last executing test programs: 2.786143075s ago: executing program 2 (id=3): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) tkill(0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x22, 0x63f, &(0x7f0000000d80)="$eJzs3c9rXFsdAPDvvZPkJWl86RMRX1AMuHgP5KVJfVh1Y1sXdlGwYBciLhqapIZOf5CkYGvBBFwoKIi4LdKN/4B76d6dCOrOtVBFKha0dB73zp1mMplfaTIzSe7nA5M599wzOeebOyf33HvnzA2gtOazH2nE+xGvbyQRs03rZqK+cr4o9+Lfj29mjyRqte/+K4mkyGuUT4rnM8XCZET86XLEpyv76918+Oj2crVW95OIc1t37p/bfPjoo/U7y7dWb63eXTr/tY8vLH596eOlpoa+vTPF85Wr3/n8L3/6w6+u/bn6URIX4/r4j1eiJY6jMh/z8boIsTl/LCIuZIk2f5eT5hSEUGqV4v04HhGfjdmo5Et1s7H+i5E2DhioWiWi1l3SqwBwUuneUFaNcUDj2L6/4+DrAx6VDM/zS/UDoP3xjxWnHCbzY6PpF0nTkVH93MbZI6g/q+PV48knrx7PPYk95yFevtk6Y0dQTyfbOxHxuXbxJ3nbzuaRZvGne47104hYjIiJon3fOkQbkqb0IM7DdHOQ+Ju3Qxb/xeI5y7/8lvW3ntYadvwAlNOzS8WOfDtb2t3/ZWOPxvgn2ox/Zg5/SSY36v1f5/FfY38/mY970pZxWDZmudb+V463Zvz951d+3an++vhv7knjkdXfGAsOw/OdiLmW+H+WBVuMf7L4kzbbPyty42J/dXz7L/+80mndqOOvPY34oO3xz+6oNEt1uT55bm29urpY/9m2jj/88Qe/61R/+/jfGUCk7WXbf7pD/E3bP219XfY3ud/+V+60Zvz+2tM7neqf6bn9039MJPXjzYki50c7W1sbSxETydWiSJG/vLW1cb57vPUyL2v581I9/g+/1L7/73n/t0Q11fiX2Yf737v9otO6t3n/N11Mfl3rsw2dZPGv9N7++/p/lverPuv47/cffKHTum7xTx0mMAAAAAAAACihNL8Gm6QLb9JpurBQny/7mZhOq/c2t768du/B3ZWID/PPQ46nkSb5R0Zm68vJ2np1dan4PGxj+XzL8lci4r2I+E1lKl9euHmvujLq4AEAAAAAAAAAAAAAAAAAAOCYOFPM/2/cp/o/lfr8f6Aket9gbt/9H4BTYpA3mASOt7z/d9vFvzu8tgDDZf8P5aX/Q3np/1Be+j+Ul/4P5aX/Q3np/1Be+j8AAAAAnErvffHZ35KI2P7GVP7ITBTrTPqF0238QKUrA2sHMHx6NJTXm0v/BvtQOn2N//9XfDng4JsDjEDSLjMfHNS6d/5nbV+5a+fwbQMAAAAAAAAAAAAA6j54v/P8/4PNDQZOGtP+oLwOMf/fVwfACeer/6G8HOMDPWbxx2SnFb3m/wMAAAAAAAAAAAAAR2YmfyTpQjEXeCbSdGEh4lMRcTbGk7X16upiRLwbEX+tjL+TLS+NutEAAAAAAAAAAAAAAAAAAABwymw+fHR7uVpd3WhO/H9fzulONO6C2rtwrY8yXRPfjAO+KpLh/1mmImLkG2VgibGmnCRiO9vyx6JhG5txPJqRJ0b8jwkAAAAAAAAAAAAAAAAAAEqoae5xe3O/HXKLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGD4du//3yOxMl1/QV+F9yZGHSMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcDJ9EgAA//+YYDw3") 2.699149182s ago: executing program 0 (id=6): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x138}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, 0x0, 0x40000) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES16=r3, @ANYBLOB], 0x40}}, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000700)={0x0, 0x2904c, 0x3, 0x10003, '\x00', [{0x0, 0x0, 0x700, 0x7}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}], ['\x00', '\x00', '\x00']}) 1.972008381s ago: executing program 0 (id=8): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x387131d88c629875, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r1, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.971716541s ago: executing program 3 (id=9): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000080), 0x4) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x44080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) socket$inet(0x2, 0x6, 0x3) syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000500)={0x0, 0x9, 0x5}) sync() sync() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8000000000000}, 0x18) mq_open(&(0x7f0000000040)='\x00', 0x40, 0x80, &(0x7f0000000580)={0x9, 0x3, 0x6}) 1.692087464s ago: executing program 4 (id=11): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xfffff000) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfcbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {}, {0x9, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 1.598480121s ago: executing program 2 (id=12): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x1, 0x0, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@tick=0x3}, {0xff, 0x0, 0x0, 0x0, @time={0x7, 0x7}, {0x0, 0x3}, {}, @control={0x0, 0x0, 0x800}}, {0x0, 0x0, 0x0, 0x7, @tick, {}, {0x0, 0x4}, @raw32={[0x0, 0xffffffff, 0x5dd]}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x3}, {}, @quote={{0x1, 0xfe}}}, {0x0, 0x0, 0x0, 0x5, @time, {0x2}, {0x0, 0x9}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x1, 0x1, 0x0, @tick=0x401, {}, {}, @quote={{0x2, 0x2}, 0x9}}], 0xc4) r2 = syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0xec25, 0x0, 0x2, 0x4000032f}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4000, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1.185934845s ago: executing program 0 (id=14): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f0000000200)="b700000006000000000000f1dd0fccd5de059d3679f300", 0x17}, {&(0x7f0000000100)="37a8a6c41ef711e84c5554633f6ecf", 0xf}], 0x3) 1.100422941s ago: executing program 2 (id=16): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030c00000000070001000000000200090008000000010000000000000003000600000000000200000000000000000000000000000002000100000000000000020d00000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0) 1.065850994s ago: executing program 4 (id=17): bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, 0x0, 0x40040) 979.023281ms ago: executing program 1 (id=18): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) fremovexattr(0xffffffffffffffff, 0x0) 916.110366ms ago: executing program 1 (id=19): write(0xffffffffffffffff, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x9) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440), &(0x7f0000000180)=@v2={0x2000000, [{0x4, 0xfffffff7}, {0xfffffffd, 0x2}]}, 0x14, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x11) 828.214923ms ago: executing program 4 (id=20): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) r2 = getgid() setregid(r2, 0xee00) 759.973309ms ago: executing program 1 (id=21): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a0102"], 0x44}}, 0x0) 738.059361ms ago: executing program 3 (id=22): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000500)='kfree\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x4, @local, 0xb}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x2, 0x0, 0x0, 0x10, {[@mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x7, @multicast2, 0xfff9}]}}}}}}}}, 0x0) 717.938932ms ago: executing program 0 (id=23): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1, 0x0, 0x8}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) 631.853489ms ago: executing program 4 (id=24): syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000"], 0x48) mlock(&(0x7f0000067000/0x1000)=nil, 0x1000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4f}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") 