last executing test programs: 1.235517108s ago: executing program 1 (id=7): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 832.370508ms ago: executing program 1 (id=8): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 693.708282ms ago: executing program 3 (id=4): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7fff, 0x8, 0x7f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdf, 0xff, 0xf}) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) 660.888525ms ago: executing program 1 (id=9): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000061105e000000"], 0x0, 0x5}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 605.75557ms ago: executing program 0 (id=1): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 504.73189ms ago: executing program 3 (id=10): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r2, {0xe, 0x7}, {0x0, 0xfff1}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {0x0, 0xfff1}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0xfffffffb}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 340.230637ms ago: executing program 1 (id=11): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 317.233309ms ago: executing program 0 (id=12): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x20800, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 247.754755ms ago: executing program 2 (id=3): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r2) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r5, {}, {0x1, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x4010004) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 237.658517ms ago: executing program 3 (id=13): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="5800000002060300000034e400000000000000080c000780080006400000000612000300686173683a6e65742c706f72740000000900020073797a31000000000500050002000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 186.169902ms ago: executing program 4 (id=5): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000004c0), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b0000008000000001000000ffff000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r2, 0x0, 0x0}, 0x20) 128.211487ms ago: executing program 1 (id=14): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) 87.430451ms ago: executing program 0 (id=15): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 65.078464ms ago: executing program 3 (id=16): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x2e, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36) 338.47µs ago: executing program 4 (id=17): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8000080}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 0s ago: executing program 1 (id=18): r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000600)='cgroup.procs\x00', 0x2, 0x0) r1 = getpid() write$cgroup_pid(r0, &(0x7f0000000740)=r1, 0x12) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.201' (ED25519) to the list of known hosts. [ 58.132287][ T4170] cgroup: Unknown subsys name 'net' [ 58.270719][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.700294][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.679721][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 61.699672][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 61.763458][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 61.831670][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 61.866907][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 61.911368][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.918658][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.927046][ T4182] device bridge_slave_0 entered promiscuous mode [ 61.951818][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.959162][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.967147][ T4183] device bridge_slave_0 entered promiscuous mode [ 61.974685][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.981721][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.990531][ T4191] device bridge_slave_0 entered promiscuous mode [ 61.998552][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.005654][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.013537][ T4191] device bridge_slave_1 entered promiscuous mode [ 62.021361][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.028516][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.036692][ T4182] device bridge_slave_1 entered promiscuous mode [ 62.053971][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.061261][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.069547][ T4183] device bridge_slave_1 entered promiscuous mode [ 62.139468][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.150325][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.162678][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.183073][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.193897][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.216896][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.224032][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.232875][ T4188] device bridge_slave_0 entered promiscuous mode [ 62.242159][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.279271][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.286589][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.294667][ T4188] device bridge_slave_1 entered promiscuous mode [ 62.316271][ T4182] team0: Port device team_slave_0 added [ 62.324496][ T4191] team0: Port device team_slave_0 added [ 62.330607][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.338017][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.345912][ T4189] device bridge_slave_0 entered promiscuous mode [ 62.364624][ T4183] team0: Port device team_slave_0 added [ 62.378833][ T4182] team0: Port device team_slave_1 added [ 62.393854][ T4191] team0: Port device team_slave_1 added [ 62.399908][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.407172][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.415510][ T4189] device bridge_slave_1 entered promiscuous mode [ 62.423409][ T4183] team0: Port device team_slave_1 added [ 62.430782][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.471465][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.481583][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.488807][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.514904][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.556859][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.563837][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.590141][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.602459][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.609863][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.635874][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.649351][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.659082][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.666274][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.692286][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.721004][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.730446][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.756863][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.770520][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.780284][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.789323][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.815784][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.832300][ T4188] team0: Port device team_slave_0 added [ 62.840407][ T4188] team0: Port device team_slave_1 added [ 62.896317][ T4189] team0: Port device team_slave_0 added [ 62.918676][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.925924][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.952125][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.971991][ T4189] team0: Port device team_slave_1 added [ 62.989320][ T4182] device hsr_slave_0 entered promiscuous mode [ 62.996718][ T4182] device hsr_slave_1 entered promiscuous mode [ 63.004042][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.011372][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.037335][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.051446][ T4183] device hsr_slave_0 entered promiscuous mode [ 63.058305][ T4183] device hsr_slave_1 entered promiscuous mode [ 63.065175][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.072952][ T4183] Cannot create hsr debugfs directory [ 63.122327][ T4191] device hsr_slave_0 entered promiscuous mode [ 63.129183][ T4191] device hsr_slave_1 entered promiscuous mode [ 63.135978][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.143535][ T4191] Cannot create hsr debugfs directory [ 63.166311][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.173301][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.199249][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.213912][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.221113][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.247323][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.265213][ T4188] device hsr_slave_0 entered promiscuous mode [ 63.272988][ T4188] device hsr_slave_1 entered promiscuous mode [ 63.279624][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.287466][ T4188] Cannot create hsr debugfs directory [ 63.345463][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 63.352611][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 63.354352][ T4186] Bluetooth: hci0: command 0x0409 tx timeout [ 63.359256][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 63.371157][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 63.391459][ T4189] device hsr_slave_0 entered promiscuous mode [ 63.398306][ T4189] device hsr_slave_1 entered promiscuous mode [ 63.405607][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.413156][ T4189] Cannot create hsr debugfs directory [ 63.676208][ T4183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.692832][ T4183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.702563][ T4183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.716624][ T4183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.735399][ T4191] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.759129][ T4191] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.769081][ T4191] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.782254][ T4191] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.838205][ T4182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.849067][ T4182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.872195][ T4182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.903154][ T4182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.945019][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.970537][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.988917][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.000124][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.018393][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.047969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.057597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.073509][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.087200][ T4189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.108084][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.122163][ T4189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.133575][ T4189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.143867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.152942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.164053][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.171358][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.180122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.188681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.207099][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.217995][ T4189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.231063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.239903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.248772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.258699][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.265812][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.275437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.284478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.293096][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.300204][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.309314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.318843][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.355231][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.363782][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.373090][ T1487] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.380213][ T1487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.388638][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.408259][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.441426][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.450707][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.464957][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.473424][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.486131][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.494950][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.503446][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.512606][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.520871][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.531755][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.541283][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.553641][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.562518][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.592776][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.608756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.617348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.626237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.636711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.649651][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.661652][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.677584][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.689845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.699534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.723975][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.737377][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.752723][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.788215][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.808786][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.843525][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.851907][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