last executing test programs: 5.405642795s ago: executing program 2 (id=55): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1002}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) write$tun(r0, &(0x7f0000000200)={@void, @void, @x25={0x1, 0x0, 0x0, "0100010b22"}}, 0x8) 4.938325653s ago: executing program 0 (id=59): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, 0x0) ioctl$sock_ifreq(r0, 0x891c, 0x0) ioctl$sock_ifreq(r0, 0x89a2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) write(r1, &(0x7f0000000800)="0c01000013000101010000000000000007000000040000000000000000000000ec001a80e80004802400018008000100010000000800020001000000080003000100000008000400040000002800038008000100010000000a0002000011223344550000080003000300000008000400010000005000048008000100010000000800020001000000080003000100000034000400aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa4800088008000100010000000a00020000112233445500000800030001000000080004000a000000080005000100000005000600010000000800070001000000050008000100", 0x10a) 4.937989222s ago: executing program 1 (id=60): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}) 4.93733323s ago: executing program 2 (id=61): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001300)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001500)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001d00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001f00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002100)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002300)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 4.727521077s ago: executing program 0 (id=63): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x2382, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x2, &(0x7f0000000500)=@raw=[@generic={0xb7, 0x0, 0x0, 0x0, 0x1}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r2, r3, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r2, &(0x7f0000000240)='\x00\x00\x00\x00', &(0x7f0000000280)=@udp=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000340)="01000000", &(0x7f0000000380)=@tcp=r1}, 0x20) write(r1, &(0x7f0000000700)='hello world\x00', 0xc) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)=""/128, 0x80}], 0x1}, 0x0) 4.662380393s ago: executing program 1 (id=64): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r0, 0x5) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000250)='hello', 0x5}], 0x1, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x18, 0x110, 0x2, "01000000"}], 0x30}, 0x0) nanosleep(&(0x7f0000000400)={0x3}, 0x0) 4.475784435s ago: executing program 2 (id=67): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x150, 0x10, 0x5, 0x1, 0x0, {{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x60, 0x14, {{'hmac(sha1)\x00'}, 0xa0, 0x60, "000102030405060708090a0b0c0d0e0f10111213"}}]}, 0x150}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000600)="1234567890", 0xa, 0x0, &(0x7f0000000700)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 4.343037076s ago: executing program 2 (id=70): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x3c, 0x18, 0x1, 0x0, 0x0, {0x1}, [@generic="0e0001006f76735f647030000800020000000000"]}, 0x3c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x48, 0x19, 0x1, 0x0, 0x0, {0x1}, [@generic="08000200040000000f00030076786c616e5f73797a3000000800050000000000100004000800060012340000"]}, 0x48}}, 0x0) 4.229504994s ago: executing program 4 (id=71): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="b7000000020000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000000)={r0, 0x0, 0xe, 0x0, &(0x7f0000000400)="00112233445566778899aabb0800", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 4.180347774s ago: executing program 2 (id=72): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) listen(r0, 0xa) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000100100000100000001000000000000001000000000000000100100000e000000"], 0x28}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000300)="1234567800000100000000010000000100000001010100000000000100000000", 0x20, 0x0, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000500)={0x1}, 0x0) sendto$inet(r1, &(0x7f0000000300)="1234567800000100000000000000000000000002070100000000000100000000", 0x20, 0x0, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000500)={0x1}, 0x0) recvmsg(r0, &(0x7f0000000600), 0x0) 4.08408181s ago: executing program 4 (id=74): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000080)='1\x00', 0x2) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) bind$inet(r1, &(0x7f0000000000)={0x2, 0x3210, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) connect$inet(r2, &(0x7f0000000000)={0x2, 0x3210, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x9a, &(0x7f0000000200), 0x4) 4.041566842s ago: executing program 3 (id=75): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "000102030405060708090a0b0c0d0e0f10111213"}}]}]}, 0x54}}, 0x0) 3.915706073s ago: executing program 3 (id=76): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) 3.877153239s ago: executing program 4 (id=77): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001300)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001500)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001d00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001f00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002100)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002300)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 3.868130169s ago: executing program 3 (id=78): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x50, 0x0, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x48, 0x0, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x48}}, 0x0) 3.755168273s ago: executing program 4 (id=79): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 3.703639934s ago: executing program 3 (id=80): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x605, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x1}]}}}]}, 0x50}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x605, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000380), 0xc, &(0x7f00000003c0)={&(0x7f0000000400)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f0000000480), 0xc, &(0x7f00000004c0)={&(0x7f0000000500)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}]}, 0x24}}, 0x0) 3.703225107s ago: executing program 1 (id=81): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0x3, 0x3, 0x3}, @timestamp={0x8, 0xa, 0x5, 0x2}, @generic={0x0, 0x8, "d58838068b91"}]}}, {'\x00'}}}}}, 0x4e) 3.676175612s ago: executing program 0 (id=82): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x10, 0x114, 0x8, 0x1}], 0x10, 0x4000000}, 0x4000000) 3.485763716s ago: executing program 0 (id=83): syz_emit_ethernet(0x30, &(0x7f0000000000)={@local, @empty, @void, {@generic={0x8847, "000001ff4500002800004000400600007f0000017f0000010050005000000000000000005002200000000000"}}}, 0x0) 3.435477399s ago: executing program 4 (id=84): r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:/path123456789012345678901234567890123456789012345678901234567890\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='addr\x00', &(0x7f0000000100)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000180)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='port\x00', &(0x7f0000000200)='2049\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='mountport\x00', &(0x7f0000000280)='2049\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 