last executing test programs: 16.565560934s ago: executing program 1 (id=170): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0) write(r0, &(0x7f0000000a00)='t', 0x1) 15.897388001s ago: executing program 1 (id=172): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) socket(0x28, 0x5, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) accept4$unix(r1, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000000), &(0x7f0000000580)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4}, 0x14) syz_emit_ethernet(0x4a, &(0x7f0000000640)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @tcp={0x7, 0x6, "acdaea", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, {[], {{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x2, 0x0, 0x2}}}}}}}, 0x0) 14.758260309s ago: executing program 1 (id=175): r0 = syz_usb_connect(0x6, 0x371, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write(r0, 0x9, 0x32, &(0x7f0000000100)="e66374624e9c4cb17eaea87f902e576b49f6e3e8fdba6d923385c877b137a2f79ad7023f7eb632b0beb82d7b4c06d9cf037d") syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = fsopen(&(0x7f0000000140)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) socket$netlink(0x10, 0x3, 0x8000000004) openat$ttyS3(0xffffff9c, 0x0, 0x208801, 0x0) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f00000000c0)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0)='1', 0x1) 12.183184944s ago: executing program 3 (id=179): mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESDEC=0x0]) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x480c4) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0xffffff, 0x0, 0x0, 0x4}, 0x10) write(r1, &(0x7f0000000000)="240000001a00590214f9f407000904101f000000000000000002000008000400", 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x75, @remote}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x38) sendto$inet6(r3, 0x0, 0x0, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000200)=0x2, 0x4) close_range(r2, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) syz_emit_ethernet(0x26, &(0x7f00000003c0)=ANY=[], 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r4, &(0x7f00000001c0)=""/4068, 0xfe4) socket$nl_netfilter(0x10, 0x3, 0xc) 10.902893516s ago: executing program 4 (id=180): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x10040881) mkdirat(0xffffffffffffff9c, 0x0, 0x67) mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) mount$9p_rdma(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x10400, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r1]) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, r5, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_REG_RULES={0x30, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xe592}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x79}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xd}]}, 0x60}}, 0x80) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xcb}, 0x2d, 0x0) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, r6, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', '\xa9\x06\x00\x00\x00\b\x00\x00'}, 0x1d, r6) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) 9.033132883s ago: executing program 3 (id=183): unshare(0x62040000) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000004) openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x2c500, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80002, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r3, 0x5607, 0x4) ioctl$VT_ACTIVATE(r3, 0x5606, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f00000005c0)) 9.016608063s ago: executing program 1 (id=184): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x40000000000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1, 0x4}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) 8.794916669s ago: executing program 4 (id=187): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$can_bcm(0x1d, 0x2, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/mtrr\x00', 0x300002, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='/dev/loop0,65536\x00', 0x11) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./mnt\x00', 0x1ff) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000540)) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001400110500000000000000002b0000014e22000000000000000000000000000000000c0000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000400000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000840}, 0x8004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./mnt/test\x00', 0x42, 0x1ff) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0xfffffffffffffd03, 0xfa00, {0x1, &(0x7f0000000040), 0x2, 0x3}}, 0xfffffffffffffd71) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0xc06c4124, 0x0) mount$afs(0x0, &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='dyn']) openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/@cell/foo@sys\x00', 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) getpid() syz_open_pts(r4, 0x0) 8.686707621s ago: executing program 1 (id=188): openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) epoll_create1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff) fanotify_init(0x40, 0x101000) mount(0x0, &(0x7f0000000500)='dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x4800) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040f905ffff0001010203010902200001010080fa0904000002ff000000070581024000000705020240"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dev/ttyUSB0\x00', 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_aout(r1, &(0x7f0000000640)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r2, @ANYBLOB="6d4fd3bcb54e638b02387777d144eb0ea962255e2d60a690a3f20c2babf79c6a735b2abc34deba42cfc24010300d743f795e6e0a972f466dc12d1c0792f8ac4d877293d5b27797fb684d61d62eed8480f3c470500bec5693e2ad76978dadb3533a4921ee0b93641ca39d0b3f9de627ab9d966961db3dde03f0355a56ed1ba6865951b72f0c34686fc07d3587b489011ba8c504c89cae"], 0x20) r3 = io_uring_setup(0x2bc4, &(0x7f0000000100)={0x0, 0x1, 0x4, 0x3, 0x2c1, 0x0, r1}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f0000000080)=&(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000180)={'ipvlan0\x00', &(0x7f0000000140)=@ethtool_link_settings={0x1, 0x10000, 0x3, 0x40, 0x0, 0x5, 0x7, 0xc, 0x30, 0xe, [0x2, 0x1, 0x1ff, 0xec96, 0x5, 0xffffff7f, 0x6, 0x1]}}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000240)="98750f50aade73db0f0100008005f4ea", 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000000)="439e10b5498d94e3c3750f4f4afdc6b3", 0x10) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r7, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)="3261f2d3669e67923790a8724e333761335706f89764e3b3966d2e18fef819732f6208e307898257f312a8a4e4d5b398641d04fa6b7117ebcffd764f48", 0x3d}, {&(0x7f0000000440)="5c65f52a85590dbdc88246ab4bfc3ba322e044d5eb2c3d10d40dde83e315ca4961744d7f3290b8e0ef04dbff3f5e1dabe1838d306168e922e637419f349bac768ae603f545b59c53d2234f5cc5b26e6b825eca539e47ddcc5e68", 0x5a}, {&(0x7f0000000540)="4b9dea83c1be4af0caa79a8e263f947c2feb91e2cd5b3685d6641f7536c08ec83386e310ea71a8e7c27f5f81710e45dc0db8968dcacfda969de6d0e00570b324150194e1937fc7c919d6d6a26ed845e074cf2517d4c758f7294640c92661a8286ce4ae0dc34c670586414e3c36888329", 0x70}], 0x3}, 0x0) recvmsg$unix(r9, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) recvmsg$unix(r9, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) syz_fuse_handle_req(r7, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r3, 0xffffffffffffffff, 0x0) 8.444873228s ago: executing program 3 (id=189): openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) getrlimit(0xc, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1000000004000000040000000500000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x4, &(0x7f0000000680)={0x3, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0xb3) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0xfffffffdffffffff) 8.030904488s ago: executing program 0 (id=190): openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, 0x0, 0x0) sendfile(r3, r3, &(0x7f0000000080)=0x1, 0x7f08) 8.023757568s ago: executing program 2 (id=191): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000300)={{0xf}, 0x0, 0x2, 0x2, {0x6}}) r1 = fsopen(&(0x7f0000000000)='hfsplus\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYRES16, @ANYRES8=r1, @ANYBLOB="01180200031100002c0012800e0001000570360e247370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x4004000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)="4b74c4d6eb41f92cf37cbe89066d222754d937cc718be21cb94dcfcca1f3a3e480e8bfef85543dd7b48b031870c716ea12a5700d91527073a095f494a27bc93910c8a4b305ceab7e9fdda86ade03da8c2146c9411b9fb8745282045c505c99dbd6ad9dcade28b8860be918ff9668ded0173cf2497301f220c4993ca838179b1bb7ab93a964a5882f15314aa1037d0a4ffc8bd3795647a3ed28d8", &(0x7f0000000080), 