last executing test programs: 8.051010727s ago: executing program 3 (id=4): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0xebcc, 0x1, 0x2, 0x24e}, &(0x7f00000000c0)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x80, 0x3, 0x0, 0x9276, 0x0, 0x0, {0x1}}) io_uring_enter(r2, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0) 6.728232635s ago: executing program 1 (id=2): syz_io_uring_setup(0x5b3a, &(0x7f00000000c0)={0x0, 0x10069af, 0x3180, 0x8000, 0x1c0}, &(0x7f0000000180), &(0x7f0000000040)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000100)=0x1, 0x4) clock_adjtime(0x17, &(0x7f00000001c0)={0xffffffff, 0x400000000000040, 0xb, 0x0, 0x1, 0x1, 0x0, 0xfffffffffffffffd, 0xc4e9, 0x7, 0x1, 0x0, 0x8, 0x1, 0x0, 0xe5a, 0x6, 0x5, 0x3, 0xffffffffffffffff, 0x6, 0x10000, 0x0, 0x0, 0x745, 0x400000}) r2 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0x6b, 0x0, 0x0, 0x0, 0x5}) msgsnd(r2, &(0x7f0000000240)=ANY=[], 0x0, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000140)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x5, 0x20}) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000010000000000000004000000000000000800"], 0x24, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x104}}, 0x44800) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) socket$netlink(0x10, 0x3, 0x0) 5.770390871s ago: executing program 4 (id=5): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20000000) 5.725369294s ago: executing program 0 (id=1): pipe(&(0x7f0000000140)) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0xbdc, &(0x7f0000000240)={0x0, 0x5b10, 0x10, 0x800003, 0x35d}, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x4e24, @broadcast}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) 5.723883734s ago: executing program 1 (id=18): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0xf000, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r3, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x2000040) 5.27384853s ago: executing program 3 (id=7): capset(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000280)={@fda={0x66646185, 0x2, 0x0, 0x3f}, @ptr={0x70742a85, 0x20000000, 0x0, 0x0, 0x2, 0x18}, @fda={0x66646185, 0x9, 0x1, 0x10}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xbfb3) inotify_init() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x100000000000f7) keyctl$revoke(0x3, r3) 5.2736229s ago: executing program 4 (id=8): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x4, 0x4, 0x9, 0x150}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x4000) shutdown(0xffffffffffffffff, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x14, 0x0, 0x0, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x40000) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="2e000000010002", 0x7) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f0000000040)) 5.265590491s ago: executing program 0 (id=20): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20000000) 5.265232181s ago: executing program 1 (id=9): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) 5.265089631s ago: executing program 2 (id=10): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000100)={0x0, 0x59455247, 0xf00, 0x8, 0x1, @discrete={0x5, 0x29}}) 5.162054217s ago: executing program 2 (id=11): r0 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x40c01) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="071db6ce2ce16db87572abe7250000", 0xf}, {&(0x7f0000001300)="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", 0xbf6}], 0x2) 4.626994508s ago: executing program 0 (id=12): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000340)=0x4020, 0x4) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000580)=ANY=[]) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000080)={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, "e76c8bbb4aebb779b4cdf95a1247047aecd9d51ac958600c4984588489634960", 0x2, 0x101, 0x8001, 0x3}, 0x3c) r2 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r6 = socket(0x1e, 0x4, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f0000003240), 0x4000000000000e4, 0x9000000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) 4.543677763s ago: executing program 4 (id=14): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000580), &(0x7f00000005c0)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r3, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000840)="3b9eccc918ce8c50894cb802b04e9492b64a02d85d3ed05eac49318868ad13e4fa9e2f1b165dfcc79e43ed30bb0c212bebb71afc79347f2f1a90e936a487e1ce171789626d34ffa8e3b4415ad869955133f81fab7f450d7ef6df7bf6a16cc39fd78e88662ffd1c3b31ffe836682b1a", 0x6f}, {&(0x7f00000008c0)="4c29f044d3eceb70b0e545f8ff4f15828fc42acef50b8d6a418bb8e906c80a3d468e449c70a3f04fbd5cdfb3fbb84bd66ac984bdd0b26852bae87b1e2a8a813f26547892004c77d17995be144eeb76f7f8c9f82a07e1377d759a49a131bca1d320b2e7e81eeb984b56345d3796ff6eef9066abff02dda0e6cedb4078504c3693cd1aa05616740c67b35ea7e42ba1ab23cb4704890669c930102ce7e33ae8a4f0e49f6f8fa7ade3bcfc25a2dbb517b9ed7eaa389157a4601c408d7738cb353316ff5ef8e2f87fa28ad495548f206e4da6688e4e613d3e30d5d61ed29c1fa846487f2662ecf4f5a7c5791b58be5b8f87afd38b92c486f37ba1d725550573bcb72701378af7ec0d108f3a94e53839306c7d5c1c66c096c24dcad1917578e85d4aef2dd01aba20140ab9c391b9b4f88034ce6ea7712e94f95c442438be3b79d4af738d486db819ff8868210522205606604cf955d3244818bde7889a77b2bc7fa7ce35857888c9c1c4578825e8f608ce3a43b1b764b9aa2e279d2de6a1c645eab6ada91a50b5dd63aaa59eef98cc77d14b287e7787e01c21a0339fdc2d826b12806ece3008e0fe5b766733ce4f05627e49c9ede762e861c132ffbc5ce7e8ff23e7b0b6a7e355635493ef9833053b825981501ba4faac381dc33604da84660b1c86423c327ee1e82a575032ec9eebcaa2e0a5627b3f10145f653f96efc3dee1f7f35845de84b4483f5616184a8c953510505e47f9a126e55a54a472b5c5010c156015535517a62007a09cf68f06ed1f133d689f8cd7157287ae7e1411cddd7b8c13f8c14fc10e3911ec75b177f64b5455647f25a1719aaac0b7b527f2a63d265e63ad76ea9aa61034896ecdcd927601d101379360536d94562b06e3400fefbf120c80d1f554d45d9b7de4fa0d999c7e90c020762ed8216745b6648d1a0dc357f810727df709872c93f21ac95df17c6ee20a7937c65b0fc236d9eb027d7080c203516a7cd5d080d3fa0c89331a937de86e12771661a6e533033a61cbd8ac5588b9ec4f6abcfa102044847694acbeaf07b63f528941bc854bb15a687c19cfd9d36f92c444d20ae6bdf71b626538cb78f69ae471027e6fdc59a85b96a3908257ca692750bd3fdc9aa588e42939c744e5705abcc9a4a2b755e551dd77bac92b2696655cbc8f0178cc0a194d27996ccf286d033be78354134702b5b3c39a067d69080b7c65b7b0995ea8ba4ff14a0c2ae06d92dcc0c9dcab30695efe5aff43467bd34cc12f08ad1a73829e10ee979cf5076ff3e17b274323e9ceb9dfa21cb94913712e044d68e4e6f221f0aed76aaf3b64c9b84509c8501b52a0ea7b7ab5410fadfb16b13ffeaf4f24d0868d6110ea74794ffc470222e08e7aaefb97396fd5e0d8679e1bbc9267168348dda8d95163a42327d3e26ac7f19d1631c1772353c22e2ac288240e829121bbe1c1198e36cb1f31571d3980aca6bb6ca7eff6d7be4c20ca9bdd4b9b19e5d3d231ed97f3caa8cb05b14cb943f4b7eb14b769bee903bd2d5002f69cf8fb2383a07f3da10f6359b4f6c8770abf37ce118c2b7059e3175d4bb120605b81c508085b8758cbcc0e269bb27a586ac35f59d67fb9fc5ec2a60f0d37f5cea82f16e183cb3809faf5e90530658f11b460bbdfc28cfb301c2500647a709483eca3cae9515dfbba2e911912049d69d5ae29efda7e90b3d8a6d5ca10ed61c32d66bbf362f62c862958494848b7117ffd4d449f521de37bfc8d70a21fd9338c5b7d19f877b5eb162cdf914609725f6928be91eb6b887ec9fe4136f35e27fc1c37465f62d079c9aa24db4181443e9c0ccc015cd4dda1e3f1baac1b0ca74ce135a987b5557c278f66b4792af252ca0938ae5562fcbfca06d66b4e63cb76fe54bf9d9c23ffefc70c583cdf5395c16d35064248263ab8a8ce51daa51e28323388655a3c4f9142b5ce8447d2bf1be2d5414b05d25eff35e56204e2ef6f5c917e661ba1a827033bf37c079e259789ebf5", 