last executing test programs: 2.787903835s ago: executing program 3 (id=4): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9", 0x7}, {&(0x7f0000000440)="9c74dfbf775728", 0x7}], 0x2) 2.771787447s ago: executing program 1 (id=2): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x40000}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000380)=@framed={{}, [@alu={0x4, 0x0, 0x2, 0x1, 0x3, 0xfffffffffffffffc, 0x8}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) setresgid(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000000d00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000c80)={0x80, 0xc, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x82}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r5 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x27b8, 0x1ed, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "438ba30b"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000a80)={'syztnl2\x00', &(0x7f0000000a40)={'ip_vti0\x00', r7, 0x700, 0x80, 0x4000000, 0x3, {{0x6, 0x4, 0x1, 0x4, 0x18, 0x67, 0x0, 0xff, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x44}, {[@end]}}}}}) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x70, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x3}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_TTL={0x5, 0x8, 0x5}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x70}}, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 2.671948305s ago: executing program 2 (id=3): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000280)="580000001400add427323b472545b45602117fffffff81004e204e227f000001925aa80020007b0009008003000000000000000000ff0000f03ac71002000000fffffffffeffffffffe7ee00000000000000000200000000", 0x58}], 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) socket(0x1e, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902950003010040000904000000010100000a2401000000020102132406912026082810e50163000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd09240305000000040007240504"], 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r6}, 0x10) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0xb, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00', {}, {}, 0x11}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) 2.488878549s ago: executing program 0 (id=1): socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xeb38e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @local}, 0xc) syz_open_dev$tty20(0xc, 0x4, 0x1) 1.722605351s ago: executing program 3 (id=6): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003280)={r1, 0xe0, &(0x7f0000003180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003100), 0x8, 0x10, 0x8, 0x0, 0x0}}, 0x10) 1.658908667s ago: executing program 3 (id=7): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept(0xffffffffffffffff, &(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000040)=0x80) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f00000003c0)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc02, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) 1.600298121s ago: executing program 0 (id=8): linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 1.596550151s ago: executing program 4 (id=5): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x20, 0x4, 0x5, {0x5, 0xa, "a7ea31"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.499009639s ago: executing program 0 (id=9): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d0000008500000008000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r4, r4, 0x21) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000480)='syzkaller\x00', 0x6}, 0x94) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e22, 0x2, @loopback, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x200004f1}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}, {{0xa, 0x4e24, 0x26, @loopback, 0x6}}}, 0x108) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) 477.798332ms ago: executing program 4 (id=10): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0xfd}, 0x8) 0s ago: executing program 0 (id=11): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$unix(0x1, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x0, 0x5, 0x1, 0xc}, 0xb, 0xfffffffe, 0x8, 0x5, 0x9, 0x2, 0x9, 0xd, 0x5, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): [ 11.505802][ T3715] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK [ 11.552931][ T276] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 11.561216][ T276] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.133' (ED25519) to the list of known hosts. syzkaller login: [ 31.151389][ T4033] cgroup: Unknown subsys name 'net' [ 31.440405][ T4033] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.708558][ T4033] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 32.562710][ T4045] chnl_net:caif_netlink_parms(): no params data found [ 32.613015][ T4051] chnl_net:caif_netlink_parms(): no params data found [ 32.621070][ T4043] chnl_net:caif_netlink_parms(): no params data found [ 32.640548][ T4045] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.641903][ T4045] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.643614][ T4045] device bridge_slave_0 entered promiscuous mode [ 32.659372][ T4045] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.660549][ T4045] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.662025][ T4045] device bridge_slave_1 entered promiscuous mode [ 32.663542][ T4044] chnl_net:caif_netlink_parms(): no params data found [ 32.690629][ T4045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.702813][ T4045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.707491][ T4051] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.708632][ T4051] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.710150][ T4051] device bridge_slave_0 entered promiscuous mode [ 32.711871][ T4043] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.713004][ T4043] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.714419][ T4043] device bridge_slave_0 entered promiscuous mode [ 32.723944][ T4051] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.725083][ T4051] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.726573][ T4051] device bridge_slave_1 entered promiscuous mode [ 32.728068][ T4043] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.729229][ T4043] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.730818][ T4043] device bridge_slave_1 entered promiscuous mode [ 32.732159][ T4057] chnl_net:caif_netlink_parms(): no params data found [ 32.744658][ T4045] team0: Port device team_slave_0 