last executing test programs: 21.683370723s ago: executing program 1 (id=119): ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unshare(0x28000600) r3 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r3, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r4 = syz_open_dev$mtd(0x0, 0x48a99fbe, 0x10b241) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000002, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$MEMGETREGIONCOUNT(r4, 0x80044d07, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 14.950716046s ago: executing program 1 (id=131): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x8ccbf000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r6, 0x2007ffb) sendfile(r6, r6, 0x0, 0x1000000201005) open(0x0, 0x14927e, 0x0) 14.82174644s ago: executing program 4 (id=135): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_usb_connect$cdc_ncm(0x6, 0x88, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x2, 0x1, 0x0, 0x1c0, 0x62, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xc, 0x5, 0x6, 0xc0}, {0x6, 0x24, 0x1a, 0x914f, 0x14}, [@mdlm={0x15, 0x24, 0x12, 0xfc00}, @obex={0x5, 0x24, 0x15, 0xe}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0x0, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xc, 0x11, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x4, 0x6, 0x4}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0x3, 0x9, 0xa2, 0x8}, 0x5, &(0x7f0000000380)={0x5, 0xf, 0x5}, 0x4, [{0x0, 0x0}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x44b}}, {0xbc, &(0x7f0000000540)=ANY=[@ANYBLOB="bc031b1ae24f3243ebafb154640498292b1b2210de5bfa1b6ca64d5ca5318b17cab6f4124fe1defda39c4e60cac26cb3271afc71d39a11d5899113bf0aa4254a43b04268af1080c6954664bd4e7ac80b776a4fce26577458ff072cb8e6b09543d617e0433610c803e47a839ec5f5c7dd54269e80aa1e038509034e21db614a3c6aa3282833c6779d7f265bdfc8a2c06210b96b16c28aed2e3903c2bba735f6357bfe5fbd09cc23637740368afa79e39f7cc7f62993fb53adbfe72f54"]}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000400)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xffee, 0xffe0}}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) close(r0) 12.712842851s ago: executing program 1 (id=139): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0b000000070000000200000222ff00000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000000)) 10.880836106s ago: executing program 3 (id=142): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$l2tp6(0xa, 0x2, 0x73) syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) 10.522784514s ago: executing program 4 (id=145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x18, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0xfffffffb, @private2}, 0x1c) 9.967990307s ago: executing program 2 (id=146): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x5fbd, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 9.778768262s ago: executing program 3 (id=148): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) memfd_create(&(0x7f0000000000)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\x1c\xe4\xd8\xb58\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Nc\xdd\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\x00\b\x00\x00X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31\xb0\x87O\xc3\xa3AW\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]~\xfc1\xe5w\"\xa3\x8d\xe7\xd4x\xb3\xfa(\xc9\xc2bb\xb1\xa8\xe1\xc2\xec\xca\x7f\xe1\x1e\xb9\xd4\x80-6L\x91\x9b\xad\x85`\xf2+\xfbN+\x0e\xa6\xc4M\xda\xfc\xa1gZ)STB\xd1\xd1\xf1', 0x8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r1, &(0x7f00000044c0), 0x4000000000001c0, 0x0) 9.479739059s ago: executing program 2 (id=149): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x400000, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4049004) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000480)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb3f81f3785bd05e0a0c909964ed3937884dce4139595f6ead8e26", 0x40}], 0x1}, 0x4) 8.773968677s ago: executing program 1 (id=151): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x8ccbf000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) sendfile(r6, r6, 0x0, 0x1000000201005) open(0x0, 0x14927e, 0x0) 7.291625173s ago: executing program 1 (id=152): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x2040, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) sendmsg$can_bcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 7.040460669s ago: executing program 0 (id=153): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) socket$netlink(0x10, 0x3, 0x8000000004) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x3800008, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setxattr$incfs_metadata(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xe, 0x6) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x05\x00\x00\x00\x00\x00H\x00\x00\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_debug_messages', 0x42, 0x0) write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000000280)=ANY=[@ANYBLOB='2'], 0x32) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, 0x0) read$FUSE(r4, &(0x7f00000021c0)={0x2020}, 0x2020) 6.762792425s ago: executing program 4 (id=154): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000001cc0), 0x800, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x80044d06, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) socket(0x2, 0x3, 0x6) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 6.653661038s ago: executing program 2 (id=155): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_usb_connect$cdc_ncm(0x6, 0x88, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x2, 0x1, 0x0, 0x1c0, 0x62, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xc, 0x5, 0x6, 0xc0}, {0x6, 0x24, 0x1a, 0x914f, 0x14}, [@mdlm={0x15, 0x24, 0x12, 0xfc00}, @obex={0x5, 0x24, 0x15, 0xe}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0x0, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xc, 0x11, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x4, 0x6, 0x4}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0x3, 0x9, 0xa2, 0x8}, 0x5, &(0x7f0000000380)={0x5, 0xf, 0x5}, 0x4, [{0x0, 0x0}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x44b}}, {0xbc, &(0x7f0000000540)=ANY=[@ANYBLOB="bc031b1ae24f3243ebafb154640498292b1b2210de5bfa1b6ca64d5ca5318b17cab6f4124fe1defda39c4e60cac26cb3271afc71d39a11d5899113bf0aa4254a43b04268af1080c6954664bd4e7ac80b776a4fce26577458ff072cb8e6b09543d617e0433610c803e47a839ec5f5c7dd54269e80aa1e038509034e21db614a3c6aa3282833c6779d7f265bdfc8a2c06210b96b16c28aed2e3903c2bba735f6357bfe5fbd09cc23637740368afa79e39f7cc7f62993fb53adbfe72f54"]}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000400)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xffee, 0xffe0}}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) close(r0) 6.57507825s ago: executing program 3 (id=156): setuid(0xee00) r0 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x20e}, &(0x7f00000001c0), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 6.319075346s ago: executing program 3 (id=157): socket$kcm(0x21, 0x2, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r2, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 5.160050804s ago: executing program 0 (id=158): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x40000000000035d, 0x20000084) recvmmsg(r4, &(0x7f00000000c0), 0x191d1f8, 0x10042, 0x0) setresuid(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x11, 0x4, 0x4, 0x1000ff, 0x4}, 0x48) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @remote}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r6) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0) 4.700436866s ago: executing program 4 (id=159): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x5fbd, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 4.002777352s ago: executing program 