368651][ T1090] bond7: (slave veth5): making interface the new active one [ 190.390414][ T1090] veth5: entered allmulticast mode [ 190.420442][ T1090] bond7: active interface up! [ 190.462889][T11418] syzkaller1: entered promiscuous mode [ 190.494199][T11418] syzkaller1: entered allmulticast mode [ 190.518851][T11428] netlink: 788 bytes leftover after parsing attributes in process `syz.2.1474'. [ 190.563542][T11427] batman_adv: batadv0: Adding interface: dummy0 [ 190.572600][T11427] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.610074][T11427] batman_adv: batadv0: Interface activated: dummy0 [ 190.634392][T11428] batadv0: mtu less than device minimum [ 190.655470][T11428] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 190.667589][T11428] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 190.679217][T11428] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 190.690795][T11428] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 190.702503][T11428] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 190.714185][T11428] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 190.725826][T11428] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 190.737128][T11428] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 190.748819][T11428] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 190.908373][T11447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1479'. [ 190.999010][T11453] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1482'. [ 191.011283][T11453] netlink: 'syz.3.1482': attribute type 83 has an invalid length. [ 191.030404][T11455] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1480'. [ 191.049671][T11457] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1479'. [ 191.261412][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 191.267663][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 191.271688][ T5823] Bluetooth: hci2: command 0x0406 tx timeout [ 191.853115][T11489] syzkaller0: entered promiscuous mode [ 191.859981][T11496] netlink: 'syz.0.1491': attribute type 3 has an invalid length. [ 191.873017][T11496] netlink: 'syz.0.1491': attribute type 2 has an invalid length. [ 191.891907][T11489] syzkaller0: entered allmulticast mode [ 191.912539][ T50] IPVS: starting estimator thread 0... [ 191.997350][T11501] dvmrp0: left allmulticast mode [ 192.028161][T11499] IPVS: using max 40 ests per chain, 96000 per kthread [ 192.086618][T11509] bond0: entered promiscuous mode [ 192.094981][T11509] bond_slave_0: entered promiscuous mode [ 192.101834][T11509] bond_slave_1: entered promiscuous mode [ 192.109889][T11509] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 192.124945][T11509] bond0: left promiscuous mode [ 192.130820][T11509] bond_slave_0: left promiscuous mode [ 192.136657][T11509] bond_slave_1: left promiscuous mode [ 192.142429][T11509] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 192.420699][T11538] netlink: 'syz.3.1502': attribute type 21 has an invalid length. [ 192.429002][T11538] IPv6: NLM_F_CREATE should be specified when creating new route [ 192.442211][T11538] netlink: 'syz.3.1502': attribute type 1 has an invalid length. [ 192.933413][T11570] netem: unknown loss type 0 [ 192.949470][T11570] netem: change failed [ 193.389511][T11623] ip6gre2: entered promiscuous mode [ 193.394821][T11623] ip6gre2: entered allmulticast mode [ 193.828230][T11583] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 194.051303][T11646] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 194.236998][T11653] IPVS: Error connecting to the multicast addr [ 194.315537][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.353514][T11665] bond5: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 194.373743][T11665] bond5 (unregistering): Released all slaves [ 194.571260][T11680] dvmrp0: entered allmulticast mode [ 194.731178][T11697] __nla_validate_parse: 14 callbacks suppressed [ 194.731198][T11697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1541'. [ 194.782263][T11695] validate_nla: 1 callbacks suppressed [ 194.782281][T11695] netlink: 'syz.4.1540': attribute type 1 has an invalid length. [ 194.800075][T11695] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1540'. [ 194.830440][T11700] netlink: 'syz.4.1540': attribute type 1 has an invalid length. [ 194.868756][T11700] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1540'. [ 194.909557][T11705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1543'. [ 195.040774][T11715] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1546'. [ 195.222890][T11727] netlink: 'syz.1.1550': attribute type 4 has an invalid length. [ 195.276995][T11732] tipc: Started in network mode [ 195.288606][T11732] tipc: Node identity fa4ce5cffd92, cluster identity 4711 [ 195.296057][T11732] tipc: Enabled bearer , priority 0 [ 195.387472][T11732] syzkaller0: entered promiscuous mode [ 195.393798][T11732] syzkaller0: entered allmulticast mode [ 195.400749][T11732] tipc: Resetting bearer [ 195.406976][T11739] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1552'. [ 195.423908][T11730] tipc: Resetting bearer [ 197.124723][T11730] tipc: Disabling bearer [ 197.145684][T11792] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 197.177076][ T5933] tipc: Node number set to 132048335 [ 197.270169][T11799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1564'. [ 197.279573][T11799] batman_adv: batadv0: Interface deactivated: dummy0 [ 197.282966][T11801] IPv6: NLM_F_CREATE should be specified when creating new route [ 197.286302][T11799] batman_adv: batadv0: Removing interface: dummy0 [ 197.311662][T11796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1565'. [ 197.336674][T11803] sock: sock_timestamping_bind_phc: sock not bind to device [ 197.446837][T11809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1568'. [ 197.492232][T11809] net_ratelimit: 13 callbacks suppressed [ 197.492250][T11809] openvswitch: netlink: Unknown nsh attribute 0 [ 197.503220][ T5191] udevd[5191]: worker [5828] /devices/virtual/block/nbd4 is taking a long time [ 197.547820][T11820] delete_channel: no stack [ 197.761491][T11832] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 197.775666][T11831] geneve3: entered promiscuous mode [ 197.782209][T11831] geneve3: entered allmulticast mode [ 197.792780][ T319] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0 [ 197.808400][T11831] C: renamed from lo [ 197.817764][T11831] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 197.821623][T11837] netlink: 'syz.2.1578': attribute type 1 has an invalid length. [ 197.864136][ T319] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 197.885292][ T319] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 197.912383][T11837] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 197.914248][ T319] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 197.964615][T11847] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1580'. [ 198.042688][T11847] vlan1: entered allmulticast mode [ 198.049018][T11847] gretap0: entered allmulticast mode [ 198.249771][T11863] netlink: 'syz.1.1577': attribute type 4 has an invalid length. [ 198.257687][T11862] geneve2: entered promiscuous mode [ 198.265550][ T319] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 37141 - 0 [ 198.275400][ T319] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 37141 - 0 [ 198.345999][T11834] netlink: 'syz.1.1577': attribute type 4 has an invalid length. [ 198.381672][T11862] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.393485][T11862] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.415717][ T319] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 37141 - 0 [ 198.668367][T11884] veth0: entered promiscuous mode [ 198.753625][T11886] veth0: left promiscuous mode [ 198.892641][T11904] syz_tun: entered allmulticast mode [ 198.976071][T11910] Cannot find del_set index 4 as target [ 199.096422][T11911] syzkaller0: entered promiscuous mode [ 199.102395][T11911] syzkaller0: entered allmulticast mode [ 199.192858][T11909] delete_channel: no stack [ 199.309630][T11933] netlink: 'syz.0.1605': attribute type 21 has an invalid length. [ 199.462195][T11947] sctp: [Deprecated]: syz.1.1608 (pid 11947) Use of int in max_burst socket option deprecated. [ 199.462195][T11947] Use struct sctp_assoc_value instead [ 201.060742][T11973] syzkaller1: entered promiscuous mode [ 201.068480][T11973] syzkaller1: entered allmulticast mode [ 201.177191][T11980] __nla_validate_parse: 4 callbacks suppressed [ 201.177210][T11980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1615'. [ 201.199474][T11980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1615'. [ 201.212613][T11984] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.231522][T11980] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1615'. [ 201.323035][T11992] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1620'. [ 201.345409][ T5334] block nbd4: Possible stuck request ffff8880266d0000: control (read@0,1024B). Runtime 120 seconds [ 201.360557][ T5334] block nbd4: Possible stuck request ffff8880266d0200: control (read@1024,1024B). Runtime 120 seconds [ 201.361600][T11992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1620'. [ 201.371712][ T5334] block nbd4: Possible stuck request ffff8880266d0400: control (read@2048,1024B). Runtime 120 seconds [ 201.371769][ T5334] block nbd4: Possible stuck request ffff8880266d0600: control (read@3072,1024B). Runtime 120 seconds [ 201.420747][T11998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1621'. [ 201.450361][T11862] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.462963][T11862] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.473543][T11862] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 37141 - 0 [ 201.528944][T11997] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 201.567868][T11997] syzkaller0: entered promiscuous mode [ 201.574099][T11997] syzkaller0: entered allmulticast mode [ 201.664721][T11862] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.675357][T11862] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.689702][T11862] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 37141 - 0 [ 201.758999][T11862] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.770983][T11862] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.800103][T11862] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 37141 - 0 [ 201.933491][ T35] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.943602][ T35] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 37141 - 0 [ 201.965900][ T35] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 202.001597][T11862] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.029730][T11862] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 37141 - 0 [ 202.088062][T11862] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 202.533132][T12057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1639'. [ 202.559101][T12062] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.635515][T12068] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1642'. [ 202.669061][T12072] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 202.683290][T12060] netlink: 'syz.4.1640': attribute type 4 has an invalid length. [ 202.691861][T12060] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1640'. [ 202.720463][T12060] .`: renamed from bond0 (while UP) [ 202.738653][T12078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1644'. [ 202.754340][T12075] netlink: 'syz.3.1643': attribute type 10 has an invalid length. [ 202.790285][T12078] 8021q: adding VLAN 0 to HW filter on device bond9 [ 202.807626][T12075] team0: Device veth1_macvtap failed to register rx_handler [ 202.977086][T12088] tipc: MTU too low for tipc bearer [ 203.005459][T12088] netlink: 'syz.3.1646': attribute type 21 has an invalid length. [ 204.073694][T12131] team0: Device gtp0 is up. Set it down before adding it as a team port [ 204.113476][T12134] netlink: 'syz.1.1660': attribute type 4 has an invalid length. [ 204.268657][T12153] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.281422][T12153] ieee802154 phy0 wpan0: encryption failed: -22 [ 205.400437][T12192] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 205.611140][T12205] netlink: 'syz.0.1677': attribute type 14 has an invalid length. [ 205.619279][T12205] netlink: 'syz.0.1677': attribute type 13 has an invalid length. [ 205.782844][T12202] xt_TCPMSS: Only works on TCP SYN packets [ 205.864305][T12215] netlink: 'syz.1.1679': attribute type 13 has an invalid length. [ 206.040173][T12222] sctp: [Deprecated]: syz.3.1682 (pid 12222) Use of struct sctp_assoc_value in delayed_ack socket option. [ 206.040173][T12222] Use struct sctp_sack_info instead [ 206.051337][T12218] openvswitch: netlink: Flow actions attr not present in new flow. [ 206.158841][T12232] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 206.166897][T12232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.180411][T12230] netlink: 'syz.1.1683': attribute type 4 has an invalid length. [ 206.190015][T12232] netlink: 'syz.3.1684': attribute type 1 has an invalid length. [ 206.257855][T12240] bond5: (slave bridge8): making interface the new active one [ 206.266450][T12240] bond5: (slave bridge8): Enslaving as an active interface with an up link [ 206.334408][T12245] __nla_validate_parse: 15 callbacks suppressed [ 206.334425][T12245] netlink: 1280 bytes leftover after parsing attributes in process `syz.4.1687'. [ 206.335773][T12243] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1686'. [ 206.371335][T12249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1688'. [ 206.453870][T12254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1690'. [ 206.492926][T12254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1690'. [ 206.657893][T12265] IPVS: length: 4097 != 8 [ 206.781224][T12270] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1694'. [ 206.795048][T12270] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1694'. [ 206.846151][T12269] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1694'. [ 207.092133][T12303] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.1702'. [ 207.112712][T12299] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20004 [ 207.158848][T12305] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1703'. [ 207.177550][T12305] openvswitch: netlink: Multiple metadata blocks provided [ 207.335412][T12318] x_tables: duplicate underflow at hook 3 [ 207.586486][T12337] xt_l2tp: v2 sid > 0xffff: 1114112 [ 207.710653][ T5827] block nbd1: Receive control failed (result -32) [ 208.138998][T12367] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 208.179467][T12372] veth5: entered allmulticast mode [ 208.306516][T12385] ÿÿÿÿÿÿ: renamed from erspan0 (while UP) [ 208.476606][T12382] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 208.491383][T12393] nbd: couldn't find a device at index 0 [ 208.532144][T12382] bond1: (slave lo): Enslaving as an active interface with an up link [ 208.584204][T12382] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 208.597659][T12395] ip6t_srh: unknown srh invflags 4000 [ 208.619698][T12395] netlink: 'syz.3.1729': attribute type 1 has an invalid length. [ 208.701300][T12395] bond6: entered promiscuous mode [ 208.706780][T12395] 8021q: adding VLAN 0 to HW filter on device bond6 [ 208.731410][T12395] bond6: (slave bridge9): making interface the new active one [ 208.739634][T12395] bridge9: entered promiscuous mode [ 208.758866][T12395] bridge9: left promiscuous mode [ 209.038740][T12403] ieee802154 phy0 wpan0: encryption failed: -22 [ 209.234225][T12411] netlink: 'syz.0.1732': attribute type 1 has an invalid length. [ 209.360520][T12420] delete_channel: no stack [ 209.372186][T12410] bond10: (slave gretap1): making interface the new active one [ 209.380945][T12410] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 209.518809][T12425] netlink: 'syz.0.1737': attribute type 29 has an invalid length. [ 209.561680][T12425] netlink: 'syz.0.1737': attribute type 29 has an invalid length. [ 209.689901][T12432] syzkaller0: entered promiscuous mode [ 209.706562][T12432] syzkaller0: entered allmulticast mode [ 209.941878][T12446] netlink: 'syz.1.1742': attribute type 10 has an invalid length. [ 210.118755][T12451] openvswitch: netlink: Key type 31 is not supported [ 210.434759][T12476] C speed is unknown, defaulting to 1000 [ 210.474612][T12482] netlink: 'syz.2.1754': attribute type 4 has an invalid length. [ 210.493370][T12482] netlink: 'syz.2.1754': attribute type 4 has an invalid length. [ 210.673619][T12487] netlink: 'syz.2.1757': attribute type 21 has an invalid length. [ 210.686129][T12487] IPv6: NLM_F_CREATE should be specified when creating new route [ 210.694973][T12487] netlink: 'syz.2.1757': attribute type 1 has an invalid length. [ 210.711975][T12490] netlink: 'syz.3.1756': attribute type 1 has an invalid length. [ 211.384555][T12532] __nla_validate_parse: 14 callbacks suppressed [ 211.384574][T12532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1769'. [ 211.405013][T12533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1769'. [ 211.635578][T12535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1770'. [ 211.740938][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 211.756260][T12549] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1773'. [ 211.847182][T12562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1777'. [ 211.935086][T12568] nbd: couldn't find device at index 1073741824 [ 211.942579][T12568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1778'. [ 212.594558][T12591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1784'. [ 212.667384][T12580] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 212.744973][T12595] tap0: tun_chr_ioctl cmd 1074025676 [ 212.761593][T12595] tap0: owner set to 0 [ 213.019805][T12618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1793'. [ 213.031279][T12618] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 213.069680][T12620] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1795'. [ 213.128963][T12623] 8021q: adding VLAN 0 to HW filter on device bond11 [ 213.196250][T12627] veth7: entered promiscuous mode [ 213.356055][T12638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1797'. [ 213.936226][T12679] syzkaller1: entered promiscuous mode [ 213.982787][T12679] syzkaller1: entered allmulticast mode [ 214.023351][T12682] C speed is unknown, defaulting to 1000 [ 214.094884][T12680] bond12: Unable to set up delay as MII monitoring is disabled [ 214.118654][T12680] bond12 (unregistering): Released all slaves [ 214.629976][T12709] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 214.658754][T12709] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 214.985318][T12730] validate_nla: 3 callbacks suppressed [ 214.985338][T12730] netlink: 'syz.1.1822': attribute type 4 has an invalid length. [ 215.012904][T12727] netlink: 'syz.1.1822': attribute type 4 has an invalid length. [ 215.381859][T12753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.703698][T12786] xt_policy: output policy not valid in PREROUTING and INPUT [ 215.777024][T12791] netlink: 'syz.3.1845': attribute type 33 has an invalid length. [ 216.022875][T12800] syzkaller0: entered promiscuous mode [ 216.044179][T12800] syzkaller0: entered allmulticast mode [ 216.632282][T12845] __nla_validate_parse: 9 callbacks suppressed [ 216.632301][T12845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1854'. [ 217.885579][T12845] team0 (unregistering): Port device team_slave_0 removed [ 217.923370][T12845] team0 (unregistering): Port device team_slave_1 removed [ 217.963773][T12828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.981601][T12851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1858'. [ 218.003564][T12857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.021322][T12851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1858'. [ 218.045584][T12859] openvswitch: netlink: Flow key attribute not present in set flow. [ 218.147265][T12866] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.1864'. [ 218.151780][T12868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1865'. [ 218.292191][T12880] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1869'. [ 218.294615][T12875] IPVS: persistence engine module ip_vs_pe_À not found [ 218.304744][T12880] pim6reg1: entered promiscuous mode [ 218.315861][T12880] pim6reg1: entered allmulticast mode [ 218.329895][T12878] syzkaller0: entered promiscuous mode [ 218.335430][T12878] syzkaller0: entered allmulticast mode [ 218.413676][T12882] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1870'. [ 218.503376][T12887] bond7: Unable to set up delay as MII monitoring is disabled [ 218.513316][T12887] bond7 (unregistering): Released all slaves [ 218.553539][T12893] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1872'. [ 218.749812][T12910] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1878'. [ 218.852398][T12917] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1879'. [ 219.092004][ T7830] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 220.012637][T12993] netlink: 'syz.0.1902': attribute type 1 has an invalid length. [ 220.025434][T12995] sctp: [Deprecated]: syz.3.1901 (pid 12995) Use of int in maxseg socket option. [ 220.025434][T12995] Use struct sctp_assoc_value instead [ 220.065392][T12993] netlink: 'syz.0.1902': attribute type 26 has an invalid length. [ 220.089429][T12993] netlink: 'syz.0.1902': attribute type 26 has an invalid length. [ 220.262425][T13016] netlink: 'syz.0.1909': attribute type 12 has an invalid length. [ 220.419232][T13025] --map-set only usable from mangle table [ 220.575813][T13034] netlink: 'syz.4.1916': attribute type 2 has an invalid length. [ 220.586289][T13037] netlink: 'syz.4.1916': attribute type 10 has an invalid length. [ 220.660960][T13034] 9: entered promiscuous mode [ 220.877411][T13054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.126695][T13081] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 221.150294][T13067] C speed is unknown, defaulting to 1000 [ 221.393747][T13082] C speed is unknown, defaulting to 1000 [ 221.683142][T13101] xt_CT: You must specify a L4 protocol and not use inversions on it [ 221.746851][T13098] syzkaller0: entered promiscuous mode [ 221.762172][T13098] syzkaller0: entered allmulticast mode [ 221.817809][T13110] xt_TCPMSS: Only works on TCP SYN packets [ 222.028834][T13115] __nla_validate_parse: 13 callbacks suppressed [ 222.028856][T13115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1938'. [ 222.226468][T13130] IPv6: NLM_F_CREATE should be specified when creating new route [ 222.443155][T13142] syzkaller0: entered promiscuous mode [ 222.448993][T13142] syzkaller0: entered allmulticast mode [ 222.846604][T13166] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1947'. [ 223.037693][T13180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1951'. [ 223.096252][T13182] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1952'. [ 223.184009][T13182] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1952'. [ 223.383650][T13189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.776915][T13205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1961'. [ 223.805331][T13205] syzkaller0: entered promiscuous mode [ 223.811111][T13205] syzkaller0: entered allmulticast mode [ 223.828370][T13205] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1961'. [ 223.890823][T13209] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1963'. [ 224.248489][T13244] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1973'. [ 224.373234][T13254] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1978'. [ 224.423104][T13254] openvswitch: netlink: Flow actions attr not present in new flow. [ 224.481947][T13259] dvmrp6: entered allmulticast mode [ 224.496863][T13263] netlink: 'syz.4.1980': attribute type 21 has an invalid length. [ 224.856601][T13291] syzkaller1: entered promiscuous mode [ 224.862648][T13291] syzkaller1: entered allmulticast mode [ 224.924201][T13297] lo: Caught tx_queue_len zero misconfig [ 224.937208][T13297] netlink: 'syz.1.1992': attribute type 10 has an invalid length. [ 225.022135][T13300] bond0: (slave ip6tnl1): refused to change device type [ 225.046938][T13305] tipc: Enabling of bearer rejected, failed to enable media [ 225.126226][T13309] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 225.295174][T13329] netlink: 'syz.3.2002': attribute type 8 has an invalid length. [ 225.309831][T13330] netlink: 'syz.3.2002': attribute type 8 has an invalid length. [ 225.591528][T13349] netlink: 'syz.3.2008': attribute type 9 has an invalid length. [ 225.989424][T13377] : entered promiscuous mode [ 226.098130][T13385] netlink: 'syz.4.2021': attribute type 8 has an invalid length. [ 226.586345][T13418] 8021q: VLANs not supported on gre0 [ 226.608672][T13420] 8021q: VLANs not supported on gre0 [ 226.720513][T13429] x_tables: duplicate underflow at hook 1 [ 226.861963][T13431] netlink: 'syz.4.2031': attribute type 1 has an invalid length. [ 226.932976][T13440] syz_tun: left allmulticast mode [ 226.938347][T13440] syz_tun: left promiscuous mode [ 226.943953][T13440] bridge0: port 1(syz_tun) entered disabled state [ 227.193676][T13452] __nla_validate_parse: 19 callbacks suppressed [ 227.193697][T13452] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.2039'. [ 227.297304][T13461] netlink: 'syz.0.2042': attribute type 1 has an invalid length. [ 227.403153][T13461] bond12: entered promiscuous mode [ 227.423070][T13461] 8021q: adding VLAN 0 to HW filter on device bond12 [ 227.485921][T13466] bond12: (slave bridge8): making interface the new active one [ 227.519938][T13447] infiniband syz1: set active [ 227.524747][T13447] infiniband syz1: added ipvlan0 [ 227.533994][T13466] bridge8: entered promiscuous mode [ 227.567561][T13447] RDS/IB: syz1: added [ 227.573215][T13447] smc: adding ib device syz1 with port count 1 [ 227.584076][T13447] smc: ib device syz1 port 1 has no pnetid [ 227.604917][T13466] bond12: (slave bridge8): Enslaving as an active interface with an up link [ 227.621361][T13471] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2044'. [ 227.651566][T13471] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.2044'. [ 227.937603][T13494] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2049'. [ 228.110748][T13495] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 228.233128][T13505] bond3: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 228.414597][T13515] syzkaller0: entered promiscuous mode [ 228.420828][T13515] syzkaller0: entered allmulticast mode [ 228.462510][T13515] tipc: Enabled bearer , priority 0 [ 228.500937][T13512] tipc: Resetting bearer [ 228.545516][T13512] tipc: Disabling bearer [ 228.609611][T13522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2057'. [ 228.615928][T13524] ip6gre1: entered promiscuous mode [ 228.625149][T13524] ip6gre1: entered allmulticast mode [ 228.636925][T13520] netlink: 25 bytes leftover after parsing attributes in process `syz.4.2056'. [ 228.638910][ T35] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 228.667112][ T50] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 228.678542][T13526] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 228.678863][ T35] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 228.723885][T13524] tipc: Enabling of bearer rejected, failed to enable media [ 228.771999][T13520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2056'. [ 228.796488][T13520] netlink: 181404 bytes leftover after parsing attributes in process `syz.4.2056'. [ 228.879252][ T50] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 228.888562][T13540] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2060'. [ 229.027187][ T50] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 229.046108][T13547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2063'. [ 229.210325][T13555] netlink: Conntrack attr has 3 unknown bytes [ 229.250550][T13555] syzkaller1: entered promiscuous mode [ 229.256060][T13555] syzkaller1: entered allmulticast mode [ 229.684335][ T5840] udevd[5840]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 230.340780][T13604] netlink: 'syz.4.2083': attribute type 1 has an invalid length. [ 230.383482][T13604] netlink: 'syz.4.2083': attribute type 1 has an invalid length. [ 230.401654][T13601] syzkaller0: entered promiscuous mode [ 230.407173][T13601] syzkaller0: entered allmulticast mode [ 231.418359][ T5334] block nbd4: Possible stuck request ffff8880266d0000: control (read@0,1024B). Runtime 150 seconds [ 231.429450][ T5334] block nbd4: Possible stuck request ffff8880266d0200: control (read@1024,1024B). Runtime 150 seconds [ 231.441846][ T5334] block nbd4: Possible stuck request ffff8880266d0400: control (read@2048,1024B). Runtime 150 seconds [ 231.454420][ T5334] block nbd4: Possible stuck request ffff8880266d0600: control (read@3072,1024B). Runtime 150 seconds [ 232.119799][T13618] bond0: entered promiscuous mode [ 232.127463][T13618] batadv0: entered promiscuous mode [ 232.146650][T13618] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 232.157620][T13618] hsr1: entered promiscuous mode [ 232.164395][T13618] hsr1: entered allmulticast mode [ 232.171864][T13618] bond0: entered allmulticast mode [ 232.177051][T13618] batadv0: entered allmulticast mode [ 232.187654][T13618] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 232.199687][T13635] __nla_validate_parse: 7 callbacks suppressed [ 232.199704][T13635] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2088'. [ 232.215622][T13618] bond0: left promiscuous mode [ 232.221493][T13618] batadv0: left promiscuous mode [ 232.234254][T13627] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 232.251027][T13625] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 232.273337][T13625] syzkaller0: entered promiscuous mode [ 232.280962][T13625] syzkaller0: entered allmulticast mode [ 232.321111][T13635] 8021q: VLANs not supported on gre0 [ 232.354188][T13641] netlink: 'syz.2.2090': attribute type 10 has an invalid length. [ 232.359847][T13636] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2089'. [ 232.444354][T13644] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2091'. [ 232.508153][T13646] netlink: 'syz.1.2092': attribute type 9 has an invalid length. [ 232.662115][T13659] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 232.681704][T13659] xt_SECMARK: invalid mode: 9 [ 232.700792][T13661] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2095'. [ 232.721494][T13662] xt_hashlimit: size too large, truncated to 1048576 [ 232.867287][T13681] netlink: 'syz.0.2100': attribute