last executing test programs: 13.305227832s ago: executing program 0 (id=159): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000040)='reno\x00', 0x5) 13.254172313s ago: executing program 0 (id=162): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f00000000c0)={0x6, "52e4ec70a5d59b48499bb23953b44c8234ad533f54bb1dd4c47341bd35dfdc47", 0x5, 0x1000, 0x401, 0x7, 0x10, 0x3, 0x2, 0x3}) 13.174063066s ago: executing program 0 (id=163): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.670142742s ago: executing program 1 (id=173): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 10.561121726s ago: executing program 1 (id=174): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}, @NFTA_INNER_FLAGS={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa0}, 0x1, 0x0, 0x0, 0x88040}, 0x24000000) 10.17987379s ago: executing program 1 (id=175): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r0, 0x1, 0x0, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e402010902"], 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x3a, [0xfffffff8, 0x8, 0x5, 0x10009, 0x8, 0x155f, 0x6, 0x2, 0x25cd, 0x1, 0xb4, 0xa, 0xb2b9, 0x6, 0x8, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x1000, 0x1, 0x8, 0xd, 0x4, 0x12a0, 0x8000, 0x1, 0x7, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10001, 0x5, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x2, 0x2, 0x2, 0x2, 0x7, 0x4, 0x7, 0x4, 0x4007f, 0xffffffff, 0x9], [0x9, 0x16e, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffe, 0x80a, 0x401, 0xa7, 0x1000, 0x0, 0x200b395, 0x400000, 0x2, 0x4, 0x19, 0x7, 0x400001, 0x3, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x96, 0x0, 0xfffffff8, 0x401, 0x6, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x868b, 0x7fff, 0x1, 0x1ce, 0x1, 0x80000004, 0x80000001, 0x6, 0x2, 0x9, 0x95, 0x80000000, 0x4, 0xfffffff9, 0x40000003, 0x1000, 0xfffff804, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x400005, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x3, 0x400, 0x41, 0x6, 0xee4b, 0x2008004, 0x1, 0x8000003, 0x5, 0x89, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x8000, 0x401, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x0, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0x3, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x8000007, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x7, 0x5396, 0x939, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xffffffff, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x0, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0xc, 0x463f, 0x4, 0xdaa, 0x8003, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 10.014037555s ago: executing program 0 (id=176): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="280100002f00010000000000fcdbdf250801f2800c00180008ac0f000010000014000100fc00000000000000000000000000000008004400", @ANYRES32=0x0, @ANYBLOB="d90062802400328008004100b20000000800ca00ac1e000108003d00fcffffff0400c58004008a800800a18004000f80c073bf8f025953f538087c2947af34d793a12e66cd988ba2df542272ddf8f3b0634ff9883b7914bc9c92aafa8bb7b0c0552ff62f4a9716d08229fbc0558c09235f84d6771d08666d8b337ac75c741e4e77f4a9bc443c6a07af22469f8689554aa0e81e897ed6146a5b6cb1adf5cecbe76fb07a1c2610d17b8d3c80cfe639ce824597e338c1bb6a7d118257e8e8ac7e1f1c03054e4ec9bce7dfd5f3620229ab929fb9ebb5658776ab2600000010000280", @ANYBLOB="aa45fba3b0"], 0x128}], 0x1, 0x0, 0x0, 0x1}, 0x0) 9.982330956s ago: executing program 0 (id=177): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) tee(r0, r1, 0x10, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = socket(0x1, 0x800, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x24040000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockname$netlink(r5, &(0x7f0000000040), &(0x7f0000000100)=0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85513, &(0x7f0000002600)={{0x1, 0x2, 0x0, 0x0, 'syz0\x00'}, 0x1, [0xd, 0x0, 0x100000001, 0x3, 0x0, 0x10001, 0xff, 0x0, 0x1000000000000000, 0x100000000000000, 0x2, 0x0, 0x0, 0xffffffffffffffc0, 0x0, 0x3, 0x4, 0x0, 0x7, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xc6c, 0x10, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0xffffffff80000001, 0xdad, 0x0, 0x1, 0x7, 0x0, 0x8, 0x81, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x3b, 0xffffffffffffffff, 0x0, 0x7b, 0x1, 0x3, 0x2, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0xa, 0x0, 0x48a0, 0x0, 0x0, 0x9, 0x3, 0x8838, 0x0, 0x1, 0x4, 0x8000000, 0x2, 0x0, 0x3, 0xc291, 0x0, 0x40c, 0x0, 0x8000000000000020, 0x0, 0xfff, 0x8, 0x0, 0x5, 0x0, 0x1, 0x7, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3f, 0x0, 0x7, 0x8001, 0x0, 0x1, 0x1000, 0x2, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x100009]}) 8.745142799s ago: executing program 3 (id=178): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, 0x0, 0x161002, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000002000)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x2000c080) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001b80)={0x2f}) 8.401928091s ago: executing program 4 (id=180): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x4, 0x0, 0x1, 0x14, 0x100, &(0x7f0000000440)="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"}) 7.684997246s ago: executing program 3 (id=181): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b000000000000"], 0x50) syz_io_uring_setup(0x1, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x8, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, 0x0) close(0x3) setxattr$system_posix_acl(0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000010005000000000004000100000001000000e4dd8c61e54402"], 0x24, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x353, 0x6, 0x88c, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0xe}, 0x50) r4 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r6, 0x80) accept$netrom(r6, 0x0, 0x0) 6.666756871s ago: executing program 4 (id=182): r0 = syz_open_dev$media(&(0x7f0000000080), 0x4, 0xc00) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000340)={0x80000000, 0x0, 0x0}) 6.37796732s ago: executing program 4 (id=183): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000002c0)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000008c0)={0x34, &(0x7f0000000680)={0x0, 0x3e, 0x1, "fe"}, 0x0, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x5}, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 6.282203874s ago: executing program 1 (id=186): inotify_init() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = open(0x0, 0x60840, 0x0) fcntl$setlease(r5, 0x400, 0x2) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x2000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000000c0)=0x8) r7 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, 0x0, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 6.206727596s ago: executing program 2 (id=187): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0x88, 0x0, 0x5, 0x1, 0x0, 0x1, 0x8000064}, 0x8) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) 4.833958474s ago: executing program 1 (id=188): syz_open_dev$dri(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x80000, 0x1ff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000048, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) accept$alg(r3, 0x0, 0x0) 3.881810327s ago: executing program 2 (id=189): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000b40)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x8, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x1, 0x5, 0x200002, 0x7ff, 0x4, 0x3de2}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x101, 0x7, 0xa, 0x57, 0x6, 0x1000}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8004001}, 0x94) 3.828943889s ago: executing program 3 (id=190): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000180)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x15) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}}) 3.78202226s ago: executing program 2 (id=191): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x54}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) 2.417742127s ago: executing program 2 (id=192): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) r4 = accept(r0, 0x0, 0x0) recvmsg(r4, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600), 0x0, 0x0, 0x0, 0x1000000}, 0x0) 2.33367711s ago: executing program 4 (id=193): r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x42474752, 0x500, 0x2d0, 0x3, @discrete={0x1, 0x8}}) 2.230104243s ago: executing program 3 (id=194): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r0 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000740)={&(0x7f0000000100)=@nfc={0x2d, 0x0, 0xffffffffffffffff, 0x1}, 0x80, 0x0}, 0x2000c805) 2.207185764s ago: executing program 4 (id=195): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2282, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x48b, 0x0, 0x2}]}) 2.183771635s ago: executing program 0 (id=196): socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x7eeb}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket(0x14, 0x2, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, 0x0, &(0x7f0000000140)) 1.998007731s ago: executing program 3 (id=197): socket(0xa, 0x3, 0x3a) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20004450) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000005, 0x12, 0xffffffffffffffff, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = getpgrp(r3) rt_tgsigqueueinfo(r3, r6, 0x1d, &(0x7f0000000240)={0x25, 0x7, 0xc}) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae03, 0xa3) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0}, 0x24000840) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) poll(0x0, 0x0, 0x6) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000040)={0x400000000000027c, &(0x7f0000000080)}) 1.830839257s ago: executing program 4 (id=198): r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x5, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 883.25645ms ago: executing program 3 (id=199): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xfffffbff7ffffffb, 0x1222e2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000280)={r1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x7fffffffffffffff]}}) sendfile(r0, r1, 0x0, 0x3) 266.013811ms ago: executing program 2 (id=200): syz_open_dev$ttys(0xc, 0x2, 0x1) close(0x3) 100.072957ms ago: executing program 2 (id=201): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f0000006800), 0x0) close(0x3) 0s ago: executing program 1 (id=202): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000380)={0x20000005, 0x1, 0x0, "eee98fa706178749cb4dfd93e33c9b6b7bd152f35ed734fc70157dcb4f1891e2", 0x43353039}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.80' (ED25519) to the list of known hosts. [ 51.646274][ T4171] cgroup: Unknown subsys name 'net' [ 51.787234][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.266662][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 54.637874][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 54.715127][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 54.751365][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 54.808595][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.816573][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.824756][ T4188] device bridge_slave_0 entered promiscuous mode [ 54.836643][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.844374][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.852518][ T4188] device bridge_slave_1 entered promiscuous mode [ 54.872704][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 54.951868][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.989628][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.005546][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.012798][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.020611][ T4186] device bridge_slave_0 entered promiscuous mode [ 55.028293][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 55.063648][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.070735][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.078689][ T4186] device bridge_slave_1 entered promiscuous mode [ 55.090055][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.097246][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.105950][ T4189] device bridge_slave_0 entered promiscuous mode [ 55.119639][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.126877][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.135341][ T4189] device bridge_slave_1 entered promiscuous mode [ 55.143033][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.150102][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.157883][ T4187] device bridge_slave_0 entered promiscuous mode [ 55.186460][ T4188] team0: Port device team_slave_0 added [ 55.199764][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.206960][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.215533][ T4187] device bridge_slave_1 entered promiscuous mode [ 55.238327][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.248862][ T4188] team0: Port device team_slave_1 added [ 55.272275][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.288645][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.305460][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.329144][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.345215][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.359903][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.367108][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.393293][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.432352][ T4186] team0: Port device team_slave_0 added [ 55.446696][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.453758][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.480121][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.502213][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.509292][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.517567][ T4185] device bridge_slave_0 entered promiscuous mode [ 55.526974][ T4186] team0: Port device team_slave_1 added [ 55.535098][ T4187] team0: Port device team_slave_0 added [ 55.543232][ T4187] team0: Port device team_slave_1 added [ 55.556647][ T4189] team0: Port device team_slave_0 added [ 55.562964][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.570039][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.578415][ T4185] device bridge_slave_1 entered promiscuous mode [ 55.614596][ T4189] team0: Port device team_slave_1 added [ 55.621222][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.628183][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.654190][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.679393][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.686581][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.713135][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.726071][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.744633][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.763463][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.770419][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.803422][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.822235][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.829207][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.855341][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.886737][ T4188] device hsr_slave_0 entered promiscuous mode [ 55.894342][ T4188] device hsr_slave_1 entered promiscuous mode [ 55.914055][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.921189][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.947554][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.980323][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.987617][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.014135][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.034258][ T4185] team0: Port device team_slave_0 added [ 56.053208][ T4186] device hsr_slave_0 entered promiscuous mode [ 56.063904][ T4186] device hsr_slave_1 entered promiscuous mode [ 56.070501][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.078476][ T4186] Cannot create hsr debugfs directory [ 56.089444][ T4185] team0: Port device team_slave_1 added [ 56.104747][ T4187] device hsr_slave_0 entered promiscuous mode [ 56.111720][ T4187] device hsr_slave_1 entered promiscuous mode [ 56.118253][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.126736][ T4187] Cannot create hsr debugfs directory [ 