last executing test programs: 1.965882013s ago: executing program 1 (id=2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80e02, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000cce000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000000)="ba0000c0fe260f7fa1000000003e0f01ca0f20c035000001000f22c066baf80cb8ca7a7485ef66bafc0cb0b5ee66b8fb000f00d0b9800000c00f3235000800000f30c4e3b17ed84e0f01c9c4e3955d5900d8", 0x52}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.678215896s ago: executing program 3 (id=4): r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b0000000000", 0x24) 1.451012464s ago: executing program 3 (id=7): mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200), 0xfea7) copy_file_range(r1, &(0x7f00000001c0), r0, 0x0, 0xffffffffa003e45b, 0x700000000000000) 1.450603284s ago: executing program 0 (id=1): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0x7706, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0x23c, 0x0, &(0x7f0000000440)}) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000000, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019c09000f01c2", 0x69}], 0x1, 0x7d, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.420586347s ago: executing program 1 (id=9): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x104) fdatasync(r0) 1.288479737s ago: executing program 1 (id=10): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access', 0x3d, r3}}]}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 1.24296377s ago: executing program 3 (id=11): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040080010300000009210000000122050009058103"], 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000018000000000000000000000005000600000000000a004e2400000000fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000200120002000200000000000000000006002b00020000000000000000000000fe880000000000000000000000000001fc01000002000000000000000000"], 0xc0}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x5, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003560000000003"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000880)={0x24, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_usb_connect$uac1(0x5, 0x8e, &(0x7f0000000840)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c, 0x3, 0x1, 0x6, 0x40, 0xe7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7ff, 0xb5}, [@processing_unit={0x7, 0x24, 0x7, 0x5, 0x5, 0x38}, @extension_unit={0x7, 0x24, 0x8, 0x2, 0x800, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xa, 0x3, 0x40, 0xfb}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0xb, 0x10, 0x1, {0x7, 0x25, 0x1, 0x2, 0x9, 0xff7f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x80, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x7, 0x8, {0x7, 0x25, 0x1, 0x1}}}}}}}]}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0xdf, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.209965103s ago: executing program 4 (id=5): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = socket$inet6_udp(0xa, 0x2, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f0000000140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x800}}]}}) sendmmsg$inet6(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40) sendfile(r1, r0, 0x0, 0x80000000) 1.145028049s ago: executing program 2 (id=12): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x68, 0x0, &(0x7f0000000380)=[@dead_binder_done, @exit_looper, @enter_looper, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000500)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/97, 0x61, 0x0, 0x3c}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1f}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0xf7, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x68, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @request_death={0x400c630e, 0x2}, @free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) 971.037712ms ago: executing program 4 (id=13): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000104, 0x0, 0x6}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYRES8]) 927.565796ms ago: executing program 0 (id=14): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000280)={0x2, 0x0, [{0x40000104, 0x0, 0x6}, {0x40001ff1, 0x0, 0x9}]}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0xa7, 0x4, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x7, 0x100000000, 0x0, 0x7dd, 0x100000, 0x0, 0x2004c8, 0x1, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x6, 0x4, 0xefffffffffffffff, 0x2, 0x1000, 0x2000000, 0x0, 0x18, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41900}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 866.241671ms ago: executing program 1 (id=15): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c96558", 0xe}], 0x1) 715.517113ms ago: executing program 4 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa8) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220) 715.050053ms ago: executing program 0 (id=17): clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xb, 0x8a, 0x2, 0x2000000000009, 0x7, 0x800000000000000b, 0x651, 0x2000ffffffff, 0x9655, 0x0, 0x6, 0x0, 0x5, 0x8000000b, 0x80000000000000, 0xcc3, 0x1, 0x81, 0x17, 0x0, 0xfffffffd, 0xc, 0x5, 0xfffffffffffffffe, 0x3, 0x6}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mknod$loop(0x0, 0xfff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, 0x0, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 699.055674ms ago: executing program 4 (id=18): timerfd_create(0x4, 0x80000) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x10, [{0x0, 0x0}, {0x0, 0x0}, {0xc2, &(0x7f00000006c0)=@lang_id={0x0, 0x3, 0x816}}]}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be00443cfffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) 511.098739ms ago: executing program 1 (id=19): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x0, 0x11, 0x5, {0x5, 0xe, "2ff465"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='@\nB'], 0x0, 0x0, 0x0, 0x0}, 0x0) 367.064181ms ago: executing program 0 (id=20): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x250}}, 0x4c000) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)={'#! ', './file2'}, 0xb) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001840)={0x1, 0x0, [{0x2, 0x7b, &(0x7f0000000440)=""/123}]}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 238.217171ms ago: executing program 2 (id=21): prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) inotify_init() 194.547254ms ago: executing program 2 (id=22): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000180)={0x0, 0x7d6f, 0x1, [0xffff, 0x10001, 0x5, 0x4, 0x100000000], [0xe000000, 0x5a, 0x101, 0x7e, 0xcc6, 0x3, 0x100000001, 0xa, 0x80000001, 0x100, 0x8, 0x401, 0x5, 0x100, 0xfffffffffffffe00, 0xc3ae, 0x600000000, 0x1ff, 0x2d80000000000, 0x4, 0x43, 0x3, 0x2, 0xff, 0xa, 0x4, 0x100, 0x1, 0xfffffffffffffffe, 0x0, 0x166, 0x4, 0x8, 0x0, 0x9, 0x9, 0x65b0, 0x5e4, 0x5, 0x1, 0x5117, 0x8, 0x5, 0xfff, 0x3cecc49a, 0x7fff, 0x6, 0x4, 0x1, 0x1, 0xa, 0x1, 0x7fff, 0x8, 0x400, 0x1, 0x5, 0x4, 0x2, 0x6, 0xb4, 0x7fff, 0x0, 0x4, 0x2, 0xfffffffffffffff9, 