last executing test programs: 8.985312705s ago: executing program 0 (id=15): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000010c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f0000001300)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = dup(0xffffffffffffffff) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) close_range(r0, r2, 0x0) socket$alg(0x26, 0x5, 0x0) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000002d40)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x8, 0xd0, 0x1, {0x8, 0xb, 0x2, 0x0, 0x1, 0xff, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xfffc, 0x2, 0x9, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xb, 0x9, 0x4, {0x8, 0x25, 0x1, 0x80, 0x3c, 0x2, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xed, 0x1, 0xa, {0x8, 0x25, 0x1, 0x2, 0x1b, 0x81, 0x1}}}}}}}}]}}, 0x0) 5.587370494s ago: executing program 0 (id=45): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6bb74189000003c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x37}], 0x1, 0x51, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001f80)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @remote}, 0x10, 0x0}}], 0x1, 0x4) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.232871344s ago: executing program 0 (id=47): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}}], 0x2, 0x4000800) 5.166705234s ago: executing program 0 (id=49): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000c000) r0 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0xfff6, 0x5, @empty, 0xb}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) 5.07409176s ago: executing program 0 (id=50): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4084) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) migrate_pages(0x0, 0x4, &(0x7f0000000000)=0x200000007f, &(0x7f0000000300)=0xa) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) socket(0x2, 0x3, 0xff) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 4.012406958s ago: executing program 0 (id=58): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) close_range(r0, r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24008004) socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) recvmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) shutdown(r3, 0x0) sendmsg$nl_route(r1, &(0x7f00000046c0)={0x0, 0x0, &(0x7f0000004680)={0x0, 0x20}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 3.078266095s ago: executing program 3 (id=63): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x2, 0x6) write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000040)={0xa, 0x4}, 0xc) write(r0, 0x0, 0x0) 2.789332423s ago: executing program 4 (id=66): r0 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, 0x0, 0x10) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 2.50585298s ago: executing program 3 (id=67): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000027b000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) userfaultfd(0x80001) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 2.472310166s ago: executing program 1 (id=68): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa8000aaaaaabb86dd6a00000000481100fe8000000000000000000000000000aafe8000000000000000000000000000aa4e1d4e20"], 0x0) add_key$user(0x0, 0x0, &(0x7f00000001c0)="03", 0x1, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[], 0x0) 2.321365251s ago: executing program 1 (id=69): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty, 0x8}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000005, 0xdb}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x42, @loopback, 0x8000}}, 0xabb6, 0x67, 0xa4f, 0xc4, 0xa, 0x0, 0xa9}, 0x9c) 1.923223188s ago: executing program 1 (id=70): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x800}, 0x40008) fcntl$setstatus(r1, 0x4, 0x2000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x1b8}, 0x1, 0x0, 0x0, 0x8}, 0xc4) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x540) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) shutdown(r0, 0x1) 1.810187557s ago: executing program 1 (id=72): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0xffffffffec100f4b, 0xd, 0xe000, 0xf, 0x2, 0x0, 0x0, 0x40, 0x20ffff}}, 0x50) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x44, 0x3, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x8000041035, 0x200000000006, 0x0, 0x32b, 0xb, 0xffffffff, 0x200000bf4, 0xfff, 0x8000000000005, 0x80000006c], 0x3000, 0x80495}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xf, 0x3, &(0x7f0000001300)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x94) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.545330761s ago: executing program 4 (id=73): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x10000}, 0x28) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0x9) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=0x6, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x2, 0x4) io_uring_setup(0x4617, &(0x7f0000000040)={0x0, 0x2cb1, 0x1c082, 0xd, 0x20002f7}) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1.333066777s ago: executing program 1 (id=75): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x205, 0x6, 0x0, 0x0, 0x10003, 0x41, 0x400200cc4, 0xffd, 0x4, 0x0, 0x7, 0x0, 0x2, 0x0, 0x6a, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x21) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000161000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.028144068s ago: executing program 3 (id=77): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@bridge_getvlan={0x20, 0x72, 0x301, 0x4000001, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0xf00, 0x0, 0x80}, 0x8400) 935.497114ms ago: executing program 1 (id=78): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x41032, 0xffffffffffffffff, 0x0) userfaultfd(0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0xe8, 0x2) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) 858.052196ms ago: executing program 3 (id=79): openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000"], 0x190) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01b700", 0x18, 0x3a, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @mld={0x84, 0x0, 0x0, 0x9f23, 0x7, @dev={0xfe, 0x80, '\x00', 0x39}}}}}}}, 0x0) 850.376658ms ago: executing program 2 (id=80): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000", 0x42}], 0x1) 759.224923ms ago: executing program 2 (id=81): pipe2$9p(&(0x7f0000000080), 0x800) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0x322020, &(0x7f0000000280)=ANY=[], 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x11, 0x2, 0x10001) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 715.8289ms ago: executing program 3 (id=82): mkdir(&(0x7f0000000300)='./bus\x00', 0x40) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x10}, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, 0x0, 0x40) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000600), 0x1, 