last executing test programs: 12.744084516s ago: executing program 3 (id=13235): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x3000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x1000000, 0x12, r3, 0x80000000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r5, 0x0) mmap(&(0x7f0000692000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) 12.576452914s ago: executing program 2 (id=13236): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5656d, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0x1, 0xb}, {0x7, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x13, 0x7, 0x8, 0xfbee}, 0x8000002, 0x1, 0x3, 0x5, 0xe, 0x6, 0xd, 0x18, 0x5, 0x2, {0x6, 0xc, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000480)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000500), 0x56) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000640)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 12.378363927s ago: executing program 3 (id=13238): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt(0xffffffffffffffff, 0x1, 0xa, 0x0, &(0x7f00000003c0)) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000ec0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000007802"], &(0x7f0000003000)=0x2a0) 12.110866535s ago: executing program 0 (id=13239): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f0000000000)) 12.057802959s ago: executing program 2 (id=13240): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r1) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @random="0100003600"}) socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0x7101}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000700)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2a, 0x4, {0x0, 0x0, 0x74, r5, {0xeffe068f8514295, 0x6}, {0xafabc05531515610, 0x2}, {0xfff2, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) 11.663698012s ago: executing program 0 (id=13241): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x8397cfd36601e9d7}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x635d, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40c8844}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 10.677465036s ago: executing program 4 (id=13244): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000003c0)=0x1, 0x4) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/133, 0x85}], 0x9}, 0x10122) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)='X', 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0xffffffffffffff94, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 10.275741879s ago: executing program 4 (id=13245): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x4, 0xe, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x2}, 0x8, 0x10, &(0x7f0000001500), 0x10}, 0x46) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x44, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x44}}, 0x0) listen(r1, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x4000090) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001540)={r0, 0x702, 0xe98, 0x0, &(0x7f00000015c0)="e460334470d8d400eb00c15286dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10.231790324s ago: executing program 3 (id=13246): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv', 0x2) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvmsg(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40000002) sendmmsg$alg(r2, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040}], 0x1, 0x40) shutdown(r0, 0x1) 9.84503037s ago: executing program 3 (id=13247): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000cc0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0x0, 0x1, 0x1}}]}}]}, 0x44}}, 0x4084) sendmsg$nl_route_sched(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000001000)={'syzkaller0\x00', 0x1}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001040)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000001080), 0x56) sendmsg$kcm(r4, &(0x7f00000010c0)={&(0x7f0000001100)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000001180)=[{&(0x7f00000011c0)="27030200591114000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 9.002978924s ago: executing program 4 (id=13249): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000880)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000900)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000a40)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000a80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x0, 0x20000000, 0x80000001, 0x7}, 0x4d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000412) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000c00), 0x56) sendmsg$kcm(r6, &(0x7f0000000c40)={&(0x7f0000000c80)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000d40)="27030200dc0f14000e0040000014c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 6.304221851s ago: executing program 0 (id=13250): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0xd, 0x767, 0x4, 0x8}, 0x2, 0x0, 0x7, 0x5, 0x72, 0x6, 0x15, 0x9, 0x2, 0x10, {0x0, 0x6, 0x8, 0x8, 0x3ff, 0xa}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000440)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f00000004c0), 0x56) sendmsg$kcm(r4, &(0x7f0000000500)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000600)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 6.209048619s ago: executing program 1 (id=13251): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000140), 0x4) bind$rds(r1, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000140), 0x4) bind$rds(r2, &(0x7f00000001c0)={0x2, 0x4e21, @loopback}, 0x10) connect$rds(r1, &(0x7f00000001c0)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000200)={&(0x7f00000001c0)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000280)=""/4, 0x4}], 0x1}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) close(r1) close(r2) 5.965039182s ago: executing program 2 (id=13252): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x129642, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a80)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x8}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x105, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0xb, 0x688, 0xffff, 0x0, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x59, 0x3, 0x80, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x1, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9b, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x9, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0xfffffffe, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x4, 0xffff8001, 0x8001, 0xffff, 0x5, 0x0, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000ec0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r9, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 5.832010496s ago: executing program 3 (id=13253): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000d40)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xc, 0xb}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', @broadcast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000440), 0x56) sendmsg$kcm(r4, &(0x7f00000007c0)={&(0x7f0000000800)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000e80)="27030200592b14120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 5.812182311s ago: executing program 1 (id=13254): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = socket$xdp(0x2c, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000380)={&(0x7f0000004000)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000006000)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000006040)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000006080)=0x10, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000006100)={'veth0_to_bond\x00', 0x0}) bind$xdp(r0, &(0x7f0000006140)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x84) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) pselect6(0x40, &(0x7f0000006180)={0x8, 0x8001, 0x3, 0x300, 0x0, 0x0, 0x9c28}, 0x0, &(0x7f00000061c0)={0x3ff, 0x4000000000002, 0x8000000000000, 0x9, 0x0, 0xfffffffffffffffe, 0x7, 0x9}, 0x0, 0x0) 2.388878182s ago: executing program 4 (id=13255): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000080)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000380200000200000008000100", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x48844) write$nci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="500404"], 0x7) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 2.221803372s ago: executing program 1 (id=13256): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r6) pipe(0x0) 2.174852104s ago: executing program 0 (id=13257): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xffffffffffffffff}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x48}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x4001}) socket$inet(0x2, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000001bc0)='ns/cgroup\x00') socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001cc0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001dc0)={0x44, r3, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x14, 0x1, "4abee33957edf8aaae14574df4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac04}]}]}, 0x44}}, 0x0) 2.111105107s ago: executing program 2 (id=13258): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x7001}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x4}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xfe}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080c1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000005c0), 0x56) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000640)=@xdp={0x2c, 0x0, r6, 0x3e, 0xffffffff}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000700)="27030200d1eb14120600002fb96dbcf706e10500400086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2.005219306s ago: executing program 3 (id=13259): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r2) r3 = socket(0x400000000010, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000005c0)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="180800000000000000000000000000008500000023000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a00000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000780)=r5) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f0000000400)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r6, 0x1000007}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000500)="03", 0x1}], 0x1}, 0x20000015) 1.965388757s ago: executing program 4 (id=13260): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "ffffffffffffffff", "e071e70aed0a5ef79f52ae34f3a61cf7", "88318644", "a915950f158d5a6b"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "a06adadb1e8803ec", "de0000006deed7f21d74bc440900", "9884f958", "060000000000f8c7"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)='X', 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 1.699429008s ago: executing program 1 (id=13261): socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='devices.list\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.422726192s ago: executing program 1 (id=13262): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0103000000000000d500030000000900010073797a300000000028000000000a01040000000000000000030000000900010073797a3000000000080002400000000130000000030a03000000000000000000030000000900030073797a30000000000900010073797a30000000000400048014"], 0xa0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000380)={&(0x7f0000004000)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000006000)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000006040)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000006080)=0x10, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000006100)={'veth0_to_bond\x00', 0x0}) bind$xdp(r1, &(0x7f0000006140)={0x2c, 0x2, r3, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r1, 0x80000000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1}, 0xfffffffffffffefd) pselect6(0x40, &(0x7f0000006180)={0x8, 0x8001, 0x3, 0x300, 0x0, 0x0, 0x9c28}, 0x0, &(0x7f00000061c0)={0x3ff, 0x4000000000002, 0x8000000000000, 0x9, 0x0, 0xfffffffffffffffe, 0x7, 0x9}, 0x0, 0x0) 1.419930342s ago: executing program 0 (id=13263): socket$inet(0x2, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000680)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.255606354s ago: executing program 2 (id=13264): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) 1.069328497s ago: executing program 1 (id=13265): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000090000000000000000000000850000002c000000850000000800000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0x6}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4002, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x10}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) close(0x4) 971.97732ms ago: executing program 0 (id=13266): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x20a201, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x8, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x4, 0xc, 0x1, 0x6, 0x82}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000400), 0x56) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000480)=@xdp={0x2c, 0x0, r7, 0x36}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000540)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000580)="442ea407603a16ff", 0x8}], 0x2}, 0x20000085) 857.999376ms ago: executing program 2 (id=13267): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xfffffffb}, 0x5, 0x34, 0x91f}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0x16}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x18000, 0x2, 0x1, 0x5, 0xb, 0xfffffffc}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000b0}, 0xc0d0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 4 (id=13268): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x0, 0x3e8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000081}, 0x84) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtclass={0x44, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x4, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0x14, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x0, 0x3e8}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x1}}]}}]}, 0x40}}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) close(r6) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000640)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000006c0)={&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000780)=[{&(0x7f00000007c0)="80", 0x1}], 0x1}, 0x4) kernel console output (not intermixed with test programs): match found [ 561.055660][T25492] IPv6: Can't replace route, no match found [ 561.333473][T25503] netlink: 'syz.3.9375': attribute type 2 has an invalid length. [ 561.433175][T25508] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9377'. [ 562.372175][T25547] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 562.820545][T25560] netlink: 'syz.0.9401': attribute type 83 has an invalid length. [ 563.210672][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.961459][T25604] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9422'. [ 564.423965][T25617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9429'. [ 565.298669][T25650] erspan0: entered promiscuous mode [ 565.863510][T25665] erspan0: entered promiscuous mode [ 566.234415][T25682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9459'. [ 566.327698][T25689] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 566.414171][T25691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9465'. [ 567.329404][T25714] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9475'. [ 567.412103][T25717] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9477'. [ 568.321073][T25754] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9494'. [ 568.430074][T25758] tap0: tun_chr_ioctl cmd 1074025672 [ 568.430098][T25758] tap0: ignored: set checksum disabled [ 568.725662][T25768] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9502'. [ 568.870395][T25773] netlink: 'syz.1.9503': attribute type 1 has an invalid length. [ 569.107760][ T5645] block nbd296: Receive control failed (result -32) [ 569.830170][T25812] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9522'. [ 569.981584][T25816] netlink: 88 bytes leftover after parsing attributes in process `syz.4.9523'. [ 570.138700][T25826] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9528'. [ 570.775610][T25851] nbd2: detected capacity change from 0 to 274877906944 [ 570.788683][T25855] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 570.794725][ T5645] block nbd2: Receive control failed (result -104) [ 572.227609][T25911] netlink: 'syz.3.9571': attribute type 2 has an invalid length. [ 572.227635][T25911] netlink: 100 bytes leftover after parsing attributes in process `syz.3.9571'. [ 572.597140][T25924] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 573.201460][T25949] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9587'. [ 573.201535][T25949] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 573.201547][T25949] IPv6: NLM_F_CREATE should be set when creating new route [ 573.201660][T25949] IPv6: NLM_F_CREATE should be set when creating