1 (id=160): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2c, r7, 0x1, 0x0, 0x25dfdbff, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r5, 0x400455c8, 0x1) shmctl$IPC_RMID(r1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x8, 0x7f, {r2}, {0xee00}, 0x1f80000000000, 0x2}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000190001002bbd7000fedbdf251c80"], 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 3.893084625s ago: executing program 3 (id=161): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200), 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = fsopen(&(0x7f0000000040)='debugfs\x00', 0x1) r4 = fcntl$dupfd(r3, 0x406, r3) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 3.234446321s ago: executing program 4 (id=162): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf8, 0x34424752, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}}) set_mempolicy(0x3, 0x0, 0x6) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r2, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 2.650752115s ago: executing program 0 (id=163): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getrlimit(0xb, &(0x7f0000000040)) r0 = getpid() setrlimit(0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getrlimit(0xb, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r3, &(0x7f0000000080)=@file={0x1}, 0x6e) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) read$usbmon(r2, 0x0, 0x0) 2.184029106s ago: executing program 3 (id=164): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x18, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0xfffffffb, @private2}, 0x1c) 2.076620089s ago: executing program 2 (id=165): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 1.847954545s ago: executing program 0 (id=166): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x7, 0x2, 0x2, 0xf, @tick=0xa, {0x2, 0xa}, {0x4, 0x5}, @result={0x7, 0x8}}], 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, 0x0, 0x81}, 0x94) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r4, 0x0, 0x0, 0x80800) 1.193139201s ago: executing program 2 (id=167): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0xb081}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4040844) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x20c89, 0x4cc44}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c800}, 0x20000000) 363.038561ms ago: executing program 2 (id=168): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) socket$netlink(0x10, 0x3, 0x8000000004) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x3800008, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setxattr$incfs_metadata(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xe, 0x6) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x05\x00\x00\x00\x00\x00H\x00\x00\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_debug_messages', 0x42, 0x0) write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000000280)=ANY=[@ANYBLOB='2'], 0x32) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, 0x0) read$FUSE(r4, &(0x7f00000021c0)={0x2020}, 0x2020) 311.365582ms ago: executing program 0 (id=169): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x400) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95e, 0x1, 0x8, 0x7ffffffc, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x800400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0x9, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x2, 0xd8a1, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x796a, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xe89, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0x6, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x7ff, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6.213379ms ago: executing program 0 (id=170): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000c00)='1', 0x1) mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000000f00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') 0s ago: executing program 4 (id=171): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x2) lchown(&(0x7f0000000000)='./file0\x00', 0xee00, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x5cec, 0x2, 0x3432564e, 0x7, 0x0, [{0x0, 0xfffffffd}, {0xf, 0xc}, {0xb, 0x6c4}, {0x1, 0x3}, {0x9, 0xd9c}, {0x6, 0x6}, {0x282}, {0x2, 0x8cb}], 0x8, 0x8, 0x1, 0x0, 0x4}}) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x20000, 0x0) ioctl$COMEDI_CMDTEST(r4, 0x8050640a, &(0x7f0000000200)={0xc, 0x40, 0x80, 0x388a, 0x100, 0x1, 0xfffffeb6, 0xe, 0xfffffef9, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r6, 0x29, 0x6, &(0x7f0000000140)=""/17, &(0x7f0000000080)=0x11) write(r5, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={0x0, 0x0, 0x35, 0x0, 0x9}, 0x28) bind$unix(r5, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.81' (ED25519) to the list of known hosts. syzkaller login: [ 64.229984][ T4172] cgroup: Unknown subsys name 'net' [ 64.401019][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.942309][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.919402][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 67.932861][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 68.037891][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 68.048078][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 68.060317][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 68.101403][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.109358][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.117863][ T4189] device bridge_slave_0 entered promiscuous mode [ 68.142503][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.150640][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.159109][ T4189] device bridge_slave_1 entered promiscuous mode [ 68.172714][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.180146][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.188653][ T4186] device bridge_slave_0 entered promiscuous mode [ 68.203471][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.211223][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.219605][ T4186] device bridge_slave_1 entered promiscuous mode [ 68.259505][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.277196][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.305518][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.335877][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.378193][ T4189] team0: Port device team_slave_0 added [ 68.406796][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.413998][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.422958][ T4193] device bridge_slave_0 entered promiscuous mode [ 68.439497][ T4189] team0: Port device team_slave_1 added [ 68.460029][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.467406][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.475797][ T4187] device bridge_slave_0 entered promiscuous mode [ 68.483236][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.490540][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.498637][ T4193] device bridge_slave_1 entered promiscuous mode [ 68.508548][ T4186] team0: Port device team_slave_0 added [ 68.514694][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.521786][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.529914][ T4188] device bridge_slave_0 entered promiscuous mode [ 68.544663][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.551882][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.560174][ T4187] device bridge_slave_1 entered promiscuous mode [ 68.575282][ T4186] team0: Port device team_slave_1 added [ 68.588354][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.595603][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.603919][ T4188] device bridge_slave_1 entered promiscuous mode [ 