56.191318][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.198296][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.224649][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.261157][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.268137][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.294835][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.308696][ T4189] device hsr_slave_0 entered promiscuous mode [ 56.316330][ T4189] device hsr_slave_1 entered promiscuous mode [ 56.323382][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.331445][ T4189] Cannot create hsr debugfs directory [ 56.351981][ T2365] Bluetooth: hci1: command 0x0409 tx timeout [ 56.421101][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 56.421101][ T2365] Bluetooth: hci3: command 0x0409 tx timeout [ 56.433336][ T2365] Bluetooth: hci2: command 0x0409 tx timeout [ 56.439556][ T2365] Bluetooth: hci0: command 0x0409 tx timeout [ 56.462677][ T4185] device hsr_slave_0 entered promiscuous mode [ 56.469736][ T4185] device hsr_slave_1 entered promiscuous mode [ 56.476707][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.484687][ T4185] Cannot create hsr debugfs directory [ 56.666139][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.679166][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.692593][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.702427][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.743137][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.752890][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.778587][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.787691][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.860354][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.885373][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.899058][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.918185][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.977776][ T4189] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.011963][ T4189] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.023977][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.045496][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.055058][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.064750][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.074619][ T4189] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.083723][ T4189] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.102990][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.118506][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.129183][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.139124][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.155513][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.189944][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.199077][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.209758][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.219035][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.228709][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.237994][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.245222][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.259239][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.268743][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.277637][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.286423][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.293656][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.303180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.357815][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.371612][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.383729][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.390891][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.400617][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.409413][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.418270][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.426878][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.434065][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.443306][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.452542][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.461481][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.470655][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.479664][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.509664][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.520315][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.535770][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.544988][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.553892][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.562485][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.571687][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.581129][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.589587][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.598163][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.607009][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.618049][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.626521][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.646277][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.655724][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.665826][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.688830][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.724064][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.739791][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.749593][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.762033][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.770397][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.778786][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.802714][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.811735][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.822919][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.833427][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.842639][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.877978][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.890212][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.907299][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.914452][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.930025][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.939300][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.956491][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.963666][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.974253][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.983201][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.992891][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.001989][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.009058][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.035766][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.055607][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.067637][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.078369][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.095719][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.109827][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.117083][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.125234][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.134252][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.143832][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.153377][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.162953][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.171832][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.180399][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.190613][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.199229][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.207684][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.217338][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.237533][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.248531][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.265396][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.275810][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.284929][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.293868][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.302502][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.311161][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.319436][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.327318][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.341694][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.349548][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.358332][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.391544][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.403741][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.422121][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.429620][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.431297][ T4230] Bluetooth: hci1: command 0x041b tx timeout [ 58.445264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.454973][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.464345][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.473680][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.485830][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.497045][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.505261][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 58.513304][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.521187][ T4232] Bluetooth: hci2: command 0x041b tx timeout [ 58.528890][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.536540][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 58.547790][ T4232] Bluetooth: hci4: command 0x041b tx timeout [ 58.559097][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.583987][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.593679][ T4237] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.600816][ T4237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.689119][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.697436][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.713866][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.729728][ T4237] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.736857][ T4237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.746086][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.755097][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.765164][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.773952][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.782740][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.790316][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.804360][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.840333][ T4186] device veth0_vlan entered promiscuous mode [ 58.857597][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.867200][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.877016][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.886637][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.895942][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.905233][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.914171][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.924969][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.934386][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.942242][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.955069][ T4186] device veth1_vlan entered promiscuous mode [ 58.969957][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.981807][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.997173][ T4188] device veth0_vlan entered promiscuous mode [ 59.012228][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.029740][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.039087][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.053551][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.066427][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.076733][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.126900][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.142992][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.154605][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.164406][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.182361][ T4188] device veth1_vlan entered promiscuous mode [ 59.190375][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.205288][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.217098][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.226405][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.243711][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.259044][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.268922][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.284487][ T4186] device veth0_macvtap entered promiscuous mode [ 59.327582][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.338249][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.349253][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.358073][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.371048][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.379659][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.390133][ T4189] device veth0_vlan entered promiscuous mode [ 59.406084][ T4186] device veth1_macvtap entered promiscuous mode [ 59.427796][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.437505][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.452884][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.480683][ T4188] device veth0_macvtap entered promiscuous mode [ 59.497163][ T4188] device veth1_macvtap entered promiscuous mode [ 59.504930][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.514580][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.523801][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.533052][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.545768][ T4189] device veth1_vlan entered promiscuous mode [ 59.556196][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.564879][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.573490][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.594773][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.606884][ T4187] device veth0_vlan entered promiscuous mode [ 59.616214][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.627781][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.636238][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.646021][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.654810][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.669237][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.680428][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.692463][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.705333][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.721335][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.730123][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.740073][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.748235][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.757216][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.766329][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.775997][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.787169][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.799788][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.811210][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.820263][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.830835][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.839547][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.851541][ T4187] device veth1_vlan entered promiscuous mode [ 59.868526][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.877296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.886492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.895959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.908371][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.917670][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.926842][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.939128][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.989094][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.997888][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.007704][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.016427][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.025950][ T4189] device veth0_macvtap entered promiscuous mode [ 60.044828][ T4187] device veth0_macvtap entered promiscuous mode [ 60.071125][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.079420][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.089001][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.100185][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.113909][ T4189] device veth1_macvtap entered promiscuous mode [ 60.162119][ T4187] device veth1_macvtap entered promiscuous mode [ 60.208083][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.216416][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.225122][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.234960][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.243491][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.251730][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.263582][ T4185] device veth0_vlan entered promiscuous mode [ 60.284801][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.295622][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.306575][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.317614][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.329372][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.346017][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.357058][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.372654][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.383271][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.393740][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.404969][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.416008][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.439497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.448803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.457844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.466728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.481918][ T4185] device veth1_vlan entered promiscuous mode [ 60.493757][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.504764][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 60.511668][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.522891][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.533626][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.545686][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.559790][ T4237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.566362][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.568397][ T4237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.578714][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.591106][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 60.597500][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.606884][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 60.615510][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.629411][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 60.631616][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.637035][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 60.648945][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.666153][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.693407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.702610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.710589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.719874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.728982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.737703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.747011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.758373][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.767979][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.776912][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.785906][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.824874][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.834003][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.844242][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.855331][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.890533][ T4185] device veth0_macvtap entered promiscuous mode [ 60.898770][ T4237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.908426][ T4237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.928620][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.937570][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.946706][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.955198][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.969951][ T4185] device veth1_macvtap entered promiscuous mode [ 60.979944][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.989028][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.048544][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.057718][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.067484][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.078509][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.088703][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.100087][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.109953][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.120660][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.131195][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.143884][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.155359][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.191691][ T4237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.192584][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.213880][ T4237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.217172][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.241954][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.256192][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.266435][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.277006][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.287260][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.298564][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.308855][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.319861][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.331196][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.346534][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.355394][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.364761][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.399521][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.421457][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.431824][ T4237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.439660][ T4237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.446778][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.460677][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.491426][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.602424][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.620634][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.667929][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.761959][ T4237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.814410][ T4237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.895256][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.896180][ T1225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.903791][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.920044][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.920280][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.928319][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.945812][ T1225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.848691][ T4230] Bluetooth: hci1: command 0x0419 tx timeout [ 62.866567][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 62.872895][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 62.918648][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 62.930906][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 62.949584][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.966713][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.975444][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.997449][ T4270] device syzkaller1 entered promiscuous mode [ 63.237473][ T4287] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 63.269215][ T4285] device vlan2 entered promiscuous mode [ 63.361814][ T4290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 63.591112][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 63.850952][ T4261] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 63.891039][ T4264] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 63.931023][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 63.971166][ T13] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.981947][ T13] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 63.991204][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.003872][ T13] usb 1-1: config 0 descriptor?? [ 64.045531][ T13] pwc: Askey VC010 type 2 USB webcam detected. [ 64.059060][ T4290] syz.4.5 (4290) used greatest stack depth: 19928 bytes left [ 64.131699][ T4261] usb 4-1: Using ep0 maxpacket: 32 [ 64.151025][ T4264] usb 2-1: Using ep0 maxpacket: 8 [ 64.272567][ T4261] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 64.283715][ T4261] usb 4-1: config 0 interface 0 has no altsetting 0 [ 64.290385][ T4261] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 64.300228][ T4264] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 155, setting to 64 [ 64.311450][ T4261] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.320209][ T4264] usb 2-1: config 0 interface 0 has no altsetting 0 [ 64.332015][ T4261] usb 4-1: config 0 descriptor?? [ 64.341750][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.355106][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.366398][ T23] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 64.471116][ T13] pwc: recv_control_msg error -32 req 02 val 2b00 [ 64.511008][ T13] pwc: recv_control_msg error -32 req 02 val 2700 [ 64.527851][ T4264] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 64.540583][ T4264] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.550951][ T13] pwc: recv_control_msg error -32 req 02 val 2c00 [ 64.555064][ T4264] usb 2-1: Product: syz [ 64.563423][ T4264] usb 2-1: Manufacturer: syz [ 64.568061][ T4264] usb 2-1: SerialNumber: syz [ 64.579690][ T23] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 64.591033][ T13] pwc: recv_control_msg error -32 req 04 val 1000 [ 64.592883][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.606725][ T4264] usb 2-1: config 0 descriptor?? [ 64.623161][ T23] usb 3-1: Product: syz [ 64.627372][ T23] usb 3-1: Manufacturer: syz [ 64.630963][ T13] pwc: recv_control_msg error -32 req 04 val 1300 [ 64.637467][ T23] usb 3-1: SerialNumber: syz [ 64.672699][ T4264] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 64.681906][ T13] pwc: recv_control_msg error -32 req 04 val 1400 [ 64.904846][ T4264] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 64.921807][ T4264] snd_usb_toneport: probe of 2-1:0.0 failed with error -22 [ 64.941272][ T13] pwc: recv_control_msg error -71 req 02 val 2100 [ 64.961054][ T13] pwc: recv_control_msg error -71 req 04 val 1500 [ 64.991027][ T13] pwc: recv_control_msg error -71 req 02 val 2500 [ 65.021029][ T13] pwc: recv_control_msg error -71 req 02 val 2400 [ 65.040943][ T13] pwc: recv_control_msg error -71 req 02 val 2600 [ 65.062466][ T13] pwc: recv_control_msg error -71 req 02 val 2900 [ 65.080961][ T13] pwc: recv_control_msg error -71 req 02 val 2800 [ 65.115930][ T4174] usb 2-1: USB disconnect, device number 2 [ 65.208169][ T4261] corsair-cpro 0003:1B1C:0C10.0001: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 65.257004][ T13] pwc: recv_control_msg error -71 req 04 val 1100 [ 65.281039][ T13] pwc: recv_control_msg error -71 req 04 val 1200 [ 65.289544][ T13] pwc: Registered as video103. [ 65.298064][ T13] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 65.316059][ T13] usb 1-1: USB disconnect, device number 2 [ 66.254826][ T26] audit: type=1326 audit(1775022265.876:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4321 comm="syz.4.14" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7a33343819 code=0x0 [ 66.288338][ T4261] corsair-cpro: probe of 0003:1B1C:0C10.0001 failed with error -5 [ 66.548373][ T4261] usb 4-1: USB disconnect, device number 2 [ 67.113785][ T4342] sg_write: data in/out 131/8 bytes for SCSI command 0x69-- guessing data in; [ 67.113785][ T4342] program syz.1.17 not setting count and/or reply_len properly [ 67.152206][ T23] cdc_ncm 3-1:1.0: bind() failure [ 67.233168][ T23] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 67.290353][ T23] cdc_ncm 3-1:1.1: bind() failure [ 67.382405][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 67.391383][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 67.400460][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 67.409398][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 67.418489][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 67.428639][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 67.449519][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 67.501067][ T23] usb 3-1: USB disconnect, device number 2 [ 67.721973][ T4343] fido_id[4343]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 67.750582][ T4345] overlayfs: failed to create directory ./file0/work (errno: 22); mounting read-only [ 67.891230][ T4356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22'. [ 67.932177][ T4356] Zero length message leads to an empty skb [ 67.950691][ T4356] tipc: Started in network mode [ 67.956887][ T4356] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 68.001326][ T4356] tipc: Enabled bearer , priority 10 [ 68.366192][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 68.384971][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 68.394036][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 68.513914][ T4369] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 69.104148][ T4228] tipc: Node number set to 1 [ 71.421827][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.428713][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.550520][ T4389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.31'. [ 72.563488][ T4401] overlayfs: failed to resolve './file0': -2 [ 72.998585][ T4403] capability: warning: `syz.0.35' uses deprecated v2 capabilities in a way that may be insecure [ 75.288741][ T4427] ODEBUG: Out of memory. ODEBUG disabled [ 76.426414][ T4427] syz.1.34 (4427): drop_caches: 2 [ 76.888205][ T4464] tmpfs: Bad value for 'mpol' [ 79.072260][ T4481] sched: RT throttling activated [ 81.854204][ T1108] cfg80211: failed to load regulatory.db [ 81.885560][ T4489] qnx4: no qnx4 filesystem (no root dir). [ 86.390164][ T4532] netlink: 260 bytes leftover after parsing attributes in process `syz.2.70'. [ 87.414294][ T4541] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 87.422918][ T4541] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 87.431480][ T4541] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 91.702079][ T4605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.91'. [ 98.320912][ T1111] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 98.691021][ T1111] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.715923][ T1111] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 98.749229][ T1111] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 98.758851][ T1111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.876299][ T1111] usb 4-1: config 0 descriptor?? [ 99.017015][ T1111] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 99.382070][ T1111] usb 4-1: USB disconnect, device number 3 [ 99.640843][ T4229] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 99.852524][ T4669] capability: warning: `syz.2.110' uses 32-bit capabilities (legacy support in use) [ 99.960985][ T4229] usb 2-1: Using ep0 maxpacket: 32 [ 100.083547][ T4674] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 100.111746][ T4229] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 100.963536][ T4229] usb 2-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 101.038429][ T4229] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 101.312090][ T4229] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 101.333472][ T4229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.398679][ T4229] usb 2-1: Product: syz [ 101.417371][ T4229] usb 2-1: Manufacturer: syz [ 101.509707][ T4229] usb 2-1: SerialNumber: syz [ 101.671079][ T4229] usb 2-1: can't set config #155, error -71 [ 101.713937][ T4229] usb 2-1: USB disconnect, device number 3 [ 102.026926][ T4712] Cannot find add_set index 65532 as target [ 102.103595][ T4712] process 'syz.3.119' launched './file1' with NULL argv: empty string added [ 103.030932][ T4229] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 103.353100][ T4229] usb 2-1: Using ep0 maxpacket: 32 [ 103.600366][ T4229] usb 2-1: config 247 has an invalid interface number: 177 but max is 0 [ 103.609365][ T4229] usb 2-1: config 247 has no interface number 0 [ 104.524221][ T4229] usb 2-1: config 247 interface 177 altsetting 246 bulk endpoint 0x8 has invalid maxpacket 511 [ 104.697036][ T4229] usb 2-1: config 247 interface 177 altsetting 246 endpoint 0xD has an invalid bInterval 185, changing to 11 [ 104.727036][ T4229] usb 2-1: config 247 interface 177 has no altsetting 0 [ 105.200993][ T4229] usb 2-1: string descriptor 0 read error: -71 [ 105.207348][ T4229] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0108, bcdDevice=58.f4 [ 105.249070][ T4229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.260412][ T4746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.134'. [ 105.296806][ T4229] usb 2-1: can't set config #247, error -71 [ 105.306967][ T4229] usb 2-1: USB disconnect, device number 4 [ 105.309911][ T4750] netlink: 'syz.3.136': attribute type 1 has an invalid length. [ 105.326395][ T4754] Cannot find map_set index 0 as target [ 105.549593][ T4762] syz.2.140 uses obsolete (PF_INET,SOCK_PACKET) [ 108.785298][ T4814] netlink: 312 bytes leftover after parsing attributes in process `syz.3.157'. [ 109.001047][ T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 109.260946][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 109.389870][ T7] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 109.431670][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 109.449163][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 109.610959][ T7] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 109.631495][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.639932][ T7] usb 2-1: Product: syz [ 109.667540][ T7] usb 2-1: Manufacturer: syz [ 109.675104][ T7] usb 2-1: SerialNumber: syz [ 109.685751][ T7] usb 2-1: config 0 descriptor?? [ 110.030990][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 110.370932][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 110.671364][ T23] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 110.793332][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.912493][ T23] usb 1-1: Product: syz [ 110.924449][ T23] usb 1-1: Manufacturer: syz [ 110.936411][ T23] usb 1-1: SerialNumber: syz [ 110.988816][ T23] usb 1-1: config 0 descriptor?? [ 111.421824][ T4818] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.430387][ T4818] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.485424][ T4261] usb 2-1: USB disconnect, device number 5 [ 111.603997][ T4853] binder: BINDER_SET_CONTEXT_MGR already set [ 111.615368][ T4853] binder: 4851:4853 ioctl 4018620d 200000000040 returned -16 [ 111.640953][ T23] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 111.680656][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 111.735326][ T23] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 111.769750][ T23] usb 1-1: media controller created [ 111.836972][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 112.031365][ T23] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 112.047912][ T23] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 112.279452][ T4174] usb 1-1: USB disconnect, device number 3 [ 112.374689][ T4174] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 112.794341][ T4818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.856419][ T4818] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.970843][ T4682] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 113.341090][ T4682] usb 2-1: config 0 has no interfaces? [ 113.531200][ T4682] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 113.549540][ T4682] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 113.577297][ T4682] usb 2-1: Product: syz [ 113.588181][ T4682] usb 2-1: Manufacturer: syz [ 113.605169][ T4682] usb 2-1: SerialNumber: syz [ 113.629963][ T4682] usb 2-1: config 0 descriptor?? [ 113.753663][ T4818] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.762691][ T4818] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.772886][ T4818] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.788977][ T4818] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.054730][ T4840] netlink: 'syz.3.166': attribute type 12 has an invalid length. [ 114.286898][ T4885] ======================================================= [ 114.286898][ T4885] WARNING: The mand mount option has been deprecated and [ 114.286898][ T4885] and is ignored by this kernel. Remove the mand [ 114.286898][ T4885] option from the mount to silence this warning. [ 114.286898][ T4885] ======================================================= [ 115.606899][ T4891] fuse: Unknown parameter 'user00000000000000000000' [ 116.563311][ T4261] usb 2-1: USB disconnect, device number 6 [ 118.098366][ T1111] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 120.561014][ T1111] usb 5-1: device descriptor read/all, error -71 [ 122.051574][ T4941] loop9: detected capacity change from 0 to 7 [ 122.093615][ T4289] Dev loop9: unable to read RDB block 7 [ 122.100202][ T4289] loop9: unable to read partition table [ 122.195515][ T4289] loop9: partition table beyond EOD, truncated [ 122.492748][ T4947] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 122.552793][ T4941] Dev loop9: unable to read RDB block 7 [ 122.558667][ T4941] loop9: unable to read partition table [ 122.599946][ T4941] loop9: partition table beyond EOD, truncated [ 122.678134][ T4941] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 122.846881][ T1111] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 122.876476][ T4940] [ 122.878849][ T4940] ====================================================== [ 122.885869][ T4940] WARNING: possible circular locking dependency detected [ 122.892887][ T4940] syzkaller #0 Not tainted [ 122.897302][ T4940] ------------------------------------------------------ [ 122.904307][ T4940] syz.3.199/4940 is trying to acquire lock: [ 122.910367][ T4940] ffff888060605138 ((wq_completion)loop9){+.+.}-{0:0}, at: flush_workqueue+0x150/0x13d0 [ 122.920109][ T4940] [ 122.920109][ T4940] but task is already holding lock: [ 122.927463][ T4940] ffff8881476ef468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 122.936264][ T4940] [ 122.936264][ T4940] which lock already depends on the new lock. [ 122.936264][ T4940] [ 122.946744][ T4940] [ 122.946744][ T4940] the existing dependency chain (in reverse order) is: [ 122.955839][ T4940] [ 122.955839][ T4940] -> #6 (&lo->lo_mutex){+.+.}-{3:3}: [ 122.963393][ T4940] __mutex_lock_common+0x1e3/0x2400 [ 122.969112][ T4940] mutex_lock_killable_nested+0x17/0x20 [ 122.975185][ T4940] lo_open+0x6a/0x100 [ 122.979691][ T4940] blkdev_get_whole+0x90/0x390 [ 122.984973][ T4940] blkdev_get_by_dev+0x2d0/0xa60 [ 122.990546][ T4940] blkdev_open+0x12d/0x2c0 [ 122.995481][ T4940] do_dentry_open+0x7ff/0xf80 [ 123.000684][ T4940] path_openat+0x26f5/0x2fa0 [ 123.005796][ T4940] do_filp_open+0x1e2/0x410 [ 123.010815][ T4940] do_sys_openat2+0x150/0x4b0 [ 123.016020][ T4940] __x64_sys_openat+0x135/0x160 [ 123.021383][ T4940] do_syscall_64+0x4c/0xa0 [ 123.026319][ T4940] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.032739][ T4940] [ 123.032739][ T4940] -> #5 (&disk->open_mutex){+.+.}-{3:3}: [ 123.040555][ T4940] __mutex_lock_common+0x1e3/0x2400 [ 123.046272][ T4940] mutex_lock_nested+0x17/0x20 [ 123.051555][ T4940] blkdev_get_by_dev+0x157/0xa60 [ 123.057011][ T4940] swsusp_check+0xa1/0x2b0 [ 123.061945][ T4940] software_resume+0xc6/0x3b0 [ 123.067138][ T4940] resume_store+0xe4/0x130 [ 123.072071][ T4940] kernfs_fop_write_iter+0x379/0x4c0 [ 123.077924][ T4940] vfs_write+0x745/0xd60 [ 123.082707][ T4940] ksys_write+0x152/0x260 [ 123.087571][ T4940] do_syscall_64+0x4c/0xa0 [ 123.092515][ T4940] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.098930][ T4940] [ 123.098930][ T4940] -> #4 (system_transition_mutex/1){+.