last executing test programs: 2.725063881s ago: executing program 1 (id=912): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x101102, 0x0) close(r1) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYBLOB="0100010000000000b7"]) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@dev, @empty, 0x0}, &(0x7f00000000c0)=0xc) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000140)=r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x10040, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8}, 0x14) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) 2.600120382s ago: executing program 4 (id=914): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)={0x33, @local, 0x4e24, 0x2, 'sed\x00', 0x3, 0xffffffff, 0x8}, 0x2c) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f000000a340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x9, 0x1b}}, [@filter_kind_options=@f_flower={{0x16}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_STATE_MASK={0x0, 0x5c, 0xb0c0}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @multicast}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.089357114s ago: executing program 0 (id=920): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x74) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 2.087673264s ago: executing program 2 (id=921): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x30}], 0x1, 0x0) 2.082105832s ago: executing program 3 (id=922): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) 1.981293652s ago: executing program 1 (id=923): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x25, 0x1, @val=@kprobe_multi=@addrs={0x1, 0x2, 0x0, &(0x7f0000000040)=[0x3, 0x2], 0x4}}, 0x30) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5282e4e0bf3eaf55a60da", 0xbe}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e880", 0xf6}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f0940cf59647c14b7e6f19ac068f3a0920aed0a27cdd22c711855b5fb9f81ba75787a21c891067a458e010b16fa7d60083beff49c0ad285", 0x58}, {&(0x7f0000000c00)="11bc0436f24447912dce9afd07fe935ecc6bd5eda7c7802f23cc14c83af658aba7129a55512896099992c8d02253e12016902434d12855df0a9b30e55e8f6259b106445aab46f952998eb7f8da0bad476b3c282f94edbd9aec43c836f227ecbc81a2e8dffb14b537cab2cd95a1351f3cdc2b6343f3521eb5638b256c10f93d4465c51329e7aed07efa4bdabe7b511b77df3e3cba7eac72df9b66860cf3b41a664167c69759", 0xa5}], 0x2, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000e40)="c4ae7c0462b7d5d0f701a4979574ff8a5d74bf45c9e878972a42062f9b70e92f76ed2c49e2e8a043016efca580e1e24cbf53ef2fdb0d3810e8359c20b3938b1cb8574e51adc3cac209dd1c3b0fa44d9ca5ffbccfd9", 0x55}, {&(0x7f0000000fc0)}], 0x2, 0x0, 0x0, 0x84090}], 0x3, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.862005656s ago: executing program 2 (id=924): syz_emit_ethernet(0x3e, &(0x7f0000000600)={@empty, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x8, 0x0, {0x5, 0x4, 0x3, 0x7, 0x1002, 0x68, 0x3, 0x7, 0x32, 0x1, @local, @private=0xa010102}}}}}}, 0x0) 1.766619737s ago: executing program 4 (id=925): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000280)={r4, r4, 0x3, 0x3, &(0x7f0000000100)="81839c", 0x9, 0xb, 0x6, 0x5508, 0xc336, 0x1, 0xb, 'syz0\x00'}) sendmsg$NFC_CMD_GET_SE(r2, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000003c0)={0x14, 0x0, 0x20, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0xc0005) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, 0x0, 0x4040840) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) unshare(0x2020400) bpf$BPF_PROG_QUERY(0x9, 0x0, 0x0) 1.717391331s ago: executing program 1 (id=926): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)='\x00', 0x1, 0x24000010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="7cffa9061b2f8b", 0x7, 0xbcff, 0x0, 0x0) shutdown(r0, 0x1) 1.706816896s ago: executing program 0 (id=927): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000280)={'ipvlan1\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 1.649797695s ago: executing program 3 (id=928): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x8000009, 0x0, 0x0, 0x4, 0x1, 0x1}]}}, 0x0, 0x26}, 0x28) 1.577932287s ago: executing program 2 (id=929): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="010000000040030000000f00000008000300", @ANYRES32=r2, @ANYBLOB="4a000e0080000000080211000001080211000000a968dcf6a11b0000000000000000000064000100040603070200fc002a01013c040104070671070000000001060876060c027fffe900000008000c00640000000500a3000100000008000d"], 0x80}}, 0x0) 1.428520469s ago: executing program 1 (id=930): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}}, 0x0) 1.400278136s ago: executing program 4 (id=931): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xecbd5a155ab96c04}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.35794875s ago: executing program 3 (id=932): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 1.357807612s ago: executing program 0 (id=933): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000001c0)=0x7, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000280)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0xc0, 0x100}}}}}}}, 0x0) 1.330039186s ago: executing program 2 (id=934): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.181776406s ago: executing program 0 (id=935): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000a"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 1.105843361s ago: executing program 4 (id=936): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) read$nci(r0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="50040302"], 0x7) 1.10561574s ago: executing program 1 (id=937): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, 0x0, 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000314000e00002fb96d", 0xe}], 0x1}, 0x5) 1.105539181s ago: executing program 3 (id=938): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/76, 0x4c}, 0x3}], 0x1, 0x40000030, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 932.520796ms ago: executing program 0 (id=939): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c07bd75e6", 0x2d}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d501f8535bec8e020b41fb2", 0xe9}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a2329", 0x1d}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2", 0xd9}], 0x4}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc0490958", 0x75}, {&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d2", 0x94}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e6b5e9edd619e22626535212de5a998c5b793abdd7336cd8eb19e2fbd9a6ac2ca9c0f138ee10572672999ca4f51c09f9810459bad7e7bc28fc8890224dc01efcc276e62afe52450049cb6a165ce771a64b46f9b283ba8083e05c82291ed3bf4408b57142db3ae3da83206613704b856045dabb7e6e1ccf2a22b6d59b635ba3bc1f37bb759ce245877eba8aa82c0465c8d1bf7057ed0fcbdf5cf8d06bab48b66bcac445bc7", 0xd3}, {&(0x7f00000021c0)="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", 0x21d}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000bc0)="fe", 0x1}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 773.898749ms ago: executing program 4 (id=940): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=r3, @ANYBLOB="83040500010000003000128008000100677265002400028008000700ac"], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x439, 0x70bd28, 0x3, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}, @IFLA_AF_SPEC={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc811}, 0x8000) 609.264176ms ago: executing program 0 (id=941): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r0, &(0x7f0000001a40)={0x0, 0x0, 0x0}, 0x2) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) shutdown(r0, 0x1) 527.294485ms ago: executing program 2 (id=942): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@mcast1, @mcast2, @empty, 0x5, 0xf, 0xff9c, 0x400, 0x9, 0x1000000}) 396.210198ms ago: executing program 4 (id=943): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="6c0000002c00070100000000ffdbdf25037c00004800018041000000b68fe76f82e4540d2ce34be40cb271187443a3ece4c2b3bc4607197415f3721ccf9e97275a29de68113509db0975fe772bc1ba1bb7564b1f5ceb24ed61000000100002800c0001"], 0x6c}}, 0xc890) syz_emit_ethernet(0x2e, &(0x7f0000000040)={@random="93fc85ff30d2", @random="2ecafcc67af2", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x0, 0x100, @void}}}}}}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000000)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb602000008000000b70300000000000085000000050000001801000020696c250000000000202020db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b000000e100000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r4, 0x89e5, &(0x7f0000000000)=@rose) close(r3) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r5, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) connect$ax25(r5, &(0x7f0000000180)={{0x3, @bcast, 0x5}, [@bcast, @null, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 309.901087ms ago: executing program 2 (id=944): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 279.294303ms ago: executing program 1 (id=945): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 149.552766ms ago: executing program 3 (id=946): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000001a40)="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", 0x5c1}], 0x1}}], 0x1, 0x4008440) 0s ago: executing program 3 (id=947): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x40, 0x0, 0x38, 0x4}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.107' (ED25519) to the list of known hosts. [ 84.425896][ T5812] cgroup: Unknown subsys name 'net' [ 84.581447][ T5812] cgroup: Unknown subsys name 'cpuset' [ 84.591596][ T5812] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.332388][ T5812] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.708161][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.737297][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.746940][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.755863][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.764612][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.772458][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.780776][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.789613][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.797637][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.810498][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.817865][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.826777][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.834609][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.843736][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.851301][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.860572][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.860622][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.872088][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.878354][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.883159][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.891615][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.899328][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.918902][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.925694][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.937447][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.512945][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 89.631768][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 89.762665][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 89.853736][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.861954][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.870799][ T5828] bridge_slave_0: entered allmulticast mode [ 89.879079][ T5828] bridge_slave_0: entered promiscuous mode [ 89.894137][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 89.916363][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 89.931584][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.939619][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.947862][ T5828] bridge_slave_1: entered allmulticast mode [ 89.955738][ T5828] bridge_slave_1: entered promiscuous mode [ 90.090336][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.099317][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.107837][ T5826] bridge_slave_0: entered allmulticast mode [ 