68.613398][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.620643][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.646996][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.676354][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.692508][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.700003][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.726514][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.752325][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.775472][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.787078][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.797240][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.804332][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.830434][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.849975][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.857566][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.883803][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.897437][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.950050][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.985429][ T4189] device hsr_slave_0 entered promiscuous mode [ 68.992343][ T4189] device hsr_slave_1 entered promiscuous mode [ 69.001963][ T4193] team0: Port device team_slave_0 added [ 69.023406][ T4187] team0: Port device team_slave_0 added [ 69.032273][ T4188] team0: Port device team_slave_0 added [ 69.048099][ T4193] team0: Port device team_slave_1 added [ 69.065884][ T4187] team0: Port device team_slave_1 added [ 69.076446][ T4186] device hsr_slave_0 entered promiscuous mode [ 69.083948][ T4186] device hsr_slave_1 entered promiscuous mode [ 69.091234][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.099155][ T4186] Cannot create hsr debugfs directory [ 69.106252][ T4188] team0: Port device team_slave_1 added [ 69.152841][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.160233][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.186408][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.203550][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.210871][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.238538][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.251420][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.258700][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.284895][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.309010][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.316184][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.343177][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.355968][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.362966][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.389168][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.420996][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.428121][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.454546][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.533824][ T4193] device hsr_slave_0 entered promiscuous mode [ 69.541295][ T4193] device hsr_slave_1 entered promiscuous mode [ 69.548366][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.556347][ T4193] Cannot create hsr debugfs directory [ 69.571954][ T4188] device hsr_slave_0 entered promiscuous mode [ 69.577161][ T4196] Bluetooth: hci2: command 0x0409 tx timeout [ 69.578708][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 69.590926][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 69.598572][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 69.604928][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 69.611396][ T4188] device hsr_slave_1 entered promiscuous mode [ 69.618772][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.626665][ T4188] Cannot create hsr debugfs directory [ 69.642888][ T4187] device hsr_slave_0 entered promiscuous mode [ 69.650253][ T4187] device hsr_slave_1 entered promiscuous mode [ 69.657250][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.665616][ T4187] Cannot create hsr debugfs directory [ 69.968150][ T4189] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.980760][ T4189] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.005768][ T4189] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.016478][ T4189] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.083328][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.108245][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.119518][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.133763][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.173715][ T4193] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.186280][ T4193] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.201252][ T4193] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.226855][ T4193] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.329062][ T4188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.369725][ T4188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.379778][ T4188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.392739][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.405162][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.418856][ T4188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.461643][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.470704][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.480775][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.500379][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.508906][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.519410][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.527776][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.538666][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.555967][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.566098][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.580181][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.589550][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.599325][ T1268] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.606731][ T1268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.620769][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.630112][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.639862][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.650563][ T1268] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.657926][ T1268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.669299][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.681040][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.689651][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.696854][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.708434][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.720101][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.756513][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.767747][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.779336][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.788147][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.795389][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.803755][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.820367][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.829766][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.865189][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.875586][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.885044][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.892975][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.901978][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.917405][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.930776][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.940157][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.950382][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.960497][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.970588][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.979463][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.988427][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.995561][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.017007][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.027966][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.036681][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.046571][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.057402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.067303][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.076834][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.088034][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.108410][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.118270][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.127459][ T1268] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.134597][ T1268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.157461][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.172491][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.182538][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.191977][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.202632][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.213751][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.249905][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.259662][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.295419][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.316495][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.338758][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.353445][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.369977][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.389479][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.408369][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.417689][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.426535][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.447271][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.463929][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.478869][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.493424][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.504133][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.510731][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.518057][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.529135][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.544864][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.565352][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.582880][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.596863][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.621517][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.630625][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.642268][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.654221][ T4231] Bluetooth: hci3: command 0x041b tx timeout [ 71.661384][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.665193][ T4231] Bluetooth: hci4: command 0x041b tx timeout [ 71.668617][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.692840][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.694489][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 71.707754][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.722787][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.729951][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.735430][ T4231] Bluetooth: hci2: command 0x041b tx timeout [ 71.746778][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 71.788127][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.816751][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.828482][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.838418][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.847864][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.854998][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.863701][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.874424][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.883462][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.892082][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.900882][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.909073][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.917459][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.927340][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.940815][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.948011][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.962057][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.971362][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.981508][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.993109][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.002143][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.010911][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.019255][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.031995][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.047179][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.073589][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.089905][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.123691][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.132705][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.142607][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.154481][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.163510][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.173833][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.182908][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.191166][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.199620][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.209774][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.220366][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.236202][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.263704][ T4189] device veth0_vlan entered promiscuous mode [ 72.305828][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.317720][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.327178][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.337407][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.347369][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.356988][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.366047][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.375945][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.384965][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.393291][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.403114][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.412051][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.420102][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.438252][ T4189] device veth1_vlan entered promiscuous mode [ 72.476865][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.501070][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.510804][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.526825][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.541929][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.552927][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.561209][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.570036][ T4186] device veth0_vlan entered promiscuous mode [ 72.599893][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.610755][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.623549][ T4186] device veth1_vlan entered promiscuous mode [ 72.657959][ T4189] device veth0_macvtap entered promiscuous mode [ 