last executing test programs: 21.301661693s ago: executing program 2 (id=30): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2721, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r3 = memfd_create(&(0x7f0000000140)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x00\x00\x00\x00\x00\x00\x00', 0x4) fallocate(r3, 0x3, 0x3, 0xfffffffd) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={r2, 0x2}, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000280), 0x0) syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000013000), 0x0) 19.193073686s ago: executing program 2 (id=37): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/73, 0x49, 0x400000000000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYRESOCT=r4, @ANYRES8=r2, @ANYRES64=r1, @ANYRES8=r5, @ANYRESDEC=r0, @ANYRESOCT=0x0, @ANYRES8=r1, @ANYRESDEC=r1], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'rr\x00', 0x16, 0x2, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x83, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r7 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETINFOOLD(r8, 0x89e3, &(0x7f0000000100)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108) 19.172447876s ago: executing program 0 (id=38): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2721, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, 0x0) r7 = memfd_create(&(0x7f0000000140)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x00\x00\x00\x00\x00\x00\x00', 0x4) fallocate(r7, 0x3, 0x3, 0xfffffffd) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000080)={r6, 0x2}, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000280), 0x0) brk(0x5d555ede6000) syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000013000), 0x0) rseq(0x0, 0x0, 0x0, 0x0) 18.91300639s ago: executing program 1 (id=40): r0 = syz_open_procfs(0x0, &(0x7f0000002740)='net/igmp\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() bpf$ENABLE_STATS(0x20, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getcwd(0x0, 0x0) read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x2020) 16.92877407s ago: executing program 0 (id=43): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r1, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) ioctl$KVM_GET_MSRS(r4, 0xc048aeca, &(0x7f0000000200)) 16.669603074s ago: executing program 1 (id=45): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x2000000}], 0x2, 0x101, 0x0) 15.877605766s ago: executing program 0 (id=47): syz_open_dev$vim2m(&(0x7f0000000540), 0x2, 0x2) r0 = socket(0x2c, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0xc52, @empty}, 0x1c) r4 = dup2(r3, r3) r5 = dup(r4) r6 = open(0x0, 0x1298c2, 0x0) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4012}, 0x20000010) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r11, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 14.94903399s ago: executing program 0 (id=48): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2721, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r3 = memfd_create(&(0x7f0000000140)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x00\x00\x00\x00\x00\x00\x00', 0x4) fallocate(r3, 0x3, 0x3, 0xfffffffd) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={r2, 0x2}, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000280), 0x0) syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000013000), 0x0) 14.717729764s ago: executing program 2 (id=50): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xf, 0xa}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_POLICE={0x4}]}}]}, 0x38}}, 0x0) 12.914900262s ago: executing program 2 (id=55): r0 = syz_open_procfs(0x0, &(0x7f0000002740)='net/igmp\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() bpf$ENABLE_STATS(0x20, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getcwd(0x0, 0x0) read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x2020) 11.458694524s ago: executing program 3 (id=56): syz_extract_tcp_res$synack(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sysvipc/sem\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x100) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)='hfsplus\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) personality(0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x3, 0x0, 0x1}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000340)=""/195, 0xc3}, {&(0x7f0000000440)=""/66, 0x42}], 0x2, 0x7, 0xfffffff7) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$sequencer2(0xffffff9c, 0x0, 0x60801, 0x0) mount$afs(0x0, 0x0, 0x0, 0x200000, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x2, 0x8000000000000000, 0x8000f, 0xffffffffffffffff, 0x0, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffffffffffffffd, 0x8, 0x0, 0x0, 0x2, 0x5}, 0x0, 0x0) 10.545600358s ago: executing program 1 (id=58): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) modify_ldt$write(0x1, &(0x7f0000000100)={0x810e, 0x20001000, 0x4000, 0x1, 0x2, 0x1, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000000000)=""/250, 0xfa) close(0xffffffffffffffff) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) 10.466671069s ago: executing program 4 (id=59): r0 = fsmount(0xffffffffffffffff, 0x0, 0x74) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0xb, 0x0, {0x53, 0x5, 0x8, {0x4, 0x10}, {0x0, 0x3}, @rumble={0x2, 0x6}}, {0x52, 0x401, 0x4, {0x3ff, 0x1000}, {0x1, 0x7}, @rumble={0xb, 0xd}}}) syz_open_dev$vim2m(&(0x7f0000000340), 0xff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000001045d86658858801b2a5c52143da207d176d87035e71d00"/51], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r3}, 0x20) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r5, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) syz_open_pts(r5, 0x101) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) 10.230833763s ago: executing program 2 (id=60): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/73, 0x49, 0x400000000000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYRESOCT=r4, @ANYRES8=r2, @ANYRES64=r1, @ANYRES8=r5, @ANYRESDEC=r0, @ANYRESOCT=0x0, @ANYRES8=r1, @ANYRESDEC=r1], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'rr\x00', 0x16, 0x2, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x83, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r7 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETINFOOLD(r8, 0x89e3, &(0x7f0000000100)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108) 8.909526454s ago: executing program 4 (id=61): syz_open_dev$vim2m(&(0x7f0000000540), 0x2, 0x2) r0 = socket(0x2c, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0xc52, @empty}, 0x1c) r4 = dup2(r3, r3) r5 = dup(r4) r6 = open(0x0, 0x1298c2, 0x0) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4012}, 0x20000010) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r11, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 7.82585086s ago: executing program 0 (id=62): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/31) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f00000001c0)}}], 0x1, 0x240000a1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x2, 0x0, 0x0, 0x0, 0xff}, {@in6=@mcast2, 0x4d6, 0x6c}, @in=@private=0xa010101, {0x0, 0x192, 0x9ba3, 0xffff, 0x251c, 0x3, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3502, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d80100001c0001"], 0x1d8}}, 0x0) 7.725720632s ago: executing program 2 (id=63): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() pipe2$9p(&(0x7f0000000240), 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xa, 0x1ff, 