last executing test programs: 6.162066346s ago: executing program 4 (id=77): openat$vicodec0(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 6.00761372s ago: executing program 4 (id=79): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x4, &(0x7f00000004c0)=0x7a, 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x9, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) 5.805754544s ago: executing program 1 (id=82): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x0, 0xd, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1000, 0x97, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x1, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r6, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 5.739872676s ago: executing program 4 (id=83): r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd0c800000010102030109022e0001010080fa0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 5.486356902s ago: executing program 1 (id=84): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x1, 0x84, 0x3, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0x7ff, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x802, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x81, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x7c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x6, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x80, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xefa, 0x6, 0x7f, 0x2, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xffe, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53d2, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xffdffff9, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x7fffffff, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x0, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f15, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x8, 0x5, 0x0, 0xfffffffc}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0x800000e, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x7, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x40000100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x10004, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0x7f, 0x100}, {0x81, 0x4, 0x988, 0x3, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe98, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x2}, {0x3, 0x0, 0x5, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x6, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x3, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x203, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x7, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x2, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, 0x0, {0xc, 0x10}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 5.418200493s ago: executing program 0 (id=85): syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0xff}, {0x1, [{@any, 0x2, 0x6, "41dc6b", 0x10, 0x8, "a04cf2d00f62c5fa3d48f5e88a28991154fbac22fe0209571a86cad3db6da15c226c5940212258ed8501862621ced6d75ad03767710b467f52e28d4b9aaeee908cca995f3811696be09027d65dd95bb62471397e5ec93f57f17f3e54c9947d72f0d80319ed07a9ac75a1c2ef37c242aef4285e96bfbeaf6da10dc822c9444e38c43678db446d3f111bf45532871100634eac1d1735c95084d923c03d60effc49689b316e8dc8083334fd116871b3028e514baf3d037f6e1455f8f2cd642f4daa7fcb96399d3592c63a06983641c87ad0bc84214882b58b014c220c88b8fd1db9b4fb4d414b8dae6102f6abbe0b3a9e4c"}]}}}, 0x102) 5.315371926s ago: executing program 1 (id=86): syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$media(&(0x7f0000000380), 0x10, 0x101000) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x781e, 0x10, 0x2, 0x46}, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$fault_inject(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/fail_iommufd/probability\x00', 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000620000004300000001"], 0x50) syz_open_dev$video4linux(&(0x7f0000000180), 0xffffffff, 0x40000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x1000, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='oom_adj\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x106, 0x2}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x5, &(0x7f0000000300), 0x111, 0xa}}, 0x20) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 5.15576815s ago: executing program 0 (id=87): setns(0xc9, 0x0) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000400)={r1, 0x0, 0x230000, &(0x7f0000000300)={@align, {0x265, 0x1, 0x40, 0x2}}, 0x10000, &(0x7f0000000340), &(0x7f0000000740)=0xfffffff6}) write(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) syz_open_dev$audion(&(0x7f00000005c0), 0x137c, 0x40001) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000080)='GPL\x00', 0xf, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x197c}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x4040000) r5 = openat(r0, &(0x7f0000001040)='net/atm/vc\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000002080)={0x2020}, 0x2020) 4.873608106s ago: executing program 1 (id=88): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in=@loopback, @in=@empty, 0x0, 0x5, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0xfffffffd, 0x32}, @in=@local, {0x1, 0x3, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x5f, 0xa}, {0x1}, 0x100, 0x0, 0x2, 0x0, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) socket$inet_udp(0x2, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)="41faddb797e92a79a877e88f80bdedf7da0fce95a7e8214628db5e933d3c2cb50eaef5a71f0f0cba74e30acf90cd8307598c4dcd7dd6b1a43059c0d2accafd68bc5392685a9182e6e861239ef775d2633a00439f61aa3fcaa0d2f7e79ce0e3f90c5415562d69240a24778de19478f38417e18df59e3c6bbc2bb75c1673679cf9843308de4e426e766b93ef6babb5f82a94b53b9c661c465dfe91d4801652aae78c92e3ec36a3f6e64cfeb4b7fd4ef343999d86255d9d896204412266a68ed46bb3f27443f374827df3696f5d099a342d53e5f8812079af", 0xd7, 0x1}, {&(0x7f0000000600)="359846d0a76b937391d27d35a08a28d4696a15b19f32979c38c9fac34c44c976f92eb198a6971b9b699e7d9ea827aa119319678cfe706db246aa78", 0x3b, 0x2}]}, 0x6, 0x2}, 0x1) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) 4.472727226s ago: executing program 2 (id=90): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r1, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2e) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}}}, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @loopback}}}, 0x84) 4.384272268s ago: executing program 4 (id=91): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x100, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x20044004) 4.221781271s ago: executing program 0 (id=92): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_TOS={0x5, 0x9, 0x9}, @IFLA_GRE_PMTUDISC={0x5}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) 4.157121473s ago: executing program 2 (id=93): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x7fffffff, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0x8, 0xb}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0xf2a}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0xb32019a74e55d2de) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05", 0x1, 0x20000005, &(0x7f0000000140)={0x11, 0x7, r5, 0x1, 0x0, 0x6, @remote}, 0x14) 4.113057494s ago: executing program 0 (id=95): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, 0x0}, 0x8004) 4.052080275s ago: executing program 4 (id=96): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x1, 0x84, 0x3, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0x7ff, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x802, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x81, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x7c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x6, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x80, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xefa, 0x6, 0x7f, 0x2, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xffe, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53d2, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xffdffff9, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x7fffffff, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x0, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f15, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x8, 0x5, 0x0, 0xfffffffc}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0x800000e, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x7, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x40000100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x10004, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0x7f, 0x100}, {0x81, 0x4, 0x988, 0x3, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe98, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x2}, {0x3, 0x0, 0x5, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x6, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x3, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x203, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x7, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x2, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, 0x0, {0xc, 0x10}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 3.927791268s ago: executing program 1 (id=97): socket$kcm(0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000) syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x2200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x48004) socket$nl_generic(0x10, 0x3, 0x10) 3.739352232s ago: executing program 0 (id=98): socket$pppoe(0x18, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 3.347786942s ago: executing program 2 (id=100): accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r0 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x1000) faccessat2(r0, &(0x7f0000000380)='./file0\x00', 0x100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', 0x0, 0x80c019, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)='usrquota') r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)={0x2c, r7, 0x7, 0x0, 0xfffffffe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r8 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, 0x0, &(0x7f0000000000)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x18ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe04c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\r\xa8&t&A0\xa7\xef\x9cL\x8e1K\f\xeb|%o\xf4v\xad~\x1a\xf3~\xeeI\tv\xe5\x11\xb7\x8f\xfa\xe0\xa6W#S\xaa-\x93\xcb\xc2\x1d\xff\xe9A,+?H\x91\xeeo\x1f\xd6A\xd1\x95\xe92\x06\x00o\xee\x14\xb9\v8\xa0\x91\'Jb\xb7\x92\xb1\xb3\xb9\x83\x98\x8aB\xf3<\x1b\x98\xa8B\xb1\xf73\x94<]\\\xb1T\x03\x9a%>\xd4\xe7=\\q\xd7\xbd\xb7\x19d\xb7\xd7\xc8\xb0\x84\x85\xbdI\xa6\xb0\x15@\xab\x8d\x8dW\xe2\xc5Yg\xaf&\x1b\xa7\xfd\xfc\xbc\x84\xefK\xfe\v\xd0\xc3Xp!2\n\xd4\xcf/[W\"h\xafC\x992x[\x9b\xfb26\xe48\v\x9bJ<\xee\x8cE\x9f\xa1\xc6\xb9\x93\xa5\x1dp\xfbPJ0\x057\xec\xa5cg2\xfc-\xe24\xf61J-hn\x83\'FVz|\x16\x95 {/\xe3\xef\x91/\xbco\xfe\xb9\xef\x84F\xaaL\xc0\x00\xa5\xa4\x90\a\xb5\xda\v|\xd5\xff\x1a\x0f\xad\xd1+M\x93\x14\x10C\xec\xd9\xcb\x0f\x11S9\x03\xb2\xaaG\"\xd6\a\xefI\xc0\"\xf8\xa42\x17X\t#\x1e0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) unshare(0x26020480) fsync(r2) 2.436576963s ago: executing program 2 (id=102): setns(0xc9, 0x0) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000400)={r1, 0x0, 0x230000, &(0x7f0000000300)={@align, {0x265, 0x1, 0x40, 0x2}}, 0x10000, &(0x7f0000000340), &(0x7f0000000740)=0xfffffff6}) write(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) syz_open_dev$audion(&(0x7f00000005c0), 0x137c, 0x40001) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000080)='GPL\x00', 0xf, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x197c}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x4040000) r5 = openat(r0, &(0x7f0000001040)='net/atm/vc\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000002080)={0x2020}, 0x2020) 2.311698116s ago: executing program 0 (id=103): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="600e0f000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.70594159s ago: executing program 1 (id=104): socket$netlink(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe8c81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x40002002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[], 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) shmdt(0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x3062a650, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r1, r0, 0x0) recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0) read$FUSE(r4, 0x0, 0x0) unshare(0x2030b00) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) request_key(&(0x7f0000000080)='.request_key_auth\x00', 0x0, 0x0, 0xffffffffffffffff) 1.406011427s ago: executing program 2 (id=107): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in=@loopback, @in=@empty, 0x0, 0x5, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0xfffffffd, 0x32}, @in=@local, {0x1, 0x3, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x5f, 0xa}, {0x1}, 0x100, 0x0, 0x2, 0x0, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) socket$inet_udp(0x2, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)="41faddb797e92a79a877e88f80bdedf7da0fce95a7e8214628db5e933d3c2cb50eaef5a71f0f0cba74e30acf90cd8307598c4dcd7dd6b1a43059c0d2accafd68bc5392685a9182e6e861239ef775d2633a00439f61aa3fcaa0d2f7e79ce0e3f90c5415562d69240a24778de19478f38417e18df59e3c6bbc2bb75c1673679cf9843308de4e426e766b93ef6babb5f82a94b53b9c661c465dfe91d4801652aae78c92e3ec36a3f6e64cfeb4b7fd4ef343999d86255d9d896204412266a68ed46bb3f27443f374827df3696f5d099a342d53e5f8812079af", 0xd7, 0x1}, {&(0x7f0000000600)="359846d0a76b937391d27d35a08a28d4696a15b19f32979c38c9fac34c44c976f92eb198a6971b9b699e7d9ea827aa119319678cfe706db246aa78", 0x3b, 0x2}]}, 0x6, 0x2}, 0x1) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$6lowpan_enable(r1, 0x0, 0x0) 1.327806929s ago: executing program 3 (id=108): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, 0x0}, 0x8004) 1.201131692s ago: executing program 3 (id=109): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x0, 0xd, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1000, 0x97, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x1, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r7, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 1.090813354s ago: executing program 3 (id=110): r0 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x2) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1002, 0x1, 0x11, r0, 0x82000000) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x918) 999.569636ms ago: executing program 3 (id=111): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x1, 0x84, 0x3, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0x7ff, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x802, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x81, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x7c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x6, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x80, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xefa, 0x6, 0x7f, 0x2, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xffe, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53d2, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xffdffff9, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x7fffffff, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x0, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f15, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x8, 0x5, 0x0, 0xfffffffc}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0x800000e, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x7, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x40000100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x10004, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0x7f, 0x100}, {0x81, 0x4, 0x988, 0x3, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe98, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x2}, {0x3, 0x0, 0x5, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x6, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x3, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x203, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x7, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x2, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, 0x0, {0xc, 0x10}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 942.890698ms ago: executing program 3 (id=112): accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r0 = open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x1000) faccessat2(r0, &(0x7f0000000380)='./file0\x00', 0x100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', 0x0, 0x80c019, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x2, &(0x7f0000000300)='usrquota') r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)={0x2c, r7, 0x7, 0x0, 0xfffffffe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r8 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, 0x0, &(0x7f0000000000)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x18ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe04c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\r\xa8&t&A0\xa7\xef\x9cL\x8e1K\f\xeb|%o\xf4v\xad~\x1a\xf3~\xeeI\tv\xe5\x11\xb7\x8f\xfa\xe0\xa6W#S\xaa-\x93\xcb\xc2\x1d\xff\xe9A,+?H\x91\xeeo\x1f\xd6A\xd1\x95\xe92\x06\x00o\xee\x14\xb9\v8\xa0\x91\'Jb\xb7\x92\xb1\xb3\xb9\x83\x98\x8aB\xf3<\x1b\x98\xa8B\xb1\xf73\x94<]\\\xb1T\x03\x9a%>\xd4\xe7=\\q\xd7\xbd\xb7\x19d\xb7\xd7\xc8\xb0\x84\x85\xbdI\xa6\xb0\x15@\xab\x8d\x8dW\xe2\xc5Yg\xaf&\x1b\xa7\xfd\xfc\xbc\x84\xefK\xfe\v\xd0\xc3Xp!2\n\xd4\xcf/[W\"h\xafC\x992x[\x9b\xfb26\xe48\v\x9bJ<\xee\x8cE\x9f\xa1\xc6\xb9\x93\xa5\x1dp\xfbPJ0\x057\xec\xa5cg2\xfc-\xe24\xf61J-hn\x83\'FVz|\x16\x95 {/\xe3\xef\x91/\xbco\xfe\xb9\xef\x84F\xaaL\xc0\x00\xa5\xa4\x90\a\xb5\xda\v|\xd5\xff\x1a\x0f\xad\xd1+M\x93\x14\x10C\xec\xd9\xcb\x0f\x11S9\x03\xb2\xaaG\"\xd6\a\xefI\xc0\"\xf8\xa42\x17X\t#\x1e 1 [ 65.691019][ T4279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.699251][ T4279] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.708208][ T4287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.715723][ T4287] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.723216][ T4287] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.731275][ T4287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.736483][ T4288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.745538][ T4287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.746070][ T4288] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.753101][ T4287] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.760319][ T4288] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.773972][ T4287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.774627][ T4288] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.781338][ T4287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.789327][ T4288] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.795641][ T4287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.802700][ T4288] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.817354][ T4287] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 65.818778][ T4288] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.824483][ T4287] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 65.832177][ T4288] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 65.838811][ T4287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.845866][ T4288] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.852905][ T4287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.859970][ T4288] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.866835][ T4287] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 65.880307][ T4289] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 65.892761][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.900705][ T4289] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.247606][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 66.282005][ T4284] chnl_net:caif_netlink_parms(): no params data found [ 66.379075][ T4282] chnl_net:caif_netlink_parms(): no params data found [ 66.420895][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 66.448456][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.456141][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.465986][ T4274] device bridge_slave_0 entered promiscuous mode [ 66.487863][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.495588][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.503188][ T4274] device bridge_slave_1 entered promiscuous mode [ 66.533940][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.555351][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.564741][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 66.582317][ T4284] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.589662][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.597422][ T4284] device bridge_slave_0 entered promiscuous mode [ 66.623905][ T4284] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.630994][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.639271][ T4284] device bridge_slave_1 entered promiscuous mode [ 66.660581][ T4274] team0: Port device team_slave_0 added [ 66.682892][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.690161][ T4282] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.698013][ T4282] device bridge_slave_0 entered promiscuous mode [ 66.717949][ T4274] team0: Port device team_slave_1 added [ 66.737622][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.744803][ T4282] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.752407][ T4282] device bridge_slave_1 entered promiscuous mode [ 66.773087][ T4284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.797026][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.804257][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.811969][ T4273] device bridge_slave_0 entered promiscuous mode [ 66.821791][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.831734][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.857891][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.870907][ T4284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.894294][ T4282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.903509][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.910825][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.919078][ T4273] device bridge_slave_1 entered promiscuous mode [ 66.926994][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.936032][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.964699][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.987936][ T4282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.018331][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.025475][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.033097][ T4275] device bridge_slave_0 entered promiscuous mode [ 67.056919][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.068645][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.080286][ T4284] team0: Port device team_slave_0 added [ 67.089044][ T4284] team0: Port device team_slave_1 added [ 67.094974][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.102093][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.112619][ T4275] device bridge_slave_1 entered promiscuous mode [ 67.122260][ T4282] team0: Port device team_slave_0 added [ 67.159384][ T4282] team0: Port device team_slave_1 added [ 67.168521][ T4274] device hsr_slave_0 entered promiscuous