last executing test programs: 3.169239409s ago: executing program 3 (id=806): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x605, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x1}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x605, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, 0x1}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newneigh={0x30, 0x1c, 0x605, 0x0, 0x0, {0x2, 0x0, 0x0, 0x1, 0x80}, [@NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x1000002}, @NDA_LLADDR={0xa, 0x2, @local}]}, 0x30}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14}, [], {0x14}}, 0x28}}, 0x0) syz_emit_ethernet(0x34, &(0x7f00000003c0)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0) 2.99868154s ago: executing program 3 (id=809): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10) r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='proto\x00', &(0x7f0000000300)='udp\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='mountproto\x00', &(0x7f0000000380)='udp\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) recvfrom(r0, &(0x7f0000000400)=""/100, 0x64, 0x0, &(0x7f0000000500)=@in={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000700)="00000000000000010000000000000000000000000000000000000801", 0x1c, 0x0, &(0x7f0000000500), 0x10) 1.975354417s ago: executing program 3 (id=826): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000040), 0x1) bind(r2, &(0x7f0000000080)=@in={0x2, 0x270f, @empty}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="000008004500005c000000004084c13c7f0000017f00000104d2270f00000000000000000100003c000030390001a000000a000a000000018002000c010203040506070880040008000100008008000680020000"], 0x60) 1.975125278s ago: executing program 2 (id=827): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, 0x0) ioctl$sock_ifreq(r0, 0x891c, 0x0) ioctl$sock_ifreq(r0, 0x89a2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) write(r1, &(0x7f0000000800)="0c01000013000101010000000000000007000000040000000000000000000000ec001a80e80004802400018008000100010000000800020001000000080003000100000008000400040000002800038008000100010000000a0002000011223344550000080003000300000008000400010000005000048008000100010000000800020001000000080003000100000034000400aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa4800088008000100010000000a00020000112233445500000800030001000000080004000a0000", 0xeb) 1.890436701s ago: executing program 1 (id=828): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x14c, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x5c, 0x1, {{'hmac(sha1)\x00'}, 0xa0, "000102030405060708090a0b0c0d0e0f10111213"}}]}, 0x14c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000600)="1234567890", 0xa, 0x0, &(0x7f0000000700)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 1.88911588s ago: executing program 2 (id=829): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000000), 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newsa={0x150, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa}, {@in6=@loopback, 0x4d2, 0x33}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x60, 0x14, {{'hmac(sha1)\x00'}, 0xa0, 0xa0, '01234567890123456789'}}]}, 0x150}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newpolicy={0xfc, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d2, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000100), 0x8) sendto$inet6(r1, &(0x7f0000000300)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 1.70343166s ago: executing program 1 (id=831): r0 = socket$inet(0x2, 0x3, 0xff) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x9, 0x3, 0x208, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) 1.642254814s ago: executing program 2 (id=833): r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syzkaller0\x00', &(0x7f00000002c0)=@ethtool_eeprom={0xb, 0x0, 0x0, 0x10}}) 1.612348983s ago: executing program 3 (id=834): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r0, 0x5) r1 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) sendto$rxrpc(r1, &(0x7f0000000250)='hello', 0x5, 0x0, 0x0, 0x0) sendto$rxrpc(r1, &(0x7f0000000250)='bye', 0x3, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x3}, 0x0) 1.50759086s ago: executing program 1 (id=835): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e20, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000001000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x2, &(0x7f0000000340)=@raw=[@generic={0xb7, 0x0, 0x0, 0x0, 0x1}, @generic={0x95}], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={@map=r1, r2, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180)='\x00\x00\x00\x00', &(0x7f00000000c0)=@udp=r0}, 0x20) sendto$inet(r0, &(0x7f0000000700)="11223344", 0x4, 0x0, &(0x7f0000000800)={0x2, 0x4e20, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)=""/100, 0x64}], 0x1}, 0x0) 1.414159429s ago: executing program 4 (id=837): r0 = socket$inet_smc(0x2b, 0x1, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) splice(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.378273901s ago: executing program 2 (id=838): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) 1.315273422s ago: executing program 4 (id=840): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000020000000000000018001a0014002d000800010001000000080002000a000000"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001400010000000000000000002d00000002000000050002000a000000"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000001800010000000000000000002d0000000000000001000000050001000a0000000c000f8008000200f40100000800040002000000"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001a00010300000000000000002d000000"], 0x14}}, 0x0) 1.19821778s ago: executing program 4 (id=842): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newsa={0x0, 0x10, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {@in6=@loopback, 0x1234, 0x32}, @in6=@loopback, {}, {}, {}, 0x1234, 0x0, 0xa, 0x0, 0x0, 0x32}, [@replay_esn_val={0x0, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x10, [0x0]}}, @algo_auth_trunc={0x0, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x80, "000102030405060708090a0b0c0d0e0f"}}]}, 0x16c}}, 0x0) 1.151919797s ago: executing program 2 (id=843): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800020000000000000000004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000080000005000500000001c001000811223344"], 0x4a) 1.068576929s ago: executing program 4 (id=845): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = accept4$inet6(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000200)='hello', 0x5) write(r2, &(0x7f0000000240)='world', 0x5) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @loopback, @loopback, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x5, 0x18, 0x1000}}}}}}}, 0x0) 939.432135ms ago: executing program 0 (id=847): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0), 0x3a0) 890.046289ms ago: executing program 2 (id=848): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000300)={r1}, &(0x7f0000000340)=0x8) 811.274131ms ago: executing program 0 (id=849): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x30, 0x30, 0x405, 0x0, 0x0, {}, [{0x14, 0x1, [@m_gact={0x0, 0x1, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x0, 0x1}]}}}]}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@gettaction={0x30, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'gact\x00'}}]}]}, 0x30}}, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/200, 0x200}], 0x1}, 0x0) 777.303109ms ago: executing program 0 (id=850): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001300)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001500)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001d00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001f00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002100)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002300)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 720.622954ms ago: executing program 3 (id=851): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, 0x0) ioctl$sock_ifreq(r0, 0x891c, 0x0) ioctl$sock_ifreq(r0, 0x89a2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) write(r1, &(0x7f0000000800)="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", 0xfc) 659.534016ms ago: executing program 0 (id=852): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)='hello', 0x5}], 0x1, &(0x7f0000000500)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000700)={0x2, 0x4321, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000800)="00000000000000000000000100000000000000010402000001000000000000000000000100000000000000000100", 0x2a, 0x0, &(0x7f0000000900)={0x2, 0x1234, @loopback}, 0x10) 635.897892ms ago: executing program 3 (id=853): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='hello\x00', 0x6}], 0x1, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) recvfrom(r0, &(0x7f0000000300)=""/256, 0x100, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r3, &(0x7f0000000300), 0x20) read(r2, &(0x7f0000000700), 0x20) write(r3, &(0x7f0000000500)="0200", 0x2) read(r2, &(0x7f0000000314), 0x2) write(r3, &(0x7f0000000600)="00020000000000010000000000000001090101", 0x13) read(r2, &(0x7f000000031c), 0x13) sendto$inet(r0, &(0x7f0000000300), 0x2f, 