0x1}) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x3}, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x400, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x8200, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000000)={0xfffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r6 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r0, 0x40187542, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r7, 0x0) 7.582351864s ago: executing program 4 (id=64): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001000000000000000241000000100013"], 0x2c}}, 0x0) 6.275696934s ago: executing program 4 (id=65): ioperm(0x9, 0x6, 0x5) syz_open_dev$sndmidi(0x0, 0x2, 0x2) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="000127bd700077dbdf250f00d7229d4105050000000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4801) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x10000, 0x2000000}, &(0x7f0000002000), 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = creat(0x0, 0xf8) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = dup2(r2, r1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x101, "7bb9595931028deda525e19bdeffafde2500f6d15c9e31df9454310ad7c18e65"}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x400000000, 0x4, 0x7fffffff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) 6.273064324s ago: executing program 1 (id=66): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2721, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r7 = memfd_create(0x0, 0x4) fallocate(r7, 0x3, 0x3, 0xfffffffd) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000080)={r6, 0x2}, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000280), 0x0) brk(0x5d555ede6000) syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000013000), 0x0) rseq(0x0, 0x0, 0x0, 0x0) 6.032524607s ago: executing program 3 (id=67): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket(0x1e, 0x805, 0x0) connect$tipc(r1, &(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e22}}, 0x10) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000010000000fbffff6b09ffffff00", @ANYRES32=0x0, @ANYRES32], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) close(r4) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000540)=0x8) fsync(r4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 3.749304612s ago: executing program 0 (id=68): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x2000000}], 0x2, 0x101, 0x0) 3.741206373s ago: executing program 1 (id=69): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840), 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) ioctl$KVM_GET_MSRS(r3, 0xc048aeca, &(0x7f0000000200)) 3.115943463s ago: executing program 4 (id=70): r0 = syz_open_procfs(0x0, &(0x7f0000002740)='net/igmp\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() bpf$ENABLE_STATS(0x20, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getcwd(0x0, 0x0) read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x2020) 3.066666813s ago: executing program 3 (id=71): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000100)={0x7, 0x7, 0x8, 0x1, 0x2, 0x7fff}) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 2.080211619s ago: executing program 4 (id=72): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1.662192444s ago: executing program 3 (id=73): r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0xa0200, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000600)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0, 0x0, r0}, 0x68) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r2, 0x0, 0x7, 0xffffffffffffffff, 0x0) r3 = inotify_init1(0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{0x0}], 0x1) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r5, 0x0, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) preadv(0xffffffffffffffff, &(0x7f0000003780), 0x0, 0xffff, 0x0) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) getpgrp(0x0) write$UHID_INPUT(r4, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x8000000000000100, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d88f0eb541a89a34dac70fe800008000020004", [0x6, 0x3]}}) 1.237641932s ago: executing program 3 (id=74): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2721, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r3 = memfd_create(&(0x7f0000000140)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x00\x00\x00\x00\x00\x00\x00', 0x4) fallocate(r3, 0x3, 0x3, 0xfffffffd) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={r2, 0x2}, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000280), 0x0) syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000013000), 0x0) 291.601566ms ago: executing program 3 (id=75): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/73, 0x49, 0x400000000000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYRESOCT=r4, @ANYRES8=r2, @ANYRES64=r1, @ANYRES8=r5, @ANYRESDEC=r0, @ANYRESOCT=0x0, @ANYRES8=r1, @ANYRESDEC=r1], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'rr\x00', 0x16, 0x2, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x83, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r7 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETINFOOLD(r8, 0x89e3, &(0x7f0000000100)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108) 0s ago: executing program 1 (id=76): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) modify_ldt$write(0x1, &(0x7f0000000100)={0x810e, 0x20001000, 0x4000, 0x1, 0x2, 0x1, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000000000)=""/250, 0xfa) close(0xffffffffffffffff) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.151' (ED25519) to the list of known hosts. [ 82.302330][ T4239] cgroup: Unknown subsys name 'net' [ 82.410546][ T4239] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.884784][ T4239] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 85.384420][ T4255] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.410094][ T4265] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.418837][ T4265] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.420516][ T4256] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.426912][ T4265] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.434890][ T4256] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.442641][ T4265] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.448295][ T4256] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.455069][ T4265] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.463511][ T4256] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.469230][ T4265] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.476782][ T4256] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.482890][ T4266] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.491077][ T4256] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.498668][ T4266] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.505470][ T4256] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.511350][ T4266] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 85.518258][ T4256] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.531821][ T4256] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.532485][ T4266] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.539901][ T4256] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.553455][ T4256] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.561427][ T4256] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.587305][ T4264] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.600744][ T4264] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.617357][ T4264] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.654126][ T4266] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.662858][ T4266] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.671029][ T4266] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.678685][ T4266] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.102298][ T4258] chnl_net:caif_netlink_parms(): no params data found [ 86.199047][ T4250] chnl_net:caif_netlink_parms(): no params data found [ 86.221762][ T4249] chnl_net:caif_netlink_parms(): no params data found [ 86.271409][ T4262] chnl_net:caif_netlink_parms(): no params data found [ 86.283110][ T4257] chnl_net:caif_netlink_parms(): no params data found [ 86.338273][ T4258] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.346868][ T4258] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.358172][ T4258] device bridge_slave_0 entered promiscuous mode [ 86.397043][ T4258] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.404449][ T4258] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.414270][ T4258] device bridge_slave_1 entered promiscuous mode [ 86.483646][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.491199][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.499386][ T4250] device bridge_slave_0 entered promiscuous mode [ 86.538190][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.545546][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.553971][ T4250] device bridge_slave_1 entered promiscuous mode [ 86.564327][ T4258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.573626][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.580689][ T4249] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.589554][ T4249] device bridge_slave_0 entered promiscuous mode [ 86.598044][ T4262] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.605485][ T4262] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.614163][ T4262] device bridge_slave_0 entered promiscuous mode [ 86.640800][ T4258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.650170][ T4249] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.657604][ T4249] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.665881][ T4249] device bridge_slave_1 entered promiscuous mode [ 86.673293][ T4262] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.680402][ T4262] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.688707][ T4262] device bridge_slave_1 entered promiscuous mode [ 86.746391][ T4257] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.753900][ T4257] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.762571][ T4257] device bridge_slave_0 entered promiscuous mode [ 86.772427][ T4250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.781644][ T4257] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.788885][ T4257] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.797733][ T4257] device bridge_slave_1 entered promiscuous mode [ 86.817373][ T4258] team0: Port device team_slave_0 added [ 86.840058][ T4250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.860946][ T4258] team0: Port device team_slave_1 added [ 86.868797][ T4249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.879909][ T4262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.902060][ T4257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.922114][ T4249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.943340][ T4262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.954744][ T4257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.965956][ T4250] team0: Port device team_slave_0 added [ 86.974249][ T4250] team0: Port device team_slave_1 added [ 87.042837][ T4258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.049856][ T4258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.076390][ T4258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.115917][ T4249] team0: Port device team_slave_0 added [ 87.122735][ T4258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.129703][ T4258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.156457][ T4258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.170392][ T4262] team0: Port device team_slave_0 added [ 87.180159][ T4257] team0: Port device team_slave_0 added [ 87.187889][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.195045][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.221081][ T4250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.233748][ T4249] team0: Port device team_slave_1 added [ 87.240053][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.252455][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.278978][ T4250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.296491][ T4262] team0: Port device team_slave_1 added [ 87.303690][ T4257] team0: Port device team_slave_1 added [ 87.366241][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.373511][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.399530][ T4249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.435961][ T4262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.446683][ T4262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.473083][ T4262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.485190][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.492467][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.519124][ T4249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.547327][ T4258] device hsr_slave_0 entered promiscuous mode [ 87.554990][ T4258] device hsr_slave_1 entered promiscuous mode [ 87.562768][ T4257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.569834][ T4257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.596314][ T4257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.608109][ T4262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.615438][ T4262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.641558][ T4262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.642805][ T4266] Bluetooth: hci4: command 0x0409 tx timeout [ 87.658659][ T4259] Bluetooth: hci3: command 0x0409 tx timeout [ 87.671000][ T4250] device hsr_slave_0 entered promiscuous mode [ 87.678139][ T4250] device hsr_slave_1 entered promiscuous mode [ 87.685925][ T4250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.693905][ T4250] Cannot create hsr debugfs directory [ 87.709781][ T4257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.716939][ T4257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.743239][ T4266] Bluetooth: hci2: command 0x0409 tx timeout [ 87.743445][ T4257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.749518][ T4266] Bluetooth: hci1: command 0x0409 tx timeout [ 87.766812][ T4267] Bluetooth: hci0: command 0x0409 tx timeout [ 87.820367][ T4249] device hsr_slave_0 entered promiscuous mode [ 87.827312][ T4249] device hsr_slave_1 entered promiscuous mode [ 87.834422][ T4249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.842370][ T4249] Cannot create hsr debugfs directory [ 87.915108][ T4257] device hsr_slave_0 entered promiscuous mode [ 87.925427][ T4257] device hsr_slave_1 entered promiscuous mode [ 87.932397][ T4257] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.940128][ T4257] Cannot create hsr debugfs directory [ 87.959186][ T4262] device hsr_slave_0 entered promiscuous mode [ 87.966209][ T4262] device hsr_slave_1 entered promiscuous mode [ 87.973420][ T4262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.981007][ T4262] Cannot create hsr debugfs directory [ 88.314154][ T4250] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.333772][ T4250] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.349926][ T4250] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.366545][ T4250] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.391194][ T4258] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.401669][ T4258] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.427402][ T4258] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.455081][ T4258] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.526471][ T4262] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.565402][ T4262] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.586169][ T4250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.598844][ T4262] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.620131][ T4262] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.653949][ T4250] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.677161][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.688310][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.697037][ T4249] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.709975][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.719331][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.733345][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.741114][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.767344][ T4249] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.779587][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.801279][ T4249] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.813007][ T4249] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.826615][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.836027][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.845990][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.853163][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.917982][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.927584][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.937043][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.947787][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.956980][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.966675][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.976181][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.985320][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.022614][ T4257] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.044263][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.054142][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.062787][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.078650][ T4258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.089746][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.099397][ T4257] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.127027][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.137410][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.146999][ T4257] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.178436][ T4262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.204918][ T4257] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.221491][ T4258] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.257508][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.266559][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.288652][ T4262] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.312119][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.321542][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.331489][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.338725][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.379721][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.396859][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.409596][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.426977][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.434193][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.443542][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.454299][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.462893][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.469965][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.478420][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.488037][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.497574][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.506252][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.513432][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.521620][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.545357][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.554645][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.589064][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.596962][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.605652][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.624171][ T4250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.659795][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.670078][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.681272][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.693166][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.702346][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.713336][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.722791][ T4267] Bluetooth: hci4: command 0x041b tx timeout [ 89.722800][ T4266] Bluetooth: hci3: command 0x041b tx timeout [ 89.736027][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.746041][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.761098][ T4249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.797595][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.805892][ T4259] Bluetooth: hci1: command 0x041b tx timeout [ 89.806517][ T4266] Bluetooth: hci2: command 0x041b tx timeout [ 89.811953][ T4259] Bluetooth: hci0: command 0x041b tx timeout [ 89.815975][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.833883][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.843130][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.857268][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.866353][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.875851][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.884944][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.904584][ T4249] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.940928][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.950669][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.959100][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.968321][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.978042][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.987114][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.996378][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.014786][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.027818][ T4257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.043239][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.053023][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.061658][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.070935][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.079955][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.087147][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.095699][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.104670][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.114341][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.121546][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.130274][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.139389][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.148927][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.159269][ T4250] device veth0_vlan entered promiscuous mode [ 90.205013][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.216291][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.231845][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.239910][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.259947][ T4250] device veth1_vlan entered promiscuous mode [ 90.279543][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.301651][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.313910][ T4257] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.333721][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.386010][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.404151][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.416908][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.426388][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.435435][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.444233][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.453730][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.463471][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.472812][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.479934][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.490384][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.505394][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.525004][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.544518][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.553538][ T4308] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.560693][ T4308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.569236][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.619364][ T4250] device veth0_macvtap entered promiscuous mode [ 90.640585][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.653098][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.674705][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.703285][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.719673][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.762638][ T4250] device veth1_macvtap entered promiscuous mode [ 90.784367][ T4257] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.812066][ T4257] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.829322][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.840752][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.850353][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.858733][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.869014][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.879050][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.887858][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.897668][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.906639][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.915946][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.924471][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.938471][ T4262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.962042][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.970092][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.022164][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.044686][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.064280][ T4258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.084199][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.104499][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.134375][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.171539][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.190004][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.221154][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.230939][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.263630][ T4250] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.273391][ T4250] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.287391][ T4250] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.296680][ T4250] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.340417][ T4249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.374846][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.394760][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.452714][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.470486][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.480935][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.488953][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.496631][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.505090][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.524406][ T4258] device veth0_vlan entered promiscuous mode [ 91.536487][ T4257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.580013][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.603429][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.619975][ T4258] device veth1_vlan entered promiscuous mode [ 91.704589][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 91.715141][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 91.723864][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.733322][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.742805][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.751109][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.765601][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.773690][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.786864][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.798329][ T4249] device veth0_vlan entered promiscuous mode [ 91.804684][ T4267] Bluetooth: hci3: command 0x040f tx timeout [ 91.812999][ T4267] Bluetooth: hci4: command 0x040f tx timeout [ 91.831873][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.840660][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.850522][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.871310][ T4257] device veth0_vlan entered promiscuous mode [ 91.882306][ T4266] Bluetooth: hci0: command 0x040f tx timeout [ 91.883507][ T4267] Bluetooth: hci2: command 0x040f tx timeout [ 91.888351][ T4266] Bluetooth: hci1: command 0x040f tx timeout [ 91.911962][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.920096][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.932410][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.941107][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.950053][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.959933][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.969130][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.977560][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.986177][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.003157][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.012311][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.026425][ T4249] device veth1_vlan entered promiscuous mode [ 92.041148][ T4262] device veth0_vlan entered promiscuous mode [ 92.050745][ T4258] device veth0_macvtap entered promiscuous mode [ 92.060551][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.070502][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.070842][ T4258] device veth1_macvtap entered promiscuous mode [ 92.093653][ T4257] device veth1_vlan entered promiscuous mode [ 92.103935][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 92.114763][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 92.124390][ T14] cfg80211: failed to load