72.675897][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.684974][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.693280][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.703702][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.713874][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.722370][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.731562][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.751517][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.762783][ T4189] device veth1_macvtap entered promiscuous mode [ 72.790998][ T4186] device veth0_macvtap entered promiscuous mode [ 72.800192][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.813079][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.829735][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.841865][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.851828][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.868790][ T4193] device veth0_vlan entered promiscuous mode [ 72.879337][ T4186] device veth1_macvtap entered promiscuous mode [ 72.900033][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.909610][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.919731][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.928462][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.938457][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.948837][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.958044][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.973359][ T4193] device veth1_vlan entered promiscuous mode [ 72.992163][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.006498][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.021578][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.033188][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.046892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.075148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.083486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.105081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.120965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.131084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.143738][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.155573][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.167608][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.203575][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.213173][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.230991][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.240697][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.250332][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.259736][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.280292][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.290233][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.299723][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.310574][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.322503][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.335434][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.366560][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.375234][ T4193] device veth0_macvtap entered promiscuous mode [ 73.390450][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.400841][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.408783][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.466738][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.478320][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.488880][ T4193] device veth1_macvtap entered promiscuous mode [ 73.522628][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.537461][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.548169][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.560211][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.572669][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.607406][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.617921][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.629979][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.647116][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.657154][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.670535][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.681488][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.691557][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.703248][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.715491][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.742454][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.751685][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 73.758210][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 73.768551][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.777861][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.787907][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.814970][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 73.821302][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 73.828051][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 73.834713][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.843516][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.854027][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.863560][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.885709][ T4188] device veth0_vlan entered promiscuous mode [ 73.917345][ T4188] device veth1_vlan entered promiscuous mode [ 73.926819][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.935737][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.945764][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.953909][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.962562][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.973237][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.982029][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.992839][ T4187] device veth0_vlan entered promiscuous mode [ 74.030238][ T4246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.041634][ T4246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.074462][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.083633][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.100021][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.111623][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.137446][ T4187] device veth1_vlan entered promiscuous mode [ 74.158652][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.173587][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.183250][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.208700][ T4188] device veth0_macvtap entered promiscuous mode [ 74.216617][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.232028][ T4188] device veth1_macvtap entered promiscuous mode [ 74.242505][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.275741][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.288117][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.298416][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.306680][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.316406][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.325075][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.374559][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.383585][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.423067][ T4187] device veth0_macvtap entered promiscuous mode [ 