0x0, &(0x7f0000000080)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000800)={0x0, 0x5000000}, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='world\x00', 0x6}], 0x1, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/256, 0x100}], 0x1}, 0x0) getsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000a00), &(0x7f0000000a20)=0x4) 543.991797ms ago: executing program 1 (id=854): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x0, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x0, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x90, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}]}]}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xc0}}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) 509.84062ms ago: executing program 0 (id=855): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syz_tun\x00', 0x1002}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'syz_tun\x00', {0x2, 0x0, @rand_addr=0xa000002}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syz_tun\x00', 0x1}) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffaa55aa55aa5508004500003c00012000400100000a0000010a0000020800f7c50001000100"/72], 0x4a) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaa55aa55aa5508004500003c00022000400100000a0000030a0000020800f7c50001000100"/72], 0x4a) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="ffffffffffffaa55aa55aa5508004500003c00032000400100000a0000040a0000020800f7c50001000100"/72], 0x4a) 442.879266ms ago: executing program 0 (id=856): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r0, 0x5) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000250)='hello', 0x5}], 0x1, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000250)='abort', 0x5}], 0x1, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) shutdown(r0, 0x2) close(r0) nanosleep(&(0x7f0000000400)={0x2}, 0x0) 140.061354ms ago: executing program 4 (id=857): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0xc0, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x90, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3e8}]}]}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0xffffffffc4653600}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xc0}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000400)={0x11, 0x0, r2, 0x0}, 0x14) write(r3, &(0x7f0000000500)="00000000000000000000000008004500001c000000004011000001010101010101020001000100080000", 0x2a) 138.930704ms ago: executing program 1 (id=867): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000200)={{0x14, 0x10, 0x0, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x18, 0x0, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x0, 0x0, 0x0, {0x2}}}, 0xe4}}, 0x0) 2.448187ms ago: executing program 4 (id=858): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x2382, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x6, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r2}, @generic={0xb7, 0x1}, @generic={0xb7, 0x3}, @call={0x85, 0x0, 0x0, 0x33}, @exit], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r2, r3, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r2, &(0x7f0000000240)='\x00\x00\x00\x00', &(0x7f0000000280)=@udp=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000340)="01000000", &(0x7f0000000380)=@tcp=r1}, 0x20) write(r1, &(0x7f0000000700)='hello world\x00', 0xc) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)=""/128, 0x80}], 0x1}, 0x0) 0s ago: executing program 1 (id=859): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x501, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x48, 0x2, {{0x0, [], 0x1, [0x1]}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x501, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {}, {0xff, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x0, 0xfffffffd, 0x0, 0x5, 0x5, 0x1, 0x3, 0x3}}}}]}, 0x58}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.75' (ED25519) to the list of known hosts. [ 115.921895][ T5611] cgroup: Unknown subsys name 'net' [ 116.014483][ T5611] cgroup: Unknown subsys name 'cpuset' [ 116.027422][ T5611] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 117.922428][ T5611] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 118.873529][ T808] cfg80211: failed to load regulatory.db [ 120.569363][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 120.579994][ T5635] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 120.592958][ T5635] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 120.606106][ T5635] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 120.621771][ T5635] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 120.626478][ T5636] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 120.638933][ T5635] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 120.650682][ T5637] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 120.654784][ T5635] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 120.667855][ T5636] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 120.678291][ T5636] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 120.678350][ T5635] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 120.678513][ T5637] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 120.696974][ T5635] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 120.712740][ T5635] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 120.725058][ T5637] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 120.735071][ T5637] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 120.736019][ T5636] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 120.749899][ T4940] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 120.771394][ T5636] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 120.793469][ T5635] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 120.824434][ T5636] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 120.836774][ T5635] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 120.848621][ T5635] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 120.848772][ T5636] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 122.043729][ T5643] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.054552][ T5643] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.063703][ T5643] bridge_slave_0: entered allmulticast mode [ 122.074766][ T5643] bridge_slave_0: entered promiscuous mode [ 122.132907][ T5643] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.140834][ T5643] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.148858][ T5643] bridge_slave_1: entered allmulticast mode [ 122.158915][ T5643] bridge_slave_1: entered promiscuous mode [ 122.276670][ T5645] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.284702][ T5645] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.293659][ T5645] bridge_slave_0: entered allmulticast mode [ 122.302810][ T5645] bridge_slave_0: entered promiscuous mode [ 122.340041][ T5643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.372566][ T5645] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.382743][ T5645] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.390838][ T5645] bridge_slave_1: entered allmulticast mode [ 122.399620][ T5645] bridge_slave_1: entered promiscuous mode [ 122.414308][ T5642] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.422768][ T5642] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.432121][ T5642] bridge_slave_0: entered allmulticast mode [ 122.440229][ T5642] bridge_slave_0: entered promiscuous mode [ 122.451293][ T5643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.505968][ T5642] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.514020][ T5642] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.521835][ T5642] bridge_slave_1: entered allmulticast mode [ 122.530128][ T5642] bridge_slave_1: entered promiscuous mode [ 122.561706][ T5644] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.570192][ T5644] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.578184][ T5644] bridge_slave_0: entered allmulticast mode [ 122.586577][ T5644] bridge_slave_0: entered promiscuous mode [ 122.620045][ T5645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.645049][ T5643] team0: Port device team_slave_0 added [ 122.652688][ T5644] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.661907][ T5644] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.670174][ T5644] bridge_slave_1: entered allmulticast mode [ 122.677569][ T5644] bridge_slave_1: entered promiscuous mode [ 122.703536][ T5645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.728663][ T5642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.741212][ T5643] team0: Port device team_slave_1 added [ 122.792280][ T5642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.831494][ T5646] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.839453][ T5646] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.847242][ T5646] bridge_slave_0: entered allmulticast mode [ 122.855716][ T5646] bridge_slave_0: entered promiscuous mode [ 122.867078][ T5645] team0: Port device team_slave_0 added [ 122.874099][ T50] Bluetooth: hci1: command tx timeout [ 122.874106][ T5625] Bluetooth: hci2: command tx timeout [ 122.920259][ T5644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.930459][ T5646] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.938408][ T5646] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.946090][ T5646] bridge_slave_1: entered allmulticast mode [ 122.953712][ T5625] Bluetooth: hci3: command tx timeout [ 122.953846][ T5636] Bluetooth: hci0: command tx timeout [ 122.966635][ T5646] bridge_slave_1: entered promiscuous mode [ 122.969696][ T50] Bluetooth: hci4: command tx timeout [ 122.982680][ T5645] team0: Port device team_slave_1 added [ 123.000605][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.008177][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.036434][ T5643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.052264][ T5644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.099305][ T5642] team0: Port device team_slave_0 added [ 123.106104][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.114003][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.142261][ T5643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.191618][ T5642] team0: Port device team_slave_1 added [ 123.210524][ T5644] team0: Port device team_slave_0 added [ 123.219462][ T5646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.230445][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.238455][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.267260][ T5645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.306804][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.315162][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.345121][ T5642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.361612][ T5644] team0: Port device team_slave_1 added [ 123.370176][ T5646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.381572][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.389890][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.418119][ T5645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.439404][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.447217][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.475264][ T5642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.545217][ T5643] hsr_slave_0: entered promiscuous mode [ 123.552674][ T5643] hsr_slave_1: entered promiscuous mode [ 123.624214][ T5645] hsr_slave_0: entered promiscuous mode [ 123.632005][ T5645] hsr_slave_1: entered promiscuous mode [ 123.639729][ T5645] debugfs: 'hsr0' already exists in 'hsr' [ 123.645859][ T5645] Cannot create hsr debugfs directory [ 123.653486][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.661486][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.690672][ T5644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.706221][ T5646] team0: Port device team_slave_0 added [ 123.748695][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.756213][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.784237][ T5644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.799895][ T5646] team0: Port device team_slave_1 added [ 123.922194][ T5642] hsr_slave_0: entered promiscuous mode [ 123.929145][ T5642] hsr_slave_1: entered promiscuous mode [ 123.936008][ T5642] debugfs: 'hsr0' already exists in 'hsr' [ 123.942011][ T5642] Cannot create hsr debugfs directory [ 123.976163][ T5646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.983745][ T5646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.013447][ T5646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.073900][ T5646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.081320][ T5646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.107973][ T5646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.133290][ T5644] hsr_slave_0: entered promiscuous mode [ 124.140744][ T5644] hsr_slave_1: entered promiscuous mode [ 124.148145][ T5644] debugfs: 'hsr0' already exists in 'hsr' [ 124.154801][ T5644] Cannot create hsr debugfs directory [ 124.400235][ T5646] hsr_slave_0: entered promiscuous mode [ 124.407365][ T5646] hsr_slave_1: entered promiscuous mode [ 124.414507][ T5646] debugfs: 'hsr0' already exists in 'hsr' [ 124.420955][ T5646] Cannot create hsr debugfs directory [ 124.697647][ T5643] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 124.713419][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 124.746015][ T5643] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 124.761501][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 124.771258][ T5643] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 124.784807][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 124.821460][ T5643] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 124.832046][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 124.935502][ T5642] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 124.948452][ T50] Bluetooth: hci2: command tx timeout [ 124.948608][ T5636] Bluetooth: hci1: command tx timeout [ 124.967128][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 124.978888][ T5642] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 124.990908][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 125.001091][ T5642] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 125.014375][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 125.025079][ T5642] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 125.034305][ T5636] Bluetooth: hci0: command tx timeout [ 125.041444][ T50] Bluetooth: hci4: command tx timeout [ 125.048627][ T5625] Bluetooth: hci3: command tx timeout [ 125.059878][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 125.178480][ T5644] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 125.191521][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 125.203425][ T5644] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 125.215314][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 125.224963][ T5644] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 125.236874][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 125.245867][ T5644] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 125.260232][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 125.394164][ T5645] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 125.405997][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 125.431354][ T5645] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 125.442195][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 125.468697][ T5645] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 125.481287][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 125.491758][ T5645] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 125.509319][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 125.611008][ T5643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.651046][ T5642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.666855][ T5646] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 125.681081][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 125.691348][ T5646] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 125.702072][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 125.711196][ T5646] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 125.722565][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 125.744462][ T5646] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 125.757495][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 125.818970][ T5643] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.836424][ T5642] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.883126][ T3286] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.893935][ T3286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.906641][ T3286] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.915012][ T3286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.931746][ T3286] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.941268][ T3286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.980027][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.987572][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.042925][ T5644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.112945][ T5644] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.173255][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.183539][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.249979][ T1052] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.259412][ T1052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.289271][ T5645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.387688][ T5642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.421618][ T5646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.439534][ T5645] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.471270][ T1052] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.479726][ T1052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.505269][ T5646] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.526368][ T1052] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.535129][ T1052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.547597][ T5643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.570448][ T1052] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.578590][ T1052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.620434][ T1052] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.628303][ T1052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.741164][ T5642] veth0_vlan: entered promiscuous mode [ 126.800978][ T5644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.821854][ T5642] veth1_vlan: entered promiscuous mode [ 126.843142][ T5643] veth0_vlan: entered promiscuous mode [ 126.911753][ T5643] veth1_vlan: entered promiscuous mode [ 126.955487][ T5645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.024689][ T5642] veth0_macvtap: entered promiscuous mode [ 127.041939][ T5625] Bluetooth: hci1: command tx timeout [ 127.041969][ T50] Bluetooth: hci2: command tx timeout [ 127.090934][ T5646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.109282][ T50] Bluetooth: hci4: command tx timeout [ 127.109329][ T5625] Bluetooth: hci0: command tx timeout [ 127.122142][ T50] Bluetooth: hci3: command tx timeout [ 127.131819][ T5644] veth0_vlan: entered promiscuous mode [ 127.150919][ T5642] veth1_macvtap: entered promiscuous mode [ 127.184937][ T5643] veth0_macvtap: entered promiscuous mode [ 127.205923][ T5644] veth1_vlan: entered promiscuous mode [ 127.218152][ T5643] veth1_macvtap: entered promiscuous mode [ 127.250361][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.284209][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.335677][ T139] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.353001][ T139] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.371157][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.390575][ T139] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.412972][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.424467][ T5645] veth0_vlan: entered promiscuous mode [ 127.439251][ T139] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.469496][ T68] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.481944][ T68] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.492296][ T68] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.509238][ T5645] veth1_vlan: entered promiscuous mode [ 127.538363][ T68] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.566319][ T5644] veth0_macvtap: entered promiscuous mode [ 127.576575][ T5646] veth0_vlan: entered promiscuous mode [ 127.606712][ T5644] veth1_macvtap: entered promiscuous mode [ 127.667587][ T5646] veth1_vlan: entered promiscuous mode [ 127.785510][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.815264][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.819621][ T5645] veth0_macvtap: entered promiscuous mode [ 127.832678][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.864512][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.884633][ T5645] veth1_macvtap: entered promiscuous mode [ 127.932687][ T68] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.942825][ T68] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.965525][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.969342][ T68] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.974135][ T3286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.974649][ T3286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.002557][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.012246][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.052159][ T5646] veth0_macvtap: entered promiscuous mode [ 128.117041][ T5646] veth1_macvtap: entered promiscuous mode [ 128.136122][ T3286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.154060][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.155934][ T5643] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 128.183353][ T3286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.195010][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.211365][ T5643] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 128.242209][ T5643] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 128.268896][ T5643] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 128.293416][ T3286] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.306599][ T3286] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.320827][ T5643] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 128.360649][ T3286] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.399088][ T68] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.443982][ T5646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.525545][ T5646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.553089][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.574473][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.619082][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.664385][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.694566][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.739206][ T5715] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 128.746506][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.765608][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.797086][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.949744][ T5715] usb 1-1: not running at top speed; connect to a high speed hub [ 128.970533][ T5715] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 128.989992][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.999398][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.003037][ T5715] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 129.048280][ T5715] usb 1-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 129.065350][ T5715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.075660][ T5715] usb 1-1: Product: syz [ 129.081257][ T5715] usb 1-1: Manufacturer: syz [ 129.086435][ T5715] usb 1-1: SerialNumber: syz [ 129.099964][ T5729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 129.112692][ T5625] Bluetooth: hci1: command tx timeout [ 129.118399][ T50] Bluetooth: hci2: command tx timeout [ 129.130780][ T5720] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 129.145084][ T5720] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 129.188655][ T5625] Bluetooth: hci0: command tx timeout [ 129.199186][ T5625] Bluetooth: hci3: command tx timeout [ 129.199201][ T50] Bluetooth: hci4: command tx timeout [ 129.336197][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.353055][ T3286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.391856][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.410296][ T3286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.453906][ T5730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 129.469403][ T5735] netlink: 'syz.0.1': attribute type 5 has an invalid length. [ 129.502914][ T5735] netlink: 'syz.0.1': attribute type 5 has an invalid length. [ 129.545077][ T5735] netlink: 'syz.0.1': attribute type 5 has an invalid length. [ 129.565447][ T5735] netlink: 'syz.0.1': attribute type 5 has an invalid length. [ 129.580578][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.603145][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.616402][ T5735] netlink: 'syz.0.1': attribute type 5 has an invalid length. [ 129.676372][ T5735] netlink: 'syz.0.1': attribute type 5 has an invalid length. [ 129.740680][ T5739] netlink: 'syz.0.1': attribute type 5 has an invalid length. [ 129.933704][ T5715] ax88179_178a 1-1:1.0: probe with driver ax88179_178a failed with error -71 [ 130.087488][ T5715] usb 1-1: USB disconnect, device number 2 [ 130.157639][ T5747] tipc: Started in network mode [ 130.176087][ T5748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 130.193815][ T5747] tipc: Node identity ac1414aa, cluster identity 4711 [ 130.227478][ T5747] tipc: New replicast peer: 172.20.20.170 [ 130.241563][ T5748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 130.257001][ T5747] tipc: Enabled bearer , priority 10 [ 130.360137][ T5753] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13'. [ 130.412589][ T5753] netlink: 268 bytes leftover after parsing attributes in process `syz.1.13'. [ 130.720262][ T5761] bridge0: port 3(syz_tun) entered blocking state [ 130.736187][ T5761] bridge0: port 3(syz_tun) entered disabled state [ 130.771998][ T5761] syz_tun: entered allmulticast mode [ 130.816142][ T5761] syz_tun: entered promiscuous mode [ 130.832056][ T5758] fuse: Unknown parameter '0x0000000000000007' [ 130.866611][ T5761] bridge0: port 3(syz_tun) entered blocking state [ 130.885851][ T5761] bridge0: port 3(syz_tun) entered listening state [ 131.292065][ T1035] tipc: Node number set to 2886997162 [ 131.329167][ T5779] Zero length message leads to an empty skb [ 131.337949][ T5780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21'. [ 132.069341][ T5795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29'. [ 132.122202][ T5795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29'. [ 132.814781][ T5804] bridge0: port 3(gretap0) entered blocking state [ 132.886594][ T5804] bridge0: port 3(gretap0) entered disabled state [ 132.920241][ T5804] gretap0: entered allmulticast mode [ 133.011882][ T5804] gretap0: entered promiscuous mode [ 133.021485][ T5804] bridge0: port 3(gretap0) entered blocking state [ 133.030095][ T5804] bridge0: port 3(gretap0) entered forwarding state [ 133.055596][ T5819] netlink: 20 bytes leftover after parsing attributes in process `syz.1.33'. [ 133.146693][ T5803] netlink: 'syz.2.31': attribute type 4 has an invalid length. [ 133.831384][ T5840] tipc: Started in network mode [ 133.840644][ T5840] tipc: Node identity 1000001, cluster identity 4711 [ 133.850295][ T5840] tipc: Node number set to 16777217 [ 133.864367][ T5840] tipc: Enabled bearer , priority 1 [ 133.897382][ T5837] tipc: Resetting bearer [ 133.927686][ T5837] tipc: Disabling bearer [ 133.952975][ T5846] syz.1.45 uses obsolete (PF_INET,SOCK_PACKET) [ 134.847535][ T5879] __nla_validate_parse: 3 callbacks suppressed [ 134.847571][ T5879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.60'. [ 134.874499][ T5879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.60'. [ 135.222891][ T5897] netlink: 20 bytes leftover after parsing attributes in process `syz.2.66'. [ 135.240303][ T5897] netlink: 16 bytes leftover after parsing attributes in process `syz.2.66'. [ 135.251903][ T5897] netlink: 132 bytes leftover after parsing attributes in process `syz.2.66'. [ 135.273920][ T5900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.67'. [ 135.294246][ T5897] netlink: 16 bytes leftover after parsing attributes in process `syz.2.66'. [ 135.349798][ T5897] netlink: 132 bytes leftover after parsing attributes in process `syz.2.66'. [ 135.411316][ T5904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.68'. [ 135.456466][ T5904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.68'. [ 135.526427][ T5902] fuse: Unknown parameter '0x0000000000000007' [ 135.811798][ T5917] syz_tun: entered allmulticast mode [ 135.918671][ T5916] syz_tun: left allmulticast mode [ 137.978420][ T24] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 138.210555][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 138.239491][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 138.263485][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 138.304564][ T24] usb 2-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 138.353215][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.365010][ T24] usb 2-1: Product: syz [ 138.372711][ T24] usb 2-1: Manufacturer: syz [ 138.379728][ T24] usb 2-1: SerialNumber: syz [ 138.398130][ T5950] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 138.417169][ T5950] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 138.726334][ T5979] netlink: 'syz.1.80': attribute type 5 has an invalid length. [ 138.769501][ T5979] netlink: 'syz.1.80': attribute type 5 has an invalid length. [ 138.799448][ T5979] netlink: 'syz.1.80': attribute type 5 has an invalid length. [ 138.858878][ T5984] syz_tun: entered allmulticast mode [ 138.872969][ T5985] netlink: 'syz.1.80': attribute type 5 has an invalid length. [ 138.894604][ T5979] netlink: 'syz.1.80': attribute type 5 has an invalid length. [ 138.960432][ T5983] syz_tun: left allmulticast mode [ 138.985845][ T5985] netlink: 'syz.1.80': attribute type 5 has an invalid length. [ 139.042086][ T5979] netlink: 'syz.1.80': attribute type 5 has an invalid length. [ 139.191805][ T24] ax88179_178a 2-1:1.0: probe with driver ax88179_178a failed with error -71 [ 139.269188][ T24] usb 2-1: USB disconnect, device number 2 [ 139.285190][ T5997] bridge0: port 3(gretap0) entered blocking state [ 139.325467][ T5997] bridge0: port 3(gretap0) entered disabled state [ 139.356280][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.366109][ T5997] gretap0: entered allmulticast mode [ 139.379934][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.439373][ T5997] gretap0: entered promiscuous mode [ 139.462284][ T5997] bridge0: port 3(gretap0) entered blocking state [ 139.469979][ T5997] bridge0: port 3(gretap0) entered forwarding state [ 139.561201][ T5997] netlink: 'syz.4.103': attribute type 4 has an invalid length. [ 139.939945][ T6022] tipc: Started in network mode [ 139.947882][ T6022] tipc: Node identity 0010000000000000002, cluster identity 1 [ 140.108440][ T6024] syz_tun: entered allmulticast mode [ 140.140210][ T6023] syz_tun: left allmulticast mode [ 140.166636][ T6030] __nla_validate_parse: 15 callbacks suppressed [ 140.166659][ T6030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.116'. [ 140.188725][ T6027] syz_tun: entered allmulticast mode [ 140.236321][ T6025] syz_tun: left allmulticast mode [ 140.504006][ T6044] syz_tun: entered allmulticast mode [ 140.520715][ T6045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.120'. [ 140.546930][ T6041] syz_tun: left allmulticast mode [ 140.563163][ T6045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.120'. [ 140.925759][ T6061] syz_tun: entered allmulticast mode [ 140.966436][ T6052] syz_tun: left allmulticast mode [ 141.156027][ T6071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.130'. [ 141.181236][ T6068] syz_tun: entered allmulticast mode [ 141.221453][ T6075] netlink: 20 bytes leftover after parsing attributes in process `syz.4.134'. [ 141.235686][ T6066] syz_tun: left allmulticast mode [ 141.246742][ T6075] netlink: 268 bytes leftover after parsing attributes in process `syz.4.134'. [ 141.872881][ T6098] syz_tun: entered allmulticast mode [ 141.927046][ T6095] syz_tun: left allmulticast mode [ 142.156488][ T6106] netlink: 20 bytes leftover after parsing attributes in process `syz.3.150'. [ 142.227197][ T6106] netlink: 268 bytes leftover after parsing attributes in process `syz.3.150'. [ 142.665943][ T6126] syz_tun: entered allmulticast mode [ 142.727532][ T6123] syz_tun: left allmulticast mode [ 142.895271][ T6131] syz_tun: entered allmulticast mode [ 142.931287][ T6133] netlink: 44 bytes leftover after parsing attributes in process `syz.1.163'. [ 142.947112][ T6130] syz_tun: left allmulticast mode [ 142.997136][ T6137] bridge0: port 4(erspan0) entered blocking state [ 143.028036][ T6137] bridge0: port 4(erspan0) entered disabled state [ 143.071021][ T6137] erspan0: entered allmulticast mode [ 143.168241][ T6137] erspan0: entered promiscuous mode [ 143.217457][ T6149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.167'. [ 143.230824][ T6137] bridge0: port 4(erspan0) entered blocking state [ 143.239505][ T6137] bridge0: port 4(erspan0) entered forwarding state [ 143.353572][ T6137] netlink: 'syz.4.164': attribute type 4 has an invalid length. [ 143.809920][ T6169] syz_tun: entered allmulticast mode [ 143.840304][ T6168] syz_tun: left allmulticast mode [ 144.209162][ T6189] netlink: 'syz.4.183': attribute type 4 has an invalid length. [ 144.561898][ T6199] syz_tun: entered allmulticast mode [ 144.572529][ T6198] syz_tun: left allmulticast mode [ 144.703858][ T6206] syz_tun: entered allmulticast mode [ 144.723152][ T6209] syz_tun: entered allmulticast mode [ 144.734638][ T6205] syz_tun: left allmulticast mode [ 144.745255][ T6208] syz_tun: left allmulticast mode [ 144.974674][ T6215] tipc: Enabling of bearer rejected, failed to enable media [ 145.037095][ T6219] bridge0: port 3(gretap0) entered blocking state [ 145.062860][ T6219] bridge0: port 3(gretap0) entered disabled state [ 145.090382][ T6219] gretap0: entered allmulticast mode [ 145.113648][ T6219] gretap0: entered promiscuous mode [ 145.139260][ T6219] bridge0: port 3(gretap0) entered blocking state [ 145.148882][ T6219] bridge0: port 3(gretap0) entered forwarding state [ 145.199514][ T6227] __nla_validate_parse: 7 callbacks suppressed [ 145.199537][ T6227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.198'. [ 145.231704][ T6227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.198'. [ 145.352455][ T6232] syz_tun: entered allmulticast mode [ 145.405136][ T6231] syz_tun: left allmulticast mode [ 145.965976][ T6256] netlink: 20 bytes leftover after parsing attributes in process `syz.4.206'. [ 146.024510][ T6256] netlink: 144 bytes leftover after parsing attributes in process `syz.4.206'. [ 146.136873][ T6261] netlink: 144 bytes leftover after parsing attributes in process `syz.4.206'. [ 146.294617][ T6265] bridge0: port 3(gretap0) entered blocking state [ 146.327499][ T6265] bridge0: port 3(gretap0) entered disabled state [ 146.401202][ C1] bridge0: port 3(syz_tun) entered learning state [ 146.435588][ T6265] gretap0: entered allmulticast mode [ 146.491917][ T6265] gretap0: entered promiscuous mode [ 146.534273][ T6265] bridge0: port 3(gretap0) entered blocking state [ 146.544692][ T6265] bridge0: port 3(gretap0) entered forwarding state [ 146.586340][ T6275] syz_tun: entered allmulticast mode [ 146.649782][ T6269] syz_tun: left allmulticast mode [ 146.674927][ T6284] netlink: 16 bytes leftover after parsing attributes in process `syz.4.213'. [ 146.709646][ T6284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.213'. [ 146.986299][ T6297] syz_tun: entered allmulticast mode [ 147.012305][ T6294] syz_tun: entered allmulticast mode [ 147.027197][ T6290] syz_tun: left allmulticast mode [ 147.055371][ T6292] syz_tun: left allmulticast mode [ 147.371689][ T6308] bridge0: port 4(erspan0) entered blocking state [ 147.404830][ T6308] bridge0: port 4(erspan0) entered disabled state [ 147.423493][ T6308] erspan0: entered allmulticast mode [ 147.467250][ T6308] erspan0: entered promiscuous mode [ 147.481177][ T6308] bridge0: port 4(erspan0) entered blocking state [ 147.488819][ T6308] bridge0: port 4(erspan0) entered forwarding state [ 147.508538][ T6311] syz_tun: entered allmulticast mode [ 147.537906][ T6310] syz_tun: left allmulticast mode [ 147.830174][ T6322] netlink: 72 bytes leftover after parsing attributes in process `syz.0.231'. [ 