last executing test programs: 1.392411442s ago: executing program 2 (id=3): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x14, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62c06000000a6dd78bb3fb7dbfc", 0x0, 0xa1b, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) 1.265136345s ago: executing program 2 (id=7): syz_usb_connect$uac1(0x5, 0x7b, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x0, 0x20, 0x40, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x13}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x301, 0x6, 0x1, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x8, 0x0, 0x6, {0x7, 0x25, 0x1, 0xc, 0x24, 0xf9c7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x9, 0x7, 0x3f, {0x7, 0x25, 0x1, 0xc, 0x9, 0xeb2}}}}}}}}]}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000640)='X', 0x1f, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0xfa, 0x7, 0xb, 0x2, 0x5, 0xe, 0x4, 0x6, 0x7, 0x7, 0x7, 0x5, 0x81, 0x3f}, 0xe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x10001, 0x4) shutdown(r0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x3f, 0x0}, 0x7f}], 0x414, 0x0, 0x0) 859.137651ms ago: executing program 1 (id=2): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) 657.871224ms ago: executing program 1 (id=8): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8, 0x4, 0x1}, @IFLA_GTP_FD0={0x8, 0x1, @udp6=r0}, @IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0xfc}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 521.978304ms ago: executing program 1 (id=9): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, 0x0) 278.252626ms ago: executing program 1 (id=10): mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netfilter\x00') lseek(r0, 0x1, 0x1) getdents64(r0, 0xffffffffffffffff, 0x43) 102.005729ms ago: executing program 1 (id=11): r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) 101.801041ms ago: executing program 0 (id=1): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) sendmsg$NFT_BATCH(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a3100000000090001007379"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r3 = dup(r1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="00006003aaaaaaaaaa42aaaaaaaaaa020800450000203ffd0000032f"], 0x32) 0s ago: executing program 1 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/usb_gadget/naa.5001405000000001\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/nexus\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='naa.5001405000000002\n\x00', 0x16) unlinkat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1\x00', 0x200) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.26' (ED25519) to the list of known hosts. [ 75.942325][ T5598] cgroup: Unknown subsys name 'net' [ 76.069167][ T5598] cgroup: Unknown subsys name 'cpuset' [ 76.072971][ T5598] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.615393][ T5598] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.176058][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.180196][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.182662][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.216507][ T5618] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.217026][ T5618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.218235][ T5618] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.218356][ T5618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.219152][ T5618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.222849][ T5611] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.231812][ T5611] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.249859][ T5618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.275027][ T5618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.278169][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.278811][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.279682][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.280263][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.281299][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.281866][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.282204][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.284197][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.285614][ T5626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.287021][ T5626] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.288241][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.316068][ T5626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.325997][ T5626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.384951][ T4927] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 80.400153][ T4927] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 80.408107][ T4927] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 80.412779][ T4927] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 80.429529][ T4927] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 82.294933][ T4927] Bluetooth: hci0: command tx timeout [ 82.295644][ T5626] Bluetooth: hci1: command tx timeout [ 82.373957][ T5626] Bluetooth: hci4: command tx timeout [ 82.390246][ T4927] Bluetooth: hci3: command tx timeout [ 82.453281][ T4927] Bluetooth: hci2: command tx timeout [ 82.453480][ T5626] Bluetooth: hci5: command tx timeout [ 82.880294][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.880521][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.880654][ T5617] bridge_slave_0: entered allmulticast mode [ 82.882787][ T5617] bridge_slave_0: entered promiscuous mode [ 82.949869][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.950059][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.950478][ T5617] bridge_slave_1: entered allmulticast mode [ 82.952395][ T5617] bridge_slave_1: entered promiscuous mode [ 82.956563][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.956670][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.956802][ T5627] bridge_slave_0: entered allmulticast mode [ 82.959481][ T5627] bridge_slave_0: entered promiscuous mode [ 83.047077][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.047234][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.047342][ T5627] bridge_slave_1: entered allmulticast mode [ 83.049117][ T5627] bridge_slave_1: entered promiscuous mode [ 83.123110][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.124156][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.124272][ T5610] bridge_slave_0: entered allmulticast mode [ 83.125807][ T5610] bridge_slave_0: entered promiscuous mode [ 83.166043][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.180797][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.181575][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.182007][ T5610] bridge_slave_1: entered allmulticast mode [ 83.186319][ T5610] bridge_slave_1: entered promiscuous mode [ 83.229210][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.232319][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.311554][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.324021][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.324196][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.324535][ T5622] bridge_slave_0: entered allmulticast mode [ 83.326256][ T5622] bridge_slave_0: entered promiscuous mode [ 83.390425][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.418700][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.418852][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.418999][ T5622] bridge_slave_1: entered allmulticast mode [ 83.421417][ T5622] bridge_slave_1: entered promiscuous mode [ 83.458396][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.458504][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.458639][ T5615] bridge_slave_0: entered allmulticast mode [ 83.460629][ T5615] bridge_slave_0: entered promiscuous mode [ 83.465114][ T5617] team0: Port device team_slave_0 added [ 83.469255][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.505769][ T5610] team0: Port device team_slave_0 added [ 83.507987][ T5627] team0: Port device team_slave_0 added [ 83.524767][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.524946][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.525070][ T5613] bridge_slave_0: entered allmulticast mode [ 83.527521][ T5613] bridge_slave_0: entered promiscuous mode [ 83.531636][ T5617] team0: Port device team_slave_1 added [ 83.531844][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.531940][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.532057][ T5615] bridge_slave_1: entered allmulticast mode [ 83.535139][ T5615] bridge_slave_1: entered promiscuous mode [ 83.558073][ T5610] team0: Port device team_slave_1 added [ 83.560835][ T5627] team0: Port device team_slave_1 added [ 83.592971][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.593311][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.594424][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.595092][ T5613] bridge_slave_1: entered allmulticast mode [ 83.597985][ T5613] bridge_slave_1: entered promiscuous mode [ 83.675358][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.690110][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.690128][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.690157][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.696957][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.714275][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.714294][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.714322][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.716998][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.717012][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.717040][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.755003][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.755024][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.755053][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.759736][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.777194][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.777215][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.777244][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.789325][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.789344][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.789380][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.813891][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.862670][ T5615] team0: Port device team_slave_0 added [ 83.887824][ T5622] team0: Port device team_slave_0 added [ 83.891951][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.915456][ T5615] team0: Port device team_slave_1 added [ 83.920282][ T5622] team0: Port device team_slave_1 added [ 84.034652][ T5613] team0: Port device team_slave_0 added [ 84.095606][ T5617] hsr_slave_0: entered promiscuous mode [ 84.096562][ T5617] hsr_slave_1: entered promiscuous