last executing test programs: 1.089027601s ago: executing program 0 (id=1): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x6c, r1, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f3c}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x70bd27, 0xa5dfdbfb, {0x0, 0x0, 0x0, r4, 0x402ec, 0x16201}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x404c000}, 0x4012) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) (async) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x6c, r1, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f3c}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x70bd27, 0xa5dfdbfb, {0x0, 0x0, 0x0, r4, 0x402ec, 0x16201}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x404c000}, 0x4012) (async) 945.627558ms ago: executing program 1 (id=2): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a30000000005400b866ccffd626e1019d03b13d1886d50000060a010400000000000000000100000008000b40000000002c00048028000180080001006e6174001c0002800800044000000009080002400000000a08000140000000010900010073797a3000000000140000001100010000000000000000000000000a"], 0xc8}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000058000000060a010400000000000000000100000008000b4000000000300004802c00018008000100636d700020000280080002400000001b0c00038005000100ef000000080001400000000f0900010073797a300000"], 0xcc}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff800000001c0012800b00010062726964676500000c0002800800610a00000000"], 0x3c}}, 0x0) 849.152519ms ago: executing program 0 (id=6): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000b800000095"], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRES16=r1, @ANYBLOB="00032abd7000ffdbdf25140000000800150003000000080006000300000008001500050000000800030008000000"], 0x34}, 0x1, 0x0, 0x0, 0x4404c000}, 0x4000) 786.866445ms ago: executing program 1 (id=7): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$XFS_IOC_GET_RESBLKS(r0, 0x80105873, &(0x7f0000000100)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r1, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = accept(r0, &(0x7f00000001c0)=@xdp, &(0x7f0000000280)=0x80) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f00000002c0)="65f9d0b2a8ad30db908ea4b67f78b125ed0e0cfc385e406fe82a7ec29b52f5f5c4cb1d293f9e450494ed492d135fe7533052ac671cf010b2b60448a20617f075d5af24887ba8334a2c831035dd9f38b22fb44e9ce915adda292b99a323919b1cb5dc80a212fb6d0c7f6d") 716.962928ms ago: executing program 0 (id=8): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) (async) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async, rerun: 32) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, 0x3, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xd5}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x811) (async, rerun: 32) r9 = accept4$inet(r3, 0x0, &(0x7f0000000280), 0x800) setsockopt$inet_mreqsrc(r9, 0x0, 0xe, &(0x7f0000000300)={@broadcast, @private=0xa010101, @broadcast}, 0xc) (async) ioctl$SIOCX25SDTEFACILITIES(r8, 0x89eb, &(0x7f0000000140)={0x0, 0xdec, 0x833c, 0x7, 0x0, 0x8d, 0x2b, "839bf939b57362abfaad537bda3067fc22f51ecb", "b6f6c857a33c218fa92e44589f8115fc47110400"}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x9, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x4000800) 670.705532ms ago: executing program 1 (id=9): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0xfffffffffffffce7, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) (async) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b2b, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540", @ANYRESOCT=r3], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x4) 354.580385ms ago: executing program 0 (id=10): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}}, 0x20050800) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x17, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0xc0) 231.465495ms ago: executing program 0 (id=11): unshare(0x20400) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_OFFSET={0x8}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_DREG={0x8}, @NFTA_HASH_MODULUS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 194.318098ms ago: executing program 1 (id=12): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r1, {0x5, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth0_to_batadv\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 54.714445ms ago: executing program 0 (id=13): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e34ff65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd086004c4a56c6cce6e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e430a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b051f47db7aa110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c0000000000000000000a000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3938e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea875583e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba46cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5ccb9f10f615c87c441dc50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f246e891e20ecaad7059866506c3000000000c3230e901e885b7a4a36bdfdb5ce7a2e5807a0f4c1d461d1243fccf51b875b49490cd7d044e7a1e1a4c013fae1f070a8a37ab90da2efc6c875b3aab34b75a252072691fc97bef0fed8ee597ab83bb53f89c36bc2ee3ad54904542f66dc94132df75fc9944882d6f2e13b7057e0000000000000000000000000000000000001b726c0ccd24000000000000cfd2f4d005578b9ed06e1c41ef3b411066739de953d39b968caaca1507928d68c8f052"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff02000000000000000000000000000104"], 