0x1}, 0x38) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x4}, 0x38) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000140)=0x7, 0x4) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040014}, 0x0) chdir(&(0x7f0000000240)='mtd0\x00') 7.459774552s ago: executing program 0 (id=192): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0) close(r0) 7.250978018s ago: executing program 0 (id=193): mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESDEC=0x0]) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x480c4) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0xffffff, 0x0, 0x0, 0x4}, 0x10) write(r1, &(0x7f0000000000)="240000001a00590214f9f407000904101f000000000000000002000008000400", 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x75, @remote}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x38) sendto$inet6(r3, 0x0, 0x0, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000200)=0x2, 0x4) close_range(r2, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) syz_emit_ethernet(0x26, &(0x7f00000003c0)=ANY=[], 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r4, &(0x7f00000001c0)=""/4068, 0xfe4) socket$nl_netfilter(0x10, 0x3, 0xc) 7.014174223s ago: executing program 2 (id=194): setns(0xc9, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) syz_usb_connect$lan78xx(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000070000070000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e004400028006000200010000000800090001efa8000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES16=r0], 0x84}}, 0x20008040) 6.787439519s ago: executing program 0 (id=195): r0 = syz_usb_connect(0x6, 0x371, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write(r0, 0x9, 0x32, &(0x7f0000000100)="e66374624e9c4cb17eaea87f902e576b49f6e3e8fdba6d923385c877b137a2f79ad7023f7eb632b0beb82d7b4c06d9cf037d") syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = fsopen(&(0x7f0000000140)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) socket$netlink(0x10, 0x3, 0x8000000004) openat$ttyS3(0xffffff9c, 0x0, 0x208801, 0x0) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f00000000c0)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0)='1', 0x1) 3.393244085s ago: executing program 4 (id=196): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0) write(r0, &(0x7f0000000a00)='t', 0x1) 3.276140507s ago: executing program 3 (id=197): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x24, r1, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x18) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$nl_route_sched(r4, 0x0, 0x8d0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32], 0x20}}, 0x8080) 3.082511222s ago: executing program 4 (id=198): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x40000000000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1, 0x4}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) 3.081249302s ago: executing program 1 (id=208): openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) getrlimit(0xc, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1000000004000000040000000500000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x4, &(0x7f0000000680)={0x3, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0xb3) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0xfffffffdffffffff) 3.074841162s ago: executing program 3 (id=199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x4890) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.007054914s ago: executing program 2 (id=200): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r1, 0x0, 0x0) 1.95881874s ago: executing program 0 (id=201): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) socket(0x28, 0x5, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) accept4$unix(r1, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000000), &(0x7f0000000580)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4}, 0x14) syz_emit_ethernet(0x4a, &(0x7f0000000640)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @tcp={0x7, 0x6, "acdaea", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, {[], {{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x2, 0x0, 0x2}}}}}}}, 0x0) 1.930337931s ago: executing program 2 (id=202): openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, 0x0, 0x0) sendfile(r3, r3, &(0x7f0000000080)=0x1, 0x7f08) 1.792346794s ago: executing program 4 (id=203): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0) close(r0) 1.219737099s ago: executing program 4 (id=204): syz_open_procfs(0x0, 0x0) unshare(0x62040200) mount$cgroup(0x0, 0x0, 0x0, 0x2008000, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = syz_open_dev$usbmon(&(0x7f00000008c0), 0x5, 0x800) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = memfd_create(&(0x7f0000000080)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) splice(r3, 0x0, r2, 0x0, 0x4, 0x0) r4 = socket$inet(0x2, 0x80000, 0x9cf) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000240)={'raw\x00', 0x0, [0x8, 0x3, 0xfd, 0xe, 0x5]}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0x5) readv(r5, &(0x7f0000000700)=[{&(0x7f0000000400)=""/38, 0x26}], 0x1) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r6, &(0x7f0000000040), 0x0) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r7, 0x4b3a, 0x1) ioctl$KDSETMODE(r7, 0x4b3a, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x1}, 0x1c}}, 0x0) 1.058942723s ago: executing program 2 (id=205): mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESDEC=0x0]) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x480c4) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0xffffff, 0x0, 0x0, 0x4}, 0x10) write(r1, &(0x7f0000000000)="240000001a00590214f9f407000904101f000000000000000002000008000400", 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x75, @remote}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x38) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000200)=0x2, 0x4) recvmmsg(r3, &(0x7f0000005480)=[{{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, 0x0}, 0x8a}], 0x2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) syz_emit_ethernet(0x26, &(0x7f00000003c0)=ANY=[], 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r4, &(0x7f00000001c0)=""/4068, 0xfe4) socket$nl_netfilter(0x10, 0x3, 0xc) 989.422205ms ago: executing program 0 (id=206): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, 0x0}, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_GET_IRQCHIP(r5, 0xc208ae62, &(0x7f00000005c0)={0x2, 0x0, @pic={0x1, 0x2, 0xc, 0x4, 0x36, 0x0, 0x4, 0x88, 0x8, 0x10, 0x7, 0x3, 0x7, 0x7, 0xf8, 0x2}}) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) r6 = openat$dlm_plock(0xffffff9c, &(0x7f0000000000), 0x442802, 0x0) getpeername$l2tp6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000000c0)=0x20) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r7, &(0x7f0000000200)='atkbd', 0x5) 98.969267ms ago: executing program 3 (id=207): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$can_bcm(0x1d, 0x2, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/mtrr\x00', 0x300002, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='/dev/loop0,65536\x00', 0x11) mount(&(0x7f0000000900)=@filename='mtd1\x00', &(0x7f0000000800)='./mnt\x00', &(0x7f0000000a00)='jffs2\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000540)) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001400110500000000000000002b0000014e22000000000000000000000000000000000c0000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000400000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000840}, 0x8004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./mnt/test\x00', 0x42, 0x1ff) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0xfffffffffffffd03, 0xfa00, {0x1, &(0x7f0000000040), 0x2, 0x3}}, 0xfffffffffffffd71) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0xc06c4124, 0x0) mount$afs(0x0, &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='dyn']) openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/@cell/foo@sys\x00', 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) getpid() syz_open_pts(r4, 0x0) 0s ago: executing program 2 (id=209): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0) write(r0, &(0x7f0000000a00)='t', 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.116' (ED25519) to the list of known hosts. [ 61.834510][ T4172] cgroup: Unknown subsys name 'net' [ 61.973928][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.519883][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.545980][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 65.596186][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 65.607768][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 65.619068][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 