631.663489ms ago: executing program 1 (id=25): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, 0x0, 0x0) 560.788015ms ago: executing program 3 (id=26): r0 = socket(0x2b, 0x1, 0x1) getsockname$packet(r0, 0x0, &(0x7f00000002c0)) 542.270136ms ago: executing program 0 (id=27): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xfffff000) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfcbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {}, {0x9, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 411.969977ms ago: executing program 1 (id=28): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) close_range(r0, r1, 0x0) 389.796359ms ago: executing program 3 (id=29): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) stat(&(0x7f0000001c40)='./file0\x00', 0x0) 389.535779ms ago: executing program 4 (id=30): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000340)=@keyring) 207.828954ms ago: executing program 3 (id=31): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000001240)={0x4c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) 132.0406ms ago: executing program 4 (id=32): pwritev2(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x8, 0x9, 0x0) r0 = io_uring_setup(0x6dc6, &(0x7f00000001c0)={0x0, 0xcf51, 0x400, 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 131.81103ms ago: executing program 2 (id=33): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@o_path={0x0, r0}, 0x18) 114.718101ms ago: executing program 1 (id=34): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r2}, 0x18) r3 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r3, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 86.749423ms ago: executing program 0 (id=35): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f000d", 0x12}], 0x1) 0s ago: executing program 3 (id=36): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) setrlimit(0x40000000000008, &(0x7f0000000000)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.251' (ED25519) to the list of known hosts. [ 59.486384][ T4171] cgroup: Unknown subsys name 'net' [ 59.625945][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.042900][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 62.501788][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 62.527787][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 62.594254][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 62.674688][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 62.741058][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.748141][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.756516][ T4196] device bridge_slave_0 entered promiscuous mode [ 62.793106][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.800521][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.808231][ T4196] device bridge_slave_1 entered promiscuous mode [ 62.815868][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 62.825621][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.832990][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.840863][ T4187] device bridge_slave_0 entered promiscuous mode [ 62.848244][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.855492][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.863330][ T4190] device bridge_slave_0 entered promiscuous mode [ 62.885571][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.892874][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.901424][ T4187] device bridge_slave_1 entered promiscuous mode [ 62.908706][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.916021][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.924180][ T4190] device bridge_slave_1 entered promiscuous mode [ 62.948673][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.990653][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.032910][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.044450][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.057016][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.064487][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.072617][ T4182] device bridge_slave_0 entered promiscuous mode [ 63.089989][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.102426][ T4196] team0: Port device team_slave_0 added [ 63.109953][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.128821][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.136053][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.144324][ T4182] device bridge_slave_1 entered promiscuous mode [ 63.159120][ T4196] team0: Port device team_slave_1 added [ 63.196892][ T4187] team0: Port device team_slave_0 added [ 63.217066][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.224428][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.232790][ T4181] device bridge_slave_0 entered promiscuous mode [ 63.249208][ T4187] team0: Port device team_slave_1 added [ 63.265043][ T4190] team0: Port device team_slave_0 added [ 63.271455][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.278525][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.286382][ T4181] device bridge_slave_1 entered promiscuous mode [ 63.295583][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.312610][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.319932][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.346257][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.360051][ T4190] team0: Port device team_slave_1 added [ 63.382229][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.391791][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.398735][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.424837][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.451217][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.458190][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.484551][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.519331][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.530976][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.548484][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.555676][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.581736][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.602409][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.609373][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.635457][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.678972][ T4182] team0: Port device team_slave_0 added [ 63.685449][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.692500][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.719534][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.733285][ T4181] team0: Port device team_slave_0 added [ 63.741542][ T4181] team0: Port device team_slave_1 added [ 63.756247][ T4182] team0: Port device team_slave_1 added [ 63.796963][ T4196] device hsr_slave_0 entered promiscuous mode [ 63.803892][ T4196] device hsr_slave_1 entered promiscuous mode [ 63.831666][ T4187] device hsr_slave_0 entered promiscuous mode [ 63.838470][ T4187] device hsr_slave_1 entered promiscuous mode [ 63.845407][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.853451][ T4187] Cannot create hsr debugfs directory [ 63.866041][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.873830][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.900019][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.921687][ T4190] device hsr_slave_0 entered promiscuous mode [ 63.928430][ T4190] device hsr_slave_1 entered promiscuous mode [ 63.935704][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.943398][ T4190] Cannot create hsr debugfs directory [ 63.957408][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.964527][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.990616][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.002732][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.010071][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.036131][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.067284][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.074701][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.100911][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.150612][ T2238] Bluetooth: hci1: command 0x0409 tx timeout [ 64.157395][ T2238] Bluetooth: hci2: command 0x0409 tx timeout [ 64.193879][ T4182] device hsr_slave_0 entered promiscuous mode [ 64.200829][ T4182] device hsr_slave_1 entered promiscuous mode [ 64.207364][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.215539][ T4182] Cannot create hsr debugfs directory [ 64.229801][ T4185] Bluetooth: hci0: command 0x0409 tx timeout [ 64.235870][ T4185] Bluetooth: hci3: command 0x0409 tx timeout [ 64.235959][ T2238] Bluetooth: hci4: command 0x0409 tx timeout [ 64.284997][ T4181] device hsr_slave_0 entered promiscuous mode [ 64.292319][ T4181] device hsr_slave_1 entered promiscuous mode [ 64.298971][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.306611][ T4181] Cannot create hsr debugfs directory [ 64.532247][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.544239][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.556989][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.575311][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.604334][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.623441][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.647119][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.656203][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.707261][ T4182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.727959][ T4182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.757724][ T4182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.779220][ T4182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.816699][ T4181] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.831096][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.852783][ T4181] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.870443][ T4181] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.881503][ T4181] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.894450][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.904610][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.938988][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.965367][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.974504][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.983906][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.991141][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.000055][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.010420][ T4196] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.023736][ T4196] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.035166][ T4196] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.046675][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.057307][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.066410][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.073541][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.092863][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.103085][ T4196] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.137036][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.168827][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.181692][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.192974][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.202947][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.211724][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.221205][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.243839][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.255633][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.265046][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.278318][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.291573][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.301496][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.311823][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.320614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.328902][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.335976][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.353697][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.363176][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.372111][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.380869][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.387931][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.406650][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.423366][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.432621][