0x3ff, 0x1, 0x0, 0x80000001, 0x7, 0xeb, 0x0, 0xd6c0, 0x80000000, 0x3ff, 0x3, 0xf693, 0x8000000000000001, 0x6, 0x3, 0xe3, 0x7, 0x400c4, 0xffffffffffffffff, 0x8000000000000000, 0x6, 0x8, 0x2, 0x3000000000, 0x4, 0x1, 0x2, 0x401, 0x6, 0x80000001, 0x3, 0x80, 0x6, 0x7, 0x4, 0x2, 0x40, 0x6, 0x7a, 0x6, 0x4, 0x6, 0x4, 0x2, 0x7, 0x4a4, 0x80a, 0x0, 0x0, 0x7, 0x10000000000000, 0xfffffffffffffdff, 0x8f, 0xffffffffffffffff, 0x5]}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x4, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x3, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0xe474, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 47.038636ms ago: executing program 2 (id=23): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x13c}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e84639d3b9164d9", 0x3a}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 39.791537ms ago: executing program 2 (id=24): socket$inet6_tcp(0xa, 0x1, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0xffffffffffffffda, 0x8, {0x2, 0x0, 0x0, 0x100000000, 0xf, 0x0, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000140)) 0s ago: executing program 2 (id=25): ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=26): openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x88ce359bdb02163c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x9, 0x2, 0x3, 0x2}, 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.255' (ED25519) to the list of known hosts. [ 52.101507][ T4170] cgroup: Unknown subsys name 'net' [ 52.244411][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.714645][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 55.161994][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 55.228169][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 55.274060][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 55.346880][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 55.392326][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.400062][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.412702][ T4182] device bridge_slave_0 entered promiscuous mode [ 55.445983][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.453352][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.461808][ T4182] device bridge_slave_1 entered promiscuous mode [ 55.481484][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.488869][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.496814][ T4190] device bridge_slave_0 entered promiscuous mode [ 55.526831][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.534037][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.542193][ T4190] device bridge_slave_1 entered promiscuous mode [ 55.549731][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 55.581215][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.588713][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.596518][ T4184] device bridge_slave_0 entered promiscuous mode [ 55.625054][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.634512][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.642755][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.651214][ T4184] device bridge_slave_1 entered promiscuous mode [ 55.669701][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.676781][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.685117][ T4183] device bridge_slave_0 entered promiscuous mode [ 55.694961][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.729292][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.748141][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.755367][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.764004][ T4183] device bridge_slave_1 entered promiscuous mode [ 55.773589][ T4182] team0: Port device team_slave_0 added [ 55.788665][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.813001][ T4182] team0: Port device team_slave_1 added [ 55.820549][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.857744][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.882863][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.908704][ T4190] team0: Port device team_slave_0 added [ 55.925091][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.934939][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.942160][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.969994][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.989437][ T4190] team0: Port device team_slave_1 added [ 55.997630][ T4184] team0: Port device team_slave_0 added [ 56.003843][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.011111][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.019332][ T4192] device bridge_slave_0 entered promiscuous mode [ 56.033261][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.040618][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.066914][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.088611][ T4184] team0: Port device team_slave_1 added [ 56.103197][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.110382][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.118099][ T4192] device bridge_slave_1 entered promiscuous mode [ 56.142862][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.149981][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.176530][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.196647][ T4183] team0: Port device team_slave_0 added [ 56.219719][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.226782][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.253340][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.273589][ T4183] team0: Port device team_slave_1 added [ 56.291783][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.299079][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.325433][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.341769][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.362010][ T4182] device hsr_slave_0 entered promiscuous mode [ 56.368985][ T4182] device hsr_slave_1 entered promiscuous mode [ 56.376350][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.383536][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.409946][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.427172][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.473628][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.480828][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.506956][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.545331][ T4184] device hsr_slave_0 entered promiscuous mode [ 56.552027][ T4184] device hsr_slave_1 entered promiscuous mode [ 56.558660][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.566543][ T4184] Cannot create hsr debugfs directory [ 56.572687][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.580079][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.606520][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.628382][ T4190] device hsr_slave_0 entered promiscuous mode [ 56.635272][ T4190] device hsr_slave_1 entered promiscuous mode [ 56.642018][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.649866][ T4190] Cannot create hsr debugfs directory [ 56.657724][ T4192] team0: Port device team_slave_0 added [ 56.695294][ T4192] team0: Port device team_slave_1 added [ 56.760063][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.767036][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.793144][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.806103][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.813229][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.839710][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.868674][ T4183] device hsr_slave_0 entered promiscuous mode [ 56.875378][ T4183] device hsr_slave_1 entered promiscuous mode [ 56.882206][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.890103][ T4183] Cannot create hsr debugfs directory [ 56.919595][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 56.926616][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 56.928705][ T4173] Bluetooth: hci1: command 0x0409 tx timeout [ 56.939174][ T4173] Bluetooth: hci4: command 0x0409 tx timeout [ 56.945402][ T4173] Bluetooth: hci3: command 0x0409 tx timeout [ 57.038368][ T4192] device hsr_slave_0 entered promiscuous mode [ 57.045212][ T4192] device hsr_slave_1 entered promiscuous mode [ 57.052487][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.060374][ T4192] Cannot create hsr debugfs directory [ 57.221450][ T4182] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.238231][ T4182] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.247620][ T4182] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.256505][ T4182] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.292633][ T4190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.307925][ T4190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.336152][ T4190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.360621][ T4190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.394171][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.405249][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.426535][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.441211][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.479387][ T4192] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.500962][ T4192] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.530868][ T4192] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.542718][ T4192] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.601721][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.625004][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.634623][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.650438][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.662060][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.678314][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.685990][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.703755][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.730402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.741110][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.750999][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.758252][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.767325][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.798170][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.808037][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.817275][ T401] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.824495][ T401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.851744][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.873526][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.890844][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.914317][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.935525][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.944045][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.954280][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.965933][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.983343][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.993816][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.000989][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.009110][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.016838][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.027920][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.057230][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.065888][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.075236][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.082527][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.092271][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.102165][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.111141][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.121091][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.129692][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.137028][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.145033][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.154033][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.162897][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.170052][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.177683][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.186984][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.195800][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.204863][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.214097][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.222664][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.230588][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.246577][ T4182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.257458][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.283994][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.297820][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.306462][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.318026][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.331690][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.340513][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.347550][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.355535][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.365168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.373548][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.383185][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.391358][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.399978][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.408461][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.418430][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.428291][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.437726][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.457729][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.489718][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.499766][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.508257][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