0xfdef) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x40132, 0xffffffffffffffff, 0x32e64000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000ac0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x288ea}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xa533}]}}}]}, 0x3c}}, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) write$tun(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff02000000000000000000000000000104"], 0xfdef) (async) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x40132, 0xffffffffffffffff, 0x32e64000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000ac0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x288ea}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xa533}]}}}]}, 0x3c}}, 0x0) (async) 53.930085ms ago: executing program 3 (id=4): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0xa80, 0x4) sendmmsg$inet6(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x7fffffff, @loopback, 0x8000}, 0x1c, 0x0}}], 0x1, 0x0) (async) sendmmsg$inet6(r1, &(0x7f0000006b80)=[{{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x1, 0x0) (async) sendto$inet6(r1, &(0x7f00000006c0)="1381e60a9181ff5320b9dc26bbe1a97986ba7330240101c17ccaeeee76fef37e4b23d5971625f5269c88a1d2f34630d2602cd57a1fe8c201bc9a7731e751105a61d689cf52c19d0740b77d131401fd944c6266a46b4130f9c9a50b39863609dd52a87cb34976f0556de449e2c31dd67665e6aa05db8bd390f0ba67cc7332b7a627ad0d9e578d3cae955aed1f7c0d83c411e64494366db04c0ab32e206b2f0bade8de4d7ee14e008659220f8e05ccbed536e840eac844", 0xb6, 0x40051, &(0x7f0000000780)={0xa, 0x4e24, 0x4b62, @rand_addr=' \x01\x00', 0xffffffff}, 0x1c) recvfrom$inet6(r1, 0x0, 0x0, 0x12020, 0x0, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f02feff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000d0c10000000000000000000", 0x58}], 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r6, @ANYBLOB="0100400000000000000001937ea272bbe9732b79"], 0x38}}, 0x0) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) sendmsg$kcm(r3, &(0x7f0000000f00)={&(0x7f0000000400)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x8, @loopback, 0xfffff5fa}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000480)="e64d97931aacc4b171cc9118c4f5a1eb09a37201e64d4b0dcbf605e56b709eb980d285f6863c97f274e421c01c1ec69df7d9d20621d2e6cfa9f66c01ce0bb3586a0bab1af276a8010f14773f0c745f7378408adffde3ff7e3836146ff6b9c9b298036af44e483294cebbc49e470b1db79d0a0afd7dbb032c63dfeacc3743e1f22dceb43f4406a5720c277eac15d605272e0a200f081277a75a3a6bb0adea3189b7660ea27642d588049878acea70c98c6107bf3a50c43c72cef72692fdc82e636d9795ceff64d8d5b650fb51", 0xcc}, {&(0x7f0000000580)="db60064393722663bfebb1a9793a27b721f70f7e7cd3f5e28e9dffb3458587ca68e9b5cf708d099add33a385480db7bb21ace7aa14be88f404050aca58e6276868ad845d5fab5352feaa9f5b75ef1bf67a2be40f185b083a6248f42981d1720dda3e5d39c13d6adf80f4f77d577cbb681fbefe6b098f330605856f174d1036cec767255642683d7110059d5f57d68fa95ee4879363ace6b63953a3dc329c264394b4cdfdb2fc56", 0xa7}, {&(0x7f0000000640)="cd06e471d92375", 0x7}], 0x3, &(0x7f0000000b00)=[{0xf0, 0x114, 0x10, "3c7015021bfec929e245a6f0a4cb391f6b22b7465b5d774e6d28b4cb5f3099403c726f89b2b724fb47964910eae31574f80bc772307af72a7b5a315f68e7e939b8fad88d012a67a6460fc41681f0adde49fd23808a63ae27e1c857675e5042e5fec6d370c7b40db9c31c53d7811078e154a2d0fdc752d95795bab707eb832fd799e686d5469c5d3955ac37ae8f8f7ad6186fee1e949f4cf542ae6acad8cb4c501aaf97ab4adae6cb488249830ef8c55effdf6ec8433175424ccf007b4f50138e9458ff4fd6b1792ebccbb3a9f935ee02b414ffb971ef2deee2dd96b523"}, {0x108, 0x11, 0x9, "f3812f588948a33bdfc46639c483ef94483a34298e230337771b4ef4e64ebe7c7e74a55510feefb61648471c2ff591a6ca39f6bce6fd182aac97abad96443f5df587a33c24c219f94cd940dc63d8fbe9b9c9025ae858f500cd120316c4f0ec7e248d5b44fe97acc8dc6686af17d108d0dab36d8d712b58f5d50d531d32889cdb55811c3307154982cb9c64d575e6098a95be5b94ffc2f2d905425c610a4e8b8f4c268ce04905b3b29344307b54d4aa7532f0a5a788d00b3755361fb38291bb030ce0f358e305ff836e472a2d147e40bc756948368e0895c22d48b5afdf564ccc5275f0544889070b353b7b03140d5ea67e34c7950b90209e"}, {0x70, 0x4, 0x9, "3c7558da5abbb1151e22a0fb01eece153c32b1800ade6b573519bafd7581c58204e3bca22034bd7e7d6d9e5f983202b7d0d65614bd8cc289911f3f11422af596482a806fc0e85d8d00a73d8f602ec139c197093e59311875eff2"}, {0xa0, 0x111, 0xf2b, "044c7c89ca169b31b21f595e313c647761f7c49a7990ffeb487d36e89337af89be3d0cee872c0b04d12b086c7fe2d766d2100acf928546b50ba658ec4930efec6a8d1dbe7d7f3c51bb41b4bc29787dea80525a9f3de53fe2e5d4385bb63447e581351b9af5c98bfa8091bc1fb79f807716cf19b276312fa4610d2cf840ccb8dea51bc1514ab16a98fc2a"}, {0xd0, 0x119, 0xd8ef, "84d9034c10d7f28e5fa13d435d4acb4e35dd85f967d21f19b1f48ceae32d76301ae43dad01d11d6d00af356891afefb0824db78db6d80e3671937c270f4ec521e594668c79623507758ce7a8b9c23b1e77c6a1b3c812fbc822f43a6bc17ef576fb6eea252c4291a834c4e3d87ec0d71e2bd162ab8a18b76ad24c69ab7e5cbd666aa9dc405b4a66110f0ca55adfb9edf572ebba5aaaad30fb63fe1a6fc78216c4ced486f0c475e3a578d526cfc07f046a4366eb5683f6f9cb53"}], 0x3d8}, 0x20000000) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00'], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xc0, r7, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x0, 