last executing test programs: 6.213750916s ago: executing program 2 (id=7): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@setlink={0x28, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'bridge0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000240)={'batadv0\x00', 0x1}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 5.254456813s ago: executing program 2 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./exp\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)=' +4.1 +4.2\n', 0xc) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000003c0)='tcp 2049\n', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000440)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd/v4_end_grace\x00', 0x2, 0x0) write(r3, &(0x7f00000004c0)='Y\n', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000540)='nfsd 127.0.0.1 2147483647 testdomain\n', 0x25) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r5, &(0x7f00000005c0)='testdomain 1 \\x00000000 2147483647 ./exp\n', 0x2b) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r6, &(0x7f0000000640)='testdomain ./exp 2147483647 8224 65534 65534 0\n', 0x30) close(r6) mount$nfs4(&(0x7f0000000700)='127.0.0.1:/\x00', &(0x7f0000000740)='./mnt\x00', &(0x7f0000000780), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,vers=4.1,noresvport']) r7 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./mnt/test\x00', 0x40, 0x1ff) close(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./exp/test\x00', 0x202, 0x1ff) close(r8) 4.022490995s ago: executing program 2 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='-2 -3\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='2049\n', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='1\n', 0x2) 1.935793333s ago: executing program 3 (id=23): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x0, 0x0}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xdc}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000100)="01020304", 0x4, 0x0, &(0x7f0000000200)={0x2, 0x1234, @loopback}, 0x10) 1.828167885s ago: executing program 3 (id=24): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$nci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="41030100"], 0x4) write$nci(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="61051d01030580ff01000000001211000000000000000000000000000046666d"], 0x20) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0000130701010f0175726e3a6e66633a736e3a736470"], 0x16) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) 1.647926342s ago: executing program 3 (id=26): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f0000000340)=""/100, 0x64) write$nci(r0, &(0x7f00000003c0)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000400)=""/100, 0x64) write$nci(r0, &(0x7f0000000480)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000580)=""/100, 0x64) write$nci(r0, &(0x7f0000000600)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000640)=""/100, 0x64) write$nci(r0, &(0x7f00000006c0)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000700)=""/100, 0x64) write$nci(r0, &(0x7f0000000780)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f00000007c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x0, @a={0x0, 0x2, 0x4, 0x0, 0xff, 0x1, 0x4, {}, 0x0, 0x0, 0x0, 0x2, 0x1, 'U'}}, 0x14) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 1.487853955s ago: executing program 4 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/hsr/hsr0/node_table\x00', 0x0, 0x0) 1.445966014s ago: executing program 4 (id=30): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r0, &(0x7f0000000080)="45000000040000000000", 0xa) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e0401031000"], 0x7) 1.112239822s ago: executing program 1 (id=31): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000) 1.078350729s ago: executing program 1 (id=32): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x24, r1, 0x0, 0x0, 0x0, {}, [@HEADER={0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x9}]}]}, 0x24}}, 0x0) 1.07402156s ago: executing program 0 (id=33): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') unshare(0x40000000) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') setns(r0, 0x40000000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth1\x00'}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}]}, 0x3c}}, 0x0) 960.127933ms ago: executing program 2 (id=34): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000240)=""/100, 0x64) write$nci(r0, &(0x7f00000002c0)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3}, 0x6) read$nci(r0, &(0x7f0000000300)=""/100, 0x64) write$nci(r0, &(0x7f0000000380)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0xc}, 0x14) read$nci(r0, &(0x7f00000003c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000440)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) 699.227036ms ago: executing program 0 (id=35): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newnexthop={0x34, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0x1}]}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@ipv4_newroute={0x34, 0x18, 0x401, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2a}}, @RTA_NH_ID={0x8, 0x1e, 0x3}]}, 0x34}}, 0x0) 698.932636ms ago: executing program 4 (id=36): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x44}}, 0x0) 698.409277ms ago: executing program 0 (id=37): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x40, 0x700, 0x40, 0x1, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f6, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) 698.336517ms ago: executing program 4 (id=38): syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e0401031000"], 0x7) 614.863524ms ago: executing program 2 (id=39): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000080)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) setns(0xc9, 0x40000000) socket(0x1f, 0x5, 0x8) 560.110055ms ago: executing program 1 (id=40): mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/hsr/hsr0/node_table\x00', 0x0, 0x0) 559.725545ms ago: executing program 3 (id=41): r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000000)="380000003f000501010000000000000001020000000000000f0001006f76732d73797374656d00000800020000000000080009002a000000", 0x38) write(r0, &(0x7f0000000100)="6000000041000901020000000000000001010000000000002c000100100004000000000000000000000000000600060008000000100007000101010102020202000040001c000200180003001400100008000200010101010500040040000000", 0x60) write(r0, &(0x7f0000000200)="4400000041000100030000000000000003010000000000002c00010010000400000000000000000000000000060006000800000010000700010101010202020200004000", 0x44) write(r0, &(0x7f0000000300)="60000000410009010200000000000000010100002a0000002c000100100004000000000000000000000000000600060008000000100007000101010102020202000040001c000200180003001400100008000200010101010500040040000000", 0x60) write(r0, &(0x7f0000000400)="44000000410001000300000000000000030100002a0000002c00010010000400000000000000000000000000060006000800000010000700010101010202020200004000", 