.520580][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.531758][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.540775][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.550934][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.559699][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.566779][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.575606][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.584616][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.593245][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.600333][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.608292][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.617588][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.626941][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.636495][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.651417][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.675523][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.699947][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.715189][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.725580][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.754498][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.765097][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.774920][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.784938][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.797863][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.809724][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.828085][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.842767][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.854577][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.863752][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.873897][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.894099][ T4192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.905215][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.942096][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.959934][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.971280][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.980227][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.989137][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.996651][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.004643][ T1108] Bluetooth: hci3: command 0x041b tx timeout [ 59.009432][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.011143][ T1108] Bluetooth: hci4: command 0x041b tx timeout [ 59.025027][ T1108] Bluetooth: hci1: command 0x041b tx timeout [ 59.025782][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.031303][ T1108] Bluetooth: hci0: command 0x041b tx timeout [ 59.045295][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.052388][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.052569][ T1108] Bluetooth: hci2: command 0x041b tx timeout [ 59.067400][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.076353][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.085053][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.092180][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.102174][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.110161][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.125349][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.139029][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.175502][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.186093][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.195988][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.207382][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.217111][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.227192][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.239956][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.247537][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.285893][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.294876][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.310131][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.342104][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.350418][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.365820][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.375704][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.389814][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.402787][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.414419][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.442357][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.451372][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.473162][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.488930][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.502237][ T4182] device veth0_vlan entered promiscuous mode [ 59.531663][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.546631][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.556598][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.567449][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.576737][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.585355][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.599719][ T4182] device veth1_vlan entered promiscuous mode [ 59.613688][ T4190] device veth0_vlan entered promiscuous mode [ 59.627649][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.644623][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.657170][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.670720][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.681512][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.691273][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.699749][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.711994][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.726374][ T4190] device veth1_vlan entered promiscuous mode [ 59.765251][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.774559][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.783245][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.791218][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.831261][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.838428][ T4184] device veth0_vlan entered promiscuous mode [ 59.853437][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.866700][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.877366][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.894336][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.905315][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.914587][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.923696][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.937066][ T4184] device veth1_vlan entered promiscuous mode [ 59.946450][ T4182] device veth0_macvtap entered promiscuous mode [ 59.959973][ T4190] device veth0_macvtap entered promiscuous mode [ 59.971584][ T4190] device veth1_macvtap entered promiscuous mode [ 