90.115280][ T5826] bridge_slave_0: entered promiscuous mode [ 90.140520][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.154207][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.171544][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.181207][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.190120][ T5826] bridge_slave_1: entered allmulticast mode [ 90.198720][ T5826] bridge_slave_1: entered promiscuous mode [ 90.310451][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.321764][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.329668][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.338168][ T5825] bridge_slave_0: entered allmulticast mode [ 90.345828][ T5825] bridge_slave_0: entered promiscuous mode [ 90.368273][ T5828] team0: Port device team_slave_0 added [ 90.400992][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.411180][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.419187][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.426657][ T5825] bridge_slave_1: entered allmulticast mode [ 90.435486][ T5825] bridge_slave_1: entered promiscuous mode [ 90.444565][ T5828] team0: Port device team_slave_1 added [ 90.462420][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.471106][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.478812][ T5827] bridge_slave_0: entered allmulticast mode [ 90.486469][ T5827] bridge_slave_0: entered promiscuous mode [ 90.560593][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.569014][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.577169][ T5827] bridge_slave_1: entered allmulticast mode [ 90.584711][ T5827] bridge_slave_1: entered promiscuous mode [ 90.592853][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.600640][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.608479][ T5842] bridge_slave_0: entered allmulticast mode [ 90.616306][ T5842] bridge_slave_0: entered promiscuous mode [ 90.636754][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.644065][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.671719][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.688682][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.714318][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.722077][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.730829][ T5842] bridge_slave_1: entered allmulticast mode [ 90.739270][ T5842] bridge_slave_1: entered promiscuous mode [ 90.760142][ T5826] team0: Port device team_slave_0 added [ 90.767924][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.775970][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.803662][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.829477][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.867387][ T5826] team0: Port device team_slave_1 added [ 90.897886][ T5146] Bluetooth: hci2: command tx timeout [ 90.916245][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.923539][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.952416][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.969689][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.978449][ T5838] Bluetooth: hci3: command tx timeout [ 90.980408][ T5833] Bluetooth: hci0: command tx timeout [ 90.985576][ T5838] Bluetooth: hci1: command tx timeout [ 90.999201][ T5146] Bluetooth: hci4: command tx timeout [ 91.001184][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.020136][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.033745][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.055651][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.063355][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.093686][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.143936][ T5825] team0: Port device team_slave_0 added [ 91.210825][ T5825] team0: Port device team_slave_1 added [ 91.233248][ T5827] team0: Port device team_slave_0 added [ 91.248071][ T5828] hsr_slave_0: entered promiscuous mode [ 91.255166][ T5828] hsr_slave_1: entered promiscuous mode [ 91.267720][ T5842] team0: Port device team_slave_0 added [ 91.293310][ T5826] hsr_slave_0: entered promiscuous mode [ 91.303064][ T5826] hsr_slave_1: entered promiscuous mode [ 91.310364][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 91.319438][ T5826] Cannot create hsr debugfs directory [ 91.328338][ T5827] team0: Port device team_slave_1 added [ 91.353356][ T5842] team0: Port device team_slave_1 added [ 91.414486][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.423123][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.456048][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.522045][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.530321][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.558792][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.571018][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.578810][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.608558][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.635643][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.643285][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.674112][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.691168][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.701067][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.729854][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.772506][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.784085][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.813172][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.986015][ T5842] hsr_slave_0: entered promiscuous mode [ 91.993285][ T5842] hsr_slave_1: entered promiscuous mode [ 92.000739][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 92.007593][ T5842] Cannot create hsr debugfs directory [ 92.038351][ T5827] hsr_slave_0: entered promiscuous mode [ 92.045684][ T5827] hsr_slave_1: entered promiscuous mode [ 92.052576][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 92.058937][ T5827] Cannot create hsr debugfs directory [ 92.078120][ T5825] hsr_slave_0: entered promiscuous mode [ 92.085333][ T5825] hsr_slave_1: entered promiscuous mode [ 92.092338][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 92.098801][ T5825] Cannot create hsr debugfs directory [ 92.593731][ T5826] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.643181][ T5826] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.669621][ T5826] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.690608][ T5826] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.755291][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.776065][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.789438][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.808503][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.916699][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.931467][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.942524][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.960308][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.977633][ T5146] Bluetooth: hci2: command tx timeout [ 93.057461][ T5836] Bluetooth: hci0: command tx timeout [ 93.057721][ T5833] Bluetooth: hci3: command tx timeout [ 93.063356][ T5838] Bluetooth: hci1: command tx timeout [ 93.074656][ T5146] Bluetooth: hci4: command tx timeout [ 93.096184][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.112910][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.155874][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.173472][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.250524][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.261655][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.289277][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.299612][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.314260][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.365009][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.395104][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.402734][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.442147][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.449933][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.465830][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.534128][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.571884][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.579227][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.626718][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.634334][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.682346][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.702458][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.827340][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.840514][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.900924][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.909055][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.922690][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.931146][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.949892][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.958097][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.969600][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.977593][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.072997][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.122132][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.146514][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.165879][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.173187][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.232014][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.265014][ T3528] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.272992][ T3528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.441304][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.543837][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.633515][ T5828] veth0_vlan: entered promiscuous mode [ 94.682939][ T5828] veth1_vlan: entered promiscuous mode [ 94.825947][ T5828] veth0_macvtap: entered promiscuous mode [ 94.874008][ T5828] veth1_macvtap: entered promiscuous mode [ 94.922304][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.959938][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.022701][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.051139][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.059291][ T5838] Bluetooth: hci2: command tx timeout [ 95.089767][ T5826] veth0_vlan: entered promiscuous mode [ 95.119863][ T1044] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.138705][ T5838] Bluetooth: hci1: command tx timeout [ 95.144709][ T5838] Bluetooth: hci4: command tx timeout [ 95.147760][ T5833] Bluetooth: hci3: command tx timeout [ 95.159142][ T5146] Bluetooth: hci0: command tx timeout [ 95.173902][ T1044] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.184182][ T1044] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.207497][ T1044] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.229085][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.241946][ T5825] veth0_vlan: entered promiscuous mode [ 95.250417][ T5826] veth1_vlan: entered promiscuous mode [ 95.295702][ T5827] veth0_vlan: entered promiscuous mode [ 95.324574][ T5825] veth1_vlan: entered promiscuous mode [ 95.385222][ T5827] veth1_vlan: entered promiscuous mode [ 95.429600][ T5826] veth0_macvtap: entered promiscuous mode [ 95.440699][ T3528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.450044][ T5826] veth1_macvtap: entered promiscuous mode [ 95.463522][ T3528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.533613][ T5825] veth0_macvtap: entered promiscuous mode [ 95.549046][ T5842] veth0_vlan: entered promiscuous mode [ 95.556125][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.568363][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.592899][ T5842] veth1_vlan: entered promiscuous mode [ 95.605330][ T5825] veth1_macvtap: entered promiscuous mode [ 95.634027][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.664684][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.691281][ T5827] veth0_macvtap: entered promiscuous mode [ 