0x80, 0xfff7, 0x4, 0x47d, 0x8348, 0x9]}}]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8d9}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x1ff}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x5}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0xb5}]}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x1}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x19}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0xc1}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4008000}, 0x10) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000280)=""/191, 0xbf}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x3, 0x10000, 0x0) 0s ago: executing program 1 (id=14): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="5801000040000701feffffff00000000017c0000040042800c00018006000600800a0000340102802e0114802a0102"], 0x158}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @initdev}, &(0x7f0000000080)=0xc) sendmsg$nl_route(r1, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000002100)=@dellink={0x28, 0x11, 0x90d, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x800, 0x1}, [@IFLA_GROUP={0x8, 0x1b, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.53' (ED25519) to the list of known hosts. [ 71.714949][ T5611] cgroup: Unknown subsys name 'net' [ 71.783363][ T5611] cgroup: Unknown subsys name 'cpuset' [ 71.792965][ T5611] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.168026][ T5611] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.597960][ T5624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.609507][ T5624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.617251][ T5624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.625746][ T5624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.636457][ T5624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.697726][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.711729][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.720557][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.741175][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.749435][ T5632] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.758881][ T5632] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.766858][ T5632] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.774458][ T5632] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.793289][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.803706][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.811947][ T5636] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.824767][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.832839][ T4943] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.842715][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.851116][ T4943] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.859304][ T4943] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.872536][ T4943] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.891590][ T4943] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.906531][ T4943] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.916110][ T4943] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.336547][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.345062][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.352950][ T5623] bridge_slave_0: entered allmulticast mode [ 78.361426][ T5623] bridge_slave_0: entered promiscuous mode [ 78.408845][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.416843][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.424452][ T5623] bridge_slave_1: entered allmulticast mode [ 78.437135][ T5623] bridge_slave_1: entered promiscuous mode [ 78.589936][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.632489][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.650982][ T5636] Bluetooth: hci0: command tx timeout [ 78.675710][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.682979][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.690699][ T5633] bridge_slave_0: entered allmulticast mode [ 78.697577][ T5633] bridge_slave_0: entered promiscuous mode [ 78.727154][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.734362][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.741639][ T5630] bridge_slave_0: entered allmulticast mode [ 78.748530][ T5630] bridge_slave_0: entered promiscuous mode [ 78.756003][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.763588][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.771236][ T5633] bridge_slave_1: entered allmulticast mode [ 78.778097][ T5633] bridge_slave_1: entered promiscuous mode [ 78.802521][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.809912][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.817226][ T5630] bridge_slave_1: entered allmulticast mode [ 78.824384][ T5630] bridge_slave_1: entered promiscuous mode [ 78.841505][ T5623] team0: Port device team_slave_0 added [ 78.878395][ T5623] team0: Port device team_slave_1 added [ 78.889823][ T4943] Bluetooth: hci1: command tx timeout [ 78.896064][ T5636] Bluetooth: hci2: command tx timeout [ 78.924121][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.942806][ T5637] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.950183][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.957334][ T5637] bridge_slave_0: entered allmulticast mode [ 78.964491][ T5637] bridge_slave_0: entered promiscuous mode [ 78.969791][ T5636] Bluetooth: hci3: command tx timeout [ 78.976388][ T4943] Bluetooth: hci4: command tx timeout [ 78.987674][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.999280][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.009361][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.016452][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.042385][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.054261][ T5637] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.061415][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.068567][ T5637] bridge_slave_1: entered allmulticast mode [ 79.076545][ T5637] bridge_slave_1: entered promiscuous mode [ 79.096932][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.115085][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.122272][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.148556][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.168505][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.175761][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.183120][ T5627] bridge_slave_0: entered allmulticast mode [ 79.190146][ T5627] bridge_slave_0: entered promiscuous mode [ 79.233410][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.240609][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.247776][ T5627] bridge_slave_1: entered allmulticast mode [ 79.254984][ T5627] bridge_slave_1: entered promiscuous mode [ 79.272121][ T5633] team0: Port device team_slave_0 added [ 79.281680][ T5633] team0: Port device team_slave_1 added [ 79.289758][ T5637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.309292][ T5630] team0: Port device team_slave_0 added [ 79.335590][ T5637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.355442][ T5630] team0: Port device team_slave_1 added [ 79.388040][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.412208][ T5623] hsr_slave_0: entered promiscuous mode [ 79.418947][ T5623] hsr_slave_1: entered promiscuous mode [ 79.426287][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.433421][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.459755][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.482555][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.501896][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.508927][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.535215][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.548160][ T5637] team0: Port device team_slave_0 added [ 79.580970][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.587952][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.614345][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.634561][ T5637] team0: Port device team_slave_1 added [ 79.655000][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.662042][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.688178][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.711446][ T5627] team0: Port device team_slave_0 added [ 79.751681][ T5627] team0: Port device team_slave_1 added [ 79.772882][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.780131][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.806099][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.848509][ T5633] hsr_slave_0: entered promiscuous mode [ 79.854903][ T5633] hsr_slave_1: entered promiscuous mode [ 79.861311][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 79.867106][ T5633] Cannot create hsr debugfs directory [ 79.873478][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.881176][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.907218][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.926856][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.933975][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.960695][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.998342][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.005530][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.031616][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.078236][ T5630] hsr_slave_0: entered promiscuous mode [ 80.084817][ T5630] hsr_slave_1: entered promiscuous mode [ 80.091570][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 80.097301][ T5630] Cannot create hsr debugfs directory [ 80.236387][ T5627] hsr_slave_0: entered promiscuous mode [ 80.242681][ T5627] hsr_slave_1: entered promiscuous mode [ 80.248684][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 80.255630][ T5627] Cannot create hsr debugfs directory [ 80.265788][ T5637] hsr_slave_0: entered promiscuous mode [ 80.272218][ T5637] hsr_slave_1: entered promiscuous mode [ 80.278209][ T5637] debugfs: 'hsr0' already exists in 'hsr' [ 80.283984][ T5637] Cannot create hsr debugfs directory [ 80.613918][ T5623] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.626112][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.634498][ T5623] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.645067][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.669814][ T5623] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.682410][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.712487][ T5623] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.722223][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.730793][ T5636] Bluetooth: hci0: command tx timeout [ 80.801945][ T5633] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.812911][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.821698][ T5633] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.837665][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.853882][ T5633] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.864274][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.873415][ T5633] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.882725][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.970097][ T4943] Bluetooth: hci1: command tx timeout [ 80.976146][ T5636] Bluetooth: hci2: command tx timeout [ 80.985775][ T5630] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.000772][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.012979][ T5630] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.023153][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.041318][ T5630] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.051568][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.060467][ T4943] Bluetooth: hci4: command tx timeout [ 81.066236][ T5636] Bluetooth: hci3: command tx timeout [ 81.079536][ T5630] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.089322][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.163033][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.178636][ T5637] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.188423][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.196677][ T5637] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.210359][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.241968][ T5637] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.253982][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.269336][ T5637] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.278636][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.317567][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.363345][ T182] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.370979][ T182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.389098][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.409298][ T5627] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.421101][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.431916][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.439035][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.455282][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.463675][ T5627] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.474278][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.489238][ T5627] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.499391][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.517142][ T5627] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.526982][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.542264][ T182] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.549389][ T182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.576969][ T182] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.584144][ T182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.694059][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.767185][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.803496][ T182] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.810674][ T182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.845733][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.852914][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.887511][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.963943][ T5637] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.994163][ T3370] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.001357][ T3370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.033539][ T3370] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.040738][ T3370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.094477][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.197337][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.254252][ T3370] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.261565][ T3370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.310800][ T3379] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.317995][ T3379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.508075][ T5627] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.728439][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.811270][ T5636] Bluetooth: hci0: command tx timeout [ 82.837832][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.004880][ T5623] veth0_vlan: entered promiscuous mode [ 83.045828][ T5623] veth1_vlan: entered promiscuous mode [ 83.053949][ T5636] Bluetooth: hci2: command tx timeout [ 83.061232][ T4943] Bluetooth: hci1: command tx timeout [ 83.126596][ T5633] veth0_vlan: entered promiscuous mode [ 83.140214][ T4943] Bluetooth: hci3: command tx timeout [ 83.145677][ T5636] Bluetooth: hci4: command tx timeout [ 83.182983][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.195131][ T5633] veth1_vlan: entered promiscuous mode [ 83.265740][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.287045][ T5623] veth0_macvtap: entered promiscuous mode [ 83.305371][ T5623] veth1_macvtap: entered promiscuous mode [ 83.395956][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.407751][ T5633] veth0_macvtap: entered promiscuous mode [ 83.439268][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.455525][ T5633] veth1_macvtap: entered promiscuous mode [ 83.484616][ T3379] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.506028][ T3379] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.522049][ T3379] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.536311][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.556523][ T3379] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.603666][ T5637] veth0_vlan: entered promiscuous mode [ 83.622319][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.635933][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.658948][ T5637] veth1_vlan: entered promiscuous mode [ 83.702920][ T3379] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.711918][ T3379] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.732327][ T47] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.741191][ T47] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.764506][ T3340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.775944][ T3340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.827111][ T3340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.836780][ T3340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.906009][ T5637] veth0_macvtap: entered promiscuous mode [ 83.931536][ T5630] veth0_vlan: entered promiscuous mode [ 83.942073][ T5637] veth1_macvtap: entered promiscuous mode [ 83.952883][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.962327][ T5627] veth0_vlan: entered promiscuous mode [ 83.967538][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.979378][ T5623] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.004047][ T5630] veth1_vlan: entered promiscuous mode [ 84.033654][ T5627] veth1_vlan: entered promiscuous mode [ 84.051775][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.064621][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.113425][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.149229][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.169495][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.181132][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.205634][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.234027][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.274481][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.336965][ T5627] veth0_macvtap: entered promiscuous mode [ 84.404998][ T5630] veth0_macvtap: entered promiscuous mode [ 84.424645][ T5630] veth1_macvtap: entered promiscuous mode [ 84.433948][ T5627] veth1_macvtap: entered promiscuous mode [ 84.590650][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.623019][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.626121][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.642266][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.671714][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.695750][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.784039][ T3370] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.796602][ T3370] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.827698][ T3370] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.866829][ T3340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.878043][ T3370] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.892000][ T4943] Bluetooth: hci0: command tx timeout [ 84.897527][ T3340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.927792][ T3370] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.000791][ T3370] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.031324][ T3370] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.072482][ T3370] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.129747][ T4943] Bluetooth: hci1: command tx timeout [ 85.135237][ T5636] Bluetooth: hci2: command tx timeout [ 85.220738][ T5636] Bluetooth: hci3: command tx timeout [ 85.227988][ T4943] Bluetooth: hci4: command tx timeout [ 85.235471][ T5844] syz.0.13 uses obsolete (PF_INET,SOCK_PACKET) [ 85.282997][ C1] ================================================================== [ 85.285207][ T5851] netlink: 294 bytes leftover after parsing attributes in process `syz.1.14'. [ 85.291105][ C1] BUG: KASAN: use-after-free in qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 85.291152][ C1] Read of size 2 at addr ffff88817a0350b4 by task syz.0.13/5844 [ 85.291167][ C1] [ 85.291188][ C1] CPU: 1 UID: 0 PID: 5844 Comm: syz.0.13 Not tainted syzkaller #0 PREEMPT(full) [ 85.291210][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 85.291228][ C1] Call Trace: [ 85.291238][ C1] [ 85.291245][ C1] dump_stack_lvl+0xe8/0x150 [ 85.291264][ C1] print_address_description+0x55/0x1e0 [ 85.291282][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 85.291310][ C1] print_report+0x58/0x70 [ 85.291326][ C1] kasan_report+0x117/0x150 [ 85.291354][ C1] ? __pskb_pull_tail+0x115d/0x17b0 [ 