0x80800) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_TDX_INIT_VCPU(r4, 0xc008aeba, 0x0) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r5, 0xb) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0x14}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000", @ANYRES32, @ANYBLOB="0c0099"], 0x40}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000000), 0x619, r6}, 0x38) 653.199871ms ago: executing program 3 (id=83): fanotify_init(0x200, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$packet(0x11, 0x3, 0x300) pipe2$9p(&(0x7f0000000080), 0x800) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x3, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) socket$unix(0x1, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 575.535333ms ago: executing program 2 (id=84): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x1, 0xeeee8000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) 529.622351ms ago: executing program 4 (id=85): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=@newtfilter={0x78, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xe, 0x4}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x38, 0x9, 0x5}]}}, @TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c, 0x5, [{0xd, 0xd, 0x2, 0x5}, {0x0, 0x1, 0x10, 0xff}, {0x8, 0x0, 0x2, 0x4}, {0x6, 0x4, 0xff, 0x1}, {0xffc0, 0x9, 0x6, 0x5}]}}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 307.759499ms ago: executing program 2 (id=86): bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x80}, 0x10}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000760001000100000000000000030000000000000008"], 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x4000, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 210.429935ms ago: executing program 2 (id=87): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/12], 0x50) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) fcntl$dupfd(r1, 0x406, r1) socket$packet(0x11, 0x3, 0x300) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x1, @mcast1, 0x1}, r4, 0x8001}}, 0x48) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 207.210095ms ago: executing program 4 (id=88): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_CHANINFO(r0, 0x80306403, &(0x7f0000016780)={0x0, 0x0, 0x0, 0x0}) 87.846075ms ago: executing program 4 (id=89): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000340)={{0x1, 0x1, 0x10000}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000100), 0x3f}], 0x1) 71.814098ms ago: executing program 2 (id=90): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe758, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x3, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) close(0x3) 0s ago: executing program 4 (id=91): io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x44801}, 0x0) socket$inet(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) sendto$packet(r0, &(0x7f0000000040)="2717a90af1a30d71286f47000000", 0x36, 0x40000, &(0x7f0000000180)={0x11, 0x16, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.135' (ED25519) to the list of known hosts. [ 45.567553][ T4169] cgroup: Unknown subsys name 'net' [ 45.717369][ T4169] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 46.964150][ T4169] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 48.261230][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 48.321664][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 48.365631][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 48.445552][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 48.455163][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.462948][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.470673][ T4185] device bridge_slave_0 entered promiscuous mode [ 48.494561][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.501619][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.509632][ T4198] device bridge_slave_0 entered promiscuous mode [ 48.526361][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.533631][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.541239][ T4185] device bridge_slave_1 entered promiscuous mode [ 48.564140][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.571216][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.578991][ T4198] device bridge_slave_1 entered promiscuous mode [ 48.597648][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 48.612537][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.619590][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.627600][ T4188] device bridge_slave_0 entered promiscuous mode [ 48.641511][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.648744][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.656367][ T4188] device bridge_slave_1 entered promiscuous mode [ 48.675836][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.688208][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.699016][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.720873][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.775643][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.782837][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.790533][ T4184] device bridge_slave_0 entered promiscuous mode [ 48.802727][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.819506][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.830515][ T4185] team0: Port device team_slave_0 added [ 48.838690][ T4198] team0: Port device team_slave_0 added [ 48.844688][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.851734][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.859491][ T4184] device bridge_slave_1 entered promiscuous mode [ 48.882220][ T4185] team0: Port device team_slave_1 added [ 48.888892][ T4198] team0: Port device team_slave_1 added [ 48.905519][ T4188] team0: Port device team_slave_0 added [ 48.932682][ T4188] team0: Port device team_slave_1 added [ 48.940049][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.966248][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.980171][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.987691][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.995518][ T4186] device bridge_slave_0 entered promiscuous mode [ 49.003950][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.010915][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.037102][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.049167][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.056681][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.082696][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.104894][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.112684][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.120396][ T4186] device bridge_slave_1 entered promiscuous mode [ 