147.844333][ T6323] syz_tun: entered allmulticast mode [ 147.872402][ T6321] syz_tun: left allmulticast mode [ 148.025938][ T6331] syz_tun: entered allmulticast mode [ 148.042367][ T6330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.234'. [ 148.069341][ T6330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.234'. [ 148.138737][ T6329] syz_tun: left allmulticast mode [ 148.381767][ T6342] bridge0: port 4(erspan0) entered blocking state [ 148.410914][ T6342] bridge0: port 4(erspan0) entered disabled state [ 148.441231][ T6342] erspan0: entered allmulticast mode [ 148.486146][ T6342] erspan0: entered promiscuous mode [ 148.517815][ T6342] bridge0: port 4(erspan0) entered blocking state [ 148.533349][ T6342] bridge0: port 4(erspan0) entered forwarding state [ 148.584115][ T6347] syz_tun: entered allmulticast mode [ 148.603374][ T6346] netlink: 'syz.0.239': attribute type 4 has an invalid length. [ 148.623084][ T6345] syz_tun: left allmulticast mode [ 148.889521][ T6359] syz_tun: entered allmulticast mode [ 148.920269][ T6355] syz_tun: left allmulticast mode [ 149.474432][ T6378] syz_tun: entered allmulticast mode [ 149.519560][ T6376] syz_tun: left allmulticast mode [ 149.559794][ T6380] netlink: 'syz.4.257': attribute type 4 has an invalid length. [ 149.772705][ T6393] syz_tun: entered allmulticast mode [ 149.791616][ T6392] syz_tun: left allmulticast mode [ 150.128149][ T6399] tipc: Enabled bearer , priority 0 [ 150.323293][ T6397] tipc: Disabling bearer [ 150.791935][ T6417] bridge0: port 4(erspan0) entered blocking state [ 150.852473][ T6417] bridge0: port 4(erspan0) entered disabled state [ 150.887940][ T6417] erspan0: entered allmulticast mode [ 150.909680][ T6417] erspan0: entered promiscuous mode [ 150.920903][ T6417] bridge0: port 4(erspan0) entered blocking state [ 150.934082][ T6417] bridge0: port 4(erspan0) entered listening state [ 151.218503][ T6439] __nla_validate_parse: 2 callbacks suppressed [ 151.219885][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.278'. [ 151.411603][ T6445] syz_tun: entered allmulticast mode [ 151.423477][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.280'. [ 151.483963][ T6444] syz_tun: left allmulticast mode [ 151.584293][ T6447] syz_tun: entered allmulticast mode [ 151.603331][ T6449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.282'. [ 151.607660][ T6446] syz_tun: left allmulticast mode [ 151.923867][ T6460] bridge0: port 4(gretap0) entered blocking state [ 151.986113][ T6460] bridge0: port 4(gretap0) entered disabled state [ 152.020937][ T6460] gretap0: entered allmulticast mode [ 152.070235][ T6460] gretap0: entered promiscuous mode [ 152.099683][ T6460] bridge0: port 4(gretap0) entered blocking state [ 152.112691][ T6460] bridge0: port 4(gretap0) entered listening state [ 152.207146][ T6471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.292'. [ 152.328089][ T6471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.292'. [ 152.683377][ T6486] syz_tun: entered allmulticast mode [ 152.714958][ T6484] syz_tun: left allmulticast mode [ 153.388147][ T6515] syz_tun: entered allmulticast mode [ 153.420247][ T6514] syz_tun: left allmulticast mode [ 153.673637][ T6523] syz_tun: entered allmulticast mode [ 153.771565][ T6521] syz_tun: left allmulticast mode [ 154.186472][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.320'. [ 154.270717][ T6546] netlink: 'syz.4.321': attribute type 4 has an invalid length. [ 154.326209][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.320'. [ 154.982732][ T6572] syz_tun: entered allmulticast mode [ 155.243317][ T6580] netlink: 'syz.4.336': attribute type 4 has an invalid length. [ 156.395250][ T6618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.354'. [ 156.442195][ T6618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.354'. [ 156.502493][ T6620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.355'. [ 156.541646][ T6620] netlink: 72 bytes leftover after parsing attributes in process `syz.0.355'. [ 156.741699][ T6626] netlink: 20 bytes leftover after parsing attributes in process `syz.4.357'. [ 156.766328][ T6631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.359'. [ 156.822700][ T6626] netlink: 244 bytes leftover after parsing attributes in process `syz.4.357'. [ 156.882512][ T6633] netlink: 244 bytes leftover after parsing attributes in process `syz.4.357'. [ 157.293311][ T6648] syz_tun: entered allmulticast mode [ 157.610692][ T6654] netlink: 12 bytes leftover after parsing attributes in process `syz.4.369'. [ 157.655990][ T6659] netlink: 60 bytes leftover after parsing attributes in process `syz.4.369'. [ 158.134005][ T6680] netlink: 'syz.0.378': attribute type 4 has an invalid length. [ 158.476329][ T6690] tipc: Enabled bearer , priority 10 [ 158.545744][ T6690] tipc: Disabling bearer [ 158.620924][ T6699] tipc: Cannot configure node identity twice [ 159.354390][ T6730] netlink: 'syz.3.404': attribute type 2 has an invalid length. [ 159.581858][ T6741] netlink: 'syz.4.409': attribute type 4 has an invalid length. [ 159.723860][ T6747] openvswitch: netlink: Message has 4 unknown bytes. [ 160.331586][ T6768] netlink: 'syz.0.422': attribute type 4 has an invalid length. [ 160.623627][ T6779] tipc: Started in network mode [ 160.645251][ T6779] tipc: Node identity 10101, cluster identity 4711 [ 160.663465][ T6779] tipc: Node number set to 65793 [ 161.086857][ T6801] netlink: 'syz.0.437': attribute type 4 has an invalid length. [ 161.343981][ T6811] tipc: Started in network mode [ 161.356717][ T6811] tipc: Node identity 1000001, cluster identity 4711 [ 161.378373][ T6811] tipc: Node number set to 16777217 [ 161.398443][ T6811] tipc: Enabled bearer , priority 1 [ 161.438969][ T6810] tipc: Resetting bearer [ 161.517086][ T6810] tipc: Disabling bearer [ 161.549416][ T6821] syz_tun: entered allmulticast mode [ 161.750227][ C1] bridge0: port 3(syz_tun) entered forwarding state [ 161.758098][ C1] bridge0: topology change detected, propagating [ 162.297380][ T6856] netlink: 'syz.2.459': attribute type 5 has an invalid length. [ 162.602363][ T6864] bridge0: port 5(syz_tun) entered blocking state [ 162.623078][ T6864] bridge0: port 5(syz_tun) entered disabled state [ 162.649507][ T6864] syz_tun: entered promiscuous mode [ 162.668419][ T6864] bridge0: port 5(syz_tun) entered blocking state [ 162.676610][ T6864] bridge0: port 5(syz_tun) entered listening state [ 163.940379][ T6921] __nla_validate_parse: 5 callbacks suppressed [ 163.940481][ T6921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.487'. [ 164.340101][ T6932] tipc: New replicast peer: 127.0.0.1 [ 164.382635][ T6932] tipc: Enabled bearer , priority 10 [ 164.733346][ T6950] tipc: Enabling of bearer rejected, failed to enable media [ 164.809451][ T6954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.502'. [ 164.844737][ T6954] netlink: 60 bytes leftover after parsing attributes in process `syz.1.502'. [ 164.850671][ T6955] tipc: Enabling of bearer rejected, failed to enable media [ 164.904875][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.503'. [ 165.696611][ T6985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.516'. [ 165.875760][ T6993] netlink: 'syz.0.519': attribute type 13 has an invalid length. [ 166.227935][ C1] bridge0: port 4(erspan0) entered learning state [ 166.438232][ T29] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 166.653830][ T29] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 166.720134][ T29] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 166.745690][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 166.783803][ T29] usb 3-1: SerialNumber: syz [ 167.508682][ C1] bridge0: port 4(gretap0) entered learning state [ 167.670067][ T29] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 168.447878][ T5708] usb 3-1: USB disconnect, device number 2 [ 168.529197][ T5708] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 169.546665][ T7084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.548'. [ 169.849229][ T7092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.551'. [ 171.292567][ T7135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.562'. [ 171.453167][ T7144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.566'. [ 171.493601][ T7142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.566'. [ 171.795845][ T7158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.571'. [ 171.836523][ T7156] tipc: Cannot configure node identity twice [ 172.155455][ T7162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.571'. [ 172.768040][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.583'. [ 173.240261][ T7210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.592'. [ 173.260321][ T7210] netlink: 52 bytes leftover after parsing attributes in process `syz.3.592'. [ 173.945914][ T7235] netlink: 'syz.2.605': attribute type 4 has an invalid length. [ 174.306107][ T7241] netlink: 'syz.0.608': attribute type 13 has an invalid length. [ 174.952496][ T7275] __nla_validate_parse: 5 callbacks suppressed [ 174.952517][ T7275] netlink: 44 bytes leftover after parsing attributes in process `syz.0.622'. [ 175.012285][ T7275] netlink: 40 bytes leftover after parsing attributes in process `syz.0.622'. [ 175.494763][ T7293] netlink: 