last executing test programs: 1m54.96887547s ago: executing program 3 (id=45): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={&(0x7f0000000040), 0x10, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000140), 0x10, &(0x7f0000000180)={&(0x7f00000001c0)=@newtclass={0x50, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x18, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x1}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5dc}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000240), 0x10, &(0x7f0000000280)={&(0x7f00000002c0)=@newtclass={0x50, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x2}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x18, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x32}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5dc}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000340), 0x10, &(0x7f0000000380)={&(0x7f00000003c0)=@newtclass={0x50, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x3}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x18, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x64}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5dc}]}}]}, 0x50}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000500)=0x10001, 0x4) connect$inet(r1, &(0x7f0000000600)={0x2, 0x1234, @loopback}, 0x10) write(r1, &(0x7f0000000700)='hello11', 0x7) write(r1, &(0x7f0000000710)='hello12', 0x7) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xc, &(0x7f0000000b00)=0x10003, 0x4) write(r2, &(0x7f0000000d00)='test31', 0x6) write(r2, &(0x7f0000000d10)='test32', 0x6) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f0000000440), 0x10, &(0x7f0000000480)={&(0x7f00000004c0)=@deltclass={0x40, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f0000000540), 0x10, &(0x7f0000000580)={&(0x7f00000005c0)=@delqdisc={0x34, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x34}}, 0x0) 1m54.566706631s ago: executing program 3 (id=50): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x0, @bond={{0x9}, {0xc, 0x2, 0x0, 0x0, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x50}}, 0x0) 1m54.210141951s ago: executing program 3 (id=52): r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, 0x0, 0x0) listen(r0, 0x5) setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="80000100000000000000000100"/99, 0x63) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]}) (async) 1m53.999359398s ago: executing program 3 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./export\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='tmpfs\x00', &(0x7f0000000180)='./export\x00', &(0x7f00000001c0)='tmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='proc\x00', &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='tcp 2049\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='nfsd 127.0.0.1 2147483647 localhost\n\x00', 0x24) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000540)='localhost ./export 2147483647\n\x00', 0x1e) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./export/dir1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./export/dir2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./export/dir3\x00', 0x1ff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000900)={0x2, 0x8008, @loopback}, 0x10) write(r3, &(0x7f0000000a00)="80000038000000010000000000000002000186a300000003000000100000000000000000000000000000000000000000000000000000000020", 0x3c) nanosleep(&(0x7f0000000b00)={0x0, 0x5f5e100}, 0x0) 1m52.915397652s ago: executing program 3 (id=63): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) close(r0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000200)={0x2, 0x1388, @empty}, 0x10) listen(r1, 0x5) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000240)=0x2, 0x4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7d, &(0x7f0000000280)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x7}, 0x8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7d, &(0x7f00000003c0)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x1}, 0x8) connect$inet(r2, &(0x7f0000000500)={0x2, 0x1388, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000740), 0x4) 1m51.146408633s ago: executing program 3 (id=80): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000000), 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="48000000180001060000000000000000021800020001fe0100000000080001000a00000008000400010000000800120001000000140013000c000100080001000006410000000000"], 0x48}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000800)=0x64, 0x4) connect$inet(r1, &(0x7f0000000900)={0x2, 0x1f90, @private=0xa000001}, 0x10) sendto$inet(r1, &(0x7f0000000a00)='\x00', 0x400, 0x0, 0x0, 0x0) 1m50.718884133s ago: executing program 32 (id=80): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000000), 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="48000000180001060000000000000000021800020001fe0100000000080001000a00000008000400010000000800120001000000140013000c000100080001000006410000000000"], 0x48}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000800)=0x64, 0x4) connect$inet(r1, &(0x7f0000000900)={0x2, 0x1f90, @private=0xa000001}, 0x10) sendto$inet(r1, &(0x7f0000000a00)='\x00', 0x400, 0x0, 0x0, 0x0) 51.540190217s ago: executing program 2 (id=465): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/9/smp_affinity\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/10/smp_affinity\x00', 0x1, 0x0) write(r2, &(0x7f0000000200), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/11/smp_affinity\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='1\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='1\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/14/smp_affinity\x00', 0x1, 0x0) write(r5, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/15/smp_affinity\x00', 0x1, 0x0) write(r6, &(0x7f0000000200)='1\x00', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/16/smp_affinity\x00', 0x1, 0x0) write(r7, &(0x7f0000000200)='1\x00', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/18/smp_affinity\x00', 0x1, 0x0) write(r8, &(0x7f0000000200)='1\x00', 0x2) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/19/smp_affinity\x00', 0x1, 0x0) write(r9, &(0x7f0000000200)='1\x00', 0x2) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/20/smp_affinity\x00', 0x1, 0x0) write(r10, &(0x7f0000000200)='1\x00', 0x2) 51.040702266s ago: executing program 2 (id=467): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x64}, 0x8) connect(r0, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) sendto(r0, &(0x7f0000000500)="12345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890", 0xc8, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000700), 0x4) 50.777845685s ago: executing program 2 (id=470): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={&(0x7f0000000040), 0x10, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000140), 0x10, &(0x7f0000000180)={&(0x7f00000001c0)=@newtclass={0x50, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x18, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x1}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5dc}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f00000002c0)=@newtclass={0x38, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x2}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0xc, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x5dc}]}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000340), 0x10, &(0x7f0000000380)={&(0x7f00000003c0)=@newtclass={0x50, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x3}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x18, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x64}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5dc}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f0000000440), 0x10, &(0x7f0000000480)={&(0x7f00000004c0)=@deltclass={0x40, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f0000000540), 0x10, &(0x7f0000000580)={&(0x7f00000005c0)=@delqdisc={0x34, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x34}}, 0x0) 50.659240271s ago: executing program 2 (id=471): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./export\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='tmpfs\x00', &(0x7f0000000180)='./export\x00', &(0x7f00000001c0)='tmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='proc\x00', &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='tcp 2049\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='nfsd 127.0.0.1 2147483647 localhost\n\x00', 0x24) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000540)='localhost ./export 2147483647\n\x00', 0x1e) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./export/dir1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./export/dir2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./export/dir3\x00', 0x1ff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000900)={0x2, 0x8008, @loopback}, 0x10) write(r3, &(0x7f0000000a00)="80000038000000010000000000000002000186a300000003000000100000000000000000000000000000000000000000000000000000000020", 0x3c) nanosleep(&(0x7f0000000b00)={0x0, 0x5f5e100}, 0x0) 50.131387126s ago: executing program 2 (id=474): r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, 0x0, 0x0) listen(r0, 0x5) setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="80000100000000000000000100"/100, 0x100) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]}) 48.80992506s ago: executing program 2 (id=484): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/.portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='2049\x00', 0x5) 48.626891737s ago: executing program 33 (id=484): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='nfsd\x00', &(0x7f0000000180)='./nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/.portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='2049\x00', 0x5) 24.909505697s ago: executing program 5 (id=604): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f00000000c0)='1', 0x1) write(0xffffffffffffffff, &(0x7f0000000140)='1', 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e23, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x10) connect$inet(r2, &(0x7f0000000400)={0x2, 0x4e23, @loopback}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}}}, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @loopback}}}, 0x84) close(r3) 24.432986487s ago: executing program 5 (id=608): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x11d8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1234567890abcdef}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfedcba0987654321}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x1127, @loopback}}, {0x14, 0x2, @in={0x2, 0x1127, @loopback}}}}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "0102030405060708090a0b0c0d0e0f1011121314"}}]}]}, 0x54}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="0102030405060708090a0b0c0d0e0f10", 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="010001000000000000000000000000010000000000000000400e001c0000001c00"/49, 0x31}], 0x1, &(0x7f0000000500)=[@iv={0x20, 0x117, 0x2, 0xc, "111213140000000000000001"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x18}], 0x50}, 0x0) read$alg(r3, &(0x7f0000000600), 0x44) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r4, &(0x7f0000000600), 0x44, 0x0, &(0x7f0000000700)={0x2, 0x1127, @loopback}, 0x10) sendto$inet(r4, &(0x7f0000000600), 0x44, 0x0, &(0x7f0000000700)={0x2, 0x1127, @loopback}, 0x10) poll(&(0x7f0000000800)=[{r4, 0x1}], 0x1, 0x64) nanosleep(&(0x7f0000000900)={0x0, 0x5f5e100}, 0x0) 23.265515357s ago: executing program 5 (id=615): mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='+3 +4\n\x00', 0x6) 22.687485871s ago: executing program 5 (id=619): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./export\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='tmpfs\x00', &(0x7f0000000180)='./export\x00', &(0x7f00000001c0)='tmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='proc\x00', &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='tcp 2049\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='nfsd 127.0.0.1 2147483647 localhost\n\x00', 0x24) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000540)='localhost ./export 2147483647\n\x00', 0x1e) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./export/dir1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./export/dir2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./export/dir3\x00', 0x1ff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000900)={0x2, 0x8008, @loopback}, 0x10) write(r3, &(0x7f0000000a00)="80000038000000010000000000000002000186a300000003000000100000000000000000000000000000000000000000000000000000000020", 0x3c) 21.640900844s ago: executing program 5 (id=625): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={&(0x7f0000000040), 0x10, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000140), 0x10, &(0x7f0000000180)={&(0x7f00000001c0)=@newtclass={0x50, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x18, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x1}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5dc}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000240), 0x10, &(0x7f0000000280)={&(0x7f00000002c0)=@newtclass={0x50, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x2}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x18, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x32}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5dc}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtclass={0x40, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x3}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x14, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x64}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5dc}]}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f0000000440), 0x10, &(0x7f0000000480)={&(0x7f00000004c0)=@deltclass={0x40, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f0000000540), 0x10, &(0x7f0000000580)={&(0x7f00000005c0)=@delqdisc={0x34, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x34}}, 0x0) 21.153391262s ago: executing program 0 (id=628): mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='+3 +4\n\x00', 0x6) 20.880191051s ago: executing program 0 (id=630): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f00000000c0)='1', 0x1) write(0xffffffffffffffff, &(0x7f0000000140)='1', 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e23, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x10) connect$inet(r2, &(0x7f0000000400)={0x2, 0x4e23, @loopback}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}}}, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @loopback}}}, 0x84) close(r3) 20.806251747s ago: executing program 6 (id=485): write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e23, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x10) connect$inet(r2, &(0x7f0000000400)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, 0x0, 0x0) 20.57895008s ago: executing program 6 (id=632): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000140), 0x10, &(0x7f0000000180)={&(0x7f00000001c0)=@newtclass={0x50, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x18, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x1}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5dc}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000340), 0x10, &(0x7f0000000380)={&(0x7f00000003c0)=@newtclass={0x50, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x3}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x18, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x64}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5dc}]}}]}, 0x50}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000500)=0x10001, 0x4) connect$inet(r1, &(0x7f0000000600)={0x2, 0x1234, @loopback}, 0x10) write(r1, &(0x7f0000000700)='hello11', 0x7) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xc, &(0x7f0000000b00)=0x10003, 0x4) connect$inet(r2, &(0x7f0000000c00)={0x2, 0x1236, @loopback}, 0x10) write(r2, &(0x7f0000000d10)='test32', 0x6) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f0000000440), 0x10, &(0x7f0000000480)={&(0x7f00000004c0)=@deltclass={0x40, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f0000000540), 0x10, &(0x7f0000000580)={&(0x7f00000005c0)=@delqdisc={0x34, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x34}}, 0x0) 20.577219238s ago: executing program 0 (id=633): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x138, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104}]}}]}, 0x138}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001500)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001d00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001f00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002100)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002300)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002400)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002600)=@getqdisc={0x24, 0x26, 0x301}, 0x24}}, 0x0) 20.545573238s ago: executing program 4 (id=634): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x3c, 0x0, 0x8, 0x105, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1e000000}]}]}, 0x3c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000010000501010000000000000001010000000000001c0001000800060008000000100007007f0000017f000001110040001400020010000c000900090073797a3000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000018000501010000000000000001010000000000001c0001000800060008000000100007007f0000017f000001110040001400020010000c000900090073797a3000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000019000501010000000000000001010000000000001c0001000800060008000000100007007f0000017f000001110040001400020010000c000900090073797a3000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000020000501010000000000000001010000000000001c0001000800060008000000100007007f0000017f000001110040001400020010000c000900090073797a3000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000021000501010000000000000001010000000000001c0001000800060008000000100007007f0000017f000001110040001400020010000c000900090073797a3000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000030000501010000000000000001010000000000001c0001000800060008000000100007007f0000017f000001110040001400020010000c000900090073797a3000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000040000501010000000000000001010000000000001c0001000800060008000000100007007f0000017f000001110040001400020010000c000900090073797a3000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000800060008000000100007007f0000017f000001110040001400020010000c000900090073797a3000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 20.265860135s ago: executing program 4 (id=636): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) recvfrom(r0, &(0x7f0000000300)=""/256, 0x100, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r3, &(0x7f0000000300), 0x20) read(r2, &(0x7f0000000700), 0x20) write(r3, &(0x7f0000000500)="0000000201", 0x5) read(r2, &(0x7f0000000310), 0x6) write(r3, &(0x7f0000000600)='reply\x00', 0x6) read(r2, &(0x7f000000031c), 0x6) sendto$inet(r0, &(0x7f0000000300), 0x22, 0x0, &(0x7f0000000080)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000800)={0x0, 0x5000000}, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='world\x00', 0x6}], 0x1, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0200000000000000"}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/256, 0x100}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000a00), &(0x7f0000000a20)=0x4) 20.194839147s ago: executing program 0 (id=638): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./export\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='tmpfs\x00', &(0x7f0000000180)='./export\x00', &(0x7f00000001c0)='tmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='proc\x00', &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='tcp 2049\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='nfsd 127.0.0.1 2147483647 localhost\n\x00', 0x24) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000540)='localhost ./export 2147483647\n\x00', 0x1e) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./export/dir1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./export/dir2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./export/dir3\x00', 0x1ff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000900)={0x2, 0x8008, @loopback}, 0x10) write(r3, &(0x7f0000000a00)="80000038000000010000000000000002000186a300000003000000100000000000000000000000000000000000000000000000000000000020", 0x3c) 20.143246853s ago: executing program 6 (id=639): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\x00', 0x1) close(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0, 0x64}, 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r3, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x64}, 0x8) bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000700), 0x4) 20.036552883s ago: executing program 5 (id=640): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syzkaller0\x00', 0xb) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x1, 0x0, 0x12}, 0x10) listen(r0, 0x5) syz_emit_ethernet(0x13, &(0x7f0000000200)={@local, @remote, @void, {@llc={0x4, {@llc={0x12, 0x12, 'o\x00\x00'}}}}}, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000300)={@local, @remote, @void, {@llc={0x4, {@llc={0x12, 0x12, "0108"}}}}}, 0x0) 20.036092608s ago: executing program 1 (id=641): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/9/smp_affinity\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/10/smp_affinity\x00', 0x1, 0x0) write(r2, &(0x7f0000000200), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/11/smp_affinity\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='1\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='1\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/14/smp_affinity\x00', 0x1, 0x0) write(r5, &(0x7f0000000200)='1\x00', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/15/smp_affinity\x00', 0x1, 0x0) write(r6, &(0x7f0000000200), 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/16/smp_affinity\x00', 0x1, 0x0) write(r7, &(0x7f0000000200)='1\x00', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/18/smp_affinity\x00', 0x1, 0x0) write(r8, &(0x7f0000000200)='1\x00', 0x2) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/19/smp_affinity\x00', 0x1, 0x0) write(r9, &(0x7f0000000200)='1\x00', 0x2) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/20/smp_affinity\x00', 0x1, 0x0) write(r10, &(0x7f0000000200)='1\x00', 0x2) 19.352811056s ago: executing program 34 (id=640): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syzkaller0\x00', 0xb) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x1, 0x0, 0x12}, 0x10) listen(r0, 0x5) syz_emit_ethernet(0x13, &(0x7f0000000200)={@local, @remote, @void, {@llc={0x4, {@llc={0x12, 0x12, 'o\x00\x00'}}}}}, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000300)={@local, @remote, @void, {@llc={0x4, {@llc={0x12, 0x12, "0108"}}}}}, 0x0) 19.305984018s ago: executing program 0 (id=643): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a0b, @loopback}, 0x10) listen(r0, 0x5) r1 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='mon_addr\x00', &(0x7f0000000300)='127.0.0.1:6789\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = accept$inet(r0, 0x0, 0x0) write(r2, &(0x7f0000000400)='ceph v027\x00'/152, 0x91) 19.293417333s ago: executing program 1 (id=644): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/sctp/addip_enable\x00', 0x1, 0x0) write(r0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='1', 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e23, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x10) connect$inet(r2, &(0x7f0000000400)={0x2, 0x4e23, @loopback}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}}}, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @loopback}}}, 0x84) close(r3) 19.292378965s ago: executing program 6 (id=645): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x11d8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1234567890abcdef}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfedcba0987654321}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x1127, @loopback}}, {0x14, 0x2, @in={0x2, 0x1127, @loopback}}}}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "0102030405060708090a0b0c0d0e0f1011121314"}}]}]}, 0x54}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="0102030405060708090a0b0c0d0e0f10", 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="010001000000000000000000000000010000000000000000400e001c0000001c00"/53, 0x35}], 0x1, &(0x7f0000000500)=[@iv={0x20, 0x117, 0x2, 0xc, "111213140000000000000001"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x18}], 0x50}, 0x0) read$alg(r3, &(0x7f0000000600), 0x44) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r4, &(0x7f0000000600), 0x44, 0x0, &(0x7f0000000700)={0x2, 0x1127, @loopback}, 0x10) sendto$inet(r4, &(0x7f0000000600), 0x44, 0x0, &(0x7f0000000700)={0x2, 0x1127, @loopback}, 0x10) poll(&(0x7f0000000800)=[{r4, 0x1}], 0x1, 0x64) nanosleep(&(0x7f0000000900)={0x0, 0x5f5e100}, 0x0) 19.291837223s ago: executing program 4 (id=646): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="480000003700010000000000000000"], 0x48}], 0x1}, 0x0) 19.098652614s ago: executing program 4 (id=647): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001000a0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001000b0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001000c0000000c000500010000000c000000"], 0xc0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000), 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001000e0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001000f0000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100100000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100110000000c000500010000000c000000"], 0xc0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000000), 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="300000001800010600000000000000002d010000000000010000000005000100220000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100230000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100240000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100250000000c000500010000000c000000"], 0xc0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c00)={&(0x7f0000000000), 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001002e0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001002f0000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100300000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100310000000c000500010000000c000000"], 0xc0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000d40)={&(0x7f0000000000), 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="300000001800010600000000000000002d010000000000010000000005000100320000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100330000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100340000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100350000000c000500010000000c000000"], 0xc0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e80)={&(0x7f0000000000), 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800010600000000000000002d010000000000010000000005000100360000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100370000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100380000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100390000000c000500010000000c000000"], 0xc0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000fc0)={&(0x7f0000000000), 0x0, &(0x7f0000001000)={&(0x7f0000001040)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001003a0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001003b0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001003c0000000c000500010000000c000000300000001800010600000000000000002d0100000000000100000000050001003d0000000c000500010000000c000000"], 0xc0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000002000)={&(0x7f0000000000), 0x0, &(0x7f0000002040)={&(0x7f0000002080)=ANY=[@ANYBLOB="1c0000001a00010301000000000000002d00"/28], 0x1c}}, 0x0) 19.020778557s ago: executing program 1 (id=648): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001500)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001d00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001f00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002100)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002300)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002400)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002600)=@getqdisc={0x24, 0x26, 0x301}, 0x24}}, 0x0) 17.906108959s ago: executing program 0 (id=649): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000140), 0x10, &(0x7f0000000180)={&(0x7f00000001c0)=@newtclass={0x50, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x18, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x1}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5dc}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000340), 0x10, &(0x7f0000000380)={&(0x7f00000003c0)=@newtclass={0x50, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x3}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x18, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x64}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5dc}]}}]}, 0x50}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000500)=0x10001, 0x4) connect$inet(r1, &(0x7f0000000600)={0x2, 0x1234, @loopback}, 0x10) write(r1, &(0x7f0000000700)='hello11', 0x7) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xc, &(0x7f0000000b00)=0x10003, 0x4) connect$inet(r2, &(0x7f0000000c00)={0x2, 0x1236, @loopback}, 0x10) write(r2, &(0x7f0000000d10)='test32', 0x6) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f0000000440), 0x10, &(0x7f0000000480)={&(0x7f00000004c0)=@deltclass={0x40, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f0000000540), 0x10, &(0x7f0000000580)={&(0x7f00000005c0)=@delqdisc={0x34, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x34}}, 0x0) 17.905780424s ago: executing program 1 (id=650): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={&(0x7f0000000040), 0x10, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000140), 0x10, &(0x7f0000000180)={&(0x7f00000001c0)=@newtclass={0x50, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x18, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x1}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5dc}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000240), 0x10, &(0x7f0000000280)={&(0x7f00000002c0)=@newtclass={0x50, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x2}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x18, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x32}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5dc}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000340), 0xc, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f0000000440), 0x10, &(0x7f0000000480)={&(0x7f00000004c0)=@deltclass={0x40, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f0000000540), 0x10, &(0x7f0000000580)={&(0x7f00000005c0)=@delqdisc={0x34, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x34}}, 0x0) 17.904829324s ago: executing program 6 (id=651): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0xc0, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x90, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3e8}]}]}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0xffffffffc4653600}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xc0}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000400)={0x11, 0x0, r2, 0x0}, 0x14) write(r3, &(0x7f0000000500)="00000000000000000000000008004500001c000000004011000001010101010101020001000100080000", 0x2a) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) 17.552130042s ago: executing program 35 (id=649): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000140), 0x10, &(0x7f0000000180)={&(0x7f00000001c0)=@newtclass={0x50, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x18, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x1}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5dc}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000340), 0x10, &(0x7f0000000380)={&(0x7f00000003c0)=@newtclass={0x50, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x3}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x18, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x64}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5dc}]}}]}, 0x50}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000500)=0x10001, 0x4) connect$inet(r1, &(0x7f0000000600)={0x2, 0x1234, @loopback}, 0x10) write(r1, &(0x7f0000000700)='hello11', 0x7) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xc, &(0x7f0000000b00)=0x10003, 0x4) connect$inet(r2, &(0x7f0000000c00)={0x2, 0x1236, @loopback}, 0x10) write(r2, &(0x7f0000000d10)='test32', 0x6) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f0000000440), 0x10, &(0x7f0000000480)={&(0x7f00000004c0)=@deltclass={0x40, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f0000000540), 0x10, &(0x7f0000000580)={&(0x7f00000005c0)=@delqdisc={0x34, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x34}}, 0x0) 17.501955955s ago: executing program 4 (id=653): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/9/smp_affinity\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/10/smp_affinity\x00', 0x1, 0x0) write(r2, &(0x7f0000000200), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/11/smp_affinity\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='1\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='1\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/14/smp_affinity\x00', 0x1, 0x0) write(r5, &(0x7f0000000200)='1\x00', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/15/smp_affinity\x00', 0x1, 0x0) write(r6, &(0x7f0000000200), 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/16/smp_affinity\x00', 0x1, 0x0) write(r7, &(0x7f0000000200)='1\x00', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/18/smp_affinity\x00', 0x1, 0x0) write(r8, &(0x7f0000000200)='1\x00', 0x2) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/19/smp_affinity\x00', 0x1, 0x0) write(r9, &(0x7f0000000200)='1\x00', 0x2) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/20/smp_affinity\x00', 0x1, 0x0) write(r10, &(0x7f0000000200)='1\x00', 0x2) 17.332399649s ago: executing program 4 (id=654): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\x00', 0x1) close(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0, 0x64}, 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r3, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x64}, 0x8) bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000700), 0x4) 16.413788867s ago: executing program 1 (id=655): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='tcp 20000\n\x00', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1\n\x00', 0x2) (async) write(r2, &(0x7f0000000240)='1\n\x00', 0x2) r3 = socket$inet(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000380)={0x2, 0x4e20, @loopback}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 15.733906583s ago: executing program 1 (id=656): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) recvfrom(r0, &(0x7f0000000300)=""/256, 0x100, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r3, &(0x7f0000000300), 0x20) read(r2, &(0x7f0000000700), 0x20) write(r3, &(0x7f0000000500)="000000020104", 0x6) read(r2, 0x0, 0x0) write(r3, &(0x7f0000000600)='reply\x00', 0x6) read(r2, &(0x7f000000031c), 0x6) sendto$inet(r0, &(0x7f0000000300), 0x22, 0x0, &(0x7f0000000080)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000800)={0x0, 0x5000000}, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='world\x00', 0x6}], 0x1, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0200000000000000"}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/256, 0x100}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000a00), &(0x7f0000000a20)=0x4) 1.974819485s ago: executing program 36 (id=651): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0xc0, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x90, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3e8}]}]}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0xffffffffc4653600}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xc0}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000400)={0x11, 0x0, r2, 0x0}, 0x14) write(r3, &(0x7f0000000500)="00000000000000000000000008004500001c000000004011000001010101010101020001000100080000", 0x2a) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) 1.874121745s ago: executing program 37 (id=654): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./proc/sys/net/sctp/reconf_enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\x00', 0x1) close(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x2, 0x4) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000200)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0, 0x64}, 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r3, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x64}, 0x8) bind(r2, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x5) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000700), 0x4) 0s ago: executing program 38 (id=656): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) recvfrom(r0, &(0x7f0000000300)=""/256, 0x100, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r3, &(0x7f0000000300), 0x20) read(r2, &(0x7f0000000700), 0x20) write(r3, &(0x7f0000000500)="000000020104", 0x6) read(r2, 0x0, 0x0) write(r3, &(0x7f0000000600)='reply\x00', 0x6) read(r2, &(0x7f000000031c), 0x6) sendto$inet(r0, &(0x7f0000000300), 0x22, 0x0, &(0x7f0000000080)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000800)={0x0, 0x5000000}, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='world\x00', 0x6}], 0x1, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0200000000000000"}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/256, 0x100}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000a00), &(0x7f0000000a20)=0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.116' (ED25519) to the list of known hosts. [ 91.012552][ T5590] cgroup: Unknown subsys name 'net' [ 91.256031][ T5590] cgroup: Unknown subsys name 'cpuset' [ 91.308245][ T5590] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.879819][ T10] cfg80211: failed to load regulatory.db [ 93.339985][ T5590] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.981204][ T5616] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.013096][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.014248][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.015346][ T5625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.016479][ T5625] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.037933][ T5627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.062604][ T5627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.076340][ T5626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.080199][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.111390][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.120251][ T5626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.121523][ T5626] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.124882][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.130143][ T5628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.158364][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.177267][ T5627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.183053][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.184447][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.201674][ T5628] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.203409][ T5628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.208445][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.221331][ T5626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.234436][ T5628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.258530][ T5626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.286807][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.269085][ T5619] Bluetooth: hci0: command tx timeout [ 98.347228][ T5616] Bluetooth: hci4: command tx timeout [ 98.347414][ T5619] Bluetooth: hci2: command tx timeout [ 98.427273][ T5616] Bluetooth: hci1: command tx timeout [ 98.429920][ T5619] Bluetooth: hci3: command tx timeout [ 99.026342][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.029854][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.030383][ T5614] bridge_slave_0: entered allmulticast mode [ 99.037407][ T5614] bridge_slave_0: entered promiscuous mode [ 99.100730][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.100830][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.101194][ T5613] bridge_slave_0: entered allmulticast mode [ 99.103264][ T5613] bridge_slave_0: entered promiscuous mode [ 99.104753][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.104871][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.105024][ T5614] bridge_slave_1: entered allmulticast mode [ 99.115130][ T5614] bridge_slave_1: entered promiscuous mode [ 99.171100][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.171214][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.171337][ T5610] bridge_slave_0: entered allmulticast mode [ 99.173193][ T5610] bridge_slave_0: entered promiscuous mode [ 99.212921][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.213056][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.213401][ T5613] bridge_slave_1: entered allmulticast mode [ 99.215319][ T5613] bridge_slave_1: entered promiscuous mode [ 99.268434][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.268572][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.268740][ T5610] bridge_slave_1: entered allmulticast mode [ 99.271032][ T5610] bridge_slave_1: entered promiscuous mode [ 99.272482][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.272581][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.272695][ T5612] bridge_slave_0: entered allmulticast mode [ 99.275079][ T5612] bridge_slave_0: entered promiscuous mode [ 99.352852][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.352991][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.353162][ T5611] bridge_slave_0: entered allmulticast mode [ 99.355340][ T5611] bridge_slave_0: entered promiscuous mode [ 99.397940][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.398064][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.398184][ T5612] bridge_slave_1: entered allmulticast mode [ 99.400117][ T5612] bridge_slave_1: entered promiscuous mode [ 99.443782][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.444054][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.444199][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.444365][ T5611] bridge_slave_1: entered allmulticast mode [ 99.446633][ T5611] bridge_slave_1: entered promiscuous mode [ 99.511086][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.515866][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.550650][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.574946][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.615025][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.629916][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.673043][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.699816][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.724029][ T5614] team0: Port device team_slave_0 added [ 99.726811][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.772177][ T5613] team0: Port device team_slave_0 added [ 99.774440][ T5614] team0: Port device team_slave_1 added [ 99.810173][ T5610] team0: Port device team_slave_0 added [ 99.837811][ T5613] team0: Port device team_slave_1 added [ 99.875136][ T5610] team0: Port device team_slave_1 added [ 99.882673][ T5612] team0: Port device team_slave_0 added [ 99.920166][ T5611] team0: Port device team_slave_0 added [ 99.941185][ T5612] team0: Port device team_slave_1 added [ 99.963513][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.963526][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.963546][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.968927][ T5611] team0: Port device team_slave_1 added [ 100.040297][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.040311][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.040329][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.041562][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.041577][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.041606][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.114301][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.114354][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.114436][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.182279][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.182297][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.182326][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.246994][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.247012][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.247041][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.255906][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.255953][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.256026][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.346288][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.346302][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.346321][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.347252][ T5619] Bluetooth: hci0: command tx timeout [ 100.355342][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.355376][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.355482][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.427220][ T5619] Bluetooth: hci2: command tx timeout [ 100.427249][ T5619] Bluetooth: hci4: command tx timeout [ 100.451452][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.451494][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.451576][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.507219][ T5616] Bluetooth: hci3: command tx timeout [ 100.507252][ T5616] Bluetooth: hci1: command tx timeout [ 100.952877][ T5614] hsr_slave_0: entered promiscuous mode [ 100.953925][ T5614] hsr_slave_1: entered promiscuous mode [ 101.004544][ T5613] hsr_slave_0: entered promiscuous mode [ 101.005415][ T5613] hsr_slave_1: entered promiscuous mode [ 101.006133][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 101.006204][ T5613] Cannot create hsr debugfs directory [ 101.033507][ T5610] hsr_slave_0: entered promiscuous mode [ 101.034418][ T5610] hsr_slave_1: entered promiscuous mode [ 101.035037][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 101.035066][ T5610] Cannot create hsr debugfs directory [ 101.094011][ T5612] hsr_slave_0: entered promiscuous mode [ 101.094942][ T5612] hsr_slave_1: entered promiscuous mode [ 101.095730][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 101.095747][ T5612] Cannot create hsr debugfs directory [ 101.171852][ T5611] hsr_slave_0: entered promiscuous mode [ 101.172790][ T5611] hsr_slave_1: entered promiscuous mode [ 101.173437][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 101.173454][ T5611] Cannot create hsr debugfs directory [ 102.195366][ T5614] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.252220][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.265633][ T5614] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.291064][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.296745][ T5614] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.322279][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.355921][ T5614] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.382566][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.427830][ T5619] Bluetooth: hci0: command tx timeout [ 102.508622][ T5619] Bluetooth: hci4: command tx timeout [ 102.508657][ T5619] Bluetooth: hci2: command tx timeout [ 102.514656][ T5610] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.552274][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.564476][ T5610] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.587546][ T5616] Bluetooth: hci1: command tx timeout [ 102.587579][ T5616] Bluetooth: hci3: command tx timeout [ 102.621434][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.624037][ T5610] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.650305][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.690667][ T5610] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.733752][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.890058][ T5612] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.911883][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.928825][ T5612] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.958893][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.962046][ T5612] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.011835][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.042390][ T5612] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.074927][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.220686][ T5611] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.271945][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.295138][ T5611] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.331577][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.347622][ T5611] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.373497][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.406174][ T5611] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.432147][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.568245][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.596428][ T5613] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.633877][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.656813][ T5613] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.694012][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.710832][ T5613] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.750757][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.774082][ T5613] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.816055][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.871913][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.896406][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.934391][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.934532][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.988188][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.988931][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.096912][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.145407][ T1418] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.146266][ T1418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.184832][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.223967][ T1418] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.224093][ T1418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.314882][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.369944][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.375968][ T3332] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.376113][ T3332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.447673][ T1418] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.447765][ T1418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.508068][ T5619] Bluetooth: hci0: command tx timeout [ 104.560978][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.588114][ T5619] Bluetooth: hci2: command tx timeout [ 104.588184][ T5616] Bluetooth: hci4: command tx timeout [ 104.630285][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.667290][ T5619] Bluetooth: hci3: command tx timeout [ 104.667319][ T5619] Bluetooth: hci1: command tx timeout [ 104.675062][ T3332] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.675243][ T3332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.788984][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.790082][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.922179][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.996490][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.996656][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.072420][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.072582][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.007268][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.104784][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.370561][ T5614] veth0_vlan: entered promiscuous mode [ 106.465046][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.499034][ T5614] veth1_vlan: entered promiscuous mode [ 106.582009][ T5610] veth0_vlan: entered promiscuous mode [ 106.658618][ T5610] veth1_vlan: entered promiscuous mode [ 106.743212][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.810630][ T5614] veth0_macvtap: entered promiscuous mode [ 106.839086][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.878677][ T5614] veth1_macvtap: entered promiscuous mode [ 106.923883][ T5612] veth0_vlan: entered promiscuous mode [ 106.998458][ T5610] veth0_macvtap: entered promiscuous mode [ 107.013871][ T5612] veth1_vlan: entered promiscuous mode [ 107.041085][ T5610] veth1_macvtap: entered promiscuous mode [ 107.053626][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.105670][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.184719][ T56] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.200148][ T56] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.219130][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.219249][ T56] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.259751][ T56] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.285099][ T5613] veth0_vlan: entered promiscuous mode [ 107.296736][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.482739][ T5612] veth0_macvtap: entered promiscuous mode [ 107.492846][ T1422] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.524025][ T1422] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.556503][ T5613] veth1_vlan: entered promiscuous mode [ 107.598182][ T1422] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.653401][ T5612] veth1_macvtap: entered promiscuous mode [ 107.662130][ T1422] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.061219][ T5611] veth0_vlan: entered promiscuous mode [ 108.111411][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.156981][ T1422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.157007][ T1422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.204933][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.244428][ T5611] veth1_vlan: entered promiscuous mode [ 108.255172][ T5613] veth0_macvtap: entered promiscuous mode [ 108.312525][ T1422] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.316990][ T1422] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.356728][ T1422] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.368349][ T5613] veth1_macvtap: entered promiscuous mode [ 108.373763][ T1519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.373784][ T1519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.407870][ T1422] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.571324][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.571345][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.968251][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.046527][ T1519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.046557][ T1519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.109315][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.254384][ T1222] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.254485][ T1222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.254501][ T1222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.291756][ T1222] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.295417][ T5611] veth0_macvtap: entered promiscuous mode [ 109.329902][ T1222] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.331142][ T1222] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.374677][ T5611] veth1_macvtap: entered promiscuous mode [ 109.689064][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.689085][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.886159][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.061460][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.125198][ T5802] netlink: 'syz.3.4': attribute type 4 has an invalid length. [ 110.125311][ T5802] netlink: 'syz.3.4': attribute type 2 has an invalid length. [ 110.399006][ T3332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.399029][ T3332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.399143][ T56] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.400899][ T56] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.405038][ T56] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.405811][ T56] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.983592][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.983628][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.191934][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.191955][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.578468][ T5812] NFSD: Failed to start, no listeners configured. [ 112.583482][ T1544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.583501][ T1544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.567669][ T1519] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.632107][ T3332] netdevsim netdevsim10 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.751771][ T5836] tipc: Started in network mode [ 113.751808][ T5836] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 114.150205][ T5840] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5'. [ 114.171654][ T5840] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5'. [ 114.226017][ T5843] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5'. [ 114.248809][ T5843] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5'. [ 114.249337][ T5843] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5'. [ 114.286271][ T5842] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9'. [ 114.286807][ T5842] openvswitch: netlink: Flow key attr not present in new flow. [ 114.307755][ T5840] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5'. [ 114.309423][ T5840] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5'. [ 114.310988][ T5840] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5'. [ 114.311913][ T5840] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5'. [ 114.386601][ T5847] FAULT_INJECTION: forcing a failure. [ 114.386601][ T5847] name failslab, interval 1, probability 100, space 0, times 1 [ 114.386672][ T5847] CPU: 1 UID: 0 PID: 5847 Comm: syz.3.12 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 114.386702][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 114.386724][ T5847] Call Trace: [ 114.386733][ T5847] [ 114.386743][ T5847] dump_stack_lvl+0xe8/0x150 [ 114.386791][ T5847] should_fail_ex+0x467/0x600 [ 114.386832][ T5847] should_failslab+0xa8/0x100 [ 114.386862][ T5847] kmem_cache_alloc_noprof+0xa4/0x650 [ 114.386885][ T5847] ? do_getname+0x2e/0x250 [ 114.386904][ T5847] ? do_getname+0x2e/0x250 [ 114.386930][ T5847] do_getname+0x2e/0x250 [ 114.386948][ T5847] ? getname_flags+0x11/0x20 [ 114.387002][ T5847] do_sys_openat2+0xcc/0x200 [ 114.387047][ T5847] ? __se_sys_futex+0x3a8/0x450 [ 114.387106][ T5847] ? __pfx_do_sys_openat2+0x10/0x10 [ 114.387137][ T5847] ? rcu_is_watching+0x15/0xb0 [ 114.387170][ T5847] __x64_sys_openat+0x138/0x170 [ 114.387196][ T5847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.387220][ T5847] do_syscall_64+0x174/0x580 [ 114.387248][ T5847] ? trace_irq_disable+0x3b/0x140 [ 114.387271][ T5847] ? clear_bhb_loop+0x40/0x90 [ 114.387298][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.387321][ T5847] RIP: 0033:0x7f7c9cdbde99 [ 114.387349][ T5847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.387368][ T5847] RSP: 002b:00007f7c9b016028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 114.387393][ T5847] RAX: ffffffffffffffda RBX: 00007f7c9d045fa0 RCX: 00007f7c9cdbde99 [ 114.387410][ T5847] RDX: 0000000000000001 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 114.387425][ T5847] RBP: 00007f7c9ce53eaf R08: 0000000000000000 R09: 0000000000000000 [ 114.387440][ T5847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.387453][ T5847] R13: 00007f7c9d046038 R14: 00007f7c9d045fa0 R15: 00007ffdf7b627c8 [ 114.387488][ T5847] [ 114.974782][ T5816] NFSD: Failed to start, no listeners configured. [ 115.204423][ T5857] netlink: 'syz.3.16': attribute type 1 has an invalid length. [ 115.474533][ T5852] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 115.820652][ T5852] usb 2-1: New USB device found, idVendor=0bda, idProduct=8152, bcdDevice=30.11 [ 115.820687][ T5852] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.820708][ T5852] usb 2-1: Product: syz [ 115.820724][ T5852] usb 2-1: Manufacturer: syz [ 115.820740][ T5852] usb 2-1: SerialNumber: syz [ 115.981229][ T5852] r8152-cfgselector 2-1: Unknown version 0x0000 [ 116.391968][ T5871] Zero length message leads to an empty skb [ 117.379333][ T5852] r8152-cfgselector 2-1: Unknown version 0x0000 [ 117.781694][ T5852] r8152-cfgselector 2-1: USB disconnect, device number 2 [ 119.319839][ T5925] syz.2.33 (5925) used greatest stack depth: 19256 bytes left [ 120.276147][ T5957] __nla_validate_parse: 31 callbacks suppressed [ 120.276169][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.41'. [ 120.350743][ T5959] netlink: 20 bytes leftover after parsing attributes in process `syz.3.42'. [ 120.351219][ T5959] netlink: 20 bytes leftover after parsing attributes in process `syz.3.42'. [ 120.372471][ T5959] netlink: 20 bytes leftover after parsing attributes in process `syz.3.42'. [ 120.373104][ T5959] netlink: 20 bytes leftover after parsing attributes in process `syz.3.42'. [ 120.382852][ T5959] netlink: 20 bytes leftover after parsing attributes in process `syz.3.42'. [ 120.419749][ T5959] netlink: 20 bytes leftover after parsing attributes in process `syz.3.42'. [ 120.422209][ T5959] netlink: 52 bytes leftover after parsing attributes in process `syz.3.42'. [ 120.423079][ T5959] netlink: 52 bytes leftover after parsing attributes in process `syz.3.42'. [ 120.424590][ T5959] netlink: 52 bytes leftover after parsing attributes in process `syz.3.42'. [ 123.014538][ T5610] svc: failed to register nfsdv3 RPC service (errno 101). [ 123.058831][ T5610] svc: failed to register nfsaclv3 RPC service (errno 101). [ 123.058854][ T5610] failed to unregister tcp with rpcbind [ 123.105254][ T5610] svc: failed to register nfsdv3 RPC service (errno 97). [ 123.105272][ T5610] svc: failed to register nfsaclv3 RPC service (errno 97). [ 123.105281][ T5610] failed to unregister tcp with rpcbind [ 123.500609][ T6031] openvswitch: netlink: Key 13 has unexpected len 4 expected 24 [ 125.189851][ T1222] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.323658][ T5619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 125.359800][ T5619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 125.361540][ T5619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 125.363873][ T5619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 125.364757][ T5619] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 125.475095][ T6072] __nla_validate_parse: 53 callbacks suppressed [ 125.475118][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.84'. [ 125.491207][ T6076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.84'. [ 125.491235][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.84'. [ 125.491728][ T6079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.84'. [ 125.539997][ T6081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.84'. [ 125.542018][ T6085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.84'. [ 125.594876][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.84'. [ 125.788542][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.794434][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.262789][ T1222] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.403783][ T6103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.92'. [ 126.404157][ T6109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.92'. [ 126.404179][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.92'. [ 126.437846][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.021077][ T6129] syz.1.98 (6129) used greatest stack depth: 19104 bytes left [ 127.062822][ T6133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.085781][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.089881][ T6133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.090851][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.120471][ T6133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.121131][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.370890][ T6132] syz.4.100 (6132) used greatest stack depth: 18784 bytes left [ 127.464735][ T1222] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.468523][ T5616] Bluetooth: hci0: command tx timeout [ 128.231918][ T1222] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.510842][ T5852] net_ratelimit: 14 callbacks suppressed [ 128.510870][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.720927][ T6185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.772733][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.775873][ T6185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.831600][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.859438][ T6185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.907483][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.918947][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.931468][ T6185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.976611][ T6186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.547867][ T5616] Bluetooth: hci0: command tx timeout [ 130.527746][ T6217] __nla_validate_parse: 30 callbacks suppressed [ 130.527765][ T6217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.125'. [ 130.527979][ T6218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.125'. [ 130.657656][ T6213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.125'. [ 130.657839][ T6223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.125'. [ 130.939841][ T1222] bridge_slave_1: left allmulticast mode [ 130.939989][ T1222] bridge_slave_1: left promiscuous mode [ 131.048236][ T1222] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.332951][ T1222] bridge_slave_0: left allmulticast mode [ 131.332987][ T1222] bridge_slave_0: left promiscuous mode [ 131.333239][ T1222] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.627786][ T5616] Bluetooth: hci0: command tx timeout [ 131.647361][ T6212] NFSD: Unable to initialize client recovery tracking! (-110) [ 131.647380][ T6212] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 131.647393][ T6212] NFSD: starting 90-second grace period (net f000043a) [ 132.687983][ T1222] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.774157][ T1222] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.811951][ T1222] bond0 (unregistering): Released all slaves [ 132.836764][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.836850][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.926643][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.131'. [ 132.935591][ T6242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.131'. [ 132.935674][ T6242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.131'. [ 132.936850][ T6244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.131'. [ 132.938062][ T6250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.131'. [ 132.939059][ T6255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.131'. [ 133.127038][ T5264] 8021q: adding VLAN 0 to HW filter on device eth1 [ 133.314517][ T6086] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.315075][ T6086] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.316386][ T6086] bridge_slave_0: entered allmulticast mode [ 133.353299][ T6086] bridge_slave_0: entered promiscuous mode [ 133.454037][ T6086] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.454133][ T6086] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.454332][ T6086] bridge_slave_1: entered allmulticast mode [ 133.459280][ T1222] tipc: Left network mode [ 133.486986][ T6086] bridge_slave_1: entered promiscuous mode [ 133.709739][ T5616] Bluetooth: hci0: command tx timeout [ 133.716551][ T5763] net_ratelimit: 58 callbacks suppressed [ 133.716569][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.848710][ T6299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.854773][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.855673][ T6299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.885676][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.917266][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.917755][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.918216][ T6297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.955565][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.026745][ T6086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.079940][ T6086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.199598][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.365197][ T6086] team0: Port device team_slave_0 added [ 135.605527][ T6337] __nla_validate_parse: 9 callbacks suppressed [ 135.605565][ T6337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.155'. [ 135.606104][ T6340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.155'. [ 135.646368][ T6086] team0: Port device team_slave_1 added [ 135.672043][ T6342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.155'. [ 135.672786][ T6334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.155'. [ 135.678816][ T6345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.155'. [ 136.118324][ T6086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.118343][ T6086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.118369][ T6086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.181092][ T6086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.181110][ T6086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.181139][ T6086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.595252][ T6376] netlink: 156 bytes leftover after parsing attributes in process `syz.0.163'. [ 136.717147][ T5742] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 136.755775][ T5742] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 137.075929][ T6361] ceph: No mds server is up or the cluster is laggy [ 137.091984][ T5742] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 137.195756][ T5264] 8021q: adding VLAN 0 to HW filter on device eth2 [ 137.696487][ T6086] hsr_slave_0: entered promiscuous mode [ 137.702376][ T6086] hsr_slave_1: entered promiscuous mode [ 137.711461][ T6086] debugfs: 'hsr0' already exists in 'hsr' [ 137.711498][ T6086] Cannot create hsr debugfs directory [ 137.716332][ T6392] syz.2.168 (6392) used greatest stack depth: 18272 bytes left [ 137.928724][ T1222] hsr_slave_0: left promiscuous mode [ 137.968015][ T1222] hsr_slave_1: left promiscuous mode [ 137.969293][ T1222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.969420][ T1222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.028214][ T1222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.028244][ T1222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.280590][ T1222] veth1_macvtap: left promiscuous mode [ 138.280911][ T1222] veth0_macvtap: left promiscuous mode [ 138.281219][ T1222] veth1_vlan: left promiscuous mode [ 138.281559][ T1222] veth0_vlan: left promiscuous mode [ 138.417356][ T6388] NFSD: Unable to initialize client recovery tracking! (-110) [ 138.417376][ T6388] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 138.417388][ T6388] NFSD: starting 90-second grace period (net f000043a) [ 138.747559][ T5860] net_ratelimit: 53 callbacks suppressed [ 138.747579][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.907677][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.147597][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.238254][ T1222] team0 (unregistering): Port device team_slave_1 removed [ 139.297913][ T1222] team0 (unregistering): Port device team_slave_0 removed [ 139.551779][ T6396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.170'. [ 139.553845][ T6399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.170'. [ 139.556405][ T6403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.170'. [ 139.585070][ T6406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.170'. [ 139.814694][ T6424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.839626][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.869951][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.905899][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.947384][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.025407][ T6426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.025884][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.525714][ T5264] 8021q: adding VLAN 0 to HW filter on device eth3 [ 141.662117][ T6462] __nla_validate_parse: 9 callbacks suppressed [ 141.662136][ T6462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'. [ 141.702874][ T6462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.185'. [ 141.746498][ T6462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.185'. [ 141.757933][ T6462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.185'. [ 141.761034][ T6462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'. [ 141.919654][ T6086] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 142.014971][ T6086] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 142.025286][ T6086] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 142.220555][ T6086] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 142.247716][ T6086] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 142.338806][ T6086] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 142.340038][ T6086] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 142.490453][ T6086] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 142.510857][ T6477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.188'. [ 142.510927][ T6478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.188'. [ 142.541437][ T6477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.188'. [ 142.546866][ T6477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.188'. [ 142.653747][ T6477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.188'. [ 143.236074][ T6086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.340975][ T6086] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.383556][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.383941][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.441963][ T1222] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.442100][ T1222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.580196][ T5264] 8021q: adding VLAN 0 to HW filter on device eth4 [ 143.824612][ T6503] net_ratelimit: 42 callbacks suppressed [ 143.824632][ T6503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.825222][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.825694][ T6503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.827009][ T6503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.856350][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.929507][ T6503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.027596][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.102100][ T6514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.102337][ T6515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.188532][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.309897][ T6465] NFSD: Unable to initialize client recovery tracking! (-110) [ 144.309919][ T6465] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 144.309933][ T6465] NFSD: starting 90-second grace period (net f000043f) [ 145.086733][ T6086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.526701][ T6086] veth0_vlan: entered promiscuous mode [ 146.620919][ T6086] veth1_vlan: entered promiscuous mode [ 146.673992][ T6585] __nla_validate_parse: 12 callbacks suppressed [ 146.674013][ T6585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.212'. [ 146.719338][ T6585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.212'. [ 146.719368][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.212'. [ 146.738444][ T6585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.212'. [ 146.744165][ T5763] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 146.770588][ T6585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.212'. [ 146.791851][ T6585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.212'. [ 146.839072][ T6585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.212'. [ 147.016481][ T821] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 147.026059][ T6086] veth0_macvtap: entered promiscuous mode [ 147.044815][ T6086] veth1_macvtap: entered promiscuous mode [ 147.080402][ T6086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.112164][ T6086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.205804][ T1517] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.205855][ T1517] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.205893][ T1517] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.205945][ T1517] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.400304][ T6579] ceph: No mds server is up or the cluster is laggy [ 147.453498][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.218'. [ 147.480516][ T6601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.218'. [ 147.499856][ T6601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.218'. [ 147.660104][ T5763] libceph: mon0 (2)127.0.0.1:6789 socket closed (con state V2_BANNER_PREFIX) [ 148.828846][ C1] net_ratelimit: 74 callbacks suppressed [ 148.828863][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.856607][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.013045][ T6619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.041188][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.269015][ T1519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.269054][ T1519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.310013][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.310259][ T5592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.344042][ T6635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.344752][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.345288][ T6635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.346023][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.754359][ T1460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.754380][ T1460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.390591][ T1517] rpcbind: server 127.0.0.1 not responding, timed out [ 151.966766][ T6702] __nla_validate_parse: 29 callbacks suppressed [ 151.966789][ T6702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.253'. [ 152.061731][ T6708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.253'. [ 152.065924][ T6709] bridge0: port 3(syz_tun) entered blocking state [ 152.066982][ T6709] bridge0: port 3(syz_tun) entered disabled state [ 152.089792][ T6709] syz_tun: entered allmulticast mode [ 152.107952][ T6709] syz_tun: entered promiscuous mode [ 152.109401][ T6709] bridge0: port 3(syz_tun) entered blocking state [ 152.109550][ T6709] bridge0: port 3(syz_tun) entered listening state [ 152.201464][ T6711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.253'. [ 152.201974][ T6716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.253'. [ 152.202025][ T6719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.253'. [ 152.255999][ T6722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.253'. [ 