.862438][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.871126][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.879364][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.888199][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.898405][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.907988][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.915128][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.924813][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.933627][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.942315][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.949432][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.960228][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.004607][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.013939][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.032309][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.041686][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.048808][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.059536][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.068582][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.078306][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.085448][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.093695][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.102915][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.111872][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.122155][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.131464][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.140364][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.149218][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.159975][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.183507][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.195633][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.214759][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.223353][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.236393][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.246102][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.256185][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.272344][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.282200][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.296697][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.307724][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.315569][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.323124][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.335525][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.344234][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.357527][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.365013][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.388958][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.403868][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.420464][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.424576][ T4256] Bluetooth: hci1: command 0x041b tx timeout [ 65.429518][ T4274] Bluetooth: hci0: command 0x041b tx timeout [ 65.444323][ T4256] Bluetooth: hci4: command 0x041b tx timeout [ 65.458782][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.471789][ T4256] Bluetooth: hci3: command 0x041b tx timeout [ 65.472993][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.484578][ T4256] Bluetooth: hci2: command 0x041b tx timeout [ 65.498899][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.508903][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.518111][ T1487] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.525186][ T1487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.538031][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.547431][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.556166][ T1487] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.563250][ T1487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.571350][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.580619][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.589969][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.598566][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.626333][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.660541][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.679948][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.694049][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.707262][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.716319][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.724904][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.733441][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.745308][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.753607][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.762536][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.771510][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.780507][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.788815][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.797025][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.819258][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.828217][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.840035][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.910372][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.924218][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.939671][ T4191] device veth0_vlan entered promiscuous mode [ 65.950067][ T4183] device veth0_vlan entered promiscuous mode [ 65.967890][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.979920][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.991167][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.003252][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.012809][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.021560][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.034182][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.042168][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.062611][ T4191] device veth1_vlan entered promiscuous mode [ 66.083103][ T4183] device veth1_vlan entered promiscuous mode [ 66.091675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.102158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.111478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.119315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.132474][ T4182] device veth0_vlan entered promiscuous mode [ 66.148245][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.162346][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.172335][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.185399][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.199811][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.209871][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.250863][ T4191] device veth0_macvtap entered promiscuous mode [ 66.266797][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.276337][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.291592][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.300594][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.309408][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.318562][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.333982][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.343729][ T4191] device veth1_macvtap entered promiscuous mode [ 66.356287][ T4182] device veth1_vlan entered promiscuous mode [ 66.386207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.395240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.403307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.413226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.421920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.433912][ T4183] device veth0_macvtap entered promiscuous mode [ 66.458166][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.470544][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.483454][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.495046][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.503818][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.512750][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.530013][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.542254][ T4191] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.553109][ T4191] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.562244][ T4191] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.571682][ T4191] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.582258][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.591849][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.603198][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.611829][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.633276][ T4183] device veth1_macvtap entered promiscuous mode [ 66.644871][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.652755][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.662907][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.670954][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.680524][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.696491][ T4182] device veth0_macvtap entered promiscuous mode [ 66.703547][ T4188] device veth0_vlan entered promiscuous mode [ 66.733137][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.744181][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.757343][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.769668][ T4182] device veth1_macvtap entered promiscuous mode [ 66.798490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.807913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.817394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.826463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.835593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.844537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.856118][ T4188] device veth1_vlan entered promiscuous mode [ 66.876571][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.888366][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.901579][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.940667][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.952450][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.961303][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.970297][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.979838][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.989040][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.998263][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.006573][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.017117][ T4183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.026908][ T4183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.036202][ T4183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.045019][ T4183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.066020][ T4189] device veth0_vlan entered promiscuous mode [ 67.089529][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.101244][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.111913][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.122480][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.133887][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.157858][ T1487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.171082][ T4189] device veth1_vlan entered promiscuous mode [ 67.179763][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.187477][ T1487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.191076][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.205311][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.213063][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.222271][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.233188][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.243892][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.254829][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.265545][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.277174][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.294053][ T4188] device veth0_macvtap entered promiscuous mode [ 67.311040][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.320863][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.330222][ T1487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.352994][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.361819][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.371499][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.380477][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.398402][ T4188] device veth1_macvtap entered promiscuous mode [ 67.423821][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.432716][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.459086][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.470993][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.481258][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.491786][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.501799][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.504993][ T4242] Bluetooth: hci2: command 0x040f tx timeout [ 67.518387][ T4242] Bluetooth: hci3: command 0x040f tx timeout [ 67.523001][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.524580][ T4242] Bluetooth: hci0: command 0x040f tx timeout [ 67.542328][ T4242] Bluetooth: hci4: command 0x040f tx timeout [ 67.546971][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.548685][ T4242] Bluetooth: hci1: command 0x040f tx timeout [ 67.571584][ T4189] device veth0_macvtap entered promiscuous mode [ 67.579653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.589398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.597580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.606472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.615850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.624856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.633289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.661749][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.674817][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.685247][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.696288][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.706368][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.717031][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.729153][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.747988][ T4189] device veth1_macvtap entered promiscuous mode [ 