last executing test programs: 5.926126625s ago: executing program 4 (id=1809): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x9, 0xffe0}, {0xfff1, 0x1b39d2fad3a1ee75}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x7}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20040055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, &(0x7f0000000140)=0xffffffffffffff04) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.625523616s ago: executing program 4 (id=1813): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, 0x0, 0x0) read$nci(r0, 0x0, 0x0) 5.353144561s ago: executing program 0 (id=1818): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffff}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x8848, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x2000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0xebfd, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) 4.309986735s ago: executing program 0 (id=1825): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000b80)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000bc0)={0xa, 0x4e23, 0x8000000, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000c00), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@ccm_128={{0x303}, "de03f7d7c75a4714", "8b77262bf61696e7b9b660c11412fcf8", "ca7f9593", "7b73b936b4830fc4"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001140), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff004) 3.699247758s ago: executing program 0 (id=1831): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {}, {0x10, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}, @TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0x2f2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) 3.281475522s ago: executing program 0 (id=1835): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8080, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@newqdisc={0x200, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1d0, 0x2, [@TCA_GRED_PARMS={0x2f, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x100000}}, @TCA_GRED_STAB={0x104}, @TCA_GRED_DPS={0x0, 0x3, {0x2, 0xb}}, @TCA_GRED_MAX_P={0x0, 0x4, 0xd539}]}}]}, 0x200}}, 0x0) socket$unix(0x1, 0x1, 0x0) 3.09406342s ago: executing program 0 (id=1839): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000900)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000940)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000980)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000009c0)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000a00)='hybla', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000a40), 0x4) sendto$inet(r0, &(0x7f0000000a80)="51289c001e00cca9072e1f21dc867f59d038a0f9dc5b491af28acb49ed57cb078a3854ba6868de75dc4dd4d6a6a2d4a93d08d65b9b9d4c1909c16ea574ed6c7f963425e749ef6246edeed157020743116d90c2b00900859863e1c07ab839fb7830ecd04df21f1356b0ad0d9b157d22bcf0", 0x9d0aeebe0bd281d3, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000b00)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 3.093678504s ago: executing program 3 (id=1840): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x40040) write$nci(r0, &(0x7f0000000200)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x5, {0x1, 0x9, "189bcc"}}, 0x8) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="500404"], 0x7) write$nci(r0, &(0x7f0000000280)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000980)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x84}]}, 0x24}, 0x1, 0x0, 0x0, 0x26000844}, 0x0) 2.645411537s ago: executing program 1 (id=1844): r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r0, 0x800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000380)="270502001a0014000600002fb96dbcf706e105", 0x13}], 0x1}, 0x1800) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 2.513301974s ago: executing program 4 (id=1845): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x3000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x1000000, 0x12, r2, 0x80000000) mmap(&(0x7f0000692000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) 2.51033099s ago: executing program 1 (id=1846): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x1ff, 0x4, 0x0, 0x3, 0xfffffffd, 0x8}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x1001, 0x8}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendto$packet(r0, &(0x7f0000000300)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000340)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) 2.453831426s ago: executing program 3 (id=1848): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002080)={0x4c, 0x13, 0x100, 0x70bd29, 0x25dfdbff, {0x1, 0x70, 0x6, 0x7, {0x4e22, 0x4e24, [0x4, 0xffffffff, 0xfff, 0x2], [0x7, 0x121, 0xabaf, 0x80000001], 0x0, [0x2a, 0x3]}, 0x3, 0x8}}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) 2.281854689s ago: executing program 2 (id=1849): r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000005c0), r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000003a00290200000000faf7df2502"], 0x14}}, 0x8000) sendto(r0, 0x0, 0x0, 0x4000000, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x4040010) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x4) 2.275403517s ago: executing program 4 (id=1850): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x52}, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, 0x0, &(0x7f0000000000)) 2.272691616s ago: executing program 3 (id=1851): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r0, r2, 0x25, 0x0, @void}, 0x10) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000900)={'team_slave_0\x00', &(0x7f0000000940)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000a80)={'veth0_to_team\x00', &(0x7f0000000ac0)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) 2.113945604s ago: executing program 0 (id=1852): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0xc0142, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000dc0)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000e00)=[{&(0x7f0000000e40)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f00000000c0)="448b7c0acf8bc0cefe9360fcbe079c0ecdc1bd26e2903a", 0x17}], 0x2) 2.069170929s ago: executing program 4 (id=1853): socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000840)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x40) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$netlink(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="10000000011005"], 0x10}], 0x1}, 0x0) 2.032211536s ago: executing program 2 (id=1854): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000000010"], 0x18}, 0x1, 0x0, 0x0, 0x4048811}, 0x0) 1.982204038s ago: executing program 3 (id=1855): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xb) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1.893386324s ago: executing program 1 (id=1856): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x5) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 1.74862224s ago: executing program 1 (id=1857): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000004c0)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) close(0x4) 965.003629ms ago: executing program 2 (id=1858): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40010) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000a80)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0x88, r3, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x5c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0x21, 0x0, @random="ad2bfdca155c8188d19367e814d8640e9fc82df3bcdafd9a9c628e585b"}, {0xa, 0x0, @default_ap_ssid}, {0x13, 0x0, @random="0090521845997dd38be631b2e7f02c"}, {0x8, 0x0, @random="6e5fba0f"}]}, @NL80211_ATTR_BSSID={0xa}]}, 0x88}}, 0x800) 858.577244ms ago: executing program 3 (id=1859): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket(0x8, 0x4, 0x3) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, &(0x7f00000002c0)) 789.208867ms ago: executing program 4 (id=1860): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x29}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast2}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x90}}, 0x20044080) write(r1, &(0x7f0000000500)="000008004500001c12340000402fe5c8ac141401ac141402", 0x18) 706.151779ms ago: executing program 2 (id=1861): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000c61000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0xdfdddf82bb4cc70c, 0x28011, r1, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x2689e000) 660.569978ms ago: executing program 1 (id=1862): r0 = epoll_create1(0x80000) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000001}) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000140)={0x60000008}) bpf$MAP_CREATE(0x0, 0x0, 0x50) 527.643897ms ago: executing program 2 (id=1863): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 360.37919ms ago: executing program 1 (id=1864): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000001b80)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$kcm(0x1e, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9781e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x10102) 249.975967ms ago: executing program 2 (id=1865): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000480)=0x100000001, 0x4) bind$inet(r0, &(0x7f00000004c0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000540)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000580)='veno', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000005c0), 0x4) sendto$inet(r0, &(0x7f0000000600), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000640)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 0s ago: executing program 3 (id=1866): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8080, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x7, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x6, 0x3}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x170, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.216' (ED25519) to the list of known hosts. [ 82.876416][ T5621] cgroup: Unknown subsys name 'net' [ 83.008686][ T5621] cgroup: Unknown subsys name 'cpuset' [ 83.018616][ T5621] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.688832][ T5621] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.175494][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.176181][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.178222][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.183201][ T5646] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.183751][ T5646] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.187993][ T5646] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.192072][ T5646] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.192892][ T5649] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.194376][ T5649] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.197173][ T5649] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.200340][ T5649] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.201878][ T5646] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.202950][ T5646] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.205298][ T5646] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.206550][ T5646] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.211110][ T5649] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.216570][ T4950] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.223704][ T4950] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.227873][ T4950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.229171][ T4950] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.232259][ T4950] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.236064][ T4950] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.239240][ T4950] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.241832][ T5637] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.242461][ T5637] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.579213][ T5633] rdma_rxe: Failed to create IPv4 UDP tunnel [ 88.597863][ T5632] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 88.601471][ T5631] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 88.603320][ T5634] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 88.604415][ T5643] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.651076][ T5643] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.676954][ T5643] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.141332][ T5643] infiniband rxe0: set active [ 89.141357][ T5643] infiniband rxe0: added rxe_eth0 [ 89.222679][ T5643] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 89.222719][ T5643] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 89.222766][ T5643] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 89.275306][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.325328][ T5639] Bluetooth: hci1: command tx timeout [ 89.325548][ T5639] Bluetooth: hci3: command tx timeout [ 89.325649][ T5639] Bluetooth: hci0: command tx timeout [ 89.325741][ T5639] Bluetooth: hci4: command tx timeout [ 89.371750][ T5643] RDS/IB: rxe0: added [ 89.381159][ T5643] smc: adding ib device rxe0 with port count 1 [ 89.381259][ T5643] smc: ib device rxe0 port 1 has no pnetid [ 89.382072][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.404955][ T5637] Bluetooth: hci2: command tx timeout [ 89.431287][ T5643] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.618535][ T1583] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.700016][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.800363][ T1583] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.907151][ T5643] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.255783][ T5643] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.341833][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.344006][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.344147][ T5631] bridge_slave_0: entered allmulticast mode [ 90.352407][ T5631] bridge_slave_0: entered promiscuous mode [ 90.471117][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.472772][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.472955][ T5631] bridge_slave_1: entered allmulticast mode [ 90.489376][ T5631] bridge_slave_1: entered promiscuous mode [ 90.510188][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.510313][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.510449][ T5632] bridge_slave_0: entered allmulticast mode [ 90.513132][ T5632] bridge_slave_0: entered promiscuous mode [ 90.519396][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.519841][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.520212][ T5632] bridge_slave_1: entered allmulticast mode [ 90.522594][ T5632] bridge_slave_1: entered promiscuous mode [ 90.551619][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.551906][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.552360][ T5633] bridge_slave_0: entered allmulticast mode [ 90.564353][ T5633] bridge_slave_0: entered promiscuous mode [ 90.651021][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.651128][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.651253][ T5633] bridge_slave_1: entered allmulticast mode [ 90.652849][ T5633] bridge_slave_1: entered promiscuous mode [ 90.696072][ T5643] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.701200][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.707869][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.774131][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.799574][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.821841][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.822030][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.822559][ T5634] bridge_slave_0: entered allmulticast mode [ 90.827083][ T5634] bridge_slave_0: entered promiscuous mode [ 90.850385][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.892938][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.893055][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.893466][ T5634] bridge_slave_1: entered allmulticast mode [ 90.899806][ T5634] bridge_slave_1: entered promiscuous mode [ 90.920971][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.947676][ T5633] team0: Port device team_slave_0 added [ 90.951558][ T5631] team0: Port device team_slave_0 added [ 90.994242][ T5632] team0: Port device team_slave_0 added [ 91.002834][ T5633] team0: Port device team_slave_1 added [ 91.010237][ T5631] team0: Port device team_slave_1 added [ 91.035686][ T5632] team0: Port device team_slave_1 added [ 91.093334][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.112493][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.112512][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.112548][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.163637][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.186365][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.186384][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.186410][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.188047][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.188062][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.188085][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.275687][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.275738][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.275809][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.307848][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.307902][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.307973][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.384089][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.384107][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.384134][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.389769][ T5643] rxe_eth0 speed is unknown, defaulting to 1000 [ 91.405319][ T5639] Bluetooth: hci0: command tx timeout [ 91.405415][ T5639] Bluetooth: hci3: command tx timeout [ 91.405477][ T5639] Bluetooth: hci1: command tx timeout [ 91.406308][ T5637] Bluetooth: hci4: command tx timeout [ 91.462698][ T5634] team0: Port device team_slave_0 added [ 91.471870][ T5634] team0: Port device team_slave_1 added [ 91.484596][ T5637] Bluetooth: hci2: command tx timeout [ 91.608583][ T5633] hsr_slave_0: entered promiscuous mode [ 91.609945][ T5633] hsr_slave_1: entered promiscuous mode [ 91.630883][ T5631] hsr_slave_0: entered promiscuous mode [ 91.632127][ T5631] hsr_slave_1: entered promiscuous mode [ 91.632960][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 91.632977][ T5631] Cannot create hsr debugfs directory [ 91.640650][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.640669][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.640696][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.732033][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.732054][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.732083][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.792528][ T5632] hsr_slave_0: entered promiscuous mode [ 91.793396][ T5632] hsr_slave_1: entered promiscuous mode [ 91.794196][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 91.794212][ T5632] Cannot create hsr debugfs directory [ 92.054228][ T5634] hsr_slave_0: entered promiscuous mode [ 92.056142][ T5634] hsr_slave_1: entered promiscuous mode [ 92.058085][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 92.058125][ T5634] Cannot create hsr debugfs directory [ 92.369562][ T24] cfg80211: failed to load regulatory.db [ 92.519088][ T5631] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.534120][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.543028][ T5631] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.554853][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.556381][ T5631] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.563053][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.575407][ T5631] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.600870][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.739192][ T5633] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.752196][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.756741][ T5633] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.769736][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.792385][ T5633] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.803555][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.825243][ T5643] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.825433][ T5643] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.825562][ T5643] bridge_slave_0: entered allmulticast mode [ 92.827100][ T5643] bridge_slave_0: entered promiscuous mode [ 92.860565][ T5633] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.865796][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.881492][ T5643] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.881604][ T5643] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.881762][ T5643] bridge_slave_1: entered allmulticast mode [ 92.883289][ T5643] bridge_slave_1: entered promiscuous mode [ 92.942289][ T5643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.964224][ T5643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.022483][ T5643] team0: Port device team_slave_0 added [ 93.039240][ T5643] team0: Port device team_slave_1 added [ 93.087266][ T5632] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.091715][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.092709][ T5632] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.110594][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.115928][ T5632] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.134171][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.142500][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.142520][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.142547][ T5643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.174156][ T5632] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.201962][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.213626][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.213644][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.213668][ T5643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.339574][ T5643] hsr_slave_0: entered promiscuous mode [ 93.340575][ T5643] hsr_slave_1: entered promiscuous mode [ 93.341140][ T5643] debugfs: 'hsr0' already exists in 'hsr' [ 93.341156][ T5643] Cannot create hsr debugfs directory [ 93.454372][ T5634] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.466048][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.466851][ T5634] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.470140][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.485409][ T53] Bluetooth: hci1: command tx timeout [ 93.485500][ T53] Bluetooth: hci3: command tx timeout [ 93.485565][ T53] Bluetooth: hci0: command tx timeout [ 93.486080][ T5637] Bluetooth: hci4: command tx timeout [ 93.523674][ T5634] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.532610][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.533297][ T5634] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.548158][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.565280][ T5637] Bluetooth: hci2: command tx timeout [ 93.682080][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.792049][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.808138][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.808266][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.812405][ T5643] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.838641][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.853922][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.867247][ T5643] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.871733][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.872748][ T5643] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.882156][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.916635][ T5643] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.920046][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.947387][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.947486][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.984229][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.019013][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.072989][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.073086][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.082832][ T165] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.083495][ T165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.121879][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.163388][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.163482][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.211124][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.211609][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.292005][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.399800][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.463371][ T1406] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.463500][ T1406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.507504][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.507619][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.568366][ T5643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.688284][ T5643] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.751824][ T1406] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.751942][ T1406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.823026][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.823143][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.403965][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.566352][ T5639] Bluetooth: hci0: command tx timeout [ 95.566393][ T5639] Bluetooth: hci3: command tx timeout [ 95.566418][ T5639] Bluetooth: hci1: command tx timeout [ 95.566482][ T5637] Bluetooth: hci4: command tx timeout [ 95.644918][ T5637] Bluetooth: hci2: command tx timeout [ 95.672717][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.722468][ T5631] veth0_vlan: entered promiscuous mode [ 95.789040][ T5631] veth1_vlan: entered promiscuous mode [ 95.941094][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.968221][ T5633] veth0_vlan: entered promiscuous mode [ 96.026374][ T5633] veth1_vlan: entered promiscuous mode [ 96.034057][ T5631] veth0_macvtap: entered promiscuous mode [ 96.089229][ T5631] veth1_macvtap: entered promiscuous mode [ 96.145964][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.202025][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.237918][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.273313][ T5633] veth0_macvtap: entered promiscuous mode [ 96.331878][ T5633] veth1_macvtap: entered promiscuous mode [ 96.492930][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.516115][ T62] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.519696][ T39] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.529871][ T5634] veth0_vlan: entered promiscuous mode [ 96.570778][ T5643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.586119][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.625609][ T153] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.626692][ T62] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.630665][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.630691][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.675291][ T5634] veth1_vlan: entered promiscuous mode [ 