last executing test programs: 2.751604892s ago: executing program 3 (id=4): syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x2, 0xfffffffc, 0x79f, 0x7, 0x4}) r0 = getpgid(0x0) ioprio_set$pid(0x1, r0, 0x6000) 2.647614484s ago: executing program 3 (id=6): syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000680)={[{@umask={'umask', 0x3d, 0x81}}, {@utf8}, {@utf8}, {@namecase}, {@fmask={'fmask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@discard}, {@errors_continue}, {@namecase}]}, 0x1, 0x1555, &(0x7f0000002140)="$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") link(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) 2.364293654s ago: executing program 3 (id=7): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000bfd2b357620012", 0x32}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 1.648449734s ago: executing program 0 (id=1): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) write(r0, &(0x7f0000001640)="8b", 0x11) 1.531234369s ago: executing program 0 (id=8): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}, 0x7f}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x40012100, 0x0) 280.898471ms ago: executing program 0 (id=9): syz_open_dev$video(&(0x7f0000000000), 0x800, 0x80003) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x1, 0x7d, 0x10000, 0x9, 0x4, 0x8000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x9, 0x5, 0x9, 0x0, 0xf, 0x7f, 0xfffffffffffffff6}, 0x0, 0x0) 159.875466ms ago: executing program 4 (id=5): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x5, 0x0, 0x8, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x20037}, 0x60) listen(r0, 0x2) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000240)={0x0, 0x3938700}, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x88002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r1, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r3, &(0x7f0000000340)='1\n', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='./file0', 0x7) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r5, &(0x7f00000004c0)='1', 0x1) 155.432547ms ago: executing program 1 (id=2): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x802, 0xfffffb9a, 0x0, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x83, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0xfffffffe, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x4, 0x80200, 0x2, 0x0, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x7c23, 0x6, 0x6, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8200, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x3, 0x7fff, 0x72c, 0x1c32, 0x7, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0x5, 0x0, 0x6, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x1c709aa8, 0x10, 0xfffffffd, 0x1, 0x1, 0xffffffff, 0x6, 0x3ff, 0x800, 0x7, 0x7fff, 0x96, 0xfffff7a1, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x100, 0x7, 0x6, 0x2, 0x1, 0x80001, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd2, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000004, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x9], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x1, 0x4, 0x4c, 0x2, 0x764, 0xb, 0x402, 0x1, 0xfffffff9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe43, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x8000, 0x5, 0x1, 0x65f413f9, 0x0, 0x20006, 0x1, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0x2, 0x7fff, 0x80000000, 0xfffffff5, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xd, 0xe, 0x2, 0xf, 0xf, 0x1, 0x80000000]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) readv(r2, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) ioctl$UI_DEV_DESTROY(r2, 0x5502) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000540)}], 0x1) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) 83.085183ms ago: executing program 2 (id=3): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x21, 0x8001020, r1, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000640)={0xfffffffb, 0x80000000, 0x4, {0xb, @sdr={0x38303553, 0x4}}, 0x5}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) syz_open_dev$loop(&(0x7f0000000100), 0x284, 0x208000) ioctl$FAT_IOCTL_GET_VOLUME_ID(r3, 0x80047213, &(0x7f0000000240)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r4, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000004c0), 0x404000, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r6, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x2d6}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x64c}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) close_range(r7, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x7d, &(0x7f00000001c0)={r8, 0xe}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) 25.262545ms ago: executing program 3 (id=10): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r3}, 0x50) close(r3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r4 = epoll_create1(0x0) poll(&(0x7f0000000a80), 0x0, 0xdb3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)) shutdown(r5, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)={0x2000200b}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000a0000000400000001"], 0x50) 0s ago: executing program 4 (id=11): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r2, r1, 0x0) openat$comedi(0xffffff9c, 0x0, 0x1c1202, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 36.180860][ T3851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.196815][ T3851] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.61' (ED25519) to the list of known hosts. syzkaller login: [ 57.155803][ T4173] cgroup: Unknown subsys name 'net' [ 57.286343][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.527141][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 59.780566][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 59.853187][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 59.929817][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.937786][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.946419][ T4194] device bridge_slave_0 entered promiscuous mode [ 59.966369][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.973945][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.981729][ T4194] device bridge_slave_1 entered promiscuous mode [ 59.994722][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 60.029030][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.041598][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 60.051538][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.058602][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.066507][ T4187] device bridge_slave_0 entered promiscuous mode [ 60.079339][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.086692][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.094590][ T4187] device bridge_slave_1 entered promiscuous mode [ 60.102474][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 60.113294][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.169389][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.180833][ T4194] team0: Port device team_slave_0 added [ 60.199318][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.209679][ T4194] team0: Port device team_slave_1 added [ 60.265419][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.272438][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.298538][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.310085][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.317588][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.325394][ T4190] device bridge_slave_0 entered promiscuous mode [ 60.334092][ T4187] team0: Port device team_slave_0 added [ 60.339934][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.347980][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.355686][ T4190] device bridge_slave_1 entered promiscuous mode [ 60.384766][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.391766][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.417766][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.432940][ T4187] team0: Port device team_slave_1 added [ 60.444718][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.461752][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.482979][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.490043][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.498278][ T4196] device bridge_slave_0 entered promiscuous mode [ 60.505715][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.513021][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.521042][ T4186] device bridge_slave_0 entered promiscuous mode [ 60.542066][ T4190] team0: Port device team_slave_0 added [ 60.554248][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.561471][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.569057][ T4196] device bridge_slave_1 entered promiscuous mode [ 60.582463][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.589501][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.597814][ T4186] device bridge_slave_1 entered promiscuous mode [ 60.606249][ T4190] team0: Port device team_slave_1 added [ 60.624042][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.631159][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.657532][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.683663][ T4194] device hsr_slave_0 entered promiscuous mode [ 60.690225][ T4194] device hsr_slave_1 entered promiscuous mode [ 60.702457][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.709398][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.735775][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.748422][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.755551][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.781665][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.794070][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.811135][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.840181][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.847173][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.873375][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.888979][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.900925][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.911837][ T4196] team0: Port device team_slave_0 added [ 60.933692][ T4196] team0: Port device team_slave_1 added [ 60.967537][ T4186] team0: Port device team_slave_0 added [ 60.975532][ T4186] team0: Port device team_slave_1 added [ 61.016810][ T4190] device hsr_slave_0 entered promiscuous mode [ 61.023672][ T4190] device hsr_slave_1 entered promiscuous mode [ 61.030080][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.038155][ T4190] Cannot create hsr debugfs directory [ 61.049562][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.058483][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.084435][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.104744][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.111920][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.138182][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.155675][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.162664][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.188586][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.202800][ T4187] device hsr_slave_0 entered promiscuous mode [ 61.209432][ T4187] device hsr_slave_1 entered promiscuous mode [ 61.216311][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.223993][ T4187] Cannot create hsr debugfs directory [ 61.229799][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.237283][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.263287][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.358868][ T4186] device hsr_slave_0 entered promiscuous mode [ 61.365833][ T4186] device hsr_slave_1 entered promiscuous mode [ 61.372725][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.380279][ T4186] Cannot create hsr debugfs directory [ 61.419137][ T4196] device hsr_slave_0 entered promiscuous mode [ 61.425774][ T4196] device hsr_slave_1 entered promiscuous mode [ 61.432884][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.440489][ T4196] Cannot create hsr debugfs directory [ 61.608173][ T4194] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.615521][ T1106] Bluetooth: hci2: command 0x0409 tx timeout [ 61.621014][ T4175] Bluetooth: hci3: command 0x0409 tx timeout [ 61.627641][ T4175] Bluetooth: hci1: command 0x0409 tx timeout [ 61.645295][ T4194] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.645612][ T4175] Bluetooth: hci0: command 0x0409 tx timeout [ 61.660087][ T4194] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.675867][ T4194] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.690700][ T2302] Bluetooth: hci4: command 0x0409 tx timeout [ 61.743367][ T4190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.756255][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.766657][ T4190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.778187][ T4190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.787000][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.796449][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.805473][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.814304][ T4190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.893850][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.904868][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.915934][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.928421][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.945877][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.977568][ T4196] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.988075][ T4196] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.000264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.009076][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.036604][ T4196] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.046532][ T4196] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.067737][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.084643][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.109998][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.123744][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.136170][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.145052][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.172680][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.182443][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.192079][ T1203] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.199232][ T1203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.208361][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.217419][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.228241][ T1203] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.235333][ T1203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.243761][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.253014][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.262760][ T1203] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.269808][ T1203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.278069][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.286614][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.295031][ T1203] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.302081][ T1203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.310160][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.318791][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.327875][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.343908][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.361095][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.368779][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.377634][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.386415][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.395210][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.404111][ T1203] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.411200][ T1203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.425088][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.434458][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.443437][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.452078][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.460800][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.479557][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.501693][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.509629][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.518336][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.527780][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.536525][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.545899][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.554753][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.563134][ T1203] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.570159][ T1203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.578116][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.587417][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.596824][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.605729][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.614658][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.638662][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.646717][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.654801][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.665099][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.674531][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.683286][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.691544][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.699703][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.708906][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.717411][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.726012][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.735252][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.744401][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.754683][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.764940][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.784540][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.816432][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.829313][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.838070][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.846717][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.868853][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.877917][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.887419][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.896814][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.908208][ T1203] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.915305][ T1203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.925039][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.933763][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.942651][ T1203] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.949692][ T1203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.957295][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.968549][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.982430][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.012056][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.029205][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.046131][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.065681][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.074875][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.085312][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.094292][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.102673][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.119061][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.142966][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.149960][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.159594][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.167634][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.175979][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.183699][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.192360][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.199742][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.218830][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.248286][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.260692][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.283891][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.297666][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.306840][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.315639][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.324074][ T1203] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.331135][ T1203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.338844][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.347673][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.356520][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.365782][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.375130][ T1203] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.382475][ T1203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.390088][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.398971][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.407533][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.416329][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.424895][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.432809][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.465827][ T4194] device veth0_vlan entered promiscuous mode [ 63.475540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.491668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.502131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.511245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.524956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.540269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.548828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.558464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.568458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.576396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.596949][ T4194] device veth1_vlan entered promiscuous mode [ 