new route [ 577.905259][T26109] netlink: 'syz.1.9661': attribute type 21 has an invalid length. [ 577.905287][T26109] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9661'. [ 579.245810][T26156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9683'. [ 579.371910][T26160] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 579.737651][T26173] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9692'. [ 579.737808][T26173] netlink: 6 bytes leftover after parsing attributes in process `syz.2.9692'. [ 579.994085][T26181] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9694'. [ 580.008080][T26181] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.009659][T26181] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.399192][T26195] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9701'. [ 580.399226][T26195] nbd: socks must be embedded in a SOCK_ITEM attr [ 581.644332][T26246] netlink: 31 bytes leftover after parsing attributes in process `syz.1.9726'. [ 581.644398][T26246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9726'. [ 581.644419][T26246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9726'. [ 582.053741][T26263] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9735'. [ 583.021979][T26289] IPVS: rr: SCTP 127.0.0.1:20000 - no destination available [ 584.138851][T26334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9769'. [ 584.200830][T26337] veth1_macvtap: left promiscuous mode [ 584.200872][T26337] macsec0: entered allmulticast mode [ 584.239710][T26337] veth1_macvtap: entered promiscuous mode [ 584.239928][T26337] veth1_macvtap: entered allmulticast mode [ 584.240648][T26337] macsec0: left allmulticast mode [ 584.240664][T26337] veth1_macvtap: left allmulticast mode [ 584.523314][T26348] Cannot find set identified by id 4 to match [ 584.674295][T26357] netlink: 'syz.0.9777': attribute type 2 has an invalid length. [ 584.777776][T26361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9777'. [ 584.813207][T26357] !: entered promiscuous mode [ 584.826966][T26361] !: left promiscuous mode [ 586.336871][T26422] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9806'. [ 586.337417][T26423] tipc: Enabled bearer , priority 10 [ 586.345749][T26422] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9806'. [ 586.365617][T26423] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 587.337497][T26184] tipc: Node number set to 43690 [ 587.767924][T26473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9829'. [ 588.990389][T26518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9850'. [ 589.009826][T26518] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9850'. [ 589.009876][T26518] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9850'. [ 589.452882][T26539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9859'. [ 589.673875][T26549] netlink: 'syz.2.9865': attribute type 3 has an invalid length. [ 589.673903][T26549] netlink: 'syz.2.9865': attribute type 2 has an invalid length. [ 590.416035][T26578] netlink: 71 bytes leftover after parsing attributes in process `syz.3.9879'. [ 590.737261][T26585] sctp: [Deprecated]: syz.4.9882 (pid 26585) Use of int in max_burst socket option deprecated. [ 590.737261][T26585] Use struct sctp_assoc_value instead [ 590.745840][T26589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9884'. [ 591.199497][T26600] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 591.691920][T26610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9894'. [ 591.692017][T26610] dummy0: Caught tx_queue_len zero misconfig [ 591.731050][T26614] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9895'. [ 591.922073][T26618] blkio.reset_stats is deprecated [ 591.998401][T26624] ip_tables: iptables: counters copy to user failed while replacing table [ 592.005432][T26621] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9900'. [ 592.089262][T26628] netlink: 'syz.4.9904': attribute type 4 has an invalid length. [ 593.511509][T26679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9927'. [ 594.405085][T26720] xt_hashlimit: size too large, truncated to 1048576 [ 594.472596][T26723] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.9947'. [ 594.496520][T26723] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 594.504335][T26723] 0ªX¹¦Dö»: entered allmulticast mode [ 595.063345][T26738] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9953'. [ 595.533407][T26752] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 595.604612][T26754] bond0: option miimon: invalid value (18446744071829782528) [ 595.604642][T26754] bond0: option miimon: allowed values 0 - 2147483647 [ 596.254024][T26779] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9973'. [ 596.254055][T26779] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9973'. [ 597.390503][T26815] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.9990'. [ 598.456325][T26857] netlink: 'syz.3.10009': attribute type 8 has an invalid length. [ 599.142388][T26879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10021'. [ 599.142418][T26879] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10021'. [ 600.133935][T26917] netlink: 'syz.1.10038': attribute type 5 has an invalid length. [ 600.986159][ T4961] block nbd2: Possible stuck request ffff88802823e000: control (read@0,4096B). Runtime 30 seconds [ 601.182197][T26950] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 602.515387][T26999] veth0: entered promiscuous mode [ 602.532639][T26995] veth0: left promiscuous mode [ 603.752065][T27049] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.10102'. [ 605.664960][T27106] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10127'. [ 605.793991][T27112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10131'. [ 605.893197][T27116] gtp0: entered promiscuous mode [ 605.893223][T27116] gtp0: entered allmulticast mode [ 607.502036][T27174] ip_tables: iptables: counters copy to user failed while replacing table [ 607.673025][T27181] tipc: New replicast peer: 255.255.255.255 [ 607.674059][T27181] tipc: Enabled bearer , priority 10 [ 608.526230][T27208] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 608.718496][T27216] netlink: 104 bytes leftover after parsing attributes in process `syz.4.10171'. [ 608.748003][T27219] netlink: 104 bytes leftover after parsing attributes in process `syz.3.10172'. [ 608.797519][T26184] tipc: Node number set to 2886997039 [ 608.910590][T27221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10174'. [ 608.910630][T27221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10174'. [ 609.074601][T27232] netlink: 112 bytes leftover after parsing attributes in process `syz.1.10180'. [ 609.444835][T27248] tap0: tun_chr_ioctl cmd 2148553947 [ 610.224638][T27265] netlink: 284 bytes leftover after parsing attributes in process `syz.2.10193'. [ 612.146868][T27337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10227'. [ 612.336172][T27343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10230'. [ 612.381590][T27345] tun0: tun_chr_ioctl cmd 1074025675 [ 612.381615][T27345] tun0: persist disabled [ 612.637145][T27356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10235'. [ 613.697248][ T5645] Bluetooth: hci2: command 0x0406 tx timeout [ 613.975552][T27410] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10258'. [ 614.632179][T27428] sctp: [Deprecated]: syz.1.10269 (pid 27428) Use of int in max_burst socket option. [ 614.632179][T27428] Use struct sctp_assoc_value instead [ 614.972505][T27434] netlink: 'syz.4.10272': attribute type 8 has an invalid length. [ 615.680234][T27443] netlink: 1744 bytes leftover after parsing attributes in process `syz.1.10276'. [ 616.375204][T27474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10289'. [ 617.127573][T27499] netlink: 72 bytes leftover after parsing attributes in process `syz.2.10298'. [ 617.361274][T27512] ip_tables: iptables: counters copy to user failed while replacing table [ 617.638724][T27524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10308'. [ 617.765336][T27530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10313'. [ 618.264239][T27550] netlink: 'syz.1.10318': attribute type 5 has an invalid length. [ 618.527129][T27558] xt_hashlimit: size too large, truncated to 1048576 [ 618.693802][T27559] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 619.190429][T27576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10328'. [ 619.578493][T27593] Dropped outbound packet type=d5b3 [ 620.403044][T27622] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10351'. [ 620.579298][T27631] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10355'. [ 620.579327][T27631] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10355'. [ 620.581324][T27631] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10355'. [ 620.581375][T27631] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10355'. [ 621.273410][T27650] netlink: 'syz.1.10364': attribute type 83 has an invalid length. [ 621.861522][T27675] gre0: Caught tx_queue_len zero misconfig [ 622.600242][T27706] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10389'. [ 623.422323][T27734] netlink: 10 bytes leftover after parsing attributes in process `syz.0.10403'. [ 623.831942][T27753] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 623.917976][T27755] netlink: 196 bytes leftover after parsing attributes in process `syz.2.10417'. [ 624.424907][T27775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10423'. [ 624.624015][T27786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10428'. [ 624.653683][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.708668][T27790] netlink: 'syz.3.10426': attribute type 30 has an invalid length. [ 624.865460][T27795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10431'. [ 624.933784][T27795] smc: removing net device team0 with user defined pnetid SYZ2 [ 624.985230][T27795] team0 (unregistering): Port device team_slave_0 removed [ 625.079406][T27795] team0 (unregistering): Port device team_slave_1 removed [ 625.528077][T27814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10440'. [ 625.665941][T27820] netlink: 'syz.0.10442': attribute type 83 has an invalid length. [ 626.263803][T27846] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10454'. [ 626.263834][T27846] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10454'. [ 626.314845][T27846] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10454'. [ 626.314875][T27846] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10454'. [ 627.020005][T27871] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10463'. [ 627.030269][T27872] v: renamed from vlan1 (while UP) [ 627.040773][T27872] tipc: Disabling bearer [ 627.513931][T27885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10470'. [ 627.887553][T27898] syzkaller1: entered promiscuous mode [ 627.887886][T27898] syzkaller1: entered allmulticast mode [ 629.290414][T27935] netlink: 'syz.3.10490': attribute type 1 has an invalid length. [ 629.351442][T27941] ip_tables: iptables: counters copy to user failed while replacing table [ 630.483844][T27986] tipc: Enabled bearer , priority 0 [ 630.674683][T27992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10516'. [ 630.760077][T27992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10516'. [ 631.047158][ T5645] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 631.047278][ T4961] block nbd2: Possible stuck request ffff88802823e000: control (read@0,4096B). Runtime 60 seconds [ 631.115708][ T4999] udevd[4999]: worker [25783] /devices/virtual/block/nbd2 is taking a long time [ 631.233732][T28009] bridge_slave_1: default FDB implementation only supports local addresses [ 632.907190][T28068] netlink: 'syz.2.10549': attribute type 39 has an invalid length. [ 633.264759][T28067] syzkaller1: entered promiscuous mode [ 633.264789][T28067] syzkaller1: entered allmulticast mode [ 633.719734][T28090] ip_tables: iptables: counters copy to user failed while replacing table [ 634.073648][T28102] pimreg: entered allmulticast mode [ 634.219624][T28107] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10567'. [ 634.219668][T28107] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10567'. [ 635.017099][T28137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10582'. [ 635.017133][T28137] block nbd3: Unsupported socket: should be TCP or UNIX. [ 635.270506][T28143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10585'. [ 635.977391][T28153] IPVS: Scheduler module ip_vs_sip not found [ 636.984115][T28195] netlink: 'syz.2.10609': attribute type 2 has an invalid length. [ 636.988508][T28195] netlink: 'syz.2.10609': attribute type 2 has an invalid length. [ 636.988528][T28195] netlink: 67 bytes leftover after parsing attributes in process `syz.2.10609'. [ 637.434608][T28214] nbd: nbd1 already in use [ 637.435092][T28214] block nbd1: NBD_DISCONNECT [ 637.435244][T28214] block nbd1: Send disconnect failed -32 [ 637.435263][T28214] block nbd1: shutting down sockets [ 639.841476][T28289] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10649'. [ 639.899978][T28289] veth1_to_team: entered promiscuous mode [ 639.928626][T28289] veth1_to_team: left promiscuous mode [ 640.264910][T28302] pimreg: left allmulticast mode [ 640.683776][T28314] nbd: nbd0 already in use [ 640.851076][T28323] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 641.038357][T28325] syzkaller1: entered promiscuous mode [ 641.038594][T28325] syzkaller1: entered allmulticast mode [ 642.453674][T28375] netlink: 'syz.3.10691': attribute type 4 has an invalid length. [ 643.413103][T28411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10706'. [ 643.594699][T28420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10710'. [ 644.483060][T28459] vcan0: tx address claim with different name [ 644.594646][T28467] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10729'. [ 645.340899][T28488] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 645.429803][T28492] bridge0: port 4(veth0) entered blocking state [ 645.432128][T28492] bridge0: port 4(veth0) entered disabled state [ 645.432303][T28492] veth0: entered allmulticast mode [ 645.440453][T28492] veth0: entered promiscuous mode [ 645.472855][T28495] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10742'. [ 647.253628][T28546] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10764'. [ 648.327528][T28577] netlink: 'syz.3.10774': attribute type 2 has an invalid length. [ 649.257912][T28613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10787'. [ 649.258017][T28613] tunl0: Caught tx_queue_len zero misconfig [ 649.267650][T28613] netlink: 65011 bytes leftover after parsing attributes in process `syz.1.10787'. [ 650.272916][T28652] geneve3: entered promiscuous mode [ 650.288096][ T1170] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 40818 - 0 [ 650.288145][ T1170] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 40818 - 0 [ 650.288180][ T1170] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 40818 - 0 [ 650.288212][ T1170] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 40818 - 0 [ 650.496202][T28660] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10811'. [ 650.496248][T28660] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10811'. [ 650.558941][T28663] ip_tables: iptables: counters copy to user failed while replacing table [ 651.378712][T28691] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10824'. [ 652.269403][T28700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10827'. [ 652.711837][T28714] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 652.741888][T28717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10836'. [ 652.843779][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059564400: rx timeout, send abort [ 652.845522][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888059564400: 0x2ff03: (3) A timeout occurred and this is the connection abort to close the session. [ 653.066087][T28729] ip_tables: iptables: counters copy to user failed while replacing table [ 653.363969][T28739] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 653.364449][T28739] gretap2: entered promiscuous mode [ 653.364466][T28739] gretap2: entered allmulticast mode [ 654.240665][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880584b1c00: rx timeout, send abort [ 654.240933][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880584b1c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 654.442751][T28773] netlink: 256 bytes leftover after parsing attributes in process `syz.0.10861'. [ 654.442786][T28773] netlink: 256 bytes leftover after parsing attributes in process `syz.0.10861'. [ 655.224529][T28783] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 655.224571][T28783] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.366698][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 655.743937][T28783] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 655.743978][T28783] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.808452][T28801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10874'. [ 655.808489][T28801] netlink: 'syz.2.10874': attribute type 10 has an invalid length. [ 655.808506][T28801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10874'. [ 