regulatory.db [ 92.135168][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 92.152826][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.169773][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.184899][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.218211][ T4262] device veth1_vlan entered promiscuous mode [ 92.244499][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.256756][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.277201][ T4258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.308977][ T4249] device veth0_macvtap entered promiscuous mode [ 92.322804][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.333056][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.342788][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.352938][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.363429][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.384787][ T4258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.399972][ T4258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.418480][ T4258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.435249][ T4249] device veth1_macvtap entered promiscuous mode [ 92.463615][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.473071][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.492523][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.511069][ T4262] device veth0_macvtap entered promiscuous mode [ 92.529680][ T4258] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.540154][ T4258] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.549474][ T4258] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.558298][ T4258] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.589751][ T4257] device veth0_macvtap entered promiscuous mode [ 92.748321][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.801450][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.813004][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.825166][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.836961][ T4262] device veth1_macvtap entered promiscuous mode [ 93.648561][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.670573][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.691554][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.707109][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.719919][ T4262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.738894][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 93.783297][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 93.816518][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 93.842685][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.851507][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.870283][ T4257] device veth1_macvtap entered promiscuous mode [ 93.891851][ T4267] Bluetooth: hci4: command 0x0419 tx timeout [ 93.898172][ T4267] Bluetooth: hci3: command 0x0419 tx timeout [ 93.916572][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.933501][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.947798][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.961177][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.971987][ T4267] Bluetooth: hci1: command 0x0419 tx timeout [ 93.978037][ T4267] Bluetooth: hci2: command 0x0419 tx timeout [ 93.988750][ T4266] Bluetooth: hci0: command 0x0419 tx timeout [ 93.999593][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.019733][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.039491][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.050809][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.097355][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.108076][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.118947][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.132509][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.155238][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.358526][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.439755][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.508598][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.673525][ T4249] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.769418][ T4249] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.789704][ T4249] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.801036][ T4249] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.883250][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.908590][ T4341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.926796][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.937306][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.948269][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.958497][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.969349][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.984211][ T4262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.034638][ T4262] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.044072][ T4262] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.052945][ T4262] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.061740][ T4262] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.084825][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 95.094074][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.107594][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.119418][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.130922][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.141539][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.151721][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.163306][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.173284][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.184028][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.195834][ T4257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.228379][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 95.240230][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.256995][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.268261][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.278465][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.289810][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.299925][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.310488][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.320924][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.334619][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.346585][ T4257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.364667][ T4308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.372853][ T4308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.387075][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 95.399975][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.412236][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 95.425150][ T4257] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.440238][ T4257] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.450316][ T4257] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.459334][ T4257] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.548133][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.560352][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.589075][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 95.590128][ T4308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.610450][ T4308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.634433][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.670980][ T4308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.707139][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.726051][ T4308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.741279][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 95.757401][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.797387][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.851591][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.910957][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.925190][ T4321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.933519][ T4347] ipt_CLUSTERIP: Please specify destination IP [ 95.938844][ T4321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.973775][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 96.001060][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 96.234998][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.243883][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.266869][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 97.319343][ T4361] Bluetooth: MGMT ver 1.22 [ 97.562081][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.570630][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.787392][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 97.883152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.893575][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.097302][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 98.107875][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.114808][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 98.131299][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 98.159459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.812081][ T4253] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.942444][ T22] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 99.011818][ T4253] usb 2-1: Using ep0 maxpacket: 8 [ 99.052386][ T4253] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 99.060891][ T4253] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 99.077708][ T4253] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 99.142014][ T22] usb 5-1: Using ep0 maxpacket: 8 [ 99.157168][ T22] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 99.185584][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.212832][ T4253] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 99.215608][ T22] usb 5-1: Product: syz [ 99.223631][ T4296] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.242059][ T22] usb 5-1: Manufacturer: syz [ 99.270103][ T22] usb 5-1: SerialNumber: syz [ 99.281439][ T4253] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.300424][ T22] usb 5-1: config 0 descriptor?? [ 99.301767][ T4253] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 99.642763][ T4296] usb 4-1: Using ep0 maxpacket: 8 [ 99.665528][ T4253] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.698536][ T4392] ptrace attach of "./syz-executor exec"[4258] was attempted by "./syz-executor exec"[4392] [ 99.767786][ T4296] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.794312][ T22] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 99.804411][ T4296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 99.832650][ T4296] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 99.881473][ T4296] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 99.903204][ T4296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.940215][ T4296] usb 4-1: config 0 descriptor?? [ 101.810023][ T4253] usb 2-1: usb_control_msg returned -71 [ 101.815966][ T4253] usbtmc 2-1:16.0: can't read capabilities [ 101.824369][ T4259] Bluetooth: hci0: command 0x0c20 tx timeout [ 102.266624][ T4253] usb 2-1: USB disconnect, device number 2 [ 102.913963][ T22] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -110 [ 103.007553][ T4404] usb 5-1: USB disconnect, device number 2 [ 103.324998][ T4412] netlink: 20 bytes leftover after parsing attributes in process `syz.4.22'. [ 104.241954][ T4343] usb 4-1: USB disconnect, device number 2 [ 105.902808][ T4430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.31'. [ 106.163265][ T4444] xt_nat: multiple ranges no longer supported [ 106.639218][ T4430] bond0: (slave bond_slave_0): Releasing backup interface [ 106.745096][ T4446] Zero length message leads to an empty skb [ 106.837985][ T4448] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 107.202857][ T4455] netlink: 452 bytes leftover after parsing attributes in process `syz.4.36'. [ 108.808121][ T4454] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 111.406849][ T4497] xt_nat: multiple ranges no longer supported [ 118.572593][ T4547] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 118.588339][ T4547] cramfs: wrong magic [ 119.997713][ T4554] netlink: 452 bytes leftover after parsing attributes in process `syz.0.62'. [ 123.691118][ T4581] capability: warning: `syz.3.71' uses 32-bit capabilities (legacy support in use) [ 124.621804][ T2159] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 124.878874][ T2159] usb 5-1: Using ep0 maxpacket: 8 [ 124.889581][ T2159] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 124.919456][ T2159] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.939740][ T2159] usb 5-1: Product: syz [ 125.048692][ T2159] usb 5-1: Manufacturer: syz [ 125.631536][ T2159] usb 5-1: SerialNumber: syz [ 125.680568][ T2159] usb 5-1: config 0 descriptor?? [ 125.899337][ T2159] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 231.291659][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 231.298765][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4250/1:b..l [ 231.307064][ C0] (detected by 0, t=10502 jiffies, g=11149, q=7 ncpus=2) [ 231.314216][ C0] task:syz-executor state:R running task stack:19184 pid:4250 ppid:4247 flags:0x00004000 [ 231.325774][ C0] Call Trace: [ 231.329083][ C0] [ 231.332039][ C0] __schedule+0x143f/0x4570 [ 231.336618][ C0] ? deref_stack_reg+0x17c/0x210 [ 231.341593][ C0] ? release_firmware_map_entry+0x18b/0x18b [ 231.347526][ C0] ? print_irqtrace_events+0x210/0x210 [ 231.353025][ C0] ? is_bpf_text_address+0x22/0x2a0 [ 231.358343][ C0] ? preempt_schedule_irq+0xec/0x1c0 [ 231.363671][ C0] preempt_schedule_irq+0xf7/0x1c0 [ 231.368851][ C0] ? preempt_schedule_notrace+0x140/0x140 [ 231.374603][ C0] ? unwind_get_return_address+0x49/0x80 [ 231.380289][ C0] irqentry_exit+0x53/0x80 [ 231.384740][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 231.390763][ C0] RIP: 0010:lock_acquire+0x26f/0x5a0 [ 231.396091][ C0] Code: 2b 00 74 08 4c 89 f7 e8 af 54 77 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 231.415739][ C0] RSP: 0018:ffffc90003e37420 EFLAGS: 00000206 [ 231.421842][ C0] RAX: 0000000000000001 RBX: 1ffff920007c6e90 RCX: 1ffff920007c6e30 [ 231.429840][ C0] RDX: dffffc0000000000 RSI: ffffffff8b0c2f40 RDI: ffffffff8b5f70e0 [ 231.437853][ C0] RBP: ffffc90003e37568 R08: dffffc0000000000 R09: fffffbfff225784d [ 231.445856][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff920007c6e8c [ 231.453854][ C0] R13: dffffc0000000000 R14: ffffc90003e37480 R15: 0000000000000246 [ 231.461877][ C0] ? read_lock_is_recursive+0x10/0x10 [ 231.467299][ C0] ? shmem_evict_inode+0x265/0xa60 [ 231.472443][ C0] ? page_ext_put+0x98/0xb0 [ 231.476979][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 231.483080][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 231.488146][ C0] ? page_ext_get+0x1c/0x2a0 [ 231.492770][ C0] page_ext_get+0x39/0x2a0 [ 231.497213][ C0] ? page_ext_get+0x1c/0x2a0 [ 231.501828][ C0] __page_table_check_zero+0x139/0x4b0 [ 231.507330][ C0] free_unref_page_prepare+0x12b6/0x15b0 [ 