67.775595][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.791105][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.800510][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.811814][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.821428][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.832499][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.841582][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.960137][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.967905][ T1487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.981777][ T1487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.984634][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.007091][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.020775][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.034103][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.051989][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.070130][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.080776][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.089603][ T4295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'. [ 68.092875][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.107973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.123921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.142895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.170714][ T4267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.179373][ T4267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.192366][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.207780][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.218148][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.236491][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.251129][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.264528][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.279768][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.290384][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.301958][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.315530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.323416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.333963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.353216][ T4298] device pim6reg1 entered promiscuous mode [ 68.396418][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.405629][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.415098][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.423806][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.502078][ T1487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.512922][ T1487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.546659][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.561270][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.585651][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.590444][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.612493][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.629623][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.644996][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.795593][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.796990][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.824408][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.845815][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.853904][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.884555][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.909008][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.958707][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.972180][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.170993][ T4323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13'. [ 69.193839][ T4321] device syzkaller0 entered promiscuous mode [ 69.382438][ C0] ------------[ cut here ]------------ [ 69.388294][ C0] WARNING: CPU: 0 PID: 4228 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 69.397682][ C0] Modules linked in: [ 69.401657][ C0] CPU: 0 PID: 4228 Comm: kworker/0:5 Not tainted syzkaller #0 [ 69.409168][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 69.419290][ C0] Workqueue: rcu_gp process_srcu [ 69.424306][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 69.430561][ C0] Code: 24 45 31 f6 31 ff 89 de e8 6d f7 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f0 f3 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 69.450259][ C0] RSP: 0018:ffffc900000078c8 EFLAGS: 00010246 [ 69.456428][ C0] RAX: ffffffff819ed660 RBX: 0000000000000000 RCX: ffff888025365940 [ 69.464455][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 69.472475][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ff7a19 [ 69.480494][ C0] R10: fffffbfff1ff7a19 R11: 1ffffffff1ff7a18 R12: ffff8880253670c8 [ 69.488540][ C0] R13: dffffc0000000000 R14: ffffc90000007928 R15: 0000000000000000 [ 69.496562][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 69.505567][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.512180][ C0] CR2: 000000110c392452 CR3: 0000000062909000 CR4: 00000000003506f0 [ 69.520260][ T4330] device syzkaller0 entered promiscuous mode [ 69.526474][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 69.534509][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 69.542507][ C0] Call Trace: [ 69.545832][ C0] [ 69.548700][ C0] bpf_probe_read_user+0x26/0x70 [ 69.553788][ C0] bpf_prog_690f12e098ef46de+0x32/0x730 [ 69.559384][ C0] bpf_trace_run2+0x15b/0x2d0 [ 69.564084][ C0] ? _raw_spin_unlock+0x24/0x40 [ 69.569015][ C0] ? mac80211_hwsim_tx_frame_no_nl+0x1382/0x15d0 [ 69.575408][ C0] ? bpf_trace_run1+0x2d0/0x2d0 [ 69.580285][ C0] ? skb_release_data+0x6fe/0x850 [ 69.585388][ C0] ? skb_release_data+0x6fe/0x850 [ 69.586176][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 69.590436][ C0] __bpf_trace_kfree+0x6e/0x90 [ 69.590477][ C0] ? skb_release_data+0x6fe/0x850 [ 69.590501][ C0] kfree+0x25f/0x2a0 [ 69.590520][ C0] ? ktime_get_real_ts64+0x420/0x420 [ 69.590552][ C0] skb_release_data+0x6fe/0x850 [ 69.590586][ C0] consume_skb+0xa2/0x100 [ 69.590617][ C0] mac80211_hwsim_beacon_tx+0x4f3/0x920 [ 69.590647][ C0] __iterate_interfaces+0x243/0x500 [ 69.590670][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 69.590696][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 69.590722][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 69.590749][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 69.590776][ C0] __hrtimer_run_queues+0x53d/0xc40 [ 69.590799][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 69.590821][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 69.590849][ C0] ? hw_scan_work+0xeb0/0xeb0 [ 69.590882][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 69.590917][ C0] hrtimer_run_softirq+0x176/0x240 [ 69.590947][ C0] handle_softirqs+0x328/0x820 [ 69.590985][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 69.591012][ C0] ? do_softirq+0x200/0x200 [ 69.591042][ C0] __irq_exit_rcu+0x12f/0x220 [ 69.591062][ C0] ? irq_exit_rcu+0x20/0x20 [ 69.591094][ C0] irq_exit_rcu+0x5/0x20 [ 69.591113][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 69.591138][ C0] [ 69.591146][ C0] [ 69.591155][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 69.591178][ C0] RIP: 0010:preempt_count_sub+0x61/0x160 [ 69.591203][ C0] Code: ff ff ff 7f 39 cf 7f 25 81 ff ff 00 00 00 0f 93 c1 84 c0 0f 95 c0 08 c8 74 53 65 8b 05 90 fd b0 7e f7 df 65 01 3d 87 fd b0 7e <5b> 5d c3 e8 57 3e 86 02 85 c0 74 f4 48 c7 c0 48 c9 69 8d 48 c1 e8 [ 69.591220][ C0] RSP: 0018:ffffc900031cfaa8 EFLAGS: 00000297 [ 69.591243][ C0] RAX: 0000000080000001 RBX: dffffc0000000000 