last executing test programs: 3.614283304s ago: executing program 0 (id=1): socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_pidfd_open(r2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0xff02) 2.642730236s ago: executing program 0 (id=6): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000180)={0x0, 0xb56, 0x5}) fanotify_init(0x4, 0x1000) 2.576171397s ago: executing program 0 (id=7): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$kcm(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0008"], 0x34}}, 0x400c010) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f0000000000)={0xd22, 0x200, 0x5, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1.513506321s ago: executing program 0 (id=8): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x38, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0xcb}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0x8, 0x0, 0x1, [@nested={0x6, 0x138, 0x0, 0x1, [@generic="da59"]}]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x38}, 0x1, 0x0, 0x0, 0x404c801}, 0x0) 1.426359324s ago: executing program 4 (id=5): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x810) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@private1, 0x0, 0x2, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x5, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x2}, {0x0, 0xaf, 0x400000003, 0xfffffffffffffffc}, 0x1, 0x0, 0x1, 0x0, 0x3}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4cf, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x1, 0xb7, 0x3, 0xfffffffe}}, 0xe4) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) timerfd_create(0x0, 0x800) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @empty, 0x1}, {0xa, 0x4e22, 0x2, @remote, 0x80000000}, r4, 0xfffffe4d}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbd5bbbbbb00000000000008060001080006040001000000000000ac1414bbbbbbbb07bbbbac1414bb"], 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x23}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) 704.498168ms ago: executing program 0 (id=9): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x108}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 469.620115ms ago: executing program 1 (id=2): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) fanotify_mark(r1, 0x445, 0x1001, r1, 0x0) 413.867697ms ago: executing program 4 (id=10): openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 399.875677ms ago: executing program 2 (id=3): ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @adapter={0x5, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x5}}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB='&'], 0x10) 367.140018ms ago: executing program 2 (id=11): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) syz_emit_ethernet(0x46, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r3 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@ifindex, 0x13, 0x1, 0xf, &(0x7f0000000440)=[0x0], 0x1, 0x0, &(0x7f0000000480)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x18, 0x54, 0x1, 0x70bd29, 0x2, {0x7, r5}}, 0x18}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc01c5869, &(0x7f0000000780)={r2, &(0x7f0000000680)='tls', 0x201, &(0x7f0000000580)={@align, {0xfc, 0x2, 0x8, 0xffffffffffffff00}}, 0x7, &(0x7f0000000700), &(0x7f0000000740)=0x2f7}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@ifindex=r5, r3, 0xfe12bcd38ec9e455, 0x4, 0x0, @void, @value=r6, @void, @void, r4}, 0x20) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f00000004c0)={r8, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)={r9, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r11, 0xffffffffffffffff, 0x0) 275.977771ms ago: executing program 1 (id=12): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) syz_emit_ethernet(0x46, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r3 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@ifindex, 0x13, 0x1, 0xf, &(0x7f0000000440)=[0x0], 0x1, 0x0, &(0x7f0000000480)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x18, 0x54, 0x1, 0x70bd29, 0x2, {0x7, r5}}, 0x18}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc01c5869, &(0x7f0000000780)={r2, &(0x7f0000000680)='tls', 0x201, &(0x7f0000000580)={@align, {0xfc, 0x2, 0x8, 0xffffffffffffff00}}, 0x7, &(0x7f0000000700), &(0x7f0000000740)=0x2f7}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@ifindex=r5, r3, 0xfe12bcd38ec9e455, 0x4, 0x0, @void, @value=r6, @void, @void, r4}, 0x20) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f00000004c0)={r8, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)={r9, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r11, 0xffffffffffffffff, 0x0) 80.693208ms ago: executing program 1 (id=13): syz_usb_connect$uac1(0x3, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40086201, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 0s ago: executing program 2 (id=14): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) socket$inet6_sctp(0xa, 0x801, 0x84) socket$l2tp(0x2, 0x2, 0x73) socket$kcm(0x29, 0x2, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000080)=[0x2], &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.234' (ED25519) to the list of known hosts. [ 60.966952][ T4174] cgroup: Unknown subsys name 'net' [ 61.122656][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 62.737760][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 64.179116][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 64.220126][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 64.339628][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 64.367982][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.375789][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.392734][ T4194] device bridge_slave_0 entered promiscuous mode [ 64.420111][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.427478][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.435516][ T4198] device bridge_slave_0 entered promiscuous mode [ 64.443586][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.450909][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.459532][ T4194] device bridge_slave_1 entered promiscuous mode [ 64.493250][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 64.507851][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.514924][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.523647][ T4198] device bridge_slave_1 entered promiscuous mode [ 64.531180][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 64.544030][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.582734][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.618388][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.647481][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.690769][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.698068][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.706131][ T4187] device bridge_slave_0 entered promiscuous mode [ 64.721259][ T4194] team0: Port device team_slave_0 added [ 64.739965][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.747392][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.755471][ T4187] device bridge_slave_1 entered promiscuous mode [ 64.769369][ T4194] team0: Port device team_slave_1 added [ 64.797601][ T4198] team0: Port device team_slave_0 added [ 64.832845][ T4198] team0: Port device team_slave_1 added [ 64.861258][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.868583][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.877337][ T4191] device bridge_slave_0 entered promiscuous mode [ 64.885515][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.892844][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.901239][ T4196] device bridge_slave_0 entered promiscuous mode [ 64.917876][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.924865][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.951167][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.967284][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.976730][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.983816][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.992327][ T4191] device bridge_slave_1 entered promiscuous mode [ 65.000080][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.007582][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.015390][ T4196] device bridge_slave_1 entered promiscuous mode [ 65.022937][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.030092][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.056832][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.069609][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.076883][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.102982][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.114889][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.121984][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.148542][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.162497][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.236855][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.255390][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.268523][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.300006][ T4198] device hsr_slave_0 entered promiscuous mode [ 65.311111][ T4198] device hsr_slave_1 entered promiscuous mode [ 65.320177][ T4187] team0: Port device team_slave_0 added [ 65.333980][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.365651][ T4187] team0: Port device team_slave_1 added [ 65.382629][ T4194] device hsr_slave_0 entered promiscuous mode [ 65.389742][ T4194] device hsr_slave_1 entered promiscuous mode [ 65.396615][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.404422][ T4194] Cannot create hsr debugfs directory [ 65.422200][ T4191] team0: Port device team_slave_0 added [ 65.436265][ T4196] team0: Port device team_slave_0 added [ 65.451047][ T4191] team0: Port device team_slave_1 added [ 65.474033][ T4196] team0: Port device team_slave_1 added [ 65.499475][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.507395][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.533758][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.550297][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.557329][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.584222][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.616116][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.623147][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.649923][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.670693][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.678484][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.704626][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.723747][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.730967][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.757093][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.769265][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.776459][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.802469][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.836905][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 65.843835][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 65.887084][ T4187] device hsr_slave_0 entered promiscuous mode [ 65.893809][ T4187] device hsr_slave_1 entered promiscuous mode [ 65.900662][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.908467][ T4187] Cannot create hsr debugfs directory [ 65.916578][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 65.960333][ T4191] device hsr_slave_0 entered promiscuous mode [ 65.967952][ T4191] device hsr_slave_1 entered promiscuous mode [ 65.974714][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.982482][ T4191] Cannot create hsr debugfs directory [ 65.995612][ T4196] device hsr_slave_0 entered promiscuous mode [ 65.998301][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 66.008525][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 66.009198][ T4196] device hsr_slave_1 entered promiscuous mode [ 66.021641][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.029360][ T4196] Cannot create hsr debugfs directory [ 66.312023][ T4198] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.343043][ T4198] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.356029][ T4198] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.370219][ T4198] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.388554][ T4194] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.401539][ T4194] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.412220][ T4194] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.441322][ T4194] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.503813][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.520234][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.532691][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.545149][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.637613][ T4196] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.662962][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.681921][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.689322][ T4196] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.700352][ T4196] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.713758][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.723698][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.734496][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.743082][ T4196] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.780769][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.797299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.806718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.816091][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.823387][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.832987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.842636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.852019][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.859178][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.867419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.875613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.883718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.892757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.902211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.911444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.920535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.932056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.973428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.982220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.991417][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.998551][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.009183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.018437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.027142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.035826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.044496][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.051653][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.060531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.069292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.077877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.087510][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.124847][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.132245][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.144154][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.160004][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.169019][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.179028][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.189443][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.199662][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.212308][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.228003][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.272907][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.284919][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.303221][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.312765][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.328671][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.337015][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.344857][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.364393][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.395269][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.404382][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.434554][ T4198] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.448600][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.494869][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.505424][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.515033][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.530193][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.539055][ T4217] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.546182][ T4217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.554656][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.564828][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.573654][ T4217] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.580800][ T4217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.590089][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.600268][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.609728][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.618924][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.633030][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.641720][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.680363][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.695240][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.704958][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.722442][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.733627][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.752549][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.762026][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.770995][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.780005][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.798815][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.816874][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.841025][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.855695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.864341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.900940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.911197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.920307][ T4233] Bluetooth: hci0: command 0x041b tx timeout [ 67.933620][ T4233] Bluetooth: hci1: command 0x041b tx timeout [ 67.941209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.955323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.964679][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.971821][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.996093][ T4233] Bluetooth: hci2: command 0x041b tx timeout [ 68.024620][ T4194] device veth0_vlan entered promiscuous mode [ 68.033409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.043154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.053493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.067386][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.074477][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.082511][ T4228] Bluetooth: hci4: command 0x041b tx timeout [ 68.089266][ T4228] Bluetooth: hci3: command 0x041b tx timeout [ 68.097158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.106501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.115518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.125588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.134928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.143586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.152555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.161219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.169393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.184976][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.201095][ T4194] device veth1_vlan entered promiscuous mode [ 68.210889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.220945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.230165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.238579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.247893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.273614][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.289569][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.304246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.313529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.336872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.346408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.363883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.374743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.390465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.404203][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.462877][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.471912][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.484118][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.491280][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.502592][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.512783][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.522107][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.529280][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.537592][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.545128][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.553062][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.570936][ T4194] device veth0_macvtap entered promiscuous mode [ 68.592283][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.622435][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.634644][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.647395][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.656740][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.698917][ T4194] device veth1_macvtap entered promiscuous mode [ 68.722911][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.732150][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.742238][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.753387][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.762703][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.772201][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.790107][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.799507][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.809012][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.845083][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.857844][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.871632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.881328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.892193][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.914202][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.929437][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.943724][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.960737][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.996226][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.013556][ T4194] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.023294][ T4194] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.039499][ T4194] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.048550][ T4194] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.066188][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.077833][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.087491][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.097152][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.105650][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.114560][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.124358][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.132937][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.142933][ T4187] device veth0_vlan entered promiscuous mode [ 69.211989][ T4198] device veth0_vlan entered promiscuous mode [ 69.222402][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.234189][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.244234][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.252129][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.268771][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.283486][ T4198] device veth1_vlan entered promiscuous mode [ 69.295495][ T4187] device veth1_vlan entered promiscuous mode [ 69.303890][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.313679][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.322158][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.331039][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.384338][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.394958][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.422606][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.446169][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.455072][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.467966][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.477574][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.512754][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.525364][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.536946][ T4198] device veth0_macvtap entered promiscuous mode [ 69.552043][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.561041][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.570783][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.580239][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.588580][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.598529][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.613095][ T4187] device veth0_macvtap entered promiscuous mode [ 69.631102][ T4196] device veth0_vlan entered promiscuous mode [ 69.640276][ T4198] device veth1_macvtap entered promiscuous mode [ 69.657257][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.665345][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.674861][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.684078][ T715] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.701546][ T4187] device veth1_macvtap entered promiscuous mode [ 69.721016][ T4196] device veth1_vlan entered promiscuous mode [ 69.731739][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.740740][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.750245][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.761076][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.776165][ T715] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.784016][ T715] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.792970][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.805469][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.819605][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.848663][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.857421][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.865239][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.881474][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.893151][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.905332][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.917573][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.931671][ T4191] device veth0_vlan entered promiscuous mode [ 69.957431][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.972233][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.982925][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.996298][ T1108] Bluetooth: hci1: command 0x040f tx timeout [ 70.005084][ T1108] Bluetooth: hci0: command 0x040f tx timeout [ 70.015700][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.029633][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.037873][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.052925][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.061526][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.076539][ T1108] Bluetooth: hci2: command 0x040f tx timeout [ 70.085785][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.097649][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.108252][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.119708][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.131779][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.147936][ T4198] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.156746][ T1108] Bluetooth: hci3: command 