152.339060][ T6726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.258'. [ 152.339124][ T6728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.258'. [ 152.372780][ T6726] netlink: 12 bytes leftover after parsing attributes in process `syz.2.258'. [ 152.387611][ T6726] netlink: 12 bytes leftover after parsing attributes in process `syz.2.258'. [ 153.511165][ T6766] lo speed is unknown, defaulting to 1000 [ 153.511270][ T6766] lo speed is unknown, defaulting to 1000 [ 153.839295][ T6766] lo speed is unknown, defaulting to 1000 [ 153.858126][ T31] net_ratelimit: 58 callbacks suppressed [ 153.858144][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.896111][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.896518][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.949431][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.974834][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.990560][ T6766] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 153.990604][ T6766] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 153.990652][ T6766] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 153.991881][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.143113][ T6766] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 154.280460][ T6762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.281969][ T31] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER) [ 154.319858][ T6769] ceph: No mds server is up or the cluster is laggy [ 154.421928][ T6795] syz_tun: entered allmulticast mode [ 154.483734][ T6794] syz_tun: left allmulticast mode [ 154.496362][ T6766] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 154.747372][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.830664][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.467848][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.491266][ T6817] FAULT_INJECTION: forcing a failure. [ 155.491266][ T6817] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 155.491300][ T6817] CPU: 1 UID: 0 PID: 6817 Comm: syz.1.280 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 155.491319][ T6817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 155.491329][ T6817] Call Trace: [ 155.491336][ T6817] [ 155.491343][ T6817] dump_stack_lvl+0xe8/0x150 [ 155.491386][ T6817] should_fail_ex+0x467/0x600 [ 155.491417][ T6817] _copy_from_user+0x2d/0xb0 [ 155.491438][ T6817] get_timespec64+0x96/0x1b0 [ 155.491459][ T6817] ? __pfx_get_timespec64+0x10/0x10 [ 155.491480][ T6817] ? ktime_get+0x45/0x220 [ 155.491501][ T6817] __se_sys_futex+0x19a/0x450 [ 155.491528][ T6817] ? __pfx___se_sys_futex+0x10/0x10 [ 155.491550][ T6817] ? rcu_is_watching+0x15/0xb0 [ 155.491581][ T6817] ? __x64_sys_futex+0x21/0xf0 [ 155.491603][ T6817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.491622][ T6817] do_syscall_64+0x174/0x580 [ 155.491645][ T6817] ? trace_irq_disable+0x3b/0x140 [ 155.491663][ T6817] ? clear_bhb_loop+0x40/0x90 [ 155.491684][ T6817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.491702][ T6817] RIP: 0033:0x7f2226bade99 [ 155.491743][ T6817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.491758][ T6817] RSP: 002b:00007ffc3b8eb918 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 155.491784][ T6817] RAX: ffffffffffffffda RBX: 0000000000025df4 RCX: 00007f2226bade99 [ 155.491796][ T6817] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2226e35fac [ 155.491808][ T6817] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 155.491821][ T6817] R10: 00007ffc3b8eba20 R11: 0000000000000246 R12: 00007ffc3b8eba40 [ 155.491836][ T6817] R13: 00007f2226e35fac R14: 0000000000025e26 R15: 00007ffc3b8eba20 [ 155.491879][ T6817] [ 155.801020][ T6828] tipc: Started in network mode [ 155.801052][ T6828] tipc: Node identity 7f000001, cluster identity 4711 [ 155.956567][ T6828] tipc: New replicast peer: 127.0.0.1 [ 156.026505][ T6828] tipc: Enabled bearer , priority 10 [ 156.033910][ T6766] lo speed is unknown, defaulting to 1000 [ 156.051835][ T6766] lo speed is unknown, defaulting to 1000 [ 156.076226][ T6766] lo speed is unknown, defaulting to 1000 [ 156.091231][ T6766] lo speed is unknown, defaulting to 1000 [ 156.179889][ T6766] lo speed is unknown, defaulting to 1000 [ 156.976375][ T6852] __nla_validate_parse: 18 callbacks suppressed [ 156.976398][ T6852] netlink: 12 bytes leftover after parsing attributes in process `syz.4.292'. [ 156.976610][ T6854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.292'. [ 157.196265][ T6859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.292'. [ 157.196568][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.292'. [ 157.227778][ T5742] tipc: Node number set to 2130706433 [ 157.366757][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.298'. [ 157.391140][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.5.299'. [ 157.391540][ T6887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.298'. [ 157.391564][ T6887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.298'. [ 157.468444][ T6888] netlink: 12 bytes leftover after parsing attributes in process `syz.5.299'. [ 157.468473][ T6888] netlink: 4 bytes leftover after parsing attributes in process `syz.5.299'. [ 158.763720][ T6930] tipc: Started in network mode [ 158.763750][ T6930] tipc: Node identity 887766554433221100ffeeddccbbaa99, cluster identity 1 [ 158.913870][ T821] net_ratelimit: 23 callbacks suppressed [ 158.913888][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.987473][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.462045][ T6930] lo speed is unknown, defaulting to 1000 [ 159.547711][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.610893][ T6953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.668351][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.668882][ T6953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.701053][ T6957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.704499][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.750871][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.752886][ T6953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.096337][ T7029] __nla_validate_parse: 32 callbacks suppressed [ 162.096359][ T7029] netlink: 12 bytes leftover after parsing attributes in process `syz.5.336'. [ 162.176666][ T7029] netlink: 12 bytes leftover after parsing attributes in process `syz.5.336'. [ 162.185834][ T7029] netlink: 8 bytes leftover after parsing attributes in process `syz.5.336'. [ 162.522841][ T7044] netlink: 8 bytes leftover after parsing attributes in process `syz.5.341'. [ 162.542222][ T7044] netlink: 12 bytes leftover after parsing attributes in process `syz.5.341'. [ 162.542251][ T7044] netlink: 4 bytes leftover after parsing attributes in process `syz.5.341'. [ 162.543051][ T7044] netlink: 12 bytes leftover after parsing attributes in process `syz.5.341'. [ 162.590463][ T7044] netlink: 12 bytes leftover after parsing attributes in process `syz.5.341'. [ 162.648124][ T7051] netlink: 8 bytes leftover after parsing attributes in process `syz.5.341'. [ 162.955974][ T7059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.345'. [ 163.652784][ T7072] rdma_rxe: rxe_newlink: failed to add lo [ 163.917878][ C1] net_ratelimit: 61 callbacks suppressed [ 163.950248][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.955342][ T7083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.963696][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.976874][ T7083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.981821][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.994245][ T7083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.051880][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.055317][ T7080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.107847][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.269784][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.043220][ T7119] syz.5.363 (7119) used greatest stack depth: 17088 bytes left [ 166.559854][ T7173] rdma_rxe: rxe_newlink: failed to add veth0 [ 167.095765][ T7195] tipc: Started in network mode [ 167.095796][ T7195] tipc: Node identity 1000001, cluster identity 4711 [ 167.095809][ T7195] tipc: Node number set to 16777217 [ 167.249301][ T7197] tipc: Enabled bearer , priority 1 [ 167.332970][ T7194] tipc: Disabling bearer [ 167.388374][ C0] bridge0: port 3(syz_tun) entered learning state [ 167.406905][ T5614] svc: failed to register nfsdv3 RPC service (errno 111). [ 167.430775][ T5614] svc: failed to register nfsaclv3 RPC service (errno 111). [ 167.430797][ T5614] failed to unregister tcp with rpcbind [ 167.431046][ T5614] svc: failed to register nfsdv3 RPC service (errno 97). [ 167.431063][ T5614] svc: failed to register nfsaclv3 RPC service (errno 97). [ 167.431077][ T5614] failed to unregister tcp with rpcbind [ 167.797858][ T7218] __nla_validate_parse: 35 callbacks suppressed [ 167.797881][ T7218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.403'. [ 167.806140][ T7218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.403'. [ 167.835588][ T7218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.403'. [ 167.836693][ T7218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.403'. [ 167.919885][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.5.402'. [ 167.939519][ T7221] netlink: 12 bytes leftover after parsing attributes in process `syz.5.402'. [ 167.939545][ T7221] netlink: 4 bytes leftover after parsing attributes in process `syz.5.402'. [ 168.011596][ T7221] netlink: 12 bytes leftover after parsing attributes in process `syz.5.402'. [ 168.013016][ T7221] netlink: 12 bytes leftover after parsing attributes in process `syz.5.402'. [ 168.051126][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.5.402'. [ 168.585735][ T31] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 168.617014][ T31] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 168.843509][ T7254] syz.0.414 uses obsolete (PF_INET,SOCK_PACKET) [ 168.878297][ T31] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 169.090014][ T7261] net_ratelimit: 69 callbacks suppressed [ 169.090035][ T7261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.119535][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.121278][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.131057][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.292236][ T7259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.292802][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.293425][ T7259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.310983][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.351597][ T7242] ceph: No mds server is up or the cluster is laggy [ 169.387777][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.388061][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.388429][ T821] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 174.438068][ T5742] net_ratelimit: 54 callbacks suppressed [ 174.438089][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.438251][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.613978][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.667543][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.757335][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.627437][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.717768][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.027416][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.667489][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.747669][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.787561][ T5852] net_ratelimit: 6 callbacks suppressed [ 179.787582][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.882673][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.188408][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.829483][ T5592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.829488][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.847178][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.907460][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.871999][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.948637][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.110002][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.724958][ T7354] __nla_validate_parse: 33 callbacks suppressed [ 182.724979][ T7354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.451'. [ 182.744784][ T7359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.451'. [ 182.747254][ C0] bridge0: port 3(syz_tun) entered forwarding state [ 182.747270][ C0] bridge0: topology change detected, propagating [ 182.776901][ T7362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.451'. [ 183.194580][ T7369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.453'. [ 183.194796][ T7377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.453'. [ 183.232677][ T7382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.453'. [ 183.235429][ T7369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.453'. [ 183.251908][ T7369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.453'. [ 183.968654][ T7411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.463'. [ 183.995749][ T7406] rdma_rxe: rxe_newlink: failed to add veth0 [ 184.065705][ T7411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.463'. [ 184.782323][ T7412] smbdirect: ib_dev[syz0] removed [ 184.996514][ T821] net_ratelimit: 42 callbacks suppressed [ 184.996533][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.075663][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.309538][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.657495][ T5614] svc: failed to register nfsdv3 RPC service (errno 111). [ 185.658901][ T5614] svc: failed to register nfsaclv3 RPC service (errno 111). [ 185.658919][ T5614] failed to unregister tcp with rpcbind [ 185.659161][ T5614] svc: failed to register nfsdv3 RPC service (errno 97). [ 185.659184][ T5614] svc: failed to register nfsaclv3 RPC service (errno 97). [ 185.659198][ T5614] failed to unregister tcp with rpcbind [ 185.941367][ T7457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.941943][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.942624][ T7457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.943404][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.944942][ T7457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.945472][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.946133][ T7457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.987983][ T7468] netlink: 'syz.4.482': attribute type 2 has an invalid length. [ 186.994818][ T7472] tipc: Started in network mode [ 186.994833][ T7472] tipc: Node identity 1000001, cluster identity 4369 [ 186.994842][ T7472] tipc: Node number set to 16777217 [ 187.046055][ T7475] tipc: Enabling of bearer rejected, failed to enable media [ 187.542924][ T5619] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 187.578620][ T5619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 187.580458][ T5619] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 187.612809][ T5619] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 187.613618][ T5619] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 187.935221][ T7497] NFSD: Failed to start, no listeners configured. [ 188.005170][ T1519] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.066024][ T7493] __nla_validate_parse: 14 callbacks suppressed [ 188.066045][ T7493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.489'. [ 188.085397][ T7496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.489'. [ 188.085745][ T7499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.489'. [ 188.596057][ T1519] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.710588][ T7516] syz_tun: entered allmulticast mode [ 188.743271][ T7511] syz_tun: left allmulticast mode [ 188.776635][ T7521] bridge0: port 3(syz_tun) entered blocking state [ 188.776765][ T7521] bridge0: port 3(syz_tun) entered disabled state [ 188.828609][ T7521] syz_tun: entered allmulticast mode [ 188.965310][ T7521] syz_tun: entered promiscuous mode [ 189.051552][ T7521] bridge0: port 3(syz_tun) entered blocking state [ 189.086047][ T7521] bridge0: port 3(syz_tun) entered forwarding state [ 189.186178][ T7540] netlink: 8 bytes leftover after parsing attributes in process `syz.5.499'. [ 189.186802][ T7522] bridge0: port 4(ip6gretap0) entered blocking state [ 189.203350][ T7522] bridge0: port 4(ip6gretap0) entered disabled state [ 189.203937][ T7522] ip6gretap0: entered allmulticast mode [ 189.279127][ T7522] ip6gretap0: entered promiscuous mode [ 189.315133][ T7522] bridge0: port 4(ip6gretap0) entered blocking state [ 189.315220][ T7522] bridge0: port 4(ip6gretap0) entered forwarding state [ 189.332645][ T7540] netlink: 12 bytes leftover after parsing attributes in process `syz.5.499'. [ 189.332672][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.5.499'. [ 189.572935][ T1519] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.629460][ T7545] netlink: 12 bytes leftover after parsing attributes in process `syz.5.499'. [ 189.629521][ T7546] netlink: 12 bytes leftover after parsing attributes in process `syz.5.499'. [ 189.670589][ T7540] netlink: 8 bytes leftover after parsing attributes in process `syz.5.499'. [ 189.707263][ T5619] Bluetooth: hci4: command tx timeout [ 189.767802][ T7554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.501'. [ 189.912900][ T7539] bridge0: port 5(bond0) entered blocking state [ 189.913008][ T7539] bridge0: port 5(bond0) entered disabled state [ 189.913196][ T7539] bond0: entered allmulticast mode [ 189.913212][ T7539] bond_slave_0: entered allmulticast mode [ 189.913314][ T7539] bond_slave_1: entered allmulticast mode [ 190.000280][ T7539] bond0: entered promiscuous mode [ 190.000303][ T7539] bond_slave_0: entered promiscuous mode [ 190.002024][ T7539] bond_slave_1: entered promiscuous mode [ 190.053596][ T7539] bridge0: port 5(bond0) entered blocking state [ 190.053724][ T7539] bridge0: port 5(bond0) entered forwarding state [ 190.162225][ T70] net_ratelimit: 49 callbacks suppressed [ 190.162238][ T70] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.162415][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.196307][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.205458][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.267470][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.381187][ T1519] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.466935][ T7571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.482244][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.482455][ T7571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.543725][ T7576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.545864][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.585805][ T7547] bridge0: port 6(team0) entered blocking state [ 190.585889][ T7547] bridge0: port 6(team0) entered disabled state [ 190.586036][ T7547] team0: entered allmulticast mode [ 190.586053][ T7547] team_slave_0: entered allmulticast mode [ 190.586073][ T7547] team_slave_1: entered allmulticast mode [ 190.666747][ T7547] team0: entered promiscuous mode [ 190.666770][ T7547] team_slave_0: entered promiscuous mode [ 190.667015][ T7547] team_slave_1: entered promiscuous mode [ 190.696959][ T7547] bridge0: port 6(team0) entered blocking state [ 190.705620][ T7547] bridge0: port 6(team0) entered forwarding state [ 190.735510][ T7521] bridge0: port 7(dummy0) entered blocking state [ 190.735582][ T7521] bridge0: port 7(dummy0) entered disabled state [ 190.735719][ T7521] dummy0: entered allmulticast mode [ 190.792531][ T7521] dummy0: entered promiscuous mode [ 190.793663][ T7521] bridge0: port 7(dummy0) entered blocking state [ 190.820078][ T7521] bridge0: port 7(dummy0) entered forwarding state [ 190.864501][ T7551] bridge0: port 8(batadv0) entered blocking state [ 190.864716][ T7551] bridge0: port 8(batadv0) entered disabled state [ 190.864881][ T7551] batadv0: entered allmulticast