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.442553][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.451672][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.460232][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.470693][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.485077][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.496093][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.504681][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.511784][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.521129][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.530775][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.544262][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.565894][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.576528][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.589159][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.596308][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.606479][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.615972][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.630819][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.656635][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.665528][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.673668][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.683037][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.692435][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.701964][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.712390][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.721174][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.729707][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.738296][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.747529][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.762298][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.782284][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.797402][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.809838][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.823690][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.838827][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.848744][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.858814][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.867959][ T4224] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.875187][ T4224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.884053][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.892710][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.901787][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.911101][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.919415][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.928567][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.937035][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.945213][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.958597][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.988847][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.007825][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.019919][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.027411][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.042366][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.052682][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.059818][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.068847][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.079108][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.096287][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.124930][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.144455][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.162787][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.195477][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.202709][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.212805][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.221789][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.230794][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.237851][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.239939][ T4239] Bluetooth: hci2: command 0x041b tx timeout [ 66.245730][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.259399][ T4239] Bluetooth: hci1: command 0x041b tx timeout [ 66.260991][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.274562][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.285592][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.294306][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.302897][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.309982][ T1107] Bluetooth: hci3: command 0x041b tx timeout [ 66.310680][ T4239] Bluetooth: hci4: command 0x041b tx timeout [ 66.322659][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.322693][ T4239] Bluetooth: hci0: command 0x041b tx timeout [ 66.357490][ T4181] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.368998][ T4181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.391526][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.403142][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.413703][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.422948][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.431979][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.440707][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.448892][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.456698][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.464475][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.473651][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.483010][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.492688][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.502067][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.511958][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.527445][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.548383][ T4196] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.567190][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.600036][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.615264][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.624154][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.635065][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.643369][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.651100][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.658505][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.667487][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.702625][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.716558][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.746743][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.768196][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.778131][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.786780][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.815644][ T4187] device veth0_vlan entered promiscuous mode [ 66.839309][ T4190] device veth0_vlan entered promiscuous mode [ 66.846850][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.855076][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.865415][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.874224][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.883352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.891461][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.908578][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.919741][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.934599][ T4187] device veth1_vlan entered promiscuous mode [ 66.945617][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.956110][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.972829][ T4190] device veth1_vlan entered promiscuous mode [ 67.006656][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.036922][ T4187] device veth0_macvtap entered promiscuous mode [ 67.052355][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.066919][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.077821][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.085932][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.095350][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.104034][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.113689][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.122652][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.133273][ T4182] device veth0_vlan entered promiscuous mode [ 67.150338][ T4187] device veth1_macvtap entered promiscuous mode [ 67.157943][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.166218][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.175225][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.187727][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.204759][ T4190] device veth0_macvtap entered promiscuous mode [ 67.222279][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.236193][ T4182] device veth1_vlan entered promiscuous mode [ 67.243612][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.257752][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.268184][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.284136][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.301603][ T4190] device veth1_macvtap entered promiscuous mode [ 67.335671][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.363935][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.373485][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.383482][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.392978][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.402157][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.411645][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.426765][ T4182] device veth0_macvtap entered promiscuous mode [ 67.435505][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.444068][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.453042][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.465569][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.474087][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.484275][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.495601][ T4182] device veth1_macvtap entered promiscuous mode [ 67.504349][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.517641][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.532534][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.544089][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.553521][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.563211][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.572166][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.593169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.602681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.613858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.623061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.632668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.643702][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.654648][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.666207][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.687558][ T4181] device veth0_vlan entered promiscuous mode [ 67.701677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.711223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.720216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.728422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.737346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.745705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.763559][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.772502][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.781630][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.790607][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.815054][ T4181] device veth1_vlan entered promiscuous mode [ 67.824933][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.843490][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.853948][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.864692][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.877005][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.900411][ T4196] device veth0_vlan entered promiscuous mode [ 