0x040f tx timeout [ 70.156791][ T1108] Bluetooth: hci4: command 0x040f tx timeout [ 70.176509][ T4198] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.185543][ T4198] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.200342][ T4198] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.214866][ T4196] device veth0_macvtap entered promiscuous mode [ 70.241704][ T4191] device veth1_vlan entered promiscuous mode [ 70.250047][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.259180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.269967][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.279609][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.293192][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.303968][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.329877][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.345488][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.363362][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.381327][ T4196] device veth1_macvtap entered promiscuous mode [ 70.392871][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.407136][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.421486][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.442557][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.452528][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.462805][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.483870][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.513977][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.526410][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.536771][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.548936][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.560424][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.571546][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.583508][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.643231][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.652237][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.668405][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.682051][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.697042][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.721387][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.732084][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.746211][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.756124][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.767500][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.779857][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.795745][ T4191] device veth0_macvtap entered promiscuous mode [ 70.810165][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.820531][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.829761][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.846468][ T4196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.856508][ T4196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.865233][ T4196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.874858][ T4196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.892825][ T4191] device veth1_macvtap entered promiscuous mode [ 70.922829][ T715] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.933936][ T715] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.962981][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.985114][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.030631][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.044068][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.054849][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.065653][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.076064][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.087060][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.097265][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.108501][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.120838][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.147119][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.157571][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.200932][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.207540][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.235705][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.256199][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.275550][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.287415][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.297871][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.308834][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.319538][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.330718][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.345527][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.361462][ T4217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.393152][ T4217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.466652][ T4272] binder: 4268:4272 ioctl c0285840 200000000000 returned -22 [ 72.076405][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 72.083924][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 72.114806][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.127395][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.136381][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.149560][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.159299][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 72.165506][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.175249][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.189096][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.220416][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.262977][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 72.290056][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.309122][ T4217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.319722][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.326558][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 72.334717][ T4217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.368711][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.399777][ T4217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.416456][ T4217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.514016][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.725885][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 72.805880][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 72.877831][ T4273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.918615][ T4273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.277165][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.377051][ T4286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.384919][ T4286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.460658][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.584285][ T4286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.609643][ T4286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.788430][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.836960][ T4300] [ 73.839344][ T4300] ====================================================== [ 73.846398][ T4300] WARNING: possible