0x44) 536.68981ms ago: executing program 0 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000) 471.773743ms ago: executing program 3 (id=43): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x100}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000200)="01020304", 0x4, 0x0, &(0x7f0000000300)={0x2, 0x1234, @loopback}, 0x10) 388.09594ms ago: executing program 2 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='1\n', 0x2) 387.40702ms ago: executing program 1 (id=45): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newsa={0x148, 0x1a, 0x633, 0x0, 0x25dfdbfd, {{}, {@in6=@remote, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323, 0x80000001, 0x0, 0xc0, 0x4000, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x200000000}, {}, 0x70bd29, 0x3503, 0xa, 0x5}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_pkt_size={0x8, 0x29, 0x8}]}, 0x148}}, 0x200080d4) 324.124444ms ago: executing program 0 (id=46): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="8c000000000105040000000000000000020000003400018014000180080001007f000001080002007f0000011c00028005000100110000000600020013c4000006000300303900003400028014000180080001007f000001080002007f0000011c000280050001001100000006000200303900000600030013c400000c00058008000100736970000800070000000078"], 0x8c}}, 0x0) 323.842573ms ago: executing program 3 (id=47): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r0, &(0x7f0000000080)="45000000040000000000", 0xa) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e0401031000"], 0x7) 204.190118ms ago: executing program 1 (id=48): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) 184.330272ms ago: executing program 0 (id=49): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000240)=""/100, 0x64) write$nci(r0, &(0x7f00000002c0)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3}, 0x6) read$nci(r0, &(0x7f0000000300)=""/100, 0x64) write$nci(r0, &(0x7f0000000380)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0xc}, 0x14) read$nci(r0, &(0x7f00000003c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000440)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) 99.34028ms ago: executing program 4 (id=50): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@ipv4_newroute={0x34, 0x18, 0x401, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2a}}, @RTA_NH_ID={0x8, 0x1e, 0x3}]}, 0x34}}, 0x0) 16.207867ms ago: executing program 1 (id=51): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0xffffffff}, 0x10) 0s ago: executing program 4 (id=52): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x40, 0x700, 0x40, 0x1, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f6, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.183' (ED25519) to the list of known hosts. [ 73.663638][ T4259] cgroup: Unknown subsys name 'net' [ 73.778124][ T4259] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.332969][ T4259] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 77.253546][ T4286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.261685][ T4286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.270141][ T4286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.278417][ T4286] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.283339][ T4290] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.287794][ T4286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.293808][ T4290] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.301386][ T4286] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.309042][ T4290] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.315884][ T4286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.322420][ T4290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.330280][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.335934][ T4290] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.343147][ T4286] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.350133][ T4290] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.358585][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.374517][ T4286] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.374865][ T4291] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.383401][ T4286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.391131][ T4291] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.398065][ T4286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.406084][ T4291] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.411681][ T4286] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 77.419864][ T4291] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.426558][ T4286] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.433835][ T4291] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.440744][ T4286] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.447645][ T4291] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.486942][ T4277] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.495115][ T4277] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.888040][ T4274] chnl_net:caif_netlink_parms(): no params data found [ 77.978451][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 78.047832][ T4287] chnl_net:caif_netlink_parms(): no params data found [ 78.115089][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 78.124785][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.134280][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.142605][ T4274] device bridge_slave_0 entered promiscuous mode [ 78.167175][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 78.182840][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.189931][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.200613][ T4274] device bridge_slave_1 entered promiscuous mode [ 78.268664][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.276032][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.287152][ T4275] device bridge_slave_0 entered promiscuous mode [ 78.300866][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.308372][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.316616][ T4275] device bridge_slave_1 entered promiscuous mode [ 78.331622][ T4287] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.338963][ T4287] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.347752][ T4287] device bridge_slave_0 entered promiscuous mode [ 78.390989][ T4287] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.398775][ T4287] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.407583][ T4287] device bridge_slave_1 entered promiscuous mode [ 78.417372][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.437949][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.474076][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.511465][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.519486][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.528225][ T4273] device bridge_slave_0 entered promiscuous mode [ 78.549068][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.560385][ T4287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.571660][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.579313][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.587412][ T4273] device bridge_slave_1 entered promiscuous mode [ 78.596194][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.603731][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.611532][ T4271] device bridge_slave_0 entered promiscuous mode [ 78.621819][ T4274] team0: Port device team_slave_0 added [ 78.637998][ T4287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.655164][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.665153][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.674251][ T4271] device bridge_slave_1 entered promiscuous mode [ 78.682767][ T4274] team0: Port device team_slave_1 added [ 78.713761][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.738913][ T4275] team0: Port device team_slave_0 added [ 78.752956][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.777932][ T4275] team0: Port device team_slave_1 added [ 78.789818][ T4287] team0: Port device team_slave_0 added [ 78.803077][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.813899][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.820884][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.847298][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.868932][ T4287] team0: Port device team_slave_1 added [ 78.909292][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.919667][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.926803][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.957087][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.987591][ T4273] team0: Port device team_slave_0 added [ 78.995757][ T4287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.003890][ T4287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.034411][ T4287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.059497][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.066918][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.095116][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.109334][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.116784][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.144397][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.158458][ T4273] team0: Port device team_slave_1 added [ 79.165054][ T4287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.172123][ T4287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.199086][ T4287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.254482][ T4271] team0: Port device team_slave_0 added [ 79.274929][ T4274] device hsr_slave_0 entered promiscuous mode [ 79.283045][ T4274] device hsr_slave_1 entered promiscuous mode [ 79.312124][ T4275] device hsr_slave_0 entered promiscuous mode [ 79.319437][ T4275] device hsr_slave_1 entered promiscuous mode [ 79.326599][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.334803][ T4275] Cannot create hsr debugfs directory [ 79.340980][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.348381][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.374927][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.394143][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.401257][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.427949][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.440243][ T4271] team0: Port device team_slave_1 added [ 79.470060][ T4287] device hsr_slave_0 entered promiscuous mode [ 79.477101][ T4287] device hsr_slave_1 entered promiscuous mode [ 79.484149][ T4287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.493107][ T4287] Cannot create hsr debugfs directory [ 79.553564][ T4291] Bluetooth: hci1: command 0x0409 tx timeout [ 79.559893][ T4291] Bluetooth: hci3: command 0x0409 tx timeout [ 79.566268][ T4290] Bluetooth: hci2: command 0x0409 tx timeout [ 79.582554][ T4292] Bluetooth: hci4: command 0x0409 tx timeout [ 79.601294][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.608848][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.632510][ T4292] Bluetooth: hci0: command 0x0409 tx timeout [ 79.636040][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.670412][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.677643][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.707790][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.734512][ T4273] device hsr_slave_0 entered promiscuous mode [ 79.741335][ T4273] device hsr_slave_1 entered promiscuous mode [ 79.748284][ T4273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.755962][ T4273] Cannot create hsr debugfs directory [ 79.897798][ T4271] device hsr_slave_0 entered promiscuous mode [ 79.905389][ T4271] device hsr_slave_1 entered promiscuous mode [ 79.911969][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.919780][ T4271] Cannot create hsr debugfs directory [ 80.085993][ T4287] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.096939][ T4287] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.117973][ T4287] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.128577][ T4287] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.202532][ T4274] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.218583][ T4274] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.231255][ T4274] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.255331][ T4274] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.296617][ T4275] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.307357][ T4275] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.333168][ T4287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.350413][ T4275] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.375211][ T4275] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.395028][ T4287] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.402600][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.417750][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.449973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.462098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.471534][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.479010][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.530361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.541381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.555374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.565581][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.572865][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.583812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.593557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.606496][ T4273] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.617425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.627884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.654968][ T4273] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.670437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.705927][ T4273] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.724731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.735689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.747805][ T4271] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.760856][ T4271] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.775191][ T4273] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.788031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.797660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.807569][ T4271] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.834656][ T4287] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.851118][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.871767][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.882027][ T4271] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.894530][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.911050][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.987752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.004254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.033853][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.058163][ T4274] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.101608][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.110776][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.119119][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.143364][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.152222][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.169368][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.176591][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.191176][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.200781][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.217847][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.225334][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.241510][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.250338][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.280882][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.291561][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.303348][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.310584][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.320783][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.329801][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.338367][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.345456][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.353709][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.385250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.397638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.409652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.419673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.429037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.439878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.463086][ T4287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.478074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.490086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.499818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.509584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.517775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.527535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.536772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.554543][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.590421][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.598278][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.608314][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.617477][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.626479][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.635330][ T4291] Bluetooth: hci2: command 0x041b tx timeout [ 81.635393][ T4291] Bluetooth: hci4: command 0x041b tx timeout [ 81.642169][ T4292] Bluetooth: hci1: command 0x041b tx timeout [ 81.648617][ T4291] Bluetooth: hci3: command 0x041b tx timeout [ 81.655332][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.671476][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.681168][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.689983][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.712801][ T4292] Bluetooth: hci0: command 0x041b tx timeout [ 81.721734][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.738772][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.748584][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.756641][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.767783][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.786590][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.817428][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.832789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.841949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.861641][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.868900][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.886438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.899621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.911695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.927657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.937218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.955873][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.987029][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.004532][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.024718][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.034883][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.045077][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.052957][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.061847][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.071700][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.081483][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.095601][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.109160][ T4287] device veth0_vlan entered promiscuous mode [ 82.142479][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.151650][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.165742][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.175341][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.186669][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.211272][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.219004][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.234098][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.247669][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.259851][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.277737][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.291169][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.300504][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.310893][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.338786][ T4287] device veth1_vlan entered promiscuous mode [ 