mode [ 84.099613][ T5613] team0: Port device team_slave_1 added [ 84.108334][ T5627] hsr_slave_0: entered promiscuous mode [ 84.109516][ T5627] hsr_slave_1: entered promiscuous mode [ 84.110385][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 84.110465][ T5627] Cannot create hsr debugfs directory [ 84.112047][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.112062][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.112091][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.134006][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.134027][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.134056][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.236069][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.236088][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.236114][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.253866][ T5610] hsr_slave_0: entered promiscuous mode [ 84.254978][ T5610] hsr_slave_1: entered promiscuous mode [ 84.255729][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 84.255750][ T5610] Cannot create hsr debugfs directory [ 84.256692][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.256707][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.256736][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.277051][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.277073][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.277102][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.331846][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.331868][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.331897][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.373614][ T4927] Bluetooth: hci0: command tx timeout [ 84.373855][ T5626] Bluetooth: hci1: command tx timeout [ 84.454752][ T4927] Bluetooth: hci4: command tx timeout [ 84.454859][ T5626] Bluetooth: hci3: command tx timeout [ 84.533436][ T5626] Bluetooth: hci5: command tx timeout [ 84.533476][ T5626] Bluetooth: hci2: command tx timeout [ 84.598118][ T5622] hsr_slave_0: entered promiscuous mode [ 84.599013][ T5622] hsr_slave_1: entered promiscuous mode [ 84.599617][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 84.599640][ T5622] Cannot create hsr debugfs directory [ 84.607713][ T5615] hsr_slave_0: entered promiscuous mode [ 84.608865][ T5615] hsr_slave_1: entered promiscuous mode [ 84.609634][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 84.609654][ T5615] Cannot create hsr debugfs directory [ 84.669287][ T5613] hsr_slave_0: entered promiscuous mode [ 84.670168][ T5613] hsr_slave_1: entered promiscuous mode [ 84.670767][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 84.670788][ T5613] Cannot create hsr debugfs directory [ 85.322067][ T5617] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.344981][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.348370][ T5617] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.365105][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.367040][ T5617] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.380243][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.382128][ T5617] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.394253][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.478753][ T5610] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.487158][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.497203][ T5610] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.508412][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.519546][ T5610] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.531436][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.555872][ T5610] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.560728][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.648191][ T5615] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.656373][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.675139][ T5615] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.678341][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.691329][ T5615] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.707403][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.721998][ T5615] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.727218][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.800456][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.802738][ T5622] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.819881][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.845026][ T5622] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.850615][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.851618][ T5622] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.856746][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.875744][ T5622] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.889114][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.947024][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.006174][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.006489][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.019165][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.026956][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.027064][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.059213][ T5613] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 86.062959][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.065391][ T5613] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 