67.910133][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.918848][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.931305][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.939653][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.947940][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.955984][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.970976][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.981769][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.992020][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.002924][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.014329][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.048786][ T4196] device veth1_vlan entered promiscuous mode [ 68.071698][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.082202][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.093607][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.108406][ T4182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.117576][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.126684][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.135639][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.245008][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.253568][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.262502][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.277322][ T4181] device veth0_macvtap entered promiscuous mode [ 68.299378][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.308707][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.312035][ T4196] device veth0_macvtap entered promiscuous mode [ 68.320246][ T4239] Bluetooth: hci1: command 0x040f tx timeout [ 68.330364][ T4239] Bluetooth: hci2: command 0x040f tx timeout [ 68.337250][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.348115][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.358299][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.366963][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.380626][ T4181] device veth1_macvtap entered promiscuous mode [ 68.390634][ T4253] Bluetooth: hci0: command 0x040f tx timeout [ 68.400729][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.408692][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.418710][ T4253] Bluetooth: hci4: command 0x040f tx timeout [ 68.426879][ T4196] device veth1_macvtap entered promiscuous mode [ 68.433474][ T4253] Bluetooth: hci3: command 0x040f tx timeout [ 68.437203][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.461593][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.484773][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.501722][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.528167][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.532350][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.547300][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.549856][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.564731][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.575433][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.585523][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.596216][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.607531][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.619275][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.631230][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.641254][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.652042][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.662104][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.672880][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.683009][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.693691][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.705013][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.726423][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.734844][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.744580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.753679][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.762547][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.774836][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.785802][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.796302][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.807060][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.817153][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.827638][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.840124][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.856749][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.865302][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.882670][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.883360][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.898721][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.919802][ T4181] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.921973][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.928635][ T4181] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.928706][ T4181] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.952038][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.961427][ T4181] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.992557][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.003900][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.017032][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.027799][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.039009][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.049883][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.062400][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.073177][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.084847][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.094487][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.102742][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.112867][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.124915][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.144886][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.160070][ T4196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.168797][ T4196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.199525][ T4196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.215190][ T4196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.238563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.364896][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.387720][ T4303] loop2: detected capacity change from 0 to 1024 [ 