0x58b}], 0x2}, 0x20008004) 4.284860238s ago: executing program 1 (id=16): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x24}}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000300)=ANY=[@ANYBLOB='usrquota,usrquota_block_hardlimit=8']) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r3, 0xee01) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x2020000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x13}}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 4.154570916s ago: executing program 2 (id=17): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x20000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) execveat$binfmt(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000094003e8500000007000040950000000000", @ANYRESOCT=r0, @ANYRES32=r0, @ANYRESOCT=r2, @ANYRES32=r4], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2}, 0x94) keyctl$dh_compute(0x17, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) add_key(0x0, &(0x7f00000004c0)={'syz', 0x2}, &(0x7f0000000500), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000002060300000034e40000000000000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f7274000000000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe80000000000000000000007649ec6106000440000400000500070006"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r6, 0x106, 0x1, 0x0, &(0x7f0000003b00)) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0) write$dsp(r7, &(0x7f0000000900)='B', 0x1) close(r7) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$loop(&(0x7f00000003c0), 0x4, 0x102) 2.584293088s ago: executing program 0 (id=19): syz_io_uring_setup(0x5b3a, &(0x7f00000000c0)={0x0, 0x10069af, 0x3180, 0x8000, 0x1c0}, &(0x7f0000000180), &(0x7f0000000040)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000100)=0x1, 0x4) clock_adjtime(0x17, &(0x7f00000001c0)={0xffffffff, 0x400000000000040, 0xb, 0x0, 0x1, 0x1, 0x0, 0xfffffffffffffffd, 0xc4e9, 0x7, 0x1, 0x0, 0x8, 0x1, 0x0, 0xe5a, 0x6, 0x5, 0x3, 0xffffffffffffffff, 0x6, 0x10000, 0x0, 0x0, 0x745, 0x400000}) r2 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0x6b, 0x0, 0x0, 0x0, 0x5}) msgsnd(r2, &(0x7f0000000240)=ANY=[], 0x0, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000140)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x5, 0x20}) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000010000000000000004000000000000000800"], 0x24, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x104}}, 0x44800) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) socket$netlink(0x10, 0x3, 0x0) 2.581728868s ago: executing program 1 (id=21): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0xebcc, 0x1, 0x2, 0x24e}, &(0x7f00000000c0)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x80, 0x3, 0x0, 0x9276, 0x0, 0x0, {0x1}}) io_uring_enter(r2, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0) 2.329853653s ago: executing program 3 (id=22): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0xf000, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r3, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x2000040) 1.484540043s ago: executing program 2 (id=23): pipe(&(0x7f0000000140)) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0xbdc, &(0x7f0000000240)={0x0, 0x5b10, 0x10, 0x800003, 0x35d}, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x4e24, @broadcast}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) 143.056722ms ago: executing program 2 (id=24): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000080)="520003000100b8", 0x7) 139.038062ms ago: executing program 3 (id=25): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x9, 0x6}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x1, 0x2, 0x2}, {0x3, 0x0, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8}, 0x8000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000340)=@xdp={0x2c, 0x7, r3, 0x2c}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)='|', 0x1}], 0x1}, 0x4) 0s ago: executing program 2 (id=26): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.191' (ED25519) to the list of known hosts. [ 78.697985][ T4255] cgroup: Unknown subsys name 'net' [ 78.830742][ T4255] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.366643][ T4255] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 81.938622][ T4277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.948757][ T4282] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.958194][ T4282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.964697][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.969426][ T4282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.976323][ T4281] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.982599][ T4282] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.989947][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.996030][ T4282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.005039][ T4281] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.009485][ T4282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.016688][ T4281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.022060][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.030678][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.042504][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.045831][ T4281] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.053491][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.058623][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.066305][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.075553][ T4281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.079155][ T4284] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.085694][ T4281] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.099640][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.100830][ T4281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.108351][ T4282] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.115453][ T4281] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.122333][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.135650][ T4279] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.177843][ T4282] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 82.185560][ T4282] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.621643][ T4270] chnl_net:caif_netlink_parms(): no