96.748786][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.748810][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.757632][ T62] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.757773][ T62] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.757900][ T62] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.758012][ T62] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.900450][ T5632] veth0_vlan: entered promiscuous mode [ 96.972089][ T5632] veth1_vlan: entered promiscuous mode [ 96.997202][ T5631] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.003593][ T5643] veth0_vlan: entered promiscuous mode [ 97.039495][ T5634] veth0_macvtap: entered promiscuous mode [ 97.090465][ T5634] veth1_macvtap: entered promiscuous mode [ 97.103168][ T5643] veth1_vlan: entered promiscuous mode [ 97.119764][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.119789][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.221100][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.221124][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.269852][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.272359][ T5632] veth0_macvtap: entered promiscuous mode [ 97.337016][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.340024][ T5632] veth1_macvtap: entered promiscuous mode [ 97.411942][ T5643] veth0_macvtap: entered promiscuous mode [ 97.452250][ T5643] veth1_macvtap: entered promiscuous mode [ 97.495240][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.496180][ T153] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.521466][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.600800][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.636037][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.674919][ T153] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.674972][ T153] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.675021][ T153] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.675057][ T153] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.675094][ T153] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.675131][ T153] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.679442][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.824566][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.824664][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.824708][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.824746][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.896039][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.896064][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.063792][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.063815][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.272642][ T165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.272666][ T165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.373445][ T165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.373478][ T165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.442608][ T165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.442631][ T165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.616878][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.616901][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.823359][ T5876] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3'. [ 99.473343][ T5911] vcan0: tx address claim with different name [ 99.559601][ T5917] Bluetooth: MGMT ver 1.23 [ 99.635836][ T5919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'. [ 99.641468][ T5919] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18'. [ 99.641917][ T5919] Zero length message leads to an empty skb [ 99.708808][ T153] IPVS: starting estimator thread 0... [ 99.794764][ T5923] IPVS: using max 26 ests per chain, 62400 per kthread [ 100.035650][ T5758] rxe_eth0 speed is unknown, defaulting to 1000 [ 100.173623][ T5942] trusted_key: syz.4.29 sent an empty control message without MSG_MORE. [ 100.212981][ T5945] ip_tables: iptables: counters copy to user failed while replacing table [ 100.611656][ T5960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.33'. [ 100.611695][ T5960] block nbd0: Unsupported socket: should be TCP or UNIX. [ 100.759106][ T5968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.38'. [ 100.762765][ T5968] netlink: 20 bytes leftover after parsing attributes in process `syz.4.38'. [ 101.010916][ T5977] block nbd4: NBD_DISCONNECT [ 102.097646][ T6024] netlink: 'syz.3.59': attribute type 1 has an invalid length. [ 102.127407][ T5778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.209057][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.472806][ T6044] netlink: 24 bytes leftover after parsing attributes in process `syz.0.66'. [ 102.493980][ T6044] netlink: 'syz.0.66': attribute type 9 has an invalid length. [ 102.494013][ T6044] netlink: 23 bytes leftover after parsing attributes in process `syz.0.66'. [ 102.592091][ T6047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.69'. [ 102.879459][ T6061] warning: `syz.0.72' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 103.012003][ T5785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.027369][ T6066] Cannot find set identified by id 0 to match [ 103.085996][ T5778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.086357][ T5785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.246099][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.362855][ T6086] netlink: 68 bytes leftover after parsing attributes in process `syz.0.81'. [ 103.472973][ T6091] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 103.819609][ T6100] ip_tables: iptables: counters copy to user failed while replacing table [ 104.110715][ T6113] __nla_validate_parse: 1 callbacks suppressed [ 104.110737][ T6113] netlink: 20 bytes leftover after parsing attributes in process `syz.4.93'. [ 104.110807][ T6113] netlink: 20 bytes leftover after parsing attributes in process `syz.4.93'. [ 104.289510][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.350678][ T6121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.100'. [ 104.651060][ T6137] netlink: 52 bytes leftover after parsing attributes in process `syz.4.103'. [ 105.092195][ T6162] syz.3.112 uses obsolete (PF_INET,SOCK_PACKET) [ 105.280987][ T6170] sctp: [Deprecated]: syz.0.115 (pid 6170) Use of struct sctp_assoc_value in delayed_ack socket option. [ 105.280987][ T6170] Use struct sctp_sack_info instead [ 105.329505][ T5758] net_ratelimit: 1 callbacks suppressed [ 105.329529][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.513138][ T6180] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 105.513603][ T6180] gretap1: entered promiscuous mode [ 105.513622][ T6180] gretap1: entered allmulticast mode [ 105.832897][ T6193] netlink: 'syz.0.123': attribute type 17 has an invalid length. [ 105.832922][ T6193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.123'. [ 105.832950][ T6193] netlink: 28 bytes leftover after parsing attributes in process `syz.0.123'. [ 105.908858][ T6197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.127'. [ 105.980319][ T6193] gretap0: entered promiscuous mode [ 106.030924][ T6193] gretap0: left promiscuous mode [ 106.125912][ T5785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.307408][ T6214] : entered promiscuous mode [ 106.365409][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.522046][ T6225] netlink: 132 bytes leftover after parsing attributes in process `syz.4.139'. [ 106.632302][ T6229] veth0: entered promiscuous mode [ 106.649362][ T6228] veth0: left promiscuous mode [ 106.808352][ T6241] netlink: 256 bytes leftover after parsing attributes in process `syz.4.146'. [ 106.808382][ T6241] netlink: 256 bytes leftover after parsing attributes in process `syz.4.146'. [ 107.328409][ T6269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.329240][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.406209][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.494197][ T6281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.797089][ T6289] team0 (unregistering): Port device team_slave_0 removed [ 107.823566][ T6289] team0 (unregistering): Port device team_slave_1 removed [ 108.069992][ T6304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.070172][ T6304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.070433][ T6304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.412067][ T30] audit: type=1800 audit(1794319585.301:2): pid=6317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.178" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=206 res=0 errno=-22 [ 109.234189][ T6370] __nla_validate_parse: 4 callbacks suppressed [ 109.234212][ T6370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.197'. [ 109.234239][ T6370] netlink: 'syz.3.197': attribute type 1 has an invalid length. [ 109.234253][ T6370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.197'. [ 109.270403][ T6370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.197'. [ 109.270442][ T6370] netlink: 'syz.3.197': attribute type 1 has an invalid length. [ 109.270457][ T6370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.197'. [ 109.395772][ T6377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.200'. [ 109.422639][ T6377] netlink: 16 bytes leftover after parsing attributes in process `syz.2.200'. [ 109.945921][ T6395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.207'. [ 109.966433][ T6395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.207'. [ 109.985938][ T153] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.985988][ T153] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.986024][ T153] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.986124][ T153] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.094993][ T6399] netlink: 52 bytes leftover after parsing attributes in process `syz.0.209'. [ 110.099938][ T6399] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.100554][ T6399] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.133301][ T6399] netlink: 52 bytes leftover after parsing attributes in process `syz.0.209'. [ 110.367909][ T5366] net_ratelimit: 38 callbacks suppressed [ 110.367927][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.524937][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.931928][ T5778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.932392][ T5778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.405626][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.570561][ T5778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.570808][ T5778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.571119][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.675591][ T6336] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 111.930149][ T6413] netlink: 'syz.4.212': attribute type 15 has an invalid length. [ 111.978212][ T6413] netlink: 'syz.4.212': attribute type 15 has an invalid length. [ 111.984844][ T39] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 112.002660][ T153] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 112.003746][ T153] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 112.003787][ T153] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 112.205909][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.240043][ T6427] syzkaller1: entered promiscuous mode [ 112.240083][ T6427] syzkaller1: entered allmulticast mode [ 112.444859][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.918411][ T6471] netlink: 'syz.2.238': attribute type 1 has an invalid length. [ 112.961968][ T6471] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.041727][ T6471] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 113.479698][ T6504] veth1_to_bond: invalid flags given to default FDB implementation [ 114.023312][ T6527] netlink: 'syz.4.258': attribute type 1 has an invalid length. [ 114.059366][ T6527] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.383711][ T6547] netlink: 28 bytes leftover after parsing attributes in process `syz.2.264'. [ 115.567877][ T5758] net_ratelimit: 8 callbacks suppressed [ 115.567901][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.726638][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.353211][ T6489] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 116.611235][ T6593] tls_set_device_offload_rx: netdev not found [ 116.623461][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.765902][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.892764][ T6604] ip_tables: iptables: counters copy to user failed while replacing table [ 117.004845][ T5785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.004993][ T5785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.110880][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.284'. [ 117.110988][ T6616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.284'. [ 117.111016][ T6616] netlink: 'syz.2.284': attribute type 15 has an invalid length. [ 117.648114][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.806294][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.684741][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.950497][ T6619] netlink: 'syz.1.285': attribute type 21 has an invalid length. [ 119.950525][ T6619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.285'. [ 119.952213][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.284'. [ 119.952235][ T6616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.284'. [ 119.952260][ T6616] netlink: 'syz.2.284': attribute type 15 has an invalid length. [ 120.015967][ T6619] netlink: 'syz.1.285': attribute type 21 has an invalid length. [ 120.015992][ T6619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.285'. [ 120.024926][ T5895] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.024975][ T5895] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.025011][ T5895] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.025046][ T5895] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.025080][ T5895] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 120.025115][ T5895] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 120.025149][ T5895] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 120.053911][ T5895] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 120.276138][ T6628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.288'. [ 120.307327][ T6632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.290'. [ 120.311962][ T6632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.290'. [ 120.661601][ T6648] ref_ctr_offset mismatch. inode: 0x46 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 120.767055][ T5366] net_ratelimit: 7 callbacks suppressed [ 120.767078][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.919840][ T39] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xa [ 120.923827][ T6667] veth0: entered promiscuous mode [ 120.934078][ T6667] veth1_to_bridge: entered promiscuous mode [ 120.935319][ T6666] veth1_to_bridge: left promiscuous mode [ 120.935354][ T6666] veth0: left promiscuous mode [ 120.936201][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.165807][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.166927][ T5778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.167913][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.308695][ T6677] vlan2: entered allmulticast mode [ 121.308883][ T6677] gretap0: entered allmulticast mode [ 121.473133][ T6691] __nla_validate_parse: 1 callbacks suppressed [ 121.473156][ T6691] netlink: 28 bytes leftover after parsing attributes in process `syz.2.310'. [ 121.492567][ T6691] netlink: 28 bytes leftover after parsing attributes in process `syz.2.310'. [ 121.809153][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.809230][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.946121][ T6713] netlink: 28 bytes leftover after parsing attributes in process `syz.1.319'. [ 121.946161][ T6713] netlink: 'syz.1.319': attribute type 7 has an invalid length. [ 121.946175][ T6713] netlink: 'syz.1.319': attribute type 8 has an invalid length. [ 121.946188][ T6713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.319'. [ 121.976188][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.057232][ T6717] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 122.211581][ T6728] vcan0: tx address claim with broadcast sa [ 122.801884][ T6752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.336'. [ 122.854889][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.081954][ T6762] hsr0: entered allmulticast mode [ 123.081972][ T6762] hsr_slave_0: entered allmulticast mode [ 123.081986][ T6762] hsr_slave_1: entered allmulticast mode [ 123.083955][ T6762] hsr0: entered promiscuous mode [ 123.110413][ T6762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.341'. [ 123.110947][ T6762] hsr_slave_0: left promiscuous mode [ 123.111866][ T6762] hsr_slave_1: left promiscuous mode [ 123.129747][ T6762] hsr0 (unregistering): left allmulticast mode [ 123.129816][ T6762] hsr0 (unregistering): left promiscuous mode [ 123.240456][ T6764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.342'. [ 124.877985][ T6707] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 125.075988][ T6789] netlink: 'syz.2.351': attribute type 1 has an invalid length. [ 125.127964][ T6789] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.242147][ T6791] bond2: (slave gretap1): making interface the new active one [ 125.256265][ T6791] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 125.479101][ T6806] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.479246][ T6806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.479604][ T6806] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.479746][ T6806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.483967][ T6806] bridge0: entered promiscuous mode [ 125.485731][ T6806] bridge0: entered allmulticast mode [ 125.566034][ T6807] bond0: entered promiscuous mode [ 125.566062][ T6807] bond_slave_0: entered promiscuous mode [ 125.566286][ T6807] bond_slave_1: entered promiscuous mode [ 125.634133][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880665ff800: rx timeout, send abort [ 125.635576][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880665ff800: 0x2ff01: (3) A timeout occurred and this is the connection abort to close the session. [ 125.884894][ C0] net_ratelimit: 14 callbacks suppressed [ 125.884917][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.915127][ T6822] netlink: 156 bytes leftover after parsing attributes in process `syz.2.362'. [ 125.965253][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.126167][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.288816][ T5778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.293322][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.674970][ T6854] netlink: 'syz.4.371': attribute type 14 has an invalid length. [ 126.674997][ T6854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.371'. [ 126.677633][ T6854] netlink: 'syz.4.371': attribute type 14 has an invalid length. [ 126.677657][ T6854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.371'. [ 126.931503][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.005110][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.164794][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.259647][ T6877] netlink: 'syz.1.378': attribute type 18 has an invalid length. [ 127.259673][ T6877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.378'. [ 127.259909][ T6877] netlink: 'syz.1.378': attribute type 18 has an invalid length. [ 127.259941][ T6877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.378'. [ 127.471699][ T6883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.380'. [ 127.564848][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.044746][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.156284][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803613f800: rx timeout, send abort [ 128.520921][ T6935] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 128.545831][ T6935] bond1: (slave lo): Enslaving as an active interface with an up link [ 128.656436][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803613f800: abort rx timeout. Force session deactivation [ 128.657677][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803613c400: rx timeout, send abort [ 129.157727][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803613c400: abort rx timeout. Force session deactivation [ 129.284335][ T6974] netlink: 'syz.1.407': attribute type 4 has an invalid length. [ 129.719138][ T6997] netlink: 'syz.1.414': attribute type 7 has an invalid length. [ 129.832890][ T7000] netlink: 'syz.2.419': attribute type 1 has an invalid length. [ 129.910761][ T7010] netlink: 24 bytes leftover after parsing attributes in process `syz.0.420'. [ 129.913850][ T7000] 8021q: adding VLAN 0 to HW filter on device bond3 [ 130.339289][ T6986] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 130.339498][ T6986] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 130.459859][ T7027] netlink: 'syz.0.425': attribute type 21 has an invalid length. [ 130.459884][ T7027] netlink: 'syz.0.425': attribute type 22 has an invalid length. [ 130.459898][ T7027] netlink: 'syz.0.425': attribute type 23 has an invalid length. [ 130.459911][ T7027] netlink: 'syz.0.425': attribute type 25 has an invalid length. [ 130.459925][ T7027] netlink: 'syz.0.425': attribute type 26 has an invalid length. [ 130.459939][ T7027] netlink: 16 bytes leftover after parsing attributes in process `syz.0.425'. [ 130.690647][ T7035] bridge1: entered promiscuous mode [ 130.691001][ T7035] bridge1: entered allmulticast mode [ 130.864895][ T7049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.431'. [ 130.869722][ T7049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.431'. [ 130.870848][ T7049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.431'. [ 131.165370][ T5366] net_ratelimit: 13 callbacks suppressed [ 131.165394][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.327856][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.444364][ T7080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.444760][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.548733][ T7085] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.044968][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.204897][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.367754][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.368722][ T5778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.425657][ T7127] __nla_validate_parse: 6 callbacks suppressed [ 132.425681][ T7127] netlink: 27 bytes leftover after parsing attributes in process `syz.4.459'. [ 132.471200][ T7130] bond0: invalid NS target :: specified for addition [ 132.471233][ T7130] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 132.575086][ T7136] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 132.595866][ T7136] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 132.886189][ T7153] netlink: 'syz.1.465': attribute type 11 has an invalid length. [ 132.886226][ T7153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.465'. [ 132.886469][ T7153] netlink: 'syz.1.465': attribute type 11 has an invalid length. [ 132.886485][ T7153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.465'. [ 133.015370][ T5778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.084951][ T7163] netlink: 27 bytes leftover after parsing attributes in process `syz.0.468'. [ 133.288565][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.469'. [ 133.330575][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.330660][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.480834][ T7215] netlink: 'syz.0.489': attribute type 1 has an invalid length. [ 134.532154][ T7215] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.616699][ T7217] bond1: (slave geneve2): making interface the new active one [ 134.620001][ T7217] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 134.945552][ T5637] Bluetooth: hci4: link tx timeout [ 134.945573][ T5637] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 135.000231][ T7239] netlink: 20 bytes leftover after parsing attributes in process `syz.2.500'. [ 135.020160][ T7239] netlink: 20 bytes leftover after parsing attributes in process `syz.2.500'. [ 135.223678][ T7249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.505'. [ 135.359292][ T7254] netlink: 'syz.1.506': attribute type 13 has an invalid length. [ 135.359319][ T7254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.506'. [ 135.359555][ T7254] netlink: 'syz.1.506': attribute type 13 has an invalid length. [ 135.359572][ T7254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.506'. [ 136.365770][ T24] net_ratelimit: 20 callbacks suppressed [ 136.365791][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.393089][ T7273] ip6gre1: entered promiscuous mode [ 136.393114][ T7273] ip6gre1: entered allmulticast mode [ 136.477855][ T7283] pim6reg1: entered promiscuous mode [ 136.477897][ T7283] pim6reg1: entered allmulticast mode [ 136.527337][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.541705][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.569440][ T153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.570548][ T153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.675405][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.758031][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.009359][ T5637] Bluetooth: hci4: command 0x0406 tx timeout [ 137.172316][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.282075][ T7330] bridge: RTM_NEWNEIGH with invalid ether address [ 137.294142][ T7330] bridge: RTM_NEWNEIGH with invalid ether address [ 137.398183][ T7336] tls_set_device_offload: netdev not found [ 137.414350][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.480764][ T7338] syzkaller1: entered promiscuous mode [ 137.480789][ T7338] syzkaller1: entered allmulticast mode [ 137.566465][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.617683][ T7346] __nla_validate_parse: 3 callbacks suppressed [ 137.617708][ T7346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.545'. [ 137.617736][ T7346] netlink: 'syz.3.545': attribute type 30 has an invalid length. [ 137.617751][ T7346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.545'. [ 137.668267][ T7346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.545'. [ 137.668306][ T7346] netlink: 'syz.3.545': attribute type 30 has an invalid length. [ 137.668322][ T7346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.545'. [ 137.876725][ T7356] netlink: 'syz.1.552': attribute type 4 has an invalid length. [ 137.877162][ T7356] netlink: 'syz.1.552': attribute type 4 has an invalid length. [ 138.011588][ T7362] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 138.203344][ T7372] netlink: 'syz.0.558': attribute type 12 has an invalid length. [ 138.203372][ T7372] netlink: 'syz.0.558': attribute type 29 has an invalid length. [ 138.203386][ T7372] netlink: 148 bytes leftover after parsing attributes in process `syz.0.558'. [ 138.203428][ T7372] netlink: 'syz.0.558': attribute type 1 has an invalid length. [ 138.203441][ T7372] netlink: 47 bytes leftover after parsing attributes in process `syz.0.558'. [ 138.378357][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.560'. [ 138.446598][ C0] Illegal XDP return value 16128 on prog (id 56) dev lo, expect packet loss! [ 138.678616][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.569'. [ 