69.409999][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.456236][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.507004][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.516573][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.552000][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.560876][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.575929][ T4307] loop0: detected capacity change from 0 to 128 [ 69.668505][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.669317][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.684588][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.695344][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.703683][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.705339][ T4303] ======================================================= [ 69.705339][ T4303] WARNING: The mand mount option has been deprecated and [ 69.705339][ T4303] and is ignored by this kernel. Remove the mand [ 69.705339][ T4303] option from the mount to silence this warning. [ 69.705339][ T4303] ======================================================= [ 69.761475][ T4307] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 69.770270][ T4307] System zones: 1-3, 19-19, 35-36 [ 69.797334][ T4307] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 69.813837][ T4314] loop1: detected capacity change from 0 to 1024 [ 69.845303][ T4307] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 69.856548][ T4303] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.3: Invalid block bitmap block 0 in block_group 0 [ 69.903047][ T4314] EXT4-fs (loop1): Ignoring removed bh option [ 69.912351][ T4303] Quota error (device loop2): write_blk: dquota write failed [ 69.961300][ T4314] EXT4-fs (loop1): inline encryption not supported [ 69.967628][ T4303] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 70.019001][ T4303] EXT4-fs error (device loop2): ext4_acquire_dquot:6207: comm syz.2.3: Failed to acquire dquot type 0 [ 70.033005][ T4314] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 2: comm syz.1.7: lblock 2 mapped to illegal pblock 2 (length 1) [ 70.058604][ T4303] EXT4-fs error (device loop2): ext4_free_blocks:6223: comm syz.2.3: Freeing blocks not in datazone - block = 0, count = 4096 [ 70.093580][ T4303] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.3: Invalid inode bitmap blk 0 in block_group 0 [ 70.132980][ T9] Quota error (device loop2): remove_tree: Getting block too big (0 >= 8) [ 70.145044][ T26] audit: type=1326 audit(1755535351.788:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4321 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde85703be9 code=0x7ffc0000 [ 70.169948][ T4314] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 70.178250][ T4303] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 70.189915][ T4314] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 48: comm syz.1.7: lblock 0 mapped to illegal pblock 48 (length 1) [ 70.204298][ T9] EXT4-fs error (device loop2): ext4_release_dquot:6243: comm kworker/u4:0: Failed to release dquot type 0 [ 70.206270][ T26] audit: type=1326 audit(1755535351.838:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4321 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde85703be9 code=0x7ffc0000 [ 70.238270][ T4303] EXT4-fs (loop2): 1 orphan inode deleted [ 70.244105][ T4314] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 70.257781][ T4303] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 70.270586][ T4314] EXT4-fs error (device loop1): ext4_acquire_dquot:6207: comm syz.1.7: Failed to acquire dquot type 0 [ 70.329265][ T4314] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 70.370861][ T26] audit: type=1326 audit(1755535351.898:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4321 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fde85703be9 code=0x7ffc0000 [ 70.370903][ T26] audit: type=1326 audit(1755535351.898:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4321 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde85703be9 code=0x7ffc0000 [ 70.370936][ T26] audit: type=1326 audit(1755535351.898:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4321 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde85703be9 code=0x7ffc0000 [ 70.400410][ T4253] Bluetooth: hci2: command 0x0419 tx timeout [ 70.401125][ T4253] Bluetooth: hci1: command 0x0419 tx timeout [ 70.402330][ T4303] syz.2.3 (4303) used greatest stack depth: 20840 bytes left [ 70.403575][ T4314] EXT4-fs error (device loop1): ext4_evict_inode:282: inode #11: comm syz.1.7: mark_inode_dirty error [ 70.409093][ T4314] EXT4-fs warning (device loop1): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 70.409170][ T4314] EXT4-fs (loop1): 1 orphan inode deleted [ 70.409205][ T4314] EXT4-fs (loop1): mounted filesystem without journal. Opts: resuid=0x0000000000000000,noblock_validity,bh,max_batch_time=0x00000000000008c9,grpquota,inlinecrypt,,errors=continue. Quota mode: writeback. [ 70.421260][ T9] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 70.422244][ T9] EXT4-fs error (device loop1): ext4_release_dquot:6243: comm kworker/u4:0: Failed to release dquot type 0 [ 70.453063][ T4314] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 70.480462][ T4253] Bluetooth: hci3: command 0x0419 tx timeout [ 70.480538][ T4253] Bluetooth: hci4: command 0x0419 tx timeout [ 70.480595][ T4253] Bluetooth: hci0: command 0x0419 tx timeout [ 70.556176][ T4338] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11'. [ 71.085021][ T4351] syz.0.14 uses obsolete (PF_INET,SOCK_PACKET) [ 71.114707][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.114866][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.483197][ T4374] loop4: detected capacity change from 0 to 512 [ 71.546719][ T4374] EXT4-fs (loop4): error: journal path ./bus is not a block device [ 71.651456][ T4388] netlink: 40 bytes leftover after parsing attributes in process `syz.0.27'. [ 72.021779][ T4401] [ 72.024155][ T4401] ====================================================== [ 72.031180][ T4401] WARNING: possible circular locking dependency detected [ 72.038209][ T4401] 5.15.189-syzkaller #0 Not tainted [ 72.043407][ T4401] ------------------------------------------------------ [ 72.050419][ T4401] syz.4.32/4401 is trying to acquire lock: [ 72.056224][ T4401] ffff888063659450 