63.606684][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.623304][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.641945][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.669087][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.685236][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.693003][ T4224] Bluetooth: hci0: command 0x041b tx timeout [ 63.699214][ T4224] Bluetooth: hci1: command 0x041b tx timeout [ 63.706116][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.713723][ T4224] Bluetooth: hci3: command 0x041b tx timeout [ 63.719788][ T4224] Bluetooth: hci2: command 0x041b tx timeout [ 63.745175][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.771299][ T4227] Bluetooth: hci4: command 0x041b tx timeout [ 63.779846][ T4194] device veth0_macvtap entered promiscuous mode [ 63.790688][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.801891][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.809414][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.817389][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.826281][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.834976][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.844438][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.856064][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.868206][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.877411][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.895081][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.908376][ T4190] device veth0_vlan entered promiscuous mode [ 63.921520][ T4194] device veth1_macvtap entered promiscuous mode [ 63.950631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.959321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.979011][ T4190] device veth1_vlan entered promiscuous mode [ 63.993055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.005299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.027144][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.039076][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.050019][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.058772][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.067759][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.076586][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.088295][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.096986][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.107299][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.118811][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.127800][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.137212][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.147289][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.168104][ T4186] device veth0_vlan entered promiscuous mode [ 64.175557][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.184154][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.192863][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.201828][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.224998][ T4187] device veth0_vlan entered promiscuous mode [ 64.233058][ T4190] device veth0_macvtap entered promiscuous mode [ 64.244509][ T4190] device veth1_macvtap entered promiscuous mode [ 64.253782][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.262121][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.269869][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.279324][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.288597][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.296900][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.305410][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.315946][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.350162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.359320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.382209][ T4187] device veth1_vlan entered promiscuous mode [ 64.392621][ T4186] device veth1_vlan entered promiscuous mode [ 64.439267][ T4196] device veth0_vlan entered promiscuous mode [ 64.447149][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.456309][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.464639][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.473112][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.481316][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.489323][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.500748][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.512418][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.523604][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.554082][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.565328][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.579393][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.587485][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.597053][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.605544][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.614205][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.623891][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.632650][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.648596][ T4187] device veth0_macvtap entered promiscuous mode [ 64.663533][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.673008][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.689002][ T4196] device veth1_vlan entered promiscuous mode [ 64.697995][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.706942][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.715947][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.724841][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.735890][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.744213][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.752828][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.761998][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.770132][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.778610][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.787616][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.808979][ T1203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.810111][ T4186] device veth0_macvtap entered promiscuous mode [ 64.819150][ T1203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.844798][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.853599][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.863683][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.878870][ T4186] device veth1_macvtap entered promiscuous mode [ 64.887056][ T4187] device veth1_macvtap entered promiscuous mode [ 64.926699][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.939792][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.951186][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.963236][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.975412][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.995458][ T4196] device veth0_macvtap entered promiscuous mode [ 65.010751][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.019284][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.030179][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.042422][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.060158][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.074953][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.087702][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.097734][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.108869][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.120053][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.133939][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.148895][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.158943][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.168272][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.176870][ T4261] capability: warning: `syz.3.4' uses 32-bit capabilities (legacy support in use) [ 65.180726][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.197180][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.197195][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.197208][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.197219][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.197230][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.198447][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.257182][ T4263] loop3: detected capacity change from 0 to 256 [ 65.270683][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.279232][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.289138][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.291320][ T4263] exfat: Deprecated parameter 'utf8' [ 65.304410][ T4263] exfat: Deprecated parameter 'utf8' [ 65.309226][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.312767][ T4263] exfat: Deprecated parameter 'namecase' [ 65.324066][ T4263] exfat: Deprecated parameter 'namecase' [ 65.333103][ T4196] device veth1_macvtap entered promiscuous mode [ 65.343243][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.358633][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.377454][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.389398][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.400138][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.404147][ T4263] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x917246c7, utbl_chksum : 0xe619d30d) [ 65.412206][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.434724][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.469263][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.478108][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.487810][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.497422][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.512513][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.521346][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.529735][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.555305][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.568070][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.584200][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.595618][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.605507][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.617563][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.627531][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.638142][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.649446][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.659002][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.669737][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.679840][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.690915][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.701002][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.711689][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.721746][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.732494][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.743865][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.753627][ T4266] netlink: 'syz.3.7': attribute type 10 has an invalid length. [ 65.772585][ T4266] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 65.773297][ T4224] Bluetooth: hci2: command 0x040f tx timeout [ 65.788264][ T4224] Bluetooth: hci3: command 0x040f tx timeout [ 65.788339][ T4267] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7'. [ 65.797130][ T4224] Bluetooth: hci1: command 0x040f tx timeout [ 65.809168][ T4224] Bluetooth: hci0: command 0x040f tx timeout [ 65.829203][ T4267] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.843215][ T4267] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.859965][ T2302] Bluetooth: hci4: command 0x040f tx timeout [ 65.866500][ T4267] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 65.877490][ T4267] bond0 (unregistering): Released all slaves [ 65.896983][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.905978][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.915499][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.924109][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.942465][ T1203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.953845][ T4196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.959238][ T1203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.964580][ T4196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.979577][ T4196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.988869][ T4196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.009395][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.079334][ T1203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.112973][ T1203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.129103][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.161878][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.176835][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.197550][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.205336][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.229786][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.239730][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.261816][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.270770][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.273340][ T1203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.278264][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.303867][ T1203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.315376][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.344123][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.353057][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.365991][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.570320][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!! [ 66.580319][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 66.590331][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 66.600313][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 66.630325][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 66.640321][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 66.650318][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 66.690316][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 66.700311][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 66.710317][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 67.614910][ T4266] syz.3.7 (4266) used greatest stack depth: 20528 bytes left [ 67.643661][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.668260][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.733758][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.850931][ T4227] Bluetooth: hci0: command 0x0419 tx timeout [ 67.865706][ T4227] Bluetooth: hci1: command 0x0419 tx timeout [ 67.871550][ T4282] input: syz1 as /devices/virtual/input/input5 [ 67.892152][ T4227] Bluetooth: hci3: command 0x0419 tx timeout [ 67.905288][ T4227] Bluetooth: hci2: command 0x0419 tx timeout [ 68.029029][ T4289] [ 