last executing test programs: 4.641302249s ago: executing program 3 (id=4): io_uring_setup(0x59f8, &(0x7f0000002040)={0x0, 0xffffffff, 0x0, 0x0, 0x3a0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000200)='cgroup.clone_children\x00', 0x2, 0x0) openat$cgroup_ro(r2, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(0x0) syz_mount_image$udf(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x4006, &(0x7f0000002440)=ANY=[], 0xff, 0xc0c, &(0x7f0000001500)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) pwrite64(r3, &(0x7f0000000300)='_', 0x1, 0x10000000005) 3.391832195s ago: executing program 4 (id=5): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x369, &(0x7f00000001c0)="$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") r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) write$9p(r0, &(0x7f0000001400)="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", 0x102) sendfile(r0, r1, 0x0, 0xe066) 3.184257105s ago: executing program 2 (id=3): socket$nl_route(0x10, 0x3, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) setpgid(0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x4004) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x7}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, 0x0) 2.362761179s ago: executing program 4 (id=6): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) sendto$inet(r3, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x1d4c, 0x0, 0x0) 2.25458088s ago: executing program 1 (id=2): shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={0x0, &(0x7f0000000180)=""/220, 0x0, 0xdc, 0x1, 0x0, 0x0, @void, @value}, 0x28) sigaltstack(0x0, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(&(0x7f0000001400)={0x0, 0x2}, &(0x7f0000001500)={0x0}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) readv(r2, &(0x7f0000000300)=[{&(0x7f0000000000)=""/154, 0x9a}], 0x1) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0xc801) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 2.104575471s ago: executing program 0 (id=1): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) waitid$P_PIDFD(0x3, r2, 0x0, 0x4, 0x0) 1.762779242s ago: executing program 2 (id=7): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xfc}}, 0x0) 803.506867ms ago: executing program 2 (id=8): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x0, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="5300000007000046009de8bd4663c767e54b154965ceff42241204b72ad9"], 0x67) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 731.074387ms ago: executing program 4 (id=9): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000140)="13146000000370", 0x7}], 0x7) 469.791908ms ago: executing program 0 (id=10): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x1000, 0x0) 0s ago: executing program 0 (id=11): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.15.213' (ED25519) to the list of known hosts. [ 107.096703][ T13] cfg80211: failed to load regulatory.db [ 110.872472][ T4162] cgroup: Unknown subsys name 'net' [ 111.017153][ T4162] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 114.136852][ T4162] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 117.141491][ T4180] chnl_net:caif_netlink_parms(): no params data found [ 117.157514][ T4174] chnl_net:caif_netlink_parms(): no params data found [ 117.179959][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 117.337595][ T4173] chnl_net:caif_netlink_parms(): no params data found [ 117.484982][ T4175] chnl_net:caif_netlink_parms(): no params data found [ 117.699326][ T4180] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.706743][ T4180] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.718162][ T4180] device bridge_slave_0 entered promiscuous mode [ 117.749297][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.756923][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.766813][ T4181] device bridge_slave_0 entered promiscuous mode [ 117.803762][ T4180] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.810920][ T4180] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.820398][ T4180] device bridge_slave_1 entered promiscuous mode [ 117.830403][ T4174] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.837965][ T4174] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.847117][ T4174] device bridge_slave_0 entered promiscuous mode [ 117.856228][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.863493][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.873478][ T4181] device bridge_slave_1 entered promiscuous mode [ 117.889562][ T4173] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.896880][ T4173] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.907037][ T4173] device bridge_slave_0 entered promiscuous mode [ 117.935990][ T4174] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.943365][ T4174] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.952393][ T4174] device bridge_slave_1 entered promiscuous mode [ 117.986430][ T4173] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.993937][ T4173] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.003389][ T4173] device bridge_slave_1 entered promiscuous mode [ 118.105656][ T4180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.138012][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.188735][ T4180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.203757][ T4174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.216599][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.224214][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 118.227404][ T4175] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.233488][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 118.245902][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 118.251940][ T4175] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.254538][ T4175] device bridge_slave_0 entered promiscuous mode [ 118.274126][ T4173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.292344][ T1110] Bluetooth: hci4: command 0x0409 tx timeout [ 118.298760][ T1110] Bluetooth: hci2: command 0x0409 tx timeout [ 118.315464][ T4174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.344323][ T4175] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.352100][ T4175] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.361151][ T4175] device bridge_slave_1 entered promiscuous mode [ 118.372888][ T4173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.494596][ T4180] team0: Port device team_slave_0 added [ 118.526239][ T4181] team0: Port device team_slave_0 added [ 118.573273][ T4180] team0: Port device team_slave_1 added [ 118.584326][ T4173] team0: Port device team_slave_0 added [ 118.597790][ T4174] team0: Port device team_slave_0 added [ 118.606990][ T4181] team0: Port device team_slave_1 added [ 118.617953][ T4175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.648795][ T4173] team0: Port device team_slave_1 added [ 118.676127][ T4174] team0: Port device team_slave_1 added [ 118.685763][ T4175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.787711][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.795469][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.822039][ T4180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.856905][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.864531][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.891414][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.940953][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.948174][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.975475][ T4180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.988851][ T4173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.996489][ T4173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.023618][ T4173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.036841][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.044102][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.071168][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.084812][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.094906][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.121097][ T4174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.138694][ T4175] team0: Port device team_slave_0 added [ 119.173778][ T4173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.180800][ T4173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.207650][ T4173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.229217][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.236397][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.262918][ T4174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.291377][ T4175] team0: Port device team_slave_1 added [ 119.524862][ T4180] device hsr_slave_0 entered promiscuous mode [ 119.533295][ T4180] device hsr_slave_1 entered promiscuous mode [ 119.548134][ T4174] device hsr_slave_0 entered promiscuous mode [ 119.555975][ T4174] device hsr_slave_1 entered promiscuous mode [ 119.564124][ T4174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.573153][ T4174] Cannot create hsr debugfs directory [ 119.579715][ T4175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.587537][ T4175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.614849][ T4175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.635696][ T4181] device hsr_slave_0 entered promiscuous mode [ 119.643940][ T4181] device hsr_slave_1 entered promiscuous mode [ 119.651172][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.659016][ T4181] Cannot create hsr debugfs directory [ 119.672965][ T4173] device hsr_slave_0 entered promiscuous mode [ 119.680702][ T4173] device hsr_slave_1 entered promiscuous mode [ 119.687877][ T4173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.695982][ T4173] Cannot create hsr debugfs directory [ 119.725960][ T4175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.733454][ T4175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.759850][ T4175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.022933][ T4175] device hsr_slave_0 entered promiscuous mode [ 120.032497][ T4175] device hsr_slave_1 entered promiscuous mode [ 120.039695][ T4175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.047800][ T4175] Cannot create hsr debugfs directory [ 120.292114][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 120.298499][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 120.319476][ T21] Bluetooth: hci3: command 0x041b tx timeout [ 120.382071][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 120.388369][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 120.766726][ T4180] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 120.788002][ T4180] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 120.838222][ T4180] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 120.858184][ T4180] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 120.916665][ T4173] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 120.950323][ T4173] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 120.972108][ T4173] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 121.015476][ T4173] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 121.110957][ T4174] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 121.149501][ T4174] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 121.163609][ T4174] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 121.191231][ T4174] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 121.348819][ T4181] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 121.371359][ T4181] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 121.393108][ T4181] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 121.429240][ T4180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.451759][ T4181] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 121.520496][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 121.534634][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.563495][ T4180] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.645417][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 121.656300][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.667400][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.675039][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.689038][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 121.738765][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.749435][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.760859][ T1234] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.768090][ T1234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.817442][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 121.839964][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 121.856721][ T4173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.868694][ T4175] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 121.900953][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 121.915640][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 121.925953][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 121.939591][ T4175] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 121.972967][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 121.985550][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 121.998276][ T4175] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 122.025218][ T4175] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 122.078605][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 122.088505][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.098803][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.107827][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.154759][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 122.168488][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.188808][ T4180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 122.203471][ T4173] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.231408][ T4174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.279835][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.290946][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.301290][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.308556][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.373933][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 