49.128034][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.135279][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.161226][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.172784][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.179727][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.205720][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.222196][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.229456][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.255899][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.288313][ T4184] team0: Port device team_slave_0 added [ 49.296128][ T4184] team0: Port device team_slave_1 added [ 49.307387][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.314394][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.342075][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.355226][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.366449][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.420566][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.427754][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.453732][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.468625][ T4186] team0: Port device team_slave_0 added [ 49.481816][ T4186] team0: Port device team_slave_1 added [ 49.499044][ T4185] device hsr_slave_0 entered promiscuous mode [ 49.505983][ T4185] device hsr_slave_1 entered promiscuous mode [ 49.516684][ T4188] device hsr_slave_0 entered promiscuous mode [ 49.523626][ T4188] device hsr_slave_1 entered promiscuous mode [ 49.530096][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.537983][ T4188] Cannot create hsr debugfs directory [ 49.543893][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.550833][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.577064][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.602956][ T4198] device hsr_slave_0 entered promiscuous mode [ 49.609572][ T4198] device hsr_slave_1 entered promiscuous mode [ 49.616462][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.624081][ T4198] Cannot create hsr debugfs directory [ 49.662816][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.669778][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.695899][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.742154][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.749115][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.775238][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.789738][ T4184] device hsr_slave_0 entered promiscuous mode [ 49.796842][ T4184] device hsr_slave_1 entered promiscuous mode [ 49.803718][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.811270][ T4184] Cannot create hsr debugfs directory [ 49.934037][ T4186] device hsr_slave_0 entered promiscuous mode [ 49.941233][ T4186] device hsr_slave_1 entered promiscuous mode [ 49.947842][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.955793][ T4186] Cannot create hsr debugfs directory [ 49.982966][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 49.989555][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 50.052364][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 50.058542][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 50.062226][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 50.143195][ T4185] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.153750][ T4185] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.167589][ T4185] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.177498][ T4185] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.231095][ T4198] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 50.245111][ T4198] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 50.256635][ T4198] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 50.265730][ T4198] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 50.338423][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.348404][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.358375][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.369958][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.409836][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.438364][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.461418][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.469821][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.478765][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.488557][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.501187][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.515337][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.524748][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.537179][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.545582][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.566319][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.579131][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.589424][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.598685][ T1228] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.605966][ T1228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.615211][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.625149][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.633541][ T1228] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.640566][ T1228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.648283][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.656724][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.697581][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.708409][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.717612][ T1228] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.724704][ T1228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.733808][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.753786][ T4186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.766819][ T4186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.781046][ T4186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.790811][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.799785][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.808887][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.818714][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.827649][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.836391][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.845335][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.854468][ T1228] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.861527][ T1228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.869160][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.878003][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.887710][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.896696][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.911537][ T831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.922525][ T4186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.936046][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.947239][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.958616][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.967142][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.993216][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.001841][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.013080][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.021483][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.031259][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.039808][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.048171][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.066350][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.112288][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.128144][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.137249][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.146669][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.162627][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.175279][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.186053][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.197153][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.206954][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.214072][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.255854][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.264897][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.280188][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.290248][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.297369][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.308630][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.317649][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.326313][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.337525][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.346399][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.358251][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.367638][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.377079][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.404216][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.420129][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.437616][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.445346][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.453799][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.462352][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.478182][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.502439][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.510201][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.518744][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.527642][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.537195][ T1228] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.544283][ T1228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.551990][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.560496][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.569317][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.578082][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.591019][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.599711][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.607418][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.625049][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.638061][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.649935][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.663060][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.672618][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.681021][ T4238] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.688113][ T4238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.697868][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.711403][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.719545][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.734644][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.743640][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.767395][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.776338][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.790612][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.799680][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.808154][ T4238] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.815240][ T4238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.823868][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.837564][ T4185] device veth0_vlan entered promiscuous mode [ 51.859233][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.880313][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.898901][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.909490][ T4238] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.916600][ T4238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.930184][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.939395][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.948320][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.956940][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.970212][ T4185] device veth1_vlan entered promiscuous mode [ 51.993736][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 52.001850][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 52.016064][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.026251][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.036428][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.045933][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.054800][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.062953][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.066441][ T4228] Bluetooth: hci3: command 0x041b tx timeout [ 52.077082][ T4228] Bluetooth: hci1: command 0x041b tx timeout [ 52.095848][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.104918][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.114190][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.123868][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.132667][ T3521] Bluetooth: hci4: command 0x041b tx timeout [ 52.137376][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 52.138905][ T3521] Bluetooth: hci2: command 0x041b tx timeout [ 52.146946][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.162096][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.170419][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.179259][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.197006][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.205688][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.216699][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.227505][ T4185] device veth0_macvtap entered promiscuous mode [ 52.239505][ T4185] device veth1_macvtap entered promiscuous mode [ 