231.513138][ C0] free_unref_page_list+0x663/0x900 [ 231.518475][ C0] ? __mod_zone_page_state+0xd6/0x140 [ 231.523895][ C0] release_pages+0x24c4/0x27a0 [ 231.528709][ C0] ? lru_cache_disable+0x30/0x30 [ 231.533686][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 231.538920][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 231.544161][ C0] __pagevec_release+0x80/0xf0 [ 231.548970][ C0] shmem_undo_range+0x865/0x2390 [ 231.553950][ C0] ? shmem_truncate_range+0xb0/0xb0 [ 231.559228][ C0] shmem_evict_inode+0x265/0xa60 [ 231.564205][ C0] ? inode_wait_for_writeback+0x21f/0x280 [ 231.569964][ C0] ? shmem_free_in_core_inode+0xb0/0xb0 [ 231.575550][ C0] ? bit_waitqueue+0x30/0x30 [ 231.580179][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 231.585413][ C0] ? shmem_free_in_core_inode+0xb0/0xb0 [ 231.591076][ C0] evict+0x529/0x930 [ 231.595011][ C0] ? proc_nr_inodes+0x310/0x310 [ 231.599889][ C0] ? _raw_spin_unlock+0x24/0x40 [ 231.604774][ C0] ? iput+0x73f/0x980 [ 231.608801][ C0] do_unlinkat+0x509/0x820 [ 231.613262][ C0] ? fsnotify_link_count+0xf0/0xf0 [ 231.618427][ C0] __x64_sys_unlink+0x45/0x50 [ 231.623139][ C0] do_syscall_64+0x3b/0xb0 [ 231.627590][ C0] ? clear_bhb_loop+0x45/0xa0 [ 231.632301][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 231.638223][ C0] RIP: 0033:0x7f072658c717 [ 231.642675][ C0] RSP: 002b:00007ffe1fcadb88 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 231.651119][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f072658c717 [ 231.659120][ C0] RDX: 00007ffe1fcadbb0 RSI: 00007ffe1fcadc40 RDI: 00007ffe1fcadc40 [ 231.667122][ C0] RBP: 00007ffe1fcadc40 R08: 0000000000000000 R09: 0000000000000000 [ 231.675125][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffe1fcaecd0 [ 231.683129][ C0] R13: 00007f072660e51c R14: 000000000001e854 R15: 00007ffe1fcaed10 [ 231.691153][ C0] [ 231.694203][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10535 jiffies! g11149 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 231.706577][ C0] rcu: Possible timer handling issue on cpu=0 timer-softirq=6976 [ 231.714395][ C0] rcu: rcu_preempt kthread starved for 10541 jiffies! g11149 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 231.725793][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 231.735785][ C0] rcu: RCU grace-period kthread stack dump: [ 231.741686][ C0] task:rcu_preempt state:I stack:25592 pid:16 ppid:2 flags:0x00004000 [ 231.750926][ C0] Call Trace: [ 231.754227][ C0] [ 231.757179][ C0] __schedule+0x143f/0x4570 [ 231.761724][ C0] ? _raw_spin_unlock+0x40/0x40 [ 231.766623][ C0] ? release_firmware_map_entry+0x18b/0x18b [ 231.772551][ C0] ? lockdep_softirqs_off+0x420/0x420 [ 231.777956][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 231.783877][ C0] ? _raw_spin_unlock+0x40/0x40 [ 231.788759][ C0] schedule+0xbf/0x180 [ 231.792863][ C0] schedule_timeout+0x1b9/0x300 [ 231.797737][ C0] ? console_conditional_schedule+0x40/0x40 [ 231.803744][ C0] ? update_process_times+0x1b0/0x1b0 [ 231.809158][ C0] ? prepare_to_swait_event+0x329/0x350 [ 231.814746][ C0] rcu_gp_fqs_loop+0x2d2/0x1150 [ 231.819645][ C0] ? dump_blkd_tasks+0x810/0x810 [ 231.824613][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 231.829868][ C0] ? rcu_gp_init+0x15f0/0x15f0 [ 231.834662][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 231.840589][ C0] ? finish_swait+0xcf/0x1e0 [ 231.845218][ C0] rcu_gp_kthread+0xa3/0x3b0 [ 231.849841][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 231.854978][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 231.860909][ C0] ? __kthread_parkme+0x168/0x1c0 [ 231.865991][ C0] kthread+0x28d/0x320 [ 231.870081][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 231.875220][ C0] ? kthread_blkcg+0xd0/0xd0 [ 231.879839][ C0] ret_from_fork+0x1f/0x30 [ 231.884315][ C0] [ 231.887359][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 231.893711][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.1.133-syzkaller #0 [ 231.901447][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 231.911521][ C0] RIP: 0010:acpi_idle_do_entry+0x10f/0x340 [ 231.917360][ C0] Code: a8 ce f6 48 83 e3 08 0f 85 0b 01 00 00 4c 8d 74 24 20 e8 44 65 d5 f6 0f 1f 44 00 00 e8 6a a4 ce f6 0f 00 2d f3 b5 ad 00 fb f4 <4c> 89 f3 48 c1 eb 03 42 80 3c 3b 00 74 08 4c 89 f7 e8 0b 06 26 f7 [ 231.936991][ C0] RSP: 0018:ffffffff8d007b20 EFLAGS: 000002d3 [ 231.943105][ C0] RAX: ffffffff8abc05e6 RBX: 0000000000000000 RCX: ffffffff8d0bd980 [ 231.951108][ C0] RDX: 0000000000000000 RSI: ffffffff8b0c1dc0 RDI: ffffffff8b5f70e0 [ 231.959110][ C0] RBP: ffffffff8d007bb0 R08: ffffffff8abc05c8 R09: fffffbfff1a17b31 [ 231.967122][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffffff1a00f64 [ 231.975124][ C0] R13: ffff88801bb65004 R14: ffffffff8d007b40 R15: dffffc0000000000 [ 231.983132][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 231.992086][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 231.998695][ C0] CR2: 000000110c32b8ad CR3: 00000000569d4000 CR4: 00000000003506f0 [ 232.006691][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 232.011639][ C1] sched: RT throttling activated [ 232.019633][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 232.027639][ C0] Call Trace: [ 232.030953][ C0] [ 232.033827][ C0] ? rcu_check_gp_kthread_starvation+0x1b8/0x220 [ 232.040210][ C0] ? print_other_cpu_stall+0x150c/0x1640 [ 232.045908][ C0] ? print_cpu_stall+0x5f0/0x5f0 [ 232.050880][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 232.055934][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 232.061149][ C0] ? rcu_sched_clock_irq+0xaf6/0x1200 [ 232.066564][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 232.071433][ C0] ? hrtimer_run_queues+0x163/0x450 [ 232.076649][ C0] ? update_process_times+0x147/0x1b0 [ 232.082031][ C0] ? tick_sched_timer+0x386/0x550 [ 232.087077][ C0] ? tick_setup_sched_timer+0x2f0/0x2f0 [ 232.092647][ C0] ? __hrtimer_run_queues+0x5a7/0xe50 [ 232.098047][ C0] ? hrtimer_interrupt+0x980/0x980 [ 232.103168][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 232.109250][ C0] ? hrtimer_interrupt+0x392/0x980 [ 232.114382][ C0] ? __sysvec_apic_timer_interrupt+0x158/0x5b0 [ 232.120549][ C0] ? sysvec_apic_timer_interrupt+0x9b/0xc0 [ 232.126371][ C0] [ 232.129314][ C0] [ 232.132244][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 232.138410][ C0] ? acpi_idle_do_entry+0xe8/0x340 [ 232.143527][ C0] ? acpi_idle_do_entry+0x106/0x340 [ 232.148759][ C0] ? acpi_idle_do_entry+0x10f/0x340 [ 232.153984][ C0] ? acpi_idle_enter_bm+0x5e0/0x5e0 [ 232.159179][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 232.165188][ C0] ? __sched_clock_gtod_offset+0xe0/0xe0 [ 232.170845][ C0] acpi_idle_enter+0x352/0x4f0 [ 232.175613][ C0] cpuidle_enter_state+0x516/0xf80 [ 232.180731][ C0] ? cpuidle_enter_s2idle+0x6b0/0x6b0 [ 232.186120][ C0] ? tick_nohz_idle_stop_tick+0x238/0xad0 [ 232.191849][ C0] cpuidle_enter+0x59/0x90 [ 232.196341][ C0] do_idle+0x3ce/0x680 [ 232.200447][ C0] ? print_irqtrace_events+0x210/0x210 [ 232.205968][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 232.211204][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 232.216412][ C0] ? asm_sysvec_error_interrupt+0x11/0x20 [ 232.222142][ C0] ? schedule_idle+0x57/0x90 [ 232.226756][ C0] ? rest_init+0x31/0x300 [ 232.231122][ C0] cpu_startup_entry+0x3d/0x60 [ 232.235909][ C0] rest_init+0x2da/0x300 [ 232.240172][ C0] ? time_init+0x33/0x33 [ 232.244427][ C0] arch_call_rest_init+0xa/0xa [ 232.249188][ C0] start_kernel+0x496/0x53f [ 232.253695][ C0] secondary_startup_64_no_verify+0xcf/0xdb [ 232.259601][ C0]