138.678657][ T7400] netlink: 'syz.1.569': attribute type 10 has an invalid length. [ 138.678676][ T7400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.569'. [ 138.946212][ T7414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.576'. [ 140.336877][ T7490] syz_tun: entered allmulticast mode [ 140.344857][ T7489] syz_tun: left allmulticast mode [ 140.648205][ T7510] veth0: entered promiscuous mode [ 140.651350][ T7509] veth0: left promiscuous mode [ 140.738729][ T7514] netlink: 'syz.3.608': attribute type 1 has an invalid length. [ 140.772940][ T7514] bond1: entered promiscuous mode [ 140.773382][ T7514] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.814917][ T7514] bond1: (slave bridge3): making interface the new active one [ 140.814946][ T7514] bridge3: entered promiscuous mode [ 140.817195][ T7514] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 141.162304][ T7534] netlink: 'syz.2.617': attribute type 15 has an invalid length. [ 141.325187][ T7378] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 141.462904][ T7542] net_ratelimit: 19 callbacks suppressed [ 141.462930][ T7542] IPVS: lblc: UDP [fe80::aa]:8080 - no destination available [ 141.482235][ T7540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.568270][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.729185][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.270085][ T7578] batman_adv: batadv0: Adding interface: syzkaller0 [ 142.270105][ T7578] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.270137][ T7578] batman_adv: batadv0: Interface activated: syzkaller0 [ 142.533351][ T7587] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 142.606014][ T5778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.613005][ T7593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.713561][ T7577] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 142.770616][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.102407][ T7577] batman_adv: batadv0: Removing interface: syzkaller0 [ 143.220817][ T7611] __nla_validate_parse: 6 callbacks suppressed [ 143.220843][ T7611] netlink: 20 bytes leftover after parsing attributes in process `syz.3.642'. [ 143.252489][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.403593][ T7619] validate_nla: 1 callbacks suppressed [ 143.403622][ T7619] netlink: 'syz.1.644': attribute type 16 has an invalid length. [ 143.403638][ T7619] netlink: 20 bytes leftover after parsing attributes in process `syz.1.644'. [ 143.466559][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.576502][ T7624] syzkaller1: entered promiscuous mode [ 143.576529][ T7624] syzkaller1: entered allmulticast mode [ 143.712739][ T50] IPVS: starting estimator thread 0... [ 143.798982][ T7633] IPVS: using max 30 ests per chain, 72000 per kthread [ 143.914374][ T7643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.657'. [ 143.953500][ T7643] vlan0: entered promiscuous mode [ 143.953524][ T7643] bond0: entered promiscuous mode [ 143.953538][ T7643] bond_slave_0: entered promiscuous mode [ 143.953814][ T7643] bond_slave_1: entered promiscuous mode [ 144.381554][ T7666] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.667'. [ 144.554844][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.673'. [ 144.814663][ T7687] netlink: 28 bytes leftover after parsing attributes in process `syz.0.677'. [ 145.368107][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.688'. [ 145.368136][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.688'. [ 145.916695][ T30] audit: type=1800 audit(1794319622.811:3): pid=7744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.696" name=0A dev="tmpfs" ino=791 res=0 errno=-22 [ 146.115052][ T7751] syzkaller1: entered promiscuous mode [ 146.115079][ T7751] syzkaller1: entered allmulticast mode [ 146.670674][ T7782] pimreg: entered allmulticast mode [ 146.694305][ T7780] pimreg: left allmulticast mode [ 146.795070][ T62] net_ratelimit: 23 callbacks suppressed [ 146.795091][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.925228][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.168752][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.914779][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.965469][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.204947][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.510641][ T7872] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 148.721262][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.849774][ T7877] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 149.005899][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.110389][ T7892] netlink: 'syz.4.747': attribute type 22 has an invalid length. [ 149.110415][ T7892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.747'. [ 149.110656][ T7892] netlink: 'syz.4.747': attribute type 22 has an invalid length. [ 149.110672][ T7892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.747'. [ 149.464126][ T7899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.750'. [ 149.464153][ T7899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.750'. [ 150.301353][ T62] IPVS: starting estimator thread 0... [ 150.360951][ T7944] gre0: Caught tx_queue_len zero misconfig [ 150.361176][ T7944] sch_tbf: burst 0 is lower than device gre0 mtu (1500) ! [ 150.387078][ T7942] IPVS: using max 28 ests per chain, 67200 per kthread [ 150.583021][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.774'. [ 150.733727][ T7962] netlink: 16 bytes leftover after parsing attributes in process `syz.1.781'. [ 151.443687][ T8007] netlink: 28 bytes leftover after parsing attributes in process `syz.3.799'. [ 151.443721][ T8007] netlink: 'syz.3.799': attribute type 7 has an invalid length. [ 151.443731][ T8007] netlink: 'syz.3.799': attribute type 8 has an invalid length. [ 151.443740][ T8007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.799'. [ 151.480407][ T8007] erspan0: entered promiscuous mode [ 151.483330][ T8007] erspan0: left promiscuous mode [ 151.556412][ T8009] raw_sendmsg: syz.0.800 forgot to set AF_INET. Fix it! [ 151.721739][ T8018] vcan0: tx address claim with dlc 0 [ 151.888484][ T5758] net_ratelimit: 31 callbacks suppressed [ 151.888516][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.922676][ T8027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.943605][ T8029] netlink: 16 bytes leftover after parsing attributes in process `syz.0.809'. [ 152.050063][ T153] IPVS: starting estimator thread 0... [ 152.089896][ T8038] netlink: 'syz.3.813': attribute type 5 has an invalid length. [ 152.090005][ T8038] netlink: 'syz.3.813': attribute type 9 has an invalid length. [ 152.090022][ T8038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.813'. [ 152.125341][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.134637][ T8034] IPVS: using max 27 ests per chain, 64800 per kthread [ 152.157425][ T8039] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 152.157993][ T62] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 152.341900][ T8045] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 152.341941][ T8045] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 152.341983][ T8045] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 152.358952][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.377951][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.378065][ T5778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.686748][ T5895] smbdirect: ib_dev[syz2] removed [ 153.166010][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.406547][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.455417][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.089773][ T7980] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 154.204860][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.763044][ T8171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.870'. [ 154.821588][ T8173] syz_tun: entered allmulticast mode [ 154.822606][ T8172] syz_tun: left allmulticast mode [ 154.877746][ T8175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.872'. [ 154.877765][ T8175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.872'. [ 154.878017][ T8175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.872'. [ 154.878034][ T8175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.872'. [ 155.714685][ T8202] netlink: 'syz.1.884': attribute type 4 has an invalid length. [ 155.719638][ T8202] netlink: 'syz.1.884': attribute type 4 has an invalid length. [ 155.861686][ T8208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.887'. [ 155.861713][ T8208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.887'. [ 156.284797][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 157.005366][ C0] net_ratelimit: 15 callbacks suppressed [ 157.005390][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.009655][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.009946][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.300520][ T8142] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 157.325193][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.405520][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.438560][ T8235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.898'. [ 157.438586][ T8235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.898'. [ 157.438613][ T8235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.898'. [ 157.514728][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.525927][ T62] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.526339][ T62] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.526455][ T62] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.565408][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.647932][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.758350][ T8247] netlink: 'syz.0.903': attribute type 26 has an invalid length. [ 157.777208][ T8247] netlink: 'syz.0.903': attribute type 26 has an invalid length. [ 157.874780][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.289095][ T5785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.366225][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.580406][ T8291] sctp: [Deprecated]: syz.0.922 (pid 8291) Use of int in maxseg socket option. [ 158.580406][ T8291] Use struct sctp_assoc_value instead [ 159.152380][ T8316] batman_adv: batadv0: Adding interface: syzkaller0 [ 159.152400][ T8316] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.152431][ T8316] batman_adv: batadv0: Interface activated: syzkaller0 [ 159.875561][ T8361] netlink: 'syz.4.950': attribute type 1 has an invalid length. [ 160.060228][ T8363] bond2: (slave erspan1): making interface the new active one [ 160.062736][ T8363] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 160.265659][ T8375] __nla_validate_parse: 8 callbacks suppressed [ 160.265683][ T8375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.953'. [ 160.296698][ T5895] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 160.689331][ T8391] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 160.780939][ T8393] tipc: Started in network mode [ 160.780979][ T8393] tipc: Node identity ac1414aa, cluster identity 4711 [ 160.781869][ T8393] tipc: New replicast peer: 172.20.20.187 [ 160.789680][ T8393] tipc: Enabled bearer , priority 10 [ 161.109477][ T8409] syzkaller1: entered promiscuous mode [ 161.109501][ T8409] syzkaller1: entered allmulticast mode [ 161.110071][ T8410] netlink: 24 bytes leftover after parsing attributes in process `syz.0.965'. [ 161.653354][ T8437] netlink: 112 bytes leftover after parsing attributes in process `syz.0.971'. [ 161.778647][ T8447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.973'. [ 161.897085][ T5635] tipc: Node number set to 2886997162 [ 161.917694][ T8447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.973'. [ 162.275804][ T5895] net_ratelimit: 26 callbacks suppressed [ 162.275821][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.329832][ T8467] ip_tables: iptables: counters copy to user failed while replacing table [ 162.411091][ T8472] netlink: 'syz.2.983': attribute type 1 has an invalid length. [ 162.524772][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.604698][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.086037][ T5785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.375619][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.565135][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.644718][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.366219][ T5785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.375006][ T8419] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 164.375584][ T8480] netlink: 'syz.0.986': attribute type 1 has an invalid length. [ 164.479467][ T153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.684673][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 164.882523][ T8516] tipc: Failed to remove unknown binding: 66,1,1/0:3704718343/3704718345 [ 164.882559][ T8516] tipc: Failed to remove unknown binding: 66,1,1/0:3704718343/3704718345 [ 166.127760][ T8591] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1034'. [ 166.128026][ T8591] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1034'. [ 167.001941][ T8606] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 167.035113][ T8606] batman_adv: batadv0: Removing interface: syzkaller0 [ 167.148423][ T8611] batman_adv: batadv0: Adding interface: syzkaller0 [ 167.148445][ T8611] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.148486][ T8611] batman_adv: batadv0: Interface activated: syzkaller0 [ 167.152388][ T8610] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 167.218062][ T8610] batman_adv: batadv0: Removing interface: syzkaller0 [ 167.249766][ T8613] netlink: 'syz.2.1043': attribute