52.255463][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.266832][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.281342][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.293987][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.302339][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.310585][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.325863][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.338169][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.347565][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.356144][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.373102][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.397916][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.413341][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.456814][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.473801][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.492638][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.500259][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.515365][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.537381][ T4198] device veth0_vlan entered promiscuous mode [ 52.569207][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.580241][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.589599][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.598184][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.607129][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.616556][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.626664][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.635828][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.645717][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.654978][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.670622][ T4198] device veth1_vlan entered promiscuous mode [ 52.694405][ T4188] device veth0_vlan entered promiscuous mode [ 52.706825][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 52.715183][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 52.723728][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.731778][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.740440][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.748496][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.756455][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.764699][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.784004][ T4188] device veth1_vlan entered promiscuous mode [ 52.802840][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.855021][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 52.867097][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 52.875435][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.886308][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.900659][ T4198] device veth0_macvtap entered promiscuous mode [ 52.911127][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.919533][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.928742][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.937948][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.958990][ T4188] device veth0_macvtap entered promiscuous mode [ 52.970334][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.979206][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.987689][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.005740][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.024108][ T4188] device veth1_macvtap entered promiscuous mode [ 53.032650][ T4198] device veth1_macvtap entered promiscuous mode [ 53.043195][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.051209][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.059607][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.069251][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.083482][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.095220][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.105481][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.113732][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.128239][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.140129][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.151505][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.168033][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.180585][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.191823][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.204684][ T4186] device veth0_vlan entered promiscuous mode [ 53.217846][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.226167][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.234149][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.243986][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.254194][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.263300][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.271781][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.280638][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.297968][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.308605][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.318564][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.329563][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.342545][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.354881][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.364055][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.373113][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.381803][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.402871][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.411248][ T1228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.419685][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.428086][ T1228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.436927][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.446103][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.456668][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.471814][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.482631][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.494288][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.505847][ T4186] device veth1_vlan entered promiscuous mode [ 53.525738][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.534269][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.544164][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.555893][ T4198] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.564982][ T4198] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.574990][ T4198] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.586889][ T4198] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.628773][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.643154][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.669706][ T4186] device veth0_macvtap entered promiscuous