65.697120][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 65.821375][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.829520][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.838418][ T4191] device bridge_slave_0 entered promiscuous mode [ 65.847645][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.854743][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.863325][ T4188] device bridge_slave_0 entered promiscuous mode [ 65.878390][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.885509][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.893844][ T4186] device bridge_slave_0 entered promiscuous mode [ 65.906477][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.914049][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.922537][ T4186] device bridge_slave_1 entered promiscuous mode [ 65.930333][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.937542][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.945848][ T4191] device bridge_slave_1 entered promiscuous mode [ 65.953323][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.960580][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.969074][ T4188] device bridge_slave_1 entered promiscuous mode [ 65.976606][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.983874][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.992404][ T4190] device bridge_slave_0 entered promiscuous mode [ 66.032537][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.039824][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.048031][ T4190] device bridge_slave_1 entered promiscuous mode [ 66.070097][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.091338][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.115241][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.126403][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.138030][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.153305][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.162785][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.171185][ T4193] device bridge_slave_0 entered promiscuous mode [ 66.186100][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.212176][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.224608][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.234469][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.241867][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.250436][ T4193] device bridge_slave_1 entered promiscuous mode [ 66.286410][ T4188] team0: Port device team_slave_0 added [ 66.302962][ T4186] team0: Port device team_slave_0 added [ 66.318022][ T4191] team0: Port device team_slave_0 added [ 66.325057][ T4188] team0: Port device team_slave_1 added [ 66.346450][ T4186] team0: Port device team_slave_1 added [ 66.353743][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.364355][ T4191] team0: Port device team_slave_1 added [ 66.386664][ T4190] team0: Port device team_slave_0 added [ 66.393519][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.400617][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.427299][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.447167][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.454166][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.480507][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.493670][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.510706][ T4190] team0: Port device team_slave_1 added [ 66.533975][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.541044][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.567088][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.584926][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.592204][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.618209][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.630067][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.637522][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.663606][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.684648][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.693229][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.719571][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.770014][ T4193] team0: Port device team_slave_0 added [ 66.776476][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.783885][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.810127][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.823186][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.831458][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.857763][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.873414][ T4188] device hsr_slave_0 entered promiscuous mode [ 66.880809][ T4188] device hsr_slave_1 entered promiscuous mode [ 66.904760][ T4193] team0: Port device team_slave_1 added [ 66.962321][ T4186] device hsr_slave_0 entered promiscuous mode [ 66.969162][ T4186] device hsr_slave_1 entered promiscuous mode [ 66.975968][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.986978][ T4186] Cannot create hsr debugfs directory [ 67.003828][ T4191] device hsr_slave_0 entered promiscuous mode [ 67.011995][ T4191] device hsr_slave_1 entered promiscuous mode [ 67.019452][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.027391][ T4191] Cannot create hsr debugfs directory [ 67.052649][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.059944][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.086183][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.103117][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.110819][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.137126][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.167776][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 67.176841][ T4198] Bluetooth: hci1: command 0x0409 tx timeout [ 67.196013][ T4190] device hsr_slave_0 entered promiscuous mode [ 67.203459][ T4190] device hsr_slave_1 entered promiscuous mode [ 67.210533][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.218820][ T4190] Cannot create hsr debugfs directory [ 67.256774][ T4198] Bluetooth: hci2: command 0x0409 tx timeout [ 67.257191][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 67.263924][ T4198] Bluetooth: hci4: command 0x0409 tx timeout [ 67.309554][ T4193] device hsr_slave_0 entered promiscuous mode [ 67.317613][ T4193] device hsr_slave_1 entered promiscuous mode [ 67.324718][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.332775][ T4193] Cannot create hsr debugfs directory [ 67.586618][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.601071][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.610812][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.621391][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.680663][ T4191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.690213][ T4191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.701230][ T4191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.712708][ T4191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.774595][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.786123][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.816157][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.826003][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.872099][ T4193] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.904142][ T4193] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.914020][ T4193] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.944399][ T4193] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.964410][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.004266][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.049149][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.063614][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.072508][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.081265][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.092279][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.103371][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.112334][ T4190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.122476][ T4190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.135195][ T4190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.150531][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.160701][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.171945][ T1351] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.179588][ T1351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.194543][ T4190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.220202][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.229716][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.240763][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.250461][ T1351] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.257635][ T1351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.265963][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.275479][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.284299][ T1351] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.291420][ T1351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.299524][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.308720][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.319184][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.328058][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.336659][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.346559][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.383337][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.393049][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.402204][ T1351] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.409451][ T1351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.421682][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.431388][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.440831][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.451028][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.479038][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.489480][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.512310][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.532243][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.540440][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.550022][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.559470][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.569510][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.582197][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.609789][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.628257][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.655066][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.665878][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.693578][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.708407][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.718889][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.729574][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.739771][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.749156][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.757192][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.765146][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.782558][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.798090][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.811376][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.824134][ T3084] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.831326][ T3084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.885793][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.894697][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.915582][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.938840][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.953674][ T3084] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.961012][ T3084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.970344][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.980390][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.988827][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.008386][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.039556][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.050185][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.060759][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.070388][ T3084] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.077535][ T3084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.085846][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.095587][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.105412][ T3084] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.112563][ T3084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.121348][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.134378][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.145704][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.161020][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.172210][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.182634][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.192134][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.201439][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.224304][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.235810][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.247702][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 69.259563][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 69.272319][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.287827][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.296359][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.310594][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.321089][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.328931][ T4239] Bluetooth: hci3: command 0x041b tx timeout [ 69.337549][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.345990][ T4239] Bluetooth: hci4: command 0x041b tx timeout [ 69.357735][ T4239] Bluetooth: hci2: command 0x041b tx timeout [ 69.364944][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.380301][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.389824][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.403758][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.418716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.429698][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.468518][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.505272][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.514028][ T1351] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.521193][ T1351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.534808][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.543752][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.558490][ T1351] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.565605][ T1351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.580207][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.591541][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.601167][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.612111][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.621788][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.630693][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.671269][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.686318][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.696311][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.711847][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.725132][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.739557][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.754866][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.763972][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.773371][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.782950][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.808894][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.816416][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.845590][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.857232][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.865790][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.881189][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.901904][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.913729][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.931248][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.939940][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.951509][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.961077][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.971236][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.980274][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.989366][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.998870][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.007319][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.018271][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.034586][ T4188] device veth0_vlan entered promiscuous mode [ 70.050258][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.068562][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.107783][ T4188] device veth1_vlan entered promiscuous mode [ 70.148299][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.161762][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.181977][ T4191] device veth0_vlan entered promiscuous mode [ 70.212239][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.222414][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.238607][ T4191] device veth1_vlan entered promiscuous mode [ 70.251950][ T4186] device veth0_vlan entered promiscuous mode [ 70.268456][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.277791][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.285773][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.295153][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.305716][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.315702][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.326649][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.357292][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.368824][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.382256][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.403259][ T4186] device veth1_vlan entered promiscuous mode [ 70.420194][ T4188] device veth0_macvtap entered promiscuous mode [ 70.457285][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.465567][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.474210][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.483841][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.492273][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.505556][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.513683][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.525086][ T4188] device veth1_macvtap entered promiscuous mode [ 70.535825][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.545556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.554615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.567690][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.578373][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.592117][ T4191] device veth0_macvtap entered promiscuous mode [ 70.638814][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.649099][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.660268][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.670086][ T4191] device veth1_macvtap entered promiscuous mode [ 70.690881][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.714017][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.723194][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.735089][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.744243][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.753389][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.763923][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.773138][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.790474][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.801404][ T4186] device veth0_macvtap entered promiscuous mode [ 70.816639][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.825741][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.835503][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.849684][ T4193] device veth0_vlan entered promiscuous mode [ 70.866379][ T4186] device veth1_macvtap entered promiscuous mode [ 70.880215][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.889411][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.898146][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.906660][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.914894][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.930024][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.940054][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.949888][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.961405][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.973876][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.984954][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.999357][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.012454][ T4190] device veth0_vlan entered promiscuous mode [ 71.023612][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.032914][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.042090][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.051832][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.060992][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.076013][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.094433][ T4193] device veth1_vlan entered promiscuous mode [ 71.108455][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.119641][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.130897][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.141419][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.153087][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.165290][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.177016][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.188871][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.211621][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.223418][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.233636][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.244385][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.256101][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.267115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.276004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.285032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.294386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.303693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.312877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.332481][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.341497][ T4239] Bluetooth: hci0: command 0x040f tx timeout [ 71.348007][ T4239] Bluetooth: hci1: command 0x040f tx timeout [ 71.354118][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.363414][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.374213][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.407503][ T1111] Bluetooth: hci2: command 0x040f tx timeout [ 71.413871][ T1111] Bluetooth: hci4: command 0x040f tx timeout [ 71.416602][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.421673][ T1111] Bluetooth: hci3: command 0x040f tx timeout [ 71.427279][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.446127][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.455842][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.467514][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.476265][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.490322][ T4190] device veth1_vlan entered promiscuous mode [ 71.538595][ T4193] device veth0_macvtap entered promiscuous mode [ 71.548930][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.558641][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.574735][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.599290][ T4193] device veth1_macvtap entered promiscuous mode [ 71.658060][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.666178][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.704750][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.717853][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.729251][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.739761][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.750076][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.760947][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.772555][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.782731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.791428][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.800167][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.810032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.819215][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.828548][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.843844][ T4190] device veth0_macvtap entered promiscuous mode [ 71.865071][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.876107][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.897566][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.909982][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.920818][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.932627][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.944911][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.955266][ T4190] device veth1_macvtap entered promiscuous mode [ 