3.366706341s ago: executing program 3 (id=85): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, 0x0) ioctl$sock_ifreq(r0, 0x891c, 0x0) ioctl$sock_ifreq(r0, 0x89a2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) write(r1, &(0x7f0000000800)="0c01000013000101010000000000000007000000040000000000000000000000ec001a80e80004802400018008000100010000000800020001000000080003000100000008000400040000002800038008000100010000000a0002000011223344550000080003000300000008000400010000005000048008000100010000000800020001000000080003000100000034000400aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa4800088008000100010000000a00020000112233445500000800030001000000080004000a00000008000500010000000500060001000000080007000100000005000800010000", 0x10b) 3.336071515s ago: executing program 4 (id=86): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) syz_usb_connect(0x0, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040950b901700010102030109022700010100a0320904000003ffff0000070581031000080705820200020007050302000200"], 0x0) nanosleep(&(0x7f0000000200)={0x2}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x2c}}, 0x0) 3.27542456s ago: executing program 1 (id=87): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x28, 0x14, 0x5, 0x0, 0x0, {0x2, 0x20}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_ADDRESS={0x8, 0x1, @loopback}]}, 0x28}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000000000000800450000281234000040110000ac1414020a00000100"/48], 0x0) 3.275134468s ago: executing program 0 (id=88): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) listen(r0, 0xa) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000100100000e0000000100000000000000"], 0x18}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000300)="1234567800000100000000010000000100000001010100000000000100000000", 0x20, 0x0, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) sendto$inet(r1, &(0x7f0000000300)="1234567800000100000000000000000000000002070100000000000100000000", 0x20, 0x0, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) recvmsg(r0, &(0x7f0000000600), 0x40) 3.256273779s ago: executing program 2 (id=89): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001300)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001500)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001d00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001f00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002100)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002300)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 3.172726851s ago: executing program 1 (id=90): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newsa={0x0, 0x16, 0x5, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {@in=@loopback, 0x1234, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x1, 0x2, 0x0, 0x0, 0x20}, [@algo_aead={0x0, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}, @replay_esn_val={0x0, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x40, [0x0]}}]}}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newpolicy={0x0, 0x13, 0x5, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x0, 0x12, [{{@in=@loopback, 0x1234, 0x32}, 0x2, @in=@loopback, 0x1}]}]}}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x1234, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000420)={0x2, 0x1234, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000500)="12345678", 0x8, 0x0, 0x0, 0x0) 3.156742531s ago: executing program 3 (id=91): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x3c, 0x0, 0x8, 0x105, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1e000000}]}]}, 0x3c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000010000501010000000000000001010000000000001c0001000800060008000000100007007f0000017f000001110040001400020010000c000900090073797a3000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000018000501010000000000000001010000000000001c0001000800060008000000100007007f0000017f000001110040001400020010000c000900090073797a3000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000019000501010000000000000001010000000000001c0001000800060008000000100007007f0000017f000001110040001400020010000c000900090073797a3000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000020000501010000000000000001010000000000001c0001000800060008000000100007007f0000017f000001110040001400020010000c000900090073797a3000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000021000501010000000000000001010000000000001c0001000800060008000000100007007f0000017f000001110040001400020010000c000900090073797a3000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000030000501010000000000000001010000000000001c0001000800060008000000100007007f0000017f000001110040001400020010000c000900090073797a3000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000040000501010000000000000001010000000000001c0001000800060008000000100007007f0000017f000001110040001400020010000c000900090073797a3000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000800060008000000100007007f0000017f000001110040001400020010000c000900090073797a3000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 3.062779076s ago: executing program 1 (id=92): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0xc0, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x90, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3e8}]}]}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0xffffffffc4653600}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xc0}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000400)={0x11, 0x0, r2, 0x0}, 0x14) write(r3, &(0x7f0000000500)="00000000000000000000000008004500001c000000004011000001010101010101020001000100080000", 0x2a) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) 0s ago: executing program 0 (id=93): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c000000000001010000000000000000020000000900010073797a3000000000060002400200000005000300110000000c000480080001400000001e"], 0x3c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30000000000800024000000003440000000a0a01000000000000000000020000000900020073797a300000000008000440000000070900010073797a30000000001c000300050001001100000010000200080001000000001e14000000110001"], 0x94}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000130003000000000000000000020000000900020073797a300000000008000340000000070900010073797a3000000000"], 0x34}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.25' (ED25519) to the list of known hosts. [ 83.850369][ T5612] cgroup: Unknown subsys name 'net' [ 83.982426][ T5612] cgroup: Unknown subsys name 'cpuset' [ 83.991407][ T5612] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.749802][ T5612] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.448829][ T5630] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.459503][ T5636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.471062][ T5636] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.471790][ T5630] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.482058][ T5636] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.490098][ T5630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.496052][ T5636] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.502862][ T5630] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.520291][ T5639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.520838][ T5630] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.529652][ T5636] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.537886][ T5630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.554301][ T5639] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.556196][ T5630] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.564120][ T5639] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.570710][ T5630] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.579534][ T5639] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.585686][ T5630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.593765][ T5639] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.598741][ T5640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.609832][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.616327][ T5630] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.624300][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.629878][ T5640] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.660554][ T5630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.920010][ T5644] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.928850][ T5644] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.936712][ T5644] bridge_slave_0: entered allmulticast mode [ 90.944320][ T5644] bridge_slave_0: entered promiscuous mode [ 90.959026][ T5642] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.966602][ T5642] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.974272][ T5642] bridge_slave_0: entered allmulticast mode [ 90.983163][ T5642] bridge_slave_0: entered promiscuous mode [ 91.037217][ T5644] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.045043][ T5644] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.052466][ T5644] bridge_slave_1: entered allmulticast mode [ 91.060752][ T5644] bridge_slave_1: entered promiscuous mode [ 91.074724][ T5642] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.082311][ T5642] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.089884][ T5642] bridge_slave_1: entered allmulticast mode [ 91.097297][ T5642] bridge_slave_1: entered promiscuous mode [ 91.110789][ T5645] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.118118][ T5645] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.125483][ T5645] bridge_slave_0: entered allmulticast mode [ 91.133212][ T5645] bridge_slave_0: entered promiscuous mode [ 91.141614][ T5645] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.149175][ T5645] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.156653][ T5645] bridge_slave_1: entered allmulticast mode [ 91.164017][ T5645] bridge_slave_1: entered promiscuous mode [ 91.279931][ T5644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.289820][ T5647] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.297246][ T5647] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.305180][ T5647] bridge_slave_0: entered allmulticast mode [ 91.313037][ T5647] bridge_slave_0: entered promiscuous mode [ 91.324871][ T5642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.348746][ T5645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.360809][ T5644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.373016][ T5647] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.381013][ T5647] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.388851][ T5647] bridge_slave_1: entered allmulticast mode [ 91.396746][ T5647] bridge_slave_1: entered promiscuous mode [ 91.407105][ T5642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.417183][ T5646] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.424569][ T5646] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.433123][ T5646] bridge_slave_0: entered allmulticast mode [ 91.441210][ T5646] bridge_slave_0: entered promiscuous mode [ 91.453594][ T5645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.497082][ T5646] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.505199][ T5646] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.512721][ T5646] bridge_slave_1: entered allmulticast mode [ 91.521324][ T5646] bridge_slave_1: entered promiscuous mode [ 91.594680][ T5644] team0: Port device team_slave_0 added [ 91.604236][ T5647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.616147][ T5642] team0: Port device team_slave_0 added [ 91.634368][ T5645] team0: Port device team_slave_0 added [ 91.642344][ T5644] team0: Port device team_slave_1 added [ 91.662879][ T5647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.673951][ T5642] team0: Port device team_slave_1 added [ 91.692350][ T5646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.704223][ T5645] team0: Port device team_slave_1 added [ 91.711599][ T5632] Bluetooth: hci2: command tx timeout [ 91.711606][ T5630] Bluetooth: hci0: command tx timeout [ 91.719224][ T5630] Bluetooth: hci1: command tx timeout [ 91.724598][ T4940] Bluetooth: hci4: command tx timeout [ 91.778379][ T5646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.788666][ T4940] Bluetooth: hci3: command tx timeout [ 91.802136][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.809534][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.836912][ T5644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.860329][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.867875][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.895595][ T5642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.918119][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.925736][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.953262][ T5645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.965756][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.973956][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.002180][ T5644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.016586][ T5647] team0: Port device team_slave_0 added [ 92.024192][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.033144][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.063296][ T5642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.086245][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.093461][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.121342][ T5645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.145919][ T5647] team0: Port device team_slave_1 added [ 92.161548][ T5646] team0: Port device team_slave_0 added [ 92.201564][ T5646] team0: Port device team_slave_1 added [ 92.237828][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.245201][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.273156][ T5647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.327971][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.335193][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.362770][ T5647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.377892][ T10] cfg80211: failed to load regulatory.db [ 92.398006][ T5646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.406449][ T5646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.434360][ T5646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.462248][ T5642] hsr_slave_0: entered promiscuous mode [ 92.469128][ T5642] hsr_slave_1: entered promiscuous mode [ 92.487535][ T5644] hsr_slave_0: entered promiscuous mode [ 92.494293][ T5644] hsr_slave_1: entered promiscuous mode [ 92.503306][ T5644] debugfs: 'hsr0' already exists in 'hsr' [ 92.510847][ T5644] Cannot create hsr debugfs directory [ 92.527583][ T5646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.534986][ T5646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.563660][ T5646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.581749][ T5645] hsr_slave_0: entered promiscuous mode [ 92.588829][ T5645] hsr_slave_1: entered promiscuous mode [ 92.595028][ T5645] debugfs: 'hsr0' already exists in 'hsr' [ 92.601124][ T5645] Cannot create hsr debugfs directory [ 92.716055][ T5647] hsr_slave_0: entered promiscuous mode [ 92.723684][ T5647] hsr_slave_1: entered promiscuous mode [ 92.730301][ T5647] debugfs: 'hsr0' already exists in 'hsr' [ 92.736060][ T5647] Cannot create hsr debugfs directory [ 92.849600][ T5646] hsr_slave_0: entered promiscuous mode [ 92.856163][ T5646] hsr_slave_1: entered promiscuous mode [ 92.863242][ T5646] debugfs: 'hsr0' already exists in 'hsr' [ 92.869106][ T5646] Cannot create hsr debugfs directory [ 93.328666][ T5642] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.345624][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.353921][ T5642] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.365681][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.374104][ T5642] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.386144][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.395709][ T5642] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.406065][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.490923][ T5644] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.504474][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.520224][ T5644] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.532689][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.541522][ T5644] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.552777][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.575051][ T5644] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.585144][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.683875][ T5645] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.694042][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.706444][ T5645] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.718853][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.727702][ T5645] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.737933][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.762433][ T5645] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.772801][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.788472][ T4940] Bluetooth: hci4: command tx timeout [ 93.794630][ T5632] Bluetooth: hci1: command tx timeout [ 93.794653][ T5630] Bluetooth: hci2: command tx timeout [ 93.800927][ T4940] Bluetooth: hci0: command tx timeout [ 93.868726][ T4940] Bluetooth: hci3: command tx timeout [ 93.888691][ T5646] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.899383][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.912637][ T5646] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.925174][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.933843][ T5646] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.945557][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.957022][ T5642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.974498][ T5646] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.985356][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.097139][ T5642] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.139754][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.147956][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.166166][ T5647] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.176299][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.198519][ T5647] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.211415][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.233633][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.240955][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.261479][ T5647] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.273436][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.290084][ T5647] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.300176][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.361291][ T5644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.437915][ T5644] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.480328][ T752] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.488430][ T752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.518296][ T752] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.526512][ T752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.544368][ T5646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.593314][ T5645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.617142][ T5646] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.662507][ T3270] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.669713][ T3270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.685722][ T5642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.709936][ T752] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.717085][ T752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.732196][ T5645] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.763295][ T752] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.770892][ T752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.816601][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.825129][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.870561][ T5647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.973124][ T5645] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.002181][ T5647] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.027534][ T5644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.045383][ T5642] veth0_vlan: entered promiscuous mode [ 95.063003][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.070582][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.097768][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.105623][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.133065][ T5642] veth1_vlan: entered promiscuous mode [ 95.145517][ T5646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.204174][ T5645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.291190][ T5644] veth0_vlan: entered promiscuous mode [ 95.350080][ T5646] veth0_vlan: entered promiscuous mode [ 95.365793][ T5644] veth1_vlan: entered promiscuous mode [ 95.389269][ T5645] veth0_vlan: entered promiscuous mode [ 95.401850][ T5642] veth0_macvtap: entered promiscuous mode [ 95.427049][ T5645] veth1_vlan: entered promiscuous mode [ 95.435519][ T5642] veth1_macvtap: entered promiscuous mode [ 95.444137][ T5646] veth1_vlan: entered promiscuous mode [ 95.511074][ T5647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.536595][ T5644] veth0_macvtap: entered promiscuous mode [ 95.561807][ T5644] veth1_macvtap: entered promiscuous mode [ 95.573460][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.583584][ T5646] veth0_macvtap: entered promiscuous mode [ 95.604334][ T5645] veth0_macvtap: entered promiscuous mode [ 95.613019][ T5646] veth1_macvtap: entered promiscuous mode [ 95.626897][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.655900][ T5645] veth1_macvtap: entered promiscuous mode [ 95.679559][ T65] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.690817][ T65] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.703734][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.725900][ T65] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.736092][ T65] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.752732][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.785031][ T5646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.802575][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.835432][ T5646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.865756][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.873384][ T4940] Bluetooth: hci0: command tx timeout [ 95.873426][ T4940] Bluetooth: hci1: command tx timeout [ 95.879159][ T5632] Bluetooth: hci2: command tx timeout [ 95.888458][ T4940] Bluetooth: hci4: command tx timeout [ 95.900375][ T65] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.918105][ T65] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.947850][ T65] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.951023][ T4940] Bluetooth: hci3: command tx timeout [ 95.962894][ T65] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.962957][ T65] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.962995][ T65] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.963033][ T65] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.963070][ T65] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.050331][ T752] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.060378][ T3270] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.076334][ T5647] veth0_vlan: entered promiscuous mode [ 96.093744][ T3270] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.102905][ T3270] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.147767][ T3270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.158380][ T3270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.190124][ T5647] veth1_vlan: entered promiscuous mode [ 96.242717][ T3270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.267688][ T3270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.306988][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.315549][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.385848][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.408910][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.445075][ T5642] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.454778][ T5647] veth0_macvtap: entered promiscuous mode [ 96.501083][ T5647] veth1_macvtap: entered promiscuous mode [ 96.505964][ T5642] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 96.534644][ T5642] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 96.548915][ T5642] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 96.565736][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.584143][ T5644] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 96.584814][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.635541][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.677103][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.703724][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.760998][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.796023][ T5727] bridge0: port 3(gretap0) entered blocking state [ 96.807109][ T5727] bridge0: port 3(gretap0) entered disabled state [ 96.815810][ T5727] gretap0: entered allmulticast mode [ 96.823063][ T5727] gretap0: entered promiscuous mode [ 96.831063][ T5727] bridge0: port 3(gretap0) entered blocking state [ 96.838849][ T5727] bridge0: port 3(gretap0) entered forwarding state [ 96.850315][ T3270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.861705][ T3270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.881026][ T5729] bridge0: port 4(erspan0) entered blocking state [ 96.888909][ T5729] bridge0: port 4(erspan0) entered disabled state [ 96.896348][ T5729] erspan0: entered allmulticast mode [ 96.904406][ T5729] erspan0: entered promiscuous mode [ 96.911490][ T5729] bridge0: port 4(erspan0) entered blocking state [ 96.918514][ T5729] bridge0: port 4(erspan0) entered forwarding state [ 96.948862][ T752] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.982064][ T3270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.995524][ T752] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.020733][ T3270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.029686][ T752] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.065816][ T5732] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6'. [ 97.091345][ T752] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.099983][ T5732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6'. [ 97.376686][ T5736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 97.400154][ T752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.431287][ T752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.666532][ T752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.691322][ T752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.949526][ T4940] Bluetooth: hci4: command tx timeout [ 97.951045][ T5632] Bluetooth: hci2: command tx timeout [ 97.955336][ T4940] Bluetooth: hci1: command tx timeout [ 97.955365][ T4940] Bluetooth: hci0: command tx timeout [ 98.027899][ T5756] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'. [ 98.037220][ T5632] Bluetooth: hci3: command tx timeout [ 98.049379][ T5757] openvswitch: netlink: Key 13 has unexpected len 4 expected 24 [ 98.072960][ T5759] tipc: Started in network mode [ 98.089964][ T5759] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 98.259253][ T5763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17'. [ 98.314373][ T5763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17'. [ 98.336121][ T5763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17'. [ 98.374651][ T5766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16'. [ 98.393674][ T5763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17'. [ 98.720773][ T5783] netlink: 32 bytes leftover after parsing attributes in process `syz.1.23'. [ 98.858740][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.995497][ T5783] tipc: Started in network mode [ 99.001921][ T5783] tipc: Node identity 1000001, cluster identity 4711 [ 99.009807][ T5783] tipc: Node number set to 16777217 [ 99.060344][ T10] usb 4-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 99.073881][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.075704][ T5786] tipc: Enabled bearer , priority 10 [ 99.085927][ T10] usb 4-1: Product: syz [ 99.115355][ T10] usb 4-1: Manufacturer: syz [ 99.128514][ T10] usb 4-1: SerialNumber: syz [ 99.381202][ T5801] tipc: Started in network mode [ 99.423026][ T5801] tipc: Node identity 7f000001, cluster identity 4711 [ 99.443282][ T5801] tipc: New replicast peer: 127.0.0.1 [ 99.449764][ T5801] tipc: Enabled bearer , priority 10 [ 100.416647][ T5831] Zero length message leads to an empty skb [ 100.619687][ T24] tipc: Node number set to 2130706433 [ 100.680969][ T5838] netlink: 'syz.4.41': attribute type 2 has an invalid length. [ 101.429500][ T10] ax88179_178a 4-1:1.0: probe with driver ax88179_178a failed with error -71 [ 101.497733][ T5864] tipc: Enabling of bearer rejected, failed to enable media [ 101.503490][ T10] usb 4-1: USB disconnect, device number 2 [ 101.565161][ T5866] bridge0: port 3(syz_tun) entered blocking state [ 101.599070][ T5866] bridge0: port 3(syz_tun) entered disabled state [ 101.624914][ T5866] syz_tun: entered allmulticast mode [ 101.664436][ T5866] syz_tun: entered