59.985006][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.998955][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.007447][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.022264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.034277][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.044084][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.052275][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.085150][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.099310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.108209][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.117797][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.126892][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.143317][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.153762][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.164125][ T4182] device veth1_macvtap entered promiscuous mode [ 60.174996][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.184183][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.193311][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.211404][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.237226][ T4184] device veth0_macvtap entered promiscuous mode [ 60.250659][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.259781][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.268345][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.277801][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.287630][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.296187][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.304804][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.315925][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.325333][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.334103][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.343244][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.361341][ T4184] device veth1_macvtap entered promiscuous mode [ 60.373505][ T4183] device veth0_vlan entered promiscuous mode [ 60.385987][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.397747][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.411082][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.419142][ T4192] device veth0_vlan entered promiscuous mode [ 60.426006][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.434994][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.445908][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.454543][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.463581][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.472626][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.480957][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.497497][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.509699][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.527048][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.562507][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.571953][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.585960][ T4182] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.594848][ T4182] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.604531][ T4182] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.613453][ T4182] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.632556][ T4183] device veth1_vlan entered promiscuous mode [ 60.644865][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.658396][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.668744][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.679814][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.691239][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.705026][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.715884][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.726441][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.737651][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.750663][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.760684][ T4192] device veth1_vlan entered promiscuous mode [ 60.772610][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.781914][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.790944][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.800393][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.815936][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.826344][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.844340][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.854482][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.896253][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.909068][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.922800][ T4183] device veth0_macvtap entered promiscuous mode [ 60.961563][ T4183] device veth1_macvtap entered promiscuous mode [ 60.983306][ T4266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.993622][ T4266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.038806][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.046987][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.055665][ T1471] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.067547][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.078411][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.089625][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 61.095034][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.095734][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 61.106575][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.112729][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 61.128792][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 61.129028][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.134858][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 61.150138][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.166154][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.194092][ T4192] device veth0_macvtap entered promiscuous mode [ 61.202650][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.213318][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.222300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.231696][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.242206][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.251301][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.263903][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.274117][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.286468][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.296425][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.307181][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.320261][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.354898][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.359169][ T4192] device veth1_macvtap entered promiscuous mode [ 61.363358][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.376754][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.385361][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.394404][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.406322][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.436263][ T401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.444974][ T401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.453208][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.465121][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.473966][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.486830][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.502719][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.505321][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.523334][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.529137][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.534708][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.551480][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.563475][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.573457][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.584446][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.594892][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.605368][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.616782][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.650488][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.660943][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.671126][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.683634][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.697141][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.715249][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.727046][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.738788][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.749639][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.760072][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.770766][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.782174][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.800049][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.809423][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.818226][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.827500][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.869362][ T1471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.877428][ T1471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.905735][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.921820][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.931715][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.952130][ T4295] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 61.958368][ T401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.043123][ T401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.106755][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.160661][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.184499][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.234756][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.254044][ T4299] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 62.263111][ T4266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.282796][ T4266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.296273][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.309481][ T4299] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 62.332511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.345927][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.367989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.408831][ T4266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.416894][ T4266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.493340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.138973][ T4291] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 63.160232][ T4290] Bluetooth: hci3: command 0x0419 tx timeout [ 63.166641][ T4290] Bluetooth: hci4: command 0x0419 tx timeout [ 63.185584][ T4290] Bluetooth: hci1: command 0x0419 tx timeout [ 63.228982][ T4290] Bluetooth: hci0: command 0x0419 tx timeout [ 63.231489][ T4335] device syzkaller0 entered promiscuous mode [ 63.259759][ T4290] Bluetooth: hci2: command 0x0419 tx timeout [ 63.566870][ T4291] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.586447][ T4291] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.604572][ T4291] usb 4-1: config 0 interface 0 has no altsetting 0 [ 63.612635][ T4291] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 63.622196][ T4291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.633671][ T4291] usb 4-1: config 0 descriptor?? [ 63.799895][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 63.822520][ T4357] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=6 (12 ns) > initial count (6 ns). Using initial count to start timer. [ 64.058712][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 64.115224][ T4366] [ 64.117574][ T4366] ====================================================== [ 64.124590][ T4366] WARNING: possible circular locking dependency detected [ 64.131624][ T4366] 5.15.189-syzkaller #0 Not tainted [ 64.136809][ T4366] ------------------------------------------------------ [ 64.143987][ T4366] syz.4.26/4366 is trying to acquire lock: [ 64.149879][ T4366] ffff88807b4ccb98 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 64.160303][ T4366] [ 64.160303][ T4366] but task is already holding lock: [ 64.167653][ T4366] ffff88807b4ccff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 64.176970][ T4366] [ 64.176970][ T4366] which lock already depends on the new lock. [ 64.176970][ T4366] [ 64.187484][ T4366] [ 64.187484][ T4366] the existing dependency chain (in reverse order) is: [ 64.197143][ T4366] [ 64.197143][ T4366] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 64.204868][ T4366] __mutex_lock_common+0x1eb/0x2390 [ 64.210588][ T4366] mutex_lock_nested+0x17/0x20 [ 64.216326][ T4366] hci_dev_do_close+0x5f/0x1030 [ 64.221706][ T4366] hci_rfkill_set_block+0x10a/0x190 [ 64.227501][ T4366] rfkill_set_block+0x1c6/0x420 [ 64.232870][ T4366] rfkill_fop_write+0x458/0x560 [ 64.238233][ T4366] vfs_write+0x300/0xd00 [ 64.242984][ T4366] ksys_write+0x14d/0x250 [ 64.247830][ T4366] do_syscall_64+0x4c/0xa0 [ 64.248626][ T13] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 64.252774][ T4366] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 64.252802][ T4366] [ 64.252802][ T4366] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 64.274671][ T4366] __mutex_lock_common+0x1eb/0x2390 [ 64.280397][ T4366] mutex_lock_nested+0x17/0x20 [ 64.285721][ T4366] rfkill_register+0x33/0x8a0 [ 64.290929][ T4366] hci_register_dev+0x452/0x970 [ 64.296322][ T4366] vhci_create_device+0x32c/0x5c0 [ 64.301997][ T4366] vhci_write+0x391/0x450 [ 64.306857][ T4366] vfs_write+0x712/0xd00 [ 64.311616][ T4366] ksys_write+0x14d/0x250 [ 64.316715][ T4366] do_syscall_64+0x4c/0xa0 [ 64.321640][ T4366] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 64.328140][ T4366] [ 64.328140][ T4366] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 64.335983][ T4366] __mutex_lock_common+0x1eb/0x2390 [ 64.341811][ T4366] mutex_lock_nested+0x17/0x20 [ 