mode [ 67.175955][ T4274] device hsr_slave_1 entered promiscuous mode [ 67.197959][ T4273] team0: Port device team_slave_0 added [ 67.229656][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.236899][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.262902][ T4284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.275872][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.287004][ T4273] team0: Port device team_slave_1 added [ 67.294909][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.310951][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.318189][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.344222][ T4282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.361899][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.369133][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.397768][ T4284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.434098][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.441074][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.469849][ T4282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.504348][ T4275] team0: Port device team_slave_0 added [ 67.521116][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.528131][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.556660][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.572583][ T4275] team0: Port device team_slave_1 added [ 67.600230][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.607428][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.633811][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.660323][ T4284] device hsr_slave_0 entered promiscuous mode [ 67.667498][ T4284] device hsr_slave_1 entered promiscuous mode [ 67.674248][ T4284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.682033][ T4284] Cannot create hsr debugfs directory [ 67.706868][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.713865][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.739794][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.754031][ T4282] device hsr_slave_0 entered promiscuous mode [ 67.760731][ T4282] device hsr_slave_1 entered promiscuous mode [ 67.768425][ T4282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.776010][ T4282] Cannot create hsr debugfs directory [ 67.795943][ T4273] device hsr_slave_0 entered promiscuous mode [ 67.802492][ T4273] device hsr_slave_1 entered promiscuous mode [ 67.809216][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.816859][ T4273] Cannot create hsr debugfs directory [ 67.832901][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.839958][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.866674][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.914410][ T4283] Bluetooth: hci2: command 0x0409 tx timeout [ 67.993909][ T4283] Bluetooth: hci1: command 0x0409 tx timeout [ 67.993961][ T4290] Bluetooth: hci4: command 0x0409 tx timeout [ 68.000133][ T4283] Bluetooth: hci0: command 0x0409 tx timeout [ 68.006340][ T4289] Bluetooth: hci3: command 0x0409 tx timeout [ 68.039238][ T4275] device hsr_slave_0 entered promiscuous mode [ 68.045874][ T4275] device hsr_slave_1 entered promiscuous mode [ 68.052546][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.061209][ T4275] Cannot create hsr debugfs directory [ 68.182924][ T4274] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.205895][ T4274] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.222921][ T4274] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.231947][ T4274] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.304835][ T4273] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.314649][ T4273] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.332928][ T4273] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.346974][ T4273] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.399855][ T4282] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.409598][ T4282] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.430844][ T4282] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.441996][ T4282] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.485818][ T4284] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.495135][ T4284] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.506204][ T4284] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.553395][ T4284] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.571310][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.617849][ T4275] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.643233][ T4275] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.657515][ T4282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.674824][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.686714][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.695558][ T4275] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.715154][ T4275] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.730949][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.739866][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.752974][ T4282] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.771124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.779732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.829409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.838231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.850607][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.857882][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.870543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.879528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.888165][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.895385][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.903138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.911879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.920282][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.927431][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.935396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.945559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.954249][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.961307][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.969121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.978761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.986722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.994625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.003493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.012884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.020957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.044834][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.058216][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.070818][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.079729][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.088720][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.100326][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.116116][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.137163][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.149300][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.158215][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.167066][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.177218][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.185715][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.194370][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.206925][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.239222][ T4284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.249758][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.265101][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.284222][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.293573][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.302463][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.309626][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.318616][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.329421][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.354468][ T4282] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.374575][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.415046][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.423460][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.432909][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.450240][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.457395][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.466264][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.475786][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.484637][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.493078][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.501646][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.516369][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.528868][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.538140][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.547980][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.556660][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.565346][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.578641][ T4284] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.609926][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.658459][ T4273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.680605][ T4273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.718795][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.737295][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.749586][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.763313][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.772014][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.779146][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.787560][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.796525][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.806855][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.813995][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.822029][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.830715][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.839745][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.849370][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.857768][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.866086][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.878211][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.888670][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.908316][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.918698][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.929829][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.939690][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.956968][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.973208][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.991227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.999900][ T4289] Bluetooth: hci2: command 0x041b tx timeout [ 70.006926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.037848][ T4284] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.051546][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.061515][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.074759][ T4289] Bluetooth: hci3: command 0x041b tx timeout [ 70.083898][ T4289] Bluetooth: hci4: command 0x041b tx timeout [ 70.087536][ T4290] Bluetooth: hci0: command 0x041b tx timeout [ 70.089918][ T4289] Bluetooth: hci1: command 0x041b tx timeout [ 