promiscuous mode [ 101.675487][ T5866] bridge0: port 3(syz_tun) entered blocking state [ 101.682308][ T5866] bridge0: port 3(syz_tun) entered forwarding state [ 101.719469][ T5869] bridge0: port 4(ip6gretap0) entered blocking state [ 101.741739][ T5869] bridge0: port 4(ip6gretap0) entered disabled state [ 101.753975][ T5869] ip6gretap0: entered allmulticast mode [ 101.767088][ T5869] ip6gretap0: entered promiscuous mode [ 101.780706][ T5869] bridge0: port 4(ip6gretap0) entered blocking state [ 101.787859][ T5869] bridge0: port 4(ip6gretap0) entered forwarding state [ 101.826354][ T5876] bridge0: port 5(bond0) entered blocking state [ 101.849703][ T5876] bridge0: port 5(bond0) entered disabled state [ 101.870644][ T5876] bond0: entered allmulticast mode [ 101.878069][ T5876] bond_slave_0: entered allmulticast mode [ 101.892424][ T5876] bond_slave_1: entered allmulticast mode [ 101.929833][ T5876] bond0: entered promiscuous mode [ 101.941135][ T5876] bond_slave_0: entered promiscuous mode [ 101.950749][ T5876] bond_slave_1: entered promiscuous mode [ 101.970739][ T5876] bridge0: port 5(bond0) entered blocking state [ 101.977617][ T5876] bridge0: port 5(bond0) entered forwarding state [ 101.986029][ T5866] bridge0: port 6(team0) entered blocking state [ 101.993103][ T5866] bridge0: port 6(team0) entered disabled state [ 102.000241][ T5866] team0: entered allmulticast mode [ 102.005518][ T5866] team_slave_0: entered allmulticast mode [ 102.012986][ T5866] team_slave_1: entered allmulticast mode [ 102.023261][ T5866] team0: entered promiscuous mode [ 102.030103][ T5866] team_slave_0: entered promiscuous mode [ 102.039380][ T5866] team_slave_1: entered promiscuous mode [ 102.046094][ T5866] bridge0: port 6(team0) entered blocking state [ 102.054232][ T5866] bridge0: port 6(team0) entered forwarding state [ 102.101261][ T5869] bridge0: port 7(dummy0) entered blocking state [ 102.124071][ T5869] bridge0: port 7(dummy0) entered disabled state [ 102.154859][ T5869] dummy0: entered allmulticast mode [ 102.195947][ T5869] dummy0: entered promiscuous mode [ 102.249634][ T5869] bridge0: port 7(dummy0) entered blocking state [ 102.256278][ T5869] bridge0: port 7(dummy0) entered forwarding state [ 102.301087][ T5866] bridge0: port 8(batadv0) entered blocking state [ 102.310061][ T5866] bridge0: port 8(batadv0) entered disabled state [ 102.318535][ T5866] batadv0: entered allmulticast mode [ 102.334228][ T5866] batadv0: entered promiscuous mode [ 102.356568][ T5866] bridge0: port 8(batadv0) entered blocking state [ 102.363438][ T5866] bridge0: port 8(batadv0) entered forwarding state [ 102.372996][ T752] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 102.382867][ T752] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 102.649578][ T5908] __nla_validate_parse: 5 callbacks suppressed [ 102.649594][ T5908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.66'. [ 102.679984][ T5908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.66'. [ 102.774427][ T5911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.67'. [ 102.785922][ T5911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.67'. [ 102.893573][ T5917] netlink: 24 bytes leftover after parsing attributes in process `syz.2.70'. [ 103.560666][ T5942] bridge0: port 3(dummy0) entered blocking state [ 103.576931][ T5942] bridge0: port 3(dummy0) entered disabled state [ 103.584424][ T5940] syz.1.81 uses obsolete (PF_INET,SOCK_PACKET) [ 103.615389][ T5942] dummy0: entered allmulticast mode [ 103.629627][ T5942] dummy0: entered promiscuous mode [ 103.643196][ T5942] bridge0: port 3(dummy0) entered blocking state [ 103.650631][ T5942] bridge0: port 3(dummy0) entered forwarding state [ 104.158674][ T5970] netlink: 52 bytes leftover after parsing attributes in process `syz.3.91'. [ 104.169541][ T5970] netlink: 'syz.3.91': attribute type 1 has an invalid length. [ 104.177251][ T5970] netlink: 'syz.3.91': attribute type 2 has an invalid length. [ 104.186281][ T5970] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 296.338139][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 296.345468][ C1] rcu: 0-...!: (1 GPs behind) idle=398c/1/0x4000000000000000 softirq=15353/15354 fqs=0 [ 296.356100][ C1] rcu: hardirqs softirqs csw/system [ 296.362706][ C1] rcu: number: 15 16 5 [ 296.369340][ C1] rcu: cputime: 0 74 0 ==> 106100(ms) [ 296.377986][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5971/1:b..l P5645/1:b..l [ 296.388229][ C1] rcu: (detected by 1, t=10502 jiffies, g=16149, q=1649 ncpus=2) [ 296.396683][ C1] Sending NMI from CPU 1 to CPUs 0: [ 296.396717][ C0] NMI backtrace for cpu 0 [ 296.396800][ C0] CPU: 0 UID: 0 PID: 5642 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 296.396817][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 296.396851][ C0] RIP: 0010:__lock_acquire+0x62b/0x2cf0 [ 296.396880][ C0] Code: 00 00 e8 08 45 00 00 85 c0 0f 84 94 0d 00 00 41 83 be 84 0b 00 00 00 74 4a 4c 89 f7 4c 89 ee ba 05 00 00 00 eb 30 85 c9 74 17 <31> ed 4c 89 f7 4c 89 ee 31 d2 e8 d6 44 00 00 85 c0 0f 84 64 0d 00 [ 296.396893][ C0] RSP: 0000:ffffc90000007b20 EFLAGS: 00000002 [ 296.396909][ C0] RAX: 00000000000c4000 RBX: ffff88807f268cb0 RCX: 0000000000000001 [ 296.396921][ C0] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 0000000000000000 [ 296.396931][ C0] RBP: 0000000000000001 R08: ffffffff84df01c7 R09: 0000000000080000 [ 296.396942][ C0] R10: 0000000000000000 R11: ffffffff9aa182f8 R12: 0000000000000002 [ 296.396952][ C0] R13: ffff88807f268c90 R14: ffff88807f268000 R15: 0000000000000006 [ 296.396963][ C0] FS: 0000000000000000(0000) GS:ffff888124f4e000(0063) knlGS:00000000584ed480 [ 296.396977][ C0] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 296.396989][ C0] CR2: 00000000584f921c CR3: 0000000078006000 CR4: 00000000003526f0 [ 296.397023][ C0] Call Trace: [ 296.397032][ C0] [ 296.397041][ C0] ? __lock_acquire+0x683/0x2cf0 [ 296.397066][ C0] ? __lock_acquire+0x683/0x2cf0 [ 296.397089][ C0] ? debug_object_activate+0xb7/0x420 [ 296.397110][ C0] lock_acquire+0x106/0x350 [ 296.397130][ C0] ? debug_object_activate+0xb7/0x420 [ 296.397152][ C0] ? debug_object_activate+0x364/0x420 [ 296.397174][ C0] ? debug_object_activate+0x364/0x420 [ 296.397200][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 296.397216][ C0] ? debug_object_activate+0xb7/0x420 [ 296.397236][ C0] debug_object_activate+0xb7/0x420 [ 296.397268][ C0] enqueue_hrtimer+0xa9/0x2c0 [ 296.397289][ C0] __hrtimer_run_queues+0x4ce/0xa10 [ 296.397312][ C0] hrtimer_interrupt+0x448/0x910 [ 296.397337][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 296.397356][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 296.397373][ C0] [ 296.397378][ C0] [ 296.397384][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 296.397402][ C0] RIP: 0010:lock_acquire+0x221/0x350 [ 296.397422][ C0] Code: ff ff ff e8 61 2f 2e 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 4b 6a ca 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 38 6a b8 [ 296.397435][ C0] RSP: 0000:ffffc9000429f4e0 EFLAGS: 00000282 [ 296.397448][ C0] RAX: ac7217b08b6f1900 RBX: 0000000000000000 RCX: 0000000080000201 [ 296.397459][ C0] RDX: 00000000293e6a60 RSI: ffffffff8e4b28e4 RDI: ffffffff8c4bdc80 [ 296.397470][ C0] RBP: ffffffff8177827f R08: ffffffff8177827f R09: 0000000000000000 [ 296.397480][ C0] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: 0000000000000002 [ 296.397490][ C0] R13: ffffffff8eb59c60 R14: 0000000000000000 R15: 0000000000000246 [ 296.397502][ C0] ? unwind_next_frame+0x8f/0x2550 [ 296.397520][ C0] ? unwind_next_frame+0x8f/0x2550 [ 296.397538][ C0] ? debug_object_assert_init+0x330/0x380 [ 296.397559][ C0] ? unwind_next_frame+0x8f/0x2550 [ 296.397575][ C0] unwind_next_frame+0xac/0x2550 [ 296.397590][ C0] ? unwind_next_frame+0x8f/0x2550 [ 296.397607][ C0] ? fill_pool+0x165/0x610 [ 296.397627][ C0] ? unwind_next_frame+0x8f/0x2550 [ 296.397643][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 296.397662][ C0] arch_stack_walk+0x11b/0x150 [ 296.397681][ C0] ? debug_object_assert_init+0x330/0x380 [ 296.397703][ C0] stack_trace_save+0xa9/0x100 [ 296.397722][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 296.397742][ C0] ? stack_depot_save_flags+0x33/0x800 [ 296.397764][ C0] kasan_save_track+0x3e/0x80 [ 296.397784][ C0] ? kasan_save_track+0x3e/0x80 [ 296.397802][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 296.397822][ C0] ? kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 296.397840][ C0] ? fill_pool+0x165/0x610 [ 296.397859][ C0] ? debug_object_assert_init+0x330/0x380 [ 296.397896][ C0] __kasan_slab_alloc+0x6c/0x80 [ 296.397917][ C0] kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 296.397936][ C0] ? kmem_cache_alloc_noprof+0x150/0x5f0 [ 296.397953][ C0] ? fill_pool+0x165/0x610 [ 296.397972][ C0] ? fill_pool+0x165/0x610 [ 296.397995][ C0] fill_pool+0x165/0x610 [ 296.398016][ C0] ? __pfx_fill_pool+0x10/0x10 [ 296.398037][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 296.398055][ C0] ? debug_object_assert_init+0x307/0x380 [ 296.398075][ C0] debug_object_assert_init+0x330/0x380 [ 296.398100][ C0] timer_delete+0x33/0x340 [ 296.398120][ C0] ? xa_destroy+0x1e6/0x2e0 [ 296.398141][ C0] sk_stop_timer+0x1b/0x90 [ 296.398163][ C0] inet_csk_clear_xmit_timers+0x64/0xb0 [ 296.398187][ C0] tcp_v4_destroy_sock+0x25f/0x570 [ 296.398208][ C0] ? __pfx_tcp_v4_destroy_sock+0x10/0x10 [ 296.398229][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 296.398245][ C0] ? __tcp_close+0x6b8/0xec0 [ 296.398271][ C0] ? __release_sock+0x33f/0x390 [ 296.398290][ C0] ? __tcp_close+0x6bf/0xec0 [ 296.398307][ C0] inet_csk_destroy_sock+0x165/0x340 [ 296.398323][ C0] ? __tcp_close+0x6bf/0xec0 [ 296.398340][ C0] __tcp_close+0xb34/0xec0 [ 296.398357][ C0] ? tcp_close+0x1d/0x110 [ 296.398376][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 296.398395][ C0] tcp_close+0x28/0x110 [ 296.398413][ C0] inet_release+0x143/0x190 [ 296.398436][ C0] sock_close+0xad/0x220 [ 296.398455][ C0] ? __pfx_sock_close+0x10/0x10 [ 296.398474][ C0] __fput+0x418/0xa50 [ 296.398497][ C0] fput_close_sync+0x11f/0x240 [ 296.398518][ C0] ? __pfx_fput_close_sync+0x10/0x10 [ 296.398541][ C0] __ia32_sys_close+0x7e/0x110 [ 296.398564][ C0] do_int80_emulation+0x19a/0x550 [ 296.398582][ C0] ? trace_irq_disable+0x3b/0x140 [ 296.398601][ C0] ? asm_int80_emulation+0x1a/0x20 [ 296.398616][ C0] ? clear_bhb_loop+0x40/0x90 [ 296.398631][ C0] ? clear_bhb_loop+0x40/0x90 [ 296.398648][ C0] asm_int80_emulation+0x1a/0x20 [ 296.398663][ C0] RIP: 0023:0xf71772eb [ 296.398679][ C0] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 296.398690][ C0] RSP: 002b:00000000f755f63c EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 296.398706][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 296.398716][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 296.398725][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 296.398734][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 296.398744][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 296.398759][ C0] [ 296.399719][ C1] task:syz-executor state:R running task stack:21992 pid:5645 tgid:5645 ppid:5619 task_flags:0x400140 flags:0x08080001 [ 297.100435][ C1] Call Trace: [ 297.104453][ C1] [ 297.107543][ C1] __schedule+0x17d9/0x56c0 [ 297.112207][ C1] ? irqentry_exit+0x218/0x8f0 [ 297.117035][ C1] ? pfn_valid+0xba/0x480 [ 297.121763][ C1] ? __pfx___schedule+0x10/0x10 [ 297.128315][ C1] ? lock_acquire+0x106/0x350 [ 297.134274][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 297.139763][ C1] preempt_schedule_common+0x82/0xd0 [ 297.145460][ C1] ? copy_pmd_range+0x4dd7/0x5880 [ 297.150620][ C1] preempt_schedule_thunk+0x16/0x40 [ 297.156304][ C1] _raw_spin_unlock+0x3f/0x50 [ 297.161113][ C1] copy_pmd_range+0x4e08/0x5880 [ 297.166106][ C1] ? kasan_save_track+0x4f/0x80 [ 297.171438][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 297.176502][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 297.181729][ C1] ? __do_fast_syscall_32+0x23e/0x6f0 [ 297.187398][ C1] ? do_fast_syscall_32+0x33/0x70 [ 297.192820][ C1] ? __lock_acquire+0x683/0x2cf0 [ 297.197898][ C1] copy_page_range+0xc26/0x1250 [ 297.202806][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 297.208921][ C1] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 297.215897][ C1] dup_mmap+0xf21/0x1d90 [ 297.220358][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 297.225065][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 297.230138][ C1] ? copy_mm+0x10f/0x480 [ 297.234405][ C1] ? copy_mm+0x10f/0x480 [ 297.238992][ C1] copy_mm+0x11a/0x480 [ 297.243088][ C1] ? copy_process+0xd3c/0x4390 [ 297.247877][ C1] copy_process+0x1e3e/0x4390 [ 297.252783][ C1] ? __lock_acquire+0x683/0x2cf0 [ 297.257931][ C1] ? copy_process+0xd3c/0x4390 [ 297.263018][ C1] ? __pfx_copy_process+0x10/0x10 [ 297.268165][ C1] kernel_clone+0x2d7/0x940 [ 297.272801][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 297.278135][ C1] __ia32_compat_sys_ia32_clone+0x1b4/0x230 [ 297.284503][ C1] ? __pfx___ia32_compat_sys_ia32_clone+0x10/0x10 [ 297.291256][ C1] ? exc_page_fault+0x6a/0xc0 [ 297.295970][ C1] __do_fast_syscall_32+0x23e/0x6f0 [ 297.301299][ C1] ? do_fast_syscall_32+0x33/0x70 [ 297.306432][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 297.311649][ C1] ? irqentry_exit+0x10f/0x8f0 [ 297.316539][ C1] ? trace_irq_disable+0x3b/0x140 [ 297.321967][ C1] do_fast_syscall_32+0x33/0x70 [ 297.327069][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 297.333449][ C1] RIP: 0023:0xf7fc60ec [ 297.337640][ C1] RSP: 002b:00000000f75afc80 EFLAGS: 00000206 ORIG_RAX: 0000000000000078 [ 297.346268][ C1] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 297.354605][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000057beb4e8 [ 297.363055][ C1] RBP: 00000000f75afcb4 R08: 0000000000000000 R09: 0000000000000000 [ 297.371411][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 297.379543][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 297.388097][ C1] [ 297.391243][ C1] task:syz.1.92 state:R running task stack:26728 pid:5971 tgid:5967 ppid:5647 task_flags:0x40044c flags:0x08080002 [ 297.404772][ C1] Call Trace: [ 297.408170][ C1] [ 297.411223][ C1] __schedule+0x17d9/0x56c0 [ 297.415790][ C1] ? __hrtimer_rearm_deferred+0x99/0x420 [ 297.421700][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 297.426763][ C1] ? __pfx___schedule+0x10/0x10 [ 297.431659][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 297.437169][ C1] preempt_schedule_common+0x82/0xd0 [ 297.442528][ C1] preempt_schedule_thunk+0x16/0x40 [ 297.447892][ C1] _raw_spin_unlock+0x3f/0x50 [ 297.453068][ C1] __zap_vma_range+0x4084/0x4f10 [ 297.458264][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 297.464739][ C1] ? mas_find+0xab1/0xcf0 [ 297.469157][ C1] ? unmap_vmas+0x1b9/0x550 [ 297.473940][ C1] unmap_vmas+0x390/0x550 [ 297.478324][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 297.483437][ C1] exit_mmap+0x293/0x9f0 [ 297.488128][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 297.493056][ C1] ? __pfx_exit_aio+0x10/0x10 [ 297.497966][ C1] ? arch_uprobe_clear_state+0x1c8/0x240 [ 297.503746][ C1] ? uprobe_clear_state+0x2ac/0x3e0 [ 297.509160][ C1] __mmput+0x118/0x420 [ 297.513354][ C1] exit_mm+0x221/0x2d0 [ 297.517548][ C1] do_exit+0x6cd/0x2360 [ 297.522748][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 297.528237][ C1] ? __pfx_do_exit+0x10/0x10 [ 297.533298][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 297.538534][ C1] do_group_exit+0x22d/0x2f0 [ 297.543232][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 297.548475][ C1] get_signal+0x121b/0x12c0 [ 297.553286][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 297.559126][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 297.565405][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 297.570644][ C1] exit_to_user_mode_loop+0x104/0x730 [ 297.576138][ C1] ? rcu_is_watching+0x15/0xb0 [ 297.581275][ C1] ret_from_fork+0x593/0xb70 [ 297.585909][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 297.591398][ C1] ? load_gs_index+0x97/0xc0 [ 297.596030][ C1] ? __switch_to+0xc89/0x1420 [ 297.600919][ C1] ret_from_fork_asm+0x1a/0x30 [ 297.606454][ C1] [ 297.609963][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g16149 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 297.621629][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 297.631846][ C1] rcu: RCU grace-period kthread stack dump: [ 297.638184][ C1] task:rcu_preempt state:R running task stack:28192 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 297.652347][ C1] Call Trace: [ 297.655880][ C1] [ 297.659091][ C1] __schedule+0x17d9/0x56c0 [ 297.664343][ C1] ? __lock_acquire+0x683/0x2cf0 [ 297.669889][ C1] ? __pfx___schedule+0x10/0x10 [ 297.674797][ C1] ? schedule+0x90/0x2b0 [ 297.679169][ C1] schedule+0x164/0x2b0 [ 297.684777][ C1] schedule_timeout+0x152/0x2c0 [ 297.689659][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 297.695163][ C1] ? __pfx_process_timeout+0x10/0x10 [ 297.701041][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 297.707240][ C1] ? prepare_to_swait_event+0x322/0x350 [ 297.713000][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 297.717882][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 297.723459][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 297.729647][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 297.735045][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 297.740357][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 297.746275][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 297.750891][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 297.756217][ C1] ? __kthread_parkme+0x71/0x1f0 [ 297.761270][ C1] ? __kthread_parkme+0x196/0x1f0 [ 297.766338][ C1] kthread+0x388/0x470 [ 297.770438][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 297.775920][ C1] ? __pfx_kthread+0x10/0x10 [ 297.780633][ C1] ret_from_fork+0x514/0xb70 [ 297.785264][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 297.790411][ C1] ? __switch_to+0xc89/0x1420 [ 297.795314][ C1] ? __pfx_kthread+0x10/0x10 [ 297.800138][ C1] ret_from_fork_asm+0x1a/0x30 [ 297.805043][ C1] [ 297.808108][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 297.814451][ C1] CPU: 1 UID: 0 PID: 5970 Comm: syz.3.91 Not tainted syzkaller #0 PREEMPT(full) [ 297.823770][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 297.834370][ C1] RIP: 0010:smp_call_function_many_cond+0x11e6/0x15f0 [ 297.841368][ C1] Code: c0 75 7a 41 8b 1e 89 de 83 e6 01 31 ff e8 e2 22 0c 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 07 e8 8e 1e 0c 00 eb 37 f3 90 <41> 0f b6 04 1c 84 c0 75 10 41 f7 06 01 00 00 00 74 1e e8 73 1e 0c [ 297.861720][ C1] RSP: 0000:ffffc90004edf140 EFLAGS: 00000293 [ 297.867822][ C1] RAX: ffffffff81bae58d RBX: dffffc0000000000 RCX: ffff888030741f00 [ 297.875901][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 297.883976][ C1] RBP: ffffc90004edf288 R08: ffff88802a930c07 R09: 1ffff11005526180 [ 297.892142][ C1] R10: dffffc0000000000 R11: ffffffff817973f0 R12: 1ffff110170c85fd [ 297.900220][ C1] R13: ffff8880b873c448 R14: ffff8880b8642fe8 R15: 0000000000000000 [ 297.908387][ C1] FS: 0000000000000000(0000) GS:ffff88812504e000(0000) knlGS:0000000000000000 [ 297.917348][ C1] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 297.924005][ C1] CR2: 00007febee14a6e8 CR3: 0000000074b14000 CR4: 00000000003526f0 [ 297.932003][ C1] Call Trace: [ 297.935305][ C1] [ 297.938267][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 297.943504][ C1] ? __pfx_should_flush_tlb+0x10/0x10 [ 297.949090][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 297.955453][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 297.960525][ C1] ? __pfx_should_flush_tlb+0x10/0x10 [ 297.965926][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 297.971166][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 297.976512][ C1] flush_tlb_mm_range+0x5c4/0x1090 [ 297.981736][ C1] ? rcu_is_watching+0x15/0xb0 [ 297.986618][ C1] __zap_vma_range+0x3ef5/0x4f10 [ 297.991731][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 297.997139][ C1] ? mas_find+0xab1/0xcf0 [ 298.001542][ C1] ? unmap_vmas+0x1b9/0x550 [ 298.006184][ C1] unmap_vmas+0x390/0x550 [ 298.010647][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 298.015550][ C1] exit_mmap+0x293/0x9f0 [ 298.020115][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 298.025101][ C1] ? __pfx_exit_aio+0x10/0x10 [ 298.029818][ C1] ? arch_uprobe_clear_state+0x1c8/0x240 [ 298.035889][ C1] ? uprobe_clear_state+0x2ac/0x3e0 [ 298.041130][ C1] __mmput+0x118/0x420 [ 298.045502][ C1] exit_mm+0x221/0x2d0 [ 298.049718][ C1] do_exit+0x6cd/0x2360 [ 298.054013][ C1] ? ___sys_sendmsg+0x2b5/0x360 [ 298.059066][ C1] ? __pfx_do_exit+0x10/0x10 [ 298.064224][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 298.069394][ C1] do_group_exit+0x22d/0x2f0 [ 298.074035][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 298.079461][ C1] get_signal+0x121b/0x12c0 [ 298.084196][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 298.089955][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 298.096244][ C1] exit_to_user_mode_loop+0x104/0x730 [ 298.101839][ C1] ? rcu_is_watching+0x15/0xb0 [ 298.106886][ C1] ? do_fast_syscall_32+0x33/0x70 [ 298.111946][ C1] __do_fast_syscall_32+0x45b/0x6f0 [ 298.117259][ C1] ? do_fast_syscall_32+0x33/0x70 [ 298.122675][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 298.128163][ C1] ? irqentry_exit+0x10f/0x8f0 [ 298.133239][ C1] ? trace_irq_disable+0x3b/0x140 [ 298.138421][ C1] do_fast_syscall_32+0x33/0x70 [ 298.143474][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 298.150433][ C1] RIP: 0023:0xf703f0ec [ 298.154971][ C1] Code: Unable to access opcode bytes at 0xf703f0c2. [ 298.162462][ C1] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 298.171164][ C1] RAX: 0000000000000048 RBX: 0000000000000004 RCX: 0000000080000200 [ 298.179610][ C1] RDX: 000000000000c000 RSI: 0000000000000000 RDI: 0000000000000000 [ 298.187739][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 298.195739][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 298.203831][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 298.212119][ C1]