85.291373][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 85.291404][ C1] qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 85.291439][ C1] __netif_receive_skb_core+0x13bd/0x3170 [ 85.291461][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 85.291481][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 85.291500][ C1] ? __pfx_hlock_conflict+0x10/0x10 [ 85.291526][ C1] ? check_path+0x21/0x40 [ 85.291548][ C1] ? check_noncircular+0xda/0x150 [ 85.291572][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 85.291594][ C1] ? lockdep_unlock+0x5d/0xd0 [ 85.291609][ C1] ? __lock_acquire+0x146e/0x2cf0 [ 85.291641][ C1] __netif_receive_skb_list_core+0x24d/0x810 [ 85.291661][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 85.291685][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 85.291711][ C1] netif_receive_skb_list_internal+0x995/0xcf0 [ 85.291730][ C1] ? lock_acquire+0x106/0x350 [ 85.291750][ C1] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 85.291771][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 85.291790][ C1] ? dev_gro_receive+0x1108/0x23c0 [ 85.291815][ C1] ? dev_gro_receive+0x1773/0x23c0 [ 85.291841][ C1] napi_complete_done+0x299/0x730 [ 85.291863][ C1] ? __pfx_napi_complete_done+0x10/0x10 [ 85.291884][ C1] ? gro_cell_poll+0x16c/0x5d0 [ 85.291913][ C1] gro_cell_poll+0x5a9/0x5d0 [ 85.291938][ C1] ? gro_cell_poll+0x16c/0x5d0 [ 85.291960][ C1] __napi_poll+0xae/0x340 [ 85.291979][ C1] ? skb_defer_free_flush+0x233/0x260 [ 85.292000][ C1] net_rx_action+0x627/0xf70 [ 85.292021][ C1] ? lock_acquire+0x106/0x350 [ 85.292045][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 85.292074][ C1] ? sched_clock+0x3f/0x60 [ 85.292107][ C1] handle_softirqs+0x22a/0x840 [ 85.292127][ C1] ? do_softirq+0x76/0xd0 [ 85.292147][ C1] ? tun_rx_batched+0x185/0x790 [ 85.292171][ C1] do_softirq+0x76/0xd0 [ 85.292188][ C1] [ 85.292195][ C1] [ 85.292201][ C1] __local_bh_enable_ip+0xf8/0x130 [ 85.292220][ C1] ? tun_rx_batched+0x185/0x790 [ 85.292242][ C1] tun_rx_batched+0x617/0x790 [ 85.292268][ C1] ? __pfx_tun_rx_batched+0x10/0x10 [ 85.292291][ C1] ? tun_get_user+0x2787/0x43e0 [ 85.292315][ C1] ? tun_get_user+0x2787/0x43e0 [ 85.292337][ C1] ? tun_get_user+0x2394/0x43e0 [ 85.292360][ C1] ? tun_get_user+0x2394/0x43e0 [ 85.292382][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 85.292403][ C1] tun_get_user+0x2bbc/0x43e0 [ 85.292427][ C1] ? tun_get_user+0x2787/0x43e0 [ 85.292453][ C1] ? aa_file_perm+0x192/0x15e0 [ 85.292481][ C1] ? aa_file_perm+0x50e/0x15e0 [ 85.292507][ C1] ? __pfx_tun_get_user+0x10/0x10 [ 85.292530][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 85.292550][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 85.292578][ C1] ? preempt_schedule_common+0x82/0xd0 [ 85.292605][ C1] ? ref_tracker_alloc+0x35c/0x4c0 [ 85.292632][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 85.292657][ C1] ? tun_get+0x1c/0x2f0 [ 85.292679][ C1] ? tun_get+0x1c/0x2f0 [ 85.292702][ C1] ? tun_get+0x1c/0x2f0 [ 85.292724][ C1] ? tun_get+0x1c/0x2f0 [ 85.292747][ C1] tun_chr_write_iter+0x113/0x200 [ 85.292772][ C1] vfs_write+0x61d/0xb90 [ 85.292802][ C1] ? __pfx_vfs_write+0x10/0x10 [ 85.292832][ C1] ? __fget_files+0x2a/0x420 [ 85.292858][ C1] ksys_write+0x150/0x270 [ 85.292884][ C1] ? __pfx_ksys_write+0x10/0x10 [ 85.292919][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.292938][ C1] do_syscall_64+0x15f/0xf80 [ 85.292964][ C1] ? trace_irq_disable+0x3b/0x140 [ 85.292991][ C1] ? clear_bhb_loop+0x40/0x90 [ 85.293012][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.293032][ C1] RIP: 0033:0x7f3656f9cdd9 [ 85.293052][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.293068][ C1] RSP: 002b:00007f3657e1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 85.293089][ C1] RAX: ffffffffffffffda RBX: 00007f3657215fa0 RCX: 00007f3656f9cdd9 [ 85.293103][ C1] RDX: 000000000000fdef RSI: 0000200000000440 RDI: 0000000000000005 [ 85.293115][ C1] RBP: 00007f3657032d69 R08: 0000000000000000 R09: 0000000000000000 [ 85.293127][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.293138][ C1] R13: 00007f3657216038 R14: 00007f3657215fa0 R15: 00007ffcb69faae8 [ 85.293158][ C1] [ 85.293165][ C1] [ 85.300379][ T5851] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.308064][ C1] The buggy address belongs to the physical page: [ 85.308090][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x17a035 [ 85.823929][ C1] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 85.831136][ C1] raw: 057ff00000000000 ffffea0005e80d48 ffffea0005e80d48 0000000000000000 [ 85.839708][ C1] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 85.848277][ C1] page dumped because: kasan: bad access detected [ 85.854686][ C1] page_owner info is not present (never set?) [ 85.860728][ C1] [ 85.863036][ C1] Memory state around the buggy address: [ 85.868647][ C1] ffff88817a034f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 85.876692][ C1] ffff88817a035000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 85.884735][ C1] >ffff88817a035080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 85.892776][ C1] ^ [ 85.898390][ C1] ffff88817a035100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 85.906434][ C1] ffff88817a035180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 