655.860003][T28799] syzkaller1: entered promiscuous mode [ 655.860028][T28799] syzkaller1: entered allmulticast mode [ 655.985388][T28805] TCP: TCP_TX_DELAY enabled [ 656.141062][T28783] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 656.141102][T28783] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.381431][T28783] netdevsim netdevsim3  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 656.381470][T28783] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.787193][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.787230][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.901306][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.901343][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.916483][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.916518][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.996729][ T1170] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.996768][ T1170] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.318350][T28835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10889'. [ 657.517601][T28846] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 658.660359][T28894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10915'. [ 658.744645][T28894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10915'. [ 659.534449][T28913] syzkaller1: entered promiscuous mode [ 659.534688][T28913] syzkaller1: entered allmulticast mode [ 660.348390][T28952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10940'. [ 660.387314][T28948] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10937'. [ 660.440101][T28954] ip_tables: iptables: counters copy to user failed while replacing table [ 661.129927][ T4961] block nbd2: Possible stuck request ffff88802823e000: control (read@0,4096B). Runtime 90 seconds [ 661.468414][T28987] tunl0: left promiscuous mode [ 661.577208][T28987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.631239][T28987] macvlan0: left promiscuous mode [ 661.648807][T28987] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 661.649224][T28987] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 661.676679][T28987] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 662.452911][T29017] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10970'. [ 662.452981][T29017] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10970'. [ 662.910063][T29032] syzkaller1: entered promiscuous mode [ 662.910088][T29032] syzkaller1: entered allmulticast mode [ 663.185693][T29035] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10979'. [ 664.028701][T29065] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10993'. [ 664.035073][T29065] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10993'. [ 664.036883][T29065] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10993'. [ 664.798581][T29089] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.11005'. [ 665.352190][T29111] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11016'. [ 665.596837][T29119] pimreg: entered allmulticast mode [ 666.270415][T29150] batadv_slave_1: entered promiscuous mode [ 666.279976][T29147] batadv_slave_1: left promiscuous mode [ 667.024617][T29176] netlink: 'syz.1.11044': attribute type 12 has an invalid length. [ 667.024641][T29176] netlink: 'syz.1.11044': attribute type 29 has an invalid length. [ 667.024655][T29176] netlink: 148 bytes leftover after parsing attributes in process `syz.1.11044'. [ 667.065030][T29176] netlink: 'syz.1.11044': attribute type 1 has an invalid length. [ 667.065056][T29176] netlink: 'syz.1.11044': attribute type 2 has an invalid length. [ 667.065069][T29176] netlink: 15 bytes leftover after parsing attributes in process `syz.1.11044'. [ 667.174899][T29178] syzkaller1: entered promiscuous mode [ 667.174926][T29178] syzkaller1: entered allmulticast mode [ 667.689493][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.872899][T29202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.728593][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.933790][T29249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11078'. [ 669.583421][T29264] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11083'. [ 669.583459][T29264] netlink: 'syz.3.11083': attribute type 7 has an invalid length. [ 669.583473][T29264] netlink: 'syz.3.11083': attribute type 8 has an invalid length. [ 669.583485][T29264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11083'. [ 669.760873][T29271] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11086'. [ 669.764295][T29271] netlink: 'syz.2.11086': attribute type 9 has an invalid length. [ 669.764344][T29271] netlink: 23 bytes leftover after parsing attributes in process `syz.2.11086'. [ 670.024501][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.111050][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058409000: rx timeout, send abort [ 670.111440][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888058409000: 0x2ff01: (3) A timeout occurred and this is the connection abort to close the session. [ 670.352335][T29283] wg0: Caught tx_queue_len zero misconfig [ 670.477601][T29287] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11094'. [ 670.481860][T29287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11094'. [ 670.677511][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.677963][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.735371][T11986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.735444][T11986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.735961][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.061954][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.520990][T29324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11111'. [ 672.619389][T29362] __nla_validate_parse: 1 callbacks suppressed [ 672.619411][T29362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11127'. [ 672.619649][T29362] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11127'. [ 672.810872][T29366] : entered promiscuous mode [ 673.149118][ T24] net_ratelimit: 1 callbacks suppressed [ 673.149232][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.182281][T29389] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.11137'. [ 673.452559][T29395] sctp: [Deprecated]: syz.4.11138 (pid 29395) Use of struct sctp_assoc_value in delayed_ack socket option. [ 673.452559][T29395] Use struct sctp_sack_info instead [ 673.588783][T29399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.588972][T29399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.589052][T29399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.589128][T29399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.589211][T29399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.589288][T29399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.590555][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.188190][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.602953][T29436] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11156'. [ 674.602991][T29436] bond0: ARP target 8.4.0.0 is already present [ 674.603010][T29436] bond0: option arp_ip_target: invalid value (1032) [ 674.942702][T29444] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11160'. [ 674.982051][T29440] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11159'. [ 675.245273][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.104632][T29487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11180'. [ 676.497490][T29504] netlink: 'syz.3.11187': attribute type 11 has an invalid length. [ 677.088002][T29525] C: renamed from lo [ 678.326920][ C1] net_ratelimit: 13 callbacks suppressed [ 678.326944][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.773628][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.179203][T29598] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 679.181389][T29598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.182357][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.281013][T29601] bond0: invalid NS target ff00:: specified for addition [ 679.281047][T29601] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 679.366743][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.590265][T29612] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11233'. [ 679.590303][T29612] netlink: 'syz.4.11233': attribute type 7 has an invalid length. [ 679.591147][T29612] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11233'. [ 679.714172][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.714991][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.900227][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.167224][T29629] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 681.824786][T29673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11259'. [ 682.113909][T29677] syzkaller1: entered promiscuous mode [ 682.115168][T29677] syzkaller1: entered allmulticast mode [ 682.128678][T29677] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4116 [ 682.843860][T29697] macvlan0: entered promiscuous mode [ 683.308831][T29705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11270'. [ 683.352917][T29705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11270'. [ 683.526902][ C1] net_ratelimit: 23 callbacks suppressed [ 683.526929][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.353181][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.388886][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.477144][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.477691][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.478478][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.887527][T29794] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11302'. [ 685.948767][ T5294] veth0_vlan: left promiscuous mode [ 685.982109][T26189] veth0_vlan: entered promiscuous mode [ 686.093254][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.099153][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.437507][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.486617][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.672773][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.544555][T29844] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.11320'. [ 688.518318][T29884] netlink: 'syz.0.11337': attribute type 9 has an invalid length. [ 688.518348][T29884] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.11337'. [ 688.567253][ C0] net_ratelimit: 8 callbacks suppressed [ 688.567279][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.527367][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.607468][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.751671][T29926] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 690.121065][T29943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.127268][T29943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.146050][T29943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.160576][T29943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.161412][T29943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.161879][T29943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.193883][T29941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.825860][T29968] syzkaller1: entered promiscuous mode [ 690.825887][T29968] syzkaller1: entered allmulticast mode [ 691.221068][ T4961] block nbd2: Possible stuck request ffff88802823e000: control (read@0,4096B). Runtime 120 seconds [ 691.755612][T29999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11386'. [ 692.001094][T30012] veth0: entered promiscuous mode [ 692.004381][T30009] veth0: left promiscuous mode [ 692.026238][T30015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11395'. [ 692.044197][T30015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11395'. [ 692.346289][T30022] sctp: [Deprecated]: syz.1.11398 (pid 30022) Use of struct sctp_assoc_value in delayed_ack socket option. [ 692.346289][T30022] Use struct sctp_sack_info instead [ 692.588257][T30032] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 692.807007][T24048] Bluetooth: hci4: command 0x0406 tx timeout [ 692.959290][T30049] netlink: 27 bytes leftover after parsing attributes in process `syz.4.11409'. [ 693.687444][ T5768] net_ratelimit: 13 callbacks suppressed [ 693.687468][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.766663][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.768302][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.768384][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.768815][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.048020][T30079] syzkaller1: entered promiscuous mode [ 694.048047][T30079] syzkaller1: entered allmulticast mode [ 694.334474][T30087] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 694.508218][T30097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.727849][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.735374][ T1170] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 694.745927][ T1170] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 694.754827][ T1170] bond0: active interface up! [ 694.849137][T30103] ip6gre1: entered promiscuous mode [ 694.849162][T30103] ip6gre1: entered allmulticast mode [ 695.132038][T30116] ip_tables: iptables: counters copy to user failed while replacing table [ 695.699476][T30137] netlink: 'syz.4.11447': attribute type 15 has an invalid length. [ 695.749567][T30137] netlink: 'syz.4.11447': attribute type 15 has an invalid length. [ 695.767750][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.771371][T11986] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 695.771481][T11986] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 695.771558][T11986] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 695.771592][T11986] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 696.791043][T30172] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11463'. [ 697.165010][T30182] netlink: 'syz.1.11466': attribute type 21 has an invalid length. [ 697.165037][T30182] netlink: 'syz.1.11466': attribute type 22 has an invalid length. [ 697.165050][T30182] netlink: 'syz.1.11466': attribute type 23 has an invalid length. [ 697.165063][T30182] netlink: 'syz.1.11466': attribute type 25 has an invalid length. [ 697.165076][T30182] netlink: 'syz.1.11466': attribute type 26 has an invalid length. [ 697.165090][T30182] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11466'. [ 698.696406][ C0] net_ratelimit: 679 callbacks suppressed [ 698.696435][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.696592][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.696744][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.696921][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.697082][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.697233][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.697456][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.697606][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.697755][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.697928][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.239487][T30270] netlink: 'syz.3.11494': attribute type 1 has an invalid length. [ 700.336926][T30270] 8021q: adding VLAN 0 to HW filter on device bond3 [ 700.551913][T30273] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 700.931180][T30294] netlink: 5 bytes leftover after parsing attributes in process `syz.3.11502'. [ 700.954857][T30294] netlink: 5 bytes leftover after parsing attributes in process `syz.3.11502'. [ 700.955980][T30294] netlink: 5 bytes leftover after parsing attributes in process `syz.3.11502'. [ 700.957021][T30294] netlink: 5 bytes leftover after parsing attributes in process `syz.3.11502'. [ 700.958150][T30294] netlink: 5 bytes leftover after parsing attributes in process `syz.3.11502'. [ 701.005870][T30294] netlink: 5 bytes leftover after parsing attributes in process `syz.3.11502'. [ 701.007193][T30294] netlink: 5 bytes leftover after parsing attributes in process `syz.3.11502'. [ 701.008242][T30294] netlink: 5 bytes leftover after parsing attributes in process `syz.3.11502'. [ 701.150599][T11986] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 701.150637][T11986] netdevsim netdevsim4 netdevsim0: unset [0, 1] type 1 family 0 port 2816 - 0 [ 701.150661][T11986] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.150683][T11986] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 703.881068][T30295] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 703.992884][T30372] net_ratelimit: 750 callbacks suppressed [ 703.992904][T30372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.005082][T30372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.167087][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.301719][T30375] __nla_validate_parse: 43 callbacks suppressed [ 704.301743][T30375] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11532'. [ 704.646681][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.656088][T11990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.656525][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.790014][T30394] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 705.204672][T30407] netlink: 