70.103594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.114353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.121800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.139086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.147941][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.155130][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.165022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.173396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.183314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.192371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.201582][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.208720][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.217624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.225292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.232798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.255250][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.287852][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.314299][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.323659][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.387991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.404570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.420443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.438190][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.455779][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.475716][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.496771][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.529906][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.538956][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.553077][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.571569][ T4274] device veth0_vlan entered promiscuous mode [ 70.588748][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.598019][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.607179][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.619458][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.640744][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.650510][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.661122][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.669954][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.678813][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.686720][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.695308][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.703101][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.711243][ T4282] device veth0_vlan entered promiscuous mode [ 70.728769][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.740219][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.761461][ T4282] device veth1_vlan entered promiscuous mode [ 70.770966][ T4274] device veth1_vlan entered promiscuous mode [ 70.796396][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.805944][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.815050][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.823400][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.832619][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.852162][ T4284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.874648][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.883325][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.893305][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.935708][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.945755][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.955152][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.963641][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.974620][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.982788][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.991750][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.999679][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.009063][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.018077][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.029931][ T4274] device veth0_macvtap entered promiscuous mode [ 71.040672][ T4273] device veth0_vlan entered promiscuous mode [ 71.057002][ T4282] device veth0_macvtap entered promiscuous mode [ 71.071535][ T4274] device veth1_macvtap entered promiscuous mode [ 71.102698][ T4284] device veth0_vlan entered promiscuous mode [ 71.122669][ T4273] device veth1_vlan entered promiscuous mode [ 71.135448][ T4282] device veth1_macvtap entered promiscuous mode [ 71.147205][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.157589][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.166689][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.180062][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.189222][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.200443][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.207161][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.207521][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.222210][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.241945][ T4284] device veth1_vlan entered promiscuous mode [ 71.260219][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.271060][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.281289][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.289135][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.297364][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.305544][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.314269][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.324711][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.335811][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.347068][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.362719][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.372737][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.383082][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.391976][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.400755][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.427218][ T4274] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.437468][ T4274] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.448659][ T4274] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.457610][ T4274] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.475009][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.486414][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.497579][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.505261][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.514094][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.522648][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.536148][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.547483][ T4273] device veth0_macvtap entered promiscuous mode [ 71.567037][ T4282] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.578863][ T4282] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.589063][ T4282] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.599274][ T4282] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.625083][ T4273] device veth1_macvtap entered promiscuous mode [ 71.634513][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.642807][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.655090][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.662454][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.672481][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.682165][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.692288][ T4284] device veth0_macvtap entered promiscuous mode [ 71.702563][ T4284] device veth1_macvtap entered promiscuous mode [ 71.711602][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.743626][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.758562][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.770304][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.781501][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.793258][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.842003][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.854949][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.863052][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.872999][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.889294][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.901758][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.912660][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.924147][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.934225][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.944779][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.956779][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.969165][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.984920][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.999249][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.011153][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.022140][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.041166][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.052491][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.063630][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.074157][ T4289] Bluetooth: hci2: command 0x040f tx timeout [ 72.077075][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.142665][ T4284] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.152394][ T4284] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.163616][ T4290] Bluetooth: hci1: command 0x040f tx timeout [ 72.163640][ T4289] Bluetooth: hci3: command 0x040f tx timeout [ 72.169649][ T4290] Bluetooth: hci0: command 0x040f tx timeout [ 72.169682][ T4290] Bluetooth: hci4: command 0x040f tx timeout [ 72.170674][ T4284] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.197217][ T4284] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.209065][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.220660][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.230785][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.242192][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.252048][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.264625][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.275998][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.307072][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.325942][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.351691][ T4273] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.362905][ T4273] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.372623][ T4273] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.381705][ T4273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.424365][ T4346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.424365][ T4329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.424413][ T4346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.427772][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.432343][ T4329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.468817][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.580572][ T4329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.580602][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.598156][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.606344][ T4329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.629585][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.637952][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.646729][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.657379][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.666393][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.675208][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.683687][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.693440][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.709189][ T4329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.715561][ T4275] device veth0_vlan entered promiscuous mode [ 72.742734][ T4329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.764784][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.772624][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.787146][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.804675][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.825607][ T4329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.833452][ T4329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.843403][ T4275] device veth1_vlan entered promiscuous mode [ 72.897850][ T4346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.909178][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.923411][ T4346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.932221][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.968024][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.985177][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.000150][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.012955][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.034943][ T4275] device veth0_macvtap entered promiscuous mode [ 73.054955][ T4360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 73.083966][ T4360] bridge_slave_0: default FDB implementation only supports local addresses [ 73.104789][ T4275] device veth1_macvtap entered promiscuous mode [ 73.189537][ T4360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 73.229536][ T4360] bridge_slave_0: default FDB implementation only supports local addresses [ 73.258154][ T4366] bond0: option arp_validate: invalid value (51459) [ 73.268518][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.288747][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.299443][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.326446][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.338098][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.358857][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.379135][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.389901][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.401794][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.421216][ T4289] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 73.441069][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.450268][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.459838][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.468956][ T72] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.485734][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.498062][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.508573][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.526329][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.536938][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.547986][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.560722][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.571437][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.582695][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.626347][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.638659][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.673082][ T4275] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.694305][ T4275] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.724008][ T4275] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.734191][ T4275] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.805018][ T4381] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 73.968912][ T4354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.017130][ T4354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.061195][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.110666][ T4354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.118986][ T4354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.156887][ T4289] Bluetooth: hci2: command 0x0419 tx timeout [ 74.210400][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.234160][ T4289] Bluetooth: hci4: command 0x0419 tx timeout [ 74.240255][ T4289] Bluetooth: hci0: command 0x0419 tx timeout [ 74.246604][ T4283] Bluetooth: hci1: command 0x0419 tx timeout [ 74.246821][ T4290] Bluetooth: hci3: command 0x0419 tx timeout [ 74.976473][ T4412] tipc: Enabling of bearer rejected, failed to enable media [ 75.153938][ T4319] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 75.376631][ T4319] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 75.417611][ T4319] usb 5-1: config 0 has no interface number 0 [ 75.500154][ T4319] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 75.532246][ T4319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.550820][ T4319] usb 5-1: Product: syz [ 75.565294][ T4319] usb 5-1: Manufacturer: syz [ 75.583921][ T4319] usb 5-1: SerialNumber: syz [ 75.610417][ T4319] usb 5-1: config 0 descriptor?? [ 75.953975][ T4321] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 76.164382][ T4321] usb 2-1: unable to get BOS descriptor or descriptor too short [ 76.204313][ T4321] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 76.212139][ T4321] usb 2-1: can't read configurations, error -71 [ 76.262857][ T4319] asix 5-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 76.282217][ T4319] asix: probe of 5-1:0.251 failed with error -524 [ 76.442788][ T4443] netlink: 'syz.2.25': attribute type 13 has an invalid length. [ 76.492812][ T7] usb 5-1: USB disconnect, device number 2 [ 76.630826][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 76.833182][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.852199][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.413236][ T4455] tipc: Enabling of bearer rejected, failed to enable media [ 78.193892][ T4321] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 78.393864][ T4321] usb 2-1: Using ep0 maxpacket: 16 [ 78.412224][ T4321] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.424295][ T4321] usb 2-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 28 [ 78.440948][ T4321] usb 2-1: config 0 interface 0 has no altsetting 0 [ 78.458709][ T4321] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 78.468273][ T4321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.490572][ T4321] usb 2-1: config 0 descriptor?? [ 78.503658][ T4321] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 78.803798][ T4349] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 78.988590][ T4349] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.006161][ T4349] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.025091][ T4349] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 79.047880][ T4349] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 79.060166][ T4349] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.069814][ T4349] usb 5-1: Product: syz [ 79.078059][ T4349] usb 5-1: Manufacturer: syz [ 79.082884][ T4349] usb 5-1: SerialNumber: syz [ 79.298118][ T4349] snd-usb-6fire 5-1:1.0: unable to receive device firmware state. [ 79.307114][ T4349] snd-usb-6fire: probe of 5-1:1.0 failed with error -121 [ 79.850391][ T4485] capability: warning: `syz.0.40' uses deprecated v2 capabilities in a way that may be insecure [ 79.983897][ T4488] Zero length message leads to an empty skb [ 80.010031][ T4488] lo speed is unknown, defaulting to 1000 [ 80.016404][ T4488] lo speed is unknown, defaulting to 1000 [ 80.028389][ T4488] lo speed is unknown, defaulting to 1000 [ 80.047644][ T4488] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 80.083528][ T4488] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 80.231980][ T4488] lo speed is unknown, defaulting to 1000 [ 80.243433][ T4488] lo speed is unknown, defaulting to 1000 [ 80.254488][ T4488] lo speed is unknown, defaulting to 1000 [ 80.264595][ T4488] lo speed is unknown, defaulting to 1000 [ 80.282076][ T4488] lo speed is unknown, defaulting to 1000 [ 80.976994][ T7] usb 2-1: USB disconnect, device number 4 [ 81.320544][ T4505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.46'. [ 81.343278][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 81.434988][ T4316] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.076180][ T4316] usb 3-1: Using ep0 maxpacket: 32 [ 82.083004][ T4316] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 82.102521][ T4316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.113224][ T4321] usb 5-1: USB disconnect, device number 3 [ 82.177400][ T4505] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 82.203534][ T4316] usb 3-1: config 0 descriptor?? [ 82.252942][ T4316] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 82.523880][ T4321] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 82.543992][ T4317] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 82.715266][ T4321] usb 5-1: Using ep0 maxpacket: 32 [ 82.723596][ T4321] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 82.735772][ T4317] usb 1-1: Using ep0 maxpacket: 32 [ 82.741938][ T4321] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 82.755680][ T4321] usb 5-1: config 0 interface 0 has no altsetting 0 [ 82.762372][ T4321] usb 5-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 82.772457][ T4317] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 82.781195][ T4321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.790006][ T4317] usb 1-1: config 0 has no interface number 0 [ 82.796192][ T4317] usb 1-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 82.811859][ T4321] usb 5-1: config 0 descriptor?? [ 82.821406][ T4317] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 82.831206][ T4317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.839344][ T4317] usb 1-1: Product: syz [ 82.843605][ T4317] usb 1-1: Manufacturer: syz [ 82.848353][ T4317] usb 1-1: SerialNumber: syz [ 82.855198][ T4317] usb 1-1: config 0 descriptor?? [ 82.862718][ T4317] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 83.062974][ T4317] usb 1-1: qt2_setup_urbs - submit read urb failed -8 [ 83.070320][ T4317] quatech2: probe of 1-1:0.51 failed with error -8 [ 83.230501][ T4321] usbhid 5-1:0.0: can't add hid device: -71 [ 83.236655][ T4321] usbhid: probe of 5-1:0.0 failed with error -71 [ 83.244749][ T4321] usb 5-1: USB disconnect, device number 4 [ 83.266344][ T4317] usb 1-1: USB disconnect, device number 2 [ 83.316711][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888056316400: rx timeout, send abort [ 83.825986][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888056316400: abort rx timeout. Force session deactivation [ 83.853734][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 83.863730][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 83.873729][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 83.883729][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 83.893728][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 83.903729][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 83.913729][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 83.923731][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 83.933733][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 83.943744][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 84.177153][ T4316] gspca_vc032x: reg_r err -32 [ 84.183291][ T4316] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.189146][ T4540] device syzkaller0 entered promiscuous mode [ 84.200838][ T4316] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.209279][ T4316] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.216296][ T4316] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.222083][ T4316] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.227599][ T4316] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.233061][ T4316] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.238946][ T4316] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.252896][ T4316] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.260029][ T4316] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.270433][ T4316] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.278482][ T4316] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.287591][ T4316] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.293055][ T4316] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.300256][ T4316] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.306041][ T4316] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.312209][ T4316] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.317866][ T4316] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.323229][ T4316] gspca_vc032x: Unknown sensor... [ 84.324226][ T4321] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 84.328419][ T4316] vc032x: probe of 3-1:0.0 failed with error -22 [ 84.519559][ T4321] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.530647][ T4321] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.542358][ T4321] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 84.558424][ T4321] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 84.567640][ T4321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.575815][ T4321] usb 2-1: Product: syz [ 84.579988][ T4321] usb 2-1: Manufacturer: syz [ 84.584675][ T4321] usb 2-1: SerialNumber: syz [ 84.750258][ T4317] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 84.777468][ T4554] binder: BINDER_SET_CONTEXT_MGR already set [ 84.785186][ T4554] binder: 4553:4554 ioctl 4018620d 200000001000 returned -16 [ 84.795235][ T4321] snd-usb-6fire 2-1:1.0: unable to receive device firmware state. [ 84.803139][ T4321] snd-usb-6fire: probe of 2-1:1.0 failed with error -121 [ 84.945338][ T4317] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.958885][ T4317] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 84.968141][ T4317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.983804][ T4317] usb 1-1: Product: syz [ 84.988007][ T4317] usb 1-1: Manufacturer: syz [ 84.992628][ T4317] usb 1-1: SerialNumber: syz [ 85.229531][ T4317] snd-usb-6fire 1-1:1.0: unable to receive device firmware state. [ 85.239877][ T4317] snd-usb-6fire: probe of 1-1:1.0 failed with error -32 [ 85.271185][ T4317] usb 1-1: USB disconnect, device number 3 [ 85.392952][ T4568] device syzkaller0 entered promiscuous mode [ 85.407592][ T4568] tipc: Started in network mode [ 85.412662][ T4568] tipc: Node identity 6a146addac8a, cluster identity 4711 [ 85.422070][ T4568] tipc: Enabled bearer , priority 0 [ 85.431555][ T4567] tipc: Resetting bearer [ 85.455019][ T4567] tipc: Disabling bearer [ 85.886811][ T4580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.72'. [ 86.130242][ T4317] usb 3-1: USB disconnect, device number 2 [ 86.557322][ T126] cfg80211: failed to load regulatory.db [ 87.003675][ T4598] device syzkaller0 entered promiscuous mode [ 87.093080][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805740a400: rx timeout, send abort [ 87.134165][ T126] usb 2-1: USB disconnect, device number 5 [ 87.259126][ T4608] device syzkaller0 entered promiscuous mode [ 87.301107][ T4608] tipc: Started in network mode [ 87.306239][ T4608] tipc: Node identity 22358f9e30fd, cluster identity 4711 [ 87.314249][ T4608] tipc: Enabled bearer , priority 0 [ 87.337783][ T4606] tipc: Resetting bearer [ 87.369556][ T4606] tipc: Disabling bearer [ 87.493925][ T7] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 87.601498][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805740a400: abort rx timeout. Force session deactivation [ 87.679136][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.705889][ T7] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 87.741498][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.776973][ T7] usb 5-1: Product: syz [ 87.789951][ T7] usb 5-1: Manufacturer: syz [ 87.802732][ T7] usb 5-1: SerialNumber: syz [ 88.029387][ T7] snd-usb-6fire 5-1:1.0: unable to receive device firmware state. [ 88.042017][ T7] snd-usb-6fire: probe of 5-1:1.0 failed with error -32 [ 88.104077][ T7] usb 5-1: USB disconnect, device number 5 [ 88.625444][ T4631] device syzkaller0 entered promiscuous mode [ 90.943813][ T4321] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 91.145082][ T4321] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 91.178293][ T4321] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 91.259880][ T4321] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 91.331335][ T4321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.402758][ T4321] usb 1-1: probing VID:PID(0424:012C) [ 91.433218][ T4321] usb 1-1: vub300 testing BULK IN EndPoint(0) 81 [ 91.457486][ T4321] usb 1-1: vub300 testing BULK OUT EndPoint(1) 02 [ 91.487477][ T4321] usb 1-1: vub300 testing BULK IN EndPoint(2) 83 [ 91.568113][ T4321] usb 1-1: vub300 testing BULK OUT EndPoint(3) 04 [ 91.603827][ T4321] usb 1-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 91.822326][ T4321] usb 1-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 92.022987][ T4321] usb 1-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 92.684125][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888054e59c00: rx timeout, send abort [ 92.857078][ T4321] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 92.886197][ T4321] usb 1-1: USB disconnect, device number 4 [ 92.963542][ T4321] USB vub300 remote SDIO host controller[0] now disconnected [ 92.996796][ T4710] netlink: 28 bytes leftover after parsing attributes in process `syz.3.114'. [ 93.034179][ C1] [ 93.036550][ C1] ================================ [ 93.041664][ C1] WARNING: inconsistent lock state [ 93.046788][ C1] syzkaller #0 Not tainted [ 93.051209][ C1] -------------------------------- [ 93.056319][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 93.063162][ C1] syz.3.114/4710 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 93.069387][ C1] ffff888054868648 ((work_completion)(&(&host->detect)->work)){+.?.}-{0:0}, at: __flush_work+0x109/0xac0 [ 93.080627][ C1] {SOFTIRQ-ON-W} state was registered at: [ 93.086326][ C1] lock_acquire+0x1bb/0x4a0 [ 93.090911][ C1] __flush_work+0x122/0xac0 [ 93.095489][ C1] __cancel_work_timer+0x3f4/0x560 [ 93.100674][ C1] mmc_stop_host+0xd5/0x460 [ 93.105252][ C1] mmc_remove_host+0x11/0x60 [ 93.109934][ C1] vub300_disconnect+0x14b/0x2e0 [ 93.114948][ C1] usb_unbind_interface+0x203/0x870 [ 93.120225][ C1] device_release_driver_internal+0x4cf/0x7c0 [ 93.126374][ C1] bus_remove_device+0x2dd/0x400 [ 93.131385][ C1] device_del+0x63f/0xa80 [ 93.135790][ C1] usb_disable_device+0x3e7/0x8a0 [ 93.140887][ C1] usb_disconnect+0x33c/0x8a0 [ 93.145639][ C1] hub_event+0x1d27/0x5200 [ 93.150132][ C1] process_one_work+0x8ab/0x1160 [ 93.155143][ C1] worker_thread+0xd6e/0x12a0 [ 93.159892][ C1] kthread+0x29d/0x330 [ 93.164029][ C1] ret_from_fork+0x1f/0x30 [ 93.168535][ C1] irq event stamp: 1860 [ 93.172677][ C1] hardirqs last enabled at (1860): [] __cancel_work_timer+0x36a/0x560 [ 93.182466][ C1] hardirqs last disabled at (1859): [] try_to_grab_pending+0xfa/0x890 [ 93.192186][ C1] softirqs last enabled at (1090): [] __irq_exit_rcu+0x13b/0x230 [ 93.201571][ C1] softirqs last disabled at (1793): [] __irq_exit_rcu+0x13b/0x230 [ 93.210939][ C1] [ 93.210939][ C1] other info that might help us debug this: [ 93.218983][ C1] Possible unsafe locking scenario: [ 93.218983][ C1] [ 93.226420][ C1] CPU0 [ 93.229689][ C1] ---- [ 93.232958][ C1] lock((work_completion)(&(&host->detect)->work)); [ 93.239639][ C1] [ 93.243079][ C1] lock((work_completion)(&(&host->detect)->work)); [ 93.249922][ C1] [ 93.249922][ C1] *** DEADLOCK *** [ 93.249922][ C1] [ 93.258060][ C1] 4 locks held by syz.3.114/4710: [ 93.263071][ C1] #0: ffff88807f600158 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x177/0x970 [ 93.272116][ C1] #1: ffff88801c2df198 (ptlock_ptr(page)#2){+.+.}-{2:2}, at: unmap_page_range+0x99a/0x25b0 [ 93.282208][ C1] #2: ffffffff8cb2dc20 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xcd/0x420 [ 93.291597][ C1] #3: ffffc900001e0bc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xcf/0x670 [ 93.302019][ C1] [ 93.302019][ C1] stack backtrace: [ 93.307914][ C1] CPU: 1 PID: 4710 Comm: syz.3.114 Not tainted syzkaller #0 [ 93.315188][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.325278][ C1] Call Trace: [ 93.328555][ C1] [ 93.331387][ C1] dump_stack_lvl+0x188/0x24e [ 93.336065][ C1] ? show_regs_print_info+0x12/0x12 [ 93.341263][ C1] ? unwind_get_return_address+0x49/0x80 [ 93.346886][ C1] valid_state+0x13b/0x1d0 [ 93.351316][ C1] mark_lock_irq+0xa9/0x900 [ 93.355814][ C1] ? stack_trace_save+0xa6/0xf0 [ 93.360653][ C1] ? save_trace+0xbb0/0xbb0 [ 93.365147][ C1] ? save_trace+0x5a/0xbb0 [ 93.369557][ C1] mark_lock+0x208/0x320 [ 93.373801][ C1] __lock_acquire+0xce0/0x7c40 [ 93.378594][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 93.383621][ C1] ? verify_lock_unused+0x140/0x140 [ 93.388838][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 93.393857][ C1] ? debug_object_assert_init+0x1ed/0x300 [ 93.399562][ C1] lock_acquire+0x1bb/0x4a0 [ 93.404058][ C1] ? __flush_work+0x109/0xac0 [ 93.408730][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 93.413916][ C1] ? read_lock_is_recursive+0x10/0x10 [ 93.419280][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 93.425163][ C1] ? _raw_spin_unlock+0x40/0x40 [ 93.430005][ C1] ? slab_free_freelist_hook+0x133/0x1b0 [ 93.435626][ C1] ? kobject_put+0x25c/0x450 [ 93.440205][ C1] ? vub300_inactivity_timer_expired+0x190/0x3e0 [ 93.446523][ C1] ? call_timer_fn+0x1ac/0x670 [ 93.451363][ C1] ? __flush_work+0x109/0xac0 [ 93.456027][ C1] __flush_work+0x122/0xac0 [ 93.460514][ C1] ? __flush_work+0x109/0xac0 [ 93.465178][ C1] ? flush_work+0x20/0x20 [ 93.469493][ C1] ? __timer_delete+0x6c/0x220 [ 93.474241][ C1] ? mark_lock+0x94/0x320 [ 93.478563][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 93.484532][ C1] ? mod_delayed_work_on+0x1b0/0x1b0 [ 93.489804][ C1] ? lock_chain_count+0x20/0x20 [ 93.494644][ C1] ? kasan_quarantine_put+0xd4/0x210 [ 93.499915][ C1] ? __cancel_work_timer+0x36a/0x560 [ 93.505186][ C1] __cancel_work_timer+0x3f4/0x560 [ 93.510288][ C1] ? cancel_work_sync+0x20/0x20 [ 93.515124][ C1] ? kobject_put+0x25c/0x450 [ 93.519727][ C1] ? __kmem_cache_free+0xb6/0x200 [ 93.524760][ C1] ? kobject_put+0x41d/0x450 [ 93.529344][ C1] mmc_free_host+0x15/0x30 [ 93.533750][ C1] call_timer_fn+0x1ac/0x670 [ 93.538332][ C1] ? kref_get+0x70/0x70 [ 93.542476][ C1] ? call_timer_fn+0xcf/0x670 [ 93.547138][ C1] ? __run_timers+0x810/0x810 [ 93.551804][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 93.556991][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 93.562186][ C1] ? kref_get+0x70/0x70 [ 93.566343][ C1] __run_timers+0x56c/0x810 [ 93.570845][ C1] ? detach_timer+0x350/0x350 [ 93.575512][ C1] ? lock_chain_count+0x20/0x20 [ 93.580354][ C1] run_timer_softirq+0x63/0xf0 [ 93.585104][ C1] handle_softirqs+0x291/0x910 [ 93.589856][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 93.594693][ C1] ? do_softirq+0x210/0x210 [ 93.599182][ C1] ? hrtimer_interrupt+0x775/0x980 [ 93.604282][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 93.609465][ C1] __irq_exit_rcu+0x13b/0x230 [ 93.614137][ C1] ? irq_exit_rcu+0x20/0x20 [ 93.618632][ C1] irq_exit_rcu+0x5/0x20 [ 93.622864][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 93.628486][ C1] [ 93.631403][ C1] [ 93.634321][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 