86.075039][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.092822][ T5613] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 86.102881][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.107516][ T5613] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 86.116348][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.201642][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.231903][ T25] cfg80211: failed to load regulatory.db [ 86.272352][ T1015] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.272460][ T1015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.298508][ T5627] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.301782][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.307915][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.308023][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.333109][ T5627] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.336093][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.357984][ T5627] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.361146][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.383864][ T5627] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.387409][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.428572][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.453924][ T5626] Bluetooth: hci1: command tx timeout [ 86.453942][ T4927] Bluetooth: hci0: command tx timeout [ 86.533315][ T5626] Bluetooth: hci3: command tx timeout [ 86.533354][ T5626] Bluetooth: hci4: command tx timeout [ 86.586939][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.614465][ T4927] Bluetooth: hci5: command tx timeout [ 86.614503][ T4927] Bluetooth: hci2: command tx timeout [ 86.638081][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.662461][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.662569][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.721652][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.721770][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.782470][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.838851][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.838968][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.872097][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.872231][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.920351][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.078462][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.143927][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.144086][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.187241][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.189084][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.189193][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.361006][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.431724][ T1015] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.431839][ T1015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.506214][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.506327][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.662423][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.005204][ T5617] veth0_vlan: entered promiscuous mode [ 88.057010][ T5617] veth1_vlan: entered promiscuous mode [ 88.112414][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.240530][ T5617] veth0_macvtap: entered promiscuous mode [ 88.281489][ T5617] veth1_macvtap: entered promiscuous mode [ 88.425803][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.459508][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.489725][ T5610] veth0_vlan: entered promiscuous mode [ 88.509337][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.533308][ T5626] Bluetooth: hci1: command tx timeout [ 88.533439][ T5626] Bluetooth: hci0: command tx timeout [ 88.584705][ T1015] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.586829][ T151] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.614683][ T5626] Bluetooth: hci4: command tx timeout [ 88.614721][ T5626] Bluetooth: hci3: command tx timeout [ 88.619936][ T5610] veth1_vlan: entered promiscuous mode [ 88.623327][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.624463][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.693722][ T4927] Bluetooth: hci2: command tx timeout [ 88.693760][ T4927] Bluetooth: hci5: command tx timeout [ 88.808657][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.808684][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.840732][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.964067][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.999000][ T5622] veth0_vlan: entered promiscuous mode [ 89.008922][ T5610] veth0_macvtap: entered promiscuous mode [ 89.037430][ T5610] veth1_macvtap: entered promiscuous mode [ 89.051437][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.051459][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.091007][ T5622] veth1_vlan: entered promiscuous mode [ 89.165596][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.232321][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.321943][ T5617] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.418518][ T5622] veth0_macvtap: entered promiscuous mode [ 89.488276][ T5622] veth1_macvtap: entered promiscuous mode [ 89.551753][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.660717][ T3383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.660743][ T3383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.690680][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.730196][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.784368][ T3383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.784404][ T3383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.845726][ T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.864140][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.864512][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.864923][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.868759][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.899692][ T5613] veth0_vlan: entered promiscuous mode [ 89.915498][ T5613] veth1_vlan: entered promiscuous mode [ 89.962459][ T5615] veth0_vlan: entered promiscuous mode [ 89.964663][ T151] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.965755][ T151] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.965801][ T151] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.965844][ T151] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.011450][ T5627] veth0_vlan: entered promiscuous mode [ 90.036586][ T5615] veth1_vlan: entered promiscuous mode [ 90.122277][ T5627] veth1_vlan: entered promiscuous mode [ 90.197244][ T5613] veth0_macvtap: entered promiscuous mode [ 90.210474][ T5613] veth1_macvtap: entered promiscuous mode [ 90.216702][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.216722][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.402018][ T5615] veth0_macvtap: entered promiscuous mode [ 90.406544][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.406564][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.437025][ T5615] veth1_macvtap: entered promiscuous mode [ 90.491034][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.528709][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 90.528800][ T25] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 90.541825][ T5627] veth0_macvtap: entered promiscuous mode [ 90.559365][ T25] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 90.559408][ T25] usb 3-1: can't read configurations, error -71 [ 90.577530][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.581801][ T5627] veth1_macvtap: entered promiscuous mode [ 90.636133][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.667465][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.711649][ T5861] program syz.1.11 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.711904][ T5861] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 90.723302][ T151] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.725578][ T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.731130][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.778701][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.889356][ T5865] [ 90.891805][ T5865] ====================================================== [ 90.898914][ T5865] WARNING: possible circular locking dependency detected [ 90.906153][ T5865] syzkaller #0 Not tainted [ 90.910620][ T5865] ------------------------------------------------------ [ 90.917729][ T5865] syz.1.12/5865 is trying to acquire lock: [ 90.923655][ T5865] ffffffff8f93b868 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_rmdir+0x5f0/0x950 [ 90.933014][ T5865] [ 90.933014][ T5865] but task is already holding lock: [ 90.940556][ T5865] ffff888078588140 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: vfs_rmdir+0xf8/0x6a0 [ 90.950270][ T5865] [ 90.950270][ T5865] which lock already depends on the new lock. [ 90.950270][ T5865] [ 90.960675][ T5865] [ 90.960675][ T5865] the existing dependency chain (in reverse order) is: [ 90.969963][ T5865] [ 90.969963][ T5865] -> #2 (&sb->s_type->i_mutex_key#24){++++}-{4:4}: [ 90.978669][ T5865] down_write+0x96/0x200 [ 90.983449][ T5865] configfs_depend_item_unlocked+0x153/0x420 [ 90.989973][ T5865] usbg_make_tpg+0x1e0/0x550 [ 90.995210][ T5865] target_fabric_make_tpg+0xa8/0x6d0 [ 91.001036][ T5865] configfs_mkdir+0x4f6/0x9e0 [ 91.006247][ T5865] vfs_mkdir+0x40c/0x620 [ 91.011015][ T5865] filename_mkdirat+0x285/0x510 [ 91.016487][ T5865] __se_sys_mkdirat+0x35/0x150 [ 91.021773][ T5865] do_syscall_64+0x166/0x520 [ 91.026917][ T5865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.033330][ T5865] [ 91.033330][ T5865] -> #1 (tpg_instances_lock){+.+.}-{4:4}: [ 91.041229][ T5865] __mutex_lock+0x19d/0x1550 [ 91.046342][ T5865] usbg_make_tpg+0xf8/0x550 [ 91.051358][ T5865] target_fabric_make_tpg+0xa8/0x6d0 [ 91.057188][ T5865] configfs_mkdir+0x4f6/0x9e0 [ 91.062425][ T5865] vfs_mkdir+0x40c/0x620 [ 91.067214][ T5865] filename_mkdirat+0x285/0x510 [ 91.072602][ T5865] __se_sys_mkdirat+0x35/0x150 [ 91.077897][ T5865] do_syscall_64+0x166/0x520 [ 91.083034][ T5865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.089440][ T5865] [ 91.089440][ T5865] -> #0 (&subsys->su_mutex){+.+.