68.031393][ T4289] ====================================================== [ 68.038397][ T4289] WARNING: possible circular locking dependency detected [ 68.045419][ T4289] syzkaller #0 Not tainted [ 68.047774][ T4227] Bluetooth: hci4: command 0x0419 tx timeout [ 68.049823][ T4289] ------------------------------------------------------ [ 68.049829][ T4289] syz.2.3/4289 is trying to acquire lock: [ 68.068486][ T4289] ffff88807ac74f98 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 68.078941][ T4289] [ 68.078941][ T4289] but task is already holding lock: [ 68.086300][ T4289] ffff88807ac753f0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1020 [ 68.095618][ T4289] [ 68.095618][ T4289] which lock already depends on the new lock. [ 68.095618][ T4289] [ 68.106011][ T4289] [ 68.106011][ T4289] the existing dependency chain (in reverse order) is: [ 68.115016][ T4289] [ 68.115016][ T4289] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 68.122662][ T4289] __mutex_lock_common+0x1e5/0x2400 [ 68.128383][ T4289] mutex_lock_nested+0x17/0x20 [ 68.133660][ T4289] hci_dev_do_close+0x5f/0x1020 [ 68.139031][ T4289] hci_rfkill_set_block+0x101/0x180 [ 68.144752][ T4289] rfkill_set_block+0x1c1/0x3c0 [ 68.150122][ T4289] rfkill_fop_write+0x453/0x560 [ 68.155486][ T4289] vfs_write+0x304/0xd70 [ 68.160245][ T4289] ksys_write+0x153/0x260 [ 68.165089][ T4289] do_syscall_64+0x4c/0xa0 [ 68.170027][ T4289] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 68.176441][ T4289] [ 68.176441][ T4289] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 68.184431][ T4289] __mutex_lock_common+0x1e5/0x2400 [ 68.190152][ T4289] mutex_lock_nested+0x17/0x20 [ 68.195437][ T4289] rfkill_register+0x2f/0x970 [ 68.200638][ T4289] hci_register_dev+0x459/0x980 [ 68.206013][ T4289] vhci_create_device+0x32e/0x5c0 [ 68.211560][ T4289] vhci_write+0x389/0x440 [ 68.216409][ T4289] vfs_write+0x748/0xd70 [ 68.221167][ T4289] ksys_write+0x153/0x260 [ 68.225994][ T4289] do_syscall_64+0x4c/0xa0 [ 68.230907][ T4289] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 68.237297][ T4289] [ 68.237297][ T4289] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 68.245083][ T4289] __mutex_lock_common+0x1e5/0x2400 [ 68.250779][ T4289] mutex_lock_nested+0x17/0x20 [ 68.256049][ T4289] vhci_send_frame+0x88/0x100 [ 68.261224][ T4289] hci_send_frame+0x1a9/0x2e0 [ 68.266395][ T4289] hci_tx_work+0x9b5/0x16d0 [ 68.271394][ T4289] process_one_work+0x867/0xff0 [ 68.276739][ T4289] worker_thread+0xad7/0x12a0 [ 68.281918][ T4289] kthread+0x42e/0x520 [ 68.286516][ T4289] ret_from_fork+0x1f/0x30 [ 68.291471][ T4289] [ 68.291471][ T4289] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 68.300646][ T4289] __lock_acquire+0x2c66/0x7b50 [ 68.306000][ T4289] lock_acquire+0x19e/0x400 [ 68.311002][ T4289] __flush_work+0x116/0x210 [ 68.316002][ T4289] hci_dev_do_close+0x201/0x1020 [ 68.321437][ T4289] hci_rfkill_set_block+0x101/0x180 [ 68.327128][ T4289] rfkill_set_block+0x1c1/0x3c0 [ 68.332481][ T4289] rfkill_fop_write+0x453/0x560 [ 68.337829][ T4289] vfs_write+0x304/0xd70 [ 68.342567][ T4289] ksys_write+0x153/0x260 [ 68.347390][ T4289] do_syscall_64+0x4c/0xa0 [ 68.352305][ T4289] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 68.358698][ T4289] [ 68.358698][ T4289] other info that might help us debug this: [ 68.358698][ T4289] [ 68.368906][ T4289] Chain exists of: [ 68.368906][ T4289] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 68.368906][ T4289] [ 68.383813][ T4289] Possible unsafe locking scenario: [ 68.383813][ T4289] [ 68.391240][ T4289] CPU0 CPU1 [ 68.396579][ T4289] ---- ---- [ 68.401921][ T4289] lock(&hdev->req_lock); [ 68.406313][ T4289] lock(rfkill_global_mutex); [ 68.413572][ T4289] lock(&hdev->req_lock); [ 68.420483][ T4289] lock((work_completion)(&hdev->tx_work)); [ 68.426433][ T4289] [ 68.426433][ T4289] *** DEADLOCK *** [ 68.426433][ T4289] [ 68.434548][ T4289] 2 locks held by syz.2.3/4289: [ 68.439370][ T4289] #0: ffffffff8d6d6b68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1ae/0x560 [ 68.449425][ T4289] #1: ffff88807ac753f0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1020 [ 68.459137][ T4289] [ 68.459137][ T4289] stack backtrace: [ 68.465014][ T4289] CPU: 0 PID: 4289 Comm: syz.2.3 Not tainted syzkaller #0 [ 68.472097][ T4289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 68.482137][ T4289] Call Trace: [ 68.485416][ T4289] [ 68.488331][ T4289] dump_stack_lvl+0x188/0x250 [ 68.492991][ T4289] ? load_image+0x410/0x410 [ 68.497474][ T4289] ? show_regs_print_info+0x20/0x20 [ 68.502649][ T4289] ? print_circular_bug+0x12b/0x1a0 [ 68.507823][ T4289] check_noncircular+0x296/0x330 [ 68.512734][ T4289] ? look_up_lock_class+0x71/0x110 [ 68.517820][ T4289] ? add_chain_block+0x9b0/0x9b0 [ 68.522733][ T4289] ? lockdep_lock+0xf1/0x1f0 [ 68.527300][ T4289] ? mark_lock+0x94/0x320 [ 68.531606][ T4289] ? _find_first_zero_bit+0xd1/0xf0 [ 68.536778][ T4289] __lock_acquire+0x2c66/0x7b50 [ 68.541608][ T4289] ? add_chain_block+0x9b0/0x9b0 [ 68.546521][ T4289] ? lockdep_unlock+0x143/0x2e0 [ 68.551348][ T4289] ? verify_lock_unused+0x140/0x140 [ 68.556522][ T4289] ? mark_lock+0x94/0x320 [ 68.560826][ T4289] ? __lock_acquire+0x1305/0x7b50 [ 68.565826][ T4289] lock_acquire+0x19e/0x400 [ 68.570308][ T4289] ? __flush_work+0xfa/0x210 [ 68.574893][ T4289] ? verify_lock_unused+0x140/0x140 [ 68.580070][ T4289] ? read_lock_is_recursive+0x10/0x10 [ 68.585419][ T4289] __flush_work+0x116/0x210 [ 68.589901][ T4289] ? __flush_work+0xfa/0x210 [ 68.594465][ T4289] ? flush_work+0x20/0x20 [ 68.598791][ T4289] ? rcu_lock_release+0x5/0x20 [ 68.603531][ T4289] ? __lock_acquire+0x7b50/0x7b50 [ 68.608579][ T4289] hci_dev_do_close+0x201/0x1020 [ 68.613503][ T4289] hci_rfkill_set_block+0x101/0x180 [ 68.618686][ T4289] ? rcu_lock_release+0x20/0x20 [ 68.623518][ T4289] rfkill_set_block+0x1c1/0x3c0 [ 68.628346][ T4289] rfkill_fop_write+0x453/0x560 [ 68.633181][ T4289] ? rfkill_fop_read+0x560/0x560 [ 68.638099][ T4289] ? common_file_perm+0x160/0x1c0 [ 68.643100][ T4289] ? fsnotify_perm+0x5d/0x560 [ 68.647758][ T4289] ? security_file_permission+0x75/0xa0 [ 68.653290][ T4289] ? rfkill_fop_read+0x560/0x560 [ 68.658221][ T4289] vfs_write+0x304/0xd70 [ 68.662444][ T4289] ? file_end_write+0x250/0x250 [ 68.667270][ T4289] ? __fget_files+0x402/0x470 [ 68.671923][ T4289] ? __fdget_pos+0x1e2/0x370 [ 68.676486][ T4289] ? ksys_write+0x70/0x260 [ 68.680879][ T4289] ksys_write+0x153/0x260 [ 68.685185][ T4289] ? __ia32_sys_read+0x80/0x80 [ 68.689928][ T4289] ? lockdep_hardirqs_on+0x94/0x140 [ 68.695124][ T4289] do_syscall_64+0x4c/0xa0 [ 68.699606][ T4289] ? clear_bhb_loop+0x30/0x80 [ 68.704273][ T4289] ? clear_bhb_loop+0x30/0x80 [ 68.708930][ T4289] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 68.714828][ T4289] RIP: 0033:0x7fca1800d159 [ 68.719220][ T4289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.738803][ T4289] RSP: 002b:00007fca16244028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 68.747192][ T4289] RAX: ffffffffffffffda RBX: 00007fca18295090 RCX: 00007fca1800d159 [ 68.755141][ T4289] RDX: 0000000000000008 RSI: 0000200000000300 RDI: 0000000000000009 [ 68.763104][ T4289] RBP: 00007fca180a406b R08: 0000000000000000 R09: 0000000000000000 [ 68.771055][ T4289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.778999][ T4289] R13: 00007fca18295128 R14: 00007fca18295090 R15: 00007ffeea63d878 [ 68.786950][ T4289] [ 71.141526][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.147851][ T1431] ieee802154 phy1 wpan1: encryption failed: -22