95.706745][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.736097][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.754357][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.766137][ T3528] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.802032][ T5827] veth1_macvtap: entered promiscuous mode [ 95.825475][ T3528] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.837020][ T3528] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.853774][ T3528] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.866120][ T5951] netem: incorrect ge model size [ 95.873136][ T5951] netem: change failed [ 95.891066][ T3528] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.916722][ T3528] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.932444][ T3528] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.952296][ T5842] veth0_macvtap: entered promiscuous mode [ 95.969041][ T3528] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.006479][ T5842] veth1_macvtap: entered promiscuous mode [ 96.051553][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.072547][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.161847][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.182576][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.234160][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.244191][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.256533][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.297126][ T5958] syz.3.7 uses obsolete (PF_INET,SOCK_PACKET) [ 96.312523][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.321652][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.335096][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.446001][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.454725][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.465241][ T1044] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.475401][ T1044] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.519050][ T1044] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.528790][ T1044] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.580386][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.603945][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.618119][ T1044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.626486][ T1044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.735310][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.749641][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.850868][ T1044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.872955][ T1044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.962086][ T5970] netlink: 'syz.4.5': attribute type 2 has an invalid length. [ 96.990075][ T5970] netlink: 'syz.4.5': attribute type 3 has an invalid length. [ 97.065840][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.096676][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.139481][ T5833] Bluetooth: hci2: command tx timeout [ 97.217466][ T5833] Bluetooth: hci3: command tx timeout [ 97.223764][ T5833] Bluetooth: hci0: command tx timeout [ 97.230598][ T5146] Bluetooth: hci4: command tx timeout [ 97.230676][ T5838] Bluetooth: hci1: command tx timeout [ 97.249964][ T797] cfg80211: failed to load regulatory.db [ 97.257668][ T5979] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1'. [ 97.459747][ T3528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.482519][ T3528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.558939][ T5990] Zero length message leads to an empty skb [ 97.642178][ T5992] netlink: 104 bytes leftover after parsing attributes in process `syz.4.12'. [ 97.717454][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 97.885887][ T5997] netlink: 'syz.0.13': attribute type 1 has an invalid length. [ 97.906381][ T5996] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'. [ 97.923046][ T5997] netlink: 'syz.0.13': attribute type 12 has an invalid length. [ 97.956639][ T5999] netlink: 'syz.3.14': attribute type 1 has an invalid length. [ 97.996435][ T5999] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 98.004338][ T5999] IPv6: NLM_F_CREATE should be set when creating new route [ 98.113659][ T5999] netlink: 'syz.3.14': attribute type 21 has an invalid length. [ 98.121994][ T5999] netlink: 152 bytes leftover after parsing attributes in process `syz.3.14'. [ 98.146018][ T5999] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14'. [ 98.163461][ T6004] team0: Device gtp0 is up. Set it down before adding it as a team port [ 98.212135][ T6007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17'. [ 98.274875][ T6016] netlink: 'syz.1.19': attribute type 12 has an invalid length. [ 98.443482][ T6021] bpq0: entered allmulticast mode [ 98.453697][ T6021] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20'. [ 98.519730][ T6023] netlink: 68 bytes leftover after parsing attributes in process `syz.3.23'. [ 98.541822][ T6026] netlink: 'syz.1.21': attribute type 23 has an invalid length. [ 98.581526][ T6026] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.598627][ T6027] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.763097][ T6033] SET target dimension over the limit! [ 98.994285][ T6043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28'. [ 99.009236][ T6046] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 99.039151][ T6047] xt_hashlimit: size too large, truncated to 1048576 [ 99.055901][ T6044] xt_hashlimit: size too large, truncated to 1048576 [ 99.639094][ T6074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.36'. [ 99.948246][ T5975] IPVS: starting estimator thread 0... [ 100.067024][ T6095] IPVS: using max 29 ests per chain, 69600 per kthread [ 100.153355][ T6100] tipc: Started in network mode [ 100.161993][ T6100] tipc: Node identity fffffff7, cluster identity 4711 [ 100.170919][ T6100] tipc: Node number set to 4294967287 [ 100.263153][ T6103] syzkaller0: entered promiscuous mode [ 100.286860][ T6103] syzkaller0: entered allmulticast mode [ 100.302880][ T6109] trusted_key: syz.0.45 sent an empty control message without MSG_MORE. [ 100.588016][ T6116] gre0: entered promiscuous mode [ 100.601636][ T6116] gre0: entered allmulticast mode [ 100.880501][ T6134] tipc: Started in network mode [ 100.916971][ T6134] tipc: Node identity 4e50d64d937b, cluster identity 4711 [ 100.924691][ T6134] tipc: Enabled bearer , priority 0 [ 101.013781][ T6134] syzkaller0: MTU too low for tipc bearer [ 101.052254][ T6134] tipc: Disabling bearer [ 101.158896][ T6144] syzkaller0: entered promiscuous mode [ 101.165414][ T6144] syzkaller0: entered allmulticast mode [ 101.228602][ T6150] syzkaller0: entered promiscuous mode [ 101.234913][ T6150] syzkaller0: entered allmulticast mode [ 101.342068][ T6158] openvswitch: netlink: Message has 93 unknown bytes. [ 101.351195][ T6158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.362198][ T6158] openvswitch: netlink: IP tunnel dst address not specified [ 101.500734][ T6161] netlink: 'syz.3.64': attribute type 1 has an invalid length. [ 101.841777][ T6184] sctp: [Deprecated]: syz.1.67 (pid 6184) Use of int in max_burst socket option. [ 101.841777][ T6184] Use struct sctp_assoc_value instead [ 101.920947][ T6185] netlink: 'syz.4.70': attribute type 2 has an invalid length. [ 102.605871][ T6209] __nla_validate_parse: 7 callbacks suppressed [ 102.605891][ T6209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.77'. [ 102.627638][ T6214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.79'. [ 102.641962][ T6214] netlink: 294 bytes leftover after parsing attributes in process `syz.3.79'. [ 102.653833][ T6214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.848038][ T6223] netlink: 51 bytes leftover after parsing attributes in process `syz.1.82'. [ 102.966067][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.84'. [ 103.050337][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.84'. [ 103.129237][ T6237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.86'. [ 103.130941][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.84'. [ 103.152372][ T6240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.89'. [ 103.181773][ T6240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.89'. [ 103.246331][ T3528] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.276452][ T3528] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.306346][ T3528] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.339233][ T3528] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.494572][ T6251] netlink: 'syz.4.92': attribute type 32 has an invalid length. [ 103.513733][ T6253] IPv6: NLM_F_CREATE should be specified when creating new route [ 103.680275][ T6251] bond1: option coupled_control: invalid value (52) [ 103.739288][ T6263] netlink: 'syz.0.97': attribute type 1 has an invalid length. [ 103.759128][ T6251] bond1 (unregistering): Released all slaves [ 104.324418][ T6297] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 104.672961][ T6313] syzkaller0: entered promiscuous mode [ 104.678884][ T6313] syzkaller0: entered allmulticast mode [ 105.581216][ T6350] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.602916][ T6350] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.632501][ T6360] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.645738][ T6350] bond0 (unregistering): Released all slaves [ 105.875927][ T6370] warning: `syz.0.122' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 106.188379][ T6387] netlink: 'syz.4.126': attribute type 1 has an invalid length. [ 106.295438][ T6390] syzkaller0: entered promiscuous mode [ 106.311155][ T6390] syzkaller0: entered allmulticast mode [ 106.748959][ T6411] veth0: entered promiscuous mode [ 106.821179][ T6413] veth0: left promiscuous mode [ 107.366262][ T6433] netlink: 'syz.3.140': attribute type 11 has an invalid length. [ 107.633802][ T6447] __nla_validate_parse: 16 callbacks suppressed [ 107.633831][ T6447] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.144'. [ 107.897967][ T6460] Cannot find add_set index 2 as target [ 108.231731][ T6467] syz.1.150 uses old SIOCAX25GETINFO [ 108.421989][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.448816][ T6471] openvswitch: netlink: Flow actions attr not present in new flow. [ 108.474205][ T6473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.498739][ T6473] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 108.527819][ T6473] bond0: (slave gre0): Error -95 calling set_mac_address [ 108.639054][ T6482] netlink: 'syz.3.153': attribute type 13 has an invalid length. [ 108.738770][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.760665][ T6490] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.156'. [ 108.954797][ T6495] netlink: 'syz.1.157': attribute type 2 has an invalid length. [ 108.979618][ T6495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.157'. [ 108.990073][ T6495] block nbd0: not configured, cannot reconfigure [ 109.240403][ T6509] syz.1.160: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 109.259357][ T6509] CPU: 1 UID: 0 PID: 6509 Comm: syz.1.160 Not tainted syzkaller #0 PREEMPT(full) [ 109.259385][ T6509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 109.259405][ T6509] Call Trace: [ 109.259414][ T6509] [ 109.259424][ T6509] dump_stack_lvl+0xe8/0x150 [ 109.259462][ T6509] warn_alloc+0x249/0x340 [ 109.259485][ T6509] ? stack_trace_save+0xa9/0x100 [ 109.259512][ T6509] ? __pfx_warn_alloc+0x10/0x10 [ 109.259539][ T6509] ? kasan_save_track+0x4f/0x80 [ 109.259555][ T6509] ? kasan_save_track+0x3e/0x80 [ 109.259571][ T6509] ? __kasan_kmalloc+0x93/0xb0 [ 109.259589][ T6509] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 109.259606][ T6509] ? xskq_create+0x56/0x170 [ 109.259621][ T6509] ? xsk_setsockopt+0x54c/0x990 [ 109.259645][ T6509] ? do_sock_setsockopt+0x17c/0x1b0 [ 109.259669][ T6509] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 109.259691][ T6509] ? do_syscall_64+0xe2/0xf80 [ 109.259714][ T6509] __vmalloc_node_range_noprof+0x132/0x1730 [ 109.259765][ T6509] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 109.259792][ T6509] ? __kasan_kmalloc+0x93/0xb0 [ 109.259818][ T6509] vmalloc_user_noprof+0xad/0xe0 [ 109.259837][ T6509] ? xskq_create+0xbf/0x170 [ 109.259855][ T6509] xskq_create+0xbf/0x170 [ 109.259876][ T6509] xsk_init_queue+0xad/0x110 [ 109.259908][ T6509] xsk_setsockopt+0x54c/0x990 [ 109.259940][ T6509] ? __pfx_xsk_setsockopt+0x10/0x10 [ 109.259970][ T6509] ? __pfx_aa_sk_perm+0x10/0x10 [ 109.259997][ T6509] ? aa_sock_opt_perm+0xff/0x1a0 [ 109.260024][ T6509] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 109.260045][ T6509] ? __pfx_xsk_setsockopt+0x10/0x10 [ 109.260076][ T6509] do_sock_setsockopt+0x17c/0x1b0 [ 109.260106][ T6509] __x64_sys_setsockopt+0x13d/0x1b0 [ 109.260137][ T6509] do_syscall_64+0xe2/0xf80 [ 109.260158][ T6509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.260177][ T6509] ? trace_irq_disable+0x37/0x100 [ 109.260213][ T6509] ? clear_bhb_loop+0x60/0xb0 [ 109.260248][ T6509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.260267][ T6509] RIP: 0033:0x7f245979aeb9 [ 109.260293][ T6509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.260311][ T6509] RSP: 002b:00007f245a72e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 109.260333][ T6509] RAX: ffffffffffffffda RBX: 00007f2459a15fa0 RCX: 00007f245979aeb9 [ 109.260348][ T6509] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 109.260360][ T6509] RBP: 00007f2459808c1f R08: 0000000000000004 R09: 0000000000000000 [ 109.260373][ T6509] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.260386][ T6509] R13: 00007f2459a16038 R14: 00007f2459a15fa0 R15: 00007ffeb34500a8 [ 109.260418][ T6509] [ 109.260431][ T6509] Mem-Info: [ 109.566997][ T6509] active_anon:5696 inactive_anon:0 isolated_anon:0 [ 109.566997][ T6509] active_file:2504 inactive_file:39929 isolated_file:0 [ 109.566997][ T6509] unevictable:768 dirty:394 writeback:0 [ 109.566997][ T6509] slab_reclaimable:10358 slab_unreclaimable:95574 [ 109.566997][ T6509] mapped:29149 shmem:1356 pagetables:1143 [ 109.566997][ T6509] sec_pagetables:0 bounce:0 [ 109.566997][ T6509] kernel_misc_reclaimable:0 [ 109.566997][ T6509] free:1329869 free_pcp:15832 free_cma:0 [ 109.615632][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.624665][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.659827][ T6509] Node 0 active_anon:22884kB inactive_anon:0kB active_file:10016kB inactive_file:159516kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116696kB dirty:1564kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12064kB pagetables:4440kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 109.705232][ T6509] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 109.806966][ T6509] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 109.847750][ T6509] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 109.854792][ T6509] Node 0 DMA32 free:1418836kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22884kB inactive_anon:0kB active_file:10016kB inactive_file:159516kB unevictable:1536kB writepending:1564kB zspages:0kB present:3129332kB managed:2554124kB mlocked:0kB bounce:0kB free_pcp:42732kB local_pcp:21456kB free_cma:0kB [ 109.899268][ T6509] lowmem_reserve[]: 0 0 1 1 1 [ 109.909696][ T6509] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 109.973934][ T6509] lowmem_reserve[]: 0 0 0 0 0 [ 109.994209][ T6509] Node 1 Normal free:3885536kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:12kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20960kB local_pcp:7456kB free_cma:0kB [ 110.064926][ T6509] lowmem_reserve[]: 0 0 0 0 0 [ 110.069997][ T6509] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 110.083131][ T6509] Node 0 DMA32: 225*4kB (UM) 310*8kB (UME) 144*16kB (UM) 77*32kB (UM) 28*64kB (UM) 34*128kB (UME) 25*256kB (UM) 14*512kB (UME) 13*1024kB (UME) 9*2048kB (UM) 332*4096kB (M) = 1419476kB [ 110.136890][ T6509] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 110.170399][ T6509] Node 1 Normal: 200*4kB (U) 50*8kB (UME) 51*16kB (UME) 76*32kB (UME) 18*64kB (UM) 6*128kB (UME) 7*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 945*4096kB (M) = 3885536kB [ 110.191036][ T6509] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 110.200964][ T6509] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 110.210640][ T6509] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 110.221311][ T6509] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 110.232585][ T6509] 43787 total pagecache pages [ 110.238490][ T6509] 0 pages in swap cache [ 110.243193][ T6509] Free swap = 124996kB [ 110.247903][ T6509] Total swap = 124996kB [ 110.252239][ T6509] 2097051 pages RAM [ 110.256743][ T6509] 0 pages HighMem/MovableOnly [ 110.263768][ T6509] 426622 pages reserved [ 110.268753][ T6509] 0 pages cma reserved [ 110.499694][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.666578][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.680531][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.308515][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.702687][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.742889][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.241763][ T6534] xt_TCPMSS: Only works on TCP SYN packets [ 113.545020][ T6544] netlink: 228 bytes leftover after parsing attributes in process `syz.0.166'. [ 113.559678][ T6547] tipc: Can't bind to reserved service type 0 [ 113.593777][ T6549] netlink: 'syz.1.165': attribute type 1 has an invalid length. [ 113.736634][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.777239][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.250599][ T6567] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 114.424860][ T6579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.172'. [ 114.484888][ T6587] netlink: 64 bytes leftover after parsing attributes in process `syz.4.175'. [ 114.710565][ T6585] syzkaller0: entered promiscuous mode [ 114.729845][ T6585] syzkaller0: entered allmulticast mode [ 114.818262][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.823988][ T6600] netlink: 'syz.3.178': attribute type 12 has an invalid length. [ 115.043647][ T6613] netlink: 'syz.4.180': attribute type 11 has an invalid length. [ 115.862512][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.740212][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.752499][ T6600] bond2: option primary_reselect: invalid value (255) [ 116.763548][ T6600] bond2 (unregistering): Released all slaves [ 116.899240][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.982838][ T6642] netlink: 16 bytes leftover after parsing attributes in process `syz.0.184'. [ 117.091645][ T6648] netlink: 'syz.1.186': attribute type 10 has an invalid length. [ 117.107652][ T6648] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.137668][ T6648] bridge_slave_1: left allmulticast mode [ 117.143914][ T6648] bridge_slave_1: left promiscuous mode [ 117.179201][ T6648] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.268214][ T6648] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 117.297928][ T6659] lo: Caught tx_queue_len zero misconfig [ 117.346074][ T6661] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 117.377781][ T6656] netlink: 'syz.3.187': attribute type 16 has an invalid length. [ 117.386032][ T6656] netlink: 'syz.3.187': attribute type 17 has an invalid length. [ 117.429807][ T6656] gre0: left promiscuous mode [ 117.451682][ T6656] gre0: left allmulticast mode [ 117.523378][ T6670] vxcan1: tx drop: invalid da for name 0x0000000080000001 [ 117.533197][ T6664] vxcan1: tx drop: invalid da for name 0x0000000080000001 [ 117.551363][ T6656] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 117.635236][ T6673] netlink: 'syz.4.194': attribute type 2 has an invalid length. [ 117.657760][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.194'. [ 117.904087][ T6685] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 117.945519][ T6685] bond0: (slave gre0): Error -95 calling set_mac_address [ 117.947734][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.013921][ T6685] bpq0: left allmulticast mode [ 118.023636][ T6686] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 118.047587][ T6685] bond0: (slave rose0): Enslaving as an active interface with an up link [ 118.071373][ T6681] netlink: 104 bytes leftover after parsing attributes in process `syz.4.196'. [ 118.117102][ T6686] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 118.128700][ T6681] netlink: 12 bytes leftover after parsing attributes in process `syz.4.196'. [ 118.150726][ T6681] block nbd0: Unsupported socket: should be TCP or UNIX. [ 118.463797][ T6699] syzkaller0: entered promiscuous mode [ 118.472242][ T6699] syzkaller0: entered allmulticast mode [ 118.509676][ T6704] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.201'. [ 118.521699][ T6704] Cannot find add_set index 2 as target [ 118.612755][ T6709] netlink: 'syz.2.204': attribute type 17 has an invalid length. [ 118.626511][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.204'. [ 118.649153][ T6709] netlink: 28 bytes leftover after parsing attributes in process `syz.2.204'. [ 118.688850][ T6710] netlink: 104 bytes leftover after parsing attributes in process `syz.2.204'. [ 118.978818][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.988183][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.051643][ T6718] netlink: 'syz.1.206': attribute type 24 has an invalid length. [ 119.184707][ T6722] netlink: 16 bytes leftover after parsing attributes in process `syz.0.208'. [ 119.209071][ T6725] syzkaller0: entered promiscuous mode [ 119.215148][ T6725] syzkaller0: entered allmulticast mode [ 119.294840][ T6725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.209'. [ 119.676455][ T6742] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 119.778863][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.904533][ T6750] netlink: 16 bytes leftover after parsing attributes in process `syz.3.217'. [ 119.997424][ T6754] netlink: 'syz.1.218': attribute type 11 has an invalid length. [ 120.008268][ T6754] netlink: 224 bytes leftover after parsing attributes in process `syz.1.218'. [ 120.021071][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.043830][ T6755] netlink: 'syz.4.219': attribute type 1 has an invalid length. [ 120.284671][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.323466][ T6756] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 120.343165][ T6756] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 120.375101][ T6756] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 120.471908][ T6774] netlink: 24 bytes leftover after parsing attributes in process `syz.1.224'. [ 120.506218][ T6768] ip6gre1: entered allmulticast mode [ 120.893917][ T6788] macvlan2: entered promiscuous mode [ 120.903494][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.914878][ T6788] macvlan2: entered allmulticast mode [ 120.956374][ T6797] netlink: 'syz.1.230': attribute type 1 has an invalid length. [ 120.965872][ T6788] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 121.057739][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.180897][ T6797] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.351018][ T6804] bond1: (slave gretap1): making interface the new active one [ 121.376754][ T6804] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 121.410479][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.231'. [ 121.570920][ T6827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.233'. [ 121.652207][ T6829] netlink: 'syz.4.235': attribute type 2 has an invalid length. [ 121.674799][ T6829] netlink: 'syz.4.235': attribute type 1 has an invalid length. [ 121.777961][ T6838] netlink: 'syz.1.237': attribute type 1 has an invalid length. [ 121.787565][ T6833] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 121.801191][ T6833] bond1 (unregistering): Released all slaves [ 121.823790][ T6834] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 121.829859][ T6837] 8021q: VLANs not supported on tunl0 [ 122.098501][ T6849] netlink: 'syz.0.240': attribute type 10 has an invalid length. [ 122.110285][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.275379][ T6855] raw_sendmsg: syz.3.241 forgot to set AF_INET. Fix it! [ 122.444166][ T6864] dvmrp6: entered allmulticast mode [ 122.720792][ T6879] netlink: 'syz.1.250': attribute type 1 has an invalid length. [ 122.823199][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.995082][ T6879] bond2: entered promiscuous mode [ 123.004237][ T6879] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.116586][ T6883] bond2: (slave bridge1): making