type 7 has an invalid length. [ 232.958629][ T1090] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.974739][T13681] netlink: 'syz.0.2100': attribute type 7 has an invalid length. [ 233.008072][ T1090] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.018124][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 233.032601][T13682] policy can only be matched on NF_INET_PRE_ROUTING [ 233.032621][T13682] unable to load match [ 233.046596][ T1090] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.057744][ T1090] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.084113][T13690] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2103'. [ 233.156460][T13695] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2105'. [ 233.176755][T13694] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2105'. [ 233.200394][T13694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2105'. [ 233.277011][T13698] netlink: 'syz.4.2107': attribute type 10 has an invalid length. [ 233.286545][T13698] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2107'. [ 233.459368][T13716] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 233.495303][T13720] syzkaller1: entered promiscuous mode [ 233.506639][T13720] syzkaller1: entered allmulticast mode [ 233.849102][T13740] netlink: 'syz.0.2114': attribute type 16 has an invalid length. [ 233.856989][T13740] netlink: 'syz.0.2114': attribute type 17 has an invalid length. [ 234.624248][T13740] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 234.662976][T13748] ip6_vti0: entered promiscuous mode [ 234.675280][T13748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2123'. [ 234.826827][T13764] vlan1: entered allmulticast mode [ 234.840388][T13764] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 234.864397][T13769] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 235.069492][T13786] netlink: 'syz.1.2134': attribute type 1 has an invalid length. [ 235.092593][T13789] IPVS: length: 1152 != 8 [ 235.427121][T13810] bond11: Invalid ad_actor_system MAC address. [ 235.462389][T13810] bond11: option ad_actor_system: invalid value (1) [ 235.545155][T13810] bond11 (unregistering): Released all slaves [ 235.656306][T13825] validate_nla: 1 callbacks suppressed [ 235.656327][T13825] netlink: 'syz.3.2148': attribute type 83 has an invalid length. [ 235.755579][T13830] syzkaller0: entered promiscuous mode [ 235.762051][T13830] syzkaller0: entered allmulticast mode [ 235.861301][T13839] xt_policy: output policy not valid in PREROUTING and INPUT [ 235.901854][T13839] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 236.009462][T13851] netlink: 'syz.4.2156': attribute type 11 has an invalid length. [ 236.027072][T13851] team0: No ports can be present during mode change [ 236.043829][T13856] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 236.180127][T13864] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 236.224760][T13870] kthread_run failed with err -4 [ 236.520211][T13898] xt_CT: You must specify a L4 protocol and not use inversions on it [ 236.599240][T13905] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 236.932505][T13922] bond4: entered promiscuous mode [ 236.937741][T13922] bond4: entered allmulticast mode [ 236.944835][T13922] 8021q: adding VLAN 0 to HW filter on device bond4 [ 237.108511][T13943] netlink: 'syz.2.2185': attribute type 10 has an invalid length. [ 237.128070][T13942] netlink: 'syz.2.2185': attribute type 10 has an invalid length. [ 237.144763][T13942] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 237.168202][T13943] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 237.263674][T13949] __nla_validate_parse: 15 callbacks suppressed [ 237.263691][T13949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2188'. [ 237.324409][T13949] 8021q: adding VLAN 0 to HW filter on device bond13 [ 237.366595][T13950] 8021q: adding VLAN 0 to HW filter on device bond13 [ 237.374774][T13950] bond13: (slave vxcan7): The slave device specified does not support setting the MAC address [ 237.388917][T13950] bond13: (slave vxcan7): Error -95 calling set_mac_address [ 237.447793][T13970] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2193'. [ 237.640528][T13986] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2197'. [ 237.677186][T13987] vlan3: entered allmulticast mode [ 237.683126][T13987] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 237.732758][T13986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.756815][T13986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.829022][T13986] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 237.863694][T13986] bond0 (unregistering): Released all slaves [ 237.919854][T14006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.926986][T14006] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 237.943163][T14006] bond0: (slave gre0): Error -95 calling set_mac_address [ 238.162460][T13995] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2200'. [ 238.175775][T13993] mpoa:mpoad_close: () going down [ 238.542548][T13997] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 238.611086][T14046] ieee802154 phy0 wpan0: encryption failed: -22 [ 238.710474][T14049] : entered promiscuous mode [ 239.514394][T14128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2226'. [ 239.547571][T14130] netlink: 'syz.4.2222': attribute type 13 has an invalid length. [ 239.557850][T14130] netlink: 'syz.4.2222': attribute type 58 has an invalid length. [ 239.579443][T14130] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2222'. [ 239.704084][T14115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2226'. [ 239.786834][T14138] netlink: 'syz.2.2228': attribute type 1 has an invalid length. [ 239.815138][T14138] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2228'. [ 239.855525][T14138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2228'. [ 239.867881][T14137] syzkaller0: entered promiscuous mode [ 239.875792][T14137] syzkaller0: entered allmulticast mode [ 240.020055][T14150] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2231'. [ 240.051137][T14138] hsr_slave_0 (unregistering): left promiscuous mode [ 240.067767][T14137] tunl0: Caught tx_queue_len zero misconfig [ 240.301121][T14161] netlink: 'syz.0.2233': attribute type 2 has an invalid length. [ 240.471903][T14185] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 241.658340][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 243.205388][T14161] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 243.397448][T14212] __nla_validate_parse: 1 callbacks suppressed [ 243.397466][T14212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2246'. [ 243.449315][T14212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2246'. [ 243.519641][T14212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2246'. [ 243.535384][T14212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2246'. [ 243.574145][T14212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2246'. [ 243.613747][T14212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2246'. [ 243.635618][T14212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2246'. [ 243.676600][T14212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2246'. [ 243.736186][T14212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2246'. [ 243.764329][T14212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2246'. [ 244.004165][T14249] netlink: 'syz.2.2256': attribute type 1 has an invalid length. [ 244.073376][T14256] openvswitch: netlink: Flow key attr not present in new flow. [ 246.365435][T14224] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 246.377751][T14239] netlink: 'syz.1.2253': attribute type 2 has an invalid length. [ 246.584672][T14287] IPv6: NLM_F_CREATE should be specified when creating new route [ 246.740862][T14287] digital: digital_start_poll: Unknown protocol [ 247.605100][T14344] netlink: 'syz.4.2285': attribute type 1 has an invalid length. [ 247.758988][T14357] netlink: 'syz.2.2284': attribute type 1 has an invalid length. [ 247.776063][T14357] netlink: 'syz.2.2284': attribute type 21 has an invalid length. [ 247.840077][T14346] lo: entered promiscuous mode [ 247.857222][T14346] tunl0: entered promiscuous mode [ 247.871211][T14346] gre0: left allmulticast mode [ 247.887141][T14346] gretap0: entered promiscuous mode [ 247.904899][T14346] erspan0: entered promiscuous mode [ 247.912072][T14346] ip_vti0: entered promiscuous mode [ 247.923876][T14357] netlink: 'syz.2.2284': attribute type 4 has an invalid length. [ 247.932390][T14357] netlink: 'syz.2.2284': attribute type 5 has an invalid length. [ 248.430132][T14406] __nla_validate_parse: 39 callbacks suppressed [ 248.430146][T14406] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2300'. [ 250.794764][T14360] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 250.875802][T14415] xt_l2tp: invalid flags combination: 8 [ 251.060162][T14422] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2303'. [ 251.087891][T14422] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 251.202299][T14444] netlink: 'syz.2.2311': attribute type 8 has an invalid length. [ 251.289206][T14446] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2312'. [ 251.313870][T14446] bond0: entered promiscuous mode [ 251.323024][ T5827] Bluetooth: hci4: link tx timeout [ 251.323926][T14453] netlink: 'syz.3.2314': attribute type 6 has an invalid length. [ 251.331190][ T5827] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 251.338113][T14446] bond_slave_0: entered promiscuous mode [ 251.348496][ T5827] Bluetooth: hci4: link tx timeout [ 251.356448][ T5827] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 251.383973][T14446] bond_slave_1: entered promiscuous mode [ 251.395000][T14446] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 251.404851][T14446] gretap0: entered promiscuous mode [ 251.412872][T14446] hsr1: entered promiscuous mode [ 251.429849][T14459] team0: Device ip6gre3 is of different type [ 251.713441][T14475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2321'. [ 251.775132][T14478] bond8: (slave bond_slave_1): Device is not bonding slave [ 251.799008][T14478] bond8: option active_slave: invalid value (bond_slave_1) [ 251.822796][T14490] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2324'. [ 251.834609][T14478] bond8 (unregistering): Released all slaves [ 252.020605][T14495] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2326'. [ 252.067790][T14503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2328'. [ 252.587232][T14535] netem: change failed [ 252.601208][T14535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2335'. [ 252.627695][T14535] bridge_slave_1: left allmulticast mode [ 252.648251][T14535] bridge_slave_1: left promiscuous mode [ 252.673051][T14535] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.726099][T14535] bridge_slave_0: left allmulticast mode [ 252.742844][T14535] bridge_slave_0: left promiscuous mode [ 252.750880][T14535] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.091206][T14573] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2346'. [ 253.273130][T14582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2348'. [ 253.349890][T14591] xt_hashlimit: max too large, truncated to 1048576 [ 253.392856][T14600] xt_hashlimit: max too large, truncated to 1048576 [ 253.420457][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 253.437220][T14601] syzkaller0: entered promiscuous mode [ 253.443100][T14601] syzkaller0: entered allmulticast mode [ 253.963335][T14631] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2362'. [ 254.071473][T14637] nbd: illegal input index 2958377 [ 254.202978][T14639] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2365'. [ 254.255948][T14651] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2368'. [ 254.385948][T14656] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 254.534008][T14675] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2375'. [ 254.661424][T14690] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2380'. [ 254.748253][T14693] netlink: 'syz.0.2382': attribute type 10 has an invalid length. [ 254.766148][T14693] team0: Device vxcan1 is of different type [ 254.797816][T14702] netlink: 'syz.0.2382': attribute type 10 has an invalid length. [ 254.813529][T14702] team0: Device vxcan1 is of different type [ 254.960402][T14715] netlink: 'syz.0.2387': attribute type 11 has an invalid length. [ 255.106006][T14721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2388'. [ 255.290198][T14741] netlink: 'syz.2.2391': attribute type 21 has an invalid length. [ 255.298720][T14741] netlink: 'syz.2.2391': attribute type 1 has an invalid length. [ 255.310036][T14740] netlink: 'syz.0.2392': attribute type 1 has an invalid length. [ 255.317877][T14740] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2392'. [ 255.329678][T14740] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2392'. [ 255.342444][T14743] netlink: 'syz.1.2393': attribute type 1 has an invalid length. [ 255.348394][T14740] netlink: 'syz.0.2392': attribute type 1 has an invalid length. [ 255.358644][T14740] netlink: 'syz.0.2392': attribute type 8 has an invalid length. [ 255.374016][T14740] netlink: 606 bytes leftover after parsing attributes in process `syz.0.2392'. [ 255.398652][T14740] netlink: 13 bytes leftover after parsing attributes in process `syz.0.2392'. [ 255.499644][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 255.584900][T14759] syzkaller1: entered promiscuous mode [ 255.590605][T14759] syzkaller1: entered allmulticast mode [ 255.753065][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.280394][T14801] l2tp_ppp: sess 2/0: no socket in recv [ 256.330628][T14803] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 256.392254][T14803] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 256.713339][ T7826] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.740977][ T7826] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 37141 - 0 [ 256.759420][ T7826] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 256.861866][ T7826] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.881750][ T7826] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 37141 - 0 [ 256.904069][ T7826] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 256.908660][T14839] validate_nla: 2 callbacks suppressed [ 256.908681][T14839] netlink: 'syz.4.2420': attribute type 30 has an invalid length. [ 256.936989][ T7826] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.957799][ T7826] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 37141 - 0 [ 256.967703][ T7826] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 256.977387][T14844] netlink: 'syz.4.2420': attribute type 2 has an invalid length. [ 256.986193][ T7826] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.996037][T14844] netlink: 'syz.4.2420': attribute type 8 has an invalid length. [ 257.017615][ T7826] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 37141 - 0 [ 257.028820][ T7826] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 257.451698][T14877] xt_bpf: check failed: parse error [ 258.113745][T14946] netlink: 'syz.2.2453': attribute type 8 has an invalid length. [ 258.174792][T14940] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 258.269423][T14955] tipc: Enabled bearer , priority 10 [ 258.429908][T14971] ieee802154 