mode [ 53.681083][ T4186] device veth1_macvtap entered promiscuous mode [ 53.695940][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.710453][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.718627][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.729032][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.737941][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.747007][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.757072][ T4184] device veth0_vlan entered promiscuous mode [ 53.787161][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.798906][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.815367][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.835252][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.845315][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.856755][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.867754][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.904978][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.934700][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.947122][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.963181][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.973846][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.988683][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.999006][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.009788][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.021249][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.043384][ T4184] device veth1_vlan entered promiscuous mode [ 54.050400][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.060111][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.068838][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.087521][ T1228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.090104][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.096706][ T1228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.113356][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.122469][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.131175][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.142848][ T4260] Bluetooth: hci1: command 0x040f tx timeout [ 54.155086][ T4260] Bluetooth: hci3: command 0x040f tx timeout [ 54.156862][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.169234][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.189848][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.199533][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.223468][ T4232] Bluetooth: hci2: command 0x040f tx timeout [ 54.226135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.229928][ T4232] Bluetooth: hci0: command 0x040f tx timeout [ 54.240083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.243324][ T4232] Bluetooth: hci4: command 0x040f tx timeout [ 54.258256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.283949][ T4184] device veth0_macvtap entered promiscuous mode [ 54.308050][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.309708][ T4184] device veth1_macvtap entered promiscuous mode [ 54.322576][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.334860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.342990][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.348252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.351160][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.367298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.376528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.442521][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.454695][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.465594][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.483961][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.494172][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.505169][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.516281][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.526760][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.537188][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.548304][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.559426][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.571140][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.582750][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.623168][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.636462][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.647133][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.657789][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.667957][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.678843][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.695539][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.710672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.721099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.730052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.739202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.748048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.761227][ T4274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 54.815428][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.829556][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.841211][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.851867][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.854791][ T4280] mmap: syz.3.8 (4280): VmData 37326848 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 54.874044][ T4238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.887498][ T4238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.907052][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.999790][ T4283] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 55.062667][ T4238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.082605][ T4238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.143443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.169136][ T831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.185452][ T831] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.204444][ T4283] kvm: pic: non byte write [ 55.209473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.364246][ T4295] input: syz0 as /devices/virtual/input/input5 [ 55.488416][ T4300] kvm: MWAIT instruction emulated as NOP! [ 55.499934][ T4303] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 55.499934][ T4303] The task syz.2.12 (4303) triggered the difference, watch for misbehavior. [ 55.722107][ T4228] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 55.912109][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 55.992131][ T4228] usb 4-1: Using ep0 maxpacket: 32 [ 56.122329][ T4228] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 56.212836][ T3521] Bluetooth: hci3: command 0x0419 tx timeout [ 56.219534][ T3521] Bluetooth: hci1: command 0x0419 tx timeout [ 56.293345][ T4260] Bluetooth: hci4: command 0x0419 tx timeout [ 56.299530][ T4228] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 56.312349][ T4228] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 56.320539][ T4228] usb 4-1: Product: syz [ 56.324941][ T4228] usb 4-1: Manufacturer: syz [ 56.330273][ T4228] usb 4-1: SerialNumber: syz [ 56.337979][ T4228] usb 4-1: config 0 descriptor?? [ 56.345113][ T4260] Bluetooth: hci0: command 0x0419 tx timeout [ 56.351174][ T4260] Bluetooth: hci2: command 0x0419 tx timeout [ 56.377760][ T4297] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 56.424459][ T4228] hub 4-1:0.0: bad descriptor, ignoring hub [ 56.432808][ T4228] hub: probe of 4-1:0.0 failed with error -5 [ 56.507565][ T21] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 56.531844][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.558697][ T21] usb 1-1: Product: syz [ 56.570508][ T21] usb 1-1: Manufacturer: syz [ 56.575688][ T21] usb 1-1: SerialNumber: syz [ 56.643815][ T21] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 56.737294][ T4328] Zero length message leads to an empty skb [ 56.750468][ T4328] netlink: 12 bytes leftover after parsing attributes in process `syz.4.23'. [ 56.761100][ T4324] kvm: emulating exchange as write [ 56.908821][ T4231] usb 4-1: USB disconnect, device number 2 [ 57.342658][ T21] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 57.486277][ T4347] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 57.795932][ T4359] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1692678547 (1692678547 ns) > initial count (310440980 ns). Using initial count to start timer. [ 57.917763][ T4361] udc-core: couldn't find an available UDC or it's busy [ 57.933913][ T4361] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 58.383434][ T21] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 58.394224][ T21] ath9k_htc: Failed to initialize the device [ 58.606461][ T13] cfg80211: failed to load regulatory.db [ 58.831161][ T4384] binder: 4383:4384 unknown command 0 [ 58.836860][ T4384] binder: 4383:4384 ioctl c0306201 200000000080 returned -22 [ 58.876291][ T831] Bluetooth: hci5: Frame reassembly failed (-84) [ 58.964085][ T13] usb 1-1: USB disconnect, device number 2 [ 58.980771][ T13] usb 1-1: ath9k_htc: USB layer deinitialized [ 59.035706][ C1] vcan0: j1939_tp_rxtimer: 0xffff888060d92c00: rx timeout, send abort [ 59.341832][ T4391] 9pnet_virtio: no channels available for device syz [ 59.535832][ C1] vcan0: j1939_tp_rxtimer: 0xffff888060d92800: rx timeout, send abort [ 59.556517][ C1] vcan0: j1939_tp_rxtimer: 0xffff888060d92c00: abort rx timeout. Force session deactivation [ 59.567583][ T4397] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 59.586296][ T4397] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 59.597970][ T4384] ODEBUG: Out of memory. ODEBUG disabled [ 59.734506][ T4403] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 59.772296][ T4403] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 60.044083][ C1] vcan0: j1939_tp_rxtimer: 0xffff888060d92800: abort rx timeout. Force session deactivation [ 60.135982][ T4384] syz.4.44 (4384): drop_caches: 2 [ 60.745261][ T4422] kvm: pic: non byte read [ 60.749863][ T4422] kvm: pic: non byte read [ 60.761574][ T4422] kvm: pic: non byte read [ 60.766486][ T4422] kvm: pic: non byte read [ 60.771179][ T4422] kvm: pic: level sensitive irq not supported [ 60.771269][ T4422] kvm: pic: non byte read [ 60.812275][ T4422] kvm: pic: non byte read [ 60.816859][ T4422] kvm: pic: non byte read [ 60.821401][ T4422] kvm: pic: non byte read [ 60.833206][ T4422] kvm: pic: non byte read [ 60.841710][ T4422] kvm: pic: non byte read [ 60.848276][ T4422] kvm: pic: single mode not supported [ 60.848299][ T4422] kvm: pic: level sensitive irq not supported [ 60.868013][ T4422] kvm: pic: single mode not supported [ 60.887532][ T4422] kvm: pic: single mode not supported [ 60.907396][ T4422] kvm: pic: level sensitive irq not supported [ 60.922482][ T4422] kvm: pic: single mode not supported [ 60.934409][ T4196] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 60.934645][ T4231] Bluetooth: hci5: command 0xfc11 tx timeout [ 60.960068][ T4422] kvm: pic: single mode not supported [ 60.960288][ T4422] kvm: pic: level sensitive irq not supported [ 60.982664][ T4422] kvm: pic: single mode not supported [ 60.988779][ T4422] kvm: pic: level sensitive irq not supported [ 61.081360][ T4422] kvm: pic: single mode not supported [ 61.087694][ T4422] kvm: pic: level sensitive irq not supported [ 61.378163][ T4445] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 62.152640][ T4470] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 63.105241][ T26] audit: type=1326 audit(1776365751.614:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39350d819 code=0x7ffc0000 [ 63.178277][ T26] audit: type=1326 audit(1776365751.654:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39350d819 code=0x7ffc0000 [ 63.277375][ T26] audit: type=1326 audit(1776365751.654:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39350d819 code=0x7ffc0000 [ 63.349847][ T4495] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 63.369432][ T4495] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 63.385922][ T26] audit: type=1326 audit(1776365751.654:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39350d819 code=0x7ffc0000 [ 63.503014][ T26] audit: type=1326 audit(1776365751.654:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff39350d819 code=0x7ffc0000 [ 63.625068][ T26] audit: type=1326 audit(1776365751.664:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39350d819 code=0x7ffc0000 [ 63.710544][ T26] audit: type=1326 audit(1776365751.664:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39350d819 code=0x7ffc0000 [ 63.746243][ T26] audit: type=1326 audit(1776365751.664:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39350d819 code=0x7ffc0000 [ 63.802118][ T26] audit: type=1326 audit(1776365751.664:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39350d819 code=0x7ffc0000 [ 63.900948][ T26] audit: type=1326 audit(1776365751.664:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4493 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff39350d819 code=0x7ffc0000 [ 64.563860][ T4540] input: syz1 as /devices/virtual/input/input6 [ 64.661932][ T13] [ 64.664292][ T13] ====================================================== [ 64.671303][ T13] WARNING: possible circular locking dependency detected [ 64.678324][ T13] syzkaller #0 Not tainted [ 64.682730][ T13] ------------------------------------------------------ [ 64.689738][ T13] kworker/0:1/13 is trying to acquire lock: [ 64.695619][ T13] ffff88807b9dcc28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 64.706689][ T13] [ 64.706689][ T13] but task is already holding lock: [ 64.714044][ T13] ffffffff8d6c51a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 64.723098][ T13] [ 64.723098][ T13] which lock already depends on the new lock. [ 64.723098][ T13] [ 64.733493][ T13] [ 64.733493][ T13] the existing dependency chain (in reverse order) is: [ 64.742499][ T13] [ 64.742499][ T13] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 64.750491][ T13] __mutex_lock_common+0x1e3/0x2400 [ 64.756222][ T13] mutex_lock_nested+0x17/0x20 [ 64.761510][ T13] rfkill_register+0x33/0x8a0 [ 64.766715][ T13] hci_register_dev+0x452/0x970 [ 64.772088][ T13] vhci_create_device+0x32c/0x5c0 [ 64.777626][ T13] vhci_write+0x391/0x450 [ 64.782466][ T13] vfs_write+0x745/0xd60 [ 64.787214][ T13] ksys_write+0x152/0x260 [ 64.792046][ T13] do_syscall_64+0x4c/0xa0 [ 64.796964][ T13] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 64.803361][ T13] [ 64.803361][ T13] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 64.811156][ T13] __mutex_lock_common+0x1e3/0x2400 [ 64.816861][ T13] mutex_lock_nested+0x17/0x20 [ 64.822130][ T13] vhci_send_frame+0x88/0x100 [ 64.827309][ T13] hci_send_frame+0x1a9/0x2e0 [ 64.832497][ T13] hci_tx_work+0x9f9/0x1710 [ 64.837502][ T13] process_one_work+0x85f/0x1010 [ 64.842938][ T13] worker_thread+0xaa6/0x1290 [ 64.848114][ T13] kthread+0x436/0x520 [ 64.852685][ T13] ret_from_fork+0x1f/0x30 [ 64.857607][ T13] [ 64.857607][ T13] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 64.866790][ T13] __flush_work+0x116/0x210 [ 64.871793][ T13] hci_dev_do_open+0xc58/0x1270 [ 64.877150][ T13] hci_power_on+0x1c1/0x610 [ 64.882154][ T13] process_one_work+0x85f/0x1010 [ 64.887595][ T13] worker_thread+0xaa6/0x1290 [ 64.892772][ T13] kthread+0x436/0x520 [ 64.897340][ T13] ret_from_fork+0x1f/0x30 [ 64.902261][ T13] [ 64.902261][ T13] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 64.909884][ T13] __mutex_lock_common+0x1e3/0x2400 [ 64.915588][ T13] mutex_lock_nested+0x17/0x20 [ 64.920855][ T13] bg_scan_update+0x44/0x3b0 [ 64.925949][ T13] process_one_work+0x85f/0x1010 [ 64.931389][ T13] worker_thread+0xaa6/0x1290 [ 64.936570][ T13] kthread+0x436/0x520 [ 64.941138][ T13] ret_from_fork+0x1f/0x30 [ 64.946056][ T13] [ 64.946056][ T13] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 64.955847][ T13] __lock_acquire+0x2c42/0x7d10 [ 64.961202][ T13] lock_acquire+0x19e/0x400 [ 64.966207][ T13] __flush_work+0x116/0x210 [ 64.971212][ T13] __cancel_work_timer+0x3f4/0x560 [ 64.976821][ T13] hci_request_cancel_all+0xcc/0x300 [ 64.982611][ T13] hci_dev_do_close+0x4e/0x1030 [ 64.987962][ T13] hci_rfkill_set_block+0x10a/0x190 [ 64.993666][ T13] rfkill_set_block+0x1c6/0x420 [ 64.999021][ T13] rfkill_epo+0x75/0x170 [ 65.003765][ T13] rfkill_op_handler+0x76/0x220 [ 65.009117][ T13] process_one_work+0x85f/0x1010 [ 65.014557][ T13] worker_thread+0xaa6/0x1290 [ 65.019737][ T13] kthread+0x436/0x520 [ 65.024309][ T13] ret_from_fork+0x1f/0x30 [ 65.029228][ T13] [ 65.029228][ T13] other info that might help us debug this: [ 65.029228][ T13] [ 65.039438][ T13] Chain exists of: [ 65.039438][ T13] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 65.039438][ T13] [ 65.055149][ T13] Possible unsafe locking scenario: [ 65.055149][ T13] [ 65.062576][ T13] CPU0 CPU1 [ 65.067919][ T13] ---- ---- [ 65.073263][ T13] lock(rfkill_global_mutex); [ 65.078010][ T13] lock(&data->open_mutex); [ 65.085097][ T13] lock(rfkill_global_mutex); [ 65.092359][ T13] lock((work_completion)(&hdev->bg_scan_update)); [ 65.098928][ T13] [ 65.098928][ T13] *** DEADLOCK *** [ 65.098928][ T13] [ 65.107052][ T13] 3 locks held by kworker/0:1/13: [ 65.112053][ T13] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 65.122399][ T13] #1: ffffc90000d27d00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 65.132727][ T13] #2: ffffffff8d6c51a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 65.142187][ T13] [ 65.142187][ T13] stack backtrace: [ 65.148065][ T13] CPU: 0 PID: 13 Comm: kworker/0:1 Not tainted syzkaller #0 [ 65.155325][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 65.165361][ T13] Workqueue: events rfkill_op_handler [ 65.170724][ T13] Call Trace: [ 65.173998][ T13] [ 65.176914][ T13] dump_stack_lvl+0x188/0x250 [ 65.181613][ T13] ? load_image+0x400/0x400 [ 65.186095][ T13] ? show_regs_print_info+0x20/0x20 [ 65.191288][ T13] ? print_circular_bug+0x12b/0x1a0 [ 65.196468][ T13] check_noncircular+0x296/0x330 [ 65.201384][ T13] ? look_up_lock_class+0x71/0x110 [ 65.206476][ T13] ? add_chain_block+0x940/0x940 [ 65.211390][ T13] ? lockdep_lock+0xf1/0x1f0 [ 65.215964][ T13] ? __lock_acquire+0x12e8/0x7d10 [ 65.220983][ T13] ? mark_lock+0x94/0x320 [ 65.225294][ T13] __lock_acquire+0x2c42/0x7d10 [ 65.230139][ T13] ? verify_lock_unused+0x140/0x140 [ 65.235328][ T13] lock_acquire+0x19e/0x400 [ 65.239813][ T13] ? __flush_work+0xfa/0x210 [ 65.244386][ T13] ? __lock_acquire+0x7d10/0x7d10 [ 65.249405][ T13] ? read_lock_is_recursive+0x10/0x10 [ 65.254761][ T13] ? start_flush_work+0x776/0x820 [ 65.259765][ T13] __flush_work+0x116/0x210 [ 65.264247][ T13] ? __flush_work+0xfa/0x210 [ 65.268815][ T13] ? flush_work+0x20/0x20 [ 65.273121][ T13] ? try_to_grab_pending+0xfa/0x7f0 [ 65.278300][ T13] ? mark_lock+0x94/0x320 [ 65.282612][ T13] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 65.288573][ T13] ? lock_chain_count+0x20/0x20 [ 65.293405][ T13] ? mark_lock+0x94/0x320 [ 65.297716][ T13] ? __cancel_work_timer+0x36a/0x560 [ 65.303003][ T13] __cancel_work_timer+0x3f4/0x560 [ 65.308103][ T13] ? cancel_work_sync+0x20/0x20 [ 65.312937][ T13] ? __cancel_work+0x1f9/0x2e0 [ 65.317683][ T13] ? lockdep_hardirqs_on+0x94/0x140 [ 65.322863][ T13] ? __cancel_work+0x27b/0x2e0 [ 65.327613][ T13] ? cancel_work+0x20/0x20 [ 65.332014][ T13] hci_request_cancel_all+0xcc/0x300 [ 65.337286][ T13] hci_dev_do_close+0x4e/0x1030 [ 65.342119][ T13] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 65.347992][ T13] ? _raw_spin_unlock+0x40/0x40 [ 65.352827][ T13] ? kobject_uevent_env+0x371/0x890 [ 65.358006][ T13] hci_rfkill_set_block+0x10a/0x190 [ 65.363187][ T13] ? rcu_lock_release+0x20/0x20 [ 65.368020][ T13] rfkill_set_block+0x1c6/0x420 [ 65.372856][ T13] rfkill_epo+0x75/0x170 [ 65.377082][ T13] rfkill_op_handler+0x76/0x220 [ 65.381922][ T13] process_one_work+0x85f/0x1010 [ 65.386861][ T13] ? worker_detach_from_pool+0x240/0x240 [ 65.392489][ T13] ? lockdep_hardirqs_off+0x70/0x100 [ 65.397768][ T13] ? _raw_spin_lock_irq+0xb7/0xf0 [ 65.402780][ T13] ? _raw_spin_lock_irqsave+0x100/0x100 [ 65.408313][ T13] ? wq_worker_running+0x97/0x170 [ 65.413319][ T13] worker_thread+0xaa6/0x1290 [ 65.418073][ T13] ? lockdep_hardirqs_on+0x94/0x140 [ 65.423255][ T13] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 65.429133][ T13] kthread+0x436/0x520 [ 65.433193][ T13] ? rcu_lock_release+0x20/0x20 [ 65.438027][ T13] ? kthread_blkcg+0xd0/0xd0 [ 65.442597][ T13] ret_from_fork+0x1f/0x30 [ 65.447004][ T13] [ 71.173201][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.179505][ T1421] ieee802154 phy1 wpan1: encryption failed: -22