82.364873][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.379007][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.391189][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.398492][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.414706][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.426939][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.444700][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.499834][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.520769][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.529909][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.548344][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.568401][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.586254][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.597927][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.609110][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.620585][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.648860][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.663847][ T4271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.682017][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.690958][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.707997][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.720253][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.735609][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.752085][ T4287] device veth0_macvtap entered promiscuous mode [ 82.783745][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.792098][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.813196][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.820811][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.877027][ T4287] device veth1_macvtap entered promiscuous mode [ 82.957921][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.977744][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.994264][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.013246][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.047087][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.095990][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.111761][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.149339][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.168651][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.185494][ T4287] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.194722][ T4287] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.204306][ T4287] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.213806][ T4287] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.263629][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.271521][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.289387][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.299286][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.316984][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.330153][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.355803][ T4275] device veth0_vlan entered promiscuous mode [ 83.383949][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.462781][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.475716][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.496334][ T4275] device veth1_vlan entered promiscuous mode [ 83.566025][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.580268][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.589424][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.598528][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.624580][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.637234][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.646907][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.655743][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.673118][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.700970][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.711178][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.719801][ T4291] Bluetooth: hci1: command 0x040f tx timeout [ 83.719850][ T4292] Bluetooth: hci4: command 0x040f tx timeout [ 83.726159][ T4291] Bluetooth: hci3: command 0x040f tx timeout [ 83.732667][ T4290] Bluetooth: hci2: command 0x040f tx timeout [ 83.747669][ T4273] device veth0_vlan entered promiscuous mode [ 83.767053][ T4273] device veth1_vlan entered promiscuous mode [ 83.777207][ T4275] device veth0_macvtap entered promiscuous mode [ 83.789802][ T4338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.799591][ T4291] Bluetooth: hci0: command 0x040f tx timeout [ 83.814606][ T4338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.841641][ T4275] device veth1_macvtap entered promiscuous mode [ 83.865362][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.875751][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.884475][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.895939][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.904145][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.913409][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.923464][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.932666][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.941838][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.973221][ T4338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.987935][ T4274] device veth0_vlan entered promiscuous mode [ 83.994808][ T4338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.016863][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.027234][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.039137][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.062156][ T4273] device veth0_macvtap entered promiscuous mode [ 84.080614][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.089978][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.099246][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.109415][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.120325][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.136316][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.148464][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.161705][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.172539][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.183268][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.196028][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.209040][ T4273] device veth1_macvtap entered promiscuous mode [ 84.222830][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.232072][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.243184][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.255080][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.264815][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.274874][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.285920][ T4274] device veth1_vlan entered promiscuous mode [ 84.299182][ T4275] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.310116][ T4275] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.320124][ T4275] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.329655][ T4275] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.343563][ T4271] device veth0_vlan entered promiscuous mode [ 84.366452][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.380123][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.416800][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.431182][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.449623][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.461412][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.480046][ T4362] svc: failed to register lockdv1 RPC service (errno 111). [ 84.480539][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.488513][ T4362] lockd_up: makesock failed, error=-111 [ 84.508440][ T4271] device veth1_vlan entered promiscuous mode [ 84.557272][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.566043][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.583876][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.596974][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.606266][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.615017][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.626576][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.643542][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.656632][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.667519][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.687304][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.699090][ T4274] device veth0_macvtap entered promiscuous mode [ 84.745217][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.754251][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.775282][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.784812][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.794056][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.808358][ T4273] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.818781][ T4273] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.828085][ T4273] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.838742][ T4273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.852518][ T4274] device veth1_macvtap entered promiscuous mode [ 84.864166][ T4271] device veth0_macvtap entered promiscuous mode [ 84.888292][ T4271] device veth1_macvtap entered promiscuous mode [ 84.945864][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.957988][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.968635][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.979246][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.989365][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.003190][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.014887][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.028751][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.041125][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.053979][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.066442][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.077057][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.088053][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.098712][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.109993][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.121485][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.137817][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.157213][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.166444][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.175503][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.186297][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.197829][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.207091][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.219155][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.230665][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.242069][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.254497][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.269891][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.280791][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.292965][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.307676][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.319020][ T4354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.339084][ T4354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.346934][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.363808][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.381603][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.394028][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.406443][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.419695][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.430743][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.445836][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.458325][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.471057][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.481337][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.489824][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.501035][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.515317][ T4274] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.524783][ T4274] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.535147][ T4274] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.544312][ T4274] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.562066][ T4368] bridge0: port 3(batadv0) entered blocking state [ 85.572855][ T4368] bridge0: port 3(batadv0) entered disabled state [ 85.580370][ T4368] device batadv0 entered promiscuous mode [ 85.587338][ T4368] bridge0: port 3(batadv0) entered blocking state [ 85.594107][ T4368] bridge0: port 3(batadv0) entered forwarding state [ 85.607826][ T4271] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.616736][ T4271] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.626162][ T4271] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.635558][ T4271] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.696405][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.708215][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.719201][ T4338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.729362][ T4338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.755568][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.764856][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.795267][ T4291] Bluetooth: hci3: command 0x0419 tx timeout [ 85.795327][ T4292] Bluetooth: hci2: command 0x0419 tx timeout [ 85.801445][ T4291] Bluetooth: hci1: command 0x0419 tx timeout [ 85.828755][ T4354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.846346][ T4354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.863855][ T11] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 85.863935][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.873949][ T11] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 85.892821][ T4292] Bluetooth: hci0: command 0x0419 tx timeout [ 86.029270][ T4338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.074887][ T4338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.081265][ T4292] Bluetooth: hci2: unexpected cc 0x1003 length: 1 < 9 [ 86.111498][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.126634][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.136302][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.148605][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.157360][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.170753][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.180651][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.250250][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.267690][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.299263][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.920205][ T32] cfg80211: failed to load regulatory.db [ 87.272465][ T4373] NFSD: attempt to initialize umh client tracking in a container ignored. [ 87.289016][ T4373] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 87.302099][ T4373] NFSD: Unable to initialize client recovery tracking! (-22) [ 87.320535][ T4373] NFSD: starting 90-second grace period (net f00004be) [ 87.956439][ T4292] Bluetooth: hci0: command 0x2027 tx timeout [ 88.003465][ T4415] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.079521][ T4415] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.151928][ T4415] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.229761][ T4415] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.360940][ T4417] Bluetooth: ISO socket layer initialized [ 88.747238][ T4410] NFSD: attempt to initialize umh client tracking in a container ignored. [ 88.758626][ T4410] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 88.767955][ T4410] NFSD: Unable to initialize client recovery tracking! (-22) [ 88.775444][ T4410] NFSD: starting 90-second grace period (net f00003d3) [ 89.069288][ T4291] Bluetooth: hci2: unexpected cc 0x1003 length: 1 < 9 [ 89.658403][ T4433] netlink: 12 bytes leftover after parsing attributes in process `syz.3.23'. [ 89.813331][ T4399] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 90.171113][ T4291] Bluetooth: hci3: unexpected cc 0x1003 length: 1 < 9 [ 90.265186][ T4423] NFSD: attempt to initialize umh client tracking in a container ignored. [ 90.283327][ T4423] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 90.293164][ T4423] NFSD: Unable to initialize client recovery tracking! (-22) [ 90.300862][ T4423] NFSD: starting 90-second grace period (net f00004be) [ 90.427422][ T4419] svc: failed to register nfsdv3 RPC service (errno 512). [ 90.443821][ T4419] svc: failed to register nfsaclv3 RPC service (errno 512). [ 90.736948][ T4474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.35'. [ 90.817634][ T4442] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 90.931674][ T4291] Bluetooth: hci3: unexpected cc 0x1003 length: 1 < 9 [ 91.050257][ T4484] netlink: 36 bytes leftover after parsing attributes in process `syz.3.41'. [ 91.156732][ T4490] netlink: 64 bytes leftover after parsing attributes in process `syz.3.43'. [ 91.301359][ T4498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.46'. [ 91.322522][ T4494] svc: failed to register nfsdv3 RPC service (errno 111). [ 91.332910][ T4291] Bluetooth: hci2: unexpected cc 0x1003 length: 1 < 9 [ 91.363928][ T4494] svc: failed to register nfsaclv3 RPC service (errno 111). [ 91.530465][ T4507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.50'. [ 91.571839][ T4508] [ 91.574252][ T4508] ====================================================== [ 91.581833][ T4508] WARNING: possible circular locking dependency detected [ 91.588870][ T4508] syzkaller #0 Not tainted [ 91.593401][ T4508] ------------------------------------------------------ [ 91.600604][ T4508] syz.0.49/4508 is trying to acquire lock: [ 91.606430][ T4508] ffff88807d1a2350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_start_poll+0x529/0xcc0 [ 91.615635][ T4508] [ 91.615635][ T4508] but task is already holding lock: [ 91.623065][ T4508] ffff88807d1a1510 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1c9/0x340 [ 91.633830][ T4508] [ 91.633830][ T4508] which lock already depends on the new lock. [ 91.633830][ T4508] [ 91.644339][ T4508] [ 91.644339][ T4508] the existing dependency chain (in reverse order) is: [ 91.653511][ T4508] [ 91.653511][ T4508] -> #3 (&genl_data->genl_data_mutex){+.+.}-{3:3}: [ 91.662345][ T4508] __mutex_lock+0x12d/0xae0 [ 91.667590][ T4508] nfc_urelease_event_work+0x120/0x310 [ 91.673702][ T4508] process_one_work+0x8ab/0x1160 [ 91.679307][ T4508] worker_thread+0xaf5/0x12a0 [ 91.684512][ T4508] kthread+0x29d/0x330 [ 91.689110][ T4508] ret_from_fork+0x1f/0x30 [ 91.694153][ T4508] [ 91.694153][ T4508] -> #2 (nfc_devlist_mutex){+.+.}-{3:3}: [ 91.702067][ T4508] __mutex_lock+0x12d/0xae0 [ 91.707116][ T4508] nfc_register_device+0x38/0x300 [ 91.712795][ T4508] nci_register_device+0x89f/0x9f0 [ 91.718533][ T4508] virtual_ncidev_open+0x55/0xc0 [ 91.724037][ T4508] misc_open+0x31f/0x390 [ 91.728850][ T4508] chrdev_open+0x585/0x5f0 [ 91.733834][ T4508] do_dentry_open+0x7dd/0x10b0 [ 91.739172][ T4508] path_openat+0x2674/0x2f10 [ 91.744585][ T4508] do_filp_open+0x1ee/0x420 [ 91.749662][ T4508] do_sys_openat2+0x14b/0x4f0 [ 91.754994][ T4508] __x64_sys_openat+0x135/0x160 [ 91.760515][ T4508] do_syscall_64+0x4c/0xa0 [ 91.765460][ T4508] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.771928][ T4508] [ 91.771928][ T4508] -> #1 (nci_mutex){+.+.}-{3:3}: [ 91.779154][ T4508] __mutex_lock+0x12d/0xae0 [ 91.784201][ T4508] virtual_nci_close+0x13/0x40 [ 91.784651][ T4514] svc: failed to register lockdv1 RPC service (errno 111). [ 91.789515][ T4508] nci_dev_up+0x976/0xd90 [ 91.801759][ T4508] nfc_dev_up+0x15d/0x310 [ 91.806619][ T4508] nfc_genl_dev_up+0x85/0xd0 [ 91.807173][ T4516] Bluetooth: MGMT ver 1.22 [ 91.811825][ T4508] genl_family_rcv_msg_doit+0x22f/0x350 [ 91.822467][ T4508] genl_rcv_msg+0x601/0x790 [ 91.827718][ T4508] netlink_rcv_skb+0x1ef/0x440 [ 91.833070][ T4508] genl_rcv+0x24/0x40 [ 91.837600][ T4508] netlink_unicast+0x7ad/0x920 [ 91.842996][ T4508] netlink_sendmsg+0x8ad/0xbd0 [ 91.848405][ T4508] ____sys_sendmsg+0x5ed/0x9a0 [ 91.853823][ T4508] ___sys_sendmsg+0x2a2/0x360 [ 91.859176][ T4508] __se_sys_sendmsg+0x1c3/0x2b0 [ 91.864679][ T4508] do_syscall_64+0x4c/0xa0 [ 91.869850][ T4508] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.876407][ T4508] [ 91.876407][ T4508] -> #0 (&ndev->req_lock){+.+.