params data found [ 82.760105][ T4280] chnl_net:caif_netlink_parms(): no params data found [ 82.803539][ T4269] chnl_net:caif_netlink_parms(): no params data found [ 82.815250][ T4268] chnl_net:caif_netlink_parms(): no params data found [ 82.860638][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.869162][ T4270] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.878063][ T4270] device bridge_slave_0 entered promiscuous mode [ 82.893754][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.901186][ T4270] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.909208][ T4270] device bridge_slave_1 entered promiscuous mode [ 82.946390][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 82.997583][ T4270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.040150][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.050768][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.058887][ T4280] device bridge_slave_0 entered promiscuous mode [ 83.076344][ T4270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.096808][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.107601][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.116143][ T4280] device bridge_slave_1 entered promiscuous mode [ 83.123133][ T4268] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.130820][ T4268] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.139621][ T4268] device bridge_slave_0 entered promiscuous mode [ 83.190170][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.199036][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.209176][ T4268] device bridge_slave_1 entered promiscuous mode [ 83.217730][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.225338][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.233276][ T4269] device bridge_slave_0 entered promiscuous mode [ 83.253058][ T4270] team0: Port device team_slave_0 added [ 83.278329][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.286542][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.298702][ T4269] device bridge_slave_1 entered promiscuous mode [ 83.307530][ T4270] team0: Port device team_slave_1 added [ 83.323984][ T4280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.343701][ T4280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.381660][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.390910][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.400505][ T4274] device bridge_slave_0 entered promiscuous mode [ 83.417620][ T4268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.436215][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.443214][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.469341][ T4270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.482948][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.497242][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.507260][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.519844][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.528380][ T4274] device bridge_slave_1 entered promiscuous mode [ 83.538537][ T4280] team0: Port device team_slave_0 added [ 83.546443][ T4268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.556414][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.563411][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.589874][ T4270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.646922][ T4280] team0: Port device team_slave_1 added [ 83.668658][ T4269] team0: Port device team_slave_0 added [ 83.708413][ T4269] team0: Port device team_slave_1 added [ 83.719118][ T4270] device hsr_slave_0 entered promiscuous mode [ 83.729706][ T4270] device hsr_slave_1 entered promiscuous mode [ 83.740562][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.759775][ T4268] team0: Port device team_slave_0 added [ 83.786506][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.806150][ T4268] team0: Port device team_slave_1 added [ 83.813635][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.820965][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.847274][ T4280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.895435][ T4274] team0: Port device team_slave_0 added [ 83.901876][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.909134][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.935509][ T4280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.947949][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.955311][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.981970][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.008557][ T4274] team0: Port device team_slave_1 added [ 84.019386][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.026704][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.052932][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.070168][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.077303][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.103393][ T4268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.152325][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.159519][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.186372][ T4268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.198439][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.207838][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.234733][ T4271] Bluetooth: hci2: command 0x0409 tx timeout [ 84.234749][ T4281] Bluetooth: hci3: command 0x0409 tx timeout [ 84.241324][ T4271] Bluetooth: hci0: command 0x0409 tx timeout [ 84.248297][ T4281] Bluetooth: hci4: command 0x0409 tx timeout [ 84.261012][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.274046][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.281043][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.307316][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.318101][ T4271] Bluetooth: hci1: command 0x0409 tx timeout [ 84.340067][ T4280] device hsr_slave_0 entered promiscuous mode [ 84.347212][ T4280] device hsr_slave_1 entered promiscuous mode [ 84.354496][ T4280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.362374][ T4280] Cannot create hsr debugfs directory [ 84.451622][ T4269] device hsr_slave_0 entered promiscuous mode [ 84.459106][ T4269] device hsr_slave_1 entered promiscuous mode [ 84.466076][ T4269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.473655][ T4269] Cannot create hsr debugfs directory [ 84.490456][ T4268] device hsr_slave_0 entered promiscuous mode [ 84.500082][ T4268] device hsr_slave_1 entered promiscuous mode [ 84.507054][ T4268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.514870][ T4268] Cannot create hsr debugfs directory [ 84.562508][ T4274] device hsr_slave_0 entered promiscuous mode [ 84.569330][ T4274] device hsr_slave_1 entered promiscuous mode [ 84.576291][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.583955][ T4274] Cannot create hsr debugfs directory [ 84.894998][ T4270] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.921626][ T4270] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.942002][ T4270] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.952007][ T4270] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.999041][ T4268] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.009330][ T4268] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.035647][ T4268] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.046544][ T4268] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.091871][ T4280] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.119774][ T4280] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.144718][ T4280] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.178119][ T4280] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.233640][ T4269] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.257673][ T4269] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.285103][ T4269] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.319494][ T4269] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.377212][ T4270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.387903][ T4274] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.399601][ T4274] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.412094][ T4274] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.422879][ T4274] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.447501][ T4268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.504488][ T4268] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.525968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.536681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.545174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.556229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.565018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.574930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.584418][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.591768][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.603686][ T4270] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.619259][ T4280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.633683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.642290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.651233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.660152][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.667342][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.678267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.687763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.696617][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.703749][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.712009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.769016][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.780529][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.791459][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.801383][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.809908][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.819811][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.828925][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.836081][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.846073][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.857056][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.866495][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.875779][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.884731][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.893493][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.902743][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.911338][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.925500][ T4280] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.955676][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.969224][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.978500][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.988391][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.998102][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.007246][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.016540][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.026414][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.035771][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.047827][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.060303][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.073660][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.094486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.103721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.113523][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.120765][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.130758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.140713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.149777][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.156962][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.182500][ T4269] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.199617][ T4270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.212963][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.226726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.245105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.264280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.272635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.290475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.299102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.313447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.314826][ T4271] Bluetooth: hci0: command 0x041b tx timeout [ 86.324185][ T4273] Bluetooth: hci3: command 0x041b tx timeout [ 86.328614][ T4271] Bluetooth: hci2: command 0x041b tx timeout [ 86.333398][ T4273] Bluetooth: hci4: command 0x041b tx timeout [ 86.392847][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.400134][ T4273] Bluetooth: hci1: command 0x041b tx timeout [ 86.427045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.436907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.446703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.464924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.473541][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.480737][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.489863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.499661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.508644][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.515832][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.524904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.539861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.550435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.566006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.580535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.612488][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.640324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.667010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.676819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.695208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.716121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.743711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.757418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.771404][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.791332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.801951][ T26] cfg80211: failed to load regulatory.db [ 86.837772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.868055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.888384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.914416][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.921617][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.975784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.995813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.035738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.054779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.074876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.083586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.106090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.135227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.148943][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.156165][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.166038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.176066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.195816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.203407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.231656][ T4269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.281115][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.296632][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.315860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.329907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.339457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.351647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.361031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.386263][ T4270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.425078][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.432753][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.474513][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.530448][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.561222][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.590118][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.624688][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.633322][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.686296][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.726937][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.743651][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.801685][ T4268] device veth0_vlan entered promiscuous mode [ 87.825184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.845204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.906053][ T4268] device veth1_vlan entered promiscuous mode [ 87.935041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.943058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.984627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.992951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.040636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.079226][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.176426][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.195789][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.209498][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.220418][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.231822][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.274661][ T4268] device veth0_macvtap entered promiscuous mode [ 88.287467][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.299064][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.310254][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.319790][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.330132][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.343174][ T4280] device veth0_vlan entered promiscuous mode [ 88.358930][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.374901][ T4268] device veth1_macvtap entered promiscuous mode [ 88.386281][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.393951][ T4273] Bluetooth: hci4: command 0x040f tx timeout [ 88.400021][ T4273] Bluetooth: hci2: command 0x040f tx timeout [ 88.405175][ T4281] Bluetooth: hci3: command 0x040f tx timeout [ 88.407595][ T4273] Bluetooth: hci0: command 0x040f tx timeout [ 88.420653][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.436001][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.459683][ T4280] device veth1_vlan entered promiscuous mode [ 88.479740][ T4271] Bluetooth: hci1: command 0x040f tx timeout [ 88.523055][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.536515][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.549529][ T4268] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.560100][ T4268] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.569330][ T4268] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.578180][ T4268] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.596435][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.628064][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.639666][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.652589][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.669169][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.681434][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.756688][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.766893][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.777232][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.787141][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.832453][ T4280] device veth0_macvtap entered promiscuous mode [ 88.854284][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.862482][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.870904][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.879504][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.889611][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.904839][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.914808][ T4269] device veth0_vlan entered promiscuous mode [ 88.936534][ T4280] device veth1_macvtap entered promiscuous mode [ 88.954213][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.962563][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.978256][ T4269] device veth1_vlan entered promiscuous mode [ 89.037175][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.047427][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.066468][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.077865][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.090511][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.103071][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.114216][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.128088][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.139781][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.152225][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.159840][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.174060][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.183077][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.192584][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.202571][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.214564][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.223357][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.232447][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.241751][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.250881][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.259330][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.288109][ T4280] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.297253][ T4280] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.308127][ T4280] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.317399][ T4280] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.329338][ T4270] device veth0_vlan entered promiscuous mode [ 89.350652][ T4269] device veth0_macvtap entered promiscuous mode [ 89.396010][ T4274] device veth0_vlan entered promiscuous mode [ 89.403277][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.418988][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.429216][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.440115][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.449385][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.458336][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.466890][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.486068][ T4270] device veth1_vlan entered promiscuous mode [ 89.523362][ T4269] device veth1_macvtap entered promiscuous mode [ 89.551315][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.564699][ T4274] device veth1_vlan entered promiscuous mode [ 89.597130][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.611300][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.628200][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.638551][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.649551][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.658838][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.690235][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.702530][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.718809][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.729838][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.741832][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.759226][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.770368][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.781479][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.790899][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.801171][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.816016][ T4270] device veth0_macvtap entered promiscuous mode [ 89.834085][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.841989][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.872339][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.891732][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.920027][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.931588][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.954125][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.962535][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.970860][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 89.979174][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 89.987490][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 89.995810][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 90.004242][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 90.015297][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 90.023846][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 90.033846][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 90.064681][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.075512][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.091746][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.100423][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.111148][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.135698][ T4269] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.148296][ T4269] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.175293][ T4269] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.184248][ T4269] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.201406][ T4270] device veth1_macvtap entered promiscuous mode [ 90.257669][ T4274] device veth0_macvtap entered promiscuous mode [ 90.271312][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.290143][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.301824][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.310028][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.326703][ T4274] device veth1_macvtap entered promiscuous mode [ 90.340968][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.352994][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.368845][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.379486][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.397878][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.417704][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.431120][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.475643][ T4273] Bluetooth: hci0: command 0x0419 tx timeout [ 90.481770][ T4273] Bluetooth: hci3: command 0x0419 tx timeout [ 90.488065][ T4271] Bluetooth: hci2: command 0x0419 tx timeout [ 90.494562][ T4281] Bluetooth: hci4: command 0x0419 tx timeout [ 90.555806][ T4273] Bluetooth: hci1: command 0x0419 tx timeout [ 