156 bytes leftover after parsing attributes in process `syz.3.11545'. [ 705.221269][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.303699][T11990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.303774][T11990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.203082][ T5294] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 706.887421][T30453] netlink: 'syz.0.11559': attribute type 1 has an invalid length. [ 706.888705][T30452] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11558'. [ 707.084689][T30453] bond7: entered promiscuous mode [ 707.090616][T30464] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11561'. [ 707.090652][T30464] netlink: 'syz.3.11561': attribute type 7 has an invalid length. [ 707.090664][T30464] netlink: 'syz.3.11561': attribute type 8 has an invalid length. [ 707.090675][T30464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11561'. [ 707.132160][T30453] 8021q: adding VLAN 0 to HW filter on device bond7 [ 707.243951][T30456] bond7: (slave bridge3): making interface the new active one [ 707.243979][T30456] bridge3: entered promiscuous mode [ 707.262282][T30456] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 708.195061][T30503] netlink: 'syz.2.11573': attribute type 4 has an invalid length. [ 708.210250][T30503] netlink: 'syz.2.11573': attribute type 4 has an invalid length. [ 708.781381][T30525] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11581'. [ 708.814875][T30525] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11581'. [ 709.136568][ T1170] net_ratelimit: 8 callbacks suppressed [ 709.136590][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.227397][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.455363][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.716843][T30558] netlink: 'syz.1.11591': attribute type 14 has an invalid length. [ 709.716870][T30558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11591'. [ 709.769161][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.769641][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.798838][T30558] netlink: 'syz.1.11591': attribute type 14 has an invalid length. [ 709.798865][T30558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11591'. [ 709.806773][ T1170] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.806818][ T1170] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.806859][ T1170] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.927029][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.292555][T30564] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11592'. [ 710.292585][T30564] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11592'. [ 710.292601][T30564] netlink: 5 bytes leftover after parsing attributes in process `syz.3.11592'. [ 710.292920][T30564] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11592'. [ 710.292937][T30564] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11592'. [ 710.292952][T30564] netlink: 5 bytes leftover after parsing attributes in process `syz.3.11592'. [ 710.512648][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.976962][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.076291][T11990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.076471][T11990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.121784][T30580] netlink: 'syz.2.11599': attribute type 2 has an invalid length. [ 711.201661][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880589b6c00: rx timeout, send abort [ 711.701927][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880589b5400: rx timeout, send abort [ 712.201983][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880589b5400: abort rx timeout. Force session deactivation [ 713.898502][ T30] audit: type=1800 audit(1794335790.086:7): pid=30662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.11623" name=680B20 dev="tmpfs" ino=11869 res=0 errno=-22 [ 714.678082][T30690] netlink: 'syz.4.11633': attribute type 22 has an invalid length. [ 714.678109][T30690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11633'. [ 714.680200][T30690] netlink: 'syz.4.11633': attribute type 22 has an invalid length. [ 714.680220][T30690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11633'. [ 714.749324][ T5768] net_ratelimit: 11 callbacks suppressed [ 714.749346][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.917457][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.917888][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.928345][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.949099][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.126539][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.237718][T30709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11638'. [ 715.237746][T30709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11638'. [ 715.793125][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.166779][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.423131][T30755] netlink: 'syz.1.11657': attribute type 16 has an invalid length. [ 716.423194][T30755] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11657'. [ 716.809650][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.809722][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.284430][T30757] v (unregistering): left allmulticast mode [ 717.284456][T30757] veth0_vlan (unregistering): left allmulticast mode [ 717.339111][T30763] veth1_to_bond: invalid flags given to default FDB implementation [ 717.657086][T30785] vlan2: entered allmulticast mode [ 717.657109][T30785] gretap0: entered allmulticast mode [ 718.698866][T30726] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 719.091272][T30820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11670'. [ 719.766455][ C0] net_ratelimit: 8 callbacks suppressed [ 719.766477][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.827390][T30852] netlink: 'syz.4.11681': attribute type 1 has an invalid length. [ 719.827427][T30852] netlink: 16179 bytes leftover after parsing attributes in process `syz.4.11681'. [ 719.959459][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.021672][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.022109][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.291095][T30868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11688'. [ 720.655326][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.655832][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.806634][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.023020][T30886] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11695'. [ 721.290009][ T4961] block nbd2: Possible stuck request ffff88802823e000: control (read@0,4096B). Runtime 150 seconds [ 721.319252][T30896] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11697'. [ 721.353084][T30896] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11697'. [ 721.604632][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.846792][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.924668][T30922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.602118][T30934] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11705'. [ 722.602156][T30934] netlink: 'syz.4.11705': attribute type 7 has an invalid length. [ 722.602169][T30934] netlink: 'syz.4.11705': attribute type 8 has an invalid length. [ 722.602181][T30934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11705'. [ 723.184803][T30958] veth0: entered promiscuous mode [ 723.203053][T30958] veth1_to_bridge: entered promiscuous mode [ 723.210979][T30956] veth1_to_bridge: left promiscuous mode [ 723.211205][T30956] veth0: left promiscuous mode [ 723.565684][T30972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11719'. [ 724.124286][T30989] netlink: 112 bytes leftover after parsing attributes in process `syz.4.11726'. [ 724.607266][T30979] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512 [ 724.807359][ T24] net_ratelimit: 50 callbacks suppressed [ 724.807386][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.056079][T31018] netlink: 14 bytes leftover after parsing attributes in process `syz.3.11740'. [ 725.136489][T11986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.136949][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.145551][T30917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.146494][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.359580][T31028] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11744'. [ 725.411071][T31001] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 725.411654][T31001] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 725.416392][T31028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11744'. [ 725.416441][T31028] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11744'. [ 725.416458][T31028] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11744'. [ 725.530007][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.592399][T31031] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 725.626831][T31036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11750'. [ 725.698529][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.767196][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.847112][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.011982][T31049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11755'. [ 726.012010][T31049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11755'. [ 726.406175][T31063] netlink: 27 bytes leftover after parsing attributes in process `syz.0.11762'. [ 727.051122][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512 [ 727.051245][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512 [ 728.638209][T11986] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 728.803345][T31156] syz_tun: entered allmulticast mode [ 728.815472][T31154] syz_tun: left allmulticast mode [ 728.925347][T31158] syzkaller1: entered promiscuous mode [ 728.926533][T31158] syzkaller1: entered allmulticast mode [ 729.450985][T31173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11808'. [ 729.451014][T31173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 729.451032][T31173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 729.454213][T31173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 729.454236][T31173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 729.926782][ C0] net_ratelimit: 93 callbacks suppressed [ 729.926806][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.927192][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.933373][T31186] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 729.975491][T31186] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 729.987423][T31187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.988259][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.013626][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.013890][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.015105][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.086763][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.428432][T31199] netlink: 'syz.2.11822': attribute type 2 has an invalid length. [ 730.429720][T31199] netlink: 'syz.2.11822': attribute type 2 has an invalid length. [ 730.429738][T31199] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.11822'. [ 731.464072][T31139] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 732.411402][T31250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11842'. [ 732.993543][T31270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11846'. [ 733.114946][T31275] pimreg: left allmulticast mode [ 733.288924][T31281] syzkaller1: entered promiscuous mode [ 733.288951][T31281] syzkaller1: entered allmulticast mode [ 733.449198][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512 [ 733.449350][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512 [ 733.782434][T31302] netlink: 'syz.2.11860': attribute type 1 has an invalid length. [ 733.978352][T31302] 8021q: adding VLAN 0 to HW filter on device bond2 [ 734.082771][T31306] bond2: (slave geneve4): making interface the new active one [ 734.105527][T31306] bond2: (slave geneve4): Enslaving as an active interface with an up link [ 734.224166][T31318] netlink: 'syz.1.11866': attribute type 5 has an invalid length. [ 734.224189][T31318] netlink: 'syz.1.11866': attribute type 9 has an invalid length. [ 734.224204][T31318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11866'. [ 734.259151][T31320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11865'. [ 734.500737][T31329] bond3: (slave C): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 734.534158][T31329] bond3: (slave C): Enslaving as an active interface with an up link [ 734.677402][T31336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11874'. [ 734.797462][T31334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11871'. [ 735.001694][T31346] netlink: 'syz.1.11878': attribute type 4 has an invalid length. [ 735.063634][T31348] netlink: 'syz.1.11878': attribute type 4 has an invalid length. [ 735.217695][ T5768] net_ratelimit: 68 callbacks suppressed [ 735.217720][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.309513][T31357] ip_tables: iptables: counters copy to user failed while replacing table [ 735.367452][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.368015][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.368573][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.526424][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.767176][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.767759][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.768321][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.848009][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.867104][T31379] veth0: entered promiscuous mode [ 735.868588][T31378] veth0: left promiscuous mode [ 735.910938][T31380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11892'. [ 735.910968][T31380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11892'. [ 735.912090][T31380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11892'. [ 735.912108][T31380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11892'. [ 736.074709][T31385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11894'. [ 736.074735][T31385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11894'. [ 736.074760][T31385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11894'. [ 736.331805][T31388] netlink: 'syz.2.11896': attribute type 13 has an invalid length. [ 736.331831][T31388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11896'. [ 736.358789][T31388] netlink: 'syz.2.11896': attribute type 13 has an invalid length. [ 736.358824][T31388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11896'. [ 737.013945][T31414] netlink: 'syz.4.11906': attribute type 1 has an invalid length. [ 737.065580][T31418] tls_set_device_offload_rx: netdev not found [ 737.075460][T31414] 8021q: adding VLAN 0 to HW filter on device bond5 [ 737.614223][T31439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11913'. [ 738.224401][T31455] syzkaller1: entered promiscuous mode [ 738.224425][T31455] syzkaller1: entered allmulticast mode [ 739.858369][T31501] tipc: New replicast peer: 172.20.20.187 [ 739.858785][T31501] tipc: Enabled bearer , priority 10 [ 740.487180][ C0] net_ratelimit: 205 callbacks suppressed [ 740.487204][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.487762][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.542562][T31530] netlink: 'syz.1.11951': attribute type 1 has an invalid length. [ 740.567727][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.617972][T31530] 8021q: adding VLAN 0 to HW filter on device bond6 [ 740.762397][T31536] netlink: 'syz.0.11954': attribute type 1 has an invalid length. [ 740.765224][T31536] netlink: 'syz.0.11954': attribute type 1 has an invalid length. [ 740.806432][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.127095][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.127679][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.606097][T31565] netlink: 'syz.2.11966': attribute type 12 has an invalid length. [ 741.606121][T31565] __nla_validate_parse: 10 callbacks suppressed [ 741.606134][T31565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11966'. [ 741.616192][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.617208][T31565] netlink: 'syz.2.11966': attribute type 12 has an invalid length. [ 741.617240][T31565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11966'. [ 741.777058][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.825450][T31574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11970'. [ 741.825476][T31574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11970'. [ 741.825500][T31574] netlink: 'syz.0.11970': attribute type 15 has an invalid length. [ 741.836493][T31574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11970'. [ 741.836521][T31574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11970'. [ 741.836543][T31574] netlink: 'syz.0.11970': attribute type 15 has an invalid length. [ 741.857061][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.858322][T11986] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 