122.385671][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 122.401202][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 122.422336][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 122.426391][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.451371][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.462310][ T4220] Bluetooth: hci4: command 0x040f tx timeout [ 122.469130][ T4220] Bluetooth: hci2: command 0x040f tx timeout [ 122.483795][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.490967][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.499816][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 122.551317][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.561489][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.572041][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 122.598217][ T4174] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.670203][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.714403][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 122.733519][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 122.752649][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.763884][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.779122][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.786306][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.808494][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 122.820267][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 122.829134][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 122.840536][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 122.850760][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.860899][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.870937][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.878134][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.920266][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.937348][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.950700][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.992821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 123.004537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 123.016380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 123.025597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.036928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 123.047009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.056774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.066866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.076272][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.083574][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.130512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 123.145196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 123.154768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.164033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 123.176747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 123.186891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 123.196575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.206745][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.214051][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.224150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 123.257323][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 123.271223][ T4180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.293836][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 123.303947][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 123.314491][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 123.326449][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 123.336488][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.390889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 123.404208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.414283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.430661][ T4174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 123.499574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 123.513274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 123.524208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 123.533995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 123.607846][ T4175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.616642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 123.628154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 123.638229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.660310][ T4181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 123.675042][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 123.730699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 123.757762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.782866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 123.794321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.813073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 123.831158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.860700][ T4175] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.956978][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.983537][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.009561][ T1234] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.016820][ T1234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.039896][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 124.065163][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 124.082218][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.092788][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.102656][ T1234] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.109906][ T1234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.118867][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 124.141921][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 124.151013][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.165349][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.180209][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.205359][ T4180] device veth0_vlan entered promiscuous mode [ 124.235919][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 124.246539][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 124.267335][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 124.283848][ T4173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.318012][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 124.329221][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.342017][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.356043][ T4180] device veth1_vlan entered promiscuous mode [ 124.396816][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 124.410573][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 124.420694][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 124.430673][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.441643][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 124.450895][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.459287][ T1110] Bluetooth: hci0: command 0x0419 tx timeout [ 124.469429][ T1110] Bluetooth: hci1: command 0x0419 tx timeout [ 124.475842][ T1110] Bluetooth: hci3: command 0x0419 tx timeout [ 124.500258][ T4175] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 124.520746][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 124.535841][ T4174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.542734][ T4226] Bluetooth: hci2: command 0x0419 tx timeout [ 124.549909][ T1110] Bluetooth: hci4: command 0x0419 tx timeout [ 124.563034][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 124.574188][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 124.584493][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.653695][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 124.671822][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 124.679703][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 124.691152][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 124.729291][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.816504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 124.829212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 124.854403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 124.873071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.886395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.895314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.920269][ T4180] device veth0_macvtap entered promiscuous mode [ 124.939700][ T4173] device veth0_vlan entered promiscuous mode [ 124.987289][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 125.016438][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 125.033589][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.078458][ T4180] device veth1_macvtap entered promiscuous mode [ 125.154179][ T4173] device veth1_vlan entered promiscuous mode [ 125.178622][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 125.202794][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 125.211865][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 125.221100][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 125.257151][ T4174] device veth0_vlan entered promiscuous mode [ 125.281313][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 125.304759][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.323018][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 125.347674][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.387487][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.397979][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.408653][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 125.421242][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 125.445400][ T4175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.476992][ T4174] device veth1_vlan entered promiscuous mode [ 125.506079][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.530833][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 125.542660][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.553253][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.581052][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 125.591011][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.608467][ T4180] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.617884][ T4180] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.627784][ T4180] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.637116][ T4180] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.703530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 125.717396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.728476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 125.741306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.783097][ T4173] device veth0_macvtap entered promiscuous mode [ 125.842178][ T4175] device veth0_vlan entered promiscuous mode [ 125.866864][ T4173] device veth1_macvtap entered promiscuous mode [ 125.876276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 125.888082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 125.899163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 125.910866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 125.945924][ T4181] device veth0_vlan entered promiscuous mode [ 125.985670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.995002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 126.003816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 126.014441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 126.030826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 126.040731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 126.052832][ T4175] device veth1_vlan entered promiscuous mode [ 126.075205][ T4181] device veth1_vlan entered promiscuous mode [ 126.188825][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.215702][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.228806][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.265617][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 126.283622][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 126.294159][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 126.304044][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 126.314245][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 126.325924][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 126.335930][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 126.346026][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 126.379026][ T4174] device veth0_macvtap entered promiscuous mode [ 126.427942][ T4181] device veth0_macvtap entered promiscuous mode [ 126.439424][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 126.449163][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 126.474568][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 126.486627][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.509630][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.535677][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.547609][ T4174] device veth1_macvtap entered promiscuous mode [ 126.586768][ T4181] device veth1_macvtap entered promiscuous mode [ 126.599112][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 126.610131][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 126.631016][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 126.640961][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 126.657500][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 126.670297][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 126.679780][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 126.695948][ T4173] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.707450][ T4173] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.716725][ T4173] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.726122][ T4173] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.773725][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.789471][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.808886][ T4175] device veth0_macvtap entered promiscuous mode [ 126.864761][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 126.875425][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 126.888993][ T4175] device veth1_macvtap entered promiscuous mode [ 