74.433498][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.443564][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.455257][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.469895][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.481805][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.493237][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.501631][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.512318][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.524022][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.535192][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.546203][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.560597][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.581244][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.591019][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.602378][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.612614][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.624824][ T4187] device veth1_macvtap entered promiscuous mode [ 74.632886][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.645305][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.655877][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.666632][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.678559][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.689454][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.702395][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.733853][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.763593][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.774714][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.789208][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.801221][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.811994][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.824284][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.835330][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.849640][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.867316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.879556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.891185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.910163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.921713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.947820][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.963669][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.972975][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.988286][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.116336][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.158785][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.221295][ T4277] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.436834][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.843041][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.877533][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.926317][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.950902][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 75.990819][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.022454][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.086052][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.173813][ T4276] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 76.362570][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.415763][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.491699][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.501030][ T4267] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 76.554338][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 76.565647][ T4236] Bluetooth: hci1: command 0x0419 tx timeout [ 76.574319][ T4236] Bluetooth: hci2: command 0x0419 tx timeout [ 76.580991][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.601229][ T4236] Bluetooth: hci0: command 0x0419 tx timeout [ 76.601789][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.632231][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.878408][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.902819][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.945275][ T4267] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.970952][ T4293] 0x000000000007-0x000000020000 : "" [ 76.994838][ T4293] ftl_cs: FTL header corrupt! [ 77.001035][ T4267] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 77.179255][ T4267] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 77.271503][ T4267] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 77.329192][ T4267] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.846458][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.994126][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 78.014127][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 78.024107][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 78.034109][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 78.044093][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 78.054108][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 78.064103][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 78.074103][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 78.084311][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 78.094099][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 79.656560][ T4267] cxacru 2-1:1.0: send of cm 0x90 failed (-104) [ 79.716452][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.716924][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.730144][ T4301] cxacru 2-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 79.760298][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.776732][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.795295][ T4267] usb 2-1: USB disconnect, device number 2 [ 79.811560][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.822365][ T4301] cxacru 2-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 79.835629][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.026277][ T4246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.051053][ T4246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.088265][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.407578][ T4310] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 81.464637][ T4232] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.714694][ T4232] usb 3-1: Using ep0 maxpacket: 32 [ 81.915623][ T4232] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 81.933174][ T4232] usb 3-1: config 0 has no interface number 0 [ 81.946270][ T4232] usb 3-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 81.957241][ T4232] usb 3-1: config 0 interface 1 has no altsetting 0 [ 82.060738][ T4321] loop1: detected capacity change from 0 to 512 [ 82.154950][ T4232] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 82.171830][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.207281][ T4232] usb 3-1: Product: syz [ 82.211524][ T4232] usb 3-1: Manufacturer: syz [ 82.225223][ T4232] usb 3-1: SerialNumber: syz [ 82.232295][ T4321] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.11: iget: bad i_size value: 38620345925642 [ 82.243240][ T4232] usb 3-1: config 0 descriptor?? [ 82.309360][ T4321] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.11: couldn't read orphan inode 15 (err -117) [ 82.362201][ T4321] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 82.504379][ T7] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 82.564576][ T4232] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 82.567117][ T4326] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.11: bg 0: block 5: invalid block bitmap [ 82.627561][ T4326] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 472 with error 28 [ 82.631460][ T4232] cx231xx 3-1:0.1: Failed to read PCB config [ 82.653534][ T4232] cx231xx: probe of 3-1:0.1 failed with error -71 [ 82.804166][ T4326] EXT4-fs (loop1): This should not happen!! Data will be lost [ 82.804166][ T4326] [ 82.838426][ T4232] usb 3-1: USB disconnect, device number 2 [ 82.839902][ T4326] EXT4-fs (loop1): Total free blocks count 0 [ 82.871214][ T4326] EXT4-fs (loop1): Free/Dirty block details [ 82.886163][ T4326] EXT4-fs (loop1): free_blocks=0 [ 82.900103][ T4326] EXT4-fs (loop1): dirty_blocks=476 [ 82.907410][ T4326] EXT4-fs (loop1): Block reservation details [ 83.606772][ T4326] EXT4-fs (loop1): i_reserved_data_blocks=476 [ 83.646787][ T4321] EXT4-fs (loop1): shut down requested (0) [ 83.674157][ T4232] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 83.778496][ T4333] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 84.644478][ T7] usb 1-1: device descriptor read/all, error -71 [ 85.072478][ T4339] loop2: detected capacity change from 0 to 256 [ 85.664939][ T4339] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 85.890104][ T4348] loop3: detected capacity change from 0 to 1024 [ 85.938800][ T4350] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 86.123226][ T4348] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,block_validity,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 86.777466][ T4383] xt_hashlimit: size too large, truncated to 1048576 [ 87.255704][ T1111] cfg80211: failed to load regulatory.db [ 87.814067][ C0] sched: RT throttling activated [ 89.917159][ T4452] binder: BINDER_SET_CONTEXT_MGR already set [ 89.923629][ T4452] binder: 4450:4452 ioctl 4018620d 200000004a80 returned -16 [ 89.994273][ T4236] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 90.160502][ T4465] netlink: 24 bytes leftover after parsing attributes in process `syz.3.31'. [ 90.199554][ T4465] netlink: 212 bytes leftover after parsing attributes in process `syz.3.31'. [ 90.234545][ T4236] usb 3-1: Using ep0 maxpacket: 32 [ 90.244527][ T4465] netlink: 32 bytes leftover after parsing attributes in process `syz.3.31'. [ 90.897768][ T4236] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 91.054350][ T4236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.123043][ T4492] Zero length message leads to an empty skb [ 91.131674][ T4236] usb 3-1: Product: syz [ 91.155781][ T4236] usb 3-1: Manufacturer: syz [ 91.160429][ T4236] usb 3-1: SerialNumber: syz [ 91.425893][ T4236] usb 3-1: config 0 descriptor?? [ 91.494413][ T4236] usb 3-1: can't set config #0, error -71 [ 91.573587][ T4236] usb 3-1: USB disconnect, device number 4 [ 91.739734][ T4492] crypto_alloc_aead failed rc=-4 [ 91.934262][ T4196] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.004289][ T4196] usb 4-1: Using ep0 maxpacket: 16 [ 94.284472][ T4196] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 94.364216][ T4196] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.835625][ T4196] usb 4-1: config 0 descriptor?? [ 96.226541][ T4196] usb 4-1: can't set config #0, error -71 [ 96.238897][ T4196] usb 4-1: USB disconnect, device number 2 [ 96.330770][ T4543] syz.3.48 uses obsolete (PF_INET,SOCK_PACKET) [ 97.507944][ T4553] netlink: 'syz.4.50': attribute type 1 has an invalid length. [ 98.170281][ T4559] configfs-gadget gadget: uvc: uvc_function_bind() [ 98.188301][ T4559] udc usbip-vudc.0: failed to start g1: -19 [ 101.628692][ T4586] ======================================================= [ 101.628692][ T4586] WARNING: The mand mount option has been deprecated and [ 101.628692][ T4586] and is ignored by this kernel. Remove the mand [ 101.628692][ T4586] option from the mount to silence this warning. [ 101.628692][ T4586] ======================================================= [ 101.676238][ T4586] NILFS (loop2): device size too small [ 101.828328][ T4586] jffs2: notice: (4586) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 102.427740][ T4600] tmpfs: Unknown parameter 'grpquota' [ 105.885039][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 105.893238][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 106.393529][ T4648] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 116.534244][ T21] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 116.980327][ T21] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.011165][ T21] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.065054][ T21] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 117.092734][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.444272][ T21] usb 1-1: usb_control_msg returned -32 [ 117.449910][ T21] usbtmc 1-1:16.0: can't read capabilities [ 120.788472][ T4196] usb 1-1: USB disconnect, device number 4 [ 124.130886][ T4821] loop4: detected capacity change from 0 to 512 [ 124.467840][ T4821] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.126: iget: bad i_size value: 38620345925642 [ 124.525454][ T4821] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.126: couldn't read orphan inode 15 (err -117) [ 124.710885][ T4821] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 125.424345][ T4317] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 125.940311][ T4418] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm kworker/u4:17: bg 0: block 5: invalid block bitmap [ 127.810992][ T4418] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 904 with error 28 [ 127.888804][ T4418] EXT4-fs (loop4): This should not happen!! Data will be lost [ 127.888804][ T4418] [ 127.905232][ T4418] EXT4-fs (loop4): Total free blocks count 0 [ 127.911717][ T4418] EXT4-fs (loop4): Free/Dirty block details [ 127.927767][ T4418] EXT4-fs (loop4): free_blocks=0 [ 127.933283][ T4418] EXT4-fs (loop4): dirty_blocks=904 [ 127.954924][ T4418] EXT4-fs (loop4): Block reservation details [ 127.961123][ T4418] EXT4-fs (loop4): i_reserved_data_blocks=904 [ 128.251540][ T4851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.137'. [ 128.339795][ T4847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.137'. [ 128.348892][ T4847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.137'. [ 128.359100][ T4847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.137'. [ 128.368065][ T4847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.137'. [ 130.013520][ T4879] No such timeout policy "syz1" [ 130.629694][ T4881] loop4: detected capacity change from 0 to 512 [ 131.089233][ T4881] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.145: iget: bad i_size value: 38620345925642 [ 131.774211][ T4881] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.145: couldn't read orphan inode 15 (err -117) [ 133.235697][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.242117][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.495011][ T4895] device syzkaller0 entered promiscuous mode [ 133.559368][ T4881] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 134.300228][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 134.307967][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 134.322453][ T4920] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 137.277952][ T4937] netlink: 40 bytes leftover after parsing attributes in process `syz.1.160'. [ 138.549199][ T4946] loop3: detected capacity change from 0 to 512 [ 139.139436][ T4948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.162'. [ 139.334825][ T4946] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.164: iget: bad i_size value: 38620345925642 [ 139.370622][ T4317] Bluetooth: hci5: command 0x1003 tx timeout [ 139.377148][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 139.399287][ T4946] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.164: couldn't read orphan inode 15 (err -117) [ 139.426334][ T4946] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 140.054278][ T4956] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 140.151912][ T4413] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 48 with error 28 [ 140.261078][ T4413] EXT4-fs (loop3): This should not happen!! Data will be lost [ 140.261078][ T4413] [ 140.295824][ T4413] EXT4-fs (loop3): Total free blocks count 0 [ 140.439579][ T4940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.162'. [ 140.448694][ T4940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.162'. [ 140.458573][ T4940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.162'. [ 140.467557][ T4940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.162'. [ 140.482756][ T4413] EXT4-fs (loop3): Free/Dirty block details [ 140.529842][ T4413] EXT4-fs (loop3): free_blocks=0 [ 140.537252][ T4413] EXT4-fs (loop3): dirty_blocks=48 [ 140.568638][ T4413] EXT4-fs (loop3): Block reservation details [ 140.575004][ T4413] EXT4-fs (loop3): i_reserved_data_blocks=48 [ 140.590008][ T4971] [ 140.592388][ T4971] ====================================================== [ 140.599434][ T4971] WARNING: possible circular locking dependency detected [ 140.606479][ T4971] syzkaller #0 Not tainted [ 140.610905][ T4971] ------------------------------------------------------ [ 140.617934][ T4971] syz.0.170/4971 is trying to acquire lock: [ 140.623844][ T4971] ffff888145e064c0 (&sb->s_type->i_mutex_key#24){++++}-{3:3}, at: configfs_depend_item_unlocked+0x14f/0x430 [ 140.635374][ T4971] [ 140.635374][ T4971] but task is already holding lock: [ 140.642759][ T4971] ffff888062e88920 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x144/0x580 [ 140.651825][ T4971] [ 140.651825][ T4971] which lock already depends on the new lock. [ 140.651825][ T4971] [ 140.662239][ T4971] [ 140.662239][ T4971] the existing dependency chain (in reverse order) is: [ 140.671262][ T4971] [ 140.671262][ T4971] -> #2 (&opts->dep_lock){+.+.}-{3:3}: [ 140.678921][ T4971] __mutex_lock_common+0x1e5/0x2400 [ 140.684677][ T4971] mutex_lock_nested+0x17/0x20 [ 140.689979][ T4971] tcm_set_name+0x26/0x90 [ 140.694854][ T4971] function_make+0x195/0x350 [ 140.699979][ T4971] configfs_mkdir+0x511/0x9e0 [ 140.705191][ T4971] vfs_mkdir+0x386/0x570 [ 140.709968][ T4971] do_mkdirat+0x1dd/0x5c0 [ 140.714867][ T4971] __x64_sys_mkdir+0x6a/0x80 [ 140.720001][ T4971] do_syscall_64+0x4c/0xa0 [ 140.725042][ T4971] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 140.731477][ T4971] [ 140.731477][ T4971] -> #1 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 140.739746][ T4971] __mutex_lock_common+0x1e5/0x2400 [ 140.745494][ T4971] mutex_lock_nested+0x17/0x20 [ 140.750797][ T4971] uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 140.757487][ T4971] configfs_symlink+0x5a4/0x13b0 [ 140.762969][ T4971] vfs_symlink+0x245/0x3d0 [ 140.767923][ T4971] do_symlinkat+0x1ab/0x6b0 [ 140.772986][ T4971] __x64_sys_symlink+0x7a/0x90 [ 140.778282][ T4971] do_syscall_64+0x4c/0xa0 [ 140.783236][ T4971] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 140.789667][ T4971] [ 140.789667][ T4971] -> #0 (&sb->s_type->i_mutex_key#24){++++}-{3:3}: [ 140.798475][ T4971] __lock_acquire+0x2c66/0x7b50 [ 140.803979][ T4971] lock_acquire+0x19e/0x400 [ 140.809041][ T4971] down_write+0x38/0x60 [ 140.813748][ T4971] configfs_depend_item_unlocked+0x14f/0x430 [ 140.820275][ T4971] usbg_make_tpg+0x1f3/0x580 [ 140.825406][ T4971] target_fabric_make_tpg+0xa0/0x6d0 [ 140.831235][ T4971] configfs_mkdir+0x511/0x9e0 [ 140.836455][ T4971] vfs_mkdir+0x386/0x570 [ 140.841240][ T4971] do_mkdirat+0x1dd/0x5c0 [ 140.846106][ T4971] __x64_sys_mkdir+0x6a/0x80 [ 140.851245][ T4971] do_syscall_64+0x4c/0xa0 [ 140.856284][ T4971] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 140.862722][ T4971] [ 140.862722][ T4971] other info that might help us debug this: [ 140.862722][ T4971] [ 140.872974][ T4971] Chain exists of: [ 140.872974][ T4971] &sb->s_type->i_mutex_key#24 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 140.872974][ T4971] [ 140.887704][ T4971] Possible unsafe locking scenario: [ 140.887704][ T4971] [ 140.895172][ T4971] CPU0 CPU1 [ 140.900578][ T4971] ---- ---- [ 140.905954][ T4971] lock(&opts->dep_lock); [ 140.910392][ T4971] lock(gadget_subsys.su_mutex); [ 140.917949][ T4971] lock(&opts->dep_lock); [ 140.924898][ T4971] lock(&sb->s_type->i_mutex_key#24); [ 140.930386][ T4971] [ 140.930386][ T4971] *** DEADLOCK *** [ 140.930386][ T4971] [ 140.938541][ T4971] 5 locks held by syz.0.170/4971: [ 140.943578][ T4971] #0: ffff888140bb2460 (sb_writers#15){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 140.953093][ T4971] #1: ffff888060ad5aa0 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450 [ 140.963910][ T4971] #2: ffffffff8cc23e70 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b5/0x9e0 [ 140.973675][ T4971] #3: ffffffff8cf21328 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf4/0x580 [ 140.983351][ T4971] #4: ffff888062e88920 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x144/0x580 [ 140.992864][ T4971] [ 140.992864][ T4971] stack backtrace: [ 140.998766][ T4971] CPU: 1 PID: 4971 Comm: syz.0.170 Not tainted syzkaller #0 [ 141.006064][ T4971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 141.016150][ T4971] Call Trace: [ 141.019451][ T4971] [ 141.022403][ T4971] dump_stack_lvl+0x188/0x250 [ 141.027104][ T4971] ? load_image+0x410/0x410 [ 141.031636][ T4971] ? show_regs_print_info+0x20/0x20 [ 141.036859][ T4971] ? print_circular_bug+0x12b/0x1a0 [ 141.042078][ T4971] check_noncircular+0x296/0x330 [ 141.047035][ T4971] ? look_up_lock_class+0x71/0x110 [ 141.052169][ T4971] ? add_chain_block+0x9b0/0x9b0 [ 141.057123][ T4971] ? lockdep_lock+0xf1/0x1f0 [ 141.061731][ T4971] ? mark_lock+0x94/0x320 [ 141.066106][ T4971] ? mark_lock+0x94/0x320 [ 141.070456][ T4971] ? _find_first_zero_bit+0xd1/0xf0 [ 141.075672][ T4971] __lock_acquire+0x2c66/0x7b50 [ 141.080554][ T4971] ? verify_lock_unused+0x140/0x140 [ 141.085778][ T4971] ? __mutex_trylock_common+0x15c/0x260 [ 141.091346][ T4971] ? rcu_lock_release+0x20/0x20 [ 141.096218][ T4971] lock_acquire+0x19e/0x400 [ 141.100748][ T4971] ? configfs_depend_item_unlocked+0x14f/0x430 [ 141.106921][ T4971] ? __might_sleep+0xf0/0xf0 [ 141.111527][ T4971] ? __kasan_kmalloc+0xc6/0xe0 [ 141.116321][ T4971] ? read_lock_is_recursive+0x10/0x10 [ 141.121714][ T4971] ? mutex_lock_io_nested+0x60/0x60 [ 141.126937][ T4971] down_write+0x38/0x60 [ 141.131110][ T4971] ? configfs_depend_item_unlocked+0x14f/0x430 [ 141.137286][ T4971] configfs_depend_item_unlocked+0x14f/0x430 [ 141.143299][ T4971] usbg_make_tpg+0x1f3/0x580 [ 141.147916][ T4971] ? mutex_lock_io_nested+0x60/0x60 [ 141.153137][ T4971] ? usbg_drop_tport+0x20/0x20 [ 141.158044][ T4971] ? vscnprintf+0x80/0x80 [ 141.162406][ T4971] target_fabric_make_tpg+0xa0/0x6d0 [ 141.167764][ T4971] ? target_fabric_release_wwn+0xa0/0xa0 [ 141.173432][ T4971] configfs_mkdir+0x511/0x9e0 [ 141.178137][ T4971] vfs_mkdir+0x386/0x570 [ 141.182411][ T4971] do_mkdirat+0x1dd/0x5c0 [ 141.186768][ T4971] ? vfs_mkdir+0x570/0x570 [ 141.191208][ T4971] ? getname_flags+0x1f9/0x4f0 [ 141.196038][ T4971] __x64_sys_mkdir+0x6a/0x80 [ 141.200648][ T4971] do_syscall_64+0x4c/0xa0 [ 141.205085][ T4971] ? clear_bhb_loop+0x30/0x80 [ 141.209785][ T4971] ? clear_bhb_loop+0x30/0x80 [ 141.214487][ T4971] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 141.220425][ T4971] RIP: 0033:0x7f97eb97a0d9 [ 141.224863][ T4971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.244487][ T4971] RSP: 002b:00007f97e9bd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 141.253094][ T4971] RAX: ffffffffffffffda RBX: 00007f97ebc01fa0 RCX: 00007f97eb97a0d9 [ 141.261086][ T4971] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000600 [ 141.269071][ T4971] RBP: 00007f97eba11024 R08: 0000000000000000 R09: 0000000000000000 [ 141.277062][ T4971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.285049][ T4971] R13: 00007f97ebc02038 R14: 00007f97ebc01fa0 R15: 00007ffccf0e18b8 [ 141.293050][ T4971] [ 141.333818][ T4971] se_device not configured yet, cannot port link [ 141.414888][ T4233] Bluetooth: hci5: command 0x1001 tx timeout [ 141.422989][ T4201] Bluetooth: hci5: sending frame failed (-49) [ 143.177930][ T4301] cxacru 2-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 143.494224][ T4317] Bluetooth: hci5: command 0x1009 tx timeout