circular locking dependency detected [ 73.853446][ T4300] syzkaller #0 Not tainted [ 73.857885][ T4300] ------------------------------------------------------ [ 73.864923][ T4300] syz.4.10/4300 is trying to acquire lock: [ 73.870769][ T4300] ffff888075ff4b98 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 73.881261][ T4300] [ 73.881261][ T4300] but task is already holding lock: [ 73.888649][ T4300] ffff888075ff4ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 73.897997][ T4300] [ 73.897997][ T4300] which lock already depends on the new lock. [ 73.897997][ T4300] [ 73.908420][ T4300] [ 73.908420][ T4300] the existing dependency chain (in reverse order) is: [ 73.917442][ T4300] [ 73.917442][ T4300] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 73.925102][ T4300] __mutex_lock_common+0x1e3/0x2400 [ 73.930841][ T4300] mutex_lock_nested+0x17/0x20 [ 73.936141][ T4300] hci_dev_do_close+0x5f/0x1030 [ 73.941525][ T4300] hci_rfkill_set_block+0x10a/0x190 [ 73.947259][ T4300] rfkill_set_block+0x1c9/0x3d0 [ 73.952649][ T4300] rfkill_fop_write+0x452/0x560 [ 73.958033][ T4300] vfs_write+0x30b/0xd60 [ 73.962812][ T4300] ksys_write+0x152/0x260 [ 73.967674][ T4300] do_syscall_64+0x4c/0xa0 [ 73.972624][ T4300] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.979053][ T4300] [ 73.979053][ T4300] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 73.987063][ T4300] __mutex_lock_common+0x1e3/0x2400 [ 73.992797][ T4300] mutex_lock_nested+0x17/0x20 [ 73.998096][ T4300] rfkill_register+0x33/0x980 [ 74.003312][ T4300] hci_register_dev+0x452/0x970 [ 74.008700][ T4300] vhci_create_device+0x32c/0x5c0 [ 74.014263][ T4300] vhci_write+0x391/0x450 [ 74.019131][ T4300] vfs_write+0x745/0xd60 [ 74.023907][ T4300] ksys_write+0x152/0x260 [ 74.028766][ T4300] do_syscall_64+0x4c/0xa0 [ 74.033715][ T4300] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.040143][ T4300] [ 74.040143][ T4300] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 74.047972][ T4300] __mutex_lock_common+0x1e3/0x2400 [ 74.053710][ T4300] mutex_lock_nested+0x17/0x20 [ 74.059009][ T4300] vhci_send_frame+0x88/0x100 [ 74.064218][ T4300] hci_send_frame+0x1a9/0x2e0 [ 74.069427][ T4300] hci_tx_work+0x9f9/0x1710 [ 74.074465][ T4300] process_one_work+0x85f/0x1010 [ 74.079932][ T4300] worker_thread+0xaa6/0x1290 [ 74.085140][ T4300] kthread+0x436/0x520 [ 74.089739][ T4300] ret_from_fork+0x1f/0x30 [ 74.094686][ T4300] [ 74.094686][ T4300] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 74.103903][ T4300] __lock_acquire+0x2c42/0x7d10 [ 74.109298][ T4300] lock_acquire+0x19e/0x400 [ 74.114334][ T4300] __flush_work+0x116/0x210 [ 74.119371][ T4300] hci_dev_do_close+0x1e7/0x1030 [ 74.124840][ T4300] hci_rfkill_set_block+0x10a/0x190 [ 74.130575][ T4300] rfkill_set_block+0x1c9/0x3d0 [ 74.135968][ T4300] rfkill_fop_write+0x452/0x560 [ 74.141347][ T4300] vfs_write+0x30b/0xd60 [ 74.146121][ T4300] ksys_write+0x152/0x260 [ 74.150982][ T4300] do_syscall_64+0x4c/0xa0 [ 74.155935][ T4300] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.162365][ T4300] [ 74.162365][ T4300] other info that might help us debug this: [ 74.162365][ T4300] [ 74.172596][ T4300] Chain exists of: [ 74.172596][ T4300] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 74.172596][ T4300] [ 74.187546][ T4300] Possible unsafe locking scenario: [ 74.187546][ T4300] [ 74.194998][ T4300] CPU0 CPU1 [ 74.200372][ T4300] ---- ---- [ 74.205745][ T4300] lock(&hdev->req_lock); [ 74.210186][ T4300] lock(rfkill_global_mutex); [ 74.217482][ T4300] lock(&hdev->req_lock); [ 74.224425][ T4300] lock((work_completion)(&hdev->tx_work)); [ 74.230419][ T4300] [ 74.230419][ T4300] *** DEADLOCK *** [ 74.230419][ T4300] [ 74.238571][ T4300] 2 locks held by syz.4.10/4300: [ 74.243512][ T4300] #0: ffffffff8d6c65a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 74.253642][ T4300] #1: ffff888075ff4ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 74.263400][ T4300] [ 74.263400][ T4300] stack backtrace: [ 74.269313][ T4300] CPU: 1 PID: 4300 Comm: syz.4.10 Not tainted syzkaller #0 [ 74.276520][ T4300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 74.286690][ T4300] Call Trace: [ 74.289982][ T4300] [ 74.292928][ T4300] dump_stack_lvl+0x188/0x250 [ 74.297644][ T4300] ? load_image+0x400/0x400 [ 74.302157][ T4300] ? show_regs_print_info+0x20/0x20 [ 74.307375][ T4300] ? print_circular_bug+0x12b/0x1a0 [ 74.312586][ T4300] check_noncircular+0x296/0x330 [ 74.317540][ T4300] ? look_up_lock_class+0x71/0x110 [ 74.322675][ T4300] ? add_chain_block+0x940/0x940 [ 74.327625][ T4300] ? lockdep_lock+0xf1/0x1f0 [ 74.332235][ T4300] ? mark_lock+0x94/0x320 [ 74.336584][ T4300] __lock_acquire+0x2c42/0x7d10 [ 74.341462][ T4300] ? lockdep_unlock+0x143/0x2e0 [ 74.346329][ T4300] ? mark_lock+0x94/0x320 [ 74.350685][ T4300] ? verify_lock_unused+0x140/0x140 [ 74.355900][ T4300] ? __lock_acquire+0x12e8/0x7d10 [ 74.360954][ T4300] lock_acquire+0x19e/0x400 [ 74.365476][ T4300] ? __flush_work+0xfa/0x210 [ 74.370079][ T4300] ? verify_lock_unused+0x140/0x140 [ 74.375304][ T4300] ? __mutex_trylock_common+0x155/0x260 [ 74.380864][ T4300] ? read_lock_is_recursive+0x10/0x10 [ 74.386257][ T4300] __flush_work+0x116/0x210 [ 74.390781][ T4300] ? __flush_work+0xfa/0x210 [ 74.395420][ T4300] ? flush_work+0x20/0x20 [ 74.399767][ T4300] ? hci_leds_update_powered+0x148/0x160 [ 74.405436][ T4300] ? rcu_lock_release+0x5/0x20 [ 74.410214][ T4300] ? __lock_acquire+0x7d10/0x7d10 [ 74.415352][ T4300] hci_dev_do_close+0x1e7/0x1030 [ 74.420307][ T4300] ? _raw_spin_unlock+0x40/0x40 [ 74.425172][ T4300] hci_rfkill_set_block+0x10a/0x190 [ 74.430387][ T4300] ? rcu_lock_release+0x20/0x20 [ 74.435343][ T4300] rfkill_set_block+0x1c9/0x3d0 [ 74.440217][ T4300] rfkill_fop_write+0x452/0x560 [ 74.445175][ T4300] ? rfkill_fop_read+0x520/0x520 [ 74.450125][ T4300] ? common_file_perm+0xc0/0x1c0 [ 74.455077][ T4300] ? fsnotify_perm+0x5d/0x560 [ 74.459778][ T4300] ? security_file_permission+0x75/0xa0 [ 74.465349][ T4300] ? rfkill_fop_read+0x520/0x520 [ 74.470319][ T4300] vfs_write+0x30b/0xd60 [ 74.474579][ T4300] ? file_end_write+0x250/0x250 [ 74.479447][ T4300] ? __fget_files+0x40f/0x480 [ 74.484141][ T4300] ? __fdget_pos+0x1e2/0x370 [ 74.488746][ T4300] ? ksys_write+0x71/0x260 [ 74.493177][ T4300] ksys_write+0x152/0x260 [ 74.497609][ T4300] ? __ia32_sys_read+0x80/0x80 [ 74.502407][ T4300] ? lockdep_hardirqs_on+0x94/0x140 [ 74.507754][ T4300] do_syscall_64+0x4c/0xa0 [ 74.512209][ T4300] ? clear_bhb_loop+0x30/0x80 [ 74.516915][ T4300] ? clear_bhb_loop+0x30/0x80 [ 74.521623][ T4300] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.527559][ T4300] RIP: 0033:0x7ff52d94ae59 [ 74.532003][ T4300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.551633][ T4300] RSP: 002b:00007ff52bba4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 74.560077][ T4300] RAX: ffffffffffffffda RBX: 00007ff52dbc3fa0 RCX: 00007ff52d94ae59 [ 74.568071][ T4300] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000006 [ 74.576069][ T4300] RBP: 00007ff52d9e0d6f R08: 0000000000000000 R09: 0000000000000000 [ 74.584072][ T4300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.592069][ T4300] R13: 00007ff52dbc4038 R14: 00007ff52dbc3fa0 R15: 00007ffc04f1bea8 [ 74.600078][ T4300]