85.914474][ C1] ================================================================== [ 85.922607][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 85.929816][ C1] CPU: 1 UID: 0 PID: 5844 Comm: syz.0.13 Not tainted syzkaller #0 PREEMPT(full) [ 85.938950][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 85.949033][ C1] Call Trace: [ 85.952329][ C1] [ 85.955182][ C1] vpanic+0x56c/0xa60 [ 85.959194][ C1] ? __pfx_vpanic+0x10/0x10 [ 85.963718][ C1] ? irqentry_exit+0x218/0x730 [ 85.968505][ C1] panic+0xc5/0xd0 [ 85.972246][ C1] ? __pfx_panic+0x10/0x10 [ 85.976683][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 85.982347][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 85.988108][ C1] check_panic_on_warn+0x89/0xb0 [ 85.993089][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 85.998757][ C1] end_report+0x73/0x170 [ 86.003036][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 86.008697][ C1] kasan_report+0x128/0x150 [ 86.013215][ C1] ? __pskb_pull_tail+0x115d/0x17b0 [ 86.018436][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 86.024093][ C1] qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 86.029582][ C1] __netif_receive_skb_core+0x13bd/0x3170 [ 86.035324][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 86.040633][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 86.045854][ C1] ? __pfx_hlock_conflict+0x10/0x10 [ 86.051078][ C1] ? check_path+0x21/0x40 [ 86.055404][ C1] ? check_noncircular+0xda/0x150 [ 86.060427][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 86.066495][ C1] ? lockdep_unlock+0x5d/0xd0 [ 86.071160][ C1] ? __lock_acquire+0x146e/0x2cf0 [ 86.076183][ C1] __netif_receive_skb_list_core+0x24d/0x810 [ 86.082151][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 86.087085][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 86.093581][ C1] netif_receive_skb_list_internal+0x995/0xcf0 [ 86.099742][ C1] ? lock_acquire+0x106/0x350 [ 86.104424][ C1] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 86.110843][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 86.117521][ C1] ? dev_gro_receive+0x1108/0x23c0 [ 86.122628][ C1] ? dev_gro_receive+0x1773/0x23c0 [ 86.127732][ C1] napi_complete_done+0x299/0x730 [ 86.132755][ C1] ? __pfx_napi_complete_done+0x10/0x10 [ 86.138315][ C1] ? gro_cell_poll+0x16c/0x5d0 [ 86.143070][ C1] gro_cell_poll+0x5a9/0x5d0 [ 86.147653][ C1] ? gro_cell_poll+0x16c/0x5d0 [ 86.152409][ C1] __napi_poll+0xae/0x340 [ 86.156732][ C1] ? skb_defer_free_flush+0x233/0x260 [ 86.162124][ C1] net_rx_action+0x627/0xf70 [ 86.166708][ C1] ? lock_acquire+0x106/0x350 [ 86.171374][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 86.176475][ C1] ? sched_clock+0x3f/0x60 [ 86.180883][ C1] handle_softirqs+0x22a/0x840 [ 86.185638][ C1] ? do_softirq+0x76/0xd0 [ 86.189966][ C1] ? tun_rx_batched+0x185/0x790 [ 86.194825][ C1] do_softirq+0x76/0xd0 [ 86.198968][ C1] [ 86.201881][ C1] [ 86.204796][ C1] __local_bh_enable_ip+0xf8/0x130 [ 86.209932][ C1] ? tun_rx_batched+0x185/0x790 [ 86.214793][ C1] tun_rx_batched+0x617/0x790 [ 86.219459][ C1] ? __pfx_tun_rx_batched+0x10/0x10 [ 86.224644][ C1] ? tun_get_user+0x2787/0x43e0 [ 86.229479][ C1] ? tun_get_user+0x2787/0x43e0 [ 86.234319][ C1] ? tun_get_user+0x2394/0x43e0 [ 86.239164][ C1] ? tun_get_user+0x2394/0x43e0 [ 86.244009][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 86.249285][ C1] tun_get_user+0x2bbc/0x43e0 [ 86.253953][ C1] ? tun_get_user+0x2787/0x43e0 [ 86.258808][ C1] ? aa_file_perm+0x192/0x15e0 [ 86.263562][ C1] ? aa_file_perm+0x50e/0x15e0 [ 86.268312][ C1] ? __pfx_tun_get_user+0x10/0x10 [ 86.273323][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 86.278245][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 86.283606][ C1] ? preempt_schedule_common+0x82/0xd0 [ 86.289056][ C1] ? ref_tracker_alloc+0x35c/0x4c0 [ 86.294159][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 86.299610][ C1] ? tun_get+0x1c/0x2f0 [ 86.303775][ C1] ? tun_get+0x1c/0x2f0 [ 86.307922][ C1] ? tun_get+0x1c/0x2f0 [ 86.312065][ C1] ? tun_get+0x1c/0x2f0 [ 86.316207][ C1] tun_chr_write_iter+0x113/0x200 [ 86.321219][ C1] vfs_write+0x61d/0xb90 [ 86.325455][ C1] ? __pfx_vfs_write+0x10/0x10 [ 86.330214][ C1] ? __fget_files+0x2a/0x420 [ 86.334815][ C1] ksys_write+0x150/0x270 [ 86.339132][ C1] ? __pfx_ksys_write+0x10/0x10 [ 86.343991][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.350044][ C1] do_syscall_64+0x15f/0xf80 [ 86.354622][ C1] ? trace_irq_disable+0x3b/0x140 [ 86.359640][ C1] ? clear_bhb_loop+0x40/0x90 [ 86.364316][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.370188][ C1] RIP: 0033:0x7f3656f9cdd9 [ 86.374586][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.394176][ C1] RSP: 002b:00007f3657e1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 86.402579][ C1] RAX: ffffffffffffffda RBX: 00007f3657215fa0 RCX: 00007f3656f9cdd9 [ 86.410540][ C1] RDX: 000000000000fdef RSI: 0000200000000440 RDI: 0000000000000005 [ 86.418497][ C1] RBP: 00007f3657032d69 R08: 0000000000000000 R09: 0000000000000000 [ 86.426449][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.434404][ C1] R13: 00007f3657216038 R14: 00007f3657215fa0 R15: 00007ffcb69faae8 [ 86.442369][ C1] [ 86.445968][ C1] Kernel Offset: disabled [ 86.450278][ C1] Rebooting in 86400 seconds..