type 1 has an invalid length. [ 167.406668][ T5778] net_ratelimit: 18 callbacks suppressed [ 167.406691][ T5778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.726060][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.804946][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.805683][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.170950][ T8531] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 168.445006][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.540750][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.765072][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.844695][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.887886][ T8659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.888114][ T8659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.995695][ T8660] netlink: 'syz.4.1061': attribute type 1 has an invalid length. [ 169.279400][ T8678] netlink: 'syz.1.1067': attribute type 15 has an invalid length. [ 169.944648][ T8708] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1078'. [ 170.595191][ T8740] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1091'. [ 171.300022][ T8771] batman_adv: batadv0: Adding interface: syzkaller0 [ 171.300052][ T8771] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.300085][ T8771] batman_adv: batadv0: Interface activated: syzkaller0 [ 171.348537][ T8768] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 171.392047][ T8768] batman_adv: batadv0: Removing interface: syzkaller0 [ 171.984953][ T8806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1113'. [ 171.989051][ T8808] only policy match revision 0 supported [ 171.989064][ T8808] unable to load match [ 172.557797][ T8832] net_ratelimit: 35 callbacks suppressed [ 172.557819][ T8832] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 172.653600][ T8835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1124'. [ 172.926416][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.007107][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.007290][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.208816][ T8853] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 173.328387][ T165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.360749][ T63] tipc: Subscription rejected, illegal request [ 173.478191][ T8855] syzkaller1: entered promiscuous mode [ 173.478218][ T8855] syzkaller1: entered allmulticast mode [ 173.644775][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.644906][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.722562][ T8868] netlink: 'syz.4.1138': attribute type 1 has an invalid length. [ 173.821475][ T8868] bond3: (slave geneve2): making interface the new active one [ 173.823383][ T8868] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 173.854960][ T153] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 173.855296][ T153] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 173.855474][ T153] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 173.855602][ T153] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 173.966901][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.050926][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.365969][ T8907] sit0: entered promiscuous mode [ 174.372067][ T8907] netlink: 'syz.2.1150': attribute type 1 has an invalid length. [ 174.372090][ T8907] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1150'. [ 175.086197][ T8930] policy can only be matched on NF_INET_PRE_ROUTING [ 175.086212][ T8930] unable to load match [ 175.985112][ T8963] netlink: 'syz.2.1164': attribute type 1 has an invalid length. [ 176.055126][ T8963] 8021q: adding VLAN 0 to HW filter on device bond5 [ 176.057059][ T8963] bond4: (slave bond5): making interface the new active one [ 176.057453][ T8963] bond4: (slave bond5): Enslaving as an active interface with an up link [ 177.099400][ T8889] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 177.273320][ T8980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1169'. [ 177.814689][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1178'. [ 177.876119][ T9000] bond2: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 177.880719][ T9000] bond2 (unregistering): Released all slaves [ 178.125021][ T5893] net_ratelimit: 19 callbacks suppressed [ 178.125043][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.144091][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.622459][ T9022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1187'. [ 178.682046][ T9024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.774674][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.910963][ T9036] netlink: 'syz.4.1194': attribute type 1 has an invalid length. [ 178.910987][ T9036] netlink: 'syz.4.1194': attribute type 4 has an invalid length. [ 178.911001][ T9036] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1194'. [ 178.912115][ T9036] netlink: 'syz.4.1194': attribute type 1 has an invalid length. [ 178.912162][ T9036] netlink: 'syz.4.1194': attribute type 4 has an invalid length. [ 178.912175][ T9036] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1194'. [ 178.919503][ T9035] netlink: 'syz.3.1192': attribute type 1 has an invalid length. [ 178.990664][ T9041] ip_tables: iptables: counters copy to user failed while replacing table [ 179.034780][ T9035] 8021q: adding VLAN 0 to HW filter on device bond2 [ 179.067058][ T9039] bond2: (slave veth0_virt_wifi): Enslaving as a backup interface with an up link [ 179.167449][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.545346][ T9060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1200'. [ 179.747918][ T9068] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 180.046476][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.216524][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.268411][ T9094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.268438][ T9094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.270827][ T9094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.270852][ T9094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.518562][ T9107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1215'. [ 180.685107][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 181.165000][ T5635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.244811][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.584199][ T9147] netlink: 21 bytes leftover after parsing attributes in process `syz.1.1224'. [ 182.400157][ T9182] veth0: entered promiscuous mode [ 182.433769][ T9182] veth0: left promiscuous mode [ 182.542646][ T9186] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 182.756746][ T9188] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.757955][ T9188] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.999312][ T9215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1241'. [ 183.032179][ T9188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.063311][ T9188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.249740][ T165] net_ratelimit: 3 callbacks suppressed [ 183.249762][ T165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.475425][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.534596][ T153] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.534663][ T153] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.564720][ T62] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.564759][ T62] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.564944][ T62] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.564973][ T62] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.565013][ T62] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.565039][ T62] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.982838][ T9249] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1245'. [ 184.011959][ T9246] af_packet: tpacket_rcv: packet too big, clamped from 54 to 4294967286. macoff=82 [ 184.294914][ T9259] batman_adv: batadv0: Adding interface: syzkaller0 [ 184.294935][ T9259] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.294967][ T9259] batman_adv: batadv0: Interface activated: syzkaller0 [ 184.352037][ T9257] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 184.395783][ T9257] batman_adv: batadv0: Removing interface: syzkaller0 [ 184.525091][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.882088][ T9290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1257'. [ 184.897688][ T9290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1257'. [ 184.936158][ T9288] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1258'. [ 184.968299][ T9288] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1258'. [ 185.258650][ T9305] Bluetooth: ISO socket layer initialized [ 185.412791][ T9312] syzkaller1: entered promiscuous mode [ 185.412818][ T9312] syzkaller1: entered allmulticast mode [ 185.564671][ T9191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.709288][ T9327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1272'. [ 186.091796][ T9348] netlink: 'syz.3.1283': attribute type 1 has an invalid length. [ 186.285081][ T9209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.308104][ T9353] bond3: (slave gretap2): making interface the new active one [ 186.312160][ T9353] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 186.527837][ T9369] ip_tables: iptables: counters copy to user failed while replacing table [ 186.577253][ T9369] syzkaller1: entered promiscuous mode [ 186.577279][ T9369] syzkaller1: entered allmulticast mode [ 186.605369][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.741518][ T9379] netlink: 'syz.3.1296': attribute type 4 has an invalid length. [ 186.765402][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.036935][ T9396] netlink: 'syz.3.1302': attribute type 19 has an invalid length. [ 187.036960][ T9396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1302'. [ 187.085653][ T9393] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1300'. [ 187.085947][ T9396] netlink: 'syz.3.1302': attribute type 19 has an invalid length. [ 187.085964][ T9396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1302'. [ 187.184637][ T5893] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.195776][ T153] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.195894][ T153] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.195993][ T153] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.410500][ T9458] ip_tables: iptables: counters copy to user failed while replacing table [ 188.493131][ T9461] erspan1: entered promiscuous mode [ 188.687474][ T9472] lo: Caught tx_queue_len zero misconfig [ 189.068454][ T9492] batman_adv: batadv0: Adding interface: syzkaller0 [ 189.068476][ T9492] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.068531][ T9492] batman_adv: batadv0: Interface activated: syzkaller0 [ 189.069110][ T9485] netlink: 'syz.3.1340': attribute type 5 has an invalid length. [ 189.131395][ T9491] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 189.186270][ T9491] batman_adv: batadv0: Removing interface: syzkaller0 [ 189.212476][ T9497] netlink: 'syz.4.1345': attribute type 1 has an invalid length. [ 189.277167][ T9500] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1345'. [ 189.309877][ T9497] 8021q: adding VLAN 0 to HW filter on device bond4 [ 189.398989][ T9500] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.430329][ T9500] bond4: (slave team0): Enslaving as an active interface with an up link [ 189.726452][ T9523] netlink: 'syz.1.1356': attribute type 25 has an invalid length. [ 189.726478][ T9523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1356'. [ 189.726725][ T9523] netlink: 'syz.1.1356': attribute type 25 has an invalid length. [ 189.726742][ T9523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1356'. [ 189.877713][ T9527] batman_adv: batadv0: Adding interface: syzkaller0 [ 189.877734][ T9527] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.877769][ T9527] batman_adv: batadv0: Interface activated: syzkaller0 [ 189.927058][ T9526] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 189.979133][ T9526] batman_adv: batadv0: Removing interface: syzkaller0 [ 190.770234][ T9565] tipc: Started in network mode [ 190.770259][ T9565] tipc: Node identity 4, cluster identity 4711 [ 190.770271][ T9565] tipc: Node number set to 4 [ 190.842152][ T9569] ip_tables: iptables: counters copy to user failed while replacing table [ 192.223138][ T9611] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.1393'. [ 192.692502][ T9625] syzkaller1: entered promiscuous mode [ 192.692529][ T9625] syzkaller1: entered allmulticast mode [ 192.790616][ T9628] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1401'. [ 192.942663][ T9638] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1404'. [ 193.052719][ T9640] netlink: 'syz.2.1406': attribute type 1 has an invalid length. [ 193.097772][ T9640] 8021q: adding VLAN 0 to HW filter on device bond6 [ 193.127298][ T9640] bond6: (slave gretap2): making interface the new active one [ 193.129353][ T9640] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 193.256870][ T9649] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1409'. [ 193.351767][ T9658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1414'. [ 193.385238][ T9657] sctp: [Deprecated]: syz.3.1413 (pid 9657) Use of int in max_burst socket option deprecated. [ 193.385238][ T9657] Use struct sctp_assoc_value instead [ 193.603498][ T9669] netlink: 'syz.4.1418': attribute type 1 has an invalid length. [ 193.603521][ T9669] netlink: 'syz.4.1418': attribute type 4 has an invalid length. [ 193.603535][ T9669] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1418'. [ 193.960373][ T9673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1420'. [ 194.720458][ T9689] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1426'. [ 194.768311][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.768373][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.048636][ T9697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1429'. [ 195.158652][ T9703] netlink: 'syz.1.1433': attribute type 1 has an invalid length. [ 195.280684][ T9703] bond2: (slave veth0_to_bond): making interface the new active one [ 195.305114][ T9703] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 195.310092][ T9711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1433'. [ 195.339175][ T9711] 8021q: adding VLAN 0 to HW filter on device bond2 [ 195.608898][ T9720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1439'. [ 196.482767][ T9746] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1451'. [ 197.436305][ T9771] netlink: 11575 bytes leftover after parsing attributes in process `syz.2.1460'. [ 197.680515][ T9774] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1461'. [ 197.694099][ T9750] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 198.081948][ T165] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 199.493861][ T9836] netlink: 'syz.0.1480': attribute type 4 has an invalid length. [ 199.699847][ T9841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1482'. [ 199.706210][ T9841] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1482'. [ 199.895571][ T62] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 200.969465][ T9788] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 201.367638][ T9879] netlink: 'syz.0.1494': attribute type 1 has an invalid length. [ 201.437171][ T9879] 8021q: adding VLAN 0 to HW filter on device bond2 [ 201.525643][ T9884] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 201.978691][ T9909] syzkaller1: entered promiscuous mode [ 201.978721][ T9909] syzkaller1: entered allmulticast mode [ 202.216531][ T9916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1508'. [ 202.762019][ T9933] netlink: 'syz.0.1513': attribute type 1 has an invalid length. [ 202.762044][ T9933] netlink: 'syz.0.1513': attribute type 4 has an invalid length. [ 202.762063][ T9933] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1513'. [ 202.763308][ T9933] netlink: 'syz.0.1513': attribute type 1 has an invalid length. [ 202.763327][ T9933] netlink: 'syz.0.1513': attribute type 4 has an invalid length. [ 202.763340][ T9933] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1513'. [ 202.965905][ T9939] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1515'. [ 203.497974][ T9951] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 204.273969][ T9874] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 204.361538][ T9975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1530'. [ 204.495447][ T9979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1534'. [ 205.260598][T10004] scsi_nl_rcv_msg: discarding partial skb [ 206.315175][T10046] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1556'. [ 207.190942][T10058] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1559'. [ 207.976869][T10077] netlink: 'syz.1.1566': attribute type 1 has an invalid length. [ 208.040669][T10077] bond3: (slave gretap1): making interface the new active one [ 208.041210][T10077] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 208.174368][T10009] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 208.413076][T10089] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1570'. [ 208.757885][T10096] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 210.391783][T10152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1594'. [ 210.517282][T10152] 8021q: adding VLAN 0 to HW filter on device team1 [ 210.772511][T10158] syzkaller1: entered promiscuous mode [ 210.772536][T10158] syzkaller1: entered allmulticast mode [ 210.855006][T10160] netlink: 'syz.4.1598': attribute type 1 has an invalid length. [ 210.998345][T10160] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 211.686632][T10190] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1608'. [ 211.785894][T10194] sctp: [Deprecated]: syz.0.1609 (pid 10194) Use of int in maxseg socket option. [ 211.785894][T10194] Use struct sctp_assoc_value instead [ 211.851705][T10196] bridge2: entered allmulticast mode [ 212.213311][ T5649] Bluetooth: hci2: command 0x0406 tx timeout [ 212.213389][ T5649] Bluetooth: hci1: command 0x0406 tx timeout [ 212.213431][ T5649] Bluetooth: hci0: command 0x0406 tx timeout [ 212.213458][ T5649] Bluetooth: hci3: command 0x0406 tx timeout [ 212.256569][T10207] syzkaller1: entered promiscuous mode [ 212.256592][T10207] syzkaller1: entered allmulticast mode [ 212.684922][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 212.814527][T10130] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 213.126698][T10222] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1619'. [ 213.251720][T10226] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1621'. [ 213.358347][T10237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1623'. [ 213.721849][T10250] ip_tables: iptables: counters copy to user failed while replacing table [ 213.735168][T10252] sctp: [Deprecated]: syz.3.1627 (pid 10252) Use of struct sctp_assoc_value in delayed_ack socket option. [ 213.735168][T10252] Use struct sctp_sack_info instead [ 214.021906][ T5294] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 214.169760][T10272] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1633'. [ 214.343930][T10279] syzkaller1: entered promiscuous mode [ 214.348378][T10279] syzkaller1: entered allmulticast mode [ 214.609923][T10297] netlink: 372 bytes leftover after parsing attributes in process `syz.1.1643'. [ 214.896243][T10312] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 215.692315][T10334] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1654'. [ 215.856028][T10331] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 216.157748][T10345] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 216.703389][T10357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1663'. [ 217.445820][T10288] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 217.592665][T10388] syzkaller1: entered promiscuous mode [ 217.592692][T10388] syzkaller1: entered allmulticast mode [ 217.954338][T10401] batman_adv: batadv0: Adding interface: syz_tun [ 217.954359][T10401] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.954815][T10401] batman_adv: batadv0: Interface activated: syz_tun [ 218.103297][T10405] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1682'. [ 218.369549][T10416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1686'. [ 218.389393][T10416] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1686'. [ 218.429848][T10410] syz.0.1684 (10410) used greatest stack depth: 17992 bytes left [ 218.520422][T10419] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1690'. [ 218.652358][T10425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1691'. [ 218.686304][T10427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1694'. [ 218.767676][ T5636] Bluetooth: hci0: connection err: -111 [ 218.953581][T10438] netlink: 'syz.4.1697': attribute type 4 has an invalid length. [ 219.016483][T10445] syzkaller1: entered promiscuous mode [ 219.016508][T10445] syzkaller1: entered allmulticast mode [ 219.452156][T10461] batadv_slave_1: entered allmulticast mode [ 219.540288][T10461] dvmrp3: entered allmulticast mode [ 219.554602][T10458] batadv_slave_1: left allmulticast mode [ 220.012416][T10478] __nla_validate_parse: 3 callbacks suppressed [ 220.012439][T10478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1711'. [ 220.012477][T10478] openvswitch: netlink: Invalid VLAN frame [ 220.092752][T10480] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1712'. [ 220.516325][T10494] syzkaller1: entered promiscuous mode [ 220.516350][T10494] syzkaller1: entered allmulticast mode [ 220.759725][T10497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1717'. [ 220.777827][T10497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1717'. [ 220.846945][ T5636] Bluetooth: hci0: command 0x0406 tx timeout [ 221.009913][T10507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1720'. [ 221.039239][T10507] netlink: 'syz.4.1720': attribute type 1 has an invalid length. [ 221.258594][T10513] netlink: 'syz.3.1724': attribute type 1 has an invalid length. [ 221.296458][T10517] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 221.332566][T10517] xt_hashlimit: size too large, truncated to 1048576 [ 221.530439][T10513] 8021q: adding VLAN 0 to HW filter on device bond4 [ 221.633454][T10520] bond4: (slave veth7): Enslaving as an active interface with a down link [ 221.667846][T10523] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 221.668559][T10523] bond4: (slave wlan1): Opening slave failed [ 221.981449][T10541] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 222.169182][T10549] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1733'. [ 222.502492][T10558] Bluetooth: MGMT ver 1.23 [ 222.737935][T10560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1738'. [ 222.792816][T10560] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1738'. [ 222.886855][T10562] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1739'. [ 222.899536][T10562] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1739'. [ 223.150342][T10572] syzkaller1: entered promiscuous mode [ 223.150367][T10572] syzkaller1: entered allmulticast mode [ 223.307364][T10578] netlink: 'syz.3.1747': attribute type 1 has an invalid length. [ 223.386645][T10578] bond5: entered promiscuous mode [ 223.387181][T10578] 8021q: adding VLAN 0 to HW filter on device bond5 [ 223.522509][T10578] 8021q: adding VLAN 0 to HW filter on device bond5 [ 223.523049][T10578] bond5: (slave xfrm1): The slave device specified does not support setting the MAC address [ 223.523071][T10578] bond5: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 223.567527][T10578] bond5: (slave xfrm1): making interface the new active one [ 223.567554][T10578] xfrm1: entered promiscuous mode [ 223.593043][T10578] xfrm1: left promiscuous mode [ 224.604964][ T5637] Bluetooth: hci2: command 0x0406 tx timeout [ 224.606720][ T5636] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 224.727204][T10629] batadv_slave_1: entered allmulticast mode [ 224.937378][T10610] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 225.261454][T10649] __nla_validate_parse: 2 callbacks suppressed [ 225.261476][T10649] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1771'. [ 225.285011][T10648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1770'. [ 225.285152][T10648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.332835][T10648] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.161422][T10665] netlink: 'syz.2.1778': attribute type 2 has an invalid length. [ 226.161455][T10665] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1778'. [ 226.801017][T10689] netlink: 'syz.4.1787': attribute type 1 has an invalid length. [ 226.975605][T10694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1791'. [ 226.983069][T10698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1790'. [ 227.019156][T10694] 8021q: adding VLAN 0 to HW filter on device bond4 [ 227.079692][T10694] macvlan2: entered promiscuous mode [ 227.079726][T10694] macvlan2: entered allmulticast mode [ 227.082554][T10694] bond4: entered promiscuous mode [ 227.082795][T10694] bond4: entered allmulticast mode [ 227.083405][T10694] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 227.117887][T10694] bond4: left allmulticast mode [ 227.117939][T10694] bond4: left promiscuous mode [ 227.139774][T10702] netlink: 'syz.3.1792': attribute type 1 has an invalid length. [ 227.286288][T10702] 8021q: adding VLAN 0 to HW filter on device bond6 [ 227.348233][T10707] bond6: (slave geneve2): making interface the new active one [ 227.350731][T10707] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 227.719541][T10726] 0: reclassify loop, rule prio 0, protocol 03 [ 227.854538][T10732] lo: entered allmulticast mode [ 227.868706][T10732] lo: left allmulticast mode [ 227.983460][T10736] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.1806'. [ 228.077241][T10740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1809'. [ 228.163433][T10741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1809'. [ 228.175226][ T165] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 228.176656][ T165] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 228.176795][ T165] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 228.199898][T10741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1809'. [ 228.223914][ T165] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 228.508560][T10759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1815'. [ 230.398230][ T5636] Bluetooth: hci4: link tx timeout [ 230.398252][ T5636] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 230.558040][T10817] __nla_validate_parse: 2 callbacks suppressed [ 230.558074][T10817] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1833'. [ 231.018518][T10837] bridge_slave_0: left allmulticast mode [ 231.018547][T10837] bridge_slave_0: left promiscuous mode [ 231.020112][T10837] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.053947][T10837] bridge_slave_1: left allmulticast mode [ 231.054055][T10837] bridge_slave_1: left promiscuous mode [ 231.055230][T10837] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.083584][T10837] bond0: (slave bond_slave_0): Releasing backup interface [ 231.097276][T10837] bond_slave_0: left promiscuous mode [ 231.122204][T10837] bond0: (slave bond_slave_1): Releasing backup interface [ 231.124310][T10837] bond_slave_1: left promiscuous mode [ 