phy0 wpan0: encryption failed: -90 [ 258.463008][T14965] C speed is unknown, defaulting to 1000 [ 258.488984][T14973] tipc: New replicast peer: 255.255.255.255 [ 258.495700][T14973] tipc: Enabled bearer , priority 10 [ 258.652808][T14986] netlink: 'syz.2.2463': attribute type 10 has an invalid length. [ 258.744311][T14986] bridge0: entered promiscuous mode [ 258.785205][T14986] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 258.985467][T15012] __nla_validate_parse: 15 callbacks suppressed [ 258.985486][T15012] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2468'. [ 259.081115][T15018] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2469'. [ 259.092078][T15018] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2469'. [ 259.105794][T15018] netlink: 'syz.3.2469': attribute type 6 has an invalid length. [ 259.115468][T15018] netlink: 'syz.3.2469': attribute type 5 has an invalid length. [ 259.126654][T15018] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2469'. [ 259.237799][T15029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2471'. [ 259.285573][T15029] bond8: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 259.316752][T15029] bond8: entered promiscuous mode [ 259.329985][T15029] bond8: entered allmulticast mode [ 259.345878][T15029] 8021q: adding VLAN 0 to HW filter on device bond8 [ 259.506626][T15039] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2475'. [ 259.543121][T15039] netlink: 320 bytes leftover after parsing attributes in process `syz.3.2475'. [ 259.738166][T15041] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2476'. [ 260.131350][T15070] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 261.500849][ T5334] block nbd4: Possible stuck request ffff8880266d0000: control (read@0,1024B). Runtime 180 seconds [ 261.511815][ T5334] block nbd4: Possible stuck request ffff8880266d0200: control (read@1024,1024B). Runtime 180 seconds [ 261.522957][ T5334] block nbd4: Possible stuck request ffff8880266d0400: control (read@2048,1024B). Runtime 180 seconds [ 261.534172][ T5334] block nbd4: Possible stuck request ffff8880266d0600: control (read@3072,1024B). Runtime 180 seconds [ 263.178088][ T5191] udevd[5191]: worker [5828] /devices/virtual/block/nbd4 timeout; kill it [ 263.186720][ T5191] udevd[5191]: seq 11084 '/devices/virtual/block/nbd4' killed [ 275.704481][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 275.714922][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 275.723839][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 275.731894][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 275.752835][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 275.861445][T15096] C speed is unknown, defaulting to 1000 [ 275.903470][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 275.913461][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 275.926544][ T5823] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 275.936641][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 275.937189][ T5823] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 275.954774][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 275.963620][ T5823] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 275.971431][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 275.981232][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 275.981238][ T5823] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 276.019677][ T5827] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 276.029328][ T5827] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 276.037285][ T5827] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 276.048418][ T5827] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 276.056579][ T5827] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 276.172329][ T5823] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 276.181481][ T5823] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 276.190791][ T5823] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 276.209539][ T5823] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 276.227811][ T5823] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 276.264911][T15101] C speed is unknown, defaulting to 1000 [ 276.501502][T15103] C speed is unknown, defaulting to 1000 [ 276.683646][T15096] chnl_net:caif_netlink_parms(): no params data found [ 276.782502][T15099] C speed is unknown, defaulting to 1000 [ 276.892122][T15096] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.908261][T15096] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.915886][T15096] bridge_slave_0: entered allmulticast mode [ 276.948339][T15096] bridge_slave_0: entered promiscuous mode [ 277.001988][T15096] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.018152][T15096] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.025379][T15096] bridge_slave_1: entered allmulticast mode [ 277.040854][T15096] bridge_slave_1: entered promiscuous mode [ 277.081481][T15106] C speed is unknown, defaulting to 1000 [ 277.085147][T15096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.100796][T15096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.164676][T15096] team0: Port device team_slave_0 added [ 277.191872][T15096] team0: Port device team_slave_1 added [ 277.292391][T15096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.308329][T15096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.334910][T15096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.347843][T15096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.355013][T15096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.389401][T15096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.552529][T15096] hsr_slave_0: entered promiscuous mode [ 277.559603][T15096] hsr_slave_1: entered promiscuous mode [ 277.566040][T15096] debugfs: 'hsr0' already exists in 'hsr' [ 277.572534][T15096] Cannot create hsr debugfs directory [ 277.617504][T15101] chnl_net:caif_netlink_parms(): no params data found [ 277.820482][ T5827] Bluetooth: hci5: command tx timeout [ 277.989473][T15101] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.996670][T15101] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.004732][T15101] bridge_slave_0: entered allmulticast mode [ 278.012175][T15101] bridge_slave_0: entered promiscuous mode [ 278.020068][T15103] chnl_net:caif_netlink_parms(): no params data found [ 278.054453][T15101] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.061683][ T5827] Bluetooth: hci6: command tx timeout [ 278.062187][ T5827] Bluetooth: hci7: command tx timeout [ 278.073090][T15101] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.073337][T15101] bridge_slave_1: entered allmulticast mode [ 278.075002][T15101] bridge_slave_1: entered promiscuous mode [ 278.148636][ T5827] Bluetooth: hci8: command tx timeout [ 278.212705][T15101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.253061][T15101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.299468][ T5827] Bluetooth: hci9: command tx timeout [ 278.330526][T15103] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.337686][T15103] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.346427][T15103] bridge_slave_0: entered allmulticast mode [ 278.354180][T15103] bridge_slave_0: entered promiscuous mode [ 278.392796][T15103] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.400316][T15103] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.407531][T15103] bridge_slave_1: entered allmulticast mode [ 278.415111][T15103] bridge_slave_1: entered promiscuous mode [ 278.425082][T15101] team0: Port device team_slave_0 added [ 278.437773][T15101] team0: Port device team_slave_1 added [ 278.459762][T15099] chnl_net:caif_netlink_parms(): no params data found [ 278.516824][T15101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.524516][T15101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.552461][T15101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.566858][T15103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.582415][T15103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.604533][T15101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.611737][T15101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.638452][T15101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.687144][T15106] chnl_net:caif_netlink_parms(): no params data found [ 278.734851][T15103] team0: Port device team_slave_0 added [ 278.783097][T15103] team0: Port device team_slave_1 added [ 278.794512][T15101] hsr_slave_0: entered promiscuous mode [ 278.801205][T15101] hsr_slave_1: entered promiscuous mode [ 278.807258][T15101] debugfs: 'hsr0' already exists in 'hsr' [ 278.813173][T15101] Cannot create hsr debugfs directory [ 278.863035][T15099] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.870369][T15099] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.877555][T15099] bridge_slave_0: entered allmulticast mode [ 278.885236][T15099] bridge_slave_0: entered promiscuous mode [ 278.899739][T15103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.906705][T15103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.933213][T15103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.944668][T15099] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.952369][T15099] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.959979][T15099] bridge_slave_1: entered allmulticast mode [ 278.966967][T15099] bridge_slave_1: entered promiscuous mode [ 278.989272][T15103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.996242][T15103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.023107][T15103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.101515][T15099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.133928][T15099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.143611][T15106] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.151212][T15106] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.158804][T15106] bridge_slave_0: entered allmulticast mode [ 279.166035][T15106] bridge_slave_0: entered promiscuous mode [ 279.202632][T15106] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.210484][T15106] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.217868][T15106] bridge_slave_1: entered allmulticast mode [ 279.225081][T15106] bridge_slave_1: entered promiscuous mode [ 279.273901][T15103] hsr_slave_0: entered promiscuous mode [ 279.280598][T15103] hsr_slave_1: entered promiscuous mode [ 279.286802][T15103] debugfs: 'hsr0' already exists in 'hsr' [ 279.293007][T15103] Cannot create hsr debugfs directory [ 279.309230][T15099] team0: Port device team_slave_0 added [ 279.335927][T15099] team0: Port device team_slave_1 added [ 279.345123][T15106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.383851][T15106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.435558][T15099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.442802][T15099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.469391][T15099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.506926][T15099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.514209][T15099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.542258][T15099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.571307][T15106] team0: Port device team_slave_0 added [ 279.611036][T15106] team0: Port device team_slave_1 added [ 279.695221][T15099] hsr_slave_0: entered promiscuous mode [ 279.701838][T15099] hsr_slave_1: entered promiscuous mode [ 279.708730][T15099] debugfs: 'hsr0' already exists in 'hsr' [ 279.714483][T15099] Cannot create hsr debugfs directory [ 279.720993][T15106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.728987][T15106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.755560][T15106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.771140][T15106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.778773][T15106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.805293][T15106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.900847][ T5827] Bluetooth: hci5: command tx timeout [ 279.921799][T15106] hsr_slave_0: entered promiscuous mode [ 279.928260][T15106] hsr_slave_1: entered promiscuous mode [ 279.934357][T15106] debugfs: 'hsr0' already exists in 'hsr' [ 279.940602][T15106] Cannot create hsr debugfs directory [ 280.138788][ T5827] Bluetooth: hci7: command tx timeout [ 280.138817][ T5823] Bluetooth: hci6: command tx timeout [ 280.228694][ T5823] Bluetooth: hci8: command tx timeout [ 280.378106][ T5823] Bluetooth: hci9: command tx timeout [ 281.979608][ T5823] Bluetooth: hci5: command tx timeout [ 282.218176][ T5823] Bluetooth: hci7: command tx timeout [ 282.218604][ T5827] Bluetooth: hci6: command tx timeout [ 282.298789][ T5827] Bluetooth: hci8: command tx timeout [ 282.458153][ T5827] Bluetooth: hci9: command tx timeout [ 284.058468][ T5827] Bluetooth: hci5: command tx timeout [ 284.298207][ T5827] Bluetooth: hci6: command tx timeout [ 284.303654][ T5827] Bluetooth: hci7: command tx timeout [ 284.378611][ T5827] Bluetooth: hci8: command tx timeout [ 284.539009][ T5827] Bluetooth: hci9: command tx timeout [ 291.581225][ T5334] block nbd4: Possible stuck request ffff8880266d0000: control (read@0,1024B). Runtime 210 seconds [ 291.592042][ T5334] block nbd4: Possible stuck request ffff8880266d0200: control (read@1024,1024B). Runtime 210 seconds [ 291.603145][ T5334] block nbd4: Possible stuck request ffff8880266d0400: control (read@2048,1024B). Runtime 210 seconds [ 291.614362][ T5334] block nbd4: Possible stuck request ffff8880266d0600: control (read@3072,1024B). Runtime 210 seconds [ 317.182652][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.659207][ T5334] block nbd4: Possible stuck request ffff8880266d0000: control (read@0,1024B). Runtime 240 seconds [ 321.670418][ T5334] block nbd4: Possible stuck request ffff8880266d0200: control (read@1024,1024B). Runtime 240 seconds [ 321.681487][ T5334] block nbd4: Possible stuck request ffff8880266d0400: control (read@2048,1024B). Runtime 240 seconds [ 321.692682][ T5334] block nbd4: Possible stuck request ffff8880266d0600: control (read@3072,1024B). Runtime 240 seconds [ 336.015639][ T5823] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 336.026052][ T5823] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 336.038777][ T5823] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 336.046909][ T5823] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 336.055663][ T5823] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 336.123606][ T5823] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 336.131229][T15143] C speed is unknown, defaulting to 1000 [ 336.141050][ T5823] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 336.151366][ T5823] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 336.160338][ T5823] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 336.168700][ T5823] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 336.225445][ T5827] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 336.240646][ T5827] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 336.250045][ T5827] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 336.252699][ T5837] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 336.269016][ T5827] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 336.276688][ T5827] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 