93.640290][ C1] RIP: 0010:lock_acquire+0x225/0x4a0 [ 93.645567][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 93.665190][ C1] RSP: 0018:ffffc9000552f2c0 EFLAGS: 00000206 [ 93.671269][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0e61ad4219301200 [ 93.679236][ C1] RDX: 0000000000000000 RSI: ffffffff8a8c29a0 RDI: ffffffff8adf6120 [ 93.687193][ C1] RBP: ffffc9000552f3e0 R08: dffffc0000000000 R09: 1ffffffff2162448 [ 93.695160][ C1] R10: dffffc0000000000 R11: fffffbfff2162449 R12: 0000000000000001 [ 93.703120][ C1] R13: 1ffff92000aa5e64 R14: 0000000000000246 R15: dffffc0000000000 [ 93.711098][ C1] ? read_lock_is_recursive+0x10/0x10 [ 93.716464][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 93.721477][ C1] ? pfn_valid+0xcd/0x420 [ 93.725799][ C1] pfn_valid+0xe9/0x420 [ 93.729946][ C1] ? pfn_valid+0xcd/0x420 [ 93.734263][ C1] page_table_check_clear+0x1e/0x6b0 [ 93.739538][ C1] ? __page_table_check_pte_clear+0x3f/0x70 [ 93.745422][ C1] unmap_page_range+0x1905/0x25b0 [ 93.750448][ C1] unmap_vmas+0x260/0x390 [ 93.754769][ C1] ? unmap_vmas+0x1bd/0x390 [ 93.759267][ C1] ? unmap_page_range+0x25b0/0x25b0 [ 93.764486][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 93.769507][ C1] exit_mmap+0x20d/0x970 [ 93.773739][ C1] ? vm_brk+0x20/0x20 [ 93.777710][ C1] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 93.783332][ C1] ? exit_mm+0x23d/0x350 [ 93.787570][ C1] ? uprobe_clear_state+0x274/0x290 [ 93.792768][ C1] __mmput+0x118/0x3a0 [ 93.796829][ C1] exit_mm+0x24d/0x350 [ 93.800890][ C1] ? sysctl_delayacct+0x220/0x220 [ 93.805909][ C1] ? do_exit+0x2570/0x2570 [ 93.810323][ C1] ? tty_audit_exit+0x149/0x1f0 [ 93.815162][ C1] do_exit+0x958/0x2570 [ 93.819310][ C1] ? put_task_struct+0x80/0x80 [ 93.824074][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 93.830047][ C1] ? lock_chain_count+0x20/0x20 [ 93.834893][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 93.839905][ C1] do_group_exit+0x229/0x2e0 [ 93.844522][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 93.849710][ C1] get_signal+0x1259/0x1340 [ 93.854207][ C1] ? futex_wake+0x426/0x4f0 [ 93.858699][ C1] arch_do_signal_or_restart+0xc4/0x1310 [ 93.864321][ C1] ? do_futex+0x2e2/0x320 [ 93.868636][ C1] ? get_sigframe_size+0x10/0x10 [ 93.873562][ C1] ? __ia32_sys_get_robust_list+0x100/0x100 [ 93.879440][ C1] ? fput+0x150/0x1a0 [ 93.883415][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 93.888864][ C1] exit_to_user_mode_loop+0x70/0x110 [ 93.894142][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 93.899680][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 93.905126][ C1] do_syscall_64+0x58/0xa0 [ 93.909533][ C1] ? clear_bhb_loop+0x60/0xb0 [ 93.914203][ C1] ? clear_bhb_loop+0x60/0xb0 [ 93.918873][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.924757][ C1] RIP: 0033:0x7f4e1b39e0d9 [ 93.929178][ C1] Code: Unable to access opcode bytes at 0x7f4e1b39e0af. [ 93.936176][ C1] RSP: 002b:00007f4e1c1d40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 93.944578][ C1] RAX: 0000000000000001 RBX: 00007f4e1b625fa8 RCX: 00007f4e1b39e0d9 [ 93.952540][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4e1b625fac [ 93.960512][ C1] RBP: 00007f4e1b625fa0 R08: 003a2b4e07c1852c R09: 0000000000000000 [ 93.968508][ C1] R10: 0000000000000050 R11: 0000000000000246 R12: 0000000000000000 [ 93.976475][ C1] R13: 00007f4e1b626038 R14: 00007ffe0b9a40b0 R15: 00007ffe0b9a4198 [ 93.984444][ C1] [ 93.987577][ C1] BUG: sleeping function called from invalid context at kernel/workqueue.c:3013 [ 93.992099][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888054e59c00: abort rx timeout. Force session deactivation [ 93.996634][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 4710, name: syz.3.114 [ 94.015793][ C1] preempt_count: 102, expected: 0 [ 94.020821][ C1] RCU nest depth: 0, expected: 0 [ 94.025783][ C1] INFO: lockdep is turned off. [ 94.030553][ C1] Preemption disabled at: [ 94.030561][ C1] [<0000000000000000>] 0x0 [ 94.039321][ C1] CPU: 1 PID: 4710 Comm: syz.3.114 Not tainted syzkaller #0 [ 94.046609][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.056669][ C1] Call Trace: [ 94.059961][ C1] [ 94.062806][ C1] dump_stack_lvl+0x188/0x24e [ 94.067504][ C1] ? show_regs_print_info+0x12/0x12 [ 94.072715][ C1] ? load_image+0x410/0x410 [ 94.077230][ C1] __might_resched+0x489/0x5f0 [ 94.081987][ C1] ? __might_sleep+0xd0/0xd0 [ 94.086572][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 94.091584][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 94.097495][ C1] ? _raw_spin_unlock+0x40/0x40 [ 94.102338][ C1] ? slab_free_freelist_hook+0x133/0x1b0 [ 94.107985][ C1] ? kobject_put+0x25c/0x450 [ 94.112566][ C1] ? vub300_inactivity_timer_expired+0x190/0x3e0 [ 94.118885][ C1] ? call_timer_fn+0x1ac/0x670 [ 94.123637][ C1] ? __flush_work+0x109/0xac0 [ 94.128305][ C1] __flush_work+0x142/0xac0 [ 94.132798][ C1] ? flush_work+0x20/0x20 [ 94.137116][ C1] ? __timer_delete+0x6c/0x220 [ 94.141867][ C1] ? mark_lock+0x94/0x320 [ 94.146189][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 94.152161][ C1] ? mod_delayed_work_on+0x1b0/0x1b0 [ 94.157433][ C1] ? lock_chain_count+0x20/0x20 [ 94.162275][ C1] ? kasan_quarantine_put+0xd4/0x210 [ 94.167552][ C1] ? __cancel_work_timer+0x36a/0x560 [ 94.172821][ C1] __cancel_work_timer+0x3f4/0x560 [ 94.177926][ C1] ? cancel_work_sync+0x20/0x20 [ 94.182762][ C1] ? kobject_put+0x25c/0x450 [ 94.187350][ C1] ? __kmem_cache_free+0xb6/0x200 [ 94.192363][ C1] ? kobject_put+0x41d/0x450 [ 94.196942][ C1] mmc_free_host+0x15/0x30 [ 94.201347][ C1] call_timer_fn+0x1ac/0x670 [ 94.205926][ C1] ? kref_get+0x70/0x70 [ 94.210076][ C1] ? call_timer_fn+0xcf/0x670 [ 94.214738][ C1] ? __run_timers+0x810/0x810 [ 94.219411][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 94.224622][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 94.229807][ C1] ? kref_get+0x70/0x70 [ 94.233953][ C1] __run_timers+0x56c/0x810 [ 94.238450][ C1] ? detach_timer+0x350/0x350 [ 94.243117][ C1] ? lock_chain_count+0x20/0x20 [ 94.247963][ C1] run_timer_softirq+0x63/0xf0 [ 94.252717][ C1] handle_softirqs+0x291/0x910 [ 94.257470][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 94.262318][ C1] ? do_softirq+0x210/0x210 [ 94.266821][ C1] ? hrtimer_interrupt+0x775/0x980 [ 94.271921][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 94.277105][ C1] __irq_exit_rcu+0x13b/0x230 [ 94.281785][ C1] ? irq_exit_rcu+0x20/0x20 [ 94.286294][ C1] irq_exit_rcu+0x5/0x20 [ 94.290541][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 94.296181][ C1] [ 94.299109][ C1] [ 94.302026][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 94.308003][ C1] RIP: 0010:lock_acquire+0x225/0x4a0 [ 94.313283][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 94.332877][ C1] RSP: 0018:ffffc9000552f2c0 EFLAGS: 00000206 [ 94.338932][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0e61ad4219301200 [ 94.346890][ C1] RDX: 0000000000000000 RSI: ffffffff8a8c29a0 RDI: ffffffff8adf6120 [ 94.354873][ C1] RBP: ffffc9000552f3e0 R08: dffffc0000000000 R09: 1ffffffff2162448 [ 94.362830][ C1] R10: dffffc0000000000 R11: fffffbfff2162449 R12: 0000000000000001 [ 94.370791][ C1] R13: 1ffff92000aa5e64 R14: 0000000000000246 R15: dffffc0000000000 [ 94.378760][ C1] ? read_lock_is_recursive+0x10/0x10 [ 94.384129][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 94.389146][ C1] ? pfn_valid+0xcd/0x420 [ 94.393489][ C1] pfn_valid+0xe9/0x420 [ 94.397638][ C1] ? pfn_valid+0xcd/0x420 [ 94.401963][ C1] page_table_check_clear+0x1e/0x6b0 [ 94.407238][ C1] ? __page_table_check_pte_clear+0x3f/0x70 [ 94.413120][ C1] unmap_page_range+0x1905/0x25b0 [ 94.418145][ C1] unmap_vmas+0x260/0x390 [ 94.422814][ C1] ? unmap_vmas+0x1bd/0x390 [ 94.427310][ C1] ? unmap_page_range+0x25b0/0x25b0 [ 94.432499][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 94.437519][ C1] exit_mmap+0x20d/0x970 [ 94.441753][ C1] ? vm_brk+0x20/0x20 [ 94.445726][ C1] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 94.451346][ C1] ? exit_mm+0x23d/0x350 [ 94.455582][ C1] ? uprobe_clear_state+0x274/0x290 [ 94.460775][ C1] __mmput+0x118/0x3a0 [ 94.464831][ C1] exit_mm+0x24d/0x350 [ 94.468891][ C1] ? sysctl_delayacct+0x220/0x220 [ 94.473909][ C1] ? do_exit+0x2570/0x2570 [ 94.478323][ C1] ? tty_audit_exit+0x149/0x1f0 [ 94.483184][ C1] do_exit+0x958/0x2570 [ 94.487366][ C1] ? put_task_struct+0x80/0x80 [ 94.492398][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 94.498383][ C1] ? lock_chain_count+0x20/0x20 [ 94.503233][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 94.508251][ C1] do_group_exit+0x229/0x2e0 [ 94.512835][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 94.518024][ C1] get_signal+0x1259/0x1340 [ 94.522525][ C1] ? futex_wake+0x426/0x4f0 [ 94.527036][ C1] arch_do_signal_or_restart+0xc4/0x1310 [ 94.532664][ C1] ? do_futex+0x2e2/0x320 [ 94.536981][ C1] ? get_sigframe_size+0x10/0x10 [ 94.541908][ C1] ? __ia32_sys_get_robust_list+0x100/0x100 [ 94.547796][ C1] ? fput+0x150/0x1a0 [ 94.551793][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 94.557264][ C1] exit_to_user_mode_loop+0x70/0x110 [ 94.562555][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 94.568100][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 94.573560][ C1] do_syscall_64+0x58/0xa0 [ 94.577978][ C1] ? clear_bhb_loop+0x60/0xb0 [ 94.582649][ C1] ? clear_bhb_loop+0x60/0xb0 [ 94.587322][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.593206][ C1] RIP: 0033:0x7f4e1b39e0d9 [ 94.597609][ C1] Code: Unable to access opcode bytes at 0x7f4e1b39e0af. [ 94.604611][ C1] RSP: 002b:00007f4e1c1d40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 94.613013][ C1] RAX: 0000000000000001 RBX: 00007f4e1b625fa8 RCX: 00007f4e1b39e0d9 [ 94.620973][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4e1b625fac [ 94.628931][ C1] RBP: 00007f4e1b625fa0 R08: 003a2b4e07c1852c R09: 0000000000000000 [ 94.636892][ C1] R10: 0000000000000050 R11: 0000000000000246 R12: 0000000000000000 [ 94.644854][ C1] R13: 00007f4e1b626038 R14: 00007ffe0b9a40b0 R15: 00007ffe0b9a4198 [ 94.652817][ C1] [ 94.655877][ C1] ODEBUG: object ffffc900001e09a0 is NOT on stack ffffc90005528000, but annotated. [ 94.665454][ C1] ------------[ cut here ]------------ [ 94.670910][ C1] WARNING: CPU: 1 PID: 4710 at lib/debugobjects.c:558 __debug_object_init+0x18e/0x440 [ 94.680448][ C1] Modules linked in: [ 94.684330][ C1] CPU: 1 PID: 4710 Comm: syz.3.114 Tainted: G W syzkaller #0 [ 94.693097][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.703139][ C1] RIP: 0010:__debug_object_init+0x18e/0x440 [ 94.709025][ C1] Code: 24 04 74 2f 41 ff c6 44 89 35 9e f3 dd 12 48 c7 c1 c0 69 df 8a 48 c7 c7 20 6a df 8a 84 c0 48 0f 45 f9 48 89 de e8 32 83 0b 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f [ 94.728620][ C1] RSP: 0018:ffffc900001e0908 EFLAGS: 00010046 [ 94.734677][ C1] RAX: 0000000000000050 RBX: ffffc900001e09a0 RCX: 0e61ad4219301200 [ 94.742637][ C1] RDX: 0000000000000100 RSI: 0000000000000103 RDI: 0000000000000000 [ 94.750594][ C1] RBP: dffffc0000000000 R08: ffffc900001e0587 R09: 1ffff9200003c0b0 [ 94.758553][ C1] R10: dffffc0000000000 R11: fffff5200003c0b1 R12: ffff88807c279e20 [ 94.766514][ C1] R13: ffff88802f5f4540 R14: 0000000000000001 R15: ffffffff8a8d30a0 [ 94.774474][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 94.783390][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.789976][ C1] CR2: 000000110c2d7e33 CR3: 000000007ca43000 CR4: 00000000003506e0 [ 94.797965][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 94.805932][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 94.813899][ C1] Call Trace: [ 94.817177][ C1] [ 94.820010][ C1] __synchronize_srcu+0x227/0x350 [ 94.825029][ C1] ? synchronize_srcu_expedited+0x20/0x20 [ 