RCX: 0000000000000000 [ 69.591259][ C0] RDX: 0000000000000025 RSI: ffffffff8a59a4a0 RDI: 00000000ffffffff [ 69.591275][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffff52000639f25 [ 69.591291][ C0] R10: fffff52000639f25 R11: 1ffff92000639f24 R12: dffffc0000000000 [ 69.591308][ C0] R13: ffffffff9612e800 R14: 000000256bbf4822 R15: 00000000000008cf [ 69.591342][ C0] delay_tsc+0x4a/0xc0 [ 69.591365][ C0] try_check_zero+0x2c7/0x340 [ 69.591395][ C0] process_srcu+0x195/0xc10 [ 69.591423][ C0] ? read_lock_is_recursive+0x10/0x10 [ 69.591447][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 69.608809][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 69.611291][ C0] ? _raw_spin_unlock+0x40/0x40 [ 69.611323][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 69.629086][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 69.631424][ C0] process_one_work+0x863/0x1000 [ 69.649980][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 69.656251][ C0] ? worker_detach_from_pool+0x240/0x240 [ 69.656281][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 69.656310][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 69.764468][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 69.770404][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 69.895893][ C0] ? wq_worker_running+0x97/0x170 [ 69.900998][ C0] worker_thread+0xaa8/0x12a0 [ 69.905852][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 69.911784][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 69.917259][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 69.922519][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 69.928498][ C0] kthread+0x436/0x520 [ 69.932592][ C0] ? rcu_lock_release+0x20/0x20 [ 69.937536][ C0] ? kthread_blkcg+0xd0/0xd0 [ 69.942157][ C0] ret_from_fork+0x1f/0x30 [ 69.946634][ C0] [ 69.949682][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 69.956974][ C0] CPU: 0 PID: 4228 Comm: kworker/0:5 Not tainted syzkaller #0 [ 69.964457][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 69.974533][ C0] Workqueue: rcu_gp process_srcu [ 69.979504][ C0] Call Trace: [ 69.982808][ C0] [ 69.985670][ C0] dump_stack_lvl+0x168/0x230 [ 69.990459][ C0] ? show_regs_print_info+0x20/0x20 [ 69.995664][ C0] ? load_image+0x3b0/0x3b0 [ 70.000183][ C0] panic+0x2c9/0x7f0 [ 70.004087][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 70.008598][ C0] ? ret_from_fork+0x1f/0x30 [ 70.013193][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 70.018747][ C0] __warn+0x248/0x2b0 [ 70.022739][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 70.028291][ C0] report_bug+0x1b7/0x2e0 [ 70.032626][ C0] handle_bug+0x3a/0x70 [ 70.036789][ C0] exc_invalid_op+0x16/0x40 [ 70.041295][ C0] asm_exc_invalid_op+0x16/0x20 [ 70.046162][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 70.052333][ C0] Code: 24 45 31 f6 31 ff 89 de e8 6d f7 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f0 f3 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 70.071964][ C0] RSP: 0018:ffffc900000078c8 EFLAGS: 00010246 [ 70.078037][ C0] RAX: ffffffff819ed660 RBX: 0000000000000000 RCX: ffff888025365940 [ 70.086012][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 70.093981][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ff7a19 [ 70.101952][ C0] R10: fffffbfff1ff7a19 R11: 1ffffffff1ff7a18 R12: ffff8880253670c8 [ 70.109923][ C0] R13: dffffc0000000000 R14: ffffc90000007928 R15: 0000000000000000 [ 70.117894][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 70.123449][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 70.129001][ C0] bpf_probe_read_user+0x26/0x70 [ 70.133946][ C0] bpf_prog_690f12e098ef46de+0x32/0x730 [ 70.139490][ C0] bpf_trace_run2+0x15b/0x2d0 [ 70.144174][ C0] ? _raw_spin_unlock+0x24/0x40 [ 70.149021][ C0] ? mac80211_hwsim_tx_frame_no_nl+0x1382/0x15d0 [ 70.155348][ C0] ? bpf_trace_run1+0x2d0/0x2d0 [ 70.160307][ C0] ? skb_release_data+0x6fe/0x850 [ 70.165339][ C0] ? skb_release_data+0x6fe/0x850 [ 70.170362][ C0] __bpf_trace_kfree+0x6e/0x90 [ 70.175128][ C0] ? skb_release_data+0x6fe/0x850 [ 70.180254][ C0] kfree+0x25f/0x2a0 [ 70.184149][ C0] ? ktime_get_real_ts64+0x420/0x420 [ 70.189438][ C0] skb_release_data+0x6fe/0x850 [ 70.194295][ C0] consume_skb+0xa2/0x100 [ 70.198622][ C0] mac80211_hwsim_beacon_tx+0x4f3/0x920 [ 70.204170][ C0] __iterate_interfaces+0x243/0x500 [ 70.209368][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 70.215613][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 70.221856][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 70.228879][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 70.234082][ C0] __hrtimer_run_queues+0x53d/0xc40 [ 70.239284][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 70.245275][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 70.251257][ C0] ? hw_scan_work+0xeb0/0xeb0 [ 70.255937][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 70.261056][ C0] hrtimer_run_softirq+0x176/0x240 [ 70.266174][ C0] handle_softirqs+0x328/0x820 [ 70.270955][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 70.275812][ C0] ? do_softirq+0x200/0x200 [ 70.280324][ C0] __irq_exit_rcu+0x12f/0x220 [ 70.285001][ C0] ? irq_exit_rcu+0x20/0x20 [ 70.289689][ C0] irq_exit_rcu+0x5/0x20 [ 70.293927][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 70.299562][ C0] [ 70.302494][ C0] [ 70.305428][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 70.311412][ C0] RIP: 0010:preempt_count_sub+0x61/0x160 [ 70.317046][ C0] Code: ff ff ff 7f 39 cf 7f 25 81 ff ff 00 00 00 0f 93 c1 84 c0 0f 95 c0 08 c8 74 53 65 8b 05 90 fd b0 7e f7 df 65 01 3d 87 fd b0 7e <5b> 5d c3 e8 57 3e 86 02 85 c0 74 f4 48 c7 c0 48 c9 69 8d 48 c1 e8 [ 70.336873][ C0] RSP: 0018:ffffc900031cfaa8 EFLAGS: 00000297 [ 70.342946][ C0] RAX: 0000000080000001 RBX: dffffc0000000000 RCX: 0000000000000000 [ 70.350925][ C0] RDX: 0000000000000025 RSI: ffffffff8a59a4a0 RDI: 00000000ffffffff [ 70.358903][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffff52000639f25 [ 70.366869][ C0] R10: fffff52000639f25 R11: 1ffff92000639f24 R12: dffffc0000000000 [ 70.374837][ C0] R13: ffffffff9612e800 R14: 000000256bbf4822 R15: 00000000000008cf [ 70.382825][ C0] delay_tsc+0x4a/0xc0 [ 70.386900][ C0] try_check_zero+0x2c7/0x340 [ 70.391602][ C0] process_srcu+0x195/0xc10 [ 70.396111][ C0] ? read_lock_is_recursive+0x10/0x10 [ 70.401494][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 70.407391][ C0] ? _raw_spin_unlock+0x40/0x40 [ 70.412241][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 70.417445][ C0] process_one_work+0x863/0x1000 [ 70.422395][ C0] ? worker_detach_from_pool+0x240/0x240 [ 70.428024][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 70.433313][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 70.438337][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 70.443711][ C0] ? wq_worker_running+0x97/0x170 [ 70.448745][ C0] worker_thread+0xaa8/0x12a0 [ 70.453426][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 70.459315][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 70.464519][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 70.469722][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 70.475630][ C0] kthread+0x436/0x520 [ 70.479706][ C0] ? rcu_lock_release+0x20/0x20 [ 70.484560][ C0] ? kthread_blkcg+0xd0/0xd0 [ 70.489167][ C0] ret_from_fork+0x1f/0x30 [ 70.493594][ C0] [ 70.496907][ C0] Kernel Offset: disabled [ 70.501336][ C0] Rebooting in 86400 seconds..