interface the new active one [ 123.124897][ T6883] bridge1: entered promiscuous mode [ 123.136328][ T6883] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 123.151185][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.393034][ T6897] veth3: entered allmulticast mode [ 123.590138][ T6910] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 123.670276][ T6912] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 123.882325][ T6919] syzkaller0: entered promiscuous mode [ 123.908858][ T6919] syzkaller0: entered allmulticast mode [ 123.954144][ T5947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.162703][ T6927] syzkaller1: entered promiscuous mode [ 124.178092][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.196023][ T6927] syzkaller1: entered allmulticast mode [ 124.322011][ T6927] __nla_validate_parse: 5 callbacks suppressed [ 124.322034][ T6927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.260'. [ 124.619798][ T6941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.265'. [ 124.660662][ T6941] netlink: 'syz.1.265': attribute type 1 has an invalid length. [ 124.694196][ T6941] netlink: 'syz.1.265': attribute type 1 has an invalid length. [ 124.743990][ T6941] netlink: 'syz.1.265': attribute type 2 has an invalid length. [ 124.767330][ T6941] netlink: 68 bytes leftover after parsing attributes in process `syz.1.265'. [ 124.841687][ T6947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.265'. [ 125.041932][ T6962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.227294][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.385007][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.706552][ T6991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.277'. [ 125.830888][ T6999] netlink: 56 bytes leftover after parsing attributes in process `syz.4.277'. [ 125.879785][ T6993] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.922050][ T6993] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.025783][ T7011] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 126.088100][ T6999] bond2 (unregistering): Released all slaves [ 126.230565][ T6993] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.243106][ T7014] netlink: 24 bytes leftover after parsing attributes in process `syz.3.283'. [ 126.257161][ T6993] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.271035][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.287211][ T7014] netlink: 24 bytes leftover after parsing attributes in process `syz.3.283'. [ 126.350914][ T6993] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.364609][ T6993] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.435071][ T7022] netlink: 244 bytes leftover after parsing attributes in process `syz.3.283'. [ 126.996901][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.147582][ T6993] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.164449][ T7032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.287'. [ 127.174962][ T6993] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.323963][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.366527][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805767dc00: rx timeout, send abort [ 127.377042][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805767dc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 127.471834][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.491137][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.565036][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.576463][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.586148][ T7049] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 127.646499][ T7049] 0ªî{X¹¦: entered allmulticast mode [ 127.656494][ T7049] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 127.696906][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.705654][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.715223][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.725052][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.776399][ T7049] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 127.866223][ T7063] netlink: 'syz.0.296': attribute type 1 has an invalid length. [ 127.896355][ T7059] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 127.935930][ T7067] Cannot find add_set index 0 as target [ 127.945714][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.973090][ T7059] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 128.028350][ T7059] gretap1: entered promiscuous mode [ 128.033925][ T7059] gretap1: entered allmulticast mode [ 128.184923][ T7065] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 128.198429][ T7065] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 128.347114][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.387397][ T7070] gretap1: entered promiscuous mode [ 128.396627][ T7070] bond3: (slave gretap1): making interface the new active one [ 128.409433][ T7070] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 128.428517][ T7072] macvlan2: entered promiscuous mode [ 128.434362][ T7072] macvlan2: entered allmulticast mode [ 128.442761][ T7072] bond3: entered promiscuous mode [ 128.449305][ T7072] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 128.465744][ T7072] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 128.480192][ T7072] bond3: left promiscuous mode [ 128.526335][ T7061] C: renamed from lo (while UP) [ 128.535677][ T7061] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 128.663256][ T7092] netlink: 'syz.3.301': attribute type 1 has an invalid length. [ 128.699753][ T7092] netlink: 'syz.3.301': attribute type 2 has an invalid length. [ 128.969313][ T7109] netlink: 'syz.3.306': attribute type 83 has an invalid length. [ 129.222988][ T7121] syzkaller0: entered promiscuous mode [ 129.230223][ T7121] syzkaller0: entered allmulticast mode [ 129.469504][ T7136] netlink: 'syz.0.315': attribute type 1 has an invalid length. [ 129.497405][ T7136] __nla_validate_parse: 7 callbacks suppressed [ 129.497430][ T7136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.315'. [ 129.583532][ T7131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.314'. [ 129.593957][ T7131] syzkaller0: entered promiscuous mode [ 129.636173][ T7131] syzkaller0: entered allmulticast mode [ 130.183404][ T7168] net_ratelimit: 2 callbacks suppressed [ 130.183425][ T7168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.252939][ T7168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.312500][ T7168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.363376][ T7168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.397016][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.327'. [ 130.409953][ T7168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.428050][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.449418][ T7168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.494856][ T7168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.587207][ T7168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.615892][ T7168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.667802][ T7188] xt_l2tp: unknown flags: 10 [ 130.891460][ T7197] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.330'. [ 131.015227][ T7199] netlink: 24 bytes leftover after parsing attributes in process `syz.2.331'. [ 131.061185][ T7204] netlink: 'syz.2.331': attribute type 4 has an invalid length. [ 131.211102][ T7198] delete_channel: no stack [ 131.357235][ T7218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.335'. [ 131.515695][ T7225] netlink: 'syz.1.338': attribute type 5 has an invalid length. [ 131.535015][ T7224] netlink: 'syz.4.339': attribute type 29 has an invalid length. [ 131.552599][ T7228] netlink: 'syz.3.340': attribute type 1 has an invalid length. [ 131.562196][ T7218] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 131.569498][ T7228] netlink: 96 bytes leftover after parsing attributes in process `syz.3.340'. [ 131.586616][ T7228] netlink: 658 bytes leftover after parsing attributes in process `syz.3.340'. [ 131.598623][ T7228] netlink: 1 bytes leftover after parsing attributes in process `syz.3.340'. [ 131.627592][ T7225] netlink: 'syz.1.338': attribute type 5 has an invalid length. [ 131.634663][ T7229] netlink: 96 bytes leftover after parsing attributes in process `syz.3.340'. [ 131.698537][ T7234] xfrm1: entered promiscuous mode [ 131.704066][ T7234] xfrm1: entered allmulticast mode [ 132.797125][ T7248] bridge0: port 3(team0) entered blocking state [ 132.804077][ T7248] bridge0: port 3(team0) entered disabled state [ 132.819172][ T7248] team0: entered allmulticast mode [ 132.831570][ T7248] team_slave_0: entered allmulticast mode [ 132.842326][ T7248] team_slave_1: entered allmulticast mode [ 132.870842][ T7248] team0: entered promiscuous mode [ 132.887901][ T7248] team_slave_0: entered promiscuous mode [ 132.911062][ T7248] team_slave_1: entered promiscuous mode [ 132.927808][ T7248] bridge0: port 3(team0) entered blocking state [ 132.934580][ T7248] bridge0: port 3(team0) entered forwarding state [ 133.052750][ T7292] vlan2: entered allmulticast mode [ 133.278528][ T7300] xt_NFQUEUE: number of total queues is 0 [ 133.306365][ T7302] validate_nla: 35 callbacks suppressed [ 133.306383][ T7302] netlink: 'syz.1.359': attribute type 16 has an invalid length. [ 133.350639][ T7298] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.360801][ T7302] netlink: 'syz.1.359': attribute type 17 has an invalid length. [ 133.772356][ T7317] gre1: entered promiscuous mode [ 133.783139][ T7317] gre1: entered allmulticast mode [ 133.949646][ T7327] vxcan2: entered allmulticast mode [ 134.116674][ T7334] xt_CT: You must specify a L4 protocol and not use inversions on it [ 134.301919][ T7349] netlink: 'syz.1.374': attribute type 13 has an invalid length. [ 134.403197][ T7344] bond1: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 134.476627][ T7349] veth0_macvtap: left promiscuous mode [ 134.516029][ T7349] macvtap0: entered allmulticast mode [ 134.550119][ T7349] macvtap0: refused to change device tx_queue_len [ 134.819927][ T7373] __nla_validate_parse: 8 callbacks suppressed [ 134.819951][ T7373] netlink: 28 bytes leftover after parsing attributes in process `syz.3.377'. [ 135.075353][ T7378] netlink: 56 bytes leftover after parsing attributes in process `syz.0.381'. [ 135.617326][ T9] net_ratelimit: 91 callbacks suppressed [ 135.617346][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.634608][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.703008][ T7413] xt_l2tp: missing protocol rule (udp|l2tpip) [ 135.719284][ T7414] netlink: 'syz.1.388': attribute type 39 has an invalid length. [ 135.749016][ T7419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.939059][ T7425] pim6reg: entered allmulticast mode [ 135.966528][ T7428] pim6reg: left allmulticast mode [ 136.419873][ T7448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.400'. [ 136.555610][ T7458] netlink: 156 bytes leftover after parsing attributes in process `syz.0.402'. [ 136.569896][ T7458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.402'. [ 136.607451][ T7457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.401'. [ 136.627074][ T7457] openvswitch: netlink: Flow actions attr not present in new flow. [ 136.667551][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.967313][ T7482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.407'. [ 136.997403][ T7484] netlink: 'syz.4.408': attribute type 21 has an invalid length. [ 137.005763][ T7484] IPv6: NLM_F_CREATE should be specified when creating new route [ 137.043527][ T7484] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 137.050906][ T7484] IPv6: NLM_F_CREATE should be set when creating new route [ 137.058354][ T7484] IPv6: NLM_F_CREATE should be set when creating new route [ 137.066548][ T7484] IPv6: NLM_F_CREATE should be set when creating new route [ 137.084249][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.110031][ T7491] netlink: 52 bytes leftover after parsing attributes in process `syz.0.410'. [ 137.130522][ T7491] netlink: 52 bytes leftover after parsing attributes in process `syz.0.410'. [ 137.193336][ T7491] netlink: 52 bytes leftover after parsing attributes in process `syz.0.410'. [ 137.214127][ T7482] bridge2: port 