336.279611][ T5837] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 336.294899][ T5823] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 336.310019][ T5827] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 336.322753][ T5827] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 336.383785][ T5827] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 336.394288][ T5827] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 336.403130][ T5827] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 336.411500][ T5827] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 336.421427][ T5827] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 336.509436][T15145] C speed is unknown, defaulting to 1000 [ 336.728944][T15149] C speed is unknown, defaulting to 1000 [ 336.956319][T15143] chnl_net:caif_netlink_parms(): no params data found [ 337.081154][T15147] C speed is unknown, defaulting to 1000 [ 337.260891][T15143] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.288119][T15143] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.295446][T15143] bridge_slave_0: entered allmulticast mode [ 337.319770][T15143] bridge_slave_0: entered promiscuous mode [ 337.361565][T15143] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.377696][T15143] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.385471][T15143] bridge_slave_1: entered allmulticast mode [ 337.393102][T15143] bridge_slave_1: entered promiscuous mode [ 337.403901][T15151] C speed is unknown, defaulting to 1000 [ 337.539848][T15145] chnl_net:caif_netlink_parms(): no params data found [ 337.574868][T15143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.611228][T15143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.730051][T15143] team0: Port device team_slave_0 added [ 337.744597][T15143] team0: Port device team_slave_1 added [ 337.863162][T15143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.870560][T15143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.896747][T15143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.912065][T15143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.919170][T15143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.945617][T15143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.062377][T15145] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.070165][T15145] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.077502][T15145] bridge_slave_0: entered allmulticast mode [ 338.085573][T15145] bridge_slave_0: entered promiscuous mode [ 338.133337][T15145] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.140683][ T5827] Bluetooth: hci10: command tx timeout [ 338.145533][T15145] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.155287][T15145] bridge_slave_1: entered allmulticast mode [ 338.163128][T15145] bridge_slave_1: entered promiscuous mode [ 338.218731][ T5827] Bluetooth: hci11: command tx timeout [ 338.232857][T15143] hsr_slave_0: entered promiscuous mode [ 338.239681][T15143] hsr_slave_1: entered promiscuous mode [ 338.245854][T15143] debugfs: 'hsr0' already exists in 'hsr' [ 338.252249][T15143] Cannot create hsr debugfs directory [ 338.258460][T15149] chnl_net:caif_netlink_parms(): no params data found [ 338.284635][T15145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.297453][T15145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.365732][T15145] team0: Port device team_slave_0 added [ 338.378254][ T5827] Bluetooth: hci13: command tx timeout [ 338.378615][ T5838] Bluetooth: hci12: command tx timeout [ 338.409805][T15145] team0: Port device team_slave_1 added [ 338.458657][ T5838] Bluetooth: hci14: command tx timeout [ 338.520758][T15145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.527732][T15145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.555859][T15145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.583111][T15149] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.590660][T15149] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.598588][T15149] bridge_slave_0: entered allmulticast mode [ 338.605607][T15149] bridge_slave_0: entered promiscuous mode [ 338.615473][T15149] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.623621][T15149] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.631577][T15149] bridge_slave_1: entered allmulticast mode [ 338.639913][T15149] bridge_slave_1: entered promiscuous mode [ 338.647546][T15145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.654817][T15145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.682578][T15145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.838082][T15149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.855166][T15147] chnl_net:caif_netlink_parms(): no params data found [ 338.883377][T15145] hsr_slave_0: entered promiscuous mode [ 338.891196][T15145] hsr_slave_1: entered promiscuous mode [ 338.897403][T15145] debugfs: 'hsr0' already exists in 'hsr' [ 338.903493][T15145] Cannot create hsr debugfs directory [ 338.917595][T15149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.974945][T15149] team0: Port device team_slave_0 added [ 338.989788][T15149] team0: Port device team_slave_1 added [ 339.027441][T15151] chnl_net:caif_netlink_parms(): no params data found [ 339.123790][T15149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.131768][T15149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.158661][T15149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.208674][T15149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.215627][T15149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.242005][T15149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.259912][T15147] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.267113][T15147] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.275037][T15147] bridge_slave_0: entered allmulticast mode [ 339.282769][T15147] bridge_slave_0: entered promiscuous mode [ 339.316618][T15147] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.324260][T15147] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.332655][T15147] bridge_slave_1: entered allmulticast mode [ 339.340915][T15147] bridge_slave_1: entered promiscuous mode [ 339.440001][T15147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.453041][T15147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.474505][T15151] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.482082][T15151] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.489833][T15151] bridge_slave_0: entered allmulticast mode [ 339.496834][T15151] bridge_slave_0: entered promiscuous mode [ 339.525232][T15149] hsr_slave_0: entered promiscuous mode [ 339.539862][T15149] hsr_slave_1: entered promiscuous mode [ 339.546000][T15149] debugfs: 'hsr0' already exists in 'hsr' [ 339.552136][T15149] Cannot create hsr debugfs directory [ 339.557861][T15151] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.565909][T15151] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.574763][T15151] bridge_slave_1: entered allmulticast mode [ 339.586009][T15151] bridge_slave_1: entered promiscuous mode [ 339.615028][T15147] team0: Port device team_slave_0 added [ 339.623727][T15147] team0: Port device team_slave_1 added [ 339.716218][T15147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.723477][T15147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.749787][T15147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.764363][T15151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.777242][T15151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.802329][T15147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.809987][T15147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.836863][T15147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.884422][T15151] team0: Port device team_slave_0 added [ 339.916218][T15151] team0: Port device team_slave_1 added [ 339.957747][T15151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.964791][T15151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.992441][T15151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.027224][T15151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.034354][T15151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.061767][T15151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.114710][T15147] hsr_slave_0: entered promiscuous mode [ 340.121815][T15147] hsr_slave_1: entered promiscuous mode [ 340.129501][T15147] debugfs: 'hsr0' already exists in 'hsr' [ 340.135249][T15147] Cannot create hsr debugfs directory [ 340.221395][ T5838] Bluetooth: hci10: command tx timeout [ 340.248695][T15151] hsr_slave_0: entered promiscuous mode [ 340.255083][T15151] hsr_slave_1: entered promiscuous mode [ 340.262036][T15151] debugfs: 'hsr0' already exists in 'hsr' [ 340.267769][T15151] Cannot create hsr debugfs directory [ 340.298902][ T5838] Bluetooth: hci11: command tx timeout [ 340.459086][ T5838] Bluetooth: hci13: command tx timeout [ 340.459096][ T5827] Bluetooth: hci12: command tx timeout [ 340.538974][ T5838] Bluetooth: hci14: command tx timeout [ 342.299762][ T5838] Bluetooth: hci10: command tx timeout [ 342.378726][ T5838] Bluetooth: hci11: command tx timeout [ 342.538246][ T5827] Bluetooth: hci12: command tx timeout [ 342.543834][ T5838] Bluetooth: hci13: command tx timeout [ 342.618517][ T5838] Bluetooth: hci14: command tx timeout [ 344.379936][ T5838] Bluetooth: hci10: command tx timeout [ 344.459397][ T5838] Bluetooth: hci11: command tx timeout [ 344.618714][ T5838] Bluetooth: hci13: command tx timeout [ 344.618919][ T5827] Bluetooth: hci12: command tx timeout [ 344.698801][ T5827] Bluetooth: hci14: command tx timeout [ 351.740964][ T5334] block nbd4: Possible stuck request ffff8880266d0000: control (read@0,1024B). Runtime 270 seconds [ 351.752832][ T5334] block nbd4: Possible stuck request ffff8880266d0200: control (read@1024,1024B). Runtime 270 seconds [ 351.763926][ T5334] block nbd4: Possible stuck request ffff8880266d0400: control (read@2048,1024B). Runtime 270 seconds [ 351.775214][ T5334] block nbd4: Possible stuck request ffff8880266d0600: control (read@3072,1024B). Runtime 270 seconds [ 378.620945][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.819751][ T5334] block nbd4: Possible stuck request ffff8880266d0000: control (read@0,1024B). Runtime 300 seconds [ 381.830592][ T5334] block nbd4: Possible stuck request ffff8880266d0200: control (read@1024,1024B). Runtime 300 seconds [ 381.841676][ T5334] block nbd4: Possible stuck request ffff8880266d0400: control (read@2048,1024B). Runtime 300 seconds [ 381.852851][ T5334] block nbd4: Possible stuck request ffff8880266d0600: control (read@3072,1024B). Runtime 300 seconds [ 396.281519][ T5838] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 396.292558][ T5838] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 396.308907][ T5838] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 396.320293][ T5838] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 396.330240][ T5838] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 396.342343][ T5837] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 396.374139][ T5827] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 396.387695][ T5827] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 396.396605][ T5827] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 396.405291][ T5827] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 396.435195][ T5827] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 396.446862][ T5837] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 396.455754][ T5837] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 396.472107][ T5837] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 396.480766][ T5837] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 396.495630][ T5823] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 396.509289][ T5823] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 396.520076][ T5823] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 396.535802][ T5837] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 396.543708][ T5837] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 396.561308][T15188] C speed is unknown, defaulting to 1000 [ 396.587509][ T5837] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 396.602633][ T5837] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 396.615287][ T5837] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 396.625172][ T5837] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 396.648681][ T5837] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 396.761784][T15190] C speed is unknown, defaulting to 1000 [ 396.997982][T15192] C speed is unknown, defaulting to 1000 [ 397.242892][T15188] chnl_net:caif_netlink_parms(): no params data found [ 397.278780][T15193] C speed is unknown, defaulting to 1000 [ 397.535034][T15196] C speed is unknown, defaulting to 1000 [ 397.535166][T15188] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.554849][T15188] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.562768][T15188] bridge_slave_0: entered allmulticast mode [ 397.571208][T15188] bridge_slave_0: entered promiscuous mode [ 397.586756][T15188] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.594204][T15188] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.603844][T15188] bridge_slave_1: entered allmulticast mode [ 397.612130][T15188] bridge_slave_1: entered promiscuous mode [ 397.656806][T15188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.686759][T15188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.751212][T15188] team0: Port device team_slave_0 added [ 397.799946][T15188] team0: Port device team_slave_1 added [ 397.933332][T15188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.940522][T15188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.966896][T15188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.981085][T15188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.988841][T15188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.015378][T15188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.122248][T15190] chnl_net:caif_netlink_parms(): no params data found [ 398.312780][T15188] hsr_slave_0: entered promiscuous mode [ 398.319904][T15188] hsr_slave_1: entered promiscuous mode [ 398.326070][T15188] debugfs: 'hsr0' already exists in 'hsr' [ 398.332405][T15188] Cannot create hsr debugfs directory [ 398.378435][ T5838] Bluetooth: hci15: command tx timeout [ 398.458479][ T5838] Bluetooth: hci16: command tx timeout [ 398.489299][T15190] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.496473][T15190] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.507556][T15190] bridge_slave_0: entered allmulticast mode [ 398.515956][T15190] bridge_slave_0: entered promiscuous mode [ 398.548073][ T5838] Bluetooth: hci17: command tx timeout [ 398.557407][T15190] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.564827][T15190] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.572256][T15190] bridge_slave_1: entered allmulticast mode [ 398.579742][T15190] bridge_slave_1: entered promiscuous mode [ 398.600325][T15192] chnl_net:caif_netlink_parms(): no params data found [ 398.618219][ T5838] Bluetooth: hci18: command tx timeout [ 398.660863][T15190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.679434][T15193] chnl_net:caif_netlink_parms(): no