last executing test programs: 3.111236775s ago: executing program 0 (id=19): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x40, 0xaa}, [@NDA_LLADDR={0xa, 0x2, @random="35c34085b596"}]}, 0x28}}, 0x0) 3.0513926s ago: executing program 1 (id=20): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40) recvmsg$kcm(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdb8}, 0x40) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet(0x2, 0x2, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x70bd2c, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}]}}}]}, 0x3c}}, 0x0) recvmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 2.959267663s ago: executing program 4 (id=22): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x2}}, 0x10) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) 2.876604881s ago: executing program 0 (id=23): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x13, r0, 0x100000000) 2.737974687s ago: executing program 1 (id=26): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) socket$packet(0x11, 0x2, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200000000000034d, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0) 2.647256517s ago: executing program 4 (id=27): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbff, 0x8}, 0xc) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x73}]}}]}, 0x44}}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.386043075s ago: executing program 1 (id=30): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000001c0), &(0x7f0000000200)=0x4) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 2.371037547s ago: executing program 0 (id=31): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @remote, 0xa}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000240)={0x87}, 0x8) sendmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="8ee1", 0x2}], 0x1}}], 0x1, 0x400c05c) 2.300363301s ago: executing program 2 (id=32): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000140)={0x2, 0x2, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{0x8, 0x93}, {0x0}, &(0x7f0000000880)=[{&(0x7f000001b640)=""/102387, 0x18ff3}], 0x1, 0x9}}], 0x48}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) 2.292473061s ago: executing program 4 (id=33): socket(0x11, 0x3, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0xaf2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x24000800, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @local}, 0x1c) recvmmsg(r0, &(0x7f00000066c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/148, 0x94}}], 0x1, 0x2000, 0x0) 2.206290623s ago: executing program 0 (id=34): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e6574000000000500050002000000050004"], 0x60}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffff00, 'veth0_to_hsr\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x0, 0x20}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x3, 0x8, 0x2, 'netbios-ns\x00', 'syz1\x00', {0x3}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xffffffff, 0xff000000, 'geneve1\x00', 'pimreg1\x00', {}, {}, 0x6, 0x1}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x9, 0x14, "02faea85e630c91d8aa58f67263587935c17ee73e3e6000789f0ebec8e9e"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 2.19176174s ago: executing program 3 (id=35): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)='&\x00', 0x2) sendfile(r1, r0, 0x0, 0x19f330) 2.111445845s ago: executing program 4 (id=36): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f000083b000/0x13000)=nil, 0x13000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f00004e7000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f00008e6000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000867000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) 1.84558152s ago: executing program 4 (id=37): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d1d0b90c8997e6917226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67a4cbb1280955e9a59cd8e5e8ac68c27da3d542aece1ba7920e8f39b270458224e7", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001bc0)="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", 0x2ad}], 0x1}}], 0x2, 0x80) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1.826673984s ago: executing program 1 (id=38): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x14, 0x0, 0x1, 0x0, 0x25dfdbfc}, 0x14}}, 0x2000c050) 1.626197104s ago: executing program 2 (id=39): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x4996, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 1.560393985s ago: executing program 4 (id=40): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000d00)=[{&(0x7f0000000100)="89e7ee2c7cdad9b4b47380c988ca", 0xe}], 0x1) 1.542018006s ago: executing program 1 (id=41): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x806, 0x0) listen(r0, 0x3) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x26020480) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.426791396s ago: executing program 2 (id=42): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010600000000000000000100000008000100", @ANYRES32=r1, @ANYBLOB="4800028014"], 0x64}}, 0x0) 1.344449676s ago: executing program 0 (id=43): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv4_getnexthop={0x18, 0x6a, 0x119, 0x70bd2c, 0x25dfdbfe}, 0x18}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000080)=r3) 1.236468106s ago: executing program 3 (id=44): bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='rcu_utilization\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000400200000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000027694980955d84b8360c09eb"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r1, 0x0, 0xa0028000}, 0x38) 1.173734831s ago: executing program 2 (id=45): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) 1.145177151s ago: executing program 0 (id=46): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001041aeeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x34, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffe0}, {0x0, 0xfff5}}}, 0x24}, 0x1, 0x4000000}, 0x0) 846.512529ms ago: executing program 3 (id=47): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) r3 = epoll_create1(0x0) r4 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000280)={0x2000}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) 719.237043ms ago: executing program 3 (id=48): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) listen(r0, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @empty}}, 0xfffd}, 0x90) 597.069545ms ago: executing program 1 (id=49): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r2, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x20000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 391.034281ms ago: executing program 3 (id=50): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001ec0)={{r3}, &(0x7f0000001e40)=0xca00, &(0x7f0000001e80)=r2}, 0x20) 217.238549ms ago: executing program 3 (id=51): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, '.\x00'}}) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000300)="89c064", 0x3}], 0x1, &(0x7f0000000e40)=ANY=[], 0xd0}}], 0x1, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfff, '\x00', 0x0, r0, 0x4, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r3, &(0x7f0000000080)="c44fa1007a8a1ee65db7d029bed87a5feb35268b3aa6309c2989354f9dbcfbd5298f82cf69ad4dbcdfd58b3b2b6375bb2d34c28293d8d581", &(0x7f0000000180)=""/102, 0x4}, 0x20) 124.022193ms ago: executing program 2 (id=52): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r3, 0x0, &(0x7f0000000400)=""/31}, 0x20) 0s ago: executing program 2 (id=53): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='data', 0x4}}, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4, 0x4}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.42' (ED25519) to the list of known hosts. [ 51.922779][ T5842] cgroup: Unknown subsys name 'net' [ 52.027862][ T5842] cgroup: Unknown subsys name 'cpuset' [ 52.035605][ T5842] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.323307][ T5842] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.427010][ T5862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.436166][ T5862] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.444541][ T5862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.452857][ T5862] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.461091][ T5862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.470239][ T5862] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.478182][ T5862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.486430][ T5862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.493683][ T5862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.501909][ T5862] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.503624][ T5870] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.516581][ T5862] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.523891][ T5862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.524762][ T5871] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.533388][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.545870][ T5873] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.546475][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.561291][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.566230][ T5872] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.577484][ T5872] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.585318][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.592808][ T5872] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.600461][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.608027][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.615754][ T5867] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 55.623705][ T5867] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.634935][ T5872] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.642126][ T5872] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.649354][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.659490][ T5867] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.012095][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 56.032435][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 56.114014][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 56.126649][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 56.243255][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 56.288060][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.297120][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.304491][ T5854] bridge_slave_0: entered allmulticast mode [ 56.311391][ T5854] bridge_slave_0: entered promiscuous mode [ 56.332818][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.340149][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.347714][ T5857] bridge_slave_0: entered allmulticast mode [ 56.354231][ T5857] bridge_slave_0: entered promiscuous mode [ 