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 72.067680][ T4401] [ 72.067680][ T4401] but task is already holding lock: [ 72.075059][ T4401] ffff888063658120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530 [ 72.084056][ T4401] [ 72.084056][ T4401] which lock already depends on the new lock. [ 72.084056][ T4401] [ 72.094463][ T4401] [ 72.094463][ T4401] the existing dependency chain (in reverse order) is: [ 72.103474][ T4401] [ 72.103474][ T4401] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 72.111215][ T4401] lock_sock_nested+0x44/0x100 [ 72.116506][ T4401] smc_listen_out+0x109/0x3d0 [ 72.121700][ T4401] process_one_work+0x863/0x1000 [ 72.127165][ T4401] worker_thread+0xaa8/0x12a0 [ 72.132376][ T4401] kthread+0x436/0x520 [ 72.136962][ T4401] ret_from_fork+0x1f/0x30 [ 72.141900][ T4401] [ 72.141900][ T4401] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 72.152062][ T4401] __lock_acquire+0x2c33/0x7c60 [ 72.157433][ T4401] lock_acquire+0x197/0x3f0 [ 72.162463][ T4401] __flush_work+0xdd/0x1b0 [ 72.167400][ T4401] __cancel_work_timer+0x3ac/0x520 [ 72.173022][ T4401] smc_clcsock_release+0x5c/0xe0 [ 72.178478][ T4401] __smc_release+0x398/0x500 [ 72.183584][ T4401] smc_close_non_accepted+0xd1/0x1f0 [ 72.189477][ T4401] smc_close_active+0x9d3/0xd90 [ 72.194855][ T4401] __smc_release+0x9a/0x500 [ 72.199873][ T4401] smc_release+0x2ca/0x530 [ 72.204820][ T4401] sock_close+0xd5/0x240 [ 72.209582][ T4401] __fput+0x234/0x930 [ 72.214082][ T4401] task_work_run+0x125/0x1a0 [ 72.219209][ T4401] exit_to_user_mode_loop+0x10f/0x130 [ 72.225095][ T4401] exit_to_user_mode_prepare+0xb1/0x140 [ 72.231158][ T4401] syscall_exit_to_user_mode+0x16/0x40 [ 72.237135][ T4401] do_syscall_64+0x58/0xa0 [ 72.242070][ T4401] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 72.248488][ T4401] [ 72.248488][ T4401] other info that might help us debug this: [ 72.248488][ T4401] [ 72.258792][ T4401] Possible unsafe locking scenario: [ 72.258792][ T4401] [ 72.266237][ T4401] CPU0 CPU1 [ 72.271592][ T4401] ---- ---- [ 72.276950][ T4401] lock(sk_lock-AF_SMC/1); [ 72.281459][ T4401] lock((work_completion)(&new_smc->smc_listen_work)); [ 72.290910][ T4401] lock(sk_lock-AF_SMC/1); [ 72.297935][ T4401] lock((work_completion)(&new_smc->smc_listen_work)); [ 72.304868][ T4401] [ 72.304868][ T4401] *** DEADLOCK *** [ 72.304868][ T4401] [ 72.313001][ T4401] 2 locks held by syz.4.32/4401: [ 72.317942][ T4401] #0: ffff888073068810 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 72.328294][ T4401] #1: ffff888063658120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530 [ 72.337713][ T4401] [ 72.337713][ T4401] stack backtrace: [ 72.343603][ T4401] CPU: 0 PID: 4401 Comm: syz.4.32 Not tainted 5.15.189-syzkaller #0 [ 72.351588][ T4401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 72.361654][ T4401] Call Trace: [ 72.364934][ T4401] [ 72.367883][ T4401] dump_stack_lvl+0x168/0x230 [ 72.372568][ T4401] ? load_image+0x3b0/0x3b0 [ 72.377072][ T4401] ? show_regs_print_info+0x20/0x20 [ 72.382269][ T4401] ? print_circular_bug+0x12b/0x1a0 [ 72.387471][ T4401] check_noncircular+0x274/0x310 [ 72.392416][ T4401] ? add_chain_block+0x940/0x940 [ 72.397350][ T4401] ? lockdep_lock+0xdc/0x1e0 [ 72.401942][ T4401] ? rcu_lock_release+0x5/0x20 [ 72.406706][ T4401] ? __kernel_text_address+0x9a/0x100 [ 72.412074][ T4401] ? mark_lock+0x94/0x320 [ 72.416403][ T4401] __lock_acquire+0x2c33/0x7c60 [ 72.421255][ T4401] ? deref_stack_reg+0xd0/0x120 [ 72.426106][ T4401] ? hlock_conflict+0x59/0x1f0 [ 72.430869][ T4401] ? check_path+0x40/0x40 [ 72.435193][ T4401] ? verify_lock_unused+0x140/0x140 [ 72.440385][ T4401] ? mark_lock+0x94/0x320 [ 72.444716][ T4401] ? __lock_acquire+0x13ad/0x7c60 [ 72.449737][ T4401] ? add_chain_block+0x940/0x940 [ 72.454678][ T4401] lock_acquire+0x197/0x3f0 [ 72.459186][ T4401] ? __flush_work+0xc1/0x1b0 [ 72.463775][ T4401] ? read_lock_is_recursive+0x10/0x10 [ 72.469152][ T4401] __flush_work+0xdd/0x1b0 [ 72.473564][ T4401] ? __flush_work+0xc1/0x1b0 [ 72.478146][ T4401] ? flush_work+0x20/0x20 [ 72.482468][ T4401] ? try_to_grab_pending+0xf3/0x7e0 [ 72.487662][ T4401] ? lockdep_hardirqs_off+0x70/0x100 [ 72.492948][ T4401] ? mark_lock+0x94/0x320 [ 72.497281][ T4401] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 72.503263][ T4401] ? lock_chain_count+0x20/0x20 [ 72.508111][ T4401] ? print_unlock_imbalance_bug+0x160/0x160 [ 72.514001][ T4401] ? __cancel_work_timer+0x331/0x520 [ 72.519282][ T4401] __cancel_work_timer+0x3ac/0x520 [ 72.524395][ T4401] ? cancel_work_sync+0x20/0x20 [ 72.529247][ T4401] ? __local_bh_enable_ip+0x12a/0x1b0 [ 72.534617][ T4401] ? lockdep_hardirqs_on+0x94/0x140 [ 72.539900][ T4401] ? __local_bh_enable_ip+0x12a/0x1b0 [ 72.545278][ T4401] ? _local_bh_enable+0xa0/0xa0 [ 72.550126][ T4401] smc_clcsock_release+0x5c/0xe0 [ 72.555064][ T4401] __smc_release+0x398/0x500 [ 72.559651][ T4401] smc_close_non_accepted+0xd1/0x1f0 [ 72.564937][ T4401] smc_close_active+0x9d3/0xd90 [ 72.569789][ T4401] __smc_release+0x9a/0x500 [ 72.574295][ T4401] smc_release+0x2ca/0x530 [ 72.578714][ T4401] sock_close+0xd5/0x240 [ 72.582961][ T4401] ? sock_mmap+0x90/0x90 [ 72.587205][ T4401] __fput+0x234/0x930 [ 72.591191][ T4401] task_work_run+0x125/0x1a0 [ 72.595781][ T4401] exit_to_user_mode_loop+0x10f/0x130 [ 72.601159][ T4401] exit_to_user_mode_prepare+0xb1/0x140 [ 72.606707][ T4401] syscall_exit_to_user_mode+0x16/0x40 [ 72.612163][ T4401] do_syscall_64+0x58/0xa0 [ 72.616581][ T4401] ? clear_bhb_loop+0x30/0x80 [ 72.621253][ T4401] ? clear_bhb_loop+0x30/0x80 [ 72.625930][ T4401] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 72.631840][ T4401] RIP: 0033:0x7fbd0baa2be9 [ 72.636254][ T4401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.655854][ T4401] RSP: 002b:00007ffc78b84cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 72.664274][ T4401] RAX: 0000000000000000 RBX: 00000000000118cf RCX: 00007fbd0baa2be9 [ 72.672241][ T4401] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 72.680223][ T4401] RBP: 00007fbd0bccbda0 R08: 0000000000000001 R09: 0000000a78b84fef [ 72.688194][ T4401] R10: 0000001b31420000 R11: 0000000000000246 R12: 00007fbd0bcc9fac [ 72.696162][ T4401] R13: 00007fbd0bcc9fa0 R14: ffffffffffffffff R15: 00007ffc78b84e10 [ 72.704134][ T4401] [ 81.356520][ T23] cfg80211: failed to load regulatory.db