params data found [ 398.705314][T15190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.714564][ T5838] Bluetooth: hci19: command tx timeout [ 398.816467][T15190] team0: Port device team_slave_0 added [ 398.849305][T15190] team0: Port device team_slave_1 added [ 398.933461][T15192] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.941054][T15192] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.949083][T15192] bridge_slave_0: entered allmulticast mode [ 398.956154][T15192] bridge_slave_0: entered promiscuous mode [ 398.986147][T15190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.993617][T15190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.020081][T15190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.038749][T15190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.045698][T15190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.073081][T15190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.084677][T15192] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.092257][T15192] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.106101][T15192] bridge_slave_1: entered allmulticast mode [ 399.114705][T15192] bridge_slave_1: entered promiscuous mode [ 399.122007][T15193] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.129369][T15193] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.136609][T15193] bridge_slave_0: entered allmulticast mode [ 399.144071][T15193] bridge_slave_0: entered promiscuous mode [ 399.200699][T15193] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.208873][T15193] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.216450][T15193] bridge_slave_1: entered allmulticast mode [ 399.225376][T15193] bridge_slave_1: entered promiscuous mode [ 399.275950][T15192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.294824][T15196] chnl_net:caif_netlink_parms(): no params data found [ 399.317810][T15193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.331981][T15193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.344824][T15192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.425569][T15190] hsr_slave_0: entered promiscuous mode [ 399.432616][T15190] hsr_slave_1: entered promiscuous mode [ 399.439570][T15190] debugfs: 'hsr0' already exists in 'hsr' [ 399.445312][T15190] Cannot create hsr debugfs directory [ 399.462511][T15192] team0: Port device team_slave_0 added [ 399.487715][T15193] team0: Port device team_slave_0 added [ 399.496088][T15193] team0: Port device team_slave_1 added [ 399.505739][T15192] team0: Port device team_slave_1 added [ 399.645845][T15196] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.653645][T15196] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.661812][T15196] bridge_slave_0: entered allmulticast mode [ 399.670128][T15196] bridge_slave_0: entered promiscuous mode [ 399.678780][T15193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.685724][T15193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.712287][T15193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.724681][T15192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.732898][T15192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.759967][T15192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.785191][T15196] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.792910][T15196] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.801007][T15196] bridge_slave_1: entered allmulticast mode [ 399.808296][T15196] bridge_slave_1: entered promiscuous mode [ 399.815676][T15193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.823424][T15193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.850090][T15193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.867074][T15192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.874357][T15192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.901051][T15192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.953129][T15196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.989242][T15196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.082346][T15196] team0: Port device team_slave_0 added [ 400.115109][T15193] hsr_slave_0: entered promiscuous mode [ 400.121737][T15193] hsr_slave_1: entered promiscuous mode [ 400.128900][T15193] debugfs: 'hsr0' already exists in 'hsr' [ 400.134644][T15193] Cannot create hsr debugfs directory [ 400.160825][T15196] team0: Port device team_slave_1 added [ 400.177218][T15192] hsr_slave_0: entered promiscuous mode [ 400.184441][T15192] hsr_slave_1: entered promiscuous mode [ 400.191523][T15192] debugfs: 'hsr0' already exists in 'hsr' [ 400.197248][T15192] Cannot create hsr debugfs directory [ 400.272289][T15196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.279824][T15196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.306516][T15196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.341758][T15196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.349137][T15196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.376011][T15196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.458387][T15223] Bluetooth: hci15: command tx timeout [ 400.524563][T15196] hsr_slave_0: entered promiscuous mode [ 400.531564][T15196] hsr_slave_1: entered promiscuous mode [ 400.537718][T15196] debugfs: 'hsr0' already exists in 'hsr' [ 400.538791][T15223] Bluetooth: hci16: command tx timeout [ 400.548586][T15196] Cannot create hsr debugfs directory [ 400.620306][T15223] Bluetooth: hci17: command tx timeout [ 400.698972][T15223] Bluetooth: hci18: command tx timeout [ 400.778629][T15223] Bluetooth: hci19: command tx timeout [ 401.178299][T15223] Bluetooth: hci9: command 0x0406 tx timeout [ 401.185771][T15223] Bluetooth: hci5: command 0x0406 tx timeout [ 401.192306][T15223] Bluetooth: hci8: command 0x0406 tx timeout [ 401.194730][ T5837] Bluetooth: hci7: command 0x0406 tx timeout [ 401.199198][T15223] Bluetooth: hci6: command 0x0406 tx timeout [ 402.538390][ T5838] Bluetooth: hci15: command tx timeout [ 402.618205][ T5838] Bluetooth: hci16: command tx timeout [ 402.698736][ T5838] Bluetooth: hci17: command tx timeout [ 402.778309][ T5838] Bluetooth: hci18: command tx timeout [ 402.858852][ T5838] Bluetooth: hci19: command tx timeout [ 404.618653][ T5838] Bluetooth: hci15: command tx timeout [ 404.698099][ T5838] Bluetooth: hci16: command tx timeout [ 404.779097][ T5838] Bluetooth: hci17: command tx timeout [ 404.858420][ T5838] Bluetooth: hci18: command tx timeout [ 404.938218][ T5838] Bluetooth: hci19: command tx timeout [ 411.898475][ T30] INFO: task dhcpcd:5486 blocked for more than 143 seconds. [ 411.905807][ T30] Not tainted syzkaller #0 [ 411.912105][ T5334] block nbd4: Possible stuck request ffff8880266d0000: control (read@0,1024B). Runtime 330 seconds [ 411.913941][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 411.923089][ T5334] block nbd4: Possible stuck request ffff8880266d0200: control (read@1024,1024B). Runtime 330 seconds SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 411.923120][ T5334] block nbd4: Possible stuck request ffff8880266d0400: control (read@2048,1024B). Runtime 330 seconds [ 411.923145][ T5334] block nbd4: Possible stuck request ffff8880266d0600: control (read@3072,1024B). Runtime 330 seconds [ 411.967011][ T30] task:dhcpcd state:D stack:25408 pid:5486 tgid:5486 ppid:1 task_flags:0x400140 flags:0x00080000 [ 412.014862][ T30] Call Trace: [ 412.031576][ T30] [ 412.034560][ T30] __schedule+0x15dd/0x52d0 [ 412.040241][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 412.045215][ T30] ? __pfx___schedule+0x10/0x10 [ 412.050671][ T30] ? schedule+0x90/0x360 [ 412.054949][ T30] schedule+0x164/0x360 [ 412.060532][ T30] schedule_preempt_disabled+0x13/0x30 [ 412.066018][ T30] __mutex_lock+0x7fe/0x1300 [ 412.071223][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 412.076420][ T30] ? __mutex_lock+0x5ac/0x1300 [ 412.081733][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 412.086495][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 412.091991][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 412.096923][ T30] ? radix_tree_lookup+0x240/0x290 [ 412.102685][ T30] genl_rcv_msg+0x10b/0x7a0 [ 412.107186][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 412.112694][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 412.117638][ T30] netlink_rcv_skb+0x232/0x4b0 [ 412.123009][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 412.128632][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 412.133957][ T30] ? down_read+0x272/0x2e0 [ 412.139102][ T30] ? genl_rcv+0xd/0x40 [ 412.143181][ T30] genl_rcv+0x28/0x40 [ 412.147144][ T30] netlink_unicast+0x80f/0x9b0 [ 412.152443][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 412.157725][ T30] ? netlink_sendmsg+0x650/0xb40 [ 412.163230][ T30] ? skb_put+0x11b/0x210 [ 412.167562][ T30] netlink_sendmsg+0x813/0xb40 [ 412.172846][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.178500][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 412.183506][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 412.188871][ T30] ____sys_sendmsg+0x972/0x9f0 [ 412.193769][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 412.199216][ T30] ? import_iovec+0x73/0xa0 [ 412.203810][ T30] ___sys_sendmsg+0x2a5/0x360 [ 412.208992][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 412.214190][ T30] ? __rtnl_unlock+0xc8/0xf0 [ 412.219719][ T30] ? __seccomp_filter+0x3e9/0x1ef0 [ 412.224839][ T30] ? __pfx___seccomp_filter+0x10/0x10 [ 412.230850][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 412.235806][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 412.241754][ T30] ? __secure_computing+0xe1/0x2a0 [ 412.246863][ T30] do_syscall_64+0x14d/0xf80 [ 412.252021][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.258782][ T30] ? clear_bhb_loop+0x40/0x90 [ 412.263506][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.269933][ T30] RIP: 0033:0x7f7965013407 [ 412.274376][ T30] RSP: 002b:00007ffebeecf8a0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 412.283357][ T30] RAX: ffffffffffffffda RBX: 00007f7964f89780 RCX: 00007f7965013407 [ 412.291880][ T30] RDX: 0000000000000000 RSI: 00007ffebeecf920 RDI: 000000000000000e [ 412.300628][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 412.309171][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 00005568f3004e10 [ 412.317156][ T30] R13: 000000000000000e R14: 00007ffebeee3de0 R15: 00005568f8b7eca0 [ 412.325769][ T30] [ 412.329239][ T30] INFO: task udevd:5828 blocked for more than 143 seconds. [ 412.336444][ T30] Not tainted syzkaller #0 [ 412.341962][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 412.351062][ T30] task:udevd state:D stack:22200 pid:5828 tgid:5828 ppid:5191 task_flags:0x400140 flags:0x00080002 [ 412.363516][ T30] Call Trace: [ 412.366792][ T30] [ 412.370173][ T30] __schedule+0x15dd/0x52d0 [ 412.374684][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 412.383480][ T30] ? __pfx___schedule+0x10/0x10 [ 412.388950][ T30] ? schedule+0x90/0x360 [ 412.393220][ T30] schedule+0x164/0x360 [ 412.397389][ T30] io_schedule+0x7f/0xd0 [ 412.402358][ T30] folio_wait_bit_common+0x6d8/0xbc0 [ 412.407652][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 412.413919][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 412.419929][ T30] ? __filemap_get_folio_mpol+0x7a9/0xb00 [ 412.425645][ T30] do_read_cache_folio+0x1ad/0x590 [ 412.431289][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 412.436824][ T30] read_part_sector+0xb6/0x2b0 [ 412.442203][ T30] adfspart_check_POWERTEC+0x92/0xef0 [ 412.447575][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 412.453591][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 412.460089][ T30] bdev_disk_changed+0x7ba/0x1550 [ 412.465117][ T30] ? bdev_open+0xe0/0xd30 [ 412.469610][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 412.475079][ T30] blkdev_get_whole+0x380/0x510 [ 412.480129][ T30] bdev_open+0x31e/0xd30 [ 412.484410][ T30] blkdev_open+0x470/0x610 [ 412.488910][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 412.493858][ T30] do_dentry_open+0x785/0x14e0 [ 412.499084][ T30] vfs_open+0x3b/0x340 [ 412.503152][ T30] ? path_openat+0x2df0/0x3860 [ 412.507897][ T30] path_openat+0x2e08/0x3860 [ 412.513273][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 412.519056][ T30] ? stack_depot_save_flags+0x33/0x810 [ 412.524584][ T30] ? __pfx_path_openat+0x10/0x10 [ 412.530010][ T30] ? __x64_sys_openat+0x138/0x170 [ 412.535032][ T30] ? do_syscall_64+0x14d/0xf80 [ 412.540803][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.546889][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 412.552255][ T30] do_file_open+0x23e/0x4a0 [ 412.556758][ T30] ? __pfx_do_file_open+0x10/0x10 [ 412.562318][ T30] ? _raw_spin_unlock+0x28/0x50 [ 412.567234][ T30] ? alloc_fd+0x64b/0x6c0 [ 412.572051][ T30] do_sys_openat2+0x113/0x200 [ 412.576727][ T30] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 412.582706][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 412.587911][ T30] ? rcu_is_watching+0x15/0xb0 [ 412.593261][ T30] __x64_sys_openat+0x138/0x170 [ 412.598615][ T30] do_syscall_64+0x14d/0xf80 [ 412.603229][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.609765][ T30] ? clear_bhb_loop+0x40/0x90 [ 412.614434][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.620976][ T30] RIP: 0033:0x7f1c344a7407 [ 412.625384][ T30] RSP: 002b:00007fff416613c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 412.634270][ T30] RAX: ffffffffffffffda RBX: 00007f1c34bb0880 RCX: 00007f1c344a7407 [ 412.642876][ T30] RDX: 00000000000a0800 RSI: 0000559f6446fa20 RDI: ffffffffffffff9c [ 412.651308][ T30] RBP: 0000559f6445c910 R08: 0000000000000000 R09: 0000000000000000 [ 412.659761][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 0000559f64479f10 [ 412.667728][ T30] R13: 0000559f6446a190 R14: 0000000000000000 R15: 0000559f64479f10 [ 412.676174][ T30] [ 412.679730][ T30] INFO: task syz.4.2477:15043 blocked for more than 144 seconds. [ 412.687438][ T30] Not tainted syzkaller #0 [ 412.693018][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 412.702096][ T30] task:syz.4.2477 state:D stack:26240 pid:15043 tgid:15042 ppid:5830 task_flags:0x480140 flags:0x00080002 [ 412.714449][ T30] Call Trace: [ 412.717720][ T30] [ 412.721172][ T30] __schedule+0x15dd/0x52d0 [ 412.725677][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 412.731179][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 412.736198][ T30] ? __pfx___schedule+0x10/0x10 [ 412.741576][ T30] ? schedule+0x90/0x360 [ 412.745818][ T30] schedule+0x164/0x360 [ 412.750444][ T30] blk_mq_freeze_queue_wait+0x101/0x180 [ 412.756074][ T30] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 412.762448][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 412.768599][ T30] queue_limits_commit_update_frozen+0x55/0xd0 [ 412.774861][ T30] nbd_set_size+0x454/0x680 [ 412.779832][ T30] ? __pfx_nbd_set_size+0x10/0x10 [ 412.784863][ T30] ? nla_memcpy+0x5b/0xc0 [ 412.789896][ T30] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 412.795266][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 412.801460][ T30] ? rcu_is_watching+0x15/0xb0 [ 412.806221][ T30] ? trace_kmalloc+0x2a/0x110 [ 412.811373][ T30] ? __nla_parse+0x40/0x60 [ 412.815791][ T30] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 