64.347123][ T4366] vhci_send_frame+0x88/0x100 [ 64.352315][ T4366] hci_send_frame+0x1a9/0x2e0 [ 64.357518][ T4366] hci_tx_work+0x9f9/0x1710 [ 64.362548][ T4366] process_one_work+0x863/0x1000 [ 64.368015][ T4366] worker_thread+0xaa8/0x12a0 [ 64.373203][ T4366] kthread+0x436/0x520 [ 64.377808][ T4366] ret_from_fork+0x1f/0x30 [ 64.382825][ T4366] [ 64.382825][ T4366] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 64.393729][ T4366] __lock_acquire+0x2c33/0x7c60 [ 64.399117][ T4366] lock_acquire+0x197/0x3f0 [ 64.404158][ T4366] __flush_work+0xdd/0x1b0 [ 64.409085][ T4366] hci_dev_do_close+0x1e7/0x1030 [ 64.414541][ T4366] hci_rfkill_set_block+0x10a/0x190 [ 64.420250][ T4366] rfkill_set_block+0x1c6/0x420 [ 64.425617][ T4366] rfkill_fop_write+0x458/0x560 [ 64.430994][ T4366] vfs_write+0x300/0xd00 [ 64.435776][ T4366] ksys_write+0x14d/0x250 [ 64.440616][ T4366] do_syscall_64+0x4c/0xa0 [ 64.445546][ T4366] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 64.452127][ T4366] [ 64.452127][ T4366] other info that might help us debug this: [ 64.452127][ T4366] [ 64.462427][ T4366] Chain exists of: [ 64.462427][ T4366] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 64.462427][ T4366] [ 64.477569][ T4366] Possible unsafe locking scenario: [ 64.477569][ T4366] [ 64.485134][ T4366] CPU0 CPU1 [ 64.490510][ T4366] ---- ---- [ 64.496060][ T4366] lock(&hdev->req_lock); [ 64.498699][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 64.500478][ T4366] lock(rfkill_global_mutex); [ 64.500498][ T4366] lock(&hdev->req_lock); [ 64.500513][ T4366] lock((work_completion)(&hdev->tx_work)); [ 64.526026][ T4366] [ 64.526026][ T4366] *** DEADLOCK *** [ 64.526026][ T4366] [ 64.534208][ T4366] 2 locks held by syz.4.26/4366: [ 64.539233][ T4366] #0: ffffffff8d4be228 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 64.549454][ T4366] #1: ffff88807b4ccff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 64.559291][ T4366] [ 64.559291][ T4366] stack backtrace: [ 64.565198][ T4366] CPU: 1 PID: 4366 Comm: syz.4.26 Not tainted 5.15.189-syzkaller #0 [ 64.573439][ T4366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 64.583864][ T4366] Call Trace: [ 64.587149][ T4366] [ 64.590204][ T4366] dump_stack_lvl+0x168/0x230 [ 64.594903][ T4366] ? load_image+0x3b0/0x3b0 [ 64.599423][ T4366] ? show_regs_print_info+0x20/0x20 [ 64.604639][ T4366] ? print_circular_bug+0x12b/0x1a0 [ 64.609829][ T4366] check_noncircular+0x274/0x310 [ 64.615001][ T4366] ? add_chain_block+0x940/0x940 [ 64.618880][ T13] usb 3-1: config 0 interface 0 has no altsetting 0 [ 64.620051][ T4366] ? lockdep_lock+0xdc/0x1e0 [ 64.620082][ T4366] ? mark_lock+0x94/0x320 [ 64.629110][ T13] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 64.632152][ T4366] __lock_acquire+0x2c33/0x7c60 [ 64.632187][ T4366] ? lockdep_unlock+0x134/0x2d0 [ 64.636709][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.645688][ T4366] ? lockdep_lock+0x1e0/0x1e0 [ 64.645717][ T4366] ? mark_lock+0x94/0x320 [ 64.645736][ T4366] ? verify_lock_unused+0x140/0x140 [ 64.645753][ T4366] ? __lock_acquire+0x12d9/0x7c60 [ 64.645778][ T4366] lock_acquire+0x197/0x3f0 [ 64.645795][ T4366] ? __flush_work+0xc1/0x1b0 [ 64.645813][ T4366] ? __mutex_trylock_common+0x14f/0x250 [ 64.645834][ T4366] ? read_lock_is_recursive+0x10/0x10 [ 64.645853][ T4366] ? lock_chain_count+0x20/0x20 [ 64.661370][ T13] usb 3-1: config 0 descriptor?? [ 64.663614][ T4366] ? mark_lock+0x94/0x320 [ 64.663647][ T4366] __flush_work+0xdd/0x1b0 [ 64.721696][ T4366] ? __flush_work+0xc1/0x1b0 [ 64.726422][ T4366] ? flush_work+0x20/0x20 [ 64.730754][ T4366] ? hci_leds_update_powered+0x148/0x160 [ 64.736378][ T4366] ? rcu_lock_release+0x5/0x20 [ 64.741134][ T4366] ? __lock_acquire+0x7c60/0x7c60 [ 64.746270][ T4366] hci_dev_do_close+0x1e7/0x1030 [ 64.751285][ T4366] ? _raw_spin_unlock+0x40/0x40 [ 64.756219][ T4366] hci_rfkill_set_block+0x10a/0x190 [ 64.761412][ T4366] ? rcu_lock_release+0x20/0x20 [ 64.766259][ T4366] rfkill_set_block+0x1c6/0x420 [ 64.771113][ T4366] rfkill_fop_write+0x458/0x560 [ 64.775970][ T4366] ? rfkill_fop_read+0x4b0/0x4b0 [ 64.780988][ T4366] ? common_file_perm+0x150/0x1c0 [ 64.786003][ T4366] ? fsnotify_perm+0x5d/0x560 [ 64.790681][ T4366] ? security_file_permission+0x75/0xa0 [ 64.796218][ T4366] ? rfkill_fop_read+0x4b0/0x4b0 [ 64.801164][ T4366] vfs_write+0x300/0xd00 [ 64.805413][ T4366] ? file_end_write+0x250/0x250 [ 64.810347][ T4366] ? __fget_files+0x40f/0x480 [ 64.815022][ T4366] ? __fdget_pos+0x1e2/0x370 [ 64.819598][ T4366] ? ksys_write+0x71/0x250 [ 64.824083][ T4366] ksys_write+0x14d/0x250 [ 64.828506][ T4366] ? __ia32_sys_read+0x80/0x80 [ 64.833449][ T4366] ? lockdep_hardirqs_on+0x94/0x140 [ 64.838645][ T4366] do_syscall_64+0x4c/0xa0 [ 64.843207][ T4366] ? clear_bhb_loop+0x30/0x80 [ 64.847886][ T4366] ? clear_bhb_loop+0x30/0x80 [ 64.852570][ T4366] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 64.858743][ T4366] RIP: 0033:0x7f5df9d37be9 [ 64.863156][ T4366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.882778][ T4366] RSP: 002b:00007f5df7f9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 64.891449][ T4366] RAX: ffffffffffffffda RBX: 00007f5df9f5efa0 RCX: 00007f5df9d37be9 [ 64.899513][ T4366] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 64.907711][ T4366] RBP: 00007f5df9dbae19 R08: 0000000000000000 R09: 0000000000000000 [ 64.915693][ T4366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.924281][ T4366] R13: 00007f5df9f5f038 R14: 00007f5df9f5efa0 R15: 00007ffd5aabe388 [ 64.932255][ T4366] [ 65.009165][ T4291] usb 4-1: string descriptor 0 read error: -22 [ 65.068706][ T23] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 65.076812][ T23] usb 2-1: config 0 has no interface number 0 [ 65.084053][ T23] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.095083][ T23] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.104959][ T23] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 65.114507][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.124148][ T23] usb 2-1: config 0 descriptor?? [ 65.220601][ T4291] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0001/input/input5 [ 65.345851][ T13] usb 3-1: USB disconnect, device number 2 [ 65.370618][ T4291] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0001/input/input6 [ 65.386741][ T4291] uclogic 0003:256C:006D.0001: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 65.427212][ T4320] udc-core: couldn't find an available UDC or it's busy [ 65.455741][ T4320] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 65.524643][ T4291] usb 4-1: USB disconnect, device number 2 [ 65.830227][ T23] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.0003/input/input7 [ 65.910733][ T23] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.0003/input/input8 [ 65.923751][ T23] uclogic 0003:28BD:0071.0003: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.1-1/input1 [ 66.031453][ T4291] usb 2-1: USB disconnect, device number 2 [ 71.401497][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.407793][ T1421] ieee802154 phy1 wpan1: encryption failed: -22