}-{4:4}: [ 91.097368][ T5865] __lock_acquire+0x164c/0x2de0 [ 91.102738][ T5865] lock_acquire+0x115/0x350 [ 91.107784][ T5865] __mutex_lock+0x19d/0x1550 [ 91.112911][ T5865] configfs_rmdir+0x5f0/0x950 [ 91.118104][ T5865] vfs_rmdir+0x3e6/0x6a0 [ 91.122859][ T5865] filename_rmdir+0x292/0x520 [ 91.128055][ T5865] __se_sys_unlinkat+0x71/0x1a0 [ 91.133617][ T5865] do_syscall_64+0x166/0x520 [ 91.138805][ T5865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.145295][ T5865] [ 91.145295][ T5865] other info that might help us debug this: [ 91.145295][ T5865] [ 91.155595][ T5865] Chain exists of: [ 91.155595][ T5865] &subsys->su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#24 [ 91.155595][ T5865] [ 91.170157][ T5865] Possible unsafe locking scenario: [ 91.170157][ T5865] [ 91.177597][ T5865] CPU0 CPU1 [ 91.182945][ T5865] ---- ---- [ 91.188301][ T5865] lock(&sb->s_type->i_mutex_key#24); [ 91.193763][ T5865] lock(tpg_instances_lock); [ 91.201092][ T5865] lock(&sb->s_type->i_mutex_key#24); [ 91.209088][ T5865] lock(&subsys->su_mutex); [ 91.214188][ T5865] [ 91.214188][ T5865] *** DEADLOCK *** [ 91.214188][ T5865] [ 91.222574][ T5865] locks held by syz.1.12/5865: 3, last CPU#0: [ 91.228795][ T5865] #0: ffff88801db5a460 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 91.238052][ T5865] #1: ffff8880785cd440 (&sb->s_type->i_mutex_key#8/1){+.+.}-{4:4}, at: filename_rmdir+0x1cd/0x520 [ 91.248884][ T5865] #2: ffff888078588140 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: vfs_rmdir+0xf8/0x6a0 [ 91.259126][ T5865] [ 91.259126][ T5865] stack backtrace: [ 91.265280][ T5865] CPU: 0 UID: 0 PID: 5865 Comm: syz.1.12 Not tainted syzkaller #0 PREEMPT(full) [ 91.274387][ T5865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 91.284548][ T5865] Call Trace: [ 91.287924][ T5865] [ 91.290856][ T5865] dump_stack_lvl+0xe8/0x150 [ 91.295453][ T5865] print_circular_bug+0x2e2/0x300 [ 91.300483][ T5865] check_noncircular+0x12f/0x150 [ 91.305863][ T5865] __lock_acquire+0x164c/0x2de0 [ 91.310770][ T5865] ? srso_alias_return_thunk+0x5/0xfbef5 [ 91.316446][ T5865] ? set_normalized_timespec64+0xf0/0x1a0 [ 91.322241][ T5865] ? srso_alias_return_thunk+0x5/0xfbef5 [ 91.327913][ T5865] ? __lock_acquire+0x747/0x2de0 [ 91.332868][ T5865] lock_acquire+0x115/0x350 [ 91.337388][ T5865] ? configfs_rmdir+0x5f0/0x950 [ 91.342247][ T5865] ? srso_alias_return_thunk+0x5/0xfbef5 [ 91.348312][ T5865] __mutex_lock+0x19d/0x1550 [ 91.353025][ T5865] ? configfs_rmdir+0x5f0/0x950 [ 91.358440][ T5865] ? reacquire_held_locks+0x117/0x1a0 [ 91.363814][ T5865] ? configfs_rmdir+0x5f0/0x950 [ 91.368907][ T5865] ? __pfx___mutex_lock+0x10/0x10 [ 91.373943][ T5865] ? srso_alias_return_thunk+0x5/0xfbef5 [ 91.379569][ T5865] ? _raw_spin_unlock+0x28/0x50 [ 91.384415][ T5865] ? fast_dput+0x481/0x690 [ 91.388832][ T5865] configfs_rmdir+0x5f0/0x950 [ 91.393515][ T5865] vfs_rmdir+0x3e6/0x6a0 [ 91.397761][ T5865] ? srso_alias_return_thunk+0x5/0xfbef5 [ 91.403387][ T5865] filename_rmdir+0x292/0x520 [ 91.408063][ T5865] ? __pfx_filename_rmdir+0x10/0x10 [ 91.413346][ T5865] ? srso_alias_return_thunk+0x5/0xfbef5 [ 91.419005][ T5865] ? do_getname+0x151/0x250 [ 91.423522][ T5865] __se_sys_unlinkat+0x71/0x1a0 [ 91.428543][ T5865] do_syscall_64+0x166/0x520 [ 91.433167][ T5865] ? trace_irq_disable+0x3b/0x140 [ 91.438707][ T5865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.444768][ T5865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.450739][ T5865] RIP: 0033:0x7f83fab9e159 [ 91.455147][ T5865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.475145][ T5865] RSP: 002b:00007f83fba49028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 91.483571][ T5865] RAX: ffffffffffffffda RBX: 00007f83fae25fa0 RCX: 00007f83fab9e159 [ 91.491531][ T5865] RDX: 0000000000000200 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 91.499589][ T5865] RBP: 00007f83fac3506b R08: 0000000000000000 R09: 0000000000000000 [ 91.507574][ T5865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.515544][ T5865] R13: 00007f83fae26038 R14: 00007f83fae25fa0 R15: 00007fff12b13588 [ 91.523525][ T5865] [ 91.560411][ T5613] ieee80211 phy9: Selected rate control algorithm 'minstrel_ht' [ 91.615177][ T5615] ieee80211 phy10: Selected rate control algorithm 'minstrel_ht' [ 91.622485][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.622506][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.672879][ T5627] ieee80211 phy11: Selected rate control algorithm 'minstrel_ht' [ 91.687664][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.687687][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.711026][ T5613] ieee80211 phy12: Selected rate control algorithm 'minstrel_ht' [ 91.720855][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.720875][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.749547][ T5615] ieee80211 phy13: Selected rate control algorithm 'minstrel_ht' [ 91.773995][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.774017][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.810871][ T5627] ieee80211 phy14: Selected rate control algorithm 'minstrel_ht' [ 91.821524][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.821543][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.824479][ T151] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.824523][ T151] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.824561][ T151] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.824597][ T151] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.824634][ T151] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.824670][ T151] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.824709][ T151] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.824745][ T151] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.824782][ T151] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.824818][ T151] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.859643][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.859664][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50