56.375441][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.382571][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.393097][ T5854] bridge_slave_1: entered allmulticast mode [ 56.399850][ T5854] bridge_slave_1: entered promiscuous mode [ 56.415627][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.422717][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.430068][ T5857] bridge_slave_1: entered allmulticast mode [ 56.436857][ T5857] bridge_slave_1: entered promiscuous mode [ 56.458902][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.466115][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.473270][ T5863] bridge_slave_0: entered allmulticast mode [ 56.480148][ T5863] bridge_slave_0: entered promiscuous mode [ 56.487595][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.494816][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.501955][ T5865] bridge_slave_0: entered allmulticast mode [ 56.509852][ T5865] bridge_slave_0: entered promiscuous mode [ 56.538748][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.546072][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.553197][ T5863] bridge_slave_1: entered allmulticast mode [ 56.560263][ T5863] bridge_slave_1: entered promiscuous mode [ 56.566750][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.573842][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.581236][ T5865] bridge_slave_1: entered allmulticast mode [ 56.588702][ T5865] bridge_slave_1: entered promiscuous mode [ 56.608174][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.619939][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.648165][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.658853][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.734151][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.746638][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.757692][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.767113][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.774220][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.781454][ T5858] bridge_slave_0: entered allmulticast mode [ 56.788418][ T5858] bridge_slave_0: entered promiscuous mode [ 56.797980][ T5854] team0: Port device team_slave_0 added [ 56.806339][ T5857] team0: Port device team_slave_0 added [ 56.813548][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.831730][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.839125][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.846730][ T5858] bridge_slave_1: entered allmulticast mode [ 56.853252][ T5858] bridge_slave_1: entered promiscuous mode [ 56.861404][ T5854] team0: Port device team_slave_1 added [ 56.877075][ T5857] team0: Port device team_slave_1 added [ 56.933131][ T5865] team0: Port device team_slave_0 added [ 56.949949][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.957114][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.983385][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.004334][ T5863] team0: Port device team_slave_0 added [ 57.013593][ T5863] team0: Port device team_slave_1 added [ 57.020836][ T5865] team0: Port device team_slave_1 added [ 57.029083][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.040597][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.062616][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.069637][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.095868][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.107368][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.114322][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.141160][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.154216][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.161621][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.187817][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.250504][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.258099][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.284466][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.304871][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.311817][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.338111][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.351968][ T5858] team0: Port device team_slave_0 added [ 57.360611][ T5858] team0: Port device team_slave_1 added [ 57.376603][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.383559][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.409956][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.425947][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.432913][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.459154][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.510335][ T5857] hsr_slave_0: entered promiscuous mode [ 57.517697][ T5857] hsr_slave_1: entered promiscuous mode [ 57.537430][ T5854] hsr_slave_0: entered promiscuous mode [ 57.544005][ T5854] hsr_slave_1: entered promiscuous mode [ 57.550399][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.558244][ T5854] Cannot create hsr debugfs directory [ 57.572055][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.580899][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.607328][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.619625][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.627290][ T5859] Bluetooth: hci0: command tx timeout [ 57.632783][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.658809][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.705348][ T5867] Bluetooth: hci2: command tx timeout [ 57.705387][ T5165] Bluetooth: hci3: command tx timeout [ 57.711046][ T5867] Bluetooth: hci4: command tx timeout [ 57.722444][ T5859] Bluetooth: hci1: command tx timeout [ 57.735621][ T5863] hsr_slave_0: entered promiscuous mode [ 57.741771][ T5863] hsr_slave_1: entered promiscuous mode [ 57.748408][ T5863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.756189][ T5863] Cannot create hsr debugfs directory [ 57.764972][ T5865] hsr_slave_0: entered promiscuous mode [ 57.771031][ T5865] hsr_slave_1: entered promiscuous mode [ 57.778555][ T5865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.786436][ T5865] Cannot create hsr debugfs directory [ 57.816458][ T5858] hsr_slave_0: entered promiscuous mode [ 57.823461][ T5858] hsr_slave_1: entered promiscuous mode [ 57.830085][ T5858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.838100][ T5858] Cannot create hsr debugfs directory [ 58.151074][ T5857] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.166500][ T5857] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.176920][ T5857] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.190470][ T5857] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.235924][ T5865] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.246368][ T5865] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.261266][ T5865] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.272714][ T5865] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.330728][ T5863] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.340760][ T5863] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.360144][ T5863] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.370196][ T5863] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.414560][ T5858] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.444954][ T5858] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.455701][ T5858] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.485264][ T5858] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.522195][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.542815][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.552979][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.562443][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.572480][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.606510][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.646805][ T1335] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.654041][ T1335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.665277][ T1335] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.672367][ T1335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.703161][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.790959][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.840531][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.853430][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.885574][ T5865] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.896702][ T5865] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.923295][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.930418][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.939762][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.946900][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.979584][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.001102][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.043027][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.053244][ T3556] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.060367][ T3556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.080390][ T3556] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.087531][ T3556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.105790][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.133811][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.153896][ T3556] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.161090][ T3556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.177200][ T3556] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.184312][ T3556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.220919][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.228019][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.240076][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.247251][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.291529][ T5854] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.302193][ T5854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.333540][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.421857][ T5857] veth0_vlan: entered promiscuous mode [ 59.483351][ T5857] veth1_vlan: entered promiscuous mode [ 59.502713][ T5865] veth0_vlan: entered promiscuous mode [ 59.564516][ T5865] veth1_vlan: entered promiscuous mode [ 59.587346][ T5857] veth0_macvtap: entered promiscuous mode [ 59.612078][ T5857] veth1_macvtap: entered promiscuous mode [ 59.663285][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.694441][ T5865] veth0_macvtap: entered promiscuous mode [ 59.706446][ T5859] Bluetooth: hci0: command tx timeout [ 59.710302][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.740132][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.749887][ T5857] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.759709][ T5857] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.768714][ T5857] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.777587][ T5857] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.786899][ T5859] Bluetooth: hci1: command tx timeout [ 59.792310][ T5867] Bluetooth: hci4: command tx timeout [ 59.796589][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.797931][ T5869] Bluetooth: hci3: command tx timeout [ 59.804465][ T5165] Bluetooth: hci2: command tx timeout [ 59.811523][ T5865] veth1_macvtap: entered promiscuous mode [ 59.831841][ T5865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.842959][ T5865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.854364][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.893987][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.947635][ T5865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.960019][ T5865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.972336][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.024353][ T5865] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.036811][ T5865] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.046137][ T5865] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.055587][ T5865] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.073140][ T5863] veth0_vlan: entered promiscuous mode [ 60.080953][ T5854] veth0_vlan: entered promiscuous mode [ 60.108372][ T5863] veth1_vlan: entered promiscuous mode [ 60.133391][ T1335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.144553][ T1335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.192792][ T5854] veth1_vlan: entered promiscuous mode [ 60.234728][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.242584][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.253525][ T5854] veth0_macvtap: entered promiscuous mode [ 60.296913][ T5863] veth0_macvtap: entered promiscuous mode [ 60.316837][ T5854] veth1_macvtap: entered promiscuous mode [ 60.337581][ T5857] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 60.353430][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.370784][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.380391][ T5863] veth1_macvtap: entered promiscuous mode [ 60.422721][ T5858] veth0_vlan: entered promiscuous mode [ 60.444338][ T5858] veth1_vlan: entered promiscuous mode [ 60.459263][ T3556] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.471096][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.472109][ T3556] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.488210][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.502120][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.513646][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.526148][ T5939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 60.527564][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.552334][ T5863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.564206][ T5863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.575075][ T5863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.586660][ T5863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.596926][ T5863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.607825][ T5863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.620276][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.651240][ T5939] bond0: (slave bond_slave_0): Releasing backup interface [ 60.683507][ T5863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.694367][ T5863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.706208][ T5863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.734779][ T5863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.748983][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.767325][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.788409][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.804688][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.815342][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.825438][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.835939][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.847106][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.867074][ T5854] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.882913][ T5854] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.892052][ T5854] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.900878][ T5854] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.944161][ T5858] veth0_macvtap: entered promiscuous mode [ 60.962737][ T5863] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.977917][ T5863] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.991423][ T5863] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.003495][ T5863] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.040752][ T5858] veth1_macvtap: entered promiscuous mode [ 61.107970][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.128615][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.138625][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.149363][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.159275][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.169776][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.180209][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.191165][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.202149][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.335687][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.354847][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.371218][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.382885][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.408518][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.426111][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.436100][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.447766][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.463396][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.478639][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.487357][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.501979][ T5858] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.514529][ T5858] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.549414][ T5858] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.565375][ T5858] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.599783][ T5954] Zero length message leads to an empty skb [ 61.687169][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.706045][ T1335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.734909][ T1335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.738330][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.797351][ T5165] Bluetooth: hci0: command tx timeout [ 61.812318][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.836649][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.864705][ T5165] Bluetooth: hci4: command tx timeout [ 61.870202][ T5165] Bluetooth: hci3: command tx timeout [ 61.876655][ T5165] Bluetooth: hci2: command tx timeout [ 61.882092][ T5165] Bluetooth: hci1: command tx timeout [ 61.902642][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.910686][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.973423][ T5961] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15'. [ 62.059072][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.096849][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.606398][ T5984] Driver unsupported XDP return value 0 on prog (id 13) dev N/A, expect packet loss! [ 62.625819][ T5981] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 62.964480][ T5988] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.157776][ T6001] netlink: 'syz.3.29': attribute type 1 has an invalid length. [ 63.242697][ T6001] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 63.664999][ T6019] xt_CT: No such helper "netbios-ns" [ 63.880526][ T5859] Bluetooth: hci0: command tx timeout [ 63.944871][ T5859] Bluetooth: hci1: command tx timeout [ 63.950754][ T5859] Bluetooth: hci2: command tx timeout [ 63.951998][ T5165] Bluetooth: hci3: command tx timeout [ 63.956713][ T5859] Bluetooth: hci4: command tx timeout [ 64.177631][ T6032] tipc: Started in network mode [ 64.188640][ T6032] tipc: Node identity e6e8e8286c88, cluster identity 4711 [ 64.205449][ T6032] tipc: Enabled bearer , priority 0 [ 64.242943][ T6034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.42'. [ 64.280638][ T6032] syzkaller0: entered promiscuous mode [ 64.286419][ T6032] syzkaller0: entered allmulticast mode [ 64.298501][ T6032] tipc: Resetting bearer [ 64.308763][ T6034] netlink: 48 bytes leftover after parsing attributes in process `syz.2.42'. [ 64.391462][ T6029] tipc: Resetting bearer [ 64.448366][ T6041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.46'. [ 64.564427][ T6044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.46'. [ 65.316829][ T973] tipc: Node number set to 2321606696 [ 65.644233][ T6069] ------------[ cut here ]------------ [ 65.650099][ T6069] refcount_t: underflow; use-after-free. [ 65.661536][ T6069] WARNING: CPU: 0 PID: 6069 at lib/refcount.c:28 refcount_warn_saturate+0x15a/0x1d0 [ 65.671116][ T6069] Modules linked in: [ 65.675567][ T6069] CPU: 0 UID: 0 PID: 6069 Comm: syz.2.53 Not tainted 6.12.0-syzkaller-10683-ge8e7be7d212d #0 [ 65.686114][ T6069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 65.696634][ T6069] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 65.702828][ T6069] Code: a0 13 61 8c e8 a7 85 95 fc 90 0f 0b 90 90 eb 99 e8 8b e0 d4 fc c6 05 8c 6c 47 0b 01 90 48 c7 c7 00 14 61 8c e8 87 85 95 fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 68 e0 d4 fc c6 05 66 6c 47 0b 01 90 [ 65.724121][ T6069] RSP: 0018:ffffc900058cf8e8 EFLAGS: 00010246 [ 65.731010][ T6069] RAX: 23b3165386f31500 RBX: ffff88807b475864 RCX: 0000000000080000 [ 65.739066][ T6069] RDX: ffffc9000c59a000 RSI: 0000000000003e2c RDI: 0000000000003e2d [ 65.747210][ T6069] RBP: 0000000000000003 R08: ffffffff81568c22 R09: fffffbfff1cfa8a8 [ 65.755281][ T6069] R10: dffffc0000000000 R11: fffffbfff1cfa8a8 R12: ffff888079890c68 [ 65.763272][ T6069] R13: ffff88807b475864 R14: 1ffff1100f312198 R15: ffff888079890c00 [ 65.771372][ T6069] FS: 00007f1a5d1896c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 65.780404][ T6069] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.787307][ T6069] CR2: 000000110c2f55ca CR3: 0000000027a3e000 CR4: 00000000003526f0 [ 65.795604][ T6069] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 65.803608][ T6069] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 65.811639][ T6069] Call Trace: [ 65.815033][ T6069] [ 65.817989][ T6069] ? __warn+0x168/0x4e0 [ 65.822184][ T6069] ? refcount_warn_saturate+0x15a/0x1d0 [ 65.828546][ T6069] ? report_bug+0x2b3/0x500 [ 65.833086][ T6069] ? refcount_warn_saturate+0x15a/0x1d0 [ 65.839558][ T6069] ? handle_bug+0x60/0x90 [ 65.843913][ T6069] ? exc_invalid_op+0x1a/0x50 [ 65.848634][ T6069] ? asm_exc_invalid_op+0x1a/0x20 [ 65.853682][ T6069] ? __warn_printk+0x292/0x360 [ 65.858538][ T6069] ? refcount_warn_saturate+0x15a/0x1d0 [ 65.864106][ T6069] ? refcount_warn_saturate+0x159/0x1d0 [ 65.870800][ T6069] j1939_session_put+0x1ed/0x440 [ 65.876196][ T6069] j1939_sk_sendmsg+0x121b/0x14c0 [ 65.881256][ T6069] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 65.886711][ T6069] ? __import_iovec+0x590/0x870 [ 65.891583][ T6069] ? aa_sock_msg_perm+0x91/0x160 [ 65.896610][ T6069] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 65.902033][ T6069] __sock_sendmsg+0x221/0x270 [ 65.906779][ T6069] ____sys_sendmsg+0x52a/0x7e0 [ 65.911577][ T6069] ? __pfx_____sys_sendmsg+0x10/0x10 [ 65.916927][ T6069] ? __fget_files+0x2a/0x410 [ 65.921570][ T6069] ? __fget_files+0x2a/0x410 [ 65.926935][ T6069] __sys_sendmsg+0x269/0x350 [ 65.931541][ T6069] ? __pfx_futex_wake+0x10/0x10 [ 65.937240][ T6069] ? __pfx___sys_sendmsg+0x10/0x10 [ 65.942374][ T6069] ? j1939_sk_connect+0x442/0x5c0 [ 65.949099][ T6069] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 65.955538][ T6069] ? do_syscall_64+0x100/0x230 [ 65.960773][ T6069] ? do_syscall_64+0xb6/0x230 [ 65.965574][ T6069] do_syscall_64+0xf3/0x230 [ 65.970101][ T6069] ? clear_bhb_loop+0x35/0x90 [ 65.974868][ T6069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.980778][ T6069] RIP: 0033:0x7f1a5c37ff19 [ 65.985265][ T6069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.004941][ T6069] RSP: 002b:00007f1a5d189058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.013362][ T6069] RAX: ffffffffffffffda RBX: 00007f1a5c545fa0 RCX: 00007f1a5c37ff19 [ 66.021405][ T6069] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000004 [ 66.030369][ T6069] RBP: 00007f1a5c3f3986 R08: 0000000000000000 R09: 0000000000000000 [ 66.039766][ T6069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.047834][ T6069] R13: 0000000000000000 R14: 00007f1a5c545fa0 R15: 00007ffe7c967a18 [ 66.055948][ T6069] [ 66.058987][ T6069] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 66.066267][ T6069] CPU: 0 UID: 0 PID: 6069 Comm: syz.2.53 Not tainted 6.12.0-syzkaller-10683-ge8e7be7d212d #0 [ 66.076417][ T6069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 66.086464][ T6069] Call Trace: [ 66.089737][ T6069] [ 66.092666][ T6069] dump_stack_lvl+0x241/0x360 [ 66.097347][ T6069] ? __pfx_dump_stack_lvl+0x10/0x10 [ 66.102550][ T6069] ? __pfx__printk+0x10/0x10 [ 66.107236][ T6069] ? vscnprintf+0x5d/0x90 [ 66.111564][ T6069] panic+0x349/0x880 [ 66.115476][ T6069] ? __warn+0x177/0x4e0 [ 66.119631][ T6069] ? __pfx_panic+0x10/0x10 [ 66.124064][ T6069] __warn+0x34b/0x4e0 [ 66.128047][ T6069] ? refcount_warn_saturate+0x15a/0x1d0 [ 66.133598][ T6069] report_bug+0x2b3/0x500 [ 66.137928][ T6069] ? refcount_warn_saturate+0x15a/0x1d0 [ 66.143485][ T6069] handle_bug+0x60/0x90 [ 66.147635][ T6069] exc_invalid_op+0x1a/0x50 [ 66.152138][ T6069] asm_exc_invalid_op+0x1a/0x20 [ 66.156986][ T6069] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 66.163144][ T6069] Code: a0 13 61 8c e8 a7 85 95 fc 90 0f 0b 90 90 eb 99 e8 8b e0 d4 fc c6 05 8c 6c 47 0b 01 90 48 c7 c7 00 14 61 8c e8 87 85 95 fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 68 e0 d4 fc c6 05 66 6c 47 0b 01 90 [ 66.182850][ T6069] RSP: 0018:ffffc900058cf8e8 EFLAGS: 00010246 [ 66.188954][ T6069] RAX: 23b3165386f31500 RBX: ffff88807b475864 RCX: 0000000000080000 [ 66.196934][ T6069] RDX: ffffc9000c59a000 RSI: 0000000000003e2c RDI: 0000000000003e2d [ 66.204907][ T6069] RBP: 0000000000000003 R08: ffffffff81568c22 R09: fffffbfff1cfa8a8 [ 66.212883][ T6069] R10: dffffc0000000000 R11: fffffbfff1cfa8a8 R12: ffff888079890c68 [ 66.220862][ T6069] R13: ffff88807b475864 R14: 1ffff1100f312198 R15: ffff888079890c00 [ 66.228852][ T6069] ? __warn_printk+0x292/0x360 [ 66.233641][ T6069] ? refcount_warn_saturate+0x159/0x1d0 [ 66.239199][ T6069] j1939_session_put+0x1ed/0x440 [ 66.244149][ T6069] j1939_sk_sendmsg+0x121b/0x14c0 [ 66.249192][ T6069] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 66.254562][ T6069] ? __import_iovec+0x590/0x870 [ 66.259420][ T6069] ? aa_sock_msg_perm+0x91/0x160 [ 66.264359][ T6069] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 66.269726][ T6069] __sock_sendmsg+0x221/0x270 [ 66.274405][ T6069] ____sys_sendmsg+0x52a/0x7e0 [ 66.279173][ T6069] ? __pfx_____sys_sendmsg+0x10/0x10 [ 66.284452][ T6069] ? __fget_files+0x2a/0x410 [ 66.289063][ T6069] ? __fget_files+0x2a/0x410 [ 66.293664][ T6069] __sys_sendmsg+0x269/0x350 [ 66.298255][ T6069] ? __pfx_futex_wake+0x10/0x10 [ 66.303105][ T6069] ? __pfx___sys_sendmsg+0x10/0x10 [ 66.308217][ T6069] ? j1939_sk_connect+0x442/0x5c0 [ 66.313273][ T6069] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 66.319611][ T6069] ? do_syscall_64+0x100/0x230 [ 66.324381][ T6069] ? do_syscall_64+0xb6/0x230 [ 66.329063][ T6069] do_syscall_64+0xf3/0x230 [ 66.333565][ T6069] ? clear_bhb_loop+0x35/0x90 [ 66.338250][ T6069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.344139][ T6069] RIP: 0033:0x7f1a5c37ff19 [ 66.348553][ T6069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.368161][ T6069] RSP: 002b:00007f1a5d189058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.376664][ T6069] RAX: ffffffffffffffda RBX: 00007f1a5c545fa0 RCX: 00007f1a5c37ff19 [ 66.384632][ T6069] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000004 [ 66.392596][ T6069] RBP: 00007f1a5c3f3986 R08: 0000000000000000 R09: 0000000000000000 [ 66.400561][ T6069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.408523][ T6069] R13: 0000000000000000 R14: 00007f1a5c545fa0 R15: 00007ffe7c967a18 [ 66.416519][ T6069] [ 66.419777][ T6069] Kernel Offset: disabled [ 66.424139][ T6069] Rebooting in 86400 seconds..