126.933661][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.949741][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.959692][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.970325][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.984609][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.033515][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 127.036168][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.049941][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.054673][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 127.067995][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 127.097633][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.120330][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.131002][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.142656][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.156447][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.198238][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 127.210979][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 127.222034][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.239531][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.249466][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.260918][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.271327][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.291853][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.305667][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.321128][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.333002][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.344381][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.355570][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.365981][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.385956][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.418778][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.454297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 127.471089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 127.485286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 127.497578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 127.513383][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.524165][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.534951][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.547654][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.558532][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.574075][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.584560][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.595739][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.610060][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.624760][ T4181] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.635226][ T4181] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.645473][ T4181] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.656738][ T4181] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.693697][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 127.718224][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 127.768464][ T4174] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.788235][ T4174] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.828191][ T4174] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.850636][ T4174] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.100362][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.125373][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.227559][ T1265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.240221][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.252897][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.266202][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.277305][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.282026][ T1265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.291895][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.315764][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.326259][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.337425][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.350633][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.359015][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 128.368519][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 128.381924][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 128.393634][ T140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 128.487066][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.512817][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.543151][ T4175] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.571802][ T4175] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.580735][ T4175] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.621824][ T4175] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.655529][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 128.704586][ T1234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.721857][ T1234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.835889][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 129.038350][ T4254] loop3: detected capacity change from 0 to 2048 [ 129.129321][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.165872][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.198842][ T4258] loop4: detected capacity change from 0 to 128 [ 129.234878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 129.342732][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.350944][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.402637][ T4254] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.437928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 129.490414][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.516584][ T26] audit: type=1804 audit(1732272445.815:2): pid=4258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5" name="/newroot/0/file2/file0" dev="loop4" ino=1048586 res=1 errno=0 [ 129.549130][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.627003][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 129.672681][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.716969][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.767359][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 131.267426][ T4274] loop1: detected capacity change from 0 to 512 [ 131.694955][ T4274] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 131.962563][ T4285] 9pnet: p9_errstr2errno: server reported unknown error FcgKIeB$* [ 132.038115][ T4274] EXT4-fs (loop1): 1 orphan inode deleted [ 132.098765][ T4274] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 132.193164][ T4274] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.398433][ T4284] [ 132.400914][ T4284] ====================================================== [ 132.407981][ T4284] WARNING: possible circular locking dependency detected [ 132.415043][ T4284] 5.15.173-syzkaller #0 Not tainted [ 132.420304][ T4284] ------------------------------------------------------ [ 132.427407][ T4284] syz.4.9/4284 is trying to acquire lock: [ 132.433187][ T4284] ffff888027f60b98 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xcf/0x1a0 [ 132.443795][ T4284] [ 132.443795][ T4284] but task is already holding lock: [ 132.451299][ T4284] ffff888027f60ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x63/0x1070 [ 132.460765][ T4284] [ 132.460765][ T4284] which lock already depends on the new lock. [ 132.460765][ T4284] [ 132.471217][ T4284] [ 132.471217][ T4284] the existing dependency chain (in reverse order) is: [ 132.480274][ T4284] [ 132.480274][ T4284] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 132.488027][ T4284] lock_acquire+0x1db/0x4f0 [ 132.493135][ T4284] __mutex_lock_common+0x1da/0x25a0 [ 132.498930][ T4284] mutex_lock_nested+0x17/0x20 [ 132.504285][ T4284] hci_dev_do_close+0x63/0x1070 [ 132.509739][ T4284] hci_rfkill_set_block+0x114/0x1a0 [ 132.515532][ T4284] rfkill_set_block+0x1e7/0x430 [ 132.520974][ T4284] rfkill_fop_write+0x5b7/0x790 [ 132.526430][ T4284] do_iter_write+0x39c/0x760 [ 132.531629][ T4284] do_writev+0x281/0x470 [ 132.536492][ T4284] do_syscall_64+0x3b/0xb0 [ 132.541523][ T4284] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 132.548035][ T4284] [ 132.548035][ T4284] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 132.556203][ T4284] lock_acquire+0x1db/0x4f0 [ 132.561314][ T4284] __mutex_lock_common+0x1da/0x25a0 [ 132.567122][ T4284] mutex_lock_nested+0x17/0x20 [ 132.572527][ T4284] rfkill_register+0x30/0x880 [ 132.577913][ T4284] hci_register_dev+0x4dd/0xa50 [ 132.583366][ T4284] vhci_create_device+0x310/0x590 [ 132.589017][ T4284] vhci_write+0x382/0x430 [ 132.593946][ T4284] vfs_write+0xacd/0xe50 [ 132.598791][ T4284] ksys_write+0x1a2/0x2c0 [ 132.603727][ T4284] do_syscall_64+0x3b/0xb0 [ 132.608742][ T4284] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 132.615252][ T4284] [ 132.615252][ T4284] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 132.623201][ T4284] lock_acquire+0x1db/0x4f0 [ 132.628306][ T4284] __mutex_lock_common+0x1da/0x25a0 [ 132.634102][ T4284] mutex_lock_nested+0x17/0x20 [ 132.639481][ T4284] vhci_send_frame+0x8a/0xf0 [ 132.644670][ T4284] hci_send_frame+0x1af/0x2f0 [ 132.649935][ T4284] hci_tx_work+0xb2e/0x1a30 [ 132.655046][ T4284] process_one_work+0x8a1/0x10c0 [ 132.660581][ T4284] worker_thread+0xaca/0x1280 [ 132.665872][ T4284] kthread+0x3f6/0x4f0 [ 132.670510][ T4284] ret_from_fork+0x1f/0x30 [ 132.675515][ T4284] [ 132.675515][ T4284] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 132.684825][ T4284] validate_chain+0x1649/0x5930 [ 132.690286][ T4284] __lock_acquire+0x1295/0x1ff0 [ 132.695737][ T4284] lock_acquire+0x1db/0x4f0 [ 132.700834][ T4284] __flush_work+0xeb/0x1a0 [ 132.705855][ T4284] hci_dev_do_close+0x20a/0x1070 [ 132.711393][ T4284] hci_rfkill_set_block+0x114/0x1a0 [ 132.717203][ T4284] rfkill_set_block+0x1e7/0x430 [ 132.722648][ T4284] rfkill_fop_write+0x5b7/0x790 [ 132.728094][ T4284] do_iter_write+0x39c/0x760 [ 132.733278][ T4284] do_writev+0x281/0x470 [ 132.738116][ T4284] do_syscall_64+0x3b/0xb0 [ 132.743136][ T4284] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 132.749633][ T4284] [ 132.749633][ T4284] other info that might help us debug this: [ 132.749633][ T4284] [ 132.759900][ T4284] Chain exists of: [ 132.759900][ T4284] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 132.759900][ T4284] [ 132.775062][ T4284] Possible unsafe locking scenario: [ 132.775062][ T4284] [ 132.782560][ T4284] CPU0 CPU1 [ 132.787973][ T4284] ---- ---- [ 132.793391][ T4284] lock(&hdev->req_lock); [ 132.797999][ T4284] lock(rfkill_global_mutex); [ 132.805356][ T4284] lock(&hdev->req_lock); [ 132.812374][ T4284] lock((work_completion)(&hdev->tx_work)); [ 132.818451][ T4284] [ 132.818451][ T4284] *** DEADLOCK *** [ 132.818451][ T4284] [ 132.826651][ T4284] 2 locks held by syz.4.9/4284: [ 132.831562][ T4284] #0: ffffffff8dcbe668 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a5/0x790 [ 132.842109][ T4284] #1: ffff888027f60ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x63/0x1070 [ 132.852211][ T4284] [ 132.852211][ T4284] stack backtrace: [ 132.858195][ T4284] CPU: 1 PID: 4284 Comm: syz.4.9 Not tainted 5.15.173-syzkaller #0 [ 132.866187][ T4284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 132.876315][ T4284] Call Trace: [ 132.879659][ T4284] [ 132.882647][ T4284] dump_stack_lvl+0x1e3/0x2d0 [ 132.887412][ T4284] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 132.893166][ T4284] ? print_circular_bug+0x12b/0x1a0 [ 132.898607][ T4284] check_noncircular+0x2f8/0x3b0 [ 132.903732][ T4284] ? add_chain_block+0x850/0x850 [ 132.908762][ T4284] ? lockdep_lock+0x11f/0x2a0 [ 132.913533][ T4284] ? stack_trace_save+0x113/0x1c0 [ 132.918647][ T4284] validate_chain+0x1649/0x5930 [ 132.923625][ T4284] ? reacquire_held_locks+0x660/0x660 [ 132.929081][ T4284] ? validate_chain+0x13bd/0x5930 [ 132.934204][ T4284] ? look_up_lock_class+0x77/0x120 [ 132.939410][ T4284] ? register_lock_class+0x100/0x9a0 [ 132.944790][ T4284] ? reacquire_held_locks+0x660/0x660 [ 132.950253][ T4284] ? is_dynamic_key+0x1f0/0x1f0 [ 132.955202][ T4284] ? mark_lock+0x98/0x340 [ 132.959616][ T4284] __lock_acquire+0x1295/0x1ff0 [ 132.964648][ T4284] lock_acquire+0x1db/0x4f0 [ 132.969229][ T4284] ? __flush_work+0xcf/0x1a0 [ 132.973899][ T4284] ? mark_lock+0x98/0x340 [ 132.978329][ T4284] ? read_lock_is_recursive+0x10/0x10 [ 132.983784][ T4284] ? __lock_acquire+0x1295/0x1ff0 [ 132.988922][ T4284] __flush_work+0xeb/0x1a0 [ 132.993428][ T4284] ? __flush_work+0xcf/0x1a0 [ 132.998099][ T4284] ? flush_work+0x20/0x20 [ 133.002567][ T4284] hci_dev_do_close+0x20a/0x1070 [ 133.007593][ T4284] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 133.013671][ T4284] ? kmem_cache_alloc_trace+0x143/0x290 [ 133.019310][ T4284] hci_rfkill_set_block+0x114/0x1a0 [ 133.024604][ T4284] ? rcu_lock_release+0x20/0x20 [ 133.029531][ T4284] rfkill_set_block+0x1e7/0x430 [ 133.034557][ T4284] rfkill_fop_write+0x5b7/0x790 [ 133.039591][ T4284] ? rfkill_fop_read+0x470/0x470 [ 133.044630][ T4284] do_iter_write+0x39c/0x760 [ 133.049318][ T4284] do_writev+0x281/0x470 [ 133.053665][ T4284] ? do_readv+0x460/0x460 [ 133.058246][ T4284] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 133.064316][ T4284] ? vtime_user_exit+0x2d1/0x400 [ 133.069349][ T4284] ? syscall_enter_from_user_mode+0x2e/0x240 [ 133.075429][ T4284] ? lockdep_hardirqs_on+0x94/0x130 [ 133.080718][ T4284] ? syscall_enter_from_user_mode+0x2e/0x240 [ 133.086793][ T4284] do_syscall_64+0x3b/0xb0 [ 133.091475][ T4284] ? clear_bhb_loop+0x15/0x70 [ 133.096342][ T4284] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 133.102455][ T4284] RIP: 0033:0x7f19a0d66819 [ 133.106959][ T4284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.126651][ T4284] RSP: 002b:00007f199ebde038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 133.135179][ T4284] RAX: ffffffffffffffda RBX: 00007f19a0f1dfa0 RCX: 00007f19a0d66819 [ 133.143317][ T4284] RDX: 0000000000000007 RSI: 0000000020000440 RDI: 0000000000000006 [ 133.151458][ T4284] RBP: 00007f19a0dd975e R08: 0000000000000000 R09: 0000000000000000 [ 133.159606][ T4284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.167648][ T4284] R13: 0000000000000000 R14: 00007f19a0f1dfa0 R15: 00007ffc12cf3858 [ 133.175715][ T4284]