}-{3:3}: [ 91.884201][ T4508] __lock_acquire+0x2d18/0x7c40 [ 91.889800][ T4508] lock_acquire+0x1bb/0x4a0 [ 91.894883][ T4508] __mutex_lock+0x12d/0xae0 [ 91.899958][ T4508] nci_start_poll+0x529/0xcc0 [ 91.905636][ T4508] nfc_start_poll+0x141/0x2c0 [ 91.911589][ T4508] nfc_genl_start_poll+0x1d7/0x340 [ 91.917275][ T4508] genl_family_rcv_msg_doit+0x22f/0x350 [ 91.924105][ T4508] genl_rcv_msg+0x601/0x790 [ 91.930150][ T4508] netlink_rcv_skb+0x1ef/0x440 [ 91.936186][ T4508] genl_rcv+0x24/0x40 [ 91.941923][ T4508] netlink_unicast+0x7ad/0x920 [ 91.947624][ T4508] netlink_sendmsg+0x8ad/0xbd0 [ 91.953058][ T4508] ____sys_sendmsg+0x5ed/0x9a0 [ 91.959217][ T4508] ___sys_sendmsg+0x2a2/0x360 [ 91.965237][ T4508] __se_sys_sendmsg+0x1c3/0x2b0 [ 91.966234][ T4526] netlink: 24 bytes leftover after parsing attributes in process `syz.3.59'. [ 91.971512][ T4508] do_syscall_64+0x4c/0xa0 [ 91.971542][ T4508] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.971568][ T4508] [ 91.971568][ T4508] other info that might help us debug this: [ 91.971568][ T4508] [ 91.971573][ T4508] Chain exists of: [ 91.971573][ T4508] &ndev->req_lock --> nfc_devlist_mutex --> &genl_data->genl_data_mutex [ 91.971573][ T4508] [ 91.971609][ T4508] Possible unsafe locking scenario: [ 91.971609][ T4508] [ 91.971614][ T4508] CPU0 CPU1 [ 92.032724][ T4508] ---- ---- [ 92.038389][ T4508] lock(&genl_data->genl_data_mutex); [ 92.043863][ T4508] lock(nfc_devlist_mutex); [ 92.051641][ T4508] lock(&genl_data->genl_data_mutex); [ 92.059833][ T4508] lock(&ndev->req_lock); [ 92.064270][ T4508] [ 92.064270][ T4508] *** DEADLOCK *** [ 92.064270][ T4508] [ 92.072819][ T4508] 4 locks held by syz.0.49/4508: [ 92.078057][ T4508] #0: ffffffff8ddb5b90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 92.086356][ T4508] #1: ffffffff8ddb59a8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x107/0x790 [ 92.095607][ T4508] #2: ffff88807d1a1510 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1c9/0x340 [ 92.106754][ T4508] #3: ffff88807d1a1100 (&dev->mutex){....}-{3:3}, at: nfc_start_poll+0x4f/0x2c0 [ 92.115982][ T4508] [ 92.115982][ T4508] stack backtrace: [ 92.121974][ T4508] CPU: 1 PID: 4508 Comm: syz.0.49 Not tainted syzkaller #0 [ 92.129455][ T4508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 92.140157][ T4508] Call Trace: [ 92.143663][ T4508] [ 92.146797][ T4508] dump_stack_lvl+0x188/0x24e [ 92.152046][ T4508] ? load_image+0x410/0x410 [ 92.157278][ T4508] ? show_regs_print_info+0x12/0x12 [ 92.162588][ T4508] ? print_circular_bug+0x12b/0x1a0 [ 92.167920][ T4508] check_noncircular+0x296/0x330 [ 92.173078][ T4508] ? add_chain_block+0x9b0/0x9b0 [ 92.178315][ T4508] ? lockdep_lock+0xf1/0x1f0 [ 92.182937][ T4508] ? _find_first_zero_bit+0xd2/0x100 [ 92.188233][ T4508] __lock_acquire+0x2d18/0x7c40 [ 92.193700][ T4508] ? kasan_set_track+0x4b/0x70 [ 92.199001][ T4508] ? nfc_llcp_general_bytes+0x39/0x160 [ 92.204747][ T4508] ? genl_family_rcv_msg_doit+0x22f/0x350 [ 92.210868][ T4508] ? netlink_unicast+0x7ad/0x920 [ 92.215915][ T4508] ? netlink_sendmsg+0x8ad/0xbd0 [ 92.220888][ T4508] ? ____sys_sendmsg+0x5ed/0x9a0 [ 92.226017][ T4508] ? __se_sys_sendmsg+0x1c3/0x2b0 [ 92.231143][ T4508] ? do_syscall_64+0x4c/0xa0 [ 92.235932][ T4508] ? verify_lock_unused+0x140/0x140 [ 92.241162][ T4508] ? mark_lock+0x94/0x320 [ 92.245529][ T4508] lock_acquire+0x1bb/0x4a0 [ 92.250441][ T4508] ? nci_start_poll+0x529/0xcc0 [ 92.256010][ T4508] ? kasan_quarantine_put+0xd4/0x210 [ 92.262300][ T4508] ? __might_sleep+0xd0/0xd0 [ 92.267007][ T4508] ? read_lock_is_recursive+0x10/0x10 [ 92.272583][ T4508] ? slab_free_freelist_hook+0x133/0x1b0 [ 92.278255][ T4508] ? nfc_llcp_build_gb+0x31f/0x3e0 [ 92.283525][ T4508] ? __kmem_cache_free+0xb6/0x200 [ 92.288579][ T4508] __mutex_lock+0x12d/0xae0 [ 92.293106][ T4508] ? nci_start_poll+0x529/0xcc0 [ 92.298056][ T4508] ? nfc_llcp_general_bytes+0x160/0x160 [ 92.303805][ T4508] ? nfc_get_device+0x82/0xd0 [ 92.308513][ T4508] ? nci_start_poll+0x529/0xcc0 [ 92.313483][ T4508] ? nfc_release+0x1f3/0x2e0 [ 92.318358][ T4508] ? mutex_lock_nested+0x10/0x10 [ 92.323327][ T4508] ? kobject_put+0x416/0x450 [ 92.327953][ T4508] ? _raw_spin_unlock+0x24/0x40 [ 92.332808][ T4508] nci_start_poll+0x529/0xcc0 [ 92.337493][ T4508] ? __mutex_trylock_common+0x15c/0x260 [ 92.343077][ T4508] ? nci_dev_down+0x40/0x40 [ 92.347784][ T4508] ? trace_contention_end+0x5f/0x170 [ 92.353111][ T4508] ? __mutex_lock+0x1ab/0xae0 [ 92.357983][ T4508] ? trace_contention_end+0x5f/0x170 [ 92.363285][ T4508] ? __mutex_lock+0x1ab/0xae0 [ 92.368677][ T4508] ? nfc_start_poll+0x4f/0x2c0 [ 92.373576][ T4508] ? mutex_lock_nested+0x10/0x10 [ 92.378564][ T4508] ? mutex_lock_nested+0x10/0x10 [ 92.383780][ T4508] ? nfc_get_device+0x82/0xd0 [ 92.388560][ T4508] ? nfc_release+0x2e0/0x2e0 [ 92.393177][ T4508] nfc_start_poll+0x141/0x2c0 [ 92.398125][ T4508] nfc_genl_start_poll+0x1d7/0x340 [ 92.403243][ T4508] genl_family_rcv_msg_doit+0x22f/0x350 [ 92.408799][ T4508] ? end_current_label_crit_section+0x170/0x170 [ 92.415343][ T4508] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 92.421562][ T4508] ? bpf_lsm_capable+0x5/0x10 [ 92.426458][ T4508] ? security_capable+0x85/0xb0 [ 92.431532][ T4508] genl_rcv_msg+0x601/0x790 [ 92.436148][ T4508] ? genl_bind+0x360/0x360 [ 92.440680][ T4508] ? nfc_genl_dev_down+0xd0/0xd0 [ 92.445728][ T4508] netlink_rcv_skb+0x1ef/0x440 [ 92.450742][ T4508] ? genl_bind+0x360/0x360 [ 92.455176][ T4508] ? netlink_ack+0x1160/0x1160 [ 92.459979][ T4508] ? down_read+0x1a8/0x2d0 [ 92.464411][ T4508] genl_rcv+0x24/0x40 [ 92.468602][ T4508] netlink_unicast+0x7ad/0x920 [ 92.473406][ T4508] netlink_sendmsg+0x8ad/0xbd0 [ 92.478220][ T4508] ? netlink_getsockopt+0x550/0x550 [ 92.483423][ T4508] ? apparmor_socket_sendmsg+0x8a/0x330 [ 92.489145][ T4508] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 92.494474][ T4508] ? security_socket_sendmsg+0x7c/0xa0 [ 92.500039][ T4508] ? netlink_getsockopt+0x550/0x550 [ 92.505272][ T4508] ____sys_sendmsg+0x5ed/0x9a0 [ 92.510038][ T4508] ? __sys_sendmsg_sock+0x30/0x30 [ 92.515080][ T4508] ? __import_iovec+0x306/0x510 [ 92.520044][ T4508] ? import_iovec+0x6f/0xa0 [ 92.524614][ T4508] ___sys_sendmsg+0x2a2/0x360 [ 92.529330][ T4508] ? __sys_sendmsg+0x2a0/0x2a0 [ 92.534148][ T4508] __se_sys_sendmsg+0x1c3/0x2b0 [ 92.539040][ T4508] ? __x64_sys_sendmsg+0x80/0x80 [ 92.544313][ T4508] ? lockdep_hardirqs_on+0x94/0x140 [ 92.549747][ T4508] do_syscall_64+0x4c/0xa0 [ 92.554219][ T4508] ? clear_bhb_loop+0x60/0xb0 [ 92.558944][ T4508] ? clear_bhb_loop+0x60/0xb0 [ 92.563673][ T4508] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.570076][ T4508] RIP: 0033:0x7f3ee219e159 [ 92.574617][ T4508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.594351][ T4508] RSP: 002b:00007f3ee03f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.602784][ T4508] RAX: ffffffffffffffda RBX: 00007f3ee2426090 RCX: 00007f3ee219e159 [ 92.610795][ T4508] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000005 [ 92.618790][ T4508] RBP: 00007f3ee223506b R08: 0000000000000000 R09: 0000000000000000 [ 92.626779][ T4508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.634837][ T4508] R13: 00007f3ee2426128 R14: 00007f3ee2426090 R15: 00007ffe8c9f4428 [ 92.642812][ T4508] [ 93.792353][ T4291] Bluetooth: hci0: Opcode 0x0c6d failed: -110 [ 93.792410][ T4292] Bluetooth: hci0: command 0x0c6d tx timeout [ 94.434545][ T4508] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 94.444147][ T4508] nci: nci_start_poll: failed to set local general bytes [ 94.453135][ T4499] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512