added [ 32.758579][ T4045] team0: Port device team_slave_1 added [ 32.759670][ T4044] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.760847][ T4044] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.762297][ T4044] device bridge_slave_0 entered promiscuous mode [ 32.768138][ T4051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.770501][ T4043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.781733][ T4044] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.783030][ T4044] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.784590][ T4044] device bridge_slave_1 entered promiscuous mode [ 32.786943][ T4051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.789341][ T4043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.791072][ T4045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.792120][ T4045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.796035][ T4045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.799313][ T4045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.800398][ T4045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.804469][ T4045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.836265][ T4044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.841588][ T4051] team0: Port device team_slave_0 added [ 32.843486][ T4043] team0: Port device team_slave_0 added [ 32.845317][ T4043] team0: Port device team_slave_1 added [ 32.850060][ T4044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.852921][ T4051] team0: Port device team_slave_1 added [ 32.865720][ T4057] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.866892][ T4057] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.868394][ T4057] device bridge_slave_0 entered promiscuous mode [ 32.884014][ T4057] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.885156][ T4057] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.886517][ T4057] device bridge_slave_1 entered promiscuous mode [ 32.891432][ T4051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.892497][ T4051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.896384][ T4051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.899003][ T4051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.900120][ T4051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.904292][ T4051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.948047][ T4045] device hsr_slave_0 entered promiscuous mode [ 32.987099][ T4045] device hsr_slave_1 entered promiscuous mode [ 33.027263][ T4043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.028427][ T4043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.032394][ T4043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.042111][ T4044] team0: Port device team_slave_0 added [ 33.044629][ T4043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.045710][ T4043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.050250][ T4043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.053304][ T4057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.055439][ T4044] team0: Port device team_slave_1 added [ 33.059657][ T4057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.084261][ T4044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.085418][ T4044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.089838][ T4044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.100954][ T4057] team0: Port device team_slave_0 added [ 33.102240][ T4044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.103335][ T4044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.107250][ T4044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.147828][ T4051] device hsr_slave_0 entered promiscuous mode [ 33.187032][ T4051] device hsr_slave_1 entered promiscuous mode [ 33.236875][ T4051] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.238156][ T4051] Cannot create hsr debugfs directory [ 33.307950][ T4043] device hsr_slave_0 entered promiscuous mode [ 33.357062][ T4043] device hsr_slave_1 entered promiscuous mode [ 33.406890][ T4043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.407990][ T4043] Cannot create hsr debugfs directory [ 33.409594][ T4057] team0: Port device team_slave_1 added [ 33.421521][ T4057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.422591][ T4057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.426701][ T4057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.435119][ T4057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.436220][ T4057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.440412][ T4057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.518090][ T4044] device hsr_slave_0 entered promiscuous mode [ 33.567379][ T4044] device hsr_slave_1 entered promiscuous mode [ 33.606864][ T4044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.608015][ T4044] Cannot create hsr debugfs directory [ 33.687951][ T4057] device hsr_slave_0 entered promiscuous mode [ 33.737109][ T4057] device hsr_slave_1 entered promiscuous mode [ 33.776903][ T4057] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.777996][ T4057] Cannot create hsr debugfs directory [ 33.841864][ T4045] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.868295][ T4045] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.911981][ T4045] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.959567][ T4045] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.020788][ T4051] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.059688][ T4051] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.108646][ T4051] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.151359][ T4051] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.218884][ T4043] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.251666][ T4043] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.288832][ T4043] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.327984][ T4043] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.370700][ T4045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.380121][ T4044] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.418059][ T4044] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.457952][ T4044] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.507174][ T4089] Bluetooth: hci4: command 0x0409 tx timeout [ 34.507340][ T4108] Bluetooth: hci0: command 0x0409 tx timeout [ 34.508348][ T4089] Bluetooth: hci3: command 0x0409 tx timeout [ 34.509222][ T4108] Bluetooth: hci2: command 0x0409 tx timeout [ 34.510078][ T4089] Bluetooth: hci1: command 0x0409 tx timeout [ 34.517816][ T4044] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.578690][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.580577][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.602318][ T4045] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.613141][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.614902][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.616327][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.617495][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.619483][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.630724][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.632826][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.634364][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.635505][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.636968][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.638626][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.640220][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.642135][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.643738][ T4057] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.668191][ T4057] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.731944][ T4057] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.789264][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.790755][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.792709][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.795926][ T4057] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.863485][ T4051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.865719][ T276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.867422][ T276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.875417][ T276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.877084][ T276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.883234][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.884864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.886356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.895212][ T4051] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.909703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.911239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.912645][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.913710][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.915013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.923622][ T276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.925118][ T276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.926708][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.927859][ T276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.932254][ T4044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.935550][ T4043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.942205][ T276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.953946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.955644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.957848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.959225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.960566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.963468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.965304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.970234][ T4043] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.973453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.975930][ T4044] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.982538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.984143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.985732][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.986871][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.988785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.990276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.991679][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.992810][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.995603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.998738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.000061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.001569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.002997][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.004060][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.013196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.014878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.016473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.018661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.020156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.021676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.023085][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.024206][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.025568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.027255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.028504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.032726][ T4045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.037917][ T4051] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.039875][ T4051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.045354][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.047551][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.048969][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.051247][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.059028][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.070248][ T276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.072068][ T276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.073650][ T276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.075118][ T276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.076713][ T276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.079687][ T276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.086002][ T4044] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.089146][ T4044] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.101297][ T4057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.111361][ T276] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.112908][ T276] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.114396][ T276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.115916][ T276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.117968][ T276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.119554][ T276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.121302][ T276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.122876][ T276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.124399][ T276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.125967][ T276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.130833][ T276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.132305][ T276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.133870][ T276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.135258][ T276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.136558][ T276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.139626][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.151422][ T4057] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.153313][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.154846][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.162620][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.164173][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.165817][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.169083][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.184806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.186311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.189140][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.190291][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.191770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.193030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.194046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.195517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.197185][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.198297][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.199675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.201254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.203187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.206386][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.208614][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.210277][ T4045] device veth0_vlan entered promiscuous mode [ 35.214902][ T4044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.220383][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.223162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.224412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.232842][ T4051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.234555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.236196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.243736][ T4045] device veth1_vlan entered promiscuous mode [ 35.246307][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.248243][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.249712][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.259830][ T4057] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.261930][ T4057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.263354][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.264769][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.266274][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.268938][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.270130][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.272489][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.274096][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.278092][ T4043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.298791][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.300348][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.301887][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.303384][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.304900][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.306348][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.310511][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.312682][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.314139][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.315793][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.321679][ T4045] device veth0_macvtap entered promiscuous mode [ 35.325168][ T4051] device veth0_vlan entered promiscuous mode [ 35.326460][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.329625][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.331031][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.332484][ T4044] device veth0_vlan entered promiscuous mode [ 35.334572][ T4045] device veth1_macvtap entered promiscuous mode [ 35.345522][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.347069][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.349546][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.353123][ T4051] device veth1_vlan entered promiscuous mode [ 35.370532][ T4044] device veth1_vlan entered promiscuous mode [ 35.372758][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.374217][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.375596][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.377714][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.379189][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.380806][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.382187][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.384566][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.385807][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.391452][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.393086][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.398295][ T4045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.399447][ T4043] device veth0_vlan entered promiscuous mode [ 35.401001][ T4051] device veth0_macvtap entered promiscuous mode [ 35.402991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.404370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.405858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.408960][ T4045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.412454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.413858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.415394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.418389][ T4051] device veth1_macvtap entered promiscuous mode [ 35.421520][ T4045] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.423040][ T4045] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.424395][ T4045] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.425816][ T4045] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.432329][ T4057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.442325][ T4051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.444022][ T4051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.446042][ T4051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.449966][ T4043] device veth1_vlan entered promiscuous mode [ 35.452504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.454032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.455508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.458142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.460563][ T4051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.462101][ T4051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.464061][ T4051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.470166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.471637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.473192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.481041][ T4051] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.482421][ T4051] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.483792][ T4051] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.485167][ T4051] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.498552][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.500102][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.504131][ T4043] device veth0_macvtap entered promiscuous mode [ 35.506593][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.508299][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.510673][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.513745][ T4044] device veth0_macvtap entered promiscuous mode [ 35.528331][ T4043] device veth1_macvtap entered promiscuous mode [ 35.535254][ T4044] device veth1_macvtap entered promiscuous mode [ 35.544898][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.546376][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.549302][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.550752][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.552252][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.562116][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.563447][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.563558][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.566082][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.568684][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.570322][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.572545][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.578420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.579883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.581417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.583728][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.585369][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.588398][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.590028][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.591496][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.593045][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.595169][ T4043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.603858][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.605375][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.607596][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.609077][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.611175][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.612569][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.614024][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.615469][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.617222][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.623571][ T4044] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.624917][ T4044] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.626272][ T4044] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.629319][ T4044] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.636569][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.638207][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.639848][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.641204][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.651024][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.652787][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.654309][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.655831][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.658601][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.660205][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.662190][ T4043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.665078][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.666578][ T4137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.666710][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.667874][ T4137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.670428][ T562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.671648][ T562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.672059][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.674627][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.683596][ T4057] device veth0_vlan entered promiscuous mode [ 35.693018][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.694270][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.702106][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.713665][ T4057] device veth1_vlan entered promiscuous mode [ 35.716236][ T4043] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.719582][ T4043] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.720880][ T4043] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.722262][ T4043] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.744323][ T4137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.745498][ T4137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.748409][ T4137] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.749982][ T4137] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.764321][ T4057] device veth0_macvtap entered promiscuous mode [ 35.782332][ T4137] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.783823][ T4137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.785283][ T4137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.787571][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.789959][ T4153] loop1: detected capacity change from 0 to 512 [ 35.799338][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.800665][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.802268][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.814665][ T4057] device