mode [ 190.922347][ T7551] batadv0: entered promiscuous mode [ 190.974456][ T7551] bridge0: port 8(batadv0) entered blocking state [ 190.974578][ T7551] bridge0: port 8(batadv0) entered forwarding state [ 191.392775][ T1460] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 191.392794][ T1460] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 191.771745][ T6086] svc: failed to register nfsdv3 RPC service (errno 111). [ 191.789358][ T5619] Bluetooth: hci4: command tx timeout [ 191.809838][ T6086] svc: failed to register nfsaclv3 RPC service (errno 111). [ 191.809860][ T6086] failed to unregister tcp with rpcbind [ 191.811004][ T6086] svc: failed to register nfsdv3 RPC service (errno 97). [ 191.811022][ T6086] svc: failed to register nfsaclv3 RPC service (errno 97). [ 191.811034][ T6086] failed to unregister tcp with rpcbind [ 192.420401][ T7598] svc: failed to register lockdv1 RPC service (errno 111). [ 192.445048][ T7598] lockd_up: makesock failed, error=-111 [ 192.931206][ T1519] netdevsim netdevsim10 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.074920][ T7628] __nla_validate_parse: 11 callbacks suppressed [ 193.074941][ T7628] netlink: 12 bytes leftover after parsing attributes in process `syz.5.521'. [ 193.074961][ T7628] netlink: 4 bytes leftover after parsing attributes in process `syz.5.521'. [ 193.075441][ T7630] netlink: 12 bytes leftover after parsing attributes in process `syz.5.521'. [ 193.075539][ T7635] netlink: 12 bytes leftover after parsing attributes in process `syz.5.521'. [ 193.197592][ T7625] netlink: 8 bytes leftover after parsing attributes in process `syz.5.521'. [ 193.447661][ T7598] svc: failed to register nfsdv3 RPC service (errno 512). [ 193.447901][ T7598] svc: failed to register nfsaclv3 RPC service (errno 512). [ 193.447919][ T7598] failed to unregister udp with rpcbind [ 193.448419][ T7598] svc: failed to register nfsdv3 RPC service (errno 97). [ 193.448439][ T7598] svc: failed to register nfsaclv3 RPC service (errno 97). [ 193.448453][ T7598] failed to unregister udp with rpcbind [ 193.656321][ T1519] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.833282][ T7651] lo speed is unknown, defaulting to 1000 [ 193.867531][ T5619] Bluetooth: hci4: command tx timeout [ 193.914732][ T5264] 8021q: adding VLAN 0 to HW filter on device eth5 [ 193.999519][ T7658] tipc: New replicast peer: 127.0.0.1 [ 194.028892][ T7658] tipc: Enabled bearer , priority 10 [ 194.166961][ T7651] lo speed is unknown, defaulting to 1000 [ 194.286851][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.286949][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.339251][ T7651] lo speed is unknown, defaulting to 1000 [ 194.473963][ T7667] svc: failed to register lockdv1 RPC service (errno 111). [ 194.977892][ T7488] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.978093][ T7488] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.978286][ T7488] bridge_slave_0: entered allmulticast mode [ 194.985825][ T7488] bridge_slave_0: entered promiscuous mode [ 195.048185][ T7488] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.048313][ T7488] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.048567][ T7488] bridge_slave_1: entered allmulticast mode [ 195.066604][ T7488] bridge_slave_1: entered promiscuous mode [ 195.406791][ T7651] infiniband syz0: set active [ 195.406815][ T7651] infiniband syz0: added lo [ 195.461362][ T7667] svc: failed to register nfsdv3 RPC service (errno 512). [ 195.461595][ T7667] svc: failed to register nfsaclv3 RPC service (errno 512). [ 195.461611][ T7667] failed to unregister udp with rpcbind [ 195.461809][ T7667] svc: failed to register nfsdv3 RPC service (errno 97). [ 195.461834][ T7667] svc: failed to register nfsaclv3 RPC service (errno 97). [ 195.461847][ T7667] failed to unregister udp with rpcbind [ 195.486597][ T70] net_ratelimit: 109 callbacks suppressed [ 195.501824][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.531192][ T70] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.536796][ T7651] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 195.551537][ T70] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.551800][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.557352][ T7651] infiniband syz0: Couldn't open port 1 [ 195.557673][ T7651] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 195.557703][ T7651] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 195.557739][ T7651] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 195.628664][ T70] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.628966][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.652118][ T70] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.652321][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.737279][ T70] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.737507][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.773737][ T821] lo speed is unknown, defaulting to 1000 [ 195.911471][ T7651] RDS/IB: syz0: added [ 195.913402][ T7651] smc: adding ib device syz0 with port count 1 [ 195.913625][ T7651] smc: ib device syz0 port 1 has no pnetid [ 195.958695][ T5619] Bluetooth: hci4: command tx timeout [ 196.082932][ T821] lo speed is unknown, defaulting to 1000 [ 196.117925][ T7488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.123572][ T7651] lo speed is unknown, defaulting to 1000 [ 196.177780][ T7488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.310294][ T1519] bridge_slave_1: left allmulticast mode [ 196.310330][ T1519] bridge_slave_1: left promiscuous mode [ 196.310602][ T1519] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.490741][ T1519] bridge_slave_0: left allmulticast mode [ 196.490778][ T1519] bridge_slave_0: left promiscuous mode [ 196.491022][ T1519] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.308782][ T1519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.390868][ T1519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.416532][ T1519] bond0 (unregistering): Released all slaves [ 197.469733][ T7698] netlink: 12 bytes leftover after parsing attributes in process `syz.4.535'. [ 197.470346][ T7700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.535'. [ 197.530021][ T7702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.535'. [ 197.532589][ T7704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.535'. [ 197.534324][ T7651] lo speed is unknown, defaulting to 1000 [ 197.837874][ T1519] tipc: Left network mode [ 197.844241][ T7488] team0: Port device team_slave_0 added [ 197.858362][ T7710] tipc: Enabling of bearer rejected, already enabled [ 197.891315][ T7488] team0: Port device team_slave_1 added [ 198.087775][ T7711] svc: failed to register lockdv1 RPC service (errno 111). [ 198.596060][ T7488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.596079][ T7488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.596108][ T7488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.611507][ T7726] bridge0: port 4(dummy0) entered blocking state [ 198.611845][ T7726] bridge0: port 4(dummy0) entered disabled state [ 198.612476][ T7726] dummy0: entered allmulticast mode [ 198.661972][ T7726] dummy0: entered promiscuous mode [ 198.741843][ T7726] bridge0: port 4(dummy0) entered blocking state [ 198.741955][ T7726] bridge0: port 4(dummy0) entered listening state [ 198.854968][ T7488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.854985][ T7488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.855011][ T7488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.077893][ T7711] svc: failed to register nfsdv3 RPC service (errno 512). [ 199.079498][ T7711] svc: failed to register nfsaclv3 RPC service (errno 512). [ 199.081605][ T7711] failed to unregister udp with rpcbind [ 199.107870][ T7711] svc: failed to register nfsdv3 RPC service (errno 97). [ 199.107895][ T7711] svc: failed to register nfsaclv3 RPC service (errno 97). [ 199.107910][ T7711] failed to unregister udp with rpcbind [ 199.407836][ T7651] lo speed is unknown, defaulting to 1000 [ 200.298678][ T7754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.548'. [ 200.298773][ T7757] netlink: 12 bytes leftover after parsing attributes in process `syz.1.548'. [ 200.299054][ T7758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.548'. [ 200.301878][ T5264] 8021q: adding VLAN 0 to HW filter on device eth6 [ 200.302210][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.548'. [ 200.412008][ T7488] hsr_slave_0: entered promiscuous mode [ 200.414545][ T7488] hsr_slave_1: entered promiscuous mode [ 200.440612][ T7488] debugfs: 'hsr0' already exists in 'hsr' [ 200.440639][ T7488] Cannot create hsr debugfs directory [ 200.446311][ T7651] lo speed is unknown, defaulting to 1000 [ 200.505781][ T12] net_ratelimit: 74 callbacks suppressed [ 200.505801][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.506100][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.577439][ T7772] tipc: Enabling of bearer rejected, already enabled [ 200.669042][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.710939][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.147384][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.404525][ T7789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.404782][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.707401][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.787432][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.853276][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.907316][ T821] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 202.022009][ T7793] NFSD: Failed to start, no listeners configured. [ 202.042697][ T7807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.562'. [ 202.042778][ T7808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.562'. [ 202.042959][ T7809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.562'. [ 202.108346][ T821] usb 2-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 202.108381][ T821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.108396][ T821] usb 2-1: Product: syz [ 202.108406][ T821] usb 2-1: Manufacturer: syz [ 202.108417][ T821] usb 2-1: SerialNumber: syz [ 202.217988][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.562'. [ 202.520552][ T7651] lo speed is unknown, defaulting to 1000 [ 203.465064][ T5264] 8021q: adding VLAN 0 to HW filter on device eth7 [ 203.709554][ T7651] lo speed is unknown, defaulting to 1000 [ 203.746374][ T7833] tipc: New replicast peer: 127.0.0.1 [ 203.765882][ T7833] tipc: Enabled bearer , priority 10 [ 203.897784][ T7488] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 203.995242][ T7488] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 204.034708][ T7488] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 204.071771][ T7488] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 204.150853][ T7488] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 204.357824][ T7488] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 204.361014][ T7488] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 204.416433][ T7488] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 204.507545][ C1] tipc: RX(1000001): key[1] is activated [ 204.543506][ T821] ax88179_178a 2-1:1.0: probe with driver ax88179_178a failed with error -71 [ 204.789759][ T5611] svc: failed to register nfsdv3 RPC service (errno 111). [ 204.792632][ T5611] svc: failed to register nfsaclv3 RPC service (errno 111). [ 204.792651][ T5611] failed to unregister udp with rpcbind [ 204.844102][ T5611] svc: failed to register nfsdv3 RPC service (errno 97). [ 204.844127][ T5611] svc: failed to register nfsaclv3 RPC service (errno 97). [ 204.844141][ T5611] failed to unregister udp with rpcbind [ 204.913426][ T821] usb 2-1: USB disconnect, device number 3 [ 205.101735][ T7488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.124480][ T7855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.572'. [ 205.135602][ T7859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.572'. [ 205.246942][ T7488] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.301426][ T1418] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.303801][ T1418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.333013][ T1418] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.333160][ T1418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.680475][ T7864] net_ratelimit: 22 callbacks suppressed [ 205.680495][ T7864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.738340][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.835761][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.836674][ T7872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.876430][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.916770][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.006638][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.013917][ T7863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.367890][ T198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.504788][ T7890] __nla_validate_parse: 2 callbacks suppressed [ 206.504809][ T7890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.581'. [ 206.627588][ T5264] 8021q: adding VLAN 0 to HW filter on device eth8 [ 206.722917][ T7893] rdma_rxe: rxe_newlink: failed to add lo [ 206.801783][ T7898] rdma_rxe: rxe_newlink: failed to add veth0 [ 206.941047][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.052318][ T7905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.584'. [ 207.075098][ T7905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.584'. [ 207.075740][ T7905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.584'. [ 207.194276][ T7911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.587'. [ 207.210948][ T7911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.587'. [ 207.211294][ T7911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.587'. [ 207.211704][ T7911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.587'. [ 207.226198][ T7911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.587'. [ 207.875380][ T7931] tipc: Started in network mode [ 207.875418][ T7931] tipc: Node identity 7f000001, cluster identity 4711 [ 207.946753][ T7931] tipc: New replicast peer: 127.0.0.1 [ 208.014080][ T7931] tipc: Enabled bearer , priority 10 [ 208.307276][ T1519] hsr_slave_0: left promiscuous mode [ 208.354311][ T1519] hsr_slave_1: left promiscuous mode [ 208.358576][ T1519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.358626][ T1519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.411208][ T1519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.411237][ T1519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.560267][ T1519] veth1_macvtap: left promiscuous mode [ 208.561327][ T1519] veth0_macvtap: left promiscuous mode [ 208.564003][ T1519] veth1_vlan: left promiscuous mode [ 208.564239][ T1519] veth0_vlan: left promiscuous mode [ 209.648483][ T1519] team0 (unregistering): Port device team_slave_1 removed [ 209.730275][ T1519] team0 (unregistering): Port device team_slave_0 removed [ 210.131642][ T7950] netlink: 12 bytes leftover after parsing attributes in process `syz.5.593'. [ 210.139255][ T5264] 8021q: adding VLAN 0 to HW filter on device eth9 [ 210.143632][ T5860] tipc: Node number set to 2130706433 [ 210.234545][ T7488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.017671][ C0] net_ratelimit: 16 callbacks suppressed [ 211.017693][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.067455][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.302693][ T8015] tipc: Enabling of bearer rejected, already enabled [ 211.502256][ T8018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.502517][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.529736][ T8018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.571866][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.686612][ T8018] __nla_validate_parse: 13 callbacks suppressed [ 211.686703][ T8018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.609'. [ 211.708445][ T8024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.609'. [ 211.805995][ T7488] veth0_vlan: entered promiscuous mode [ 211.863572][ T7488] veth1_vlan: entered promiscuous mode [ 212.027308][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.053872][ T8035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.612'. [ 212.054469][ T8035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.612'. [ 212.054780][ T8035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.612'. [ 212.118418][ T5852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.145176][ T8035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.612'. [ 212.145867][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.612'. [ 212.305720][ T5264] 8021q: adding VLAN 0 to HW filter on device eth10 [ 212.349662][ T7488] veth0_macvtap: entered promiscuous mode [ 212.427535][ T198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.458404][ T7488] veth1_macvtap: entered promiscuous mode [ 212.526210][ T8043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.614'. [ 212.543333][ T8042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.614'. [ 212.559199][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.614'. [ 212.644616][ T7488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.740781][ T7488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.789595][ T3332] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.809347][ T3332] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.811473][ T3332] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.860078][ T3332] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.067321][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.650909][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.650928][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.107117][ C1] tipc: RX(1000001): key[1] is activated [ 214.107217][ C1] bridge0: port 4(dummy0) entered learning state [ 214.148465][ T8081] tipc: Enabling of bearer rejected, already enabled [ 214.161850][ T1460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.161905][ T1460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.229271][ T6086] svc: failed to register nfsdv3 RPC service (errno 111). [ 214.245610][ T6086] svc: failed to register nfsaclv3 RPC service (errno 111). [ 214.245647][ T6086] failed to unregister tcp with rpcbind [ 214.246382][ T6086] svc: failed to register nfsdv3 RPC service (errno 97). [ 214.246426][ T6086] svc: failed to register nfsaclv3 RPC service (errno 97). [ 214.246464][ T6086] failed to unregister tcp with rpcbind [ 215.215710][ T8112] netlink: 'syz.4.634': attribute type 1 has an invalid length. [ 215.215734][ T8112] netlink: 'syz.4.634': attribute type 2 has an invalid length. [ 216.187282][ C0] net_ratelimit: 29 callbacks suppressed [ 216.187300][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.279410][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.372031][ T8135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.374888][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.375938][ T8135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.382008][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.408509][ T8135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.410256][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.424804][ T8135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.438502][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.600822][ T1544] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.828132][ T5616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 216.871830][ T5616] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 216.906227][ T5616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 216.925358][ T5616] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 216.940219][ T5616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 216.977716][ T8140] tipc: Started in network mode [ 216.977749][ T8140] tipc: Node identity efcdab90785634122143658709badcfe, cluster