231.151992][T10837] team0: Port device team_slave_0 removed [ 231.180239][T10837] team0: Port device team_slave_1 removed [ 231.183117][T10837] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.183141][T10837] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.213136][T10837] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 231.366784][T10750] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 231.523528][T10849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1846'. [ 231.960089][T10865] tipc: Started in network mode [ 231.960127][T10865] tipc: Node identity c6bec22ab07e, cluster identity 4711 [ 231.960403][T10865] tipc: Enabled bearer , priority 0 [ 232.150992][T10865] syzkaller0: entered promiscuous mode [ 232.151020][T10865] syzkaller0: entered allmulticast mode [ 232.151521][T10865] tipc: Resetting bearer [ 232.307909][T10864] tipc: Resetting bearer [ 232.444690][ T5637] Bluetooth: hci4: command 0x0406 tx timeout [ 233.832670][T10910] netlink: 'syz.1.1864': attribute type 29 has an invalid length. [ 234.129685][ C1] ------------[ cut here ]------------ [ 234.129705][ C1] !rcu_read_lock_held() [ 234.129722][ C1] WARNING: ./include/net/dst.h:326 at xfrm_output_resume+0x41d9/0x64e0, CPU#1: syz.1.1864/10914 [ 234.150105][ C1] Modules linked in: [ 234.154092][ C1] CPU: 1 UID: 0 PID: 10914 Comm: syz.1.1864 Not tainted syzkaller #0 PREEMPT(full) [ 234.163607][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 234.173802][ C1] RIP: 0010:xfrm_output_resume+0x41d9/0x64e0 [ 234.179950][ C1] Code: be b5 01 00 00 48 c7 c2 c0 fa 53 8d e8 40 1b 07 f7 e9 aa fc ff ff e8 96 c9 2b f7 90 0f 0b 90 e9 7e ed ff ff e8 88 c9 2b f7 90 <0f> 0b 90 e9 44 e0 ff ff 48 89 df e8 87 25 52 fa 84 c0 0f 84 e1 00 [ 234.199689][ C1] RSP: 0018:ffffc90000a088c0 EFLAGS: 00010246 [ 234.205849][ C1] RAX: ffffffff8a9d47e8 RBX: 0000000000000000 RCX: ffff888032683e80 [ 234.213897][ C1] RDX: 8000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 234.221984][ C1] RBP: ffffc90000a08b50 R08: 0000000000000100 R09: 1ffffffff237bf97 [ 234.230077][ C1] R10: dffffc0000000000 R11: fffffbfff237bf98 R12: dffffc0000000000 [ 234.238152][ C1] R13: ffff888075fed058 R14: ffff888054b9a110 R15: ffff8880354dad80 [ 234.246244][ C1] FS: 00007f1e698656c0(0000) GS:ffff888123509000(0000) knlGS:0000000000000000 [ 234.255285][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 234.261908][ C1] CR2: 00007f4fb5231ff8 CR3: 00000000566ee000 CR4: 00000000003526f0 [ 234.269991][ C1] Call Trace: [ 234.273316][ C1] [ 234.276290][ C1] ? __pfx_xfrm_output_resume+0x10/0x10 [ 234.281891][ C1] ? iptfs_get_inner_mtu+0xa0/0x210 [ 234.287217][ C1] ? __asan_memset+0x22/0x50 [ 234.291879][ C1] ? xfrm_output+0xa03/0x1ca0 [ 234.296659][ C1] iptfs_delay_timer+0x3803/0x4310 [ 234.301861][ C1] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 234.307461][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 234.312548][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 234.318075][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 234.323950][ C1] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 234.329559][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 234.334894][ C1] hrtimer_run_softirq+0x1e3/0x2e0 [ 234.340081][ C1] handle_softirqs+0x265/0x8d0 [ 234.344995][ C1] __irq_exit_rcu+0xc6/0x220 [ 234.349656][ C1] irq_exit_rcu+0x9/0x30 [ 234.354009][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 234.359902][ C1] [ 234.362908][ C1] [ 234.365949][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 234.371991][ C1] RIP: 0010:lock_release+0x2e1/0x3c0 [ 234.377419][ C1] Code: 6d 3d 13 00 00 00 00 eb b5 e8 9b 4b 61 0a f7 c3 00 02 00 00 74 b9 65 48 8b 05 a3 25 3d 13 48 3b 44 24 28 75 48 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 c0 5e 64 0a cc 48 8d 3d e8 ef 1c [ 234.397132][ C1] RSP: 0018:ffffc90003437138 EFLAGS: 00000282 [ 234.403285][ C1] RAX: 5259c9ba23ea5600 RBX: 0000000000000206 RCX: 8000000000000002 [ 234.411381][ C1] RDX: 0000000000000000 RSI: ffffffff8e934b8c RDI: ffffffff8c8ea180 [ 234.419476][ C1] RBP: ffff888032684a58 R08: ffffea0001c41177 R09: 1ffffd400038822e [ 234.427609][ C1] R10: dffffc0000000000 R11: fffff9400038822f R12: 0000000000000001 [ 234.435692][ C1] R13: 0000000000000001 R14: ffff8880b8342218 R15: ffff888032683e80 [ 234.443772][ C1] _raw_spin_unlock+0x16/0x50 [ 234.448577][ C1] get_page_from_freelist+0x739/0x2290 [ 234.454133][ C1] ? lock_acquire+0x115/0x350 [ 234.458972][ C1] __alloc_frozen_pages_noprof+0x1fe/0x410 [ 234.464902][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 234.471306][ C1] ? policy_nodemask+0x31b/0x980 [ 234.476498][ C1] alloc_pages_mpol+0x21e/0x390 [ 234.481417][ C1] folio_alloc_mpol_noprof+0x39/0x160 [ 234.486913][ C1] shmem_alloc_and_add_folio+0x43e/0xf60 [ 234.492622][ C1] ? filemap_get_entry+0xcd/0x3f0 [ 234.497790][ C1] ? filemap_map_pages+0x1d1/0x2170 [ 234.503063][ C1] ? __pfx_filemap_get_entry+0x10/0x10 [ 234.508664][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 234.514984][ C1] shmem_get_folio_gfp+0x594/0x1330 [ 234.520275][ C1] shmem_fault+0x179/0x390 [ 234.524838][ C1] __do_fault+0x138/0x2a0 [ 234.529226][ C1] ? do_pte_missing+0x139f/0x3570 [ 234.534314][ C1] do_pte_missing+0x21d2/0x3570 [ 234.539316][ C1] ? handle_mm_fault+0xee/0x2f80 [ 234.544328][ C1] handle_mm_fault+0x1807/0x2f80 [ 234.549399][ C1] ? handle_mm_fault+0xee/0x2f80 [ 234.554470][ C1] ? follow_page_pte+0x660/0xf10 [ 234.559481][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 234.564923][ C1] ? follow_page_pte+0x748/0xf10 [ 234.569940][ C1] ? __pfx_follow_page_pte+0x10/0x10 [ 234.575366][ C1] ? follow_pmd_mask+0x185/0x780 [ 234.580489][ C1] __get_user_pages+0x102b/0x1ea0 [ 234.585682][ C1] populate_vma_page_range+0x311/0x3f0 [ 234.591213][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 234.597321][ C1] ? down_read+0x2b9/0x320 [ 234.601822][ C1] __mm_populate+0x25f/0x390 [ 234.606557][ C1] ? __pfx___mm_populate+0x10/0x10 [ 234.611751][ C1] vm_mmap_pgoff+0x36e/0x520 [ 234.616483][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 234.621674][ C1] ? rcu_is_watching+0x16/0xb0 [ 234.626590][ C1] ? ksys_mmap_pgoff+0xf3/0x760 [ 234.631591][ C1] ? __x64_sys_mmap+0x7f/0x140 [ 234.636485][ C1] do_syscall_64+0x166/0x520 [ 234.641152][ C1] ? trace_irq_disable+0x3b/0x140 [ 234.646284][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.652400][ C1] ? clear_bhb_loop+0x70/0xc0 [ 234.657180][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.663132][ C1] RIP: 0033:0x7f1e689a8f19 [ 234.667705][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.687423][ C1] RSP: 002b:00007f1e69865028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 234.695970][ C1] RAX: ffffffffffffffda RBX: 00007f1e68c26090 RCX: 00007f1e689a8f19 [ 234.704000][ C1] RDX: b635773f07ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 234.712074][ C1] RBP: 00007f1e68a37f6d R08: ffffffffffffffff R09: 00000000215eb000 [ 234.720191][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 234.728268][ C1] R13: 00007f1e68c26128 R14: 00007f1e68c26090 R15: 00007ffeebacb248 [ 234.736364][ C1] [ 234.739423][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 234.746810][ C1] CPU: 1 UID: 0 PID: 10914 Comm: syz.1.1864 Not tainted syzkaller #0 PREEMPT(full) [ 234.756218][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 234.766355][ C1] Call Trace: [ 234.769681][ C1] [ 234.772567][ C1] vpanic+0x26f/0x710 [ 234.776646][ C1] panic+0xc5/0xd0 [ 234.780596][ C1] ? __pfx_panic+0x10/0x10 [ 234.785086][ C1] __warn+0x315/0x4c0 [ 234.789118][ C1] ? xfrm_output_resume+0x41d9/0x64e0 [ 234.794562][ C1] ? xfrm_output_resume+0x41d9/0x64e0 [ 234.799995][ C1] __report_bug+0x276/0x570 [ 234.804580][ C1] ? xfrm_output_resume+0x41d9/0x64e0 [ 234.810019][ C1] ? __pfx___report_bug+0x10/0x10 [ 234.815110][ C1] ? lock_acquire+0x115/0x350 [ 234.819840][ C1] ? netlink_has_listeners+0x77/0x3f0 [ 234.825279][ C1] ? xfrm_aevent_is_on+0x18/0x230 [ 234.830385][ C1] ? xfrm_output_resume+0x41d9/0x64e0 [ 234.835821][ C1] report_bug+0x16b/0x220 [ 234.840210][ C1] ? xfrm_output_resume+0x41d9/0x64e0 [ 234.845622][ C1] ? xfrm_output_resume+0x41db/0x64e0 [ 234.851055][ C1] handle_bug+0x9c/0x200 [ 234.855366][ C1] exc_invalid_op+0x1a/0x50 [ 234.859974][ C1] asm_exc_invalid_op+0x1a/0x20 [ 234.864901][ C1] RIP: 0010:xfrm_output_resume+0x41d9/0x64e0 [ 234.870956][ C1] Code: be b5 01 00 00 48 c7 c2 c0 fa 53 8d e8 40 1b 07 f7 e9 aa fc ff ff e8 96 c9 2b f7 90 0f 0b 90 e9 7e ed ff ff e8 88 c9 2b f7 90 <0f> 0b 90 e9 44 e0 ff ff 48 89 df e8 87 25 52 fa 84 c0 0f 84 e1 00 [ 234.890612][ C1] RSP: 0018:ffffc90000a088c0 EFLAGS: 00010246 [ 234.896796][ C1] RAX: ffffffff8a9d47e8 RBX: 0000000000000000 RCX: ffff888032683e80 [ 234.904805][ C1] RDX: 8000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 234.912831][ C1] RBP: ffffc90000a08b50 R08: 0000000000000100 R09: 1ffffffff237bf97 [ 234.920893][ C1] R10: dffffc0000000000 R11: fffffbfff237bf98 R12: dffffc0000000000 [ 234.928918][ C1] R13: ffff888075fed058 R14: ffff888054b9a110 R15: ffff8880354dad80 [ 234.936962][ C1] ? xfrm_output_resume+0x41d8/0x64e0 [ 234.942645][ C1] ? __pfx_xfrm_output_resume+0x10/0x10 [ 234.948260][ C1] ? iptfs_get_inner_mtu+0xa0/0x210 [ 234.953534][ C1] ? __asan_memset+0x22/0x50 [ 234.958191][ C1] ? xfrm_output+0xa03/0x1ca0 [ 234.962944][ C1] iptfs_delay_timer+0x3803/0x4310 [ 234.968159][ C1] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 234.973693][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 234.978774][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 234.984228][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 234.990106][ C1] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 234.995636][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 235.000919][ C1] hrtimer_run_softirq+0x1e3/0x2e0 [ 235.006102][ C1] handle_softirqs+0x265/0x8d0 [ 235.010944][ C1] __irq_exit_rcu+0xc6/0x220 [ 235.015601][ C1] irq_exit_rcu+0x9/0x30 [ 235.019958][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 235.025681][ C1] [ 235.028655][ C1] [ 235.031628][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 235.037658][ C1] RIP: 0010:lock_release+0x2e1/0x3c0 [ 235.043007][ C1] Code: 6d 3d 13 00 00 00 00 eb b5 e8 9b 4b 61 0a f7 c3 00 02 00 00 74 b9 65 48 8b 05 a3 25 3d 13 48 3b 44 24 28 75 48 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 c0 5e 64 0a cc 48 8d 3d e8 ef 1c [ 235.062729][ C1] RSP: 0018:ffffc90003437138 EFLAGS: 00000282 [ 235.068848][ C1] RAX: 5259c9ba23ea5600 RBX: 0000000000000206 RCX: 8000000000000002 [ 235.076867][ C1] RDX: 0000000000000000 RSI: ffffffff8e934b8c RDI: ffffffff8c8ea180 [ 235.084890][ C1] RBP: ffff888032684a58 R08: ffffea0001c41177 R09: 1ffffd400038822e [ 235.092910][ C1] R10: dffffc0000000000 R11: fffff9400038822f R12: 0000000000000001 [ 235.100931][ C1] R13: 0000000000000001 R14: ffff8880b8342218 R15: ffff888032683e80 [ 235.108984][ C1] _raw_spin_unlock+0x16/0x50 [ 235.113770][ C1] get_page_from_freelist+0x739/0x2290 [ 235.119315][ C1] ? lock_acquire+0x115/0x350 [ 235.124102][ C1] __alloc_frozen_pages_noprof+0x1fe/0x410 [ 235.129979][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 235.136535][ C1] ? policy_nodemask+0x31b/0x980 [ 235.141532][ C1] alloc_pages_mpol+0x21e/0x390 [ 235.146451][ C1] folio_alloc_mpol_noprof+0x39/0x160 [ 235.151886][ C1] shmem_alloc_and_add_folio+0x43e/0xf60 [ 235.157603][ C1] ? filemap_get_entry+0xcd/0x3f0 [ 235.162700][ C1] ? filemap_map_pages+0x1d1/0x2170 [ 235.168016][ C1] ? __pfx_filemap_get_entry+0x10/0x10 [ 235.173547][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 235.179788][ C1] shmem_get_folio_gfp+0x594/0x1330 [ 235.185088][ C1] shmem_fault+0x179/0x390 [ 235.189587][ C1] __do_fault+0x138/0x2a0 [ 235.193978][ C1] ? do_pte_missing+0x139f/0x3570 [ 235.199081][ C1] do_pte_missing+0x21d2/0x3570 [ 235.204014][ C1] ? handle_mm_fault+0xee/0x2f80 [ 235.209025][ C1] handle_mm_fault+0x1807/0x2f80 [ 235.214054][ C1] ? handle_mm_fault+0xee/0x2f80 [ 235.219104][ C1] ? follow_page_pte+0x660/0xf10 [ 235.224110][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 235.229462][ C1] ? follow_page_pte+0x748/0xf10 [ 235.234477][ C1] ? __pfx_follow_page_pte+0x10/0x10 [ 235.239826][ C1] ? follow_pmd_mask+0x185/0x780 [ 235.244838][ C1] __get_user_pages+0x102b/0x1ea0 [ 235.249953][ C1] populate_vma_page_range+0x311/0x3f0 [ 235.255480][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 235.261563][ C1] ? down_read+0x2b9/0x320 [ 235.266066][ C1] __mm_populate+0x25f/0x390 [ 235.270727][ C1] ? __pfx___mm_populate+0x10/0x10 [ 235.275955][ C1] vm_mmap_pgoff+0x36e/0x520 [ 235.280614][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 235.285788][ C1] ? rcu_is_watching+0x16/0xb0 [ 235.290626][ C1] ? ksys_mmap_pgoff+0xf3/0x760 [ 235.295532][ C1] ? __x64_sys_mmap+0x7f/0x140 [ 235.300370][ C1] do_syscall_64+0x166/0x520 [ 235.305038][ C1] ? trace_irq_disable+0x3b/0x140 [ 235.310129][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.316260][ C1] ? clear_bhb_loop+0x70/0xc0 [ 235.321019][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.326973][ C1] RIP: 0033:0x7f1e689a8f19 [ 235.331479][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.351135][ C1] RSP: 002b:00007f1e69865028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 235.359606][ C1] RAX: ffffffffffffffda RBX: 00007f1e68c26090 RCX: 00007f1e689a8f19 [ 235.367623][ C1] RDX: b635773f07ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 235.375644][ C1] RBP: 00007f1e68a37f6d R08: ffffffffffffffff R09: 00000000215eb000 [ 235.383660][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 235.391681][ C1] R13: 00007f1e68c26128 R14: 00007f1e68c26090 R15: 00007ffeebacb248 [ 235.399734][ C1] [ 235.403499][ C1] Kernel Offset: disabled [ 235.407863][ C1] Rebooting in 86400 seconds..