71.980407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.990683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.999633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.010994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.020946][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.030942][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.040045][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.049690][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.072760][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.082012][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.119513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.132415][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.143288][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.154499][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.165464][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.175658][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.186867][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.200344][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.211187][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.223050][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.260093][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.275973][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.287808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.308705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.318900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.329882][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.342171][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.352565][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.363396][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.375373][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.386346][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.396939][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.408098][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.420448][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.429935][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.442725][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.462622][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.474657][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.485815][ T1351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.504846][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.515908][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.532182][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.542741][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.586654][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.616260][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.663253][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.674685][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.696455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.745660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.784582][ T3084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.815882][ T3084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.869623][ T4270] overlayfs: overlapping lowerdir path [ 73.138664][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.421604][ T4265] Bluetooth: hci1: command 0x0419 tx timeout [ 73.429618][ T4265] Bluetooth: hci0: command 0x0419 tx timeout [ 73.592985][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 73.601070][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 73.643055][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.657316][ T1351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.665196][ T1351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.704971][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.708858][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 73.720750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.734991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.765486][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.809790][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.993519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.055496][ T4277] ipt_ECN: cannot use operation on non-tcp rule [ 74.088728][ T4277] loop1: detected capacity change from 0 to 512 [ 76.558696][ T4277] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 76.597801][ T4277] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 76.772935][ T4277] EXT4-fs (loop1): 1 truncate cleaned up [ 76.791754][ T4277] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,delalloc,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback. [ 77.085564][ T4297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.228391][ T4297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.628075][ T4311] device syzkaller0 entered promiscuous mode [ 78.668056][ T4311] tipc: Started in network mode [ 78.674447][ T4317] MTDSB: Device #1 doesn't appear to exist [ 78.674447][ T4317] [ 78.746516][ T4311] tipc: Node identity 764564a33386, cluster identity 4711 [ 78.852295][ T4311] tipc: Enabled bearer , priority 0 [ 78.959847][ T4312] ftl_cs: FTL header not found. [ 79.060287][ T4327] tipc: Resetting bearer [ 79.141899][ T4312] block2mtd: mtd1: [/dev/loop0] erase_size = 64KiB [65536] [ 79.281057][ T4329] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 80.846109][ T4231] tipc: Node number set to 1170433187 [ 81.083275][ T4310] tipc: Resetting bearer [ 81.396901][ T4310] tipc: Disabling bearer [ 82.666782][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 82.686758][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 82.696757][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 82.706756][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 82.796735][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 83.156754][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 83.176755][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 83.196755][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 83.236757][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 83.276755][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 83.427242][ T4342] ipt_ECN: cannot use operation on non-tcp rule [ 83.493073][ T4342] loop3: detected capacity change from 0 to 512 [ 83.642333][ T4351] overlayfs: missing 'lowerdir' [ 84.151559][ T4342] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 84.159829][ T4342] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 84.201090][ T4342] EXT4-fs (loop3): 1 truncate cleaned up [ 84.209790][ T4342] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,delalloc,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback. [ 85.785541][ T4371] overlayfs: overlapping lowerdir path [ 86.773078][ T7] cfg80211: failed to load regulatory.db [ 87.698145][ T4386] Too few erase blocks (0) [ 87.739176][ T4384] device syzkaller0 entered promiscuous mode [ 87.838414][ T4384] tipc: Enabled bearer , priority 0 [ 88.110333][ T4384] tipc: Resetting bearer [ 88.305373][ T4380] tipc: Resetting bearer [ 88.331850][ T4380] tipc: Disabling bearer [ 89.918828][ T4402] overlayfs: missing 'lowerdir' [ 90.257495][ T4385] block2mtd: error: cannot open device /dev/loop0 [ 90.490054][ T4405] Config c/1 of g1 needs at least one function. [ 90.581797][ T4405] udc dummy_udc.0: failed to start g1: -22 [ 93.706667][ T4414] ipt_ECN: cannot use operation on non-tcp rule [ 95.064409][ T4427] overlayfs: overlapping lowerdir path [ 96.112961][ T4434] device syzkaller0 entered promiscuous mode [ 96.123739][ T4434] tipc: Started in network mode [ 96.129751][ T4434] tipc: Node identity ee9cb62d18f2, cluster identity 4711 [ 96.138519][ T4434] tipc: Enabled bearer , priority 0 [ 96.147080][ T4434] Zero length message leads to an empty skb [ 96.165874][ T4434] tipc: Resetting bearer [ 96.174894][ T4433] tipc: Resetting bearer [ 96.181132][ T1108] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 96.212326][ T4433] tipc: Disabling bearer [ 96.727353][ T1108] usb 5-1: Using ep0 maxpacket: 8 [ 97.379990][ T1108] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 97.391647][ T4447] Too few erase blocks (0) [ 97.421449][ T1108] usb 5-1: config 0 has no interface number 0 [ 97.545766][ T4453] ipt_ECN: cannot use operation on non-tcp rule [ 97.553036][ T1108] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 97.600391][ T4453] loop1: detected capacity change from 0 to 512 [ 97.690897][ T4453] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 97.699393][ T4453] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 97.709876][ T4453] EXT4-fs (loop1): 1 truncate cleaned up [ 97.715568][ T4453] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,delalloc,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback. [ 97.738284][ T1108] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 97.748615][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.760586][ T1108] usb 5-1: config 0 descriptor?? [ 97.803511][ T1108] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 101.027037][ T1108] usb 5-1: USB disconnect, device number 2 [ 101.226846][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 101.421741][ T4470] overlayfs: overlapping lowerdir path [ 101.607293][ T7] usb 1-1: Dual-Role OTG device on HNP port [ 101.641882][ T7] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 5.15 [ 101.686931][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.792560][ T7] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 103.177844][ T4445] block2mtd: error: cannot open device /dev/loop0 [ 104.108395][ T4499] ipt_ECN: cannot use operation on non-tcp rule [ 104.137526][ T4499] loop4: detected capacity change from 0 to 512 [ 105.337782][ T4231] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 105.591126][ T4499] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 105.599676][ T4499] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 105.615994][ T4499] EXT4-fs (loop4): 1 truncate cleaned up [ 105.621984][ T4499] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,delalloc,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback. [ 105.957058][ T4231] usb 3-1: Using ep0 maxpacket: 8 [ 106.005848][ T4508] ======================================================= [ 106.005848][ T4508] WARNING: The mand mount option has been deprecated and [ 106.005848][ T4508] and is ignored by this kernel. Remove the mand [ 106.005848][ T4508] option from the mount to silence this warning. [ 106.005848][ T4508] ======================================================= [ 106.083401][ T4508] 9pnet_virtio: no channels available for device syz [ 106.127021][ T4231] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 106.135193][ T4231] usb 3-1: config 0 has no interface number 0 [ 106.178317][ T4521] overlayfs: overlapping lowerdir path [ 106.840979][ T4231] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 106.852291][ T4231] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 106.861437][ T4231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.875655][ T4231] usb 3-1: config 0 descriptor?? [ 106.923953][ T4231] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 107.051469][ T4231] usb 3-1: USB disconnect, device number 2 [ 107.151507][ T4529] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 107.161306][ T4529] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 108.620884][ T4536] Too few erase blocks (0) [ 111.247245][ T4534] block2mtd: error: cannot open device /dev/loop0 [ 111.284566][ T4558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.75'. [ 111.357562][ T4562] ipt_ECN: cannot use operation on non-tcp rule [ 111.385329][ T4562] loop2: detected capacity change from 0 to 512 [ 113.215365][ T4562] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 113.224782][ T4562] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 113.240247][ T4562] EXT4-fs (loop2): 1 truncate cleaned up [ 113.246158][ T4562] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,delalloc,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback. [ 113.489928][ T4567] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 113.671751][ T4570] udc-core: couldn't find an available UDC or it's busy [ 113.803738][ T4570] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 114.542064][ T4577] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 114.551147][ T4577] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 118.192348][ T4600] Too few erase blocks (0) [ 121.253780][ T4595] block2mtd: error: cannot open device /dev/loop0 [ 122.147410][ T4621] ipt_ECN: cannot use operation on non-tcp rule [ 122.255993][ T4621] loop3: detected capacity change from 0 to 512 [ 124.119824][ T4621] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 124.170420][ T4621] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 124.338553][ T4621] EXT4-fs (loop3): 1 truncate cleaned up [ 124.430590][ T4621] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,delalloc,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback. [ 125.399467][ T4651] Too few erase blocks (0) [ 126.996843][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 127.071283][ T4670] loop3: detected capacity change from 0 to 512 [ 127.170531][ T4677] 9pnet_virtio: no channels available for device syz [ 127.318667][ T4670] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 127.331961][ T4670] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 127.352890][ T4670] EXT4-fs (loop3): 1 truncate cleaned up [ 127.364738][ T4670] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,delalloc,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback. [ 127.537050][ T7] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 127.576032][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 127.617433][ T7] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.636255][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.719659][ T7] usb 2-1: config 0 descriptor?? [ 127.737806][ T4669] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 127.780570][ T7] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 128.449421][ T4644] block2mtd: error: cannot open device /dev/loop0 [ 129.678647][ T4701] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 130.633668][ T4234] usb 2-1: USB disconnect, device number 2 [ 130.641900][ T4705] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 131.033513][ T4722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.257828][ T4722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.556816][ T4175] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 132.849960][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.857008][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.617008][ T4175] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 133.645705][ T4175] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 133.827957][ T4175] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 133.862500][ T4175] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.922050][ T4175] usb 3-1: Product: syz [ 133.958902][ T4175] usb 3-1: Manufacturer: syz [ 133.993306][ T4175] usb 3-1: SerialNumber: syz [ 134.143252][ T4744] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 134.173873][ T4744] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 134.286543][ T4175] usbserial_generic 3-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 134.354253][ T4175] usbserial_generic 3-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 134.446174][ T4175] usbserial_generic 3-1:1.0: generic converter detected [ 134.598022][ T4744] netlink: 'syz.2.134': attribute type 10 has an invalid length. [ 134.654629][ T4175] usb 3-1: generic converter now attached to ttyUSB0 [ 134.703147][ T4744] netlink: 40 bytes leftover after parsing attributes in process `syz.2.134'. [ 134.707994][ T4788] fuse: Bad value for 'group_id' [ 134.728168][ T4724] block2mtd: error: cannot open device /dev/loop0 [ 134.778440][ T4744] device dummy0 entered promiscuous mode [ 134.813935][ T4744] bridge0: port 3(dummy0) entered blocking state [ 134.825982][ T4744] bridge0: port 3(dummy0) entered disabled state [ 134.904468][ T4744] bridge0: port 3(dummy0) entered blocking state [ 134.911332][ T4744] bridge0: port 3(dummy0) entered forwarding state [ 136.145592][ T4817] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 136.412846][ T4234] usb 3-1: USB disconnect, device number 3 [ 137.865299][ T4234] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 138.018587][ T4234] usbserial_generic 3-1:1.0: device disconnected [ 140.943837][ T4861] device syzkaller0 entered promiscuous mode [ 141.331227][ T4871] ipt_ECN: cannot use operation on non-tcp rule [ 141.494151][ T4863] loop2: detected capacity change from 0 to 512 [ 141.605504][ T4863] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 141.633861][ T4863] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 141.702010][ T4881] overlayfs: missing 'lowerdir' [ 142.495692][ T4863] EXT4-fs (loop2): 1 truncate cleaned up [ 142.545748][ T4863] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,delalloc,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback. [ 142.565980][ C1] vkms_vblank_simulate: vblank timer overrun [ 142.766980][ T4831] block2mtd: error: cannot open device /dev/loop0 [ 142.946014][ T4887] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 145.157268][ T4891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.890833][ T4893] input: syz1 as /devices/virtual/input/input6 [ 146.467659][ T4891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.711023][ T4904] sched: RT throttling activated [ 148.385579][ T4904] trusted_key: encrypted_key: keylen parameter is missing [ 149.352962][ T4231] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 150.056917][ T4231] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 150.082215][ T4231] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 150.257103][ T4231] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 150.295853][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.369754][ T4231] usb 2-1: Product: syz [ 150.373994][ T4231] usb 2-1: Manufacturer: syz [ 150.418897][ T4231] usb 2-1: SerialNumber: syz [ 150.547135][ T4929] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 150.554307][ T4929] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 150.601812][ T4954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.194'. [ 150.612670][ T4231] usbserial_generic 2-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 150.671438][ T4231] usbserial_generic 2-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 150.835256][ T4231] usbserial_generic 2-1:1.0: generic converter detected [ 152.520020][ T4231] usb 2-1: generic converter now attached to ttyUSB0 [ 152.857052][ T4962] fuse: Bad value for 'group_id' [ 153.055520][ T4959] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 153.153445][ T4961] netlink: 'syz.1.188': attribute type 10 has an invalid length. [ 153.325820][ T4961] netlink: 40 bytes leftover after parsing attributes in process `syz.1.188'. [ 153.538509][ T4961] device dummy0 entered promiscuous mode [ 153.797103][ T4961] bridge0: port 3(dummy0) entered blocking state [ 153.865220][ T4961] bridge0: port 3(dummy0) entered disabled state [ 153.924389][ T4961] bridge0: port 3(dummy0) entered blocking state [ 153.930899][ T4961] bridge0: port 3(dummy0) entered forwarding state [ 153.977121][ T4919] block2mtd: error: cannot open device /dev/loop0 [ 154.045063][ T4963] usb 2-1: USB disconnect, device number 3 [ 154.073193][ T4963] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 154.114006][ T4963] usbserial_generic 2-1:1.0: device disconnected [ 154.323237][ T4954] syz.2.194 (4954) used greatest stack depth: 20880 bytes left [ 154.653434][ T4982] overlayfs: missing 'lowerdir' [ 155.499645][ T4981] device syzkaller0 entered promiscuous mode [ 155.631296][ T4981] tipc: Started in network mode [ 155.682937][ T4981] tipc: Node identity 9efba6dd57a8, cluster identity 4711 [ 155.781157][ T4981] tipc: Enabled bearer , priority 0 [ 156.191208][ T4977] tipc: Resetting bearer [ 156.308431][ T4977] tipc: Disabling bearer [ 157.508296][ T5017] ODEBUG: Out of memory. ODEBUG disabled [ 157.551931][ T5024] [ 157.554317][ T5024] ====================================================== [ 157.561364][ T5024] WARNING: possible circular locking dependency detected [ 157.568408][ T5024] syzkaller #0 Not tainted [ 157.572839][ T5024] ------------------------------------------------------ [ 157.579861][ T5024] syz.0.206/5024 is trying to acquire lock: [ 157.585771][ T5024] ffffffff8cf51008 (serio_mutex){+.+.}-{3:3}, at: drvctl_store+0x2a/0xae0 [ 157.594427][ T5024] [ 157.594427][ T5024] but task is already holding lock: [ 157.601804][ T5024] ffff888024f46830 (kn->active#441){++++}-{0:0}, at: kernfs_fop_write_iter+0x1fd/0x500 [ 157.611493][ T5024] [ 157.611493][ T5024] which lock already depends on the new lock. [ 157.611493][ T5024] [ 157.621909][ T5024] [ 157.621909][ T5024] the existing dependency chain (in reverse order) is: [ 157.630934][ T5024] [ 157.630934][ T5024] -> #1 (kn->active#441){++++}-{0:0}: [ 157.638518][ T5024] __kernfs_remove+0x5da/0xcb0 [ 157.643832][ T5024] kernfs_remove_by_name_ns+0x91/0x100 [ 157.649865][ T5024] sysfs_remove_group+0xfd/0x290 [ 157.655343][ T5024] sysfs_remove_groups+0x50/0xa0 [ 157.660815][ T5024] device_remove_attrs+0xc2/0x140 [ 157.666413][ T5024] device_del+0x637/0xa80 [ 157.671281][ T5024] serio_destroy_port+0x34a/0x470 [ 157.676849][ T5024] serio_unregister_port+0x12c/0x150 [ 157.682759][ T5024] userio_char_release+0x7f/0xb0 [ 157.688245][ T5024] __fput+0x212/0x8c0 [ 157.692764][ T5024] task_work_run+0x125/0x1a0 [ 157.697915][ T5024] exit_to_user_mode_loop+0x10f/0x130 [ 157.703851][ T5024] exit_to_user_mode_prepare+0xee/0x180 [ 157.709946][ T5024] syscall_exit_to_user_mode+0x16/0x40 [ 157.715942][ T5024] do_syscall_64+0x58/0xa0 [ 157.720908][ T5024] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 157.727342][ T5024] [ 157.727342][ T5024] -> #0 (serio_mutex){+.+.}-{3:3}: [ 157.734682][ T5024] __lock_acquire+0x2c66/0x7b50 [ 157.740079][ T5024] lock_acquire+0x19e/0x400 [ 157.745123][ T5024] __mutex_lock_common+0x1e5/0x2400 [ 157.750949][ T5024] mutex_lock_interruptible_nested+0x17/0x20 [ 157.757559][ T5024] drvctl_store+0x2a/0xae0 [ 157.762610][ T5024] kernfs_fop_write_iter+0x3a8/0x500 [ 157.768434][ T5024] vfs_write+0x748/0xd70 [ 157.773231][ T5024] ksys_write+0x153/0x260 [ 157.778101][ T5024] do_syscall_64+0x4c/0xa0 [ 157.783064][ T5024] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 157.789491][ T5024] [ 157.789491][ T5024] other info that might help us debug this: [ 157.789491][ T5024] [ 157.799758][ T5024] Possible unsafe locking scenario: [ 157.799758][ T5024] [ 157.807228][ T5024] CPU0 CPU1 [ 157.812608][ T5024] ---- ---- [ 157.817984][ T5024] lock(kn->active#441); [ 157.822337][ T5024] lock(serio_mutex); [ 157.828935][ T5024] lock(kn->active#441); [ 157.835814][ T5024] lock(serio_mutex); [ 157.839901][ T5024] [ 157.839901][ T5024] *** DEADLOCK *** [ 157.839901][ T5024] [ 157.848057][ T5024] 4 locks held by syz.0.206/5024: [ 157.853103][ T5024] #0: ffff8880777ac0f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2bf/0x370 [ 157.862377][ T5024] #1: ffff8880241e6460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x296/0xd70 [ 157.871304][ T5024] #2: ffff8880237e8488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x500 [ 157.881071][ T5024] #3: ffff888024f46830 (kn->active#441){++++}-{0:0}, at: kernfs_fop_write_iter+0x1fd/0x500 [ 157.891195][ T5024] [ 157.891195][ T5024] stack backtrace: [ 157.897099][ T5024] CPU: 1 PID: 5024 Comm: syz.0.206 Not tainted syzkaller #0 [ 157.904402][ T5024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 157.914487][ T5024] Call Trace: [ 157.917783][ T5024] [ 157.920767][ T5024] dump_stack_lvl+0x188/0x250 [ 157.925481][ T5024] ? load_image+0x410/0x410 [ 157.930001][ T5024] ? show_regs_print_info+0x20/0x20 [ 157.935237][ T5024] ? print_circular_bug+0x12b/0x1a0 [ 157.940454][ T5024] check_noncircular+0x296/0x330 [ 157.945424][ T5024] ? add_chain_block+0x9b0/0x9b0 [ 157.950551][ T5024] ? lockdep_lock+0xf1/0x1f0 [ 157.955158][ T5024] ? mark_lock+0x94/0x320 [ 157.959529][ T5024] ? _find_first_zero_bit+0xd1/0xf0 [ 157.964750][ T5024] __lock_acquire+0x2c66/0x7b50 [ 157.969632][ T5024] ? verify_lock_unused+0x140/0x140 [ 157.974956][ T5024] ? mark_lock+0x94/0x320 [ 157.979310][ T5024] ? mark_lock+0x94/0x320 [ 157.983675][ T5024] lock_acquire+0x19e/0x400 [ 157.988207][ T5024] ? drvctl_store+0x2a/0xae0 [ 157.992822][ T5024] ? __might_sleep+0xf0/0xf0 [ 157.997433][ T5024] ? read_lock_is_recursive+0x10/0x10 [ 158.002870][ T5024] ? verify_lock_unused+0x140/0x140 [ 158.008111][ T5024] __mutex_lock_common+0x1e5/0x2400 [ 158.013339][ T5024] ? drvctl_store+0x2a/0xae0 [ 158.017943][ T5024] ? kernfs_fop_write_iter+0x14f/0x500 [ 158.023423][ T5024] ? drvctl_store+0x2a/0xae0 [ 158.028034][ T5024] ? mutex_lock_io_nested+0x60/0x60 [ 158.033262][ T5024] ? read_lock_is_recursive+0x10/0x10 [ 158.038653][ T5024] ? sysfs_kf_read+0x350/0x350 [ 158.043432][ T5024] mutex_lock_interruptible_nested+0x17/0x20 [ 158.049452][ T5024] drvctl_store+0x2a/0xae0 [ 158.053889][ T5024] ? sysfs_kf_write+0x183/0x2a0 [ 158.058762][ T5024] ? sysfs_kf_read+0x350/0x350 [ 158.063544][ T5024] kernfs_fop_write_iter+0x3a8/0x500 [ 158.068883][ T5024] vfs_write+0x748/0xd70 [ 158.073284][ T5024] ? file_end_write+0x250/0x250 [ 158.078157][ T5024] ? mutex_lock_nested+0x17/0x20 [ 158.083124][ T5024] ? __fdget_pos+0x2bf/0x370 [ 158.087733][ T5024] ? ksys_write+0x70/0x260 [ 158.092168][ T5024] ksys_write+0x153/0x260 [ 158.096514][ T5024] ? __ia32_sys_read+0x80/0x80 [ 158.101292][ T5024] ? lockdep_hardirqs_on+0x94/0x140 [ 158.106520][ T5024] do_syscall_64+0x4c/0xa0 [ 158.111047][ T5024] ? clear_bhb_loop+0x30/0x80 [ 158.115746][ T5024] ? clear_bhb_loop+0x30/0x80 [ 158.120707][ T5024] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.126658][ T5024] RIP: 0033:0x7f69f2e830d9 [ 158.131126][ T5024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.150926][ T5024] RSP: 002b:00007f69f10ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 158.159363][ T5024] RAX: ffffffffffffffda RBX: 00007f69f310b090 RCX: 00007f69f2e830d9 [ 158.167357][ T5024] RDX: 0000000000000005 RSI: 0000200000000200 RDI: 000000000000000b [ 158.175914][ T5024] RBP: 00007f69f2f1a024 R08: 0000000000000000 R09: 0000000000000000 [ 158.183920][ T5024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.191922][ T5024] R13: 00007f69f310b128 R14: 00007f69f310b090 R15: 00007ffdde969af8 [ 158.199944][ T5024] [ 158.335825][ T5029] Too few erase blocks (0) [ 158.650905][ T5024] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 161.408622][ T5021] block2mtd: error: cannot open device /dev/loop0