1(veth3) entered blocking state [ 137.247225][ T7482] bridge2: port 1(veth3) entered disabled state [ 137.264784][ T7482] veth3: entered allmulticast mode [ 137.330936][ T7482] veth3: entered promiscuous mode [ 137.386974][ T7494] netlink: 'syz.3.411': attribute type 62 has an invalid length. [ 137.461116][ T7500] bridge2: port 2(veth0_to_bond) entered blocking state [ 137.601961][ T7500] bridge2: port 2(veth0_to_bond) entered disabled state [ 137.614540][ T7500] veth0_to_bond: entered allmulticast mode [ 137.697680][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.730790][ T7500] veth0_to_bond: entered promiscuous mode [ 137.864274][ T7492] bond2: option all_slaves_active: invalid value (222) [ 137.918014][ T7492] bond2 (unregistering): Released all slaves [ 137.967157][ T7520] syzkaller0: entered allmulticast mode [ 138.117827][ T7533] netlink: 'syz.4.417': attribute type 3 has an invalid length. [ 138.184412][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.195448][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.202713][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.243539][ T7537] Bluetooth: MGMT ver 1.23 [ 138.267260][ T7542] openvswitch: netlink: IP tunnel dst address not specified [ 138.728662][ T7558] netlink: 'syz.3.424': attribute type 9 has an invalid length. [ 138.738829][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.776222][ T9] hid-generic 0005:10CF:0000.0001: item fetching failed at offset 0/1 [ 138.806678][ T9] hid-generic 0005:10CF:0000.0001: probe with driver hid-generic failed with error -22 [ 139.279861][ T7582] netlink: 'syz.4.430': attribute type 3 has an invalid length. [ 139.287756][ T7582] netlink: 'syz.4.430': attribute type 7 has an invalid length. [ 139.295962][ T7582] netlink: 'syz.4.430': attribute type 1 has an invalid length. [ 140.818302][ T5898] net_ratelimit: 1 callbacks suppressed [ 140.818329][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.217860][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.867008][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.891718][ T7653] __nla_validate_parse: 6 callbacks suppressed [ 141.891741][ T7653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.453'. [ 141.908532][ T7661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.454'. [ 141.908540][ T7659] netlink: 'syz.3.456': attribute type 64 has an invalid length. [ 142.622002][ T7691] netlink: 'syz.4.466': attribute type 1 has an invalid length. [ 142.674590][ T7696] netlink: 240 bytes leftover after parsing attributes in process `syz.3.468'. [ 142.689052][ T7690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.467'. [ 142.727125][ T7706] netlink: 'syz.0.469': attribute type 178 has an invalid length. [ 142.752595][ T7690] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 142.759662][ T7697] netlink: 240 bytes leftover after parsing attributes in process `syz.3.468'. [ 142.834355][ T7696] netlink: 16 bytes leftover after parsing attributes in process `syz.3.468'. [ 142.858079][ T7696] bond0: Caught tx_queue_len zero misconfig [ 142.874256][ T7696] netlink: 6 bytes leftover after parsing attributes in process `syz.3.468'. [ 142.899249][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.928926][ T7710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.470'. [ 142.969831][ T7710] netlink: 50 bytes leftover after parsing attributes in process `syz.1.470'. [ 142.987056][ T7710] netlink: 50 bytes leftover after parsing attributes in process `syz.1.470'. [ 143.691063][ T7767] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.969989][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.191947][ T7791] vlan2: entered promiscuous mode [ 144.200473][ T7791] vlan2: entered allmulticast mode [ 144.206058][ T7791] hsr_slave_1: entered allmulticast mode [ 144.244837][ T7792] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 144.257820][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.754665][ T7813] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 144.879493][ T7818] openvswitch: netlink: IP tunnel dst address not specified [ 144.986945][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.220196][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.993300][ T7868] netlink: 'syz.1.502': attribute type 3 has an invalid length. [ 146.030375][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.066425][ T7868] netlink: 'syz.1.502': attribute type 1 has an invalid length. [ 146.081156][ T7857] hsr_slave_0 (unregistering): left promiscuous mode [ 146.165192][ T7862] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 146.618798][ T7901] C: renamed from lo (while UP) [ 146.629301][ T7901] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 147.060350][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.123466][ T7920] __nla_validate_parse: 47 callbacks suppressed [ 147.123488][ T7920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.521'. [ 147.148083][ T7920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.521'. [ 147.161897][ T7919] syzkaller0: entered promiscuous mode [ 147.168496][ T7919] syzkaller0: entered allmulticast mode [ 147.194529][ T7921] netlink: 16 bytes leftover after parsing attributes in process `syz.1.520'. [ 147.219116][ T7921] netlink: 32 bytes leftover after parsing attributes in process `syz.1.520'. [ 147.255541][ T7921] gretap2: entered promiscuous mode [ 147.261486][ T7921] gretap2: entered allmulticast mode [ 147.269982][ T7919] netlink: 'syz.3.519': attribute type 21 has an invalid length. [ 147.297701][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.597111][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880579efc00: rx timeout, send abort [ 147.606147][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880579efc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 147.852282][ T7932] netlink: 84 bytes leftover after parsing attributes in process `syz.4.525'. [ 148.098134][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.305994][ T7972] netlink: 24 bytes leftover after parsing attributes in process `syz.1.532'. [ 148.893933][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880579ef400: rx timeout, send abort [ 148.903320][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880579ef400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 148.993101][ T7999] ip6tnl0: Caught tx_queue_len zero misconfig [ 149.130096][ T8005] syzkaller0: entered promiscuous mode [ 149.135714][ T8005] syzkaller0: entered allmulticast mode [ 149.201227][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.836198][ T8045] netlink: 'syz.2.548': attribute type 16 has an invalid length. [ 149.876887][ T8045] netlink: 20 bytes leftover after parsing attributes in process `syz.2.548'. [ 149.968098][ T8047] syzkaller0: entered promiscuous mode [ 149.973755][ T8047] syzkaller0: entered allmulticast mode [ 150.074185][ T8051] tipc: Started in network mode [ 150.114593][ T8051] tipc: Node identity baf7c92976e2, cluster identity 4711 [ 150.150581][ T8051] tipc: Enabled bearer , priority 0 [ 150.200343][ T8046] tipc: Resetting bearer [ 150.257143][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.328364][ T8046] tipc: Disabling bearer [ 150.342211][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.614537][ T8083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.560'. [ 150.979388][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.298162][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.337295][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.136866][ T8058] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 153.368204][ T8094] netlink: 'syz.0.563': attribute type 1 has an invalid length. [ 153.378011][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.386179][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.398412][ T8096] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 153.640064][ T8097] bond4: (slave veth3): Enslaving as an active interface with a down link [ 153.861141][ T8121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.570'. [ 153.912420][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.570'. [ 153.961982][ T8128] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.573'. [ 154.138210][ T8135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.147614][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.217096][ T8141] netlink: 28 bytes leftover after parsing attributes in process `syz.3.578'. [ 154.300832][ T8148] netlink: 'syz.0.577': attribute type 1 has an invalid length. [ 154.418591][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.574494][ T8156] bridge2: entered promiscuous mode [ 154.596641][ T8161] netlink: 'syz.4.584': attribute type 1 has an invalid length. [ 154.604799][ T8161] netlink: 224 bytes leftover after parsing attributes in process `syz.4.584'. [ 154.614933][ T8156] bridge2: entered allmulticast mode [ 154.800342][ T8169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.586'. [ 154.823626][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.586'. [ 155.005233][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 155.024536][ T8183] netlink: 'syz.1.589': attribute type 1 has an invalid length. [ 155.346008][ T8200] netlink: 28 bytes leftover after parsing attributes in process `syz.0.594'. [ 155.412568][ T8201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.594'. [ 155.458407][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.600968][ T8208] team0: Device gtp0 is up. Set it down before adding it as a team port [ 155.632834][ T8205] netlink: 'syz.1.596': attribute type 9 has an invalid length. [ 155.657004][ T8213] netlink: 'syz.3.595': attribute type 1 has an invalid length. [ 155.769517][ T8218] block nbd0: not configured, cannot reconfigure [ 155.877437][ T8223] netlink: 48 bytes leftover after parsing attributes in process `syz.0.598'. [ 155.913724][ T8217] bond2: (slave ip6gretap1): making interface the new active one [ 155.922426][ T8217] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 155.932538][ T8217] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 155.947416][ T8217] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 156.343829][ T8234] hsr_slave_0 (unregistering): left promiscuous mode [ 156.361491][ T8240] erspan0: entered promiscuous mode [ 156.418457][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.501191][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.851753][ T8271] team0: Caught tx_queue_len zero misconfig [ 157.482290][ T8297] batman_adv: batadv0: Adding interface: dummy0 [ 157.518128][ T8299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.526954][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.539918][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.566241][ T8297] batman_adv: batadv0: Interface activated: dummy0 [ 157.585681][ T8302] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 157.852453][ T8324] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 157.912695][ T8323] syzkaller0: entered promiscuous mode [ 157.930254][ T8323] syzkaller0: entered allmulticast mode [ 157.962706][ T8329] netlink: 'syz.0.630': attribute type 23 has an invalid length. [ 158.022644][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.055422][ T8327] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 158.141374][ T8330] netlink: 'syz.2.628': attribute type 1 has an invalid length. [ 158.177248][ T8330] netlink: 'syz.2.628': attribute type 2 has an invalid length. [ 158.559307][ T8350] netlink: 'syz.4.636': attribute type 16 has an invalid length. [ 158.577479][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.596959][ T8350] netlink: 'syz.4.636': attribute type 17 has an invalid length. [ 158.709454][ T8357] bond5: option all_slaves_active: invalid value (222) [ 158.745886][ T8357] bond5 (unregistering): Released all slaves [ 158.974641][ T8350] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 159.093057][ T8367] bond3: option all_slaves_active: invalid value (222) [ 159.111621][ T8367] bond3 (unregistering): Released all slaves [ 159.136237][ T8366] syzkaller0: entered promiscuous mode [ 159.165602][ T8366] syzkaller0: entered allmulticast mode [ 159.330888][ T8392] __nla_validate_parse: 9 callbacks suppressed [ 159.330909][ T8392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.646'. [ 