identity 4568 [ 217.176391][ T5612] bridge0: port 3(syz_tun) entered disabled state [ 217.253626][ T5612] syz_tun (unregistering): left allmulticast mode [ 217.253662][ T5612] syz_tun (unregistering): left promiscuous mode [ 217.267161][ T5612] bridge0: port 3(syz_tun) entered disabled state [ 217.479980][ T8143] tipc: New replicast peer: 127.0.0.1 [ 217.480255][ T8143] tipc: Enabled bearer , priority 10 [ 217.863834][ T1544] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.921555][ T8171] __nla_validate_parse: 13 callbacks suppressed [ 217.921577][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.650'. [ 218.467910][ T5616] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 218.517771][ T5616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 218.550173][ T5616] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 218.556708][ T5616] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 218.576117][ T5616] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 218.894351][ T8173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.650'. [ 218.933202][ T8175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.650'. [ 218.935677][ T8177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.650'. [ 218.936057][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.650'. [ 218.938924][ T5852] tipc: Node number set to 3210880763 [ 219.958333][ T8152] lo speed is unknown, defaulting to 1000 [ 220.508110][ C0] tipc: RX(7f000001): key[1] is activated [ 220.681488][ T8182] lo speed is unknown, defaulting to 1000 [ 220.688683][ T5619] Bluetooth: hci1: command tx timeout [ 220.889886][ C1] sched: DL replenish lagged too much [ 221.592207][ T5619] Bluetooth: hci0: command tx timeout [ 222.427812][ C0] tipc: RX(7f000001): key[1] is activated [ 222.757412][ T5616] Bluetooth: hci1: command tx timeout [ 223.416975][ T8152] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.425288][ T8152] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.425908][ T8152] bridge_slave_0: entered allmulticast mode [ 223.442597][ T8152] bridge_slave_0: entered promiscuous mode [ 223.478874][ T8152] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.478999][ T8152] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.479593][ T8152] bridge_slave_1: entered allmulticast mode [ 223.482862][ T8152] bridge_slave_1: entered promiscuous mode [ 223.627359][ T5616] Bluetooth: hci0: command tx timeout [ 223.666270][ T8152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.696959][ T8152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.712207][ T5616] Bluetooth: hci2: command 0x0406 tx timeout [ 223.872215][ T8152] team0: Port device team_slave_0 added [ 223.888437][ T8152] team0: Port device team_slave_1 added [ 223.949388][ T5616] Bluetooth: hci3: command 0x0406 tx timeout [ 224.827359][ T5616] Bluetooth: hci1: command tx timeout [ 225.707356][ T5616] Bluetooth: hci0: command tx timeout [ 226.909056][ T5616] Bluetooth: hci1: command tx timeout [ 227.787292][ T5616] Bluetooth: hci0: command tx timeout [ 234.373538][ T5620] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 234.422581][ T5620] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 234.451460][ T5620] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 234.456966][ T5620] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 234.465943][ T5620] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 234.731456][ T4918] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 234.775402][ T4918] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 234.810841][ T4918] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 234.816725][ T4918] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 234.839315][ T4918] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 235.953522][ T5626] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 235.988722][ T5626] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 236.007308][ T5626] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 236.032503][ T5626] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 236.033381][ T5626] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 237.674067][ C1] tipc: RX(efcdab90785634122143658709badcfe): key[1] is activated [ 237.680181][ C1] bridge0: port 4(dummy0) entered forwarding state [ 237.680207][ C1] bridge0: topology change detected, propagating [ 255.712355][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.712434][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 277.016562][ T5628] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 277.118270][ T5628] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 277.122730][ T5628] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 277.124437][ T5628] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 277.125397][ T5628] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 279.014129][ T5625] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 279.054569][ T5625] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 279.056370][ T5625] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 279.084012][ T5625] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 279.096986][ T5625] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 294.762852][ T8253] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 294.804240][ T8253] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 294.806016][ T8253] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 294.825627][ T8253] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 294.838644][ T8253] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 295.211674][ T8266] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 295.271222][ T8266] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 295.274934][ T8266] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 295.294463][ T8266] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 295.305254][ T8266] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 296.565129][ T8261] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 296.615489][ T8261] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 296.622091][ T8261] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 296.636268][ T8261] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 296.654917][ T8261] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 314.113549][ T8266] Bluetooth: hci4: command 0x0406 tx timeout [ 317.155934][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.156009][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 336.936202][ T8277] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 336.962323][ T8277] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 336.965507][ T8277] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 336.984423][ T8277] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 336.986431][ T8277] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 338.950937][ T8289] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 338.983096][ T8289] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 338.994685][ T8289] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 339.016223][ T8289] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 339.020896][ T8289] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 344.832544][ T8281] Bluetooth: hci1: command 0x0406 tx timeout [ 355.626229][ T8293] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 355.665285][ T8293] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 355.679676][ T8293] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 355.684383][ T8293] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 355.685743][ T8293] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 355.890295][ T8297] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 355.928464][ T8297] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 355.931279][ T8297] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 355.933464][ T8297] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 355.935837][ T8297] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 356.944173][ T8311] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 356.975955][ T8311] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 356.985826][ T8311] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 356.998145][ T8311] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 356.999737][ T8311] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 377.317305][ T39] INFO: task dhcpcd:5264 blocked for more than 143 seconds. [ 377.317331][ T39] Not tainted syzkaller #0 [ 377.317343][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 377.317352][ T39] task:dhcpcd state:D stack:21864 pid:5264 tgid:5264 ppid:5263 task_flags:0x400140 flags:0x00080000 [ 377.317433][ T39] Call Trace: [ 377.317441][ T39] [ 377.317455][ T39] __schedule+0x16dc/0x5500 [ 377.317647][ T39] ? __lock_acquire+0x683/0x2ce0 [ 377.317822][ T39] ? __pfx___schedule+0x10/0x10 [ 377.317859][ T39] rt_mutex_schedule+0x76/0xf0 [ 377.317909][ T39] rt_mutex_slowlock_block+0x55c/0x680 [ 377.317974][ T39] rt_mutex_slowlock+0x2d4/0x780 [ 377.318008][ T39] ? rt_mutex_slowlock+0x1f2/0x780 [ 377.318041][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 377.318084][ T39] ? inet_rtm_newaddr+0x464/0x19e0 [ 377.318193][ T39] ? inet_rtm_newaddr+0x464/0x19e0 [ 377.318228][ T39] ? inet_rtm_newaddr+0x464/0x19e0 [ 377.318256][ T39] mutex_lock_nested+0x168/0x1d0 [ 377.318292][ T39] inet_rtm_newaddr+0x464/0x19e0 [ 377.318321][ T39] ? unwind_get_return_address+0x4d/0x90 [ 377.318374][ T39] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 377.318435][ T39] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 377.318482][ T39] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 377.318511][ T39] rtnetlink_rcv_msg+0x802/0xc00 [ 377.318595][ T39] ? kmem_cache_alloc_node_noprof+0x3eb/0x670 [ 377.320247][ T39] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 377.320274][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 377.320300][ T39] ? __lock_acquire+0x683/0x2ce0 [ 377.320339][ T39] netlink_rcv_skb+0x226/0x4a0 [ 377.320409][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 377.320436][ T39] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 377.320478][ T39] ? netlink_deliver_tap+0x2e/0x1b0 [ 377.320546][ T39] ? netlink_deliver_tap+0x2e/0x1b0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 377.320580][ T39] netlink_unicast+0x7f5/0x990 [ 377.320616][ T39] netlink_sendmsg+0x813/0xb40 [ 377.320645][ T39] ? __lock_acquire+0x683/0x2ce0 [ 377.320677][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.320706][ T39] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 377.320798][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 377.320825][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 377.320873][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.320900][ T39] sock_sendmsg_nosec+0x13a/0x180 [ 377.320996][ T39] ____sys_sendmsg+0x565/0x870 [ 377.321034][ T39] ? __pfx_____sys_sendmsg+0x10/0x10 [ 377.321073][ T39] ? import_iovec+0x73/0xa0 [ 377.321138][ T39] ___sys_sendmsg+0x2a5/0x360 [ 377.321167][ T39] ? __pfx___css_rstat_updated+0x10/0x10 [ 377.321234][ T39] ? __pfx____sys_sendmsg+0x10/0x10 [ 377.321286][ T39] ? handle_mm_fault+0x1326/0x13f0 [ 377.321408][ T39] ? __pfx_handle_mm_fault+0x10/0x10 [ 377.321428][ T39] ? lock_vma_under_rcu+0x45a/0x500 [ 377.321473][ T39] ? __pfx_set_user_sigmask+0x10/0x10 [ 377.321544][ T39] __x64_sys_sendmsg+0x1b7/0x290 [ 377.321573][ T39] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 377.321608][ T39] ? do_user_addr_fault+0xc4a/0x1340 [ 377.321653][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.323201][ T39] do_syscall_64+0x174/0x580 [ 377.323253][ T39] ? trace_irq_disable+0x3b/0x140 [ 377.323324][ T39] ? clear_bhb_loop+0x40/0x90 [ 377.323352][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.323375][ T39] RIP: 0033:0x7efc5fd24407 [ 377.323396][ T39] RSP: 002b:00007ffc124b6e00 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 377.323418][ T39] RAX: ffffffffffffffda RBX: 00007efc5fc9a780 RCX: 00007efc5fd24407 [ 377.323434][ T39] RDX: 0000000000000000 RSI: 00007ffc124cafe0 RDI: 0000000000000004 [ 377.323448][ T39] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 377.323460][ T39] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc124db210 [ 377.323473][ T39] R13: 00007efc5fc9a708 R14: 0000000000000044 R15: 00007ffc124cafe0 [ 377.323506][ T39] [ 377.323570][ T39] INFO: task syz-executor:8152 blocked for more than 143 seconds. [ 377.323587][ T39] Not tainted syzkaller #0 [ 377.323598][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 377.323607][ T39] task:syz-executor state:D stack:22544 pid:8152 tgid:8152 ppid:1 task_flags:0x400140 flags:0x00080002 [ 377.323668][ T39] Call Trace: [ 377.323675][ T39] [ 377.323688][ T39] __schedule+0x16dc/0x5500 [ 377.323716][ T39] ? kernel_text_address+0xa5/0xe0 [ 377.323762][ T39] ? __kernel_text_address+0xd/0x30 [ 377.323806][ T39] ? __pfx___schedule+0x10/0x10 [ 377.323845][ T39] rt_mutex_schedule+0x76/0xf0 [ 377.323870][ T39] rt_mutex_slowlock_block+0x55c/0x680 [ 377.323920][ T39] rt_mutex_slowlock+0x2d4/0x780 [ 377.323956][ T39] ? rt_mutex_slowlock+0x1f2/0x780 [ 377.323991][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 377.324036][ T39] ? rtnl_newlink+0x8a3/0x1bd0 [ 377.324064][ T39] ? rtnl_newlink+0x8a3/0x1bd0 [ 377.324093][ T39] ? rtnl_newlink+0x8a3/0x1bd0 [ 377.324114][ T39] mutex_lock_nested+0x168/0x1d0 [ 377.324154][ T39] rtnl_newlink+0x8a3/0x1bd0 [ 377.324186][ T39] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 377.324234][ T39] ? __pfx_rtnl_newlink+0x10/0x10 [ 377.324259][ T39] ? __lock_acquire+0x683/0x2ce0 [ 377.324291][ T39] ? __lock_acquire+0x683/0x2ce0 [ 377.324323][ T39] ? finish_task_switch+0x412/0xc60 [ 377.324350][ T39] ? unwind_next_frame+0x8f/0x2550 [ 377.324384][ T39] ? is_bpf_text_address+0x26/0x2b0 [ 377.324444][ T39] ? is_bpf_text_address+0x26/0x2b0 [ 377.324476][ T39] ? __lock_acquire+0x683/0x2ce0 [ 377.324504][ T39] ? kernel_text_address+0xa5/0xe0 [ 377.324566][ T39] ? __kernel_text_address+0xd/0x30 [ 377.324589][ T39] ? unwind_get_return_address+0x4d/0x90 [ 377.324614][ T39] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 377.324654][ T39] ? arch_stack_walk+0xfb/0x150 [ 377.326253][ T39] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 377.326281][ T39] ? __pfx_rtnl_newlink+0x10/0x10 [ 377.326317][ T39] ? __pfx_rtnl_newlink+0x10/0x10 [ 377.326340][ T39] rtnetlink_rcv_msg+0x802/0xc00 [ 377.326362][ T39] ? kmem_cache_alloc_node_noprof+0x3eb/0x670 [ 377.326389][ T39] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 377.326412][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 377.326437][ T39] ? __lock_acquire+0x683/0x2ce0 [ 377.326474][ T39] netlink_rcv_skb+0x226/0x4a0 [ 377.326503][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 377.326537][ T39] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 377.326578][ T39] ? netlink_deliver_tap+0x2e/0x1b0 [ 377.326605][ T39] ? netlink_deliver_tap+0x2e/0x1b0 [ 377.326639][ T39] netlink_unicast+0x7f5/0x990 [ 377.326675][ T39] netlink_sendmsg+0x813/0xb40 [ 377.326713][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.326744][ T39] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 377.326784][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.326811][ T39] sock_sendmsg_nosec+0x13a/0x180 [ 377.326849][ T39] __sys_sendto+0x41e/0x5d0 [ 377.326880][ T39] ? __pfx___sys_sendto+0x10/0x10 [ 377.326902][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 377.360660][ T39] ? fput_close_sync+0x11f/0x240 [ 377.360796][ T39] ? kmem_cache_free+0x526/0x6c0 [ 377.360833][ T39] ? __pfx_fput_close_sync+0x10/0x10 [ 377.360868][ T39] __x64_sys_sendto+0xde/0x100 [ 377.360897][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.360922][ T39] do_syscall_64+0x174/0x580 [ 377.360953][ T39] ? clear_bhb_loop+0x40/0x90 [ 377.360981][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.361004][ T39] RIP: 0033:0x7fbea977e6ce [ 377.361024][ T39] RSP: 002b:00007ffc055f8c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 377.361047][ T39] RAX: ffffffffffffffda RBX: 000055557344a500 RCX: 00007fbea977e6ce [ 377.361063][ T39] RDX: 0000000000000028 RSI: 00007fbeaa574670 RDI: 0000000000000003 [ 377.361077][ T39] RBP: 0000000000000001 R08: 00007ffc055f8ce4 R09: 000000000000000c [ 377.361090][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 377.361102][ T39] R13: 0000000000000000 R14: 00007fbeaa574670 R15: 0000000000000000 [ 377.361134][ T39] [ 377.361146][ T39] INFO: task syz-executor:8182 blocked for more than 143 seconds. [ 377.361162][ T39] Not tainted syzkaller #0 [ 377.361173][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 377.361182][ T39] task:syz-executor state:D stack:23312 pid:8182 tgid:8182 ppid:1 task_flags:0x400140 flags:0x00080002 [ 377.361245][ T39] Call Trace: [ 377.361252][ T39] [ 377.361265][ T39] __schedule+0x16dc/0x5500 [ 377.361293][ T39] ? kernel_text_address+0xa5/0xe0 [ 377.361318][ T39] ? __kernel_text_address+0xd/0x30 [ 377.483608][ T39] ? __pfx___schedule+0x10/0x10 [ 377.483655][ T39] rt_mutex_schedule+0x76/0xf0 [ 377.483681][ T39] rt_mutex_slowlock_block+0x55c/0x680 [ 377.483726][ T39] rt_mutex_slowlock+0x2d4/0x780 [ 377.483760][ T39] ? rt_mutex_slowlock+0x1f2/0x780 [ 377.483791][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 377.483832][ T39] ? rtnl_newlink+0x8a3/0x1bd0 [ 377.483859][ T39] ? rtnl_newlink+0x8a3/0x1bd0 [ 377.483885][ T39] ? rtnl_newlink+0x8a3/0x1bd0 [ 377.483904][ T39] mutex_lock_nested+0x168/0x1d0 [ 377.483937][ T39] rtnl_newlink+0x8a3/0x1bd0 [ 377.483970][ T39] ? __pfx_rtnl_newlink+0x10/0x10 [ 377.483992][ T39] ? __lock_acquire+0x683/0x2ce0 [ 377.484020][ T39] ? __lock_acquire+0x683/0x2ce0 [ 377.484091][ T39] ? __kernel_text_address+0xd/0x30 [ 377.484112][ T39] ? unwind_get_return_address+0x4d/0x90 [ 377.484135][ T39] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 377.484155][ T39] ? arch_stack_walk+0xfb/0x150 [ 377.484186][ T39] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 377.484222][ T39] ? __pfx_rtnl_newlink+0x10/0x10 [ 377.484242][ T39] rtnetlink_rcv_msg+0x802/0xc00 [ 377.484262][ T39] ? kmem_cache_alloc_node_noprof+0x3eb/0x670 [ 377.484287][ T39] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 377.484307][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 377.484330][ T39] ? __lock_acquire+0x683/0x2ce0 [ 377.484363][ T39] netlink_rcv_skb+0x226/0x4a0 [ 377.484389][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 377.484413][ T39] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 377.484466][ T39] ? netlink_deliver_tap+0x2e/0x1b0 [ 377.484492][ T39] ? netlink_deliver_tap+0x2e/0x1b0 [ 377.484530][ T39] netlink_unicast+0x7f5/0x990 [ 377.484565][ T39] netlink_sendmsg+0x813/0xb40 [ 377.484601][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.484630][ T39] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 377.484670][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.484696][ T39] sock_sendmsg_nosec+0x13a/0x180 [ 377.484731][ T39] __sys_sendto+0x41e/0x5d0 [ 377.484760][ T39] ? __pfx___sys_sendto+0x10/0x10 [ 377.484782][ T39] ? errseq_sample+0x40/0x70 [ 377.484902][ T39] ? rcu_is_watching+0x15/0xb0 [ 377.485001][ T39] __x64_sys_sendto+0xde/0x100 [ 377.485026][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.678058][ T39] do_syscall_64+0x174/0x580 [ 377.678098][ T39] ? trace_irq_disable+0x3b/0x140 [ 377.678122][ T39] ? clear_bhb_loop+0x40/0x90 [ 377.678149][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.678170][ T39] RIP: 0033:0x7f106830e6ce [ 377.678189][ T39] RSP: 002b:00007fff9b772458 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 377.678211][ T39] RAX: ffffffffffffffda RBX: 000055558f0b8500 RCX: 00007f106830e6ce [ 377.678226][ T39] RDX: 000000000000003c RSI: 00007f1069104670 RDI: 0000000000000003 [ 377.678238][ T39] RBP: 0000000000000001 R08: 00007fff9b7724d4 R09: 000000000000000c [ 377.678251][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 377.678262][ T39] R13: 0000000000000000 R14: 