412.822658][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 412.828798][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 412.834872][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 412.840421][ T30] genl_rcv_msg+0x61c/0x7a0 [ 412.844931][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 412.850433][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 412.856147][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 412.861759][ T30] netlink_rcv_skb+0x232/0x4b0 [ 412.866521][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 412.872053][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 412.877340][ T30] ? down_read+0x272/0x2e0 [ 412.882287][ T30] ? genl_rcv+0xd/0x40 [ 412.886353][ T30] genl_rcv+0x28/0x40 [ 412.890911][ T30] netlink_unicast+0x80f/0x9b0 [ 412.895711][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 412.901548][ T30] ? netlink_sendmsg+0x650/0xb40 [ 412.906491][ T30] ? skb_put+0x11b/0x210 [ 412.911183][ T30] netlink_sendmsg+0x813/0xb40 [ 412.915947][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.921773][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 412.926709][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 412.932491][ T30] ____sys_sendmsg+0x972/0x9f0 [ 412.937260][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 412.943088][ T30] ? import_iovec+0x73/0xa0 [ 412.947594][ T30] ___sys_sendmsg+0x2a5/0x360 [ 412.952885][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 412.958771][ T30] ? futex_wake+0x4ac/0x580 [ 412.963329][ T30] ? __fget_files+0x2a/0x420 [ 412.967908][ T30] ? __fget_files+0x3a0/0x420 [ 412.973085][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 412.978523][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 412.983974][ T30] ? rcu_is_watching+0x15/0xb0 [ 412.989206][ T30] do_syscall_64+0x14d/0xf80 [ 412.993812][ T30] ? trace_irq_disable+0x3b/0x150 [ 412.999361][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.005427][ T30] ? clear_bhb_loop+0x40/0x90 [ 413.010690][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.016598][ T30] RIP: 0033:0x7fba4c79c799 [ 413.023845][ T30] RSP: 002b:00007fba4d5fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.032681][ T30] RAX: ffffffffffffffda RBX: 00007fba4ca15fa0 RCX: 00007fba4c79c799 [ 413.041127][ T30] RDX: 0000000000040000 RSI: 0000200000000300 RDI: 0000000000000005 [ 413.049229][ T30] RBP: 00007fba4c832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 413.057204][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.065465][ T30] R13: 00007fba4ca16038 R14: 00007fba4ca15fa0 R15: 00007ffe61cddfd8 [ 413.073524][ T30] [ 413.076556][ T30] INFO: task syz.3.2480:15057 blocked for more than 144 seconds. [ 413.087341][ T30] Not tainted syzkaller #0 [ 413.092760][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 413.101942][ T30] task:syz.3.2480 state:D stack:24960 pid:15057 tgid:15056 ppid:5818 task_flags:0x400140 flags:0x00080002 [ 413.114314][ T30] Call Trace: [ 413.117595][ T30] [ 413.121056][ T30] __schedule+0x15dd/0x52d0 [ 413.125575][ T30] ? __pfx___schedule+0x10/0x10 [ 413.130896][ T30] ? schedule+0x90/0x360 [ 413.135138][ T30] schedule+0x164/0x360 [ 413.139955][ T30] schedule_preempt_disabled+0x13/0x30 [ 413.145446][ T30] __mutex_lock+0x7fe/0x1300 [ 413.150538][ T30] ? __mutex_lock+0x5ac/0x1300 [ 413.155295][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 413.160525][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 413.165548][ T30] ? radix_tree_lookup+0x240/0x290 [ 413.171223][ T30] genl_rcv_msg+0x10b/0x7a0 [ 413.175722][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 413.181263][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 413.186201][ T30] netlink_rcv_skb+0x232/0x4b0 [ 413.191502][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 413.196531][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 413.202301][ T30] ? down_read+0x272/0x2e0 [ 413.206726][ T30] ? genl_rcv+0xd/0x40 [ 413.211283][ T30] genl_rcv+0x28/0x40 [ 413.215256][ T30] netlink_unicast+0x80f/0x9b0 [ 413.220557][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 413.225832][ T30] ? netlink_sendmsg+0x650/0xb40 [ 413.231220][ T30] ? skb_put+0x11b/0x210 [ 413.235458][ T30] netlink_sendmsg+0x813/0xb40 [ 413.240734][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.246015][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 413.251419][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 413.256697][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.262590][ T30] __sys_sendto+0x672/0x710 [ 413.267178][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 413.272798][ T30] ? fd_install+0x94/0x3d0 [ 413.277236][ T30] ? fd_install+0x306/0x3d0 [ 413.282425][ T30] __x64_sys_sendto+0xde/0x100 [ 413.287224][ T30] do_syscall_64+0x14d/0xf80 [ 413.292322][ T30] ? trace_irq_disable+0x3b/0x150 [ 413.297348][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.303953][ T30] ? clear_bhb_loop+0x40/0x90 [ 413.309088][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.314976][ T30] RIP: 0033:0x7f9fb695cfce [ 413.319915][ T30] RSP: 002b:00007f9fb7861e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 413.328918][ T30] RAX: ffffffffffffffda RBX: 00007f9fb78636c0 RCX: 00007f9fb695cfce [ 413.336899][ T30] RDX: 0000000000000024 RSI: 00007f9fb7862000 RDI: 0000000000000007 [ 413.345204][ T30] RBP: 0000000000000000 R08: 00007f9fb7861f04 R09: 000000000000000c [ 413.353280][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 413.361373][ T30] R13: 00007f9fb7861f58 R14: 00007f9fb7862000 R15: 0000000000000000 [ 413.369821][ T30] [ 413.372846][ T30] INFO: task syz.2.2482:15078 blocked for more than 144 seconds. [ 413.381079][ T30] Not tainted syzkaller #0 [ 413.386007][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 413.395239][ T30] task:syz.2.2482 state:D stack:26472 pid:15078 tgid:15066 ppid:5824 task_flags:0x400140 flags:0x00080002 [ 413.407801][ T30] Call Trace: [ 413.411632][ T30] [ 413.414574][ T30] __schedule+0x15dd/0x52d0 [ 413.422251][ T30] ? __pfx___schedule+0x10/0x10 [ 413.427128][ T30] ? schedule+0x90/0x360 [ 413.431861][ T30] schedule+0x164/0x360 [ 413.436024][ T30] schedule_preempt_disabled+0x13/0x30 [ 413.442076][ T30] __mutex_lock+0x7fe/0x1300 [ 413.446666][ T30] ? __mutex_lock+0x5ac/0x1300 [ 413.451896][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 413.456566][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 413.462139][ T30] ? radix_tree_lookup+0x240/0x290 [ 413.467248][ T30] genl_rcv_msg+0x10b/0x7a0 [ 413.472288][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 413.477314][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 413.482793][ T30] netlink_rcv_skb+0x232/0x4b0 [ 413.487556][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 413.493057][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 413.499001][ T30] ? down_read+0x272/0x2e0 [ 413.503413][ T30] ? genl_rcv+0xd/0x40 [ 413.507470][ T30] genl_rcv+0x28/0x40 [ 413.512001][ T30] netlink_unicast+0x80f/0x9b0 [ 413.516768][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 413.522733][ T30] ? netlink_sendmsg+0x650/0xb40 [ 413.527672][ T30] ? skb_put+0x11b/0x210 [ 413.532418][ T30] netlink_sendmsg+0x813/0xb40 [ 413.537190][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.542995][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 413.548503][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 413.553804][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.559583][ T30] __sys_sendto+0x672/0x710 [ 413.564083][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 413.569592][ T30] ? exc_page_fault+0x6a/0xc0 [ 413.574271][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 413.580150][ T30] __x64_sys_sendto+0xde/0x100 [ 413.584915][ T30] do_syscall_64+0x14d/0xf80 [ 413.590117][ T30] ? trace_irq_disable+0x3b/0x150 [ 413.595156][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.601757][ T30] ? clear_bhb_loop+0x40/0x90 [ 413.606438][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.612894][ T30] RIP: 0033:0x7f3dd0d5cfce [ 413.617303][ T30] RSP: 002b:00007f3dd1c2fe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 413.626271][ T30] RAX: ffffffffffffffda RBX: 00007f3dd1c316c0 RCX: 00007f3dd0d5cfce [ 413.634407][ T30] RDX: 0000000000000020 RSI: 00007f3dd1c30000 RDI: 000000000000000b [ 413.642587][ T30] RBP: 0000000000000000 R08: 00007f3dd1c2ff04 R09: 000000000000000c [ 413.650634][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 413.659179][ T30] R13: 00007f3dd1c2ff58 R14: 00007f3dd1c30000 R15: 0000000000000000 [ 413.667155][ T30] [ 413.670754][ T30] INFO: task syz.1.2483:15075 blocked for more than 145 seconds. [ 413.678826][ T30] Not tainted syzkaller #0 [ 413.683744][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 413.692867][ T30] task:syz.1.2483 state:D stack:28776 pid:15075 tgid:15074 ppid:5819 task_flags:0x400140 flags:0x00080002 [ 413.705266][ T30] Call Trace: [ 413.708941][ T30] [ 413.711864][ T30] __schedule+0x15dd/0x52d0 [ 413.716360][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 413.721964][ T30] ? __pfx___schedule+0x10/0x10 [ 413.726819][ T30] ? schedule+0x90/0x360 [ 413.731531][ T30] schedule+0x164/0x360 [ 413.735683][ T30] schedule_preempt_disabled+0x13/0x30 [ 413.741965][ T30] __mutex_lock+0x7fe/0x1300 [ 413.746567][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 413.752346][ T30] ? __mutex_lock+0x5ac/0x1300 [ 413.757110][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 413.762322][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 413.767345][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 413.772737][ T30] ? radix_tree_lookup+0x240/0x290 [ 413.777845][ T30] genl_rcv_msg+0x10b/0x7a0 [ 413.783018][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 413.788612][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 413.793588][ T30] netlink_rcv_skb+0x232/0x4b0 [ 413.798930][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 413.803946][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 413.809724][ T30] ? down_read+0x272/0x2e0 [ 413.814220][ T30] ? genl_rcv+0xd/0x40 [ 413.819183][ T30] genl_rcv+0x28/0x40 [ 413.823168][ T30] netlink_unicast+0x80f/0x9b0 [ 413.828670][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 413.833969][ T30] ? netlink_sendmsg+0x650/0xb40 [ 413.839379][ T30] ? skb_put+0x11b/0x210 [ 413.843629][ T30] netlink_sendmsg+0x813/0xb40 [ 413.848985][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.854283][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 413.859714][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 413.864993][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.870786][ T30] __sys_sendto+0x672/0x710 [ 413.875288][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 413.880842][ T30] ? exc_page_fault+0x6a/0xc0 [ 413.885520][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 413.891247][ T30] __x64_sys_sendto+0xde/0x100 [ 413.896013][ T30] do_syscall_64+0x14d/0xf80 [ 413.901249][ T30] ? trace_irq_disable+0x3b/0x150 [ 413.906270][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.912949][ T30] ? clear_bhb_loop+0x40/0x90 [ 413.917648][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.923805][ T30] RIP: 0033:0x7f93a735cfce [ 413.928301][ T30] RSP: 002b:00007f93a8245e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 413.936805][ T30] RAX: ffffffffffffffda RBX: 00007f93a82476c0 RCX: 00007f93a735cfce [ 413.945062][ T30] RDX: 000000000000001c RSI: 00007f93a8246000 RDI: 0000000000000059 [ 413.953571][ T30] RBP: 0000000000000000 R08: 00007f93a8245f04 R09: 000000000000000c [ 413.962023][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000059 [ 413.970461][ T30] R13: 00007f93a8245f58 R14: 00007f93a8246000 R15: 0000000000000000 [ 413.978867][ T30] [ 413.981889][ T30] INFO: task syz.0.2484:15088 blocked for more than 145 seconds. [ 413.990153][ T30] Not tainted syzkaller #0 [ 413.995077][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 414.004198][ T30] task:syz.0.2484 state:D stack:24896 pid:15088 tgid:15087 ppid:5817 task_flags:0x400140 flags:0x00080002 [ 414.016616][ T30] Call Trace: [ 414.020297][ T30] [ 414.023222][ T30] __schedule+0x15dd/0x52d0 [ 414.027728][ T30] ? __pfx___schedule+0x10/0x10 [ 414.033192][ T30] ? schedule+0x90/0x360 [ 414.037438][ T30] schedule+0x164/0x360 [ 414.042163][ T30] schedule_preempt_disabled+0x13/0x30 [ 414.047636][ T30] __mutex_lock+0x7fe/0x1300 [ 414.052836][ T30] ? __mutex_lock+0x5ac/0x1300 [ 414.057621][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 414.064076][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 414.069579][ T30] ? radix_tree_lookup+0x240/0x290 [ 414.074710][ T30] genl_rcv_msg+0x10b/0x7a0 [ 414.079712][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 414.084729][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 414.090293][ T30] netlink_rcv_skb+0x232/0x4b0 [ 414.095058][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 414.100546][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 414.105837][ T30] ? down_read+0x272/0x2e0 [ 414.110774][ T30] ? genl_rcv+0xd/0x40 [ 414.114838][ T30] genl_rcv+0x28/0x40 [ 414.119371][ T30] netlink_unicast+0x80f/0x9b0 [ 414.124158][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 414.130009][ T30] ? netlink_sendmsg+0x650/0xb40 [ 414.134950][ T30] ? skb_put+0x11b/0x210 [ 414.139942][ T30] netlink_sendmsg+0x813/0xb40 [ 414.144739][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.150578][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 414.155554][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 414.161551][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.166863][ T30] __sys_sendto+0x672/0x710 [ 414.172008][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 414.177053][ T30] ? exc_page_fault+0x6a/0xc0 [ 414.182234][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 414.187520][ T30] __x64_sys_sendto+0xde/0x100 [ 414.192831][ T30] do_syscall_64+0x14d/0xf80 [ 414.197416][ T30] ? trace_irq_disable+0x3b/0x150 [ 414.202962][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.209301][ T30] ? clear_bhb_loop+0x40/0x90 [ 414.214024][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.220074][ T30] RIP: 0033:0x7f56c6d5cfce [ 414.224497][ T30] RSP: 002b:00007f56c4fece88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 414.233066][ T30] RAX: ffffffffffffffda RBX: 00007f56c4fee6c0 RCX: 00007f56c6d5cfce [ 414.241413][ T30] RDX: 0000000000000020 RSI: 00007f56c4fed000 RDI: 0000000000000004 [ 414.249894][ T30] RBP: 0000000000000000 R08: 00007f56c4fecf04 R09: 000000000000000c [ 414.257863][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 414.266354][ T30] R13: 00007f56c4fecf58 R14: 00007f56c4fed000 R15: 0000000000000000 [ 414.274907][ T30] [ 414.278507][ T30] INFO: task syz.0.2484:15089 blocked for more than 145 seconds. [ 414.286275][ T30] Not tainted syzkaller #0 [ 414.291870][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 414.301088][ T30] task:syz.0.2484 state:D stack:27880 pid:15089 tgid:15087 ppid:5817 task_flags:0x400040 flags:0x00080002 [ 414.313532][ T30] Call Trace: [ 414.316812][ T30] [ 414.320206][ T30] __schedule+0x15dd/0x52d0 [ 414.324728][ T30] ? __pfx___schedule+0x10/0x10 [ 414.330146][ T30] ? schedule+0x90/0x360 [ 414.334396][ T30] schedule+0x164/0x360 [ 414.339078][ T30] schedule_preempt_disabled+0x13/0x30 [ 414.344542][ T30] __mutex_lock+0x7fe/0x1300 [ 414.349650][ T30] ? __mutex_lock+0x5ac/0x1300 [ 414.354413][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 414.359581][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 414.364605][ T30] ? radix_tree_lookup+0x240/0x290 [ 414.370335][ T30] genl_rcv_msg+0x10b/0x7a0 [ 414.374836][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 414.380479][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 414.385418][ T30] netlink_rcv_skb+0x232/0x4b0 [ 414.390852][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 414.395868][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 414.401655][ T30] ? down_read+0x272/0x2e0 [ 414.406065][ T30] ? genl_rcv+0xd/0x40 [ 414.410820][ T30] genl_rcv+0x28/0x40 [ 414.414816][ T30] netlink_unicast+0x80f/0x9b0 [ 414.420120][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 414.425421][ T30] ? netlink_sendmsg+0x650/0xb40 [ 414.430838][ T30] ? skb_put+0x11b/0x210 [ 414.435082][ T30] netlink_sendmsg+0x813/0xb40 [ 414.440320][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.445603][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 414.451092][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 414.456376][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.469213][ T30] __sys_sendto+0x672/0x710 [ 414.473774][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 414.479280][ T30] ? fd_install+0x94/0x3d0 [ 414.483703][ T30] ? fd_install+0x306/0x3d0 [ 414.488833][ T30] __x64_sys_sendto+0xde/0x100 [ 414.493632][ T30] do_syscall_64+0x14d/0xf80 [ 414.498360][ T30] ? trace_irq_disable+0x3b/0x150 [ 414.503391][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.509600][ T30] ? clear_bhb_loop+0x40/0x90 [ 414.514286][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.520293][ T30] RIP: 0033:0x7f56c6d5cfce [ 414.524712][ T30] RSP: 002b:00007f56c4fcbe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 414.533753][ T30] RAX: ffffffffffffffda RBX: 00007f56c4fcd6c0 RCX: 00007f56c6d5cfce [ 414.542371][ T30] RDX: 0000000000000020 RSI: 00007f56c4fcc000 RDI: 0000000000000006 [ 414.550721][ T30] RBP: 0000000000000000 R08: 00007f56c4fcbf04 R09: 000000000000000c [ 414.559120][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 414.567086][ T30] R13: 00007f56c4fcbf58 R14: 00007f56c4fcc000 R15: 0000000000000000 [ 414.575591][ T30] [ 414.579028][ T30] INFO: task syz.0.2484:15090 blocked for more than 146 seconds. [ 414.586743][ T30] Not tainted syzkaller #0 [ 414.592253][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 414.601490][ T30] task:syz.0.2484 state:D stack:27840 pid:15090 tgid:15087 ppid:5817 task_flags:0x400140 flags:0x00080002 [ 414.613870][ T30] Call Trace: [ 414.617139][ T30] [ 414.620571][ T30] __schedule+0x15dd/0x52d0 [ 414.625079][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 414.630765][ T30] ? __pfx___schedule+0x10/0x10 [ 414.635639][ T30] ? schedule+0x90/0x360 [ 414.640328][ T30] schedule+0x164/0x360 [ 414.644482][ T30] schedule_preempt_disabled+0x13/0x30 [ 414.650626][ T30] __mutex_lock+0x7fe/0x1300 [ 414.655219][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 414.660893][ T30] ? __mutex_lock+0x5ac/0x1300 [ 414.665651][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 414.670849][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 414.675870][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 414.681367][ T30] ? radix_tree_lookup+0x240/0x290 [ 414.686490][ T30] genl_rcv_msg+0x10b/0x7a0 [ 414.691537][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 414.696575][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 414.702112][ T30] netlink_rcv_skb+0x232/0x4b0 [ 414.706881][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 414.712744][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 414.718460][ T30] ? down_read+0x272/0x2e0 [ 414.722865][ T30] ? genl_rcv+0xd/0x40 [ 414.726917][ T30] genl_rcv+0x28/0x40 [ 414.731493][ T30] netlink_unicast+0x80f/0x9b0 [ 414.736264][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 414.742084][ T30] ? netlink_sendmsg+0x650/0xb40 [ 414.747899][ T30] ? skb_put+0x11b/0x210 [ 414.752820][ T30] netlink_sendmsg+0x813/0xb40 [ 414.757684][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.763490][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 414.769083][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 414.774456][ T30] ____sys_sendmsg+0x972/0x9f0 [ 414.779756][ T30] ? futex_unqueue+0x211/0x240 [ 414.784517][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 414.790064][ T30] ? import_iovec+0x73/0xa0 [ 414.794587][ T30] ___sys_sendmsg+0x2a5/0x360 [ 414.799319][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 414.804521][ T30] ? futex_wait+0x29a/0x380 [ 414.809213][ T30] ? __fget_files+0x2a/0x420 [ 414.813813][ T30] ? __fget_files+0x3a0/0x420 [ 414.819009][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 414.823941][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 414.829932][ T30] ? rcu_is_watching+0x15/0xb0 [ 414.834699][ T30] do_syscall_64+0x14d/0xf80 [ 414.839776][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.845835][ T30] ? clear_bhb_loop+0x40/0x90 [ 414.851061][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.856948][ T30] RIP: 0033:0x7f56c6d9c799 [ 414.862072][ T30] RSP: 002b:00007f56c4fac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.871242][ T30] RAX: ffffffffffffffda RBX: 00007f56c7016180 RCX: 00007f56c6d9c799 [ 414.879533][ T30] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 414.887515][ T30] RBP: 00007f56c6e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 414.896219][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.904824][ T30] R13: 00007f56c7016218 R14: 00007f56c7016180 R15: 00007ffcb8c13bd8 [ 414.913310][ T30] [ 414.916397][ T30] [ 414.916397][ T30] Showing all locks held in the system: [ 414.924627][ T30] 1 lock held by khungtaskd/30: [ 414.930150][ T30] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 414.940540][ T30] 2 locks held by dhcpcd/5486: [ 414.945324][ T30] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 414.954067][ T30] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 414.963527][ T30] 2 locks held by getty/5579: [ 414.968663][ T30] #0: ffff88803235c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 414.979094][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 414.989577][ T30] 1 lock held by udevd/5828: [ 414.994169][ T30] #0: ffff8880265b7358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 415.003884][ T30] 6 locks held by syz.4.2477/15043: [ 415.009570][ T30] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 415.017756][ T30] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 415.027339][ T30] #2: ffff88802661a278 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 415.038574][ T30] #3: ffff8880258186c0 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 415.048611][ T30] #4: ffff888025818060 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 415.061173][ T30] #5: ffff888025818098 (&q->q_usage_counter(queue)#37){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 415.073935][ T30] 2 locks held by syz.3.2480/15057: [ 415.079590][ T30] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 415.087763][ T30] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 415.096869][ T30] 2 locks held by syz.2.2482/15078: [ 415.103334][ T30] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 415.111573][ T30] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 415.120929][ T30] 2 locks held by syz.1.2483/15075: [ 415.126113][ T30] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 415.134792][ T30] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 415.144247][ T30] 2 locks held by syz.0.2484/15088: [ 415.149977][ T30] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 415.158820][ T30] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 415.167829][ T30] 2 locks held by syz.0.2484/15089: [ 415.173435][ T30] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 415.182340][ T30] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 415.191795][ T30] 2 locks held by syz.0.2484/15090: [ 415.196978][ T30] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 415.205725][ T30] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 415.215238][ T30] 2 locks held by syz-executor/15096: [ 415.220998][ T30] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 415.229676][ T30] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 415.239214][ T30] 2 locks held by syz-executor/15099: [ 415.244596][ T30] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 415.253377][ T30] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 415.262847][ T30] 2 locks held by syz-executor/15101: [ 415.268787][ T30] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 415.277002][ T30] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 415.286515][ T30] 2 locks held by syz-executor/15103: [ 415.292359][ T30] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 415.301181][ T30] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 415.310573][ T30] 2 locks held by syz-executor/15106: [ 415.315932][ T30] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 415.324650][ T30] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 415.334063][ T30] 2 locks held by syz-executor/15143: [ 415.339979][ T30] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 415.348778][ T30] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 415.357770][ T30] 2 locks held by syz-executor/15145: [ 415.363627][ T30] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 415.372333][ T30] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 415.381516][ T30] 2 locks held by syz-executor/15147: [ 415.386887][ T30] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 415.395154][ T30] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 415.404285][ T30] 2 locks held by syz-executor/15149: [ 415.410048][ T30] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 415.418938][ T30] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 415.427894][ T30] 2 locks held by syz-executor/15151: [ 415.433766][ T30] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 415.442435][ T30] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 415.451814][ T30] 2 locks held by syz-executor/15188: [ 415.457169][ T30] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 415.465901][ T30] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 415.475433][ T30] 2 locks held by syz-executor/15190: [ 415.481251][ T30] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 415.489833][ T30] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 415.502131][ T30] 2 locks held by syz-executor/15192: [ 415.507494][ T30] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 415.516187][ T30] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 415.525644][ T30] 2 locks held by syz-executor/15193: [ 415.531448][ T30] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 415.540276][ T30] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 415.549693][ T30] 2 locks held by syz-executor/15196: [ 415.555051][ T30] #0: ffffffff8fc3b530 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 415.563778][ T30] #1: ffffffff8fc3b348 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 415.573166][ T30] [ 415.575489][ T30] ============================================= [ 415.575489][ T30] [ 415.585342][ T30] NMI backtrace for cpu 1 [ 415.585359][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 415.585371][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 415.585377][ T30] Call Trace: [ 415.585382][ T30] [ 415.585386][ T30] dump_stack_lvl+0xe8/0x150 [ 415.585404][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 415.585418][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 415.585432][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 415.585445][ T30] sys_info+0x135/0x170 [ 415.585455][ T30] watchdog+0xfd9/0x1030 [ 415.585472][ T30] ? watchdog+0x21a/0x1030 [ 415.585489][ T30] kthread+0x388/0x470 [ 415.585499][ T30] ? __pfx_watchdog+0x10/0x10 [ 415.585512][ T30] ? __pfx_kthread+0x10/0x10 [ 415.585521][ T30] ret_from_fork+0x51e/0xb90 [ 415.585535][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 415.585546][ T30] ? __switch_to+0xc7d/0x1450 [ 415.585559][ T30] ? __pfx_kthread+0x10/0x10 [ 415.585569][ T30] ret_from_fork_asm+0x1a/0x30 [ 415.585589][ T30] [ 415.585593][ T30] Sending NMI from CPU 1 to CPUs 0: [ 415.697500][ C0] NMI backtrace for cpu 0 [ 415.697517][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 415.697533][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 415.697543][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 415.697570][ C0] Code: 0e 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 a0 1b 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 415.697583][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000246 [ 415.697596][ C0] RAX: 0000000000242035 RBX: ffffffff819a88ed RCX: 0000000080000001 [ 415.697607][ C0] RDX: 0000000000000001 RSI: ffffffff8def3498 RDI: ffffffff8c27b280 [ 415.697617][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863395b R09: 1ffff110170c672b [ 415.697628][ C0] R10: dffffc0000000000 R11: ffffed10170c672c R12: ffffffff901196b0 [ 415.697639][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000 [ 415.697649][ C0] FS: 0000000000000000(0000) GS:ffff888125461000(0000) knlGS:0000000000000000 [ 415.697661][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 415.697672][ C0] CR2: 000055e70434aee8 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 415.697686][ C0] Call Trace: [ 415.697692][ C0] [ 415.697698][ C0] default_idle+0x9/0x20 [ 415.697714][ C0] default_idle_call+0x72/0xb0 [ 415.697741][ C0] do_idle+0x1bd/0x500 [ 415.697760][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 415.697783][ C0] ? __pfx_do_idle+0x10/0x10 [ 415.697805][ C0] cpu_startup_entry+0x43/0x60 [ 415.697824][ C0] rest_init+0x2de/0x300 [ 415.697841][ C0] start_kernel+0x385/0x3d0 [ 415.697858][ C0] x86_64_start_reservations+0x24/0x30 [ 415.697878][ C0] x86_64_start_kernel+0x143/0x1c0 [ 415.697897][ C0] common_startup_64+0x13e/0x147 [ 415.697922][ C0] [ 415.698635][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 415.698655][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 415.698675][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 415.698686][ T30] Call Trace: [ 415.698695][ T30] [ 415.698703][ T30] vpanic+0x56c/0xa60 [ 415.698728][ T30] ? __pfx___schedule+0x10/0x10 [ 415.698755][ T30] ? __pfx_vpanic+0x10/0x10 [ 415.698786][ T30] panic+0xc5/0xd0 [ 415.698808][ T30] ? __pfx_panic+0x10/0x10 [ 415.698832][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 415.698856][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 415.698883][ T30] watchdog+0x1023/0x1030 [ 415.698913][ T30] ? watchdog+0x21a/0x1030 [ 415.698945][ T30] kthread+0x388/0x470 [ 415.698963][ T30] ? __pfx_watchdog+0x10/0x10 [ 415.698986][ T30] ? __pfx_kthread+0x10/0x10 [ 415.699005][ T30] ret_from_fork+0x51e/0xb90 [ 415.699029][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 415.699050][ T30] ? __switch_to+0xc7d/0x1450 [ 415.699074][ T30] ? __pfx_kthread+0x10/0x10 [ 415.699092][ T30] ret_from_fork_asm+0x1a/0x30 [ 415.699130][ T30] [ 415.991517][ T30] Kernel Offset: disabled [ 415.995831][ T30] Rebooting in 86400 seconds..