159.388135][ T8393] netlink: 51 bytes leftover after parsing attributes in process `syz.1.646'. [ 159.468164][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.637629][ T8412] netlink: 40 bytes leftover after parsing attributes in process `syz.0.651'. [ 159.665838][ T8414] 8021q: VLANs not supported on lo [ 159.676505][ T8414] : renamed from dummy0 (while UP) [ 159.783262][ T8417] netlink: 52 bytes leftover after parsing attributes in process `syz.1.653'. [ 159.869760][ T8417] netlink: 52 bytes leftover after parsing attributes in process `syz.1.653'. [ 160.041737][ T8432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.656'. [ 160.239012][ T8440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.659'. [ 160.275378][ T8440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.659'. [ 160.335472][ T8440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.659'. [ 160.381159][ T8445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.660'. [ 160.415999][ T8445] xfrm1: entered promiscuous mode [ 160.425880][ T8445] xfrm1: entered allmulticast mode [ 161.099113][ T8481] vcan0: tx address claim with different name [ 161.465838][ T8508] veth1_macvtap: left promiscuous mode [ 161.697177][ T5898] net_ratelimit: 5 callbacks suppressed [ 161.697197][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.896419][ T8534] bridge_slave_0: left allmulticast mode [ 161.942192][ T8534] bridge_slave_0: left promiscuous mode [ 161.952557][ T8534] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.290297][ T12] tipc: Subscription rejected, illegal request [ 162.358983][ T8552] netlink: 'syz.2.682': attribute type 1 has an invalid length. [ 162.454734][ T8552] 8021q: adding VLAN 0 to HW filter on device bond3 [ 162.468950][ T8558] ipt_REJECT: TCP_RESET invalid for non-tcp [ 162.528452][ T8560] 8021q: adding VLAN 0 to HW filter on device bond3 [ 162.535969][ T8560] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 162.548057][ T8560] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 162.641083][ T8552] veth3: entered promiscuous mode [ 162.681212][ T8563] 8021q: adding VLAN 0 to HW filter on device bond3 [ 162.737586][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.886431][ T8577] netlink: 'syz.1.685': attribute type 10 has an invalid length. [ 162.894504][ T8574] netlink: 'syz.0.686': attribute type 3 has an invalid length. [ 162.904492][ T8578] netlink: 'syz.1.685': attribute type 10 has an invalid length. [ 163.026710][ T8577] team0 (unregistering): Port device team_slave_0 removed [ 163.091207][ T8577] team0 (unregistering): Port device team_slave_1 removed [ 163.869116][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.257242][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.373020][ T8652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.746069][ T8675] __nla_validate_parse: 9 callbacks suppressed [ 164.746091][ T8675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.708'. [ 164.772906][ T8671] netlink: 'syz.3.709': attribute type 1 has an invalid length. [ 164.801540][ T8671] netlink: 224 bytes leftover after parsing attributes in process `syz.3.709'. [ 164.899518][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.216074][ T8691] netlink: 'syz.4.711': attribute type 3 has an invalid length. [ 165.549565][ T8676] netlink: 388 bytes leftover after parsing attributes in process `syz.1.707'. [ 165.619116][ T8714] netlink: 112 bytes leftover after parsing attributes in process `syz.2.715'. [ 165.942343][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.961574][ T8741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.970295][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.042628][ T8743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.718'. [ 166.087629][ T8743] netlink: 'syz.4.718': attribute type 5 has an invalid length. [ 166.109128][ T8745] netlink: 20 bytes leftover after parsing attributes in process `syz.3.717'. [ 166.139917][ T8743] netlink: 20 bytes leftover after parsing attributes in process `syz.4.718'. [ 166.173784][ T8745] netlink: 20 bytes leftover after parsing attributes in process `syz.3.717'. [ 166.298001][ T8744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.717'. [ 166.338220][ T8744] block nbd0: Unsupported socket: should be TCP or UNIX. [ 166.446606][ T8759] netlink: 92 bytes leftover after parsing attributes in process `syz.4.722'. [ 166.474502][ T8763] netlink: 'syz.0.724': attribute type 3 has an invalid length. [ 166.504563][ T8759] netlink: 'syz.4.722': attribute type 1 has an invalid length. [ 166.517061][ T8764] netlink: 'syz.0.724': attribute type 3 has an invalid length. [ 166.848395][ T8779] netlink: 'syz.1.728': attribute type 1 has an invalid length. [ 166.979160][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.315733][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.629371][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.695655][ T8815] netlink: 'syz.1.739': attribute type 1 has an invalid length. [ 167.748570][ T8816] veth0_to_bond: left allmulticast mode [ 167.773024][ T8816] veth0_to_bond: left promiscuous mode [ 167.824164][ T8816] bridge2: port 2(veth0_to_bond) entered disabled state [ 167.902241][ T8819] netlink: 'syz.2.740': attribute type 1 has an invalid length. [ 167.922133][ T8819] netlink: 'syz.2.740': attribute type 2 has an invalid length. [ 168.017342][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.088033][ T8832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.096403][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.204151][ T8833] tipc: Enabled bearer , priority 0 [ 168.224205][ T8841] ieee802154 phy1 wpan1: encryption failed: -22 [ 168.258776][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.433737][ T8842] syzkaller0: entered promiscuous mode [ 168.439489][ T8842] syzkaller0: entered allmulticast mode [ 168.445995][ T8842] tipc: Resetting bearer [ 168.514817][ T8831] tipc: Resetting bearer [ 168.547713][ T8852] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 168.733876][ T8861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.743022][ T8859] openvswitch: netlink: IP tunnel attribute has 6 unknown bytes. [ 168.768324][ T8859] xt_TPROXY: Can be used only with -p tcp or -p udp [ 168.914582][ T8870] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 169.057397][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.935101][ T8914] __nla_validate_parse: 41 callbacks suppressed [ 169.935122][ T8914] netlink: 28 bytes leftover after parsing attributes in process `syz.4.758'. [ 170.100977][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.138146][ T8831] tipc: Disabling bearer [ 171.182433][ T9] tipc: Node number set to 3710637645 [ 171.376180][ T8924] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 171.454873][ T8928] ieee802154 phy1 wpan1: encryption failed: -22 [ 171.687959][ T8941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.764'. [ 171.742284][ T8942] validate_nla: 65 callbacks suppressed [ 171.742305][ T8942] netlink: 'syz.0.762': attribute type 10 has an invalid length. [ 171.775043][ T8942] bridge_slave_1: left allmulticast mode [ 171.808141][ T8942] bridge_slave_1: left promiscuous mode [ 171.829660][ T8942] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.893594][ T8942] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 171.927567][ T8948] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.766'. [ 172.179683][ T5905] net_ratelimit: 3 callbacks suppressed [ 172.179705][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.469068][ T8970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.771'. [ 172.493034][ T5905] IPVS: starting estimator thread 0... [ 172.599116][ T8973] IPVS: using max 28 ests per chain, 67200 per kthread [ 172.614207][ T8981] netlink: 'syz.1.773': attribute type 12 has an invalid length. [ 172.653152][ T8976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.771'. [ 173.185603][ T8996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.779'. [ 173.219937][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.242377][ T8996] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 173.771207][ T9029] tipc: Enabled bearer , priority 0 [ 173.807850][ T9029] syzkaller0: entered promiscuous mode [ 173.813578][ T9029] syzkaller0: entered allmulticast mode [ 173.919721][ T9029] tipc: Resetting bearer [ 173.944960][ T9028] tipc: Resetting bearer [ 173.976251][ T9028] tipc: Disabling bearer [ 173.997974][ T9044] netlink: 144 bytes leftover after parsing attributes in process `syz.1.789'. [ 174.036588][ T9044] netlink: 44 bytes leftover after parsing attributes in process `syz.1.789'. [ 174.181365][ T9055] netlink: 16 bytes leftover after parsing attributes in process `syz.4.792'. [ 174.199605][ T9053] netlink: 'syz.1.791': attribute type 9 has an invalid length. [ 174.210702][ T9056] netlink: 16 bytes leftover after parsing attributes in process `syz.4.792'. [ 174.257320][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.361510][ T9062] bridge0: port 1(veth0_to_bridge) entered blocking state [ 174.374208][ T9062] bridge0: port 1(veth0_to_bridge) entered disabled state [ 174.384982][ T9062] veth0_to_bridge: entered allmulticast mode [ 174.397725][ T9062] veth0_to_bridge: entered promiscuous mode [ 174.497235][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.705149][ T9078] syzkaller0: entered promiscuous mode [ 174.713152][ T9078] syzkaller0: entered allmulticast mode [ 175.053139][ T9095] __nla_validate_parse: 1 callbacks suppressed [ 175.053161][ T9095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.801'. [ 175.298409][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.333407][ T9095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.801'. [ 175.422654][ T9100] 8021q: VLANs not supported on wg2 [ 175.423375][ T9088] netlink: 28 bytes leftover after parsing attributes in process `syz.4.800'. [ 175.507627][ T9099] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 175.842610][ T9130] openvswitch: netlink: IPv4 tunnel dst address is zero [ 176.276028][ T9151] netlink: 12 bytes leftover after parsing attributes in process `syz.4.809'. [ 176.337322][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.777628][ T9163] netlink: 'syz.4.815': attribute type 1 has an invalid length. [ 177.391743][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.502049][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.823'. [ 177.538354][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.547216][ T9201] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.610388][ T9206] netlink: 36 bytes leftover after parsing attributes in process `syz.2.824'. [ 177.651980][ T9201] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.857550][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.101262][ T9218] 8021q: adding VLAN 0 to HW filter on device bond2 [ 178.200945][ T9238] netlink: 44 bytes leftover after parsing attributes in process `syz.2.831'. [ 178.265800][ T9223] 8021q: adding VLAN 0 to HW filter on device bond2 [ 178.281542][ T9223] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 178.338253][ T9223] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 178.375436][ T9227] veth0: entered promiscuous mode [ 178.381499][ T9228] bridge0: entered promiscuous mode [ 178.391273][ T9228] bridge0: left promiscuous mode [ 178.397353][ T9228] veth0: left promiscuous mode [ 178.408397][ T9238] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.417165][ T9238] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.427501][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.472984][ T9246] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 178.537268][ T9246] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.545081][ T9246] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.663921][ T9256] netlink: 72 bytes leftover after parsing attributes in process `syz.0.836'. [ 179.201717][ T9288] netlink: 'syz.2.841': attribute type 1 has an invalid length. [ 179.236097][ T9288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.841'. [ 179.410817][ T9297] openvswitch: netlink: EtherType 50a is less than min 600 [ 179.426615][ T9297] openvswitch: netlink: IPv4 tunnel dst address is zero [ 179.440575][ T9299] openvswitch: netlink: IPv4 