veth1_macvtap entered promiscuous mode [ 35.820800][ T4153] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 35.821889][ T4153] EXT4-fs (loop1): inline encryption not supported [ 35.823257][ T4153] EXT4-fs (loop1): Test dummy encryption mode enabled [ 35.824237][ T4153] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 35.825300][ T4153] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.830595][ T4153] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 35.851906][ T4153] EXT4-fs (loop1): 1 truncate cleaned up [ 35.852966][ T4153] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 35.875696][ T4137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.882886][ T4137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.885104][ T4159] udc-core: couldn't find an available UDC or it's busy [ 35.886270][ T4159] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 35.893186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.894740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.896483][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.899507][ T4057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.901198][ T4057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.902707][ T4057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.904308][ T4057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.905912][ T4057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.910762][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.935709][ T4161] udc-core: couldn't find an available UDC or it's busy [ 35.937080][ T4161] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 35.945391][ T4057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.954649][ T4057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.956358][ T4057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.974865][ T4057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.977415][ T4137] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.978852][ T4137] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.981326][ T4137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.984927][ T4057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.986604][ T4057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.992585][ T4057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.994231][ T4057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.004507][ T4057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.006751][ T4057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.012141][ T4057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.014026][ T4057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.016628][ T4057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.026719][ T4155] tipc: Started in network mode [ 36.027953][ T4155] tipc: Node identity 8ee1841b7c35, cluster identity 4711 [ 36.029080][ T4155] tipc: Enabled bearer , priority 0 [ 36.040405][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.042029][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.045673][ T4057] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.054858][ T4057] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.056194][ T4057] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.067268][ T4057] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.138431][ T4174] xt_CT: You must specify a L4 protocol and not use inversions on it [ 36.662011][ T4111] Bluetooth: hci1: command 0x041b tx timeout [ 36.663434][ T4111] Bluetooth: hci2: command 0x041b tx timeout [ 36.664490][ T4111] Bluetooth: hci3: command 0x041b tx timeout [ 36.665501][ T4111] Bluetooth: hci0: command 0x041b tx timeout [ 36.666507][ T4111] Bluetooth: hci4: command 0x041b tx timeout [ 36.692700][ T4154] tipc: Resetting bearer [ 36.704909][ T4153] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 36.731916][ T4154] tipc: Disabling bearer [ 36.799728][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.803286][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.811203][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.852389][ T562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.855066][ T562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.860996][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.948446][ T4187] udc-core: couldn't find an available UDC or it's busy [ 36.949634][ T4187] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 36.964018][ T26] audit: type=1326 audit(36.930:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4186 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad5080a8 code=0x7ffc0000 [ 36.970019][ T26] audit: type=1326 audit(36.930:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4186 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad5080a8 code=0x7ffc0000 [ 36.973339][ T26] audit: type=1326 audit(36.930:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4186 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffad5080a8 code=0x7ffc0000 [ 36.987350][ T26] audit: type=1326 audit(36.930:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4186 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad5080a8 code=0x7ffc0000 [ 36.990388][ T26] audit: type=1326 audit(36.930:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4186 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad5080a8 code=0x7ffc0000 [ 36.994059][ T26] audit: type=1326 audit(36.930:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4186 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffad5080a8 code=0x7ffc0000 [ 37.001338][ T26] audit: type=1326 audit(36.940:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4186 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad5080a8 code=0x7ffc0000 [ 37.004283][ T26] audit: type=1326 audit(36.940:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4186 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad5080a8 code=0x7ffc0000 [ 37.017001][ T26] audit: type=1326 audit(36.940:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4186 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffad5080a8 code=0x7ffc0000 [ 37.019991][ T26] audit: type=1326 audit(36.940:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4186 comm="syz.0.8" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad5080a8 code=0x7ffc0000 [ 38.634577][ T4201] [ 38.635015][ T4201] ====================================================== [ 38.636122][ T4201] WARNING: possible circular locking dependency detected [ 38.637255][ T4201] 5.15.189-syzkaller #0 Not tainted [ 38.638079][ T4201] ------------------------------------------------------ [ 38.639073][ T4201] syz.4.10/4201 is trying to acquire lock: [ 38.639905][ T4201] ffff0000db890b98 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xcc/0x1bc [ 38.641416][ T4201] [ 38.641416][ T4201] but task is already holding lock: [ 38.642471][ T4201] ffff0000db890ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x60/0x105c [ 38.643859][ T4201] [ 38.643859][ T4201] which lock already depends on the new lock. [ 38.643859][ T4201] [ 38.645407][ T4201] [ 38.645407][ T4201] the existing dependency chain (in reverse order) is: [ 38.646661][ T4201] [ 38.646661][ T4201] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 38.647745][ T4201] __mutex_lock_common+0x194/0x1edc [ 38.648577][ T4201] mutex_lock_nested+0xac/0x11c [ 38.649380][ T4201] hci_dev_do_close+0x60/0x105c [ 38.650220][ T4201] hci_rfkill_set_block+0xdc/0x1d0 [ 38.651113][ T4201] rfkill_set_block+0x18c/0x374 [ 38.652012][ T4201] rfkill_fop_write+0x4a4/0x5cc [ 38.652906][ T4201] vfs_write+0x280/0xa2c [ 38.653686][ T4201] ksys_write+0x120/0x210 [ 38.654417][ T4201] __arm64_sys_write+0x7c/0x90 [ 38.655165][ T4201] invoke_syscall+0x98/0x2b8 [ 38.655956][ T4201] el0_svc_common+0x138/0x258 [ 38.656824][ T4201] do_el0_svc+0x58/0x14c [ 38.657606][ T4201] el0_svc+0x78/0x1e0 [ 38.658337][ T4201] el0t_64_sync_handler+0xcc/0xe4 [ 38.659213][ T4201] el0t_64_sync+0x1a0/0x1a4 [ 38.660008][ T4201] [ 38.660008][ T4201] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 38.661279][ T4201] __mutex_lock_common+0x194/0x1edc [ 38.662209][ T4201] mutex_lock_nested+0xac/0x11c [ 38.663085][ T4201] rfkill_register+0x44/0x77c [ 38.663884][ T4201] hci_register_dev+0x3d8/0x854 [ 38.664731][ T4201] vhci_create_device+0x2bc/0x564 [ 38.665606][ T4201] vhci_write+0x30c/0x3ac [ 38.666262][ T4201] vfs_write+0x7c8/0xa2c [ 38.667032][ T4201] ksys_write+0x120/0x210 [ 38.667784][ T4201] __arm64_sys_write+0x7c/0x90 [ 38.668616][ T4201] invoke_syscall+0x98/0x2b8 [ 38.669391][ T4201] el0_svc_common+0x138/0x258 [ 38.670150][ T4201] do_el0_svc+0x58/0x14c [ 38.670833][ T4201] el0_svc+0x78/0x1e0 [ 38.671459][ T4201] el0t_64_sync_handler+0xcc/0xe4 [ 38.672292][ T4201] el0t_64_sync+0x1a0/0x1a4 [ 38.673078][ T4201] [ 38.673078][ T4201] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 38.674328][ T4201] __mutex_lock_common+0x194/0x1edc [ 38.675145][ T4201] mutex_lock_nested+0xac/0x11c [ 38.675939][ T4201] vhci_send_frame+0x88/0x118 [ 38.676797][ T4201] hci_send_frame+0x194/0x2f0 [ 38.677621][ T4201] hci_tx_work+0x7e4/0x1394 [ 38.678475][ T4201] process_one_work+0x79c/0x1140 [ 38.679299][ T4201] worker_thread+0x8f4/0x101c [ 38.680130][ T4201] kthread+0x374/0x454 [ 38.680867][ T4201] ret_from_fork+0x10/0x20 [ 38.681543][ T4201] [ 38.681543][ T4201] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 38.682880][ T4201] __lock_acquire+0x2928/0x651c [ 38.683658][ T4201] lock_acquire+0x1f4/0x620 [ 38.684385][ T4201] __flush_work+0xf4/0x1bc [ 38.685123][ T4201] flush_work+0x24/0x38 [ 38.685784][ T4201] hci_dev_do_close+0x164/0x105c [ 38.686578][ T4201] hci_rfkill_set_block+0xdc/0x1d0 [ 38.687390][ T4201] rfkill_set_block+0x18c/0x374 [ 38.688164][ T4201] rfkill_fop_write+0x4a4/0x5cc [ 38.688981][ T4201] vfs_write+0x280/0xa2c [ 38.689636][ T4201] ksys_write+0x120/0x210 [ 38.690345][ T4201] __arm64_sys_write+0x7c/0x90 [ 38.691173][ T4201] invoke_syscall+0x98/0x2b8 [ 38.692013][ T4201] el0_svc_common+0x138/0x258 [ 38.692847][ T4201] do_el0_svc+0x58/0x14c [ 38.693588][ T4201] el0_svc+0x78/0x1e0 [ 38.694336][ T4201] el0t_64_sync_handler+0xcc/0xe4 [ 38.695224][ T4201] el0t_64_sync+0x1a0/0x1a4 [ 38.695989][ T4201] [ 38.695989][ T4201] other info that might help us debug this: [ 38.695989][ T4201] [ 38.697468][ T4201] Chain exists of: [ 38.697468][ T4201] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 38.697468][ T4201] [ 38.699779][ T4201] Possible unsafe locking scenario: [ 38.699779][ T4201] [ 38.700855][ T4201] CPU0 CPU1 [ 38.701684][ T4201] ---- ---- [ 38.702477][ T4201] lock(&hdev->req_lock); [ 38.703151][ T4201] lock(rfkill_global_mutex); [ 38.704275][ T4201] lock(&hdev->req_lock); [ 38.705274][ T4201] lock((work_completion)(&hdev->tx_work)); [ 38.706135][ T4201] [ 38.706135][ T4201] *** DEADLOCK *** [ 38.706135][ T4201] [ 38.707367][ T4201] 2 locks held by syz.4.10/4201: [ 38.708067][ T4201] #0: ffff80001651bc28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x238/0x5cc [ 38.709552][ T4201] #1: ffff0000db890ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x60/0x105c [ 38.710983][ T4201] [ 38.710983][ T4201] stack backtrace: [ 38.711790][ T4201] CPU: 0 PID: 4201 Comm: syz.4.10 Not tainted 5.15.189-syzkaller #0 [ 38.712966][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 38.714512][ T4201] Call trace: [ 38.715007][ T4201] dump_backtrace+0x0/0x43c [ 38.715683][ T4201] show_stack+0x2c/0x3c [ 38.716260][ T4201] __dump_stack+0x30/0x40 [ 38.716881][ T4201] dump_stack_lvl+0xf8/0x160 [ 38.717632][ T4201] dump_stack+0x1c/0x5c [ 38.718316][ T4201] print_circular_bug+0x148/0x1b0 [ 38.719114][ T4201] check_noncircular+0x240/0x2d4 [ 38.719894][ T4201] __lock_acquire+0x2928/0x651c [ 38.720667][ T4201] lock_acquire+0x1f4/0x620 [ 38.721394][ T4201] __flush_work+0xf4/0x1bc [ 38.722095][ T4201] flush_work+0x24/0x38 [ 38.722685][ T4201] hci_dev_do_close+0x164/0x105c [ 38.723408][ T4201] hci_rfkill_set_block+0xdc/0x1d0 [ 38.724215][ T4201] rfkill_set_block+0x18c/0x374 [ 38.724950][ T4201] rfkill_fop_write+0x4a4/0x5cc [ 38.725720][ T4201] vfs_write+0x280/0xa2c [ 38.726422][ T4201] ksys_write+0x120/0x210 [ 38.727132][ T4201] __arm64_sys_write+0x7c/0x90 [ 38.727892][ T4201] invoke_syscall+0x98/0x2b8 [ 38.728617][ T4201] el0_svc_common+0x138/0x258 [ 38.729373][ T4201] do_el0_svc+0x58/0x14c [ 38.730088][ T4201] el0_svc+0x78/0x1e0 [ 38.730732][ T4201] el0t_64_sync_handler+0xcc/0xe4 [ 38.731560][ T4201] el0t_64_sync+0x1a0/0x1a4 [ 38.734771][ T4111] Bluetooth: hci0: command 0x040f tx timeout [ 38.735942][ T4111] Bluetooth: hci3: command 0x040f tx timeout [ 38.739714][ T4111] Bluetooth: hci2: command 0x040f tx timeout [ 38.740680][ T4111] Bluetooth: hci1: command 0x040f tx timeout [ 38.745047][ T4205] tipc: Started in network mode [ 38.747660][ T4205] tipc: Node identity ead5b7e7da73, cluster identity 4711 [ 38.748869][ T4205] tipc: Enabled bearer , priority 0 [ 38.751377][ T4205] device syzkaller0 entered promiscuous mode [ 38.758243][ T4199] Bluetooth: hci4: command 0x040f tx timeout [ 38.763771][ T4205] tipc: Resetting bearer [ 38.767842][ T4204] tipc: Resetting bearer [ 38.776527][ T4204] tipc: Disabling bearer