90.595953][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.605134][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.616817][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.626258][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.291858][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.353292][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.369844][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.380122][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.396346][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.413112][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.423667][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.433556][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.445779][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.459801][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.470391][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.484762][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.495055][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.511463][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.524386][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.535072][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.546676][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.567367][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.577018][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.586500][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.597091][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.619399][ T4270] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.629392][ T4270] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.638723][ T4270] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.647936][ T4270] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.660706][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.672733][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.688987][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.699974][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.710231][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.721047][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.730989][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.742098][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.753494][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.783453][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.785709][ T4362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.809405][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.824148][ T4362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.860054][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.060624][ T4399] tmpfs: Unknown parameter 'usrquota' [ 92.098444][ T4399] batman_adv: batadv0: Adding interface: gretap1 [ 92.105054][ T4399] batman_adv: batadv0: Interface activated: gretap1 [ 92.432534][ T4274] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.536585][ T4274] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.614859][ T4274] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.779453][ T4274] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.929546][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.974062][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.009191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.103324][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.155608][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.204666][ T4373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.205890][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.212629][ T4373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.462390][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.719518][ T4362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.843992][ T4362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.852257][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.885586][ T4410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.893579][ T4410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.904580][ T4411] device syzkaller0 entered promiscuous mode [ 93.930648][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.877891][ T4426] Bluetooth: MGMT ver 1.22 [ 94.927577][ T4430] netlink: 'syz.1.9': attribute type 3 has an invalid length. [ 94.936495][ T4430] netlink: 'syz.1.9': attribute type 3 has an invalid length. [ 96.001558][ T4446] tmpfs: Unknown parameter 'usrquota' [ 96.037634][ T4446] batman_adv: batadv0: Adding interface: gretap1 [ 96.044134][ T4446] batman_adv: batadv0: Interface activated: gretap1 [ 99.885595][ T4480] device syzkaller0 entered promiscuous mode [ 99.930726][ T4480] ------------[ cut here ]------------ [ 99.936618][ T4480] WARNING: CPU: 1 PID: 4480 at include/linux/skbuff.h:2844 em_nbyte_match+0x2cc/0x3e0 [ 99.946364][ T4480] Modules linked in: [ 99.950308][ T4480] CPU: 1 PID: 4480 Comm: syz.3.25 Not tainted syzkaller #0 [ 99.957555][ T4480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 99.967675][ T4480] RIP: 0010:em_nbyte_match+0x2cc/0x3e0 [ 99.973244][ T4480] Code: c0 eb 07 e8 36 fd 1a f9 31 c0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 20 fd 1a f9 0f 0b e9 e5 fe ff ff e8 14 fd 1a f9 <0f> 0b e9 00 fe ff ff 89 d1 80 e1 07 fe c1 38 c1 0f 8c 7a fd ff ff [ 99.993051][ T4480] RSP: 0018:ffffc9000569f118 EFLAGS: 00010283 [ 99.999268][ T4480] RAX: ffffffff8867769c RBX: ffff888023c7c140 RCX: 0000000000080000 [ 100.007457][ T4480] RDX: ffffc90006b79000 RSI: 000000000000027e RDI: 000000000000027f [ 100.015533][ T4480] RBP: 000000000000ffff R08: ffff88802e598000 R09: 0000000000000003 [ 100.023540][ T4480] R10: 0000000000000002 R11: 0000000000000002 R12: dffffc0000000000 [ 100.031604][ T4480] R13: 1ffff1100478f83e R14: ffff88801928bcd0 R15: 1ffff1100325179a [ 100.039640][ T4480] FS: 00007f1b7e9806c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 100.048707][ T4480] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.055340][ T4480] CR2: 0000001b2fc13ff8 CR3: 00000000583a0000 CR4: 00000000003506e0 [ 100.063351][ T4480] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 100.071403][ T4480] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 100.079431][ T4480] Call Trace: [ 100.082735][ T4480] [ 100.085712][ T4480] __tcf_em_tree_match+0x1cb/0x7a0 [ 100.090867][ T4480] ? tcf_em_tree_dump+0x900/0x900 [ 100.095968][ T4480] ? rcu_read_lock_held+0x40/0x40 [ 100.101028][ T4480] ? __lock_acquire+0x12f4/0x7d10 [ 100.106202][ T4480] basic_classify+0x111/0x2c0 [ 100.111079][ T4480] tcf_classify+0x331/0xbf0 [ 100.115685][ T4480] multiq_enqueue+0xfb/0x4b0 [ 100.120320][ T4480] ? sch_tree_unlock+0x1b0/0x1b0 [ 100.125304][ T4480] ? do_raw_spin_lock+0x128/0x2f0 [ 100.130618][ T4480] ? __rwlock_init+0x140/0x140 [ 100.135452][ T4480] dev_qdisc_enqueue+0x4c/0x2b0 [ 100.140347][ T4480] __dev_queue_xmit+0xfdc/0x37f0 [ 100.145358][ T4480] ? __dev_queue_xmit+0x26b/0x37f0 [ 100.150526][ T4480] ? netdev_core_pick_tx+0x340/0x340 [ 100.155880][ T4480] ? packet_parse_headers+0x7b8/0xab0 [ 100.161269][ T4480] ? packet_parse_headers+0x84b/0xab0 [ 100.166731][ T4480] ? __virt_addr_valid+0x188/0x540 [ 100.171879][ T4480] ? __check_object_size+0x500/0xa40 [ 100.177217][ T4480] ? skb_setup_tx_timestamp+0x1f0/0x1f0 [ 100.182798][ T4480] ? skb_copy_datagram_from_iter+0x5a8/0x690 [ 100.188851][ T4480] ? skb_put+0x117/0x210 [ 100.193118][ T4480] packet_sendmsg+0x3bc3/0x4e60 [ 100.198064][ T4480] ? __schedule+0x119d/0x40e0 [ 100.202769][ T4480] ? __might_sleep+0xd0/0xd0 [ 100.207403][ T4480] ? verify_lock_unused+0x140/0x140 [ 100.212631][ T4480] ? aa_sk_perm+0x81f/0x950 [ 100.217193][ T4480] ? packet_getsockopt+0x9a0/0x9a0 [ 100.222335][ T4480] ? aa_sock_msg_perm+0x94/0x150 [ 100.227325][ T4480] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 100.232621][ T4480] ? security_socket_sendmsg+0x7c/0xa0 [ 100.238141][ T4480] ? packet_getsockopt+0x9a0/0x9a0 [ 100.243278][ T4480] ____sys_sendmsg+0x5be/0x970 [ 100.248160][ T4480] ? __sys_sendmsg_sock+0x30/0x30 [ 100.253238][ T4480] ? __import_iovec+0x315/0x500 [ 100.258310][ T4480] ? import_iovec+0x6f/0xa0 [ 100.262851][ T4480] ___sys_sendmsg+0x2a2/0x360 [ 100.267611][ T4480] ? try_to_wake_up+0x6ae/0x1080 [ 100.272576][ T4480] ? __sys_sendmsg+0x290/0x290 [ 100.277479][ T4480] __se_sys_sendmsg+0x1bb/0x2a0 [ 100.282391][ T4480] ? __x64_sys_sendmsg+0x80/0x80 [ 100.287444][ T4480] ? lockdep_hardirqs_on+0x94/0x140 [ 100.292672][ T4480] do_syscall_64+0x4c/0xa0 [ 100.297170][ T4480] ? clear_bhb_loop+0x60/0xb0 [ 100.301987][ T4480] ? clear_bhb_loop+0x60/0xb0 [ 100.306836][ T4480] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.312751][ T4480] RIP: 0033:0x7f1b7db9bf79 [ 100.317234][ T4480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.336898][ T4480] RSP: 002b:00007f1b7e980028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.345394][ T4480] RAX: ffffffffffffffda RBX: 00007f1b7de15fa0 RCX: 00007f1b7db9bf79 [ 100.353389][ T4480] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000006 [ 100.361423][ T4480] RBP: 00007f1b7dc327e0 R08: 0000000000000000 R09: 0000000000000000 [ 100.369517][ T4480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.377739][ T4480] R13: 00007f1b7de16038 R14: 00007f1b7de15fa0 R15: 00007ffe157a73d8 [ 100.385774][ T4480] [ 100.388906][ T4480] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 100.396291][ T4480] CPU: 1 PID: 4480 Comm: syz.3.25 Not tainted syzkaller #0 [ 100.403604][ T4480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 100.413684][ T4480] Call Trace: [ 100.416975][ T4480] [ 100.419915][ T4480] dump_stack_lvl+0x188/0x24e [ 100.424611][ T4480] ? memcpy+0x3c/0x60 [ 100.428613][ T4480] ? show_regs_print_info+0x12/0x12 [ 100.433870][ T4480] ? load_image+0x400/0x400 [ 100.438420][ T4480] panic+0x2e5/0x730 [ 100.442357][ T4480] ? bpf_jit_dump+0xd0/0xd0 [ 100.446881][ T4480] __warn+0x2f8/0x4f0 [ 100.450870][ T4480] ? em_nbyte_match+0x2cc/0x3e0 [ 100.455915][ T4480] ? em_nbyte_match+0x2cc/0x3e0 [ 100.460779][ T4480] report_bug+0x2ba/0x4f0 [ 100.465133][ T4480] ? em_nbyte_match+0x2cc/0x3e0 [ 100.470088][ T4480] handle_bug+0x3a/0x70 [ 100.474311][ T4480] exc_invalid_op+0x16/0x40 [ 100.478853][ T4480] asm_exc_invalid_op+0x16/0x20 [ 100.483720][ T4480] RIP: 0010:em_nbyte_match+0x2cc/0x3e0 [ 100.489222][ T4480] Code: c0 eb 07 e8 36 fd 1a f9 31 c0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 20 fd 1a f9 0f 0b e9 e5 fe ff ff e8 14 fd 1a f9 <0f> 0b e9 00 fe ff ff 89 d1 80 e1 07 fe c1 38 c1 0f 8c 7a fd ff ff [ 100.508852][ T4480] RSP: 0018:ffffc9000569f118 EFLAGS: 00010283 [ 100.514941][ T4480] RAX: ffffffff8867769c RBX: ffff888023c7c140 RCX: 0000000000080000 [ 100.522925][ T4480] RDX: ffffc90006b79000 RSI: 000000000000027e RDI: 000000000000027f [ 100.530941][ T4480] RBP: 000000000000ffff R08: ffff88802e598000 R09: 0000000000000003 [ 100.538942][ T4480] R10: 0000000000000002 R11: 0000000000000002 R12: dffffc0000000000 [ 100.546929][ T4480] R13: 1ffff1100478f83e R14: ffff88801928bcd0 R15: 1ffff1100325179a [ 100.554923][ T4480] ? em_nbyte_match+0x2cc/0x3e0 [ 100.559795][ T4480] ? em_nbyte_match+0x2cc/0x3e0 [ 100.564659][ T4480] __tcf_em_tree_match+0x1cb/0x7a0 [ 100.569788][ T4480] ? tcf_em_tree_dump+0x900/0x900 [ 100.574860][ T4480] ? rcu_read_lock_held+0x40/0x40 [ 100.579924][ T4480] ? __lock_acquire+0x12f4/0x7d10 [ 100.585059][ T4480] basic_classify+0x111/0x2c0 [ 100.589753][ T4480] tcf_classify+0x331/0xbf0 [ 100.594297][ T4480] multiq_enqueue+0xfb/0x4b0 [ 100.598905][ T4480] ? sch_tree_unlock+0x1b0/0x1b0 [ 100.603856][ T4480] ? do_raw_spin_lock+0x128/0x2f0 [ 100.608902][ T4480] ? __rwlock_init+0x140/0x140 [ 100.613674][ T4480] dev_qdisc_enqueue+0x4c/0x2b0 [ 100.618551][ T4480] __dev_queue_xmit+0xfdc/0x37f0 [ 100.623507][ T4480] ? __dev_queue_xmit+0x26b/0x37f0 [ 100.628641][ T4480] ? netdev_core_pick_tx+0x340/0x340 [ 100.633940][ T4480] ? packet_parse_headers+0x7b8/0xab0 [ 100.639324][ T4480] ? packet_parse_headers+0x84b/0xab0 [ 100.644732][ T4480] ? __virt_addr_valid+0x188/0x540 [ 100.649866][ T4480] ? __check_object_size+0x500/0xa40 [ 100.655172][ T4480] ? skb_setup_tx_timestamp+0x1f0/0x1f0 [ 100.660745][ T4480] ? skb_copy_datagram_from_iter+0x5a8/0x690 [ 100.666850][ T4480] ? skb_put+0x117/0x210 [ 100.671121][ T4480] packet_sendmsg+0x3bc3/0x4e60 [ 100.676009][ T4480] ? __schedule+0x119d/0x40e0 [ 100.680722][ T4480] ? __might_sleep+0xd0/0xd0 [ 100.685325][ T4480] ? verify_lock_unused+0x140/0x140 [ 100.690570][ T4480] ? aa_sk_perm+0x81f/0x950 [ 100.695095][ T4480] ? packet_getsockopt+0x9a0/0x9a0 [ 100.700237][ T4480] ? aa_sock_msg_perm+0x94/0x150 [ 100.705238][ T4480] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 100.710547][ T4480] ? security_socket_sendmsg+0x7c/0xa0 [ 100.716045][ T4480] ? packet_getsockopt+0x9a0/0x9a0 [ 100.721201][ T4480] ____sys_sendmsg+0x5be/0x970 [ 100.726022][ T4480] ? __sys_sendmsg_sock+0x30/0x30 [ 100.731070][ T4480] ? __import_iovec+0x315/0x500 [ 100.735945][ T4480] ? import_iovec+0x6f/0xa0 [ 100.740478][ T4480] ___sys_sendmsg+0x2a2/0x360 [ 100.745179][ T4480] ? try_to_wake_up+0x6ae/0x1080 [ 100.750220][ T4480] ? __sys_sendmsg+0x290/0x290 [ 100.755032][ T4480] __se_sys_sendmsg+0x1bb/0x2a0 [ 100.759900][ T4480] ? __x64_sys_sendmsg+0x80/0x80 [ 100.764865][ T4480] ? lockdep_hardirqs_on+0x94/0x140 [ 100.770075][ T4480] do_syscall_64+0x4c/0xa0 [ 100.774509][ T4480] ? clear_bhb_loop+0x60/0xb0 [ 100.779209][ T4480] ? clear_bhb_loop+0x60/0xb0 [ 100.783933][ T4480] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.789854][ T4480] RIP: 0033:0x7f1b7db9bf79 [ 100.794304][ T4480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.814128][ T4480] RSP: 002b:00007f1b7e980028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.822566][ T4480] RAX: ffffffffffffffda RBX: 00007f1b7de15fa0 RCX: 00007f1b7db9bf79 [ 100.830569][ T4480] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000006 [ 100.838565][ T4480] RBP: 00007f1b7dc327e0 R08: 0000000000000000 R09: 0000000000000000 [ 100.846564][ T4480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.854554][ T4480] R13: 00007f1b7de16038 R14: 00007f1b7de15fa0 R15: 00007ffe157a73d8 [ 100.862551][ T4480] [ 100.866167][ T4480] Kernel Offset: disabled [ 100.870562][ T4480] Rebooting in 86400 seconds..