tunnel dst address is zero [ 179.453410][ T9297] openvswitch: netlink: IPv4 tunnel dst address is zero [ 179.489055][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.610017][ T9305] netlink: 'syz.3.846': attribute type 2 has an invalid length. [ 179.671413][ T9305] netlink: 100 bytes leftover after parsing attributes in process `syz.3.846'. [ 180.050851][ T9288] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 180.060569][ T9288] team0: Port device batadv1 added [ 180.189025][ T9318] netlink: 64 bytes leftover after parsing attributes in process `syz.3.848'. [ 180.299009][ T9321] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.849'. [ 180.497082][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.835605][ T9356] netlink: 48 bytes leftover after parsing attributes in process `syz.0.857'. [ 181.295300][ T9377] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.861'. [ 181.344329][ T9376] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.861'. [ 181.397178][ T9381] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.863'. [ 181.563885][ T9390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.864'. [ 181.619874][ T9390] hsr_slave_0: left promiscuous mode [ 181.717067][ T9390] hsr_slave_1: left promiscuous mode [ 181.888481][ T9412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.869'. [ 182.187989][ T9425] netlink: 24 bytes leftover after parsing attributes in process `syz.2.872'. [ 182.269671][ T9425] netlink: 24 bytes leftover after parsing attributes in process `syz.2.872'. [ 182.531636][ T9428] net_ratelimit: 4 callbacks suppressed [ 182.531657][ T9428] netlink: set zone limit has 4 unknown bytes [ 182.577311][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.619055][ T9429] netlink: set zone limit has 4 unknown bytes [ 182.718294][ T9451] netlink: 'syz.4.879': attribute type 2 has an invalid length. [ 183.206421][ T9474] xt_l2tp: v2 doesn't support IP mode [ 183.475811][ T5838] Bluetooth: hci4: link tx timeout [ 183.482245][ T5838] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 183.494595][ T5833] Bluetooth: hci4: link tx timeout [ 183.505305][ T5833] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 183.517243][ T5833] Bluetooth: hci4: link tx timeout [ 183.522428][ T5833] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 183.530407][ T5833] Bluetooth: hci4: link tx timeout [ 183.535559][ T5833] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 183.573619][ T5833] Bluetooth: hci4: link tx timeout [ 183.580245][ T5833] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 183.617160][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.626430][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.427772][ T9532] xt_CT: You must specify a L4 protocol and not use inversions on it [ 184.625449][ T9545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.667130][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.683092][ T9544] netlink: Conntrack attr has 3 unknown bytes [ 185.214287][ T9585] __nla_validate_parse: 6 callbacks suppressed [ 185.214308][ T9585] netlink: 12 bytes leftover after parsing attributes in process `syz.3.909'. [ 185.358806][ T9593] netlink: 24 bytes leftover after parsing attributes in process `syz.4.914'. [ 185.537763][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 185.697164][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.944125][ T9620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.970702][ T9627] netlink: 'syz.3.922': attribute type 10 has an invalid length. [ 186.074929][ T9627] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 186.313278][ T5975] hid-generic 0005:0006:5508.0002: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 186.654583][ T9644] fido_id[9644]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 186.694095][ T9658] netlink: 'syz.2.934': attribute type 5 has an invalid length. [ 186.794685][ T9661] netlink: 'syz.2.934': attribute type 5 has an invalid length. [ 186.830984][ T9660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.935'. [ 187.261959][ T9691] netlink: 24 bytes leftover after parsing attributes in process `syz.4.940'. [ 187.375945][ T9678] syzkaller0: entered promiscuous mode [ 187.382653][ T9678] syzkaller0: entered allmulticast mode [ 187.618187][ T9703] netlink: 'syz.4.943': attribute type 1 has an invalid length. [ 187.658284][ T9705] syzkaller0: entered promiscuous mode [ 187.665722][ T9705] syzkaller0: entered allmulticast mode [ 187.781112][ T5898] net_ratelimit: 66 callbacks suppressed [ 187.781132][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.824554][ T9709] [ 187.827011][ T9709] ====================================================== [ 187.834075][ T9709] WARNING: possible circular locking dependency detected [ 187.841239][ T9709] syzkaller #0 Not tainted [ 187.845753][ T9709] ------------------------------------------------------ [ 187.852893][ T9709] syz.4.943/9709 is trying to acquire lock: [ 187.859094][ T9709] ffffffff8fb28478 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xbe/0x860 [ 187.868854][ T9709] [ 187.868854][ T9709] but task is already holding lock: [ 187.876351][ T9709] ffffffff8fb28418 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 187.885990][ T9709] [ 187.885990][ T9709] which lock already depends on the new lock. [ 187.885990][ T9709] [ 187.896616][ T9709] [ 187.896616][ T9709] the existing dependency chain (in reverse order) is: [ 187.905666][ T9709] [ 187.905666][ T9709] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 187.913672][ T9709] _raw_spin_lock_bh+0x36/0x50 [ 187.919007][ T9709] nr_rt_ioctl+0x40c/0xf90 [ 187.924078][ T9709] sock_do_ioctl+0x101/0x320 [ 187.929216][ T9709] sock_ioctl+0x5c6/0x7f0 [ 187.934120][ T9709] __se_sys_ioctl+0xfc/0x170 [ 187.939299][ T9709] do_syscall_64+0xe2/0xf80 [ 187.944381][ T9709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.950850][ T9709] [ 187.950850][ T9709] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 187.958970][ T9709] _raw_spin_lock_bh+0x36/0x50 [ 187.964395][ T9709] nr_rt_ioctl+0x215/0xf90 [ 187.969366][ T9709] sock_do_ioctl+0x101/0x320 [ 187.974510][ T9709] sock_ioctl+0x5c6/0x7f0 [ 187.979407][ T9709] __se_sys_ioctl+0xfc/0x170 [ 187.984592][ T9709] do_syscall_64+0xe2/0xf80 [ 187.989654][ T9709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.996106][ T9709] [ 187.996106][ T9709] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 188.003994][ T9709] __lock_acquire+0x15a5/0x2cf0 [ 188.009412][ T9709] lock_acquire+0x106/0x330 [ 188.014466][ T9709] _raw_spin_lock_bh+0x36/0x50 [ 188.019788][ T9709] nr_rt_device_down+0xbe/0x860 [ 188.025197][ T9709] nr_device_event+0x137/0x150 [ 188.030505][ T9709] notifier_call_chain+0x19d/0x3a0 [ 188.036167][ T9709] __dev_notify_flags+0x16d/0x310 [ 188.041741][ T9709] netif_change_flags+0xe8/0x1a0 [ 188.047224][ T9709] dev_change_flags+0x130/0x260 [ 188.052621][ T9709] dev_ioctl+0x7b4/0x1150 [ 188.057502][ T9709] sock_do_ioctl+0x23e/0x320 [ 188.062643][ T9709] sock_ioctl+0x5c6/0x7f0 [ 188.067531][ T9709] __se_sys_ioctl+0xfc/0x170 [ 188.072675][ T9709] do_syscall_64+0xe2/0xf80 [ 188.077896][ T9709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.084425][ T9709] [ 188.084425][ T9709] other info that might help us debug this: [ 188.084425][ T9709] [ 188.094687][ T9709] Chain exists of: [ 188.094687][ T9709] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 188.094687][ T9709] [ 188.108639][ T9709] Possible unsafe locking scenario: [ 188.108639][ T9709] [ 188.116116][ T9709] CPU0 CPU1 [ 188.121502][ T9709] ---- ---- [ 188.126889][ T9709] lock(nr_neigh_list_lock); [ 188.131610][ T9709] lock(&nr_node->node_lock); [ 188.139105][ T9709] lock(nr_neigh_list_lock); [ 188.146507][ T9709] lock(nr_node_list_lock); [ 188.151430][ T9709] [ 188.151430][ T9709] *** DEADLOCK *** [ 188.151430][ T9709] [ 188.159716][ T9709] 2 locks held by syz.4.943/9709: [ 188.164771][ T9709] #0: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 188.173722][ T9709] #1: ffffffff8fb28418 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 188.183870][ T9709] [ 188.183870][ T9709] stack backtrace: [ 188.189794][ T9709] CPU: 0 UID: 0 PID: 9709 Comm: syz.4.943 Not tainted syzkaller #0 PREEMPT(full) [ 188.189817][ T9709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 188.189828][ T9709] Call Trace: [ 188.189835][ T9709] [ 188.189844][ T9709] dump_stack_lvl+0xe8/0x150 [ 188.189870][ T9709] print_circular_bug+0x2e1/0x300 [ 188.189891][ T9709] check_noncircular+0x12e/0x150 [ 188.189910][ T9709] __lock_acquire+0x15a5/0x2cf0 [ 188.189938][ T9709] ? __lock_acquire+0x6b5/0x2cf0 [ 188.189962][ T9709] ? dsa_user_netdevice_event+0x495/0x2850 [ 188.189981][ T9709] ? nr_rt_device_down+0xbe/0x860 [ 188.190004][ T9709] lock_acquire+0x106/0x330 [ 188.190026][ T9709] ? nr_rt_device_down+0xbe/0x860 [ 188.190050][ T9709] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 188.190071][ T9709] ? nr_rt_device_down+0xbe/0x860 [ 188.190092][ T9709] _raw_spin_lock_bh+0x36/0x50 [ 188.190116][ T9709] ? nr_rt_device_down+0xbe/0x860 [ 188.190138][ T9709] nr_rt_device_down+0xbe/0x860 [ 188.190164][ T9709] nr_device_event+0x137/0x150 [ 188.190184][ T9709] notifier_call_chain+0x19d/0x3a0 [ 188.190204][ T9709] __dev_notify_flags+0x16d/0x310 [ 188.190227][ T9709] ? __pfx___dev_notify_flags+0x10/0x10 [ 188.190246][ T9709] ? __dev_change_flags+0x4c6/0x690 [ 188.190268][ T9709] ? __pfx___dev_change_flags+0x10/0x10 [ 188.190290][ T9709] ? full_name_hash+0x92/0xe0 [ 188.190310][ T9709] netif_change_flags+0xe8/0x1a0 [ 188.190338][ T9709] dev_change_flags+0x130/0x260 [ 188.190361][ T9709] dev_ioctl+0x7b4/0x1150 [ 188.190381][ T9709] sock_do_ioctl+0x23e/0x320 [ 188.190397][ T9709] ? __pfx_sock_do_ioctl+0x10/0x10 [ 188.190418][ T9709] sock_ioctl+0x5c6/0x7f0 [ 188.190443][ T9709] ? __pfx_sock_ioctl+0x10/0x10 [ 188.190467][ T9709] ? __fget_files+0x2a/0x420 [ 188.190484][ T9709] ? __fget_files+0x3a0/0x420 [ 188.190502][ T9709] ? __fget_files+0x2a/0x420 [ 188.190520][ T9709] ? bpf_lsm_file_ioctl+0x9/0x20 [ 188.190540][ T9709] ? __pfx_sock_ioctl+0x10/0x10 [ 188.190563][ T9709] __se_sys_ioctl+0xfc/0x170 [ 188.190586][ T9709] do_syscall_64+0xe2/0xf80 [ 188.190604][ T9709] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.190620][ T9709] ? trace_irq_disable+0x37/0x100 [ 188.190636][ T9709] ? clear_bhb_loop+0x60/0xb0 [ 188.190653][ T9709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.190671][ T9709] RIP: 0033:0x7fa9ef39aeb9 [ 188.190693][ T9709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.190707][ T9709] RSP: 002b:00007fa9ed5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.190726][ T9709] RAX: ffffffffffffffda RBX: 00007fa9ef616090 RCX: 00007fa9ef39aeb9 [ 188.190746][ T9709] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 188.190757][ T9709] RBP: 00007fa9ef408c1f R08: 0000000000000000 R09: 0000000000000000 [ 188.190768][ T9709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.190777][ T9709] R13: 00007fa9ef616128 R14: 00007fa9ef616090 R15: 00007ffc2dda0a48 [ 188.190797][ T9709] [ 188.513220][ T9710] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 188.521984][ T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 188.546303][ T7727] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 188.569363][ T7727] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 188.590857][ T7727] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 188.817079][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.456869][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 189.700840][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.858458][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.896968][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.948541][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.740637][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.977961][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.017996][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.056969][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.785508][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.098528][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.057925][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.147087][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog