last executing test programs: 21.762504818s ago: executing program 2 (id=94): r0 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000240)={[{@dioread_nolock}]}, 0xfe, 0x249, &(0x7f0000000800)="$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") tkill(0x0, 0x32) openat(0xffffffffffffff9c, 0x0, 0x143441, 0x98) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) fchmod(r0, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 21.362647506s ago: executing program 0 (id=97): syz_usb_connect$uac1(0x3, 0xa2, 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x890c, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x7fffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) connect$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r5, &(0x7f0000000240)={0xa, 0x4e23, 0x1, @empty, 0x3}, 0x1c) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) close_range(r0, 0xffffffffffffffff, 0x0) 19.015544811s ago: executing program 2 (id=98): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pread64(0xffffffffffffffff, &(0x7f0000002240)=""/237, 0xed, 0x4eb) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x3ff}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) keyctl$join(0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[], 0x0}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad0e0e2b45d14ee446b840edaa1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c50ce6a8e9f65de13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87915ed063f608dddb03a95b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000c3d51d9a161446b4373e06a9e07f8a000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b2844869"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) 17.366900983s ago: executing program 0 (id=102): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='contention_end\x00', r0}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$video4linux(0x0, 0x3, 0x400) ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f0000000080)={0x0, 0x4003, @name="ddac5935faa72d6dc6de279dd26ac35004002955d52925a9eddf9f87e74cd15a"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x14002) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x26020480) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) getsockopt$inet_tcp_buf(r5, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x358, 0x800000000000) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000c7aa00859d37040e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48) 16.680278236s ago: executing program 2 (id=105): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x6c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x43, 0x33, @mgmt_frame=@beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_a, @device_b, @from_mac, {0x1, 0xb1b}}, 0x5, @random=0x8000, 0x8000, @void, @val, @val={0x3, 0x1, 0xab}, @val={0x4, 0x6, {0x7, 0x9, 0x1, 0x3}}, @val={0x6, 0x2, 0x7}, @val={0x5, 0x3, {0x2, 0x3d, 0xff}}, @val={0x25, 0x3, {0x0, 0x24, 0x7}}, @void, @void, @void, @void, @void, @void}}]}, 0x6c}}, 0x0) 16.313474214s ago: executing program 2 (id=106): socket$netlink(0x10, 0x3, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x2c, r0, 0x5, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BSS_BASIC_RATES={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48004}, 0x0) 16.135063087s ago: executing program 0 (id=108): r0 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000240)={[{@dioread_nolock}]}, 0xfe, 0x249, &(0x7f0000000800)="$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") tkill(0x0, 0x32) openat(0xffffffffffffff9c, 0x0, 0x143441, 0x98) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) fchmod(r0, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 15.48646893s ago: executing program 2 (id=109): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x64, 0x0, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9114037d14a9835f329ed15d76578843"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "687f434b5d2872e3"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="60a02148917d5c6d3277e059bb6d3d7b6eb9379b7e23d6dd0413b42a96b56f9a"}]}]}, 0x64}}, 0x8000) 15.379871752s ago: executing program 2 (id=111): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000240)={[{@dioread_nolock}]}, 0xfe, 0x249, &(0x7f0000000800)="$eJzs3T9oJFUcB/DvzO56JrfIqY0g/gER0UA4O8HmbBQO5DhEBBVORGyURIgJdomVjYXWKqlsgtgZLSVNsFEEq6gpYiNosDBYaLGyO4nEZDWaXXfizecDk5nJvDe/N+x8324zuwEa60KSS0laSWaSdJIUhxvcXS0X9ndXpzavJb3eEz8Vg3bVfuWg3/kkK0keSrJRFnmpnSytP7Pzy9Zj97252Ln3/fWnpyZ6kft2d7Yf33vvyhsfXX5w6YuvfrhS5FK6f7qu8SuG/K9dJLf8F8XOiKJd9wj4J66+9uHX/dzfmuSeQf47KVO9eG8t3LDRyQPv/lXft3/88vZJjhUYv16v038PXOkBjVMm6aYoZ5NU22U5O1t9hv+mNV2+PL/w6syL84tzL9Q9UwHj0k22H/3k3Mfnj+T/+1aVf+B/YPp03fr5f/Lq2rf97b3WmMcEnE13VKt+/meeW74/8g+NI//QXPIPzSX/0FzyD80l/9Bc8g/Xsc7fH5Z/aC75h+aSf2iuw/kHAJqld67uJ5CButQ9/wAAAAAAAAAAAAAAAAAAAMetTm1eO1gmVfOzd5LdR5K0h9VvDX6POLlx8Hf656Lf7A9F1W0kz9414glG9EHNT1/f9F299T+/s976y3PJyutJLrbbx++/Yv/+O72bTzjeeX7EAv9ScWT/4acmW/+o39bqrX95K/m0P/9cHDb/lLltsB4+/3RP/orlE73y64gnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYGJ+DwAA//8NTG1W") tkill(0x0, 0x32) truncate(&(0x7f0000000200)='./file1\x00', 0x20fffffffc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000200)=@v3={0x3000000, [{0x46, 0x55}, {0x5, 0x2004}]}, 0x18, 0x0) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) prlimit64(0x0, 0x1, 0x0, 0x0) shmctl$SHM_LOCK(0x0, 0xb) pwritev2(r0, 0x0, 0x0, 0xe7b, 0x0, 0x0) 13.305760422s ago: executing program 0 (id=114): r0 = socket$pppoe(0x18, 0x1, 0x0) syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x3200c00, &(0x7f0000002680)=ANY=[], 0x6, 0xa9b, &(0x7f0000000c00)="$eJzs3U2MG1fhAPBn73qTTdJ/nP4TuiRpm/DVFuhus1lCIYKmai5ETcUtUsUlStMSkQZEKkGrSvk4cYJWVbhCEadyqAAhtRcU9cSlEo3EpeJQOHAgClIlDlBIjNb7nnf8Ynfs7Ift9e8nvX1+88bz3syOx+OZee8FYGxVm38XFmYqIVx5+7Wjf//c36YXpzzWmqPe/DtZSNVCCJWYnsyW98HEUnzzw5dPdYorYb75N6XDUzda790aQrgY9oWroR52X7n26rvzTx6/dOzy/vfeOHy9WMaJVd0CAAAwPr559fDCrr/8cc+Oj96870jY1Jqezs/rMb0tnvcfiSf+6fy/GtrTlUIomsrmm4yhms030WG+Yjm1bL7JLuVPZcuttfL3tM23qaT8icK0TusNoyztx/VQqc62pavV2dml3+Sh+bt+qjJ77szZZ88PqKLAqvvn/SGEfUK/odFoXGhuwCGoiyDcaWhsH/QRCBhnre/SDvcLb3Mxv7KwMq2lTfZW/o3Hq53fD6tgvff/svJ//OfBln+bMS//l5cccVg9G3VvSuuVPkfbYjq/j5A/v9Tv5z8tL78fUeuxnt3uI4zK/YVu9ZxY53rcqW71z/eLjeprMU7b4etZfvHzk/9PR+V/DHT2r/W6/v/69MCvdS6GfUNQhw0dakNQB6Hn0Bj0AQgYWsvPzS1pRCk/f64vz99Ukr+5JH+6JH9LSf7WknwYZ7994Sfhlcry7/z8N32/18PSdba7Yvx/fdYnvx7Zb/n5c7/9Wmn5+fPEix5dYZ1grbx18sTpR595+trS8/+V1v5/K+7v+2K6Hj9bV+MM6Xphfl299ex/vb2capf57s7qc9dt8zeWStzZPl9l5/JyQuE4s7z8ex9q5s20v297t/rubZ+vns03HcPmrL75+cmW7H3p/CMdV9P2mszWt5atx1RWj3Rc2RHjvB5wJ9L+2O35/7R/zoRa5dkzZ08/EtNpP/3DRG3T4vQDxYX+an3qDqxMr+1/ZkJ7+59trem1auG40Dr9TseLA63ltU+fX0rW8vkPxnT6nvv2xHRz+uyp7559ZrVXHsbc+Rdf+s7Js2dPf9+L9GLaZvHCi7Ijx0Z9chDGx9wLz39v7vyLLz185vmTz51+7vS5g4cOHZyfP/SVgwtzzfP6ueKvfmAjWf7SH3RNAAAAAAAAAAAAgF794NjRa39658vvL7X/X27/l9r/pyd/U/v/H2Xt//N28qlVQGpnv6NDfnPcvbfa6zGVzVeL4f+z+u7MytmVve8TMW6N4xfb/6f29nm/rqk+92TT8/5703xZdwK39ZcylfVB0hovMDbY/1RMX47xLwIMUGW68+QYl/Vvnfb1Zv8UF9aqkqy11J9I2htSPyap/Xe3fp3S8X/HOtSR1bcezQkHvY5AZ/8YxvE/q8V04Ux80PX6+NBoDL4OKw/Dv52FVQyNhlE8gOEw6PE/03XPFJ/7/Tc2L4Y0243H24+Xef+lsBLDPv6k8jfW+J+t8e96Ov516F29rZ/n3kdX+PfPrr9fKDbs7vX4m69/6gd6Z3mZRR/F8tP6PxB6K7/xelZ+fkOoR//Jyt/SY/m3rf/eOyv/v7H8tNke/HSv5S/VuFJtr0d+3Tjd/8uvGyc3s/VPfXv2vf5xv+l3XI9bsXwYZ93Hme11BNvhNCrj/3aTP4fxpZhOB8L0nEP+jdxv/dPzFel7YFe2/ErJ99uojFPczbiP//vVGJd9HtL4v2l/rHdIVwvpWodtO+r7Cmw0Hwzj/b9RDheHoA7CkIbhGAO7GBqNxkA78taL+GANevsP+u7zoMsf9PYvk4//m5/D5+P/VrMfEPn4v/n78/F/8/x8fL08Px//N9+e+fi/ef492XLz64gzJfmfLMnfXZK/Zzl/ulP+3pL331uSv78k/76S/PtL8u8uyZ8oyf9Me37anVr5ny15f+PCx+c/WPL+h0ryN7pme5TCh2rc1h/GWd4+z+cfxke6/9Pt87+zJB8YXT9988ATT//mW/Wl9v9Trd9r6T7ekZiuxd/OP4zp/L53KKQX896J6b9m+cN+vQPGSd5/Rv79/kBJPjC60nNePt8whiqbO0+OcToudOu3qtt5PqPl8zH+Qoy/GOOHYzwb47kYH4jx/DrVj7XxxK9/d/iVyvLv/e1Zfq/Pk+ftgfJ+og72WJ/8+kC/z7Pn/fj1a6Xl32FzMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIGpNv8uLMxUQrjy9mtHTxw/M7c45bHWHPXm38lCqtZ6XwiPxHgixj+PL25++PKpYnwrxpUwHyqh0poenrrRKmlrCOFi2BeuhnrYfeXaq+/OP3n80rHL+9974/D1tdsCAAAAsPH9LwAA//8SciNw") r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x72) ioctl$EXT4_IOC_GROUP_ADD(r1, 0xc0185879, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x400000, 0x2, 0x0, 0x0, 0x2401}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x807, @empty, 'vlan1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)}}], 0x1, 0x24048084) pidfd_send_signal(0xffffffffffffffff, 0x11, 0x0, 0x1000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x6c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0xe, 0x4, @local}}}]}]}, 0x6c}}, 0xc0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) getsockopt$inet6_tcp_buf(r7, 0x6, 0x1a, 0x0, &(0x7f0000000080)) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000280)={[{@rodir}, {@numtail}, {@utf8no}, {@fat=@usefree}, {@shortname_mixed}, {@uni_xlateno}, {@numtail}, {@utf8no}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@fat=@check_strict}, {@shortname_winnt}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@utf8no}, {@rodir}]}, 0x3, 0x27b, &(0x7f0000000640)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20f0410, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000000)={0xe, {0x4, 0x1, 0x6, 0x3f, "470a0c6f4068beab1cdf63f2802b128e109fe9b92a90fbbadaa2ba4b4ef15c4f4a287c4cb38aee9a5023d983971f0da25e9c3e72062a137123feea13f17e4d"}}, 0x4b) 13.217511994s ago: executing program 1 (id=115): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0) 11.068223975s ago: executing program 0 (id=119): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000140)="eb", 0x34000, 0x4008004, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 10.018222646s ago: executing program 3 (id=123): socket$tipc(0x1e, 0x5, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5408, &(0x7f0000000040)={0x0, 0x7bdfd2e3, 0x0, 0x0, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x1}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a00)={&(0x7f00000002c0)='cma_alloc_start\x00', r1, 0x0, 0x2000000d}, 0x18) recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, 0x0}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000001aa40)={0x18, 0x4, &(0x7f0000000980)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x43, 0x7ffffffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 9.149752553s ago: executing program 0 (id=124): r0 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000240)={[{@dioread_nolock}]}, 0xfe, 0x249, &(0x7f0000000800)="$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") tkill(0x0, 0x32) openat(0xffffffffffffff9c, 0x0, 0x143441, 0x98) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) fchmod(r0, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 8.979270256s ago: executing program 3 (id=125): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = semget$private(0x0, 0x4000000009, 0x0) semop(r0, 0x0, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000008c0)) prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fsmount(0xffffffffffffffff, 0x1, 0x88) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/bus/input/handlers\x00', 0x0, 0x0) pread64(r2, &(0x7f00000002c0)=""/124, 0x7c, 0x7) 8.576517033s ago: executing program 3 (id=127): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300000000000000, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)=@in6={0xa, 0x4e24, 0xc, @private2, 0x8}, 0x1c, &(0x7f0000000280), 0x0, &(0x7f0000000700), 0x0, 0x85}, 0x8044) socket$nl_route(0x10, 0x3, 0x0) 8.361340878s ago: executing program 4 (id=128): syz_usb_connect$uac1(0x3, 0xa2, 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x890c, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x7fffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) connect$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r5, &(0x7f0000000240)={0xa, 0x4e23, 0x1, @empty, 0x3}, 0x1c) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) close_range(r0, 0xffffffffffffffff, 0x0) 8.298334189s ago: executing program 3 (id=129): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000040)={0x0, 0xe, 0x1, 0x7, 0x0, 0x7, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r4, 0x0) connect$bt_rfcomm(r4, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) socket$inet_udp(0x2, 0x2, 0x0) 3.521030181s ago: executing program 3 (id=130): r0 = socket$pppoe(0x18, 0x1, 0x0) syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x3200c00, &(0x7f0000002680)=ANY=[], 0x6, 0xa9b, &(0x7f0000000c00)="$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") r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x72) ioctl$EXT4_IOC_GROUP_ADD(r1, 0xc0185879, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x400000, 0x2, 0x0, 0x0, 0x2401}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x807, @empty, 'vlan1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)}}], 0x1, 0x24048084) pidfd_send_signal(0xffffffffffffffff, 0x11, 0x0, 0x1000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x6c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0xe, 0x4, @local}}}]}]}, 0x6c}}, 0xc0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) getsockopt$inet6_tcp_buf(r7, 0x6, 0x1a, 0x0, &(0x7f0000000080)) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000280)={[{@rodir}, {@numtail}, {@utf8no}, {@fat=@usefree}, {@shortname_mixed}, {@uni_xlateno}, {@numtail}, {@utf8no}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@fat=@check_strict}, {@shortname_winnt}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@utf8no}, {@rodir}]}, 0x3, 0x27b, &(0x7f0000000640)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20f0410, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000000)={0xe, {0x4, 0x1, 0x6, 0x3f, "470a0c6f4068beab1cdf63f2802b128e109fe9b92a90fbbadaa2ba4b4ef15c4f4a287c4cb38aee9a5023d983971f0da25e9c3e72062a137123feea13f17e4d"}}, 0x4b) 3.520577251s ago: executing program 4 (id=131): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='contention_end\x00', r0}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$video4linux(0x0, 0x3, 0x400) ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f0000000080)={0x0, 0x4003, @name="ddac5935faa72d6dc6de279dd26ac35004002955d52925a9eddf9f87e74cd15a"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x14002) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x26020480) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) getsockopt$inet_tcp_buf(r5, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x358, 0x800000000000) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000c7aa00859d37040e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48) 2.672374898s ago: executing program 4 (id=132): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x2c, r1, 0x5, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BSS_BASIC_RATES={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48004}, 0x0) 2.05022037s ago: executing program 4 (id=133): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 1.803686185s ago: executing program 1 (id=134): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x4}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000), 0xfdef) 1.802006155s ago: executing program 3 (id=135): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000180)={0x40, 0xe, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000014c0)={0x34, &(0x7f0000001240)={0x20, 0x6, 0x1, "9e"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0}) 1.506481081s ago: executing program 1 (id=136): socket$tipc(0x1e, 0x5, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5408, &(0x7f0000000040)={0x0, 0x7bdfd2e3, 0x0, 0x0, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x1}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a00)={&(0x7f00000002c0)='cma_alloc_start\x00', r1, 0x0, 0x2000000d}, 0x18) recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, 0x0}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000001aa40)={0x18, 0x4, &(0x7f0000000980)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x43, 0x7ffffffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 1.378094563s ago: executing program 4 (id=137): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = semget$private(0x0, 0x4000000009, 0x0) semop(r0, 0x0, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000008c0)) prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x88) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/bus/input/handlers\x00', 0x0, 0x0) pread64(r2, &(0x7f00000002c0)=""/124, 0x7c, 0x7) 601.799468ms ago: executing program 1 (id=138): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 274.546195ms ago: executing program 1 (id=139): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300000000000000, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)=@in6={0xa, 0x4e24, 0xc, @private2, 0x8}, 0x1c, &(0x7f0000000280), 0x0, &(0x7f0000000700), 0x0, 0x85}, 0x8044) socket$nl_route(0x10, 0x3, 0x0) 256.871445ms ago: executing program 32 (id=111): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000240)={[{@dioread_nolock}]}, 0xfe, 0x249, &(0x7f0000000800)="$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") tkill(0x0, 0x32) truncate(&(0x7f0000000200)='./file1\x00', 0x20fffffffc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000200)=@v3={0x3000000, [{0x46, 0x55}, {0x5, 0x2004}]}, 0x18, 0x0) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) prlimit64(0x0, 0x1, 0x0, 0x0) shmctl$SHM_LOCK(0x0, 0xb) pwritev2(r0, 0x0, 0x0, 0xe7b, 0x0, 0x0) 27.457349ms ago: executing program 4 (id=141): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000040)={0x0, 0xe, 0x1, 0x7, 0x0, 0x7, 0x0}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r4, 0x0) connect$bt_rfcomm(r4, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) socket$inet_udp(0x2, 0x2, 0x0) 0s ago: executing program 1 (id=142): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='contention_end\x00', r0}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$video4linux(0x0, 0x3, 0x400) ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f0000000080)={0x0, 0x4003, @name="ddac5935faa72d6dc6de279dd26ac35004002955d52925a9eddf9f87e74cd15a"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x14002) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x26020480) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) getsockopt$inet_tcp_buf(r5, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x358, 0x800000000000) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000c7aa00859d37040e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.196' (ED25519) to the list of known hosts. [ 74.028290][ T4254] cgroup: Unknown subsys name 'net' [ 74.157711][ T4254] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.654017][ T4254] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 77.174642][ T4270] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.184343][ T4270] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.192906][ T4270] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.199101][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.201043][ T4270] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.208787][ T4281] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.215863][ T4270] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.230456][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.230965][ T4270] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.238732][ T4281] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.245684][ T4270] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.252723][ T4281] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.259493][ T4270] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.272764][ T4282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.273361][ T4270] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.282420][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.289726][ T4270] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.301848][ T4270] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.309880][ T4270] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.317174][ T4270] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.322499][ T4282] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.324643][ T4270] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.338593][ T4270] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 77.340435][ T4281] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.349434][ T4282] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.354924][ T4281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.359975][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.375521][ T4272] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.383860][ T4282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.384414][ T4272] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.778594][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 77.979920][ T4265] chnl_net:caif_netlink_parms(): no params data found [ 78.021730][ T4264] chnl_net:caif_netlink_parms(): no params data found [ 78.043692][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.051295][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.059402][ T4273] device bridge_slave_0 entered promiscuous mode [ 78.068445][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 78.095585][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 78.110322][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.117546][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.126393][ T4273] device bridge_slave_1 entered promiscuous mode [ 78.247220][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.263131][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.280290][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.288154][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.296225][ T4265] device bridge_slave_0 entered promiscuous mode [ 78.327688][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.335236][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.343246][ T4265] device bridge_slave_1 entered promiscuous mode [ 78.377718][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.385013][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.393278][ T4271] device bridge_slave_0 entered promiscuous mode [ 78.429915][ T4273] team0: Port device team_slave_0 added [ 78.436367][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.443819][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.452692][ T4271] device bridge_slave_1 entered promiscuous mode [ 78.468907][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.478012][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.486118][ T4274] device bridge_slave_0 entered promiscuous mode [ 78.493733][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.500819][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.509079][ T4264] device bridge_slave_0 entered promiscuous mode [ 78.518580][ T4273] team0: Port device team_slave_1 added [ 78.534875][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.546822][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.556947][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.564412][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.572581][ T4274] device bridge_slave_1 entered promiscuous mode [ 78.579585][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.587089][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.595586][ T4264] device bridge_slave_1 entered promiscuous mode [ 78.648476][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.690934][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.704878][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.715102][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.722215][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.748363][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.762151][ T4265] team0: Port device team_slave_0 added [ 78.768690][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.776486][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.802742][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.816043][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.840301][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.851699][ T4265] team0: Port device team_slave_1 added [ 78.872459][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.929948][ T4271] team0: Port device team_slave_0 added [ 78.938939][ T4264] team0: Port device team_slave_0 added [ 78.948370][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.955897][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.982347][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.997521][ T4274] team0: Port device team_slave_0 added [ 79.014171][ T4271] team0: Port device team_slave_1 added [ 79.029115][ T4264] team0: Port device team_slave_1 added [ 79.035646][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.042868][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.070286][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.083246][ T4274] team0: Port device team_slave_1 added [ 79.103685][ T4273] device hsr_slave_0 entered promiscuous mode [ 79.110502][ T4273] device hsr_slave_1 entered promiscuous mode [ 79.153275][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.160284][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.186460][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.207907][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.215077][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.241905][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.253741][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.260739][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.287329][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.299650][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.307054][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.333474][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.352951][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.359937][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.386599][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.398547][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.405767][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.432515][ T4267] Bluetooth: hci2: command 0x0409 tx timeout [ 79.432521][ T4283] Bluetooth: hci1: command 0x0409 tx timeout [ 79.439447][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.445791][ T4283] Bluetooth: hci4: command 0x0409 tx timeout [ 79.455465][ T4272] Bluetooth: hci0: command 0x0409 tx timeout [ 79.462300][ T4283] Bluetooth: hci3: command 0x0409 tx timeout [ 79.496305][ T4265] device hsr_slave_0 entered promiscuous mode [ 79.503566][ T4265] device hsr_slave_1 entered promiscuous mode [ 79.510362][ T4265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.519257][ T4265] Cannot create hsr debugfs directory [ 79.602976][ T4264] device hsr_slave_0 entered promiscuous mode [ 79.609809][ T4264] device hsr_slave_1 entered promiscuous mode [ 79.618046][ T4264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.625926][ T4264] Cannot create hsr debugfs directory [ 79.639100][ T4271] device hsr_slave_0 entered promiscuous mode [ 79.646569][ T4271] device hsr_slave_1 entered promiscuous mode [ 79.653530][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.661136][ T4271] Cannot create hsr debugfs directory [ 79.733972][ T4274] device hsr_slave_0 entered promiscuous mode [ 79.742652][ T4274] device hsr_slave_1 entered promiscuous mode [ 79.749343][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.757133][ T4274] Cannot create hsr debugfs directory [ 80.072552][ T4273] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.089900][ T4273] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.115656][ T4273] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.133033][ T4273] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.164911][ T4265] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.179416][ T4265] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.191823][ T4265] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.215134][ T4265] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.277530][ T4271] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.311293][ T4271] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.322223][ T4271] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.344567][ T4271] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.405857][ T4264] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.424902][ T4264] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.460559][ T4264] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.473035][ T4264] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.489925][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.528975][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.553819][ T4274] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.567108][ T4274] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.587689][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.598069][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.607758][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.616869][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.631636][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.638560][ T4274] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.649906][ T4274] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.664722][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.683297][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.693187][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.704043][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.711415][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.753619][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.763797][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.773240][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.782023][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.789179][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.797584][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.808240][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.817190][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.824358][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.832262][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.840992][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.851626][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.887949][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.897176][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.907175][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.914345][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.923710][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.933527][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.942617][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.951879][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.960687][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.969587][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.978702][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.989665][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.998693][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.009578][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.018941][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.033753][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.077848][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.087047][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.100069][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.108981][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.119054][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.127825][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.140622][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.150690][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.162254][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.189113][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.201449][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.218366][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.274479][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.293458][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.311991][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.320012][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.344911][ T4264] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.362309][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.389245][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.413099][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.427500][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.434689][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.490840][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.498597][ T4283] Bluetooth: hci0: command 0x041b tx timeout [ 81.505012][ T48] Bluetooth: hci4: command 0x041b tx timeout [ 81.505034][ T4272] Bluetooth: hci1: command 0x041b tx timeout [ 81.511113][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 81.517429][ T4267] Bluetooth: hci3: command 0x041b tx timeout [ 81.528431][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.538574][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.547257][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.554512][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.563011][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.572082][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.580624][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.587806][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.596430][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.606704][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.619961][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.628474][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.637376][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.646449][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.653664][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.689041][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.714248][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.726917][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.736715][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.746074][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.759154][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.770275][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.787102][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.797394][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.808749][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.820039][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.829305][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.840208][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.860068][ T4264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.878066][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.901942][ T4271] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.920313][ T4271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.949747][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.962759][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.970958][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.981373][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.990060][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.001674][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.010405][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.021099][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.030086][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.038955][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.047482][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.065699][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.090761][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.115552][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.142644][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.164844][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.184047][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.191312][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.216208][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.245034][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.275079][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.293683][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.328367][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.335613][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.364307][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.391551][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.399120][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.470722][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.492408][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.502230][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.522216][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.532049][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.541093][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.550497][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.577608][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.601110][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.611133][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.620389][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.638017][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.648702][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.670225][ T4265] device veth0_vlan entered promiscuous mode [ 82.703576][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.718684][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.727820][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.736315][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.746356][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.788363][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.804351][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.815590][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.825827][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.837707][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.849472][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.869991][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.884893][ T4265] device veth1_vlan entered promiscuous mode [ 82.909925][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.930667][ T4273] device veth0_vlan entered promiscuous mode [ 82.961784][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.972880][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.983122][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.992722][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.002187][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.010137][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.056288][ T4273] device veth1_vlan entered promiscuous mode [ 83.077366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.108323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.119432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.135897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.146766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.156902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.167300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.180277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.189738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.200045][ T4271] device veth0_vlan entered promiscuous mode [ 83.219557][ T4264] device veth0_vlan entered promiscuous mode [ 83.242699][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.253659][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.263328][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.272614][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.282925][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.291014][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.303595][ T4265] device veth0_macvtap entered promiscuous mode [ 83.321822][ T4265] device veth1_macvtap entered promiscuous mode [ 83.332091][ T4264] device veth1_vlan entered promiscuous mode [ 83.357672][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.366608][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.379373][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.388062][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.396632][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.405664][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.417255][ T4273] device veth0_macvtap entered promiscuous mode [ 83.435213][ T4271] device veth1_vlan entered promiscuous mode [ 83.452999][ T4273] device veth1_macvtap entered promiscuous mode [ 83.469843][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.495838][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.504148][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.518592][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.557957][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.566494][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.574942][ T4272] Bluetooth: hci1: command 0x040f tx timeout [ 83.581004][ T4272] Bluetooth: hci3: command 0x040f tx timeout [ 83.587667][ T4267] Bluetooth: hci2: command 0x040f tx timeout [ 83.595398][ T4282] Bluetooth: hci0: command 0x040f tx timeout [ 83.595406][ T48] Bluetooth: hci4: command 0x040f tx timeout [ 83.596163][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.617436][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.626761][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.635761][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.650920][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.674291][ T4264] device veth0_macvtap entered promiscuous mode [ 83.689495][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.698584][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.708139][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.722431][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.734831][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.747872][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.759109][ T4264] device veth1_macvtap entered promiscuous mode [ 83.769443][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.787783][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.798283][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.817088][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.833463][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.849063][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.889847][ T4265] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.900680][ T4265] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.909948][ T4265] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.919306][ T4265] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.939127][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.949067][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.969916][ T4273] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.982187][ T4273] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.991089][ T4273] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.007115][ T4273] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.026965][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.048576][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.069143][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.084568][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.100507][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.119138][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.134898][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.143879][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.153392][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.165833][ T4271] device veth0_macvtap entered promiscuous mode [ 84.193682][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.206431][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.217295][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.230126][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.242511][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.257744][ T4271] device veth1_macvtap entered promiscuous mode [ 84.281622][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.289875][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.305406][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.319356][ T4264] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.328536][ T4264] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.337757][ T4264] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.346917][ T4264] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.366396][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.378698][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.397536][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.408314][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.418823][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.429623][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.439615][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.450167][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.464208][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.515386][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.525374][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.537688][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.549239][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.559928][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.570794][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.580935][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.592149][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.604342][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.638876][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.650771][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.673439][ T4271] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.682817][ T4271] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.693734][ T4271] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.702873][ T4271] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.727840][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.736955][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.745346][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.754349][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.768140][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.772333][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.789838][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.798130][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.808389][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.816865][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.830263][ T4274] device veth0_vlan entered promiscuous mode [ 84.896901][ T4274] device veth1_vlan entered promiscuous mode [ 84.920362][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.945431][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.959640][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.974372][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.003871][ T4353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.019657][ T4353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.058675][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.074665][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.090207][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.113684][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.127920][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.135457][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.137685][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.151972][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.188459][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.214783][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.240009][ T4274] device veth0_macvtap entered promiscuous mode [ 85.313216][ T4274] device veth1_macvtap entered promiscuous mode [ 85.322689][ T4353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.330768][ T4353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.376469][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.385953][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.395109][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.421098][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.434867][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.447179][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.457817][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.467823][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.479453][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.489581][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.500777][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.513573][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.530791][ T4353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.540292][ T4387] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4'. [ 85.550424][ T4353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.558891][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.567413][ T33] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.589087][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.622366][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.643712][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.654259][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 85.660328][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 85.663762][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.671261][ T4283] Bluetooth: hci0: command 0x0419 tx timeout [ 85.677154][ T4272] Bluetooth: hci1: command 0x0419 tx timeout [ 85.685329][ T4283] Bluetooth: hci4: command 0x0419 tx timeout [ 85.702220][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.719337][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.731045][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.763625][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.773922][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.784603][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.796729][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.822531][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.836714][ T33] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 85.870963][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.885626][ T33] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.911038][ T33] usb 3-1: Product: syz [ 85.914253][ T4274] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.925764][ T33] usb 3-1: Manufacturer: syz [ 85.927186][ T4274] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.940728][ T4274] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.945934][ T33] usb 3-1: SerialNumber: syz [ 85.949806][ T4274] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.014341][ T33] usb 3-1: config 0 descriptor?? [ 86.038165][ T33] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 86.124873][ T4400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7'. [ 86.267604][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.296267][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.329978][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.355889][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.370671][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.387437][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.778225][ T4413] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11'. [ 86.869388][ T127] cfg80211: failed to load regulatory.db [ 87.101140][ T4422] tipc: Started in network mode [ 87.156508][ T4422] tipc: Node identity 16b199b13b2b, cluster identity 4711 [ 87.187261][ T4422] tipc: Enabled bearer , priority 0 [ 87.242896][ T4421] device syzkaller0 entered promiscuous mode [ 87.251522][ T33] gspca_sunplus: reg_r err -71 [ 87.256416][ T33] sunplus: probe of 3-1:0.0 failed with error -71 [ 87.276178][ T33] usb 3-1: USB disconnect, device number 2 [ 87.443532][ T4422] tipc: Resetting bearer [ 87.541544][ T4420] tipc: Resetting bearer [ 87.682497][ T4420] tipc: Disabling bearer [ 87.891616][ T48] Bluetooth: hci4: command 0x0405 tx timeout [ 89.467695][ T4470] device pim6reg1 entered promiscuous mode [ 89.698985][ T4477] device wg2 entered promiscuous mode [ 89.779300][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.801691][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 90.517355][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.614578][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 90.623499][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 90.632815][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 90.641284][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 90.651224][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 90.661704][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 90.671710][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 95.115789][ T4528] Bluetooth: MGMT ver 1.22 [ 95.482269][ T4540] tipc: Started in network mode [ 95.494792][ T4540] tipc: Node identity 92b6212bb3e1, cluster identity 4711 [ 95.511084][ T4541] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 95.518947][ T4540] tipc: Enabled bearer , priority 0 [ 95.543570][ T4544] device syzkaller0 entered promiscuous mode [ 95.643404][ T4540] tipc: Resetting bearer [ 95.683541][ T4539] tipc: Resetting bearer [ 95.728898][ T4539] tipc: Disabling bearer [ 95.841296][ T4276] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.083056][ T4276] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 96.221858][ T4276] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 96.378473][ T4276] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 96.527568][ T4276] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 96.674559][ T4276] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 96.790880][ T4276] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 96.858773][ T4276] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 96.881278][ T4276] usb 1-1: Product: syz [ 96.885524][ T4276] usb 1-1: Manufacturer: syz [ 96.928162][ T4276] cdc_wdm 1-1:1.0: skipping garbage [ 96.962863][ T4276] cdc_wdm 1-1:1.0: skipping garbage [ 97.010704][ T4276] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 97.028970][ T4276] cdc_wdm 1-1:1.0: Unknown control protocol [ 97.969370][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 97.976313][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 97.992580][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 97.999263][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 98.007419][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 98.014619][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 98.022616][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 98.029269][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 98.040142][ T4276] usb 1-1: USB disconnect, device number 2 [ 100.343538][ T4581] device wg2 left promiscuous mode [ 100.440141][ T4588] syz.0.64[4588] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.440273][ T4588] syz.0.64[4588] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.506028][ T4581] device wg2 entered promiscuous mode [ 100.529404][ T4593] overlayfs: overlapping lowerdir path [ 101.670189][ T4603] netlink: 20 bytes leftover after parsing attributes in process `syz.1.69'. [ 102.087207][ T4618] loop1: detected capacity change from 0 to 256 [ 102.144278][ T4618] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 102.155284][ T4618] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 102.173156][ T4618] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 103.011193][ C0] sched: RT throttling activated [ 104.590311][ T4636] loop3: detected capacity change from 0 to 128 [ 106.502748][ T4636] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 107.501437][ T4636] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 107.511831][ T4636] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 107.766433][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 108.069640][ T4659] loop3: detected capacity change from 0 to 2048 [ 108.138064][ T4659] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 108.213647][ T4668] loop2: detected capacity change from 0 to 256 [ 108.230860][ T4668] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 108.242102][ T4668] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 108.262570][ T4668] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 108.436343][ T4379] udevd[4379]: incorrect nilfs2 checksum on /dev/loop3 [ 109.488711][ T4669] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 109.490234][ T4659] syz.3.84: attempt to access beyond end of device [ 109.490234][ T4659] loop3: rw=524288, sector=65534, nr_sectors = 2 limit=2048 [ 109.971547][ T4679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.84'. [ 111.163455][ T4689] netlink: 20 bytes leftover after parsing attributes in process `syz.3.92'. [ 111.237279][ T4692] loop2: detected capacity change from 0 to 128 [ 111.320075][ T4692] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 111.380202][ T4694] binder: BINDER_SET_CONTEXT_MGR already set [ 111.411331][ T4694] binder: 4693:4694 ioctl 4018620d 200000004a80 returned -16 [ 111.440717][ T4692] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 111.490056][ T4692] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 113.993310][ T4265] EXT4-fs (loop2): unmounting filesystem. [ 117.225738][ T4745] loop0: detected capacity change from 0 to 128 [ 117.266120][ T4745] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 117.285396][ T4747] netlink: 20 bytes leftover after parsing attributes in process `syz.1.107'. [ 117.395166][ T4745] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 117.435317][ T4745] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 117.676353][ T4761] loop2: detected capacity change from 0 to 128 [ 119.545316][ T4761] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 119.697852][ T4264] EXT4-fs (loop0): unmounting filesystem. [ 119.936996][ T4761] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 120.146174][ T4761] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 120.179202][ C0] vkms_vblank_simulate: vblank timer overrun [ 120.668082][ T4777] loop0: detected capacity change from 0 to 2048 [ 120.745539][ T4777] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 120.836302][ T4777] syz.0.114: attempt to access beyond end of device [ 120.836302][ T4777] loop0: rw=524288, sector=65534, nr_sectors = 2 limit=2048 [ 120.851407][ T4782] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.880657][ T4379] udevd[4379]: incorrect nilfs2 checksum on /dev/loop0 [ 121.141309][ T4380] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 121.307678][ T4787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'. [ 122.084288][ T4380] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 122.287352][ T4380] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.643651][ T4380] usb 2-1: config 0 descriptor?? [ 123.812984][ T4380] ath6kl: Failed to submit usb control message: -110 [ 123.820089][ T4380] ath6kl: unable to send the bmi data to the device: -110 [ 123.852624][ T4380] ath6kl: Unable to send get target info: -110 [ 123.870953][ T4380] ath6kl: Failed to init ath6kl core: -110 [ 123.927500][ T4816] loop0: detected capacity change from 0 to 128 [ 123.960965][ T4816] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 123.999673][ T4380] ath6kl_usb: probe of 2-1:0.0 failed with error -110 [ 124.075310][ T4816] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 124.092430][ T4816] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 124.217328][ T4820] device pim6reg1 entered promiscuous mode [ 129.648776][ T4842] loop3: detected capacity change from 0 to 2048 [ 129.769680][ T4842] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 129.904168][ T4843] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 129.919724][ T4842] syz.3.130: attempt to access beyond end of device [ 129.919724][ T4842] loop3: rw=524288, sector=65534, nr_sectors = 2 limit=2048 [ 129.988296][ T4835] udevd[4835]: incorrect nilfs2 checksum on /dev/loop3 [ 130.657890][ T4848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.130'. [ 131.033064][ T4346] usb 2-1: USB disconnect, device number 2 [ 131.451299][ T4709] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 132.076132][ T4709] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 132.091594][ T4709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.103137][ T4709] usb 4-1: Product: syz [ 132.107321][ T4709] usb 4-1: Manufacturer: syz [ 132.121571][ T4709] usb 4-1: SerialNumber: syz [ 132.144227][ T4709] usb 4-1: config 0 descriptor?? [ 132.160487][ T4709] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 132.971740][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.972280][ T4709] gspca_sunplus: reg_r err -32 [ 132.978515][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.941312][ T4709] sunplus: probe of 4-1:0.0 failed with error -32 [ 201.571310][ T4283] Bluetooth: hci3: command 0x0406 tx timeout [ 201.577506][ T4283] Bluetooth: hci0: command 0x0406 tx timeout [ 201.583719][ T4283] Bluetooth: hci1: command 0x0406 tx timeout [ 238.041154][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 238.047871][ C1] rcu: 1-...!: (1 GPs behind) idle=a9fc/1/0x4000000000000000 softirq=12059/12060 fqs=732 [ 238.058611][ C1] (t=10502 jiffies g=13821 q=491 ncpus=2) [ 238.064446][ C1] rcu: rcu_preempt kthread starved for 9039 jiffies! g13821 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 238.075561][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 238.085541][ C1] rcu: RCU grace-period kthread stack dump: [ 238.091527][ C1] task:rcu_preempt state:R running task stack:27200 pid:16 ppid:2 flags:0x00004000 [ 238.102328][ C1] Call Trace: [ 238.105633][ C1] [ 238.108590][ C1] __schedule+0x10ec/0x40b0 [ 238.113153][ C1] ? release_firmware_map_entry+0x18a/0x18a [ 238.119080][ C1] schedule+0xb9/0x180 [ 238.123158][ C1] schedule_timeout+0x15c/0x280 [ 238.128029][ C1] ? console_conditional_schedule+0x40/0x40 [ 238.133930][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 238.139837][ C1] ? update_process_times+0x1b0/0x1b0 [ 238.145249][ C1] ? prepare_to_swait_event+0x335/0x350 [ 238.150998][ C1] rcu_gp_fqs_loop+0x2f2/0x1310 [ 238.155896][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 238.162256][ C1] ? rcu_gp_init+0x14b0/0x14b0 [ 238.167047][ C1] ? rcu_gp_cleanup+0xb4c/0xca0 [ 238.172139][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 238.177466][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 238.183062][ C1] rcu_gp_kthread+0x95/0x380 [ 238.188213][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 238.193375][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 238.199357][ C1] ? __kthread_parkme+0x162/0x1c0 [ 238.204407][ C1] kthread+0x29d/0x330 [ 238.208506][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 238.213751][ C1] ? kthread_blkcg+0xd0/0xd0 [ 238.218366][ C1] ret_from_fork+0x1f/0x30 [ 238.222896][ C1] [ 238.225942][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 238.232362][ C1] Sending NMI from CPU 1 to CPUs 0: [ 238.237600][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0xb/0x10 [ 238.238593][ C1] CPU: 1 PID: 1277 Comm: aoe_tx0 Not tainted syzkaller #0 [ 238.253692][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 238.263769][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa5/0x100 [ 238.270290][ C1] Code: 74 05 e8 fe d1 65 f7 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 66 5b 36 f7 65 8b 05 67 14 e1 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 238.292011][ C1] RSP: 0018:ffffc9000587f900 EFLAGS: 00000206 [ 238.298139][ C1] RAX: 98f4afe292a6b900 RBX: 0000000000000a02 RCX: 98f4afe292a6b900 [ 238.306235][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c0500 RDI: 0000000000000001 [ 238.314222][ C1] RBP: ffffc9000587f988 R08: dffffc0000000000 R09: fffffbfff215c469 [ 238.322202][ C1] R10: fffffbfff215c469 R11: 1ffffffff215c468 R12: dffffc0000000000 [ 238.330195][ C1] R13: dffffc0000000000 R14: ffffffff96f70f50 R15: 1ffff92000b0ff20 [ 238.338187][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 238.347127][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 238.353731][ C1] CR2: 00007f425b1056c0 CR3: 0000000030792000 CR4: 00000000003506e0 [ 238.361748][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 238.369838][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 238.377818][ C1] Call Trace: [ 238.381131][ C1] [ 238.384197][ C1] ? _raw_spin_unlock+0x40/0x40 [ 238.389071][ C1] ? uart_write+0x5e5/0x910 [ 238.393606][ C1] uart_write_room+0x12c/0x2c0 [ 238.398394][ C1] handle_tx+0x164/0x600 [ 238.402665][ C1] dev_hard_start_xmit+0x262/0x870 [ 238.407803][ C1] __dev_queue_xmit+0x1bf1/0x3760 [ 238.412859][ C1] ? __dev_queue_xmit+0x26f/0x3760 [ 238.417988][ C1] ? netdev_core_pick_tx+0x340/0x340 [ 238.423723][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 238.428937][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 238.435014][ C1] ? lock_chain_count+0x20/0x20 [ 238.439867][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 238.444905][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 238.450112][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 238.455327][ C1] tx+0x67/0x170 [ 238.458879][ C1] ? aoenet_xmit+0x190/0x190 [ 238.463473][ C1] kthread+0x1c6/0x3b0 [ 238.467564][ C1] ? aoe_ktstart+0x130/0x130 [ 238.472153][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 238.478055][ C1] ? do_task_dead+0xd0/0xd0 [ 238.482572][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 238.488474][ C1] ? __kthread_parkme+0x162/0x1c0 [ 238.493514][ C1] kthread+0x29d/0x330 [ 238.497622][ C1] ? aoe_ktstart+0x130/0x130 [ 238.502240][ C1] ? kthread_blkcg+0xd0/0xd0 [ 238.506856][ C1] ret_from_fork+0x1f/0x30 [ 238.511295][ C1]