00007f1069104670 R15: 0000000000000000 [ 377.678292][ T39] [ 377.678336][ T39] [ 377.678336][ T39] Showing all locks held in the system: [ 377.678348][ T39] 7 locks held by kworker/u8:0/12: [ 377.678362][ T39] 4 locks held by pr/legacy/17: [ 377.678375][ T39] 5 locks held by ktimers/1/29: [ 377.678387][ T39] 1 lock held by khungtaskd/39: [ 377.678398][ T39] #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 377.678479][ T39] 3 locks held by kworker/u8:3/56: [ 377.678496][ T39] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 377.678562][ T39] #1: ffffc9000122fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 377.678613][ T39] #2: ffff88804c9508d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 377.678749][ T39] 6 locks held by kworker/u9:0/60: [ 377.678760][ T39] #0: ffff88803d21f938 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 377.678810][ T39] #1: ffffc9000126fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 377.678860][ T39] #2: ffff888031454f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 377.678945][ T39] #3: ffff8880314540b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 377.679021][ T39] #4: ffffffff8f7360b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 377.679105][ T39] #5: ffff88803d21d370 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x520 [ 377.679204][ T39] 5 locks held by kworker/u8:4/67: [ 377.679233][ T39] 3 locks held by kworker/u8:5/70: [ 377.679244][ T39] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 377.679296][ T39] #1: ffffc9000155fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 377.679372][ T39] #2: ffff8880630908d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 377.679445][ T39] 3 locks held by kworker/u8:7/1117: [ 377.679458][ T39] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 377.808778][ [ 377.808778][ T39] #1: ffffc90006397c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 377.808849][ T39] #2: ffff888064d508d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 377.808913][ T39] 7 locks held by kworker/u8:8/1222: [ 377.808927][ T39] 6 locks held by kworker/u8:9/1418: [ 377.808939][ T39] 3 locks held by kworker/u8:10/1422: [ 377.808957][ T39] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 377.809012][ T39] #1: ffffc90006d67c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 377.809065][ T39] #2: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 377.809122][ T39] 3 locks held by kworker/u8:11/1424: [ 377.809134][ T39] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 377.809188][ T39] #1: ffffc90006db7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 377.809241][ T39] #2: ffff8880636608d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 377.809332][ T39] 3 locks held by kworker/u8:13/1460: [ 377.809344][ T39] #0: ffff8880322e8938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 377.809403][ T39] #1: ffffc90006f57c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 377.809465][ T39] #2: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 377.809614][ T39] 6 locks held by kworker/u8:16/1517: [ 377.809628][ T39] 3 locks held by kworker/u8:17/1519: [ 377.809641][ T39] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 377.809714][ T39] #1: ffffc90007127c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 377.809774][ T39] #2: ffff88805fa208d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 377.809840][ T39] 3 locks held by kworker/u8:19/1526: [ 377.809853][ T39] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 377.809912][ T39] #1: ffffc90007147c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 377.809979][ T39] #2: ffff8880636308d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 377.810048][ T39] 6 locks held by kworker/u8:20/1544: [ 377.810060][ T39] #0: ffff88801aea0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 377.810120][ T39] #1: ffffc900071d7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 377.926765][ T39] #2: ffffffff8f5a3240 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 377.926917][ T39] #3: ffff888063493160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 377.930525][ T39] #4: ffff888038856310 (&devlink->lock_key#7){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 377.930592][ T39] #5: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 377.930685][ T39] 4 locks held by kworker/u9:1/4918: [ 377.930699][ T39] #0: ffff88803a7a1938 ((wq_completion)hci7#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 377.930763][ T39] #1: ffffc9000f687c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 377.930833][ T39] #2: ffff888037e5c0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950 [ 377.930919][ T39] #3: ffffffff8f7360b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950 [ 377.930980][ T39] 1 lock held by dhcpcd/5264: [ 377.930991][ T39] #0: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 377.931066][ T39] 2 locks held by getty/5359: [ 377.931077][ T39] #0: ffff8880359830a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 377.931215][ T39] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 377.931296][ T39] 4 locks held by syz-executor/5590: [ 377.931309][ T39] 4 locks held by kworker/u9:2/5616: [ 377.931320][ T39] #0: ffff88803fa19938 ((wq_completion)hci6#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 377.931378][ T39] #1: ffffc90004f3fc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 377.931431][ T39] #2: ffff8880616940b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950 [ 377.931481][ T39] #3: ffffffff8f7360b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950 [ 377.931533][ T39] 4 locks held by kworker/u9:3/5619: [ 377.931544][ T39] #0: ffff888033385938 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 377.931596][ T39] #1: ffffc90004f6fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 378.077158][ T39] #2: ffff888040b14f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 378.077215][ T39] #3: ffff888040b140b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 378.077276][ T39] 4 locks held by kworker/u9:4/5620: [ 378.077289][ T39] #0: ffff888063c49138 ((wq_completion)hci5#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 378.077363][ T39] #1: ffffc90004f7fc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 378.077417][ T39] #2: ffff88805f5880b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950 [ 378.077475][ T39] #3: ffffffff8f7360b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950 [ 378.077529][ T39] 4 locks held by kworker/u9:5/5625: [ 378.077541][ T39] #0: ffff88803783f938 ((wq_completion)hci10#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 378.077598][ T39] #1: ffffc90004fcfc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 378.077651][ T39] #2: ffff88802b9780b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950 [ 378.077701][ T39] #3: ffffffff8f7360b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950 [ 378.077753][ T39] 4 locks held by kworker/u9:6/5626: [ 378.077764][ T39] #0: ffff88802e068938 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 378.077839][ T39] #1: ffffc90004fdfc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 378.077899][ T39] #2: ffff88803dcecf80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 378.077953][ T39] #3: ffff88803dcec0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_update_scan_sync+0x211/0x4f0 [ 378.078025][ T39] 4 locks held by kworker/u9:7/5627: [ 378.078037][ T39] #0: ffff888030fd8138 ((wq_completion)hci9#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 378.078094][ T39] #1: ffffc90004fefc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 378.078148][ T39] #2: ffff88803dd2c0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950 [ 378.078198][ T39] #3: ffffffff8f7360b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950 [ 378.078252][ T39] 4 locks held by kworker/u9:8/5628: [ 378.078263][ T39] #0: ffff88802e06c938 ((wq_completion)hci8#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 378.078320][ T39] #1: ffffc90004fffc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 378.078374][ T39] #2: ffff88803dcec0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950 [ 378.078425][ T39] #3: ffffffff8f7360b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950 [ 378.078498][ T39] 3 locks held by kworker/0:5/5730: [ 378.078510][ T39] #0: ffff88813ff1a538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 378.209284][ T39] #1: ffffc90005b1fc40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 378.209365][ T39] #2: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xac/0x1110 [ 378.209522][ T39] 3 locks held by kworker/1:6/5763: [ 378.209536][ T39] #0: ffff88813ff1b938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 378.209596][ T39] #1: ffffc90005c8fc40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 378.209654][ T39] #2: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 378.209790][ T39] 1 lock held by syz-executor/8152: [ 378.209803][ T39] #0: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 378.209861][ T39] 2 locks held by syz-executor/8182: [ 378.209874][ T39] #0: ffffffff8ed168a8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 378.209936][ T39] #1: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 378.209992][ T39] 1 lock held by syz-executor/8230: [ 378.210005][ T39] #0: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 378.210067][ T39] 1 lock held by syz-executor/8233: [ 378.210080][ T39] #0: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 378.210144][ T39] 1 lock held by syz-executor/8241: [ 378.210156][ T39] #0: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 378.210220][ T39] 1 lock held by syz-executor/8246: [ 378.210233][ T39] #0: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 378.210297][ T39] 1 lock held by syz-executor/8252: [ 378.210309][ T39] #0: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 378.210372][ T39] 4 locks held by kworker/u9:9/8253: [ 378.210385][ T39] #0: ffff888033b1b138 ((wq_completion)hci11#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 378.210456][ T39] #1: ffffc90006367c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 378.210527][ T39] #2: ffff888060d940b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950 [ 378.210583][ T39] #3: ffffffff8f7360b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950 [ 378.361533][ T39] 1 lock held by syz-executor/8259: [ 378.361550][ T39] #0: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 378.361618][ T39] 5 locks held by kworker/u9:10/8261: [ 378.361630][ T39] #0: ffff8880328d9138 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 378.361687][ T39] #1: ffffc90006327c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 378.361741][ T39] #2: ffff88804bb54f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 378.361791][ T39] #3: ffff88804bb540b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 378.361849][ T39] #4: ffffffff8f7360b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 378.361906][ T39] 1 lock held by syz-executor/8265: [ 378.361918][ T39] #0: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 378.361976][ T39] 4 locks held by kworker/u9:11/8266: [ 378.361988][ T39] #0: ffff888039504138 ((wq_completion)hci13#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 378.362047][ T39] #1: ffffc900061c7c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 378.362101][ T39] #2: ffff88806f87c0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950 [ 378.362153][ T39] #3: ffffffff8f7360b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950 [ 378.362224][ T39] 4 locks held by kworker/u9:12/8268: [ 378.362237][ T39] #0: ffff888064b69938 ((wq_completion)hci12#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 378.362298][ T39] #1: ffffc900061b7c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 378.362355][ T39] #2: ffff8880384e00b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950 [ 378.362417][ T39] #3: ffffffff8f7360b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950 [ 378.362474][ T39] 1 lock held by syz-executor/8273: [ 378.362487][ T39] #0: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 378.362547][ T39] 4 locks held by kworker/u9:13/8277: [ 378.362560][ T39] #0: ffff88802c092938 ((wq_completion)hci14#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 378.362622][ T39] #1: ffffc90006267c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 378.362679][ T39] #2: ffff88803668c0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950 [ 378.362734][ T39] #3: ffffffff8f7360b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950 [ 378.362791][ T39] 1 lock held by syz-executor/8280: [ 378.362804][ T39] #0: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 378.362867][ T39] 4 locks held by kworker/u9:14/8281: [ 378.362879][ T39] #0: ffff88804e16f138 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 378.362942][ T39] #1: ffffc90005f0fc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 378.502801][ T39] #2: ffff88806f8b80b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950 [ 378.502855][ T39] #3: ffffffff8f7360b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950 [ 378.502906][ T39] 1 lock held by syz-executor/8288: [ 378.502918][ T39] #0: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 378.502972][ T39] 5 locks held by kworker/u9:15/8289: [ 378.502983][ T39] #0: ffff888064a6b138 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 378.503032][ T39] #1: ffffc90005ebfc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 378.503083][ T39] #2: ffff88805f50cf80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 378.503130][ T39] #3: ffff88805f50c0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 378.503185][ T39] #4: ffffffff8f7360b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 378.503257][ T39] 4 locks held by kworker/u9:16/8293: [ 378.503268][ T39] #0: ffff88804e3fd938 ((wq_completion)hci17#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 378.503326][ T39] #1: ffffc90005e8fc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 378.503379][ T39] #2: ffff88808bda80b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950 [ 378.503438][ T39] #3: ffffffff8f7360b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950 [ 378.503492][ T39] 1 lock held by syz-executor/8296: [ 378.503504][ T39] #0: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 378.503559][ T39] 4 locks held by kworker/u9:17/8297: [ 378.503571][ T39] #0: ffff88803d86f938 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 378.503629][ T39] #1: ffffc90005e2fc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 378.503684][ T39] #2: ffff88808bd8c0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x96/0x950 [ 378.503735][ T39] #3: ffffffff8f7360b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x53d/0x950 [ 378.503788][ T39] 1 lock held by syz-executor/8300: [ 378.503799][ T39] #0: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 378.503863][ T39] 1 lock held by syz-executor/8310: [ 378.503874][ T39] #0: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 378.503952][ T39] [ 378.503958][ T39] ============================================= [ 378.503958][ T39] [ 378.503984][ T39] NMI backtrace for cpu 0 [ 378.504000][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 378.504029][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 378.504043][ T39] Call Trace: [ 378.504052][ T39] [ 378.504062][ T39] dump_stack_lvl+0xe8/0x150 [ 378.504188][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 378.504241][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 378.504334][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 378.504398][ T39] sys_info+0x135/0x170 [ 378.504442][ T39] watchdog+0xfd7/0x1030 [ 378.504503][ T39] ? watchdog+0x1c7/0x1030 [ 378.504532][ T39] kthread+0x388/0x470 [ 378.504594][ T39] ? __pfx_watchdog+0x10/0x10 [ 378.504614][ T39] ? __pfx_kthread+0x10/0x10 [ 378.504649][ T39] ret_from_fork+0x514/0xb70 [ 378.504733][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 378.504770][ T39] ? __switch_to+0xc89/0x1420 [ 378.504845][ T39] ? __pfx_kthread+0x10/0x10 [ 378.504882][ T39] ret_from_fork_asm+0x1a/0x30 [ 378.504943][ T39] [ 378.504974][ T39] Sending NMI from CPU 0 to CPUs 1: [ 378.505005][ C1] NMI backtrace for cpu 1 [ 378.505020][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 378.505041][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 378.505052][ C1] RIP: 0010:preempt_count_add+0xa6/0x190 [ 378.505122][ C1] Code: ff ff ff 7f 39 f8 75 42 48 8b 5c 24 18 48 89 df e8 ff b0 0d 00 85 c0 74 09 31 db 31 ff e8 f2 b0 0d 00 65 4c 8b 35 32 bd 09 11 <49> 81 c6 e8 15 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c [ 378.505150][ C1] RSP: 0018:ffffc90000a3f988 EFLAGS: 00000046 [ 378.505164][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff99a93500 [ 378.505176][ C1] RDX: 0000000000000000 RSI: ffffffff8bca7760 RDI: 0000000000000000 [ 378.505187][ C1] RBP: ffffc90000a3fab0 R08: ffffffff8faf9737 R09: 1ffffffff1f5f2e6 [ 378.505200][ C1] R10: dffffc0000000000 R11: fffffbfff1f5f2e7 R12: dffffc0000000000 [ 378.505212][ C1] R13: 1ffff92000147f40 R14: ffff88801d2abe00 R15: dffffc0000000000 [ 378.505225][ C1] FS: 0000000000000000(0000) GS:ffff888125d41000(0000) knlGS:0000000000000000 [ 378.505239][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 378.505250][ C1] CR2: 000000110c3427f1 CR3: 000000000dfb0000 CR4: 00000000003526f0 [ 378.505265][ C1] Call Trace: [ 378.505272][ C1] [ 378.505279][ C1] _raw_spin_lock_irqsave+0x24/0x60 [ 378.505300][ C1] rt_mutex_slowunlock+0xbf/0xa20 [ 378.505329][ C1] ? reacquire_held_locks+0x104/0x190 [ 378.505351][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 378.505380][ C1] ? advance_sched+0x9a3/0xc90 [ 378.505435][ C1] rt_spin_unlock+0x10d/0x200 [ 378.505462][ C1] advance_sched+0x9a3/0xc90 [ 378.505491][ C1] ? __pfx_advance_sched+0x10/0x10 [ 378.505514][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 378.505574][ C1] hrtimer_run_softirq+0x18f/0x260 [ 378.505602][ C1] handle_softirqs+0x1d9/0x6c0 [ 378.505648][ C1] run_ktimerd+0x69/0x100 [ 378.505689][ C1] smpboot_thread_fn+0x57c/0xa80 [ 378.505746][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 378.505773][ C1] kthread+0x388/0x470 [ 378.505797][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 378.505819][ C1] ? __pfx_kthread+0x10/0x10 [ 378.505845][ C1] ret_from_fork+0x514/0xb70 [ 378.505872][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 378.505898][ C1] ? __switch_to+0xc89/0x1420 [ 378.505927][ C1] ? __pfx_kthread+0x10/0x10 [ 378.505953][ C1] ret_from_fork_asm+0x1a/0x30 [ 378.505977][ C1] [ 378.622347][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.622426][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.814628][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 378.814651][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 378.814676][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 378.814689][ T39] Call Trace: [ 378.814699][ T39] [ 378.814709][ T39] vpanic+0x56c/0xa60 [ 378.814735][ T39] ? __pfx___schedule+0x10/0x10 [ 378.814762][ T39] ? __pfx_vpanic+0x10/0x10 [ 378.814793][ T39] panic+0xc5/0xd0 [ 378.814813][ T39] ? __pfx_panic+0x10/0x10 [ 378.814833][ T39] ? preempt_schedule_common+0x82/0xd0 [ 378.814858][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 378.814886][ T39] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 378.814925][ T39] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 378.814964][ T39] watchdog+0x1030/0x1030 [ 378.814999][ T39] ? watchdog+0x1c7/0x1030 [ 378.815027][ T39] kthread+0x388/0x470 [ 378.815059][ T39] ? __pfx_watchdog+0x10/0x10 [ 378.815077][ T39] ? __pfx_kthread+0x10/0x10 [ 378.815112][ T39] ret_from_fork+0x514/0xb70 [ 378.815148][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 378.815182][ T39] ? __switch_to+0xc89/0x1420 [ 378.815214][ T39] ? __pfx_kthread+0x10/0x10 [ 378.815248][ T39] ret_from_fork_asm+0x1a/0x30 [ 378.815286][ T39] [ 378.815889][ T39] Kernel Offset: disabled