+.}-{3:3}: [ 123.107444][ T4940] __mutex_lock_common+0x1e3/0x2400 [ 123.113160][ T4940] mutex_lock_nested+0x17/0x20 [ 123.118449][ T4940] software_resume+0x7c/0x3b0 [ 123.123806][ T4940] resume_store+0xe4/0x130 [ 123.128736][ T4940] kernfs_fop_write_iter+0x379/0x4c0 [ 123.134539][ T4940] vfs_write+0x745/0xd60 [ 123.139406][ T4940] ksys_write+0x152/0x260 [ 123.144265][ T4940] do_syscall_64+0x4c/0xa0 [ 123.149205][ T4940] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.155709][ T4940] [ 123.155709][ T4940] -> #3 (&of->mutex){+.+.}-{3:3}: [ 123.163023][ T4940] __mutex_lock_common+0x1e3/0x2400 [ 123.168742][ T4940] mutex_lock_nested+0x17/0x20 [ 123.174024][ T4940] kernfs_seq_start+0x51/0x3c0 [ 123.179400][ T4940] seq_read_iter+0x3c4/0xd50 [ 123.184514][ T4940] vfs_read+0x759/0xd60 [ 123.189234][ T4940] ksys_read+0x152/0x260 [ 123.193991][ T4940] do_syscall_64+0x4c/0xa0 [ 123.199108][ T4940] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.205516][ T4940] [ 123.205516][ T4940] -> #2 (&p->lock){+.+.}-{3:3}: [ 123.212553][ T4940] __mutex_lock_common+0x1e3/0x2400 [ 123.218282][ T4940] mutex_lock_nested+0x17/0x20 [ 123.223561][ T4940] seq_read_iter+0xad/0xd50 [ 123.228665][ T4940] do_iter_readv_writev+0x47e/0x5f0 [ 123.234399][ T4940] do_iter_read+0x20b/0x7c0 [ 123.239423][ T4940] loop_process_work+0x16dd/0x24a0 [ 123.245050][ T4940] process_one_work+0x85f/0x1010 [ 123.250505][ T4940] worker_thread+0xaa6/0x1290 [ 123.255697][ T4940] kthread+0x436/0x520 [ 123.260279][ T4940] ret_from_fork+0x1f/0x30 [ 123.265213][ T4940] [ 123.265213][ T4940] -> #1 ((work_completion)(&lo->rootcg_work)){+.+.}-{0:0}: [ 123.274587][ T4940] process_one_work+0x7bb/0x1010 [ 123.280044][ T4940] worker_thread+0xaa6/0x1290 [ 123.285238][ T4940] kthread+0x436/0x520 [ 123.289843][ T4940] ret_from_fork+0x1f/0x30 [ 123.294774][ T4940] [ 123.294774][ T4940] -> #0 ((wq_completion)loop9){+.+.}-{0:0}: [ 123.302849][ T4940] __lock_acquire+0x2c42/0x7d10 [ 123.308449][ T4940] lock_acquire+0x19e/0x400 [ 123.313590][ T4940] flush_workqueue+0x16c/0x13d0 [ 123.318978][ T4940] drain_workqueue+0xcf/0x380 [ 123.324185][ T4940] destroy_workqueue+0x7b/0xb20 [ 123.329559][ T4940] __loop_clr_fd+0x234/0xb90 [ 123.334755][ T4940] blkdev_put+0x53f/0x7d0 [ 123.339717][ T4940] blkdev_close+0x76/0xa0 [ 123.344651][ T4940] __fput+0x234/0x930 [ 123.349161][ T4940] task_work_run+0x125/0x1a0 [ 123.354268][ T4940] exit_to_user_mode_loop+0x10f/0x130 [ 123.360161][ T4940] exit_to_user_mode_prepare+0xee/0x180 [ 123.366308][ T4940] syscall_exit_to_user_mode+0x16/0x40 [ 123.372293][ T4940] do_syscall_64+0x58/0xa0 [ 123.377334][ T4940] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.383745][ T4940] [ 123.383745][ T4940] other info that might help us debug this: [ 123.383745][ T4940] [ 123.393962][ T4940] Chain exists of: [ 123.393962][ T4940] (wq_completion)loop9 --> &disk->open_mutex --> &lo->lo_mutex [ 123.393962][ T4940] [ 123.407517][ T4940] Possible unsafe locking scenario: [ 123.407517][ T4940] [ 123.415060][ T4940] CPU0 CPU1 [ 123.420590][ T4940] ---- ---- [ 123.426041][ T4940] lock(&lo->lo_mutex); [ 123.430465][ T4940] lock(&disk->open_mutex); [ 123.437871][ T4940] lock(&lo->lo_mutex); [ 123.444712][ T4940] lock((wq_completion)loop9); [ 123.449556][ T4940] [ 123.449556][ T4940] *** DEADLOCK *** [ 123.449556][ T4940] [ 123.457864][ T4940] 2 locks held by syz.3.199/4940: [ 123.462878][ T4940] #0: ffff8880202c3518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 123.472194][ T4940] #1: ffff8881476ef468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 123.481521][ T4940] [ 123.481521][ T4940] stack backtrace: [ 123.487499][ T4940] CPU: 1 PID: 4940 Comm: syz.3.199 Not tainted syzkaller #0 [ 123.494789][ T4940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 123.504927][ T4940] Call Trace: [ 123.508231][ T4940] [ 123.511158][ T4940] dump_stack_lvl+0x188/0x250 [ 123.515839][ T4940] ? load_image+0x400/0x400 [ 123.520340][ T4940] ? show_regs_print_info+0x20/0x20 [ 123.525537][ T4940] ? print_circular_bug+0x12b/0x1a0 [ 123.530737][ T4940] check_noncircular+0x296/0x330 [ 123.535683][ T4940] ? add_chain_block+0x940/0x940 [ 123.540612][ T4940] ? lockdep_lock+0xf1/0x1f0 [ 123.545198][ T4940] ? lockdep_unlock+0x143/0x2e0 [ 123.550046][ T4940] ? mark_lock+0x94/0x320 [ 123.554494][ T4940] __lock_acquire+0x2c42/0x7d10 [ 123.559368][ T4940] ? __lock_acquire+0x13bc/0x7d10 [ 123.564585][ T4940] ? verify_lock_unused+0x140/0x140 [ 123.569916][ T4940] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 123.575906][ T4940] ? memset+0x1e/0x40 [ 123.579898][ T4940] lock_acquire+0x19e/0x400 [ 123.584403][ T4940] ? flush_workqueue+0x150/0x13d0 [ 123.589433][ T4940] ? __mutex_trylock_common+0x155/0x260 [ 123.595078][ T4940] ? read_lock_is_recursive+0x10/0x10 [ 123.600454][ T4940] ? __init_swait_queue_head+0xa5/0x150 [ 123.606004][ T4940] flush_workqueue+0x16c/0x13d0 [ 123.611210][ T4940] ? flush_workqueue+0x150/0x13d0 [ 123.616253][ T4940] ? __lock_acquire+0x7d10/0x7d10 [ 123.621296][ T4940] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 123.627293][ T4940] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 123.632759][ T4940] ? rcu_work_rcufn+0x120/0x120 [ 123.637608][ T4940] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 123.643242][ T4940] ? finish_wait+0xc0/0x1d0 [ 123.647747][ T4940] drain_workqueue+0xcf/0x380 [ 123.652425][ T4940] destroy_workqueue+0x7b/0xb20 [ 123.657277][ T4940] __loop_clr_fd+0x234/0xb90 [ 123.661868][ T4940] ? lo_release+0x172/0x1f0 [ 123.666378][ T4940] ? lo_open+0x100/0x100 [ 123.670636][ T4940] blkdev_put+0x53f/0x7d0 [ 123.674962][ T4940] blkdev_close+0x76/0xa0 [ 123.679287][ T4940] ? blkdev_open+0x2c0/0x2c0 [ 123.683872][ T4940] __fput+0x234/0x930 [ 123.688052][ T4940] task_work_run+0x125/0x1a0 [ 123.692645][ T4940] exit_to_user_mode_loop+0x10f/0x130 [ 123.698012][ T4940] exit_to_user_mode_prepare+0xee/0x180 [ 123.703556][ T4940] syscall_exit_to_user_mode+0x16/0x40 [ 123.709013][ T4940] do_syscall_64+0x58/0xa0 [ 123.713429][ T4940] ? clear_bhb_loop+0x30/0x80 [ 123.718109][ T4940] ? clear_bhb_loop+0x30/0x80 [ 123.722780][ T4940] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.728763][ T4940] RIP: 0033:0x7f8256a18819 [ 123.733211][ T4940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.753429][ T4940] RSP: 002b:00007ffe9219e4f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 123.761859][ T4940] RAX: 0000000000000000 RBX: 00007f8256c93da0 RCX: 00007f8256a18819 [ 123.769829][ T4940] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 123.777891][ T4940] RBP: 00007f8256c93da0 R08: 00007f8256c92038 R09: 0000000000000000 [ 123.785949][ T4940] R10: 00000000003ffd9c R11: 0000000000000246 R12: 000000000001dfab [ 123.793914][ T4940] R13: 00007f8256c9209c R14: 000000000001dcf5 R15: 00007ffe9219e600 [ 123.801887][ T4940] [ 123.970863][ T4690] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 124.101271][ T1111] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 124.109406][ T1111] usb 5-1: can't read configurations, error -71 [ 124.115886][ T1111] usb usb5-port1: attempt power cycle [ 124.220889][ T4690] usb 3-1: Using ep0 maxpacket: 32 [ 124.341060][ T4690] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 124.351430][ T4690] usb 3-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 124.362145][ T4690] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 124.531289][ T4690] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 124.540344][ T4690] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.549524][ T4690] usb 3-1: Product: syz [ 124.553732][ T4690] usb 3-1: Manufacturer: syz [ 124.558329][ T4690] usb 3-1: SerialNumber: syz [ 124.601899][ T4690] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 124.609519][ T4690] imon 3-1:155.0: unable to initialize intf0, err -19 [ 124.616343][ T4690] imon:imon_probe: failed to initialize context! [ 124.622834][ T4690] imon 3-1:155.0: unable to register, err -19 [ 126.524402][ T4690] usb 3-1: USB disconnect, device number 3 [ 132.822117][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.828447][ T1432] ieee802154 phy1 wpan1: encryption failed: -22