84 bytes leftover after parsing attributes in process `syz.0.630'. [ 175.599980][ T7302] netlink: 'syz.4.634': attribute type 4 has an invalid length. [ 176.127477][ T7323] tipc: Enabled bearer , priority 1 [ 176.186865][ T7321] tipc: Resetting bearer [ 176.279372][ T7321] tipc: Disabling bearer [ 176.595362][ T7335] netlink: 'syz.2.647': attribute type 4 has an invalid length. [ 176.939664][ T7350] tipc: Enabling of bearer rejected, already enabled [ 176.968617][ T7350] tipc: Can't bind to reserved service type 63 [ 177.747892][ C1] bridge0: port 5(syz_tun) entered learning state [ 177.980737][ T7389] tipc: New replicast peer: 127.0.0.1 [ 177.997525][ T7389] tipc: Enabled bearer , priority 10 [ 179.061620][ T7440] netlink: 20 bytes leftover after parsing attributes in process `syz.4.691'. [ 179.107885][ T9] tipc: Node number set to 3145728 [ 179.561047][ T7460] netlink: 24 bytes leftover after parsing attributes in process `syz.1.700'. [ 179.687844][ T29] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 179.865040][ T29] usb 4-1: New USB device found, idVendor=0b95, idProduct=1790, bcdDevice= 1.00 [ 179.889582][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.918956][ T29] usb 4-1: Product: syz [ 179.925318][ T29] usb 4-1: Manufacturer: syz [ 179.930845][ T29] usb 4-1: SerialNumber: syz [ 180.814810][ T7503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.719'. [ 181.157380][ T29] ax88179_178a 4-1:1.0: probe with driver ax88179_178a failed with error -71 [ 181.226294][ T29] usb 4-1: USB disconnect, device number 2 [ 181.587900][ C1] bridge0: port 4(erspan0) entered forwarding state [ 181.595738][ C1] bridge0: topology change detected, propagating [ 181.907224][ T7552] netlink: 36 bytes leftover after parsing attributes in process `syz.2.737'. [ 181.921629][ T7552] netlink: 68 bytes leftover after parsing attributes in process `syz.2.737'. [ 181.933638][ T7552] netlink: 68 bytes leftover after parsing attributes in process `syz.2.737'. [ 181.950831][ T7552] bridge0: port 5(veth0) entered blocking state [ 181.959102][ T7552] bridge0: port 5(veth0) entered disabled state [ 181.966683][ T7552] veth0: entered allmulticast mode [ 181.975058][ T7552] veth0: entered promiscuous mode [ 181.984830][ T7552] bridge0: port 5(veth0) entered blocking state [ 181.993979][ T7552] bridge0: port 5(veth0) entered forwarding state [ 182.005822][ T7554] bridge0: port 6(veth1) entered blocking state [ 182.015600][ T7554] bridge0: port 6(veth1) entered disabled state [ 182.024798][ T7554] veth1: entered allmulticast mode [ 182.035471][ T7554] veth1: entered promiscuous mode [ 182.043758][ T7554] bridge0: port 6(veth1) entered blocking state [ 182.051064][ T7554] bridge0: port 6(veth1) entered forwarding state [ 182.237677][ T7560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.740'. [ 182.249300][ T7560] netlink: 60 bytes leftover after parsing attributes in process `syz.2.740'. [ 182.868114][ C1] bridge0: port 4(gretap0) entered forwarding state [ 182.875594][ C1] bridge0: topology change detected, propagating [ 183.165673][ T7595] netlink: 12 bytes leftover after parsing attributes in process `syz.4.754'. [ 183.395147][ T7608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.759'. [ 183.407146][ T7608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.759'. [ 183.547206][ T7612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.761'. [ 184.339219][ T5717] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 184.533212][ T5717] usb 4-1: New USB device found, idVendor=0bda, idProduct=8152, bcdDevice=30.11 [ 184.572509][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.606451][ T5717] usb 4-1: Product: syz [ 184.625366][ T5717] usb 4-1: Manufacturer: syz [ 184.632234][ T5717] usb 4-1: SerialNumber: syz [ 184.653848][ T5717] r8152-cfgselector 4-1: Unknown version 0x0000 [ 184.680160][ T7651] tipc: Enabling of bearer rejected, already enabled [ 185.066705][ T7670] bridge0: port 5(syz_tun) entered disabled state [ 185.074689][ T7670] bridge0: port 4(erspan0) entered disabled state [ 185.082542][ T7670] bridge0: port 3(gretap0) entered disabled state [ 185.089519][ T7670] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.099324][ T7670] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.173848][ T7673] syz_tun: left promiscuous mode [ 185.190185][ T7673] bridge0: port 5(syz_tun) entered disabled state [ 185.261745][ T7673] erspan0: left allmulticast mode [ 185.286939][ T7673] erspan0: left promiscuous mode [ 185.298193][ T7673] bridge0: port 4(erspan0) entered disabled state [ 185.328515][ T7673] gretap0: left allmulticast mode [ 185.346060][ T7673] gretap0: left promiscuous mode [ 185.372595][ T7673] bridge0: port 3(gretap0) entered disabled state [ 185.389842][ T7673] bridge_slave_1: left allmulticast mode [ 185.399096][ T7673] bridge_slave_1: left promiscuous mode [ 185.406753][ T7673] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.421270][ T7673] bridge_slave_0: left allmulticast mode [ 185.437077][ T7673] bridge_slave_0: left promiscuous mode [ 185.446475][ T7673] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.916500][ T5717] r8152-cfgselector 4-1: Unknown version 0x0000 [ 185.984131][ T5717] r8152-cfgselector 4-1: USB disconnect, device number 3 [ 186.142180][ T7704] __nla_validate_parse: 4 callbacks suppressed [ 186.142206][ T7704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.798'. [ 186.456758][ T7715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.801'. [ 186.484602][ T7715] netlink: 20 bytes leftover after parsing attributes in process `syz.0.801'. [ 186.951920][ T7735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.810'. [ 187.341346][ T7753] netlink: 20 bytes leftover after parsing attributes in process `syz.2.818'. [ 187.584493][ T7765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.822'. [ 187.603551][ T7765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.822'. [ 187.686334][ T7767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.823'. [ 187.698905][ T7767] netlink: 'syz.2.823': attribute type 1 has an invalid length. [ 188.015565][ T7777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.828'. [ 188.027400][ T7777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.828'. [ 189.034116][ T7823] tc_dump_action: action bad kind [ 268.684007][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 268.690608][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 298.257759][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 298.266884][ C1] rcu: 0-...!: (1 ticks this GP) idle=4ad4/1/0x4000000000000000 softirq=25236/25236 fqs=0 [ 298.279566][ C1] rcu: (detected by 1, t=10503 jiffies, g=32493, q=1413 ncpus=2) [ 298.288174][ C1] Sending NMI from CPU 1 to CPUs 0: [ 298.288230][ C0] NMI backtrace for cpu 0 [ 298.288312][ C0] CPU: 0 UID: 0 PID: 1316 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 298.288341][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 298.288383][ C0] RIP: 0010:__lock_acquire+0x4d3/0x2cf0 [ 298.288424][ C0] Code: 75 28 41 83 be 88 0b 00 00 00 41 0f 94 c4 41 80 f4 03 eb 16 41 83 be 84 0b 00 00 00 41 0f 94 c4 45 00 e4 41 80 c4 03 49 89 ed <41> 3b 9e 98 0b 00 00 8b 6c 24 08 0f 8d d2 00 00 00 4c 63 fb 4b 8d [ 298.288439][ C0] RSP: 0000:ffffc90000007108 EFLAGS: 00000002 [ 298.288460][ C0] RAX: 0000000000000001 RBX: 0000000000000002 RCX: 00000000000e4007 [ 298.288471][ C0] RDX: 0000000000000002 RSI: 0000000000006000 RDI: 0000000000000000 [ 298.288482][ C0] RBP: ffff8880297f6918 R08: ffffffff84df01c7 R09: 0000000000080000 [ 298.288495][ C0] R10: 0000000000000000 R11: ffffffff9aa3bf50 R12: 0000000000000002 [ 298.288506][ C0] R13: ffff8880297f6918 R14: ffff8880297f5d00 R15: 0000000000000001 [ 298.288519][ C0] FS: 0000000000000000(0000) GS:ffff888124f4e000(0000) knlGS:0000000000000000 [ 298.288534][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 298.288546][ C0] CR2: 000000000c2be087 CR3: 000000000e946000 CR4: 00000000003526f0 [ 298.288583][ C0] Call Trace: [ 298.288592][ C0] [ 298.288603][ C0] ? __lock_acquire+0x683/0x2cf0 [ 298.288634][ C0] ? __lock_acquire+0x683/0x2cf0 [ 298.288662][ C0] ? debug_object_activate+0xb7/0x420 [ 298.288689][ C0] lock_acquire+0x106/0x350 [ 298.288714][ C0] ? debug_object_activate+0xb7/0x420 [ 298.288746][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 298.288764][ C0] ? debug_object_activate+0xb7/0x420 [ 298.288790][ C0] debug_object_activate+0xb7/0x420 [ 298.288819][ C0] enqueue_hrtimer+0xa9/0x2c0 [ 298.288843][ C0] __hrtimer_run_queues+0x4ce/0xa10 [ 298.288871][ C0] hrtimer_interrupt+0x448/0x910 [ 298.288903][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 298.288925][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 298.288946][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 298.288965][ C0] RIP: 0010:unwind_next_frame+0x48e/0x2550 [ 298.288986][ C0] Code: d8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 b4 19 00 00 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 bf 19 00 00 0f b6 43 01 <83> e0 07 0f 84 7c 16 00 00 83 f8 01 4c 8b 6c 24 50 49 bc 00 00 00 [ 298.289010][ C0] RSP: 0000:ffffc900000076a0 EFLAGS: 00000246 [ 298.289025][ C0] RAX: 0000000000000002 RBX: ffffffff917880c2 RCX: ffffffff90ccb3fc [ 298.289038][ C0] RDX: ffffffff917880be RSI: ffffffff917880be RDI: ffffffff8c4bdc20 [ 298.289052][ C0] RBP: ffffffff89a62f3f R08: 0000000000000001 R09: 0000000000000000 [ 298.289063][ C0] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: dffffc0000000000 [ 298.289075][ C0] R13: ffffffff917880c3 R14: ffffc90000007748 R15: ffffffff90ccb3fc [ 298.289091][ C0] ? process_backlog+0xbef/0x1860 [ 298.289115][ C0] ? process_backlog+0xbf0/0x1860 [ 298.289131][ C0] ? unwind_next_frame+0x8f/0x2550 [ 298.289151][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 298.289180][ C0] arch_stack_walk+0x11b/0x150 [ 298.289202][ C0] ? process_backlog+0xbf0/0x1860 [ 298.289220][ C0] stack_trace_save+0xa9/0x100 [ 298.289242][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 298.289267][ C0] ? __lock_acquire+0x683/0x2cf0 [ 298.289294][ C0] kasan_save_track+0x3e/0x80 [ 298.289318][ C0] ? kasan_save_track+0x3e/0x80 [ 298.289341][ C0] ? kasan_save_free_info+0x40/0x50 [ 298.289360][ C0] ? __kasan_slab_free+0x5c/0x80 [ 298.289383][ C0] ? kfree+0x1c5/0x640 [ 298.289402][ C0] ? skb_release_data+0x85e/0xab0 [ 298.289421][ C0] ? __kfree_skb+0x5d/0x210 [ 298.289438][ C0] ? aoenet_rcv+0x5c/0x640 [ 298.289464][ C0] ? process_backlog+0xbf0/0x1860 [ 298.289501][ C0] kasan_save_free_info+0x40/0x50 [ 298.289529][ C0] __kasan_slab_free+0x5c/0x80 [ 298.289555][ C0] kfree+0x1c5/0x640 [ 298.289574][ C0] ? skb_release_data+0x85e/0xab0 [ 298.289595][ C0] skb_release_data+0x85e/0xab0 [ 298.289620][ C0] __kfree_skb+0x5d/0x210 [ 298.289639][ C0] aoenet_rcv+0x5c/0x640 [ 298.289664][ C0] ? process_backlog+0xbd9/0x1860 [ 298.289680][ C0] ? __pfx_aoenet_rcv+0x10/0x10 [ 298.289708][ C0] process_backlog+0xbf0/0x1860 [ 298.289727][ C0] ? process_backlog+0x3c3/0x1860 [ 298.289749][ C0] __napi_poll+0xaa/0x330 [ 298.289778][ C0] net_rx_action+0x61d/0xf50 [ 298.289801][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 298.289816][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 298.289839][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 298.289873][ C0] handle_softirqs+0x225/0x840 [ 298.289897][ C0] ? do_softirq+0x76/0xd0 [ 298.289926][ C0] ? __dev_queue_xmit+0x29b/0x3820 [ 298.289949][ C0] do_softirq+0x76/0xd0 [ 298.289976][ C0] [ 298.289982][ C0] [ 298.289989][ C0] __local_bh_enable_ip+0xf8/0x130 [ 298.290009][ C0] ? __dev_queue_xmit+0x29b/0x3820 [ 298.290031][ C0] __dev_queue_xmit+0x1edc/0x3820 [ 298.290059][ C0] ? __lock_acquire+0x683/0x2cf0 [ 298.290083][ C0] ? __dev_queue_xmit+0x29b/0x3820 [ 298.290106][ C0] ? __lock_acquire+0x683/0x2cf0 [ 298.290132][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 298.290160][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 298.290194][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 298.290213][ C0] tx+0x6b/0x190 [ 298.290243][ C0] ? __pfx_tx+0x10/0x10 [ 298.290268][ C0] kthread+0x1ed/0x420 [ 298.290296][ C0] ? __pfx_kthread+0x10/0x10 [ 298.290319][ C0] ? __pfx_default_wake_function+0x10/0x10 [ 298.290341][ C0] ? __kthread_parkme+0x71/0x1f0 [ 298.290366][ C0] ? __kthread_parkme+0x196/0x1f0 [ 298.290391][ C0] kthread+0x388/0x470 [ 298.290417][ C0] ? __pfx_kthread+0x10/0x10 [ 298.290439][ C0] ? __pfx_kthread+0x10/0x10 [ 298.290465][ C0] ret_from_fork+0x514/0xb70 [ 298.290493][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 298.290519][ C0] ? __switch_to+0xc89/0x1420 [ 298.290543][ C0] ? __pfx_kthread+0x10/0x10 [ 298.290569][ C0] ret_from_fork_asm+0x1a/0x30 [ 298.290593][ C0] [ 298.291222][ C1] rcu: rcu_preempt kthread starved for 10503 jiffies! g32493 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 299.012341][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 299.024195][ C1] rcu: RCU grace-period kthread stack dump: [ 299.031894][ C1] task:rcu_preempt state:R running task stack:27496 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 299.048004][ C1] Call Trace: [ 299.052485][ C1] [ 299.055855][ C1] __schedule+0x17d9/0x56c0 [ 299.061530][ C1] ? __lock_acquire+0x683/0x2cf0 [ 299.068497][ C1] ? __pfx___schedule+0x10/0x10 [ 299.077096][ C1] ? schedule+0x90/0x2b0 [ 299.083724][ C1] schedule+0x164/0x2b0 [ 299.088989][ C1] schedule_timeout+0x152/0x2c0 [ 299.095290][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 299.101687][ C1] ? __pfx_process_timeout+0x10/0x10 [ 299.109297][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 299.115327][ C1] ? prepare_to_swait_event+0x322/0x350 [ 299.121633][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 299.129513][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 299.136901][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 299.144970][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 299.154006][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 299.162355][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 299.170758][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 299.177078][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 299.182840][ C1] ? __kthread_parkme+0x71/0x1f0 [ 299.188574][ C1] ? __kthread_parkme+0x196/0x1f0 [ 299.194979][ C1] kthread+0x388/0x470 [ 299.200373][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 299.206955][ C1] ? __pfx_kthread+0x10/0x10 [ 299.212344][ C1] ret_from_fork+0x514/0xb70 [ 299.217901][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 299.223440][ C1] ? __switch_to+0xc89/0x1420 [ 299.228930][ C1] ? __pfx_kthread+0x10/0x10 [ 299.234032][ C1] ret_from_fork_asm+0x1a/0x30 [ 299.239574][ C1] [ 299.242826][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 299.251397][ C1] CPU: 1 UID: 0 PID: 7855 Comm: syz.4.858 Not tainted syzkaller #0 PREEMPT(full) [ 299.261696][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 299.273022][ C1] RIP: 0010:smp_call_function_many_cond+0x11e6/0x15f0 [ 299.280814][ C1] Code: c0 75 7a 41 8b 1e 89 de 83 e6 01 31 ff e8 e2 22 0c 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 07 e8 8e 1e 0c 00 eb 37 f3 90 <41> 0f b6 04 1c 84 c0 75 10 41 f7 06 01 00 00 00 74 1e e8 73 1e 0c [ 299.303213][ C1] RSP: 0000:ffffc9001b61f400 EFLAGS: 00000293 [ 299.311399][ C1] RAX: ffffffff81bae58d RBX: dffffc0000000000 RCX: ffff888028f38000 [ 299.320462][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 299.330966][ C1] RBP: ffffc9001b61f548 R08: ffffffff90579137 R09: 1ffffffff20af226 [ 299.342343][ C1] R10: dffffc0000000000 R11: fffffbfff20af227 R12: 1ffff110170c85fd [ 299.352909][ C1] R13: ffff8880b873c448 R14: ffff8880b8642fe8 R15: 0000000000000000 [ 299.362617][ C1] FS: 0000000000000000(0000) GS:ffff88812504e000(0000) knlGS:0000000000000000 [ 299.372744][ C1] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 299.379827][ C1] CR2: 00000000568f121c CR3: 000000000e946000 CR4: 00000000003526f0 [ 299.390976][ C1] Call Trace: [ 299.395457][ C1] [ 299.398996][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 299.404880][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 299.411961][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 299.417298][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 299.422644][ C1] flush_tlb_mm_range+0x5c4/0x1090 [ 299.431805][ C1] ? __lock_acquire+0x683/0x2cf0 [ 299.437347][ C1] tlb_flush_mmu+0x1af/0xa30 [ 299.442460][ C1] tlb_finish_mmu+0xf4/0x220 [ 299.447738][ C1] free_ldt_pgtables+0x192/0x360 [ 299.454419][ C1] ? __pfx_free_ldt_pgtables+0x10/0x10 [ 299.460143][ C1] ? down_read+0x2be/0x330 [ 299.465057][ C1] exit_mmap+0x1bf/0x9f0 [ 299.470096][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 299.475645][ C1] ? __pfx_exit_aio+0x10/0x10 [ 299.481110][ C1] ? arch_uprobe_clear_state+0x1c8/0x240 [ 299.489669][ C1] ? uprobe_clear_state+0x2ac/0x3e0 [ 299.496229][ C1] __mmput+0x118/0x420 [ 299.501067][ C1] exit_mm+0x221/0x2d0 [ 299.506495][ C1] do_exit+0x6cd/0x2360 [ 299.511445][ C1] ? __pfx_do_exit+0x10/0x10 [ 299.516558][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 299.522186][ C1] do_group_exit+0x22d/0x2f0 [ 299.527455][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 299.533569][ C1] get_signal+0x121b/0x12c0 [ 299.538506][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 299.545796][ C1] ? __sys_connect+0x3ae/0x460 [ 299.552001][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 299.558851][ C1] exit_to_user_mode_loop+0x104/0x730 [ 299.565160][ C1] ? rcu_is_watching+0x15/0xb0 [ 299.570233][ C1] ? do_fast_syscall_32+0x33/0x70 [ 299.575950][ C1] __do_fast_syscall_32+0x45b/0x6f0 [ 299.582454][ C1] ? do_fast_syscall_32+0x33/0x70 [ 299.587974][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 299.593751][ C1] ? irqentry_exit+0x10f/0x8f0 [ 299.599774][ C1] ? trace_irq_disable+0x3b/0x140 [ 299.605283][ C1] do_fast_syscall_32+0x33/0x70 [ 299.611048][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 299.618043][ C1] RIP: 0023:0xf700f0ec [ 299.623374][ C1] Code: Unable to access opcode bytes at 0xf700f0c2. [ 299.630887][ C1] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 000000000000016a [ 299.640132][ C1] RAX: fffffffffffffe00 RBX: 0000000000000004 RCX: 0000000080000080 [ 299.650041][ C1] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 299.659058][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 299.667965][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 299.677384][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 299.686578][ C1]