741.858364][T11986] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 741.858394][T11986] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 741.858444][T11986] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 742.328080][T11990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.636208][T31595] netlink: 6 bytes leftover after parsing attributes in process `syz.2.11980'. [ 743.156763][T31611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11986'. [ 743.159738][T31611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11986'. [ 743.165488][T31518] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 743.562689][T31621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11990'. [ 744.721931][T31660] bond7: entered promiscuous mode [ 744.723867][T31660] 8021q: adding VLAN 0 to HW filter on device bond7 [ 745.596662][ C1] net_ratelimit: 49 callbacks suppressed [ 745.596686][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.599612][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.623075][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.623485][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.624353][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.624535][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.626525][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.627408][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.628181][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.628892][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.568271][T31705] pimreg: entered allmulticast mode [ 746.612116][T31704] pimreg: left allmulticast mode [ 747.380547][T31724] netlink: 'syz.0.12029': attribute type 1 has an invalid length. [ 747.541671][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.726566][ T5645] Bluetooth: hci4: command 0x0406 tx timeout [ 749.171306][T31781] netlink: 'syz.1.12051': attribute type 1 has an invalid length. [ 749.265784][T31781] bond8: entered promiscuous mode [ 749.274907][T31781] 8021q: adding VLAN 0 to HW filter on device bond8 [ 749.413916][T31793] 8021q: adding VLAN 0 to HW filter on device bond8 [ 749.424086][T31793] bond8: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 749.424115][T31793] bond8: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 749.466017][T31793] bond8: (slave ip6gre2): making interface the new active one [ 749.466045][T31793] ip6gre2: entered promiscuous mode [ 749.479817][T31793] bond8: (slave ip6gre2): Enslaving as an active interface with an up link [ 749.955885][T31810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 749.955912][T31810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 749.958191][T31810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 749.958212][T31810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 750.304792][T31726] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 750.889929][T31832] __nla_validate_parse: 1 callbacks suppressed [ 750.889954][T31832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12069'. [ 750.890071][T31832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 751.150151][ T24] net_ratelimit: 182 callbacks suppressed [ 751.150173][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.173500][T31832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 751.206617][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.369493][ T4961] block nbd2: Possible stuck request ffff88802823e000: control (read@0,4096B). Runtime 180 seconds [ 751.369907][T31852] netlink: 21 bytes leftover after parsing attributes in process `syz.0.12073'. [ 751.688421][T31857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.690488][T31857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.693312][T31857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.725259][T31857] ip_tables: iptables: counters copy to user failed while replacing table [ 751.736497][T31857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.739270][T31857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.770501][T31856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.772871][T31856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.164294][T31873] veth1_to_bond: entered allmulticast mode [ 752.220787][T31873] veth1_to_bond: left allmulticast mode [ 752.337724][T31879] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12085'. [ 752.552208][T31883] netlink: 'syz.4.12087': attribute type 1 has an invalid length. [ 752.611586][T31891] tipc: Failed to remove unknown binding: 66,1,1/2886997039:909280136/909280138 [ 752.611621][T31891] tipc: Failed to remove unknown binding: 66,1,1/2886997039:909280136/909280138 [ 752.722913][T31883] bond6: entered promiscuous mode [ 752.737690][T31883] 8021q: adding VLAN 0 to HW filter on device bond6 [ 752.852338][T31893] 8021q: adding VLAN 0 to HW filter on device bond6 [ 752.852768][T31893] bond6: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 752.852790][T31893] bond6: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 752.909776][T31893] bond6: (slave ip6gre2): making interface the new active one [ 752.909846][T31893] ip6gre2: entered promiscuous mode [ 752.914929][T31893] bond6: (slave ip6gre2): Enslaving as an active interface with an up link [ 753.333532][ T4999] udevd[4999]: worker [25783] /devices/virtual/block/nbd2 timeout; kill it [ 753.339081][ T4999] udevd[4999]: seq 17632 '/devices/virtual/block/nbd2' killed [ 753.368104][T31919] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12097'. [ 753.630736][T31925] sit0: entered promiscuous mode [ 753.743100][T31925] netlink: 'syz.1.12098': attribute type 1 has an invalid length. [ 753.743127][T31925] netlink: 1 bytes leftover after parsing attributes in process `syz.1.12098'. [ 754.110909][T31938] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12103'. [ 754.738597][T31962] netlink: 'syz.3.12116': attribute type 1 has an invalid length. [ 754.738623][T31962] netlink: 'syz.3.12116': attribute type 4 has an invalid length. [ 754.738635][T31962] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.12116'. [ 754.745923][T31962] netlink: 'syz.3.12116': attribute type 1 has an invalid length. [ 754.745946][T31962] netlink: 'syz.3.12116': attribute type 4 has an invalid length. [ 754.745957][T31962] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.12116'. [ 755.504643][T31983] netlink: 'syz.4.12123': attribute type 19 has an invalid length. [ 755.504668][T31983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12123'. [ 755.504913][T31983] netlink: 'syz.4.12123': attribute type 19 has an invalid length. [ 755.504928][T31983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12123'. [ 755.980659][T31992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12128'. [ 755.988074][T31992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12128'. [ 756.434950][ T24] net_ratelimit: 19 callbacks suppressed [ 756.434974][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.460236][T32008] Bluetooth: ISO socket layer initialized [ 756.488507][T30915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.144471][T32028] netlink: 52 bytes leftover after parsing attributes in process `syz.1.12142'. [ 757.201363][T32029] netlink: 52 bytes leftover after parsing attributes in process `syz.1.12142'. [ 757.364345][T32028] bridge0: port 4(veth0) entered blocking state [ 757.364600][T32028] bridge0: port 4(veth0) entered listening state [ 757.364965][T32028] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.365104][T32028] bridge0: port 2(bridge_slave_1) entered listening state [ 757.365425][T32028] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.365560][T32028] bridge0: port 1(bridge_slave_0) entered listening state [ 757.462332][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.526486][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.772650][T11990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.773723][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.408884][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.546958][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.566488][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.906202][T32060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12155'. [ 759.058325][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.369332][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 759.370228][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 759.370372][ C1] bridge0: port 4(veth0) entered learning state [ 759.603240][T32081] syzkaller1: entered promiscuous mode [ 759.604539][T32081] syzkaller1: entered allmulticast mode [ 760.202842][T32100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12174'. [ 760.344578][T32103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12177'. [ 760.345434][T32103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12177'. [ 761.270093][T32133] trusted_key: syz.1.12188 sent an empty control message without MSG_MORE. [ 761.446418][ C1] bridge0: port 4(veth0) entered forwarding state [ 761.446445][ C1] bridge0: topology change detected, propagating [ 761.446787][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 761.446805][ C1] bridge0: topology change detected, propagating [ 761.446940][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 761.446954][ C1] bridge0: topology change detected, propagating [ 761.696522][ C0] net_ratelimit: 9 callbacks suppressed [ 761.696547][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.722959][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.513039][T32173] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12201'. [ 762.515323][T32173] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12201'. [ 762.727020][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.753864][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.528456][T30915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.529848][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.540317][T32203] syzkaller1: entered promiscuous mode [ 763.540342][T32203] syzkaller1: entered allmulticast mode [ 763.766499][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.786046][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.089652][T11990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.090084][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.175352][T32215] syzkaller1: entered promiscuous mode [ 764.175377][T32215] syzkaller1: entered allmulticast mode [ 764.744480][T32231] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12224'. [ 766.215995][T32269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12236'. [ 766.649582][T32282] netlink: 'syz.2.12241': attribute type 25 has an invalid length. [ 766.649610][T32282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12241'. [ 766.721390][T32282] netlink: 'syz.2.12241': attribute type 25 has an invalid length. [ 766.721447][T32282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12241'. [ 766.729657][ T1170] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 766.732027][T11990] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 766.732064][T11990] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 766.732094][T11990] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 766.886438][ C0] net_ratelimit: 9 callbacks suppressed [ 766.886462][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.059591][T32291] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.083734][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.321893][T32304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.322261][T32304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.352635][T32304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.385540][T32304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.385860][T32304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.386356][T32304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.454458][T32304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.202470][T32321] netlink: 76 bytes leftover after parsing attributes in process `syz.0.12257'. [ 768.588523][T32329] netlink: 'syz.2.12259': attribute type 1 has an invalid length. [ 768.969301][T32334] bond4: (slave bridge8): making interface the new active one [ 768.970070][T32334] bond4: (slave bridge8): Enslaving as an active interface with an up link [ 769.573632][T32369] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12275'. [ 769.835462][T32376] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 770.804479][T32415] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 772.086803][ C0] net_ratelimit: 31 callbacks suppressed [ 772.086828][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.452185][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.127694][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.539086][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.772027][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.773387][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.166784][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.555843][T32531] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12329'. [ 774.584335][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.901236][T32497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 774.986036][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.059870][T11986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.957405][ T1170] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 775.957444][ T1170] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.958975][ T1170] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 775.959006][ T1170] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.968116][ T1170] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 775.968146][ T1170] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.968176][ T1170] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 775.968197][ T1170] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.725305][T32557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12341'. [ 776.725342][T32557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12341'. [ 776.725358][T32557] netlink: 'syz.0.12341': attribute type 4 has an invalid length. [ 777.022400][T32572] erspan0: entered promiscuous mode [ 777.181564][T32576] net_ratelimit: 11 callbacks suppressed [ 777.181590][T32576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.286436][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.619538][T32590] ip_tables: iptables: counters copy to user failed while replacing table [ 777.621529][T32587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12355'. [ 777.654654][T32591] tipc: Bearer : already 2 bearers with priority 10 [ 777.654678][T32591] tipc: Bearer : trying with adjusted priority [ 777.654868][T32591] tipc: Enabled bearer , priority 9 [ 777.665000][T32589] tipc: Resetting bearer [ 777.755211][T32589] tipc: Disabling bearer [ 777.768482][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.986845][T32598] netlink: 'syz.4.12359': attribute type 1 has an invalid length. [ 777.986873][T32598] netlink: 'syz.4.12359': attribute type 4 has an invalid length. [ 777.986887][T32598] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.12359'. [ 778.326958][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.706658][T32615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12367'. [ 778.808336][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.203284][T32626] netlink: 27 bytes leftover after parsing attributes in process `syz.1.12371'. [ 779.205613][T32629] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 779.366717][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.530326][T11990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.531798][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.840386][T32668] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12387'. [ 780.874811][T32667] netlink: 372 bytes leftover after parsing attributes in process `syz.4.12385'. [ 781.425102][T32687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12394'. [ 781.447894][ T4961] block nbd2: Possible stuck request ffff88802823e000: control (read@0,4096B). Runtime 210 seconds [ 781.509102][T32687] 8021q: adding VLAN 0 to HW filter on device team1 [ 781.791206][T32698] netlink: 9 bytes leftover after parsing attributes in process `syz.1.12397'. [ 781.795596][T32698] gretap0: entered promiscuous mode [ 781.834206][T32698] netlink: 5 bytes leftover after parsing attributes in process `syz.1.12397'. [ 781.834368][T32698] 0ªî{X¹¦: renamed from gretap0 [ 781.854650][T32698] 0ªî{X¹¦: left promiscuous mode [ 782.063523][T32705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12400'. [ 782.486404][ C0] net_ratelimit: 15 callbacks suppressed [ 782.486430][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.137184][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.526428][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.173119][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.566772][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.209618][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.304234][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.305460][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.431533][ T318] syzkaller1: entered promiscuous mode [ 785.431789][ T318] syzkaller1: entered allmulticast mode [ 785.616529][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.929142][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.053924][ T324] syz_tun: entered allmulticast mode [ 786.573676][ T342] block nbd0: reconnected socket [ 786.573702][ T342] block nbd0: Unsupported socket: should be TCP or UNIX. [ 786.574691][T24048] block nbd0: Receive control failed (result -32) [ 787.381809][ T337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12438'. [ 787.594779][ T366] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12448'. [ 787.608341][ T5793] net_ratelimit: 4 callbacks suppressed [ 787.608364][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.847644][T11990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.848025][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.576145][ T388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12456'. [ 788.655364][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.927507][ T392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.435811][ T399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12460'. [ 789.465870][ T400] sctp: [Deprecated]: syz.0.12459 (pid 400) Use of int in maxseg socket option. [ 789.465870][ T400] Use struct sctp_assoc_value instead [ 789.690073][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.693650][ T409] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 790.734304][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.575589][ T445] netlink: 'syz.4.12478': attribute type 1 has an invalid length. [ 791.768073][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.000698][ T464] netlink: 'syz.3.12483': attribute type 4 has an invalid length. [ 792.053028][ T467] netlink: 'syz.3.12483': attribute type 4 has an invalid length. [ 792.151259][ T448] bond7: (slave veth0_to_bond): making interface the new active one [ 792.155306][ T448] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 792.328447][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.328841][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.524505][ T468] lo: left promiscuous mode [ 792.573781][ T482] l2tp_ppp: sess 2/0: no socket in recv [ 792.875961][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.622886][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.623226][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.928219][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.093312][ T504] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12493'. [ 794.931666][ T521] netlink: 'syz.1.12500': attribute type 1 has an invalid length. [ 794.931721][ T521] netlink: 'syz.1.12500': attribute type 4 has an invalid length. [ 794.931735][ T521] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.12500'. [ 794.969645][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.394406][ T535] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12506'. [ 795.445768][ T533] syzkaller1: entered promiscuous mode [ 795.445794][ T533] syzkaller1: entered allmulticast mode [ 795.497311][ T537] bond0: (slave vlan2): Error -34 calling dev_set_mtu [ 795.904908][ T490] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 796.012494][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.179719][ T549] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12512'. [ 797.014100][ T581] netlink: 'syz.0.12521': attribute type 1 has an invalid length. [ 797.047853][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.131105][ T581] 8021q: adding VLAN 0 to HW filter on device bond8 [ 797.268912][ T583] bond8: (slave veth7): Enslaving as a backup interface with a down link [ 798.087993][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.098427][T11990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.098788][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.453910][ T613] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 798.552041][ T614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.640706][ T613] xt_hashlimit: size too large, truncated to 1048576 [ 799.131189][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.243167][ T622] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 799.388044][T11990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.388354][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.441371][ T629] ip_tables: iptables: counters copy to user failed while replacing table [ 799.579073][ T565] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 799.937234][ T5645] Bluetooth: hci4: command 0x0406 tx timeout [ 800.168767][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.326249][ T652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12542'. [ 800.707928][ T665] netlink: 11575 bytes leftover after parsing attributes in process `syz.1.12549'. [ 801.012258][ T673] veth0: left allmulticast mode [ 801.012315][ T673] veth0: left promiscuous mode [ 801.012591][ T673] bridge0: port 4(veth0) entered disabled state [ 801.042648][ T677] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12555'. [ 801.295521][ T685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12556'. [ 803.314562][ T708] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 803.360934][ T24] net_ratelimit: 3 callbacks suppressed [ 803.360957][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.771079][ T735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12566'. [ 803.859800][T30915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.860202][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.975506][ T735] netlink: 'syz.0.12566': attribute type 1 has an invalid length. [ 804.129062][ T746] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12570'. [ 804.257294][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.304733][ T750] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12568'. [ 804.426074][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.463470][ T753] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12572'. [ 804.536497][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.536853][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.450841][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.190332][ T804] dvmrp3: entered allmulticast mode [ 806.322439][ T807] ip_tables: iptables: counters copy to user failed while replacing table [ 806.359288][ T807] syzkaller1: entered promiscuous mode [ 806.359313][ T807] syzkaller1: entered allmulticast mode [ 806.488091][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.532357][ T834] syzkaller1: entered promiscuous mode [ 807.532596][ T834] syzkaller1: entered allmulticast mode [ 807.707816][ T842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12600'. [ 808.014422][ T847] netlink: 68 bytes leftover after parsing attributes in process `syz.1.12600'. [ 808.366408][ T863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12609'. [ 808.366438][ T863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12609'. [ 808.568128][ T24] net_ratelimit: 1 callbacks suppressed [ 808.568154][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.886983][T30919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.887440][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.973086][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.106101][ T881] netlink: 'syz.0.12617': attribute type 1 has an invalid length. [ 809.202022][ T881] 8021q: adding VLAN 0 to HW filter on device bond9 [ 809.339087][ T884] bond9: (slave veth9): Enslaving as an active interface with a down link [ 809.340815][ T881] mac80211_hwsim hwsim21 wlan1: entered promiscuous mode [ 809.341550][ T881] bond9: (slave wlan1): Opening slave failed [ 809.608092][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.706717][ T897] TC_ACT_REPEAT abuse ? [ 810.172651][ T906] netlink: 'syz.0.12625': attribute type 1 has an invalid length. [ 810.266306][T30915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.266695][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.592407][ T918] syzkaller1: entered allmulticast mode [ 810.643950][ T921] ip_tables: iptables: counters copy to user failed while replacing table [ 810.654731][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.247821][ T933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12633'. [ 811.529019][ T4961] block nbd2: Possible stuck request ffff88802823e000: control (read@0,4096B). Runtime 240 seconds [ 811.691431][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.954067][ T952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12639'. [ 813.773523][ T24] net_ratelimit: 1 callbacks suppressed [ 813.773548][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.224354][ T1000] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12654'. [ 814.730324][T11986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.730725][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.817323][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.848314][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.016366][T30919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.016723][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.888261][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.089424][ T1102] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.12684'. [ 817.279297][ T1109] tipc: Started in network mode [ 817.279330][ T1109] tipc: Node identity 767e7e938f63, cluster identity 4711 [ 817.279718][ T1109] tipc: Enabled bearer , priority 0 [ 817.360012][ T1109] syzkaller0: entered promiscuous mode [ 817.360040][ T1109] syzkaller0: entered allmulticast mode [ 817.361137][ T1109] tipc: Resetting bearer [ 817.928613][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.988730][T11986] tipc: Resetting bearer [ 817.990819][ T1108] tipc: Resetting bearer [ 818.968005][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.017741][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.504598][T30915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.504978][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.059641][T30919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.060034][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.062446][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.119895][ T1108] tipc: Disabling bearer [ 821.242985][T32510] tipc: Node number set to 4179459731 [ 821.473012][ T1137] netlink: 'syz.4.12693': attribute type 1 has an invalid length. [ 821.498461][ T1139] netlink: 15051 bytes leftover after parsing attributes in process `syz.1.12695'. [ 821.560153][ T1137] 8021q: adding VLAN 0 to HW filter on device bond8 [ 821.641947][ T1149] netlink: 'syz.4.12693': attribute type 10 has an invalid length. [ 821.641972][ T1149] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12693'. [ 821.681631][ T1143] bond8: (slave veth11): Enslaving as a backup interface with a down link [ 821.887487][T11986] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 821.921224][ T1137] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 821.925322][ T1149] dummy0: entered promiscuous mode [ 821.944475][ T1149] bond8: (slave dummy0): Removing an active aggregator [ 821.949613][ T1149] bond8: (slave dummy0): Releasing backup interface [ 822.030535][ T1159] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12700'. [ 822.046952][ T1159] syzkaller1: entered promiscuous mode [ 822.046978][ T1159] syzkaller1: entered allmulticast mode [ 822.104878][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.468819][ T1166] bond9: entered promiscuous mode [ 822.582855][ T1172] macvlan2: entered promiscuous mode [ 822.593551][ T1172] macvlan2: entered allmulticast mode [ 822.608672][ T1172] bond9: (slave macvlan2): Opening slave failed [ 823.129862][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.453870][ T1195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12710'. [ 823.453997][ T1195] tipc: Resetting bearer [ 823.643101][ T1195] tipc: Disabling bearer [ 824.168129][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.207844][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.734223][ T1239] bond3: (slave C): Releasing backup interface [ 825.735213][ T1239] bond3: (slave C): last VLAN challenged slave left bond - VLAN blocking is removed [ 825.781201][ T1239] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 825.829413][ T1181] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 826.203030][ T1247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.205078][ T1247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.205925][ T1247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.238442][ T1247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.240073][ T1247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.240810][ T1247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.241115][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.703550][ T1270] netlink: 'syz.1.12725': attribute type 1 has an invalid length. [ 826.811057][ T1270] 8021q: adding VLAN 0 to HW filter on device bond10 [ 826.857809][ T1270] bond10: (slave geneve2): making interface the new active one [ 826.861355][ T1270] bond10: (slave geneve2): Enslaving as an active interface with an up link [ 827.230324][ T1285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12731'. [ 827.645898][ T1299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12734'. [ 827.734592][ T1303] netlink: 'syz.1.12737': attribute type 1 has an invalid length. [ 828.078704][ T1303] 8021q: adding VLAN 0 to HW filter on device bond11 [ 828.336868][ T1306] bond11: (slave geneve3): making interface the new active one [ 828.362806][ T1306] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 829.188638][T11990] net_ratelimit: 31 callbacks suppressed [ 829.188661][T11990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.189193][T11990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.340139][ T1343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.448645][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.450139][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.450718][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.771173][ T1351] syzkaller1: entered promiscuous mode [ 829.771412][ T1351] syzkaller1: entered allmulticast mode [ 829.795422][ T1353] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12749'. [ 830.089759][T11990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.092700][T11990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.302065][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.302466][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.515002][ T1375] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12757'. [ 830.640081][ T1377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12758'. [ 830.749650][ T1378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12758'. [ 830.968858][ T1378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12758'. [ 832.335348][ T1418] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12767'. [ 833.092551][ T1441] netlink: 'syz.4.12776': attribute type 1 has an invalid length. [ 833.131601][ T1441] bond9: entered promiscuous mode [ 833.132111][ T1441] 8021q: adding VLAN 0 to HW filter on device bond9 [ 833.160272][ T1441] vlan3: entered allmulticast mode [ 833.160298][ T1441] bond9: entered allmulticast mode [ 833.188360][ T1441] bond9: (slave bridge5): making interface the new active one [ 833.188389][ T1441] bridge5: entered promiscuous mode [ 833.188687][ T1441] bridge5: entered allmulticast mode [ 833.190601][ T1441] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 834.513822][ T1398] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 834.648502][ T5790] net_ratelimit: 26 callbacks suppressed [ 834.648528][ T5790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.795919][ T1460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12784'. [ 834.797390][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.797753][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.855147][ T1464] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12786'. [ 834.857308][ T1463] bond6: entered allmulticast mode [ 834.857329][ T1463] ip6gre2: entered allmulticast mode [ 834.861462][ T1464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12786'. [ 834.861487][ T1464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12786'. [ 834.886624][ T1467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12787'. [ 835.057040][T30919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.057523][T30919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.760679][ T5790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.918397][T30919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.923963][T30919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.014797][ T1501] bond0: (slave bond_slave_0): Releasing backup interface [ 836.021345][ T1501] bond_slave_0: left allmulticast mode [ 836.050830][ T1501] bond0: (slave bond_slave_1): Releasing backup interface [ 836.055220][ T1501] bond_slave_1: left allmulticast mode [ 836.110443][ T1501] team0: Port device team_slave_0 removed [ 836.120182][ T1501] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 836.193888][ T1154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.195453][ T1506] team0: Mode changed to "loadbalance" [ 836.537932][ T1519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12804'. [ 836.537966][ T1519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12804'. [ 836.878231][ T1527] netlink: 'syz.1.12807': attribute type 1 has an invalid length. [ 836.932603][ T1527] 8021q: adding VLAN 0 to HW filter on device bond12 [ 836.964612][ T1534] bond12: (slave veth9): Enslaving as an active interface with a down link [ 837.045536][ T1534] netlink: 'syz.1.12807': attribute type 10 has an invalid length. [ 837.045561][ T1534] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12807'. [ 837.261301][ T1527] bond12: (slave dummy0): making interface the new active one [ 837.273053][ T1527] dummy0: entered promiscuous mode [ 837.273949][ T1527] bond12: (slave dummy0): Enslaving as an active interface with an up link [ 837.302283][ T1534] bond12: (slave dummy0): Releasing active interface [ 838.494540][ T1565] 8021q: adding VLAN 0 to HW filter on device bond10 [ 838.593012][ T1575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12823'. [ 838.760691][ T1578] netlink: 84 bytes leftover after parsing attributes in process `syz.4.12826'. [ 838.760728][ T1578] netlink: 84 bytes leftover after parsing attributes in process `syz.4.12826'. [ 839.709734][ T1604] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12840'. [ 839.714582][ T1604] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 839.927687][ T5793] net_ratelimit: 24 callbacks suppressed [ 839.927710][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.265897][ T1622] netlink: 'syz.1.12847': attribute type 9 has an invalid length. [ 840.265925][ T1622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12847'. [ 840.266182][ T1622] netlink: 'syz.1.12847': attribute type 9 has an invalid length. [ 840.266196][ T1622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12847'. [ 840.377453][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.378314][ T1170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.497881][ T1628] netlink: 'syz.1.12850': attribute type 1 has an invalid length. [ 840.592145][ T1628] 8021q: adding VLAN 0 to HW filter on device bond13 [ 840.628358][T30919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.628923][T30919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.654669][ T1632] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12851'. [ 840.699340][ T1631] bond13: (slave veth0_to_bond): making interface the new active one [ 840.717609][ T1631] bond13: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 840.859028][ T1628] macvlan2: entered promiscuous mode [ 840.859058][ T1628] macvlan2: entered allmulticast mode [ 840.864202][ T1628] bond13: entered promiscuous mode [ 840.864225][ T1628] veth0_to_bond: entered promiscuous mode [ 840.869356][ T1628] bond13: entered allmulticast mode [ 840.869378][ T1628] veth0_to_bond: entered allmulticast mode [ 840.904428][ T1628] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 840.905266][ T1628] bond13: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 840.905563][ T1628] bond13: left allmulticast mode [ 840.905578][ T1628] veth0_to_bond: left allmulticast mode [ 840.905624][ T1628] bond13: left promiscuous mode [ 840.905636][ T1628] veth0_to_bond: left promiscuous mode [ 840.966941][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.992112][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.259853][ T1648] TC_ACT_REPEAT abuse ? [ 841.467239][ T1651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.467705][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.610895][ T4961] block nbd2: Possible stuck request ffff88802823e000: control (read@0,4096B). Runtime 270 seconds [ 842.695949][ T1656] infiniband syz1: set down [ 842.696072][ T1656] infiniband syz1: added ipvlan1 [ 842.707478][ T1656] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 842.728472][ T1656] infiniband syz1: Couldn't open port 1 [ 842.729037][ T1656] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 842.729073][ T1656] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 842.729129][ T1656] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 842.870147][ T1656] RDS/IB: syz1: added [ 842.870219][ T1656] smc: adding ib device syz1 with port count 1 [ 842.870240][ T1656] smc: ib device syz1 port 1 has no pnetid [ 843.162045][ T1682] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12868'. [ 843.162076][ T1682] netlink: 'syz.2.12868': attribute type 3 has an invalid length. [ 843.162093][ T1682] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12868'. [ 843.162929][ T1682] netlink: 'syz.2.12868': attribute type 3 has an invalid length. [ 844.433474][ T1711] netlink: 'syz.2.12877': attribute type 12 has an invalid length. [ 844.451094][ T1711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12877'. [ 844.711203][ T1714] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12879'. [ 844.863736][ T1716] netlink: 'syz.3.12880': attribute type 1 has an invalid length. [ 845.091957][T11990] net_ratelimit: 26 callbacks suppressed [ 845.091984][T11990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.092959][T11990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.177205][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.182252][ T1716] bond4: entered promiscuous mode [ 845.185905][ T1716] 8021q: adding VLAN 0 to HW filter on device bond4 [ 845.295153][ T1717] bond4: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 845.295184][ T1717] bond4: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 845.295200][ T1717] bond4: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 845.461464][ T1729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.615908][ T1721] bond4: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 845.615937][ T1721] bond4: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 845.957315][T30919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.957694][T30919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.209471][T30919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.209983][T30919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.268921][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.966122][ T1759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12892'. [ 847.262935][ T1763] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 849.046885][ T1803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12906'. [ 849.960538][ T1827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12914'. [ 850.067091][ T1830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12916'. [ 850.201458][ T1838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12917'. [ 851.533614][ T1878] netlink: 164 bytes leftover after parsing attributes in process `syz.3.12930'. [ 852.144093][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059dfb800: rx timeout, send abort [ 852.144421][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888059dfb800: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 852.357592][ T1903] ip_tables: iptables: counters copy to user failed while replacing table [ 852.589673][ T1911] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 852.635914][ T1911] netlink: 'syz.0.12941': attribute type 1 has an invalid length. [ 852.745637][ T1911] 8021q: adding VLAN 0 to HW filter on device bond10 [ 852.877434][ T1914] bond10: (slave geneve3): making interface the new active one [ 852.895444][ T1914] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 852.903671][ T1905] syzkaller1: entered promiscuous mode [ 852.903696][ T1905] syzkaller1: entered allmulticast mode [ 853.220597][ T1926] xt_hashlimit: size too large, truncated to 1048576 [ 854.153865][ T1944] ip_tables: iptables: counters copy to user failed while replacing table [ 855.191711][ T1896] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 856.668627][ T1995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 856.735879][ T2003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 856.832770][ T1995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 859.002887][ T2051] netlink: 164 bytes leftover after parsing attributes in process `syz.2.12991'. [ 859.003043][ T2051] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12991'. [ 859.022313][ T2052] netlink: 'syz.0.12992': attribute type 1 has an invalid length. [ 859.124087][ T2055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12993'. [ 859.180027][ T2057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12992'. [ 859.396019][ T2057] bond11: (slave bridge5): making interface the new active one [ 859.404116][ T2057] bond11: (slave bridge5): Enslaving as an active interface with an up link [ 859.687616][ T2065] syzkaller0: entered promiscuous mode [ 859.687866][ T2065] syzkaller0: entered allmulticast mode [ 859.789869][ T2070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12999'. [ 860.213224][ T2074] bond7: (slave veth0_to_bond): Releasing active interface [ 860.245324][ T2074] bond0: (slave bond_slave_0): Releasing backup interface [ 860.288349][ T2074] bond0: (slave bond_slave_1): Releasing backup interface [ 860.388882][ T2074] team0: Port device team_slave_0 removed [ 860.464767][ T2074] team0: Port device team_slave_1 removed [ 860.494895][ T2074] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 860.660343][ T2079] team0: Port device xfrm0 added [ 860.687124][ T2083] tipc: Enabled bearer , priority 0 [ 861.226670][ T2109] 0: reclassify loop, rule prio 0, protocol 03 [ 862.109921][ T2130] netlink: 'syz.3.13014': attribute type 1 has an invalid length. [ 862.521635][ T2152] netlink: 'syz.0.13016': attribute type 4 has an invalid length. [ 865.014650][ T2202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13033'. [ 865.292559][ T2205] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13034'. [ 865.354785][ T2207] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13035'. [ 866.401026][ T2240] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13048'. [ 866.905896][ T2256] netlink: 'syz.2.13054': attribute type 4 has an invalid length. [ 867.325968][ T2266] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 867.326110][ T2266] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 867.835041][ T2262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13057'. [ 867.835068][ T2262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13057'. [ 867.835081][ T2262] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 867.850062][ T2282] ip_tables: iptables: counters copy to user failed while replacing table [ 868.191784][ T2289] ip_tables: iptables: counters copy to user failed while replacing table [ 868.444790][ T2295] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13069'. [ 868.657350][ T2303] netlink: 64 bytes leftover after parsing attributes in process `syz.4.13071'. [ 868.696649][ T2307] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13073'. [ 868.696677][ T2307] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13073'. [ 868.706122][ T2303] syzkaller1: entered promiscuous mode [ 868.706298][ T2303] syzkaller1: entered allmulticast mode [ 868.963604][ T2311] batman_adv: batadv0: Adding interface: syzkaller0 [ 868.963629][ T2311] batman_adv: batadv0: Interface activated: syzkaller0 [ 870.421020][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.687384][ T4961] block nbd2: Possible stuck request ffff88802823e000: control (read@0,4096B). Runtime 300 seconds [ 872.062084][ T2389] TC_ACT_REPEAT abuse ? [ 872.586046][ T5645] Bluetooth: hci4: unexpected event 0x05 length: 3 < 4 [ 875.174518][ T2479] syzkaller0: entered promiscuous mode [ 875.174755][ T2479] syzkaller0: entered allmulticast mode [ 875.332466][ T2497] veth0: Caught tx_queue_len zero misconfig [ 875.534880][ T2496] syzkaller0: entered promiscuous mode [ 875.534910][ T2496] syzkaller0: entered allmulticast mode [ 875.564030][ T2504] __nla_validate_parse: 1 callbacks suppressed [ 875.564052][ T2504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13130'. [ 879.100552][ T2545] netlink: 'syz.2.13136': attribute type 39 has an invalid length. [ 879.242504][ T2550] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 879.308510][ T2557] block nbd0: reconnected socket [ 879.308536][ T2557] block nbd0: Unsupported socket: should be TCP or UNIX. [ 879.310768][ T5645] block nbd0: Receive control failed (result -32) [ 879.383067][ T2559] syzkaller0: entered promiscuous mode [ 879.383096][ T2559] syzkaller0: entered allmulticast mode [ 879.577623][ T2570] netlink: 'syz.4.13142': attribute type 1 has an invalid length. [ 879.701677][ T2570] bond11: entered promiscuous mode [ 879.707842][ T2570] 8021q: adding VLAN 0 to HW filter on device bond11 [ 879.733480][ T2585] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13144'. [ 879.843963][ T2577] bond11: (slave bridge6): making interface the new active one [ 879.844931][ T2577] bridge6: entered promiscuous mode [ 879.943270][ T2577] bond11: (slave bridge6): Enslaving as an active interface with an up link [ 880.015773][ T2583] bond11: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 880.015801][ T2583] bond11: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 880.351880][ T2590] netlink: 'syz.4.13147': attribute type 1 has an invalid length. [ 880.488714][ T2590] 8021q: adding VLAN 0 to HW filter on device bond13 [ 880.510649][ T2590] bond12: (slave bond13): making interface the new active one [ 880.511207][ T2590] bond12: (slave bond13): Enslaving as an active interface with an up link [ 880.709520][ T2599] bond12: (slave gretap1): Enslaving as a backup interface with an up link [ 880.735058][ T2590] 8021q: adding VLAN 0 to HW filter on device bond12 [ 880.883874][ T2605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13149'. [ 880.947423][ T2607] syzkaller0: entered promiscuous mode [ 880.947646][ T2607] syzkaller0: entered allmulticast mode [ 881.644133][ T2630] ip_tables: iptables: counters copy to user failed while replacing table [ 881.944779][ T2632] syzkaller1: entered promiscuous mode [ 881.944805][ T2632] syzkaller1: entered allmulticast mode [ 882.452621][ T2665] ip_tables: iptables: counters copy to user failed while replacing table [ 882.455195][ T2663] netlink: 'syz.1.13163': attribute type 1 has an invalid length. [ 882.634034][ T2670] netlink: 'syz.3.13167': attribute type 1 has an invalid length. [ 882.680893][ T2667] bond14: (slave bridge11): Enslaving as a backup interface with an up link [ 882.683666][ T2657] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13164'. [ 882.735999][ T2677] netlink: 'syz.2.13168': attribute type 1 has an invalid length. [ 882.745386][ T2663] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13163'. [ 882.900681][T30915] bond14: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 882.904704][ T2663] 8021q: adding VLAN 0 to HW filter on device bond14 [ 882.947178][ T2677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13168'. [ 882.953619][ T2688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13169'. [ 883.016446][ T12] bond14: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 883.069989][ T2682] vlan4: entered promiscuous mode [ 883.070015][ T2682] hsr0: entered promiscuous mode [ 883.115554][ T2670] bridge7: entered promiscuous mode [ 883.126668][ T2670] bond5: (slave bridge7): making interface the new active one [ 883.127795][ T2670] bond5: (slave bridge7): Enslaving as an active interface with an up link [ 883.414501][ T2677] bond5: (slave bridge12): making interface the new active one [ 883.415003][ T2677] bond5: (slave bridge12): Enslaving as an active interface with an up link [ 883.445346][ T2688] hsr_slave_0: left promiscuous mode [ 883.474731][ T2688] hsr_slave_1: left promiscuous mode [ 883.837495][ T2702] tunl0: entered promiscuous mode [ 883.837523][ T2702] tunl0: entered allmulticast mode [ 884.035333][ T2710] syzkaller0: entered promiscuous mode [ 884.035357][ T2710] syzkaller0: entered allmulticast mode [ 884.261780][ T2695] netlink: 'syz.3.13171': attribute type 4 has an invalid length. [ 884.501463][ T2725] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13176'. [ 884.883579][ T2717] syzkaller0: entered promiscuous mode [ 884.883817][ T2717] syzkaller0: entered allmulticast mode [ 885.523980][ T2763] netlink: 'syz.4.13182': attribute type 2 has an invalid length. [ 885.717372][ T2777] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 886.563279][ T2791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13185'. [ 889.056419][ T2764] syzkaller0: entered promiscuous mode [ 889.056739][ T2764] syzkaller0: entered allmulticast mode [ 889.262155][ T2807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13187'. [ 889.371128][ T2791] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 889.451850][ T2793] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 889.843753][ T2823] syzkaller0: entered promiscuous mode [ 889.843779][ T2823] syzkaller0: entered allmulticast mode [ 889.847079][ T2828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13193'. [ 890.711428][ T2851] team0: Port device xfrm0 removed [ 890.843921][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.011610][ T2851] bond6: (slave ip6gre2): Releasing backup interface [ 891.011640][ T2851] ip6gre2: left promiscuous mode [ 891.012650][ T2851] ip6gre2: left allmulticast mode [ 891.028526][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.279208][ T2851] bond8: (slave veth11): Releasing backup interface [ 891.339011][ T2851] bond9: (slave bridge5): Releasing backup interface [ 891.339042][ T2851] bridge5: left promiscuous mode [ 891.339340][ T2851] bridge5: left allmulticast mode [ 891.433239][ T2851] bond11: (slave bridge6): Releasing backup interface [ 891.433289][ T2851] bridge6: left promiscuous mode [ 891.595092][ T2851] bond12: (slave bond13): Releasing backup interface [ 891.595129][ T2851] bond12: (slave bond13): the permanent HWaddr of slave - 76:79:ca:c3:55:07 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 891.595708][ T2851] bond12: (slave gretap1): making interface the new active one [ 891.637664][ T2898] netlink: 'syz.0.13202': attribute type 1 has an invalid length. [ 891.655989][ T2851] bond12: (slave gretap1): Releasing backup interface [ 891.691380][ T1170] tipc: Resetting bearer [ 891.704492][ T2899] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13202'. [ 891.719092][ T2886] syzkaller0: left promiscuous mode [ 891.719283][ T2886] syzkaller0: left allmulticast mode [ 891.727458][ T2876] syzkaller1: entered promiscuous mode [ 891.727665][ T2876] syzkaller1: entered allmulticast mode [ 891.910427][ T2898] 8021q: adding VLAN 0 to HW filter on device bond12 [ 892.120002][ T2899] bond12: (slave bridge6): making interface the new active one [ 892.157160][ T2899] bond12: (slave bridge6): Enslaving as an active interface with an up link [ 892.262943][ T2913] netlink: 'syz.4.13205': attribute type 6 has an invalid length. [ 892.262968][ T2913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13205'. [ 892.974654][ T2925] syzkaller0: entered promiscuous mode [ 892.974677][ T2925] syzkaller0: entered allmulticast mode [ 893.834709][ T2945] syzkaller0: entered promiscuous mode [ 893.836383][ T2945] syzkaller0: entered allmulticast mode [ 893.877560][ T2932] syzkaller0: entered promiscuous mode [ 893.877587][ T2932] syzkaller0: entered allmulticast mode [ 894.001986][ T2916] eql: remember to turn off Van-Jacobson compression on your slave devices [ 894.077547][ T2916] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 894.955742][ T2972] ip_tables: iptables: counters copy to user failed while replacing table [ 898.073936][ T2966] syzkaller0: entered promiscuous mode [ 898.073962][ T2966] syzkaller0: entered allmulticast mode [ 898.543853][ T3000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13226'. [ 898.623424][ T3000] bond15: entered promiscuous mode [ 898.625119][ T3000] 8021q: adding VLAN 0 to HW filter on device bond15 [ 898.800157][ T3006] netlink: 'syz.2.13228': attribute type 1 has an invalid length. [ 898.853212][ T3007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13228'. [ 898.938349][ T3000] 8021q: adding VLAN 0 to HW filter on device bond15 [ 898.938833][ T3000] bond15: (slave sit1): The slave device specified does not support setting the MAC address [ 898.944130][ T3000] bond15: (slave sit1): Error -95 calling set_mac_address [ 899.095465][ T3006] 8021q: adding VLAN 0 to HW filter on device bond7 [ 899.292989][ T3008] bond7: (slave bridge13): making interface the new active one [ 899.306965][ T3008] bond7: (slave bridge13): Enslaving as an active interface with an up link [ 899.536804][ T3011] syzkaller1: entered promiscuous mode [ 899.537041][ T3011] syzkaller1: entered allmulticast mode [ 899.964799][ T3023] syzkaller0: entered promiscuous mode [ 899.965026][ T3023] syzkaller0: entered allmulticast mode [ 899.988907][ T3025] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13232'. [ 900.645647][ T3036] syzkaller0: entered promiscuous mode [ 900.645673][ T3036] syzkaller0: entered allmulticast mode [ 901.477282][ T3050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13240'. [ 901.768834][ T4961] block nbd2: Possible stuck request ffff88802823e000: control (read@0,4096B). Runtime 330 seconds [ 906.252318][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 906.838923][ T3095] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 906.962588][ T3110] syzkaller0: entered promiscuous mode [ 906.962615][ T3110] syzkaller0: entered allmulticast mode [ 911.218391][ T3175] syzkaller0: entered promiscuous mode [ 911.218628][ T3175] syzkaller0: entered allmulticast mode [ 911.881751][ T3190] syzkaller0: entered promiscuous mode [ 911.881781][ T3190] syzkaller0: entered allmulticast mode [ 914.572322][ T32] INFO: task udevd:25783 bl ** replaying previous printk message ** [ 914.572322][ T32] INFO: task udevd:25783 blocked in I/O wait for more than 143 seconds. [ 914.572352][ T32] Not tainted syzkaller #0 [ 914.572363][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 914.572372][ T32] task:udevd state:D stack:26336 pid:25783 tgid:25783 ppid:4999 task_flags:0x400140 flags:0x00080002 [ 914.572434][ T32] Call Trace: [ 914.572465][ T32] [ 914.572487][ T32] __schedule+0x17dd/0x5830 [ 914.572687][ T32] ? __lock_acquire+0x747/0x2de0 [ 914.572791][ T32] ? __pfx___schedule+0x10/0x10 [ 914.572823][ T32] ? schedule+0x90/0x2b0 [ 914.572850][ T32] schedule+0x164/0x2b0 [ 914.572874][ T32] io_schedule+0x7f/0xd0 [ 914.572901][ T32] folio_wait_bit_common+0x6d0/0xcf0 [ 914.572971][ T32] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 914.572993][ T32] ? filemap_read_folio+0x234/0x3a0 [ 914.573022][ T32] ? __pfx_wake_page_function+0x10/0x10 [ 914.573053][ T32] ? __filemap_get_folio_mpol+0x7c3/0xff0 [ 914.573120][ T32] do_read_cache_folio+0x1ac/0x590 [ 914.573152][ T32] ? __pfx_blkdev_read_folio+0x10/0x10 [ 914.573269][ T32] read_part_sector+0xb6/0x2b0 [ 914.573357][ T32] adfspart_check_POWERTEC+0x9a/0x7a0 [ 914.573379][ T32] ? rcu_is_watching+0x16/0xb0 [ 914.573434][ T32] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 914.573455][ T32] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 914.573476][ T32] ? __kmalloc_cache_noprof+0x148/0x600 [ 914.573565][ T32] ? bdev_disk_changed+0x56c/0x1680 [ 914.573592][ T32] ? bdev_disk_changed+0x56c/0x1680 [ 914.573636][ T32] bdev_disk_changed+0x851/0x1680 [ 914.573691][ T32] ? __pfx_bdev_disk_changed+0x10/0x10 [ 914.573770][ T32] blkdev_get_whole+0x372/0x510 [ 914.573830][ T32] bdev_open+0x324/0xd70 [ 914.573871][ T32] blkdev_open+0x461/0x600 [ 914.573896][ T32] ? __pfx_blkdev_open+0x10/0x10 [ 914.573915][ T32] do_dentry_open+0x80e/0x1360 [ 914.573989][ T32] vfs_open_consume+0x4a/0x350 [ 914.574009][ T32] ? path_openat+0x16e1/0x20f0 [ 914.574106][ T32] path_openat+0x16fc/0x20f0 [ 914.574157][ T32] do_file_open+0x23e/0x4a0 [ 914.574192][ T32] ? __pfx_do_file_open+0x10/0x10 [ 914.574268][ T32] ? _raw_spin_unlock+0x28/0x50 [ 914.574309][ T32] ? alloc_fd+0x6af/0x760 [ 914.574378][ T32] do_sys_openat2+0x115/0x200 [ 914.574405][ T32] ? __pfx_do_sys_openat2+0x10/0x10 [ 914.574435][ T32] ? do_user_addr_fault+0xd3f/0x1480 [ 914.574477][ T32] __x64_sys_openat+0x138/0x170 [ 914.574507][ T32] do_syscall_64+0x166/0x520 [ 914.574572][ T32] ? trace_irq_disable+0x3b/0x140 [ 914.574617][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.574667][ T32] ? clear_bhb_loop+0x70/0xc0 [ 914.574693][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.574712][ T32] RIP: 0033:0x7fde13aa7407 [ 914.574755][ T32] RSP: 002b:00007ffd8ab7c7f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 914.574796][ T32] RAX: ffffffffffffffda RBX: 00007fde1417a880 RCX: 00007fde13aa7407 [ 914.574810][ T32] RDX: 00000000000a0800 RSI: 0000564b52343010 RDI: ffffffffffffff9c [ 914.574825][ T32] RBP: 0000564b52335910 R08: 0000000000000000 R09: 0000000000000000 [ 914.574837][ T32] R10: 0000000000000000 R11: 0000000000000202 R12: 0000564b52373c00 [ 914.574850][ T32] R13: 0000564b52343190 R14: 0000000000000000 R15: 0000564b52373c00 [ 914.574885][ T32] [ 914.574922][ T32] [ 914.574922][ T32] Showing all locks held in the system: [ 914.574932][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 914.574988][ T32] #0: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 914.575133][ T32] locks held by getty/5386: 2, on CPU#1: [ 914.575147][ T32] #0: ffff8880367ea0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 914.575265][ T32] #1: ffffc9000322e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 914.575350][ T32] locks held by kworker/u8:9/11986: 3, on CPU#0: [ 914.575364][ T32] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 914.575426][ T32] #1: ffffc9001b04fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 914.575479][ T32] #2: ffffffff916937a0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 914.575589][ T32] locks held by udevd/25783: 1, on CPU#0: [ 914.575601][ T32] #0: ffff888027428350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 914.575665][ T32] locks held by kworker/u8:5/30917: 3, on CPU#0: [ 914.575678][ T32] #0: ffff88801ebeb148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 914.575732][ T32] #1: ffffc9000d9d7c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 914.575787][ T32] #2: ffffffff916937a0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 914.575901][ T32] locks held by syz.3.13259/3178: 1, last CPU#0: [ 914.575914][ T32] #0: ffffffff916937a0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 914.576017][ T32] locks held by syz.1.13265/3207: 1, on CPU#1: [ 914.576030][ T32] #0: ffffffff916937a0 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 914.576107][ T32] locks held by syz.1.13265/3220: 1, on CPU#1: [ 914.576120][ T32] #0: ffffffff916937a0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 914.576168][ T32] locks held by syz.1.13265/3225: 1, on CPU#1: [ 914.576180][ T32] #0: ffffffff916937a0 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 914.576928][ T32] locks held by syz.1.13265/3231: 1, on CPU#0: [ 914.576943][ T32] #0: ffffffff916937a0 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 914.576987][ T32] locks held by syz.0.13266/3211: 1, on CPU#0: [ 914.576999][ T32] #0: ffffffff916937a0 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 914.577045][ T32] locks held by syz.0.13266/3224: 1, on CPU#1: [ 914.577057][ T32] #0: ffffffff916937a0 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 914.577127][ T32] locks held by syz.0.13266/3230: 1, on CPU#1: [ 914.577139][ T32] #0: ffffffff916937a0 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 914.577241][ T32] locks held by syz.2.13267/3223: 1, on CPU#1: [ 914.577254][ T32] #0: ffffffff916937a0 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 914.577300][ T32] locks held by syz.2.13267/3229: 1, on CPU#1: [ 914.577312][ T32] #0: ffffffff916937a0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 914.577356][ T32] locks held by syz.2.13267/3232: 3, on CPU#0: [ 914.577368][ T32] #0: ffffffff916f7ba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 914.577473][ T32] #1: ffffffff916f79e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 914.577518][ T32] #2: ffffffff916937a0 (rtnl_mutex){+.+.}-{4:4}, at: tipc_nl_compat_doit+0x22a/0x650 [ 914.577606][ T32] locks held by syz.2.13267/3239: 1, on CPU#1: [ 914.577625][ T32] #0: ffffffff916937a0 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 914.577667][ T32] locks held by syz.2.13267/3246: 1, on CPU#0: [ 914.577678][ T32] #0: ffffffff916937a0 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 914.577737][ T32] locks held by syz.2.13267/3252: 1, on CPU#0: [ 914.577749][ T32] #0: ffffffff916937a0 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 914.577792][ T32] locks held by syz.4.13268/3256: 1, on CPU#0: [ 914.577804][ T32] #0: ffffffff916937a0 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 914.577850][ T32] locks held by syz.4.13268/3257: 1, on CPU#0: [ 914.577862][ T32] #0: ffffffff916937a0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 914.577907][ T32] locks held by syz.4.13268/3259: 1, on CPU#1: [ 914.577919][ T32] #0: ffffffff916937a0 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 914.577961][ T32] locks held by syz.4.13268/3261: 1, on CPU#1: [ 914.577973][ T32] #0: ffffffff916937a0 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 914.578015][ T32] locks held by syz.4.13268/3262: 1, on CPU#1: [ 914.578027][ T32] #0: ffffffff916937a0 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 914.578096][ T32] [ 914.578101][ T32] ============================================= [ 914.578101][ T32] [ 914.578109][ T32] NMI backtrace for cpu 0 [ 914.578122][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 914.578140][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 914.578150][ T32] Call Trace: [ 914.578157][ T32] [ 914.578165][ T32] dump_stack_lvl+0xe8/0x150 [ 914.578265][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 914.578311][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 914.578342][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 914.578365][ T32] sys_info+0x135/0x170 [ 914.578381][ T32] watchdog+0x1073/0x10f0 [ 914.578425][ T32] ? watchdog+0x209/0x10f0 [ 914.578455][ T32] kthread+0x38b/0x480 [ 914.578476][ T32] ? __pfx_watchdog+0x10/0x10 [ 914.578497][ T32] ? __pfx_kthread+0x10/0x10 [ 914.578519][ T32] ret_from_fork+0x514/0xb70 [ 914.578554][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 914.578574][ T32] ? __switch_to+0xc78/0x1410 [ 914.578603][ T32] ? __pfx_kthread+0x10/0x10 [ 914.578632][ T32] ret_from_fork_asm+0x1a/0x30 [ 914.578666][ T32] [ 914.578692][ T32] Sending NMI from CPU 0 to CPUs 1: [ 914.578722][ C1] NMI backtrace for cpu 1 [ 914.578736][ C1] CPU: 1 UID: 0 PID: 31 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 914.578756][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 914.578765][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 914.578847][ C1] Code: e8 9e 97 43 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 9f 20 bb fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 5a 2f 83 06 cc 44 89 f9 80 e1 07 [ 914.578862][ C1] RSP: 0018:ffffc90000a778b8 EFLAGS: 00000002 [ 914.578878][ C1] RAX: 1ffffffff3840b00 RBX: 00000000000003fd RCX: 0000000000000000 [ 914.578890][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 914.578901][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 914.578913][ C1] R10: dffffc0000000000 R11: ffffffff85857980 R12: dffffc0000000000 [ 914.578925][ C1] R13: 0000000000000000 R14: ffffffff9c205ec0 R15: 0000000000000000 [ 914.578937][ C1] FS: 0000000000000000(0000) GS:ffff888123509000(0000) knlGS:0000000000000000 [ 914.578951][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 914.578963][ C1] CR2: 000055555963d4e8 CR3: 000000006484e000 CR4: 00000000003526f0 [ 914.578980][ C1] Call Trace: [ 914.578986][ C1] [ 914.578994][ C1] wait_for_lsr+0x184/0x2f0 [ 914.579021][ C1] __serial8250_console_fifo_write+0xcd/0x3e0 [ 914.579065][ C1] serial8250_console_write+0xa7e/0x1200 [ 914.579097][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 914.579129][ C1] ? rcu_is_watching+0x16/0xb0 [ 914.579161][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 914.579209][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 914.579238][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 914.579268][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 914.579290][ C1] nbcon_kthread_func+0x6d9/0x8d0 [ 914.579314][ C1] ? nbcon_kthread_func+0x163/0x8d0 [ 914.579334][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 914.579357][ C1] ? __kthread_parkme+0x71/0x1f0 [ 914.579375][ C1] ? __kthread_parkme+0x199/0x1f0 [ 914.579393][ C1] kthread+0x38b/0x480 [ 914.579412][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 914.579432][ C1] ? __pfx_kthread+0x10/0x10 [ 914.579451][ C1] ret_from_fork+0x514/0xb70 [ 914.579471][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 914.579489][ C1] ? __switch_to+0xc78/0x1410 [ 914.579515][ C1] ? __pfx_kthread+0x10/0x10 [ 914.579534][ C1] ret_from_fork_asm+0x1a/0x30 [ 914.579560][ C1] [ 914.579724][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 915.722921][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 915.732070][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 915.742141][ T32] Call Trace: [ 915.745438][ T32] [ 915.748384][ T32] vpanic+0x26f/0x710 [ 915.752401][ T32] panic+0xc5/0xd0 [ 915.756157][ T32] ? __pfx_panic+0x10/0x10 [ 915.760853][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 915.766342][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 915.771737][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 915.777917][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 915.784095][ T32] watchdog+0x10e7/0x10f0 [ 915.788495][ T32] ? watchdog+0x209/0x10f0 [ 915.792943][ T32] kthread+0x38b/0x480 [ 915.797046][ T32] ? __pfx_watchdog+0x10/0x10 [ 915.801759][ T32] ? __pfx_kthread+0x10/0x10 [ 915.806361][ T32] ret_from_fork+0x514/0xb70 [ 915.810969][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 915.816107][ T32] ? __switch_to+0xc78/0x1410 [ 915.820810][ T32] ? __pfx_kthread+0x10/0x10 [ 915.825415][ T32] ret_from_fork_asm+0x1a/0x30 [ 915.830218][ T32] [ 915.833789][ T32] Kernel Offset: disabled [ 915.838111][ T32] Rebooting in 86400 seconds..