94.830744][ C1] ? _raw_spin_unlock+0x40/0x40 [ 94.835589][ C1] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 94.841122][ C1] ? synchronize_srcu+0x18f/0x1b0 [ 94.846140][ C1] wakeup_source_unregister+0x112/0x190 [ 94.851681][ C1] mmc_host_classdev_release+0x43/0xf0 [ 94.857127][ C1] ? mmc_free_host+0x30/0x30 [ 94.861707][ C1] device_release+0x92/0x1c0 [ 94.866291][ C1] kobject_put+0x217/0x450 [ 94.870696][ C1] call_timer_fn+0x1ac/0x670 [ 94.875273][ C1] ? kref_get+0x70/0x70 [ 94.879419][ C1] ? call_timer_fn+0xcf/0x670 [ 94.884082][ C1] ? __run_timers+0x810/0x810 [ 94.888749][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 94.893934][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 94.899125][ C1] ? kref_get+0x70/0x70 [ 94.903279][ C1] __run_timers+0x56c/0x810 [ 94.907775][ C1] ? detach_timer+0x350/0x350 [ 94.912442][ C1] ? lock_chain_count+0x20/0x20 [ 94.917286][ C1] run_timer_softirq+0x63/0xf0 [ 94.922033][ C1] handle_softirqs+0x291/0x910 [ 94.926786][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 94.931622][ C1] ? do_softirq+0x210/0x210 [ 94.936111][ C1] ? hrtimer_interrupt+0x775/0x980 [ 94.941208][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 94.946390][ C1] __irq_exit_rcu+0x13b/0x230 [ 94.951054][ C1] ? irq_exit_rcu+0x20/0x20 [ 94.955543][ C1] irq_exit_rcu+0x5/0x20 [ 94.959774][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 94.965395][ C1] [ 94.968314][ C1] [ 94.971243][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 94.977215][ C1] RIP: 0010:lock_acquire+0x225/0x4a0 [ 94.982499][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 95.002102][ C1] RSP: 0018:ffffc9000552f2c0 EFLAGS: 00000206 [ 95.008158][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0e61ad4219301200 [ 95.016116][ C1] RDX: 0000000000000000 RSI: ffffffff8a8c29a0 RDI: ffffffff8adf6120 [ 95.024074][ C1] RBP: ffffc9000552f3e0 R08: dffffc0000000000 R09: 1ffffffff2162448 [ 95.032034][ C1] R10: dffffc0000000000 R11: fffffbfff2162449 R12: 0000000000000001 [ 95.039998][ C1] R13: 1ffff92000aa5e64 R14: 0000000000000246 R15: dffffc0000000000 [ 95.047967][ C1] ? read_lock_is_recursive+0x10/0x10 [ 95.053346][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 95.058382][ C1] ? pfn_valid+0xcd/0x420 [ 95.062705][ C1] pfn_valid+0xe9/0x420 [ 95.066852][ C1] ? pfn_valid+0xcd/0x420 [ 95.071172][ C1] page_table_check_clear+0x1e/0x6b0 [ 95.076449][ C1] ? __page_table_check_pte_clear+0x3f/0x70 [ 95.082334][ C1] unmap_page_range+0x1905/0x25b0 [ 95.087360][ C1] unmap_vmas+0x260/0x390 [ 95.091692][ C1] ? unmap_vmas+0x1bd/0x390 [ 95.096190][ C1] ? unmap_page_range+0x25b0/0x25b0 [ 95.101378][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 95.106399][ C1] exit_mmap+0x20d/0x970 [ 95.110634][ C1] ? vm_brk+0x20/0x20 [ 95.114607][ C1] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 95.120228][ C1] ? exit_mm+0x23d/0x350 [ 95.124466][ C1] ? uprobe_clear_state+0x274/0x290 [ 95.129658][ C1] __mmput+0x118/0x3a0 [ 95.133715][ C1] exit_mm+0x24d/0x350 [ 95.137776][ C1] ? sysctl_delayacct+0x220/0x220 [ 95.142791][ C1] ? do_exit+0x2570/0x2570 [ 95.147202][ C1] ? tty_audit_exit+0x149/0x1f0 [ 95.152040][ C1] do_exit+0x958/0x2570 [ 95.156190][ C1] ? put_task_struct+0x80/0x80 [ 95.160950][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 95.166920][ C1] ? lock_chain_count+0x20/0x20 [ 95.171766][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 95.176889][ C1] do_group_exit+0x229/0x2e0 [ 95.181493][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 95.186693][ C1] get_signal+0x1259/0x1340 [ 95.191203][ C1] ? futex_wake+0x426/0x4f0 [ 95.195697][ C1] arch_do_signal_or_restart+0xc4/0x1310 [ 95.201323][ C1] ? do_futex+0x2e2/0x320 [ 95.205639][ C1] ? get_sigframe_size+0x10/0x10 [ 95.210566][ C1] ? __ia32_sys_get_robust_list+0x100/0x100 [ 95.216445][ C1] ? fput+0x150/0x1a0 [ 95.220420][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 95.225878][ C1] exit_to_user_mode_loop+0x70/0x110 [ 95.231158][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 95.236693][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 95.242159][ C1] do_syscall_64+0x58/0xa0 [ 95.246583][ C1] ? clear_bhb_loop+0x60/0xb0 [ 95.251263][ C1] ? clear_bhb_loop+0x60/0xb0 [ 95.255940][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 95.261827][ C1] RIP: 0033:0x7f4e1b39e0d9 [ 95.266229][ C1] Code: Unable to access opcode bytes at 0x7f4e1b39e0af. [ 95.273233][ C1] RSP: 002b:00007f4e1c1d40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 95.281659][ C1] RAX: 0000000000000001 RBX: 00007f4e1b625fa8 RCX: 00007f4e1b39e0d9 [ 95.289633][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4e1b625fac [ 95.297609][ C1] RBP: 00007f4e1b625fa0 R08: 003a2b4e07c1852c R09: 0000000000000000 [ 95.305578][ C1] R10: 0000000000000050 R11: 0000000000000246 R12: 0000000000000000 [ 95.313542][ C1] R13: 00007f4e1b626038 R14: 00007ffe0b9a40b0 R15: 00007ffe0b9a4198 [ 95.321508][ C1] [ 95.324524][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 95.331794][ C1] CPU: 1 PID: 4710 Comm: syz.3.114 Tainted: G W syzkaller #0 [ 95.340539][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.350580][ C1] Call Trace: [ 95.353877][ C1] [ 95.356712][ C1] dump_stack_lvl+0x188/0x24e [ 95.361392][ C1] ? memcpy+0x3c/0x60 [ 95.365362][ C1] ? show_regs_print_info+0x12/0x12 [ 95.370555][ C1] ? load_image+0x410/0x410 [ 95.375051][ C1] panic+0x2d3/0x710 [ 95.378933][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 95.383432][ C1] __warn+0x2f8/0x4f0 [ 95.387430][ C1] ? __debug_object_init+0x18e/0x440 [ 95.392702][ C1] ? __debug_object_init+0x18e/0x440 [ 95.397971][ C1] report_bug+0x2ba/0x4f0 [ 95.402295][ C1] ? __debug_object_init+0x18e/0x440 [ 95.407575][ C1] handle_bug+0x3a/0x70 [ 95.411721][ C1] exc_invalid_op+0x16/0x40 [ 95.416215][ C1] asm_exc_invalid_op+0x16/0x20 [ 95.421060][ C1] RIP: 0010:__debug_object_init+0x18e/0x440 [ 95.426942][ C1] Code: 24 04 74 2f 41 ff c6 44 89 35 9e f3 dd 12 48 c7 c1 c0 69 df 8a 48 c7 c7 20 6a df 8a 84 c0 48 0f 45 f9 48 89 de e8 32 83 0b 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f [ 95.446538][ C1] RSP: 0018:ffffc900001e0908 EFLAGS: 00010046 [ 95.452592][ C1] RAX: 0000000000000050 RBX: ffffc900001e09a0 RCX: 0e61ad4219301200 [ 95.460549][ C1] RDX: 0000000000000100 RSI: 0000000000000103 RDI: 0000000000000000 [ 95.468803][ C1] RBP: dffffc0000000000 R08: ffffc900001e0587 R09: 1ffff9200003c0b0 [ 95.476774][ C1] R10: dffffc0000000000 R11: fffff5200003c0b1 R12: ffff88807c279e20 [ 95.484741][ C1] R13: ffff88802f5f4540 R14: 0000000000000001 R15: ffffffff8a8d30a0 [ 95.492713][ C1] ? __debug_object_init+0x18e/0x440 [ 95.497998][ C1] __synchronize_srcu+0x227/0x350 [ 95.503022][ C1] ? synchronize_srcu_expedited+0x20/0x20 [ 95.508739][ C1] ? _raw_spin_unlock+0x40/0x40 [ 95.513589][ C1] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 95.519124][ C1] ? synchronize_srcu+0x18f/0x1b0 [ 95.524138][ C1] wakeup_source_unregister+0x112/0x190 [ 95.529676][ C1] mmc_host_classdev_release+0x43/0xf0 [ 95.535129][ C1] ? mmc_free_host+0x30/0x30 [ 95.539709][ C1] device_release+0x92/0x1c0 [ 95.544309][ C1] kobject_put+0x217/0x450 [ 95.548739][ C1] call_timer_fn+0x1ac/0x670 [ 95.553333][ C1] ? kref_get+0x70/0x70 [ 95.557491][ C1] ? call_timer_fn+0xcf/0x670 [ 95.562160][ C1] ? __run_timers+0x810/0x810 [ 95.566828][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 95.572025][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 95.577215][ C1] ? kref_get+0x70/0x70 [ 95.581364][ C1] __run_timers+0x56c/0x810 [ 95.585859][ C1] ? detach_timer+0x350/0x350 [ 95.590524][ C1] ? lock_chain_count+0x20/0x20 [ 95.595373][ C1] run_timer_softirq+0x63/0xf0 [ 95.600127][ C1] handle_softirqs+0x291/0x910 [ 95.604884][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 95.609811][ C1] ? do_softirq+0x210/0x210 [ 95.614303][ C1] ? hrtimer_interrupt+0x775/0x980 [ 95.619403][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 95.624593][ C1] __irq_exit_rcu+0x13b/0x230 [ 95.629263][ C1] ? irq_exit_rcu+0x20/0x20 [ 95.633776][ C1] irq_exit_rcu+0x5/0x20 [ 95.638019][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 95.643642][ C1] [ 95.646561][ C1] [ 95.649484][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 95.655456][ C1] RIP: 0010:lock_acquire+0x225/0x4a0 [ 95.660737][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 95.680330][ C1] RSP: 0018:ffffc9000552f2c0 EFLAGS: 00000206 [ 95.686392][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0e61ad4219301200 [ 95.694352][ C1] RDX: 0000000000000000 RSI: ffffffff8a8c29a0 RDI: ffffffff8adf6120 [ 95.702317][ C1] RBP: ffffc9000552f3e0 R08: dffffc0000000000 R09: 1ffffffff2162448 [ 95.710276][ C1] R10: dffffc0000000000 R11: fffffbfff2162449 R12: 0000000000000001 [ 95.718234][ C1] R13: 1ffff92000aa5e64 R14: 0000000000000246 R15: dffffc0000000000 [ 95.726207][ C1] ? read_lock_is_recursive+0x10/0x10 [ 95.731599][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 95.736614][ C1] ? pfn_valid+0xcd/0x420 [ 95.740934][ C1] pfn_valid+0xe9/0x420 [ 95.745079][ C1] ? pfn_valid+0xcd/0x420 [ 95.749408][ C1] page_table_check_clear+0x1e/0x6b0 [ 95.754687][ C1] ? __page_table_check_pte_clear+0x3f/0x70 [ 95.760570][ C1] unmap_page_range+0x1905/0x25b0 [ 95.765595][ C1] unmap_vmas+0x260/0x390 [ 95.769914][ C1] ? unmap_vmas+0x1bd/0x390 [ 95.774410][ C1] ? unmap_page_range+0x25b0/0x25b0 [ 95.779597][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 95.784624][ C1] exit_mmap+0x20d/0x970 [ 95.788861][ C1] ? vm_brk+0x20/0x20 [ 95.792834][ C1] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 95.798489][ C1] ? exit_mm+0x23d/0x350 [ 95.802725][ C1] ? uprobe_clear_state+0x274/0x290 [ 95.807915][ C1] __mmput+0x118/0x3a0 [ 95.811973][ C1] exit_mm+0x24d/0x350 [ 95.816033][ C1] ? sysctl_delayacct+0x220/0x220 [ 95.821050][ C1] ? do_exit+0x2570/0x2570 [ 95.825462][ C1] ? tty_audit_exit+0x149/0x1f0 [ 95.830299][ C1] do_exit+0x958/0x2570 [ 95.834449][ C1] ? put_task_struct+0x80/0x80 [ 95.839208][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 95.845186][ C1] ? lock_chain_count+0x20/0x20 [ 95.850026][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 95.855041][ C1] do_group_exit+0x229/0x2e0 [ 95.859622][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 95.864807][ C1] get_signal+0x1259/0x1340 [ 95.869304][ C1] ? futex_wake+0x426/0x4f0 [ 95.873803][ C1] arch_do_signal_or_restart+0xc4/0x1310 [ 95.879430][ C1] ? do_futex+0x2e2/0x320 [ 95.883747][ C1] ? get_sigframe_size+0x10/0x10 [ 95.888674][ C1] ? __ia32_sys_get_robust_list+0x100/0x100 [ 95.894564][ C1] ? fput+0x150/0x1a0 [ 95.898547][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 95.904002][ C1] exit_to_user_mode_loop+0x70/0x110 [ 95.909286][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 95.914829][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 95.920281][ C1] do_syscall_64+0x58/0xa0 [ 95.924691][ C1] ? clear_bhb_loop+0x60/0xb0 [ 95.929361][ C1] ? clear_bhb_loop+0x60/0xb0 [ 95.934027][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 95.939918][ C1] RIP: 0033:0x7f4e1b39e0d9 [ 95.944333][ C1] Code: Unable to access opcode bytes at 0x7f4e1b39e0af. [ 95.951354][ C1] RSP: 002b:00007f4e1c1d40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 95.959764][ C1] RAX: 0000000000000001 RBX: 00007f4e1b625fa8 RCX: 00007f4e1b39e0d9 [ 95.967723][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4e1b625fac [ 95.975682][ C1] RBP: 00007f4e1b625fa0 R08: 003a2b4e07c1852c R09: 0000000000000000 [ 95.983649][ C1] R10: 0000000000000050 R11: 0000000000000246 R12: 0000000000000000 [ 95.991605][ C1] R13: 00007f4e1b626038 R14: 00007ffe0b9a40b0 R15: 00007ffe0b9a4198 [ 95.999573][ C1] [ 96.002705][ C1] Kernel Offset: disabled [ 96.007026][ C1] Rebooting in 86400 seconds..