last executing test programs: 504.311051ms ago: executing program 3 (id=4): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x4a2900, 0x0) 360.816284ms ago: executing program 4 (id=5): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES64=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xc2f}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0xfd8f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140"], 0xfc}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x900, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) ioctl$VT_OPENQRY(r8, 0x5600, &(0x7f00000001c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) syz_genetlink_get_family_id$team(&(0x7f00000004c0), r8) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 334.125344ms ago: executing program 3 (id=6): socket$inet_smc(0x2b, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr=0x64010102, @multicast1}, @address_request}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 141.261318ms ago: executing program 3 (id=7): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) open_tree(0xffffffffffffffff, &(0x7f0000000580)='./mnt\x00', 0x80800) 140.825228ms ago: executing program 0 (id=1): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES64=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xc2f}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140"], 0xfc}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x900, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$VT_OPENQRY(r6, 0x5600, &(0x7f00000001c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) syz_genetlink_get_family_id$team(&(0x7f00000004c0), r6) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 34.68581ms ago: executing program 1 (id=2): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2, 0x13, 0xfd, 0x9, 0x4, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_x_sec_ctx={0x1, 0x18, 0xd, 0x5}, @sadb_x_nat_t_port={0x1, 0x3, 0x4e24}]}, 0x20}}, 0x0) 0s ago: executing program 3 (id=8): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = shmat(0xffffffffffffffff, &(0x7f0000ff8000/0x6000)=nil, 0x3000) shmdt(r0) pipe(0x0) io_setup(0x3ff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000c00)="0500000000029e", 0x7}], 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.46' (ED25519) to the list of known hosts. [ 59.862947][ T4173] cgroup: Unknown subsys name 'net' [ 60.052500][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.563109][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 63.429825][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 63.469522][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 63.483210][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 63.521074][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 63.560032][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 63.687077][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.694236][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.702475][ T4183] device bridge_slave_0 entered promiscuous mode [ 63.720453][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.727834][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.735687][ T4190] device bridge_slave_0 entered promiscuous mode [ 63.755892][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.763462][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.771873][ T4184] device bridge_slave_0 entered promiscuous mode [ 63.779523][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.786907][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.794924][ T4183] device bridge_slave_1 entered promiscuous mode [ 63.802718][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.809826][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.818081][ T4189] device bridge_slave_0 entered promiscuous mode [ 63.825772][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.833710][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.841748][ T4190] device bridge_slave_1 entered promiscuous mode [ 63.859557][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.866800][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.874766][ T4184] device bridge_slave_1 entered promiscuous mode [ 63.889672][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.896836][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.904853][ T4189] device bridge_slave_1 entered promiscuous mode [ 63.960302][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.967602][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.975420][ T4195] device bridge_slave_0 entered promiscuous mode [ 63.993891][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.011851][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.021287][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.028902][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.037789][ T4195] device bridge_slave_1 entered promiscuous mode [ 64.046619][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.057481][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.068532][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.079275][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.096952][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.114693][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.168749][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.180272][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.198960][ T4183] team0: Port device team_slave_0 added [ 64.208156][ T4184] team0: Port device team_slave_0 added [ 64.223816][ T4190] team0: Port device team_slave_0 added [ 64.232266][ T4190] team0: Port device team_slave_1 added [ 64.245566][ T4183] team0: Port device team_slave_1 added [ 64.252902][ T4184] team0: Port device team_slave_1 added [ 64.261288][ T4189] team0: Port device team_slave_0 added [ 64.297478][ T4189] team0: Port device team_slave_1 added [ 64.322401][ T4195] team0: Port device team_slave_0 added [ 64.344159][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.351334][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.377825][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.390341][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.398003][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.424252][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.436911][ T4195] team0: Port device team_slave_1 added [ 64.443052][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.450146][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.476353][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.488234][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.495205][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.521218][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.534214][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.541410][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.567800][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.587912][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.594894][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.627042][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.666224][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.673199][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.700318][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.712878][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.719937][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.746101][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.787558][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.794663][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.820805][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.851453][ T4183] device hsr_slave_0 entered promiscuous mode [ 64.859548][ T4183] device hsr_slave_1 entered promiscuous mode [ 64.873940][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.881237][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.907234][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.929849][ T4190] device hsr_slave_0 entered promiscuous mode [ 64.937017][ T4190] device hsr_slave_1 entered promiscuous mode [ 64.943672][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.951544][ T4190] Cannot create hsr debugfs directory [ 64.960707][ T4184] device hsr_slave_0 entered promiscuous mode [ 64.968569][ T4184] device hsr_slave_1 entered promiscuous mode [ 64.975203][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.983178][ T4184] Cannot create hsr debugfs directory [ 65.017016][ T2297] Bluetooth: hci2: command 0x0409 tx timeout [ 65.052574][ T4189] device hsr_slave_0 entered promiscuous mode [ 65.059801][ T4189] device hsr_slave_1 entered promiscuous mode [ 65.067173][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.074856][ T4189] Cannot create hsr debugfs directory [ 65.096143][ T2297] Bluetooth: hci0: command 0x0409 tx timeout [ 65.102724][ T2297] Bluetooth: hci1: command 0x0409 tx timeout [ 65.106099][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 65.115475][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 65.139075][ T4195] device hsr_slave_0 entered promiscuous mode [ 65.146403][ T4195] device hsr_slave_1 entered promiscuous mode [ 65.153077][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.160897][ T4195] Cannot create hsr debugfs directory [ 65.458767][ T4184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.471763][ T4184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.481764][ T4184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.491550][ T4184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.559697][ T4190] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.572991][ T4190] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.595871][ T4190] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.605249][ T4190] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.645336][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.665750][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.688025][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.708373][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.739837][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.764643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.775734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.807907][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.824053][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.833998][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.844862][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.853979][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.898447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.907616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.917041][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.924291][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.933368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.942450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.954835][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.961955][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.969979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.980405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.007295][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.051084][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.061224][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.071205][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.081048][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.092336][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.101064][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.109370][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.117609][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.126294][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.134620][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.146193][ T4195] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.156916][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.163900][ T4195] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.180026][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.189537][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.218195][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.225056][ T4195] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.247934][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.258051][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.267170][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.274223][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.282865][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.291709][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.301533][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.308663][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.318863][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.327727][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.339845][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.347879][ T4195] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.365367][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.382236][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.390996][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.399522][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.407804][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.418002][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.427296][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.435855][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.483143][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.494274][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.512483][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.521683][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.530713][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.541517][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.548673][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.557279][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.565897][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.574935][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.582065][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.591045][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.600019][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.608613][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.618235][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.626881][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.635194][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.643365][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.672537][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.701244][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.758814][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.774592][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.806133][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.824649][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.835182][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.844160][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.853451][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.863763][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.871840][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.880118][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.889291][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.899555][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.908491][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.919743][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.928116][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.956668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.977590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.994554][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.001717][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.011206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.021665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.036699][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.044061][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.052704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.083657][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.093201][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.101184][ T4249] Bluetooth: hci2: command 0x041b tx timeout [ 67.110454][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.118635][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.134619][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.157069][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.180519][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.182079][ T4249] Bluetooth: hci4: command 0x041b tx timeout [ 67.197916][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.205471][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.206260][ T4249] Bluetooth: hci3: command 0x041b tx timeout [ 67.228474][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.236653][ T4249] Bluetooth: hci1: command 0x041b tx timeout [ 67.259703][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.286358][ T4249] Bluetooth: hci0: command 0x041b tx timeout [ 67.286935][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.304766][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.314854][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.323668][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.332576][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.341429][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.354501][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.380533][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.416379][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.427946][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.437147][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.445034][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.463385][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.476980][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.484503][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.507411][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.520513][ T4190] device veth0_vlan entered promiscuous mode [ 67.540198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.549986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.560234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.570164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.579749][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.586882][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.595395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.605476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.614459][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.621670][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.629720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.640109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.648199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.664901][ T4190] device veth1_vlan entered promiscuous mode [ 67.724848][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.735245][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.752647][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.762934][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.771764][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.780958][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.789966][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.799844][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.809370][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.819704][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.828684][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.850774][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.859827][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.901661][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.909968][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.919211][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.927112][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.934661][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.943120][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.951647][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.960940][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.969923][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.980259][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.990580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.999460][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.012175][ T4183] device veth0_vlan entered promiscuous mode [ 68.020609][ T4184] device veth0_vlan entered promiscuous mode [ 68.031781][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.041070][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.054643][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.067034][ T4190] device veth0_macvtap entered promiscuous mode [ 68.079617][ T4184] device veth1_vlan entered promiscuous mode [ 68.090676][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.100272][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.109199][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.118642][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.153791][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.165022][ T4183] device veth1_vlan entered promiscuous mode [ 68.179692][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.188271][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.197825][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.208942][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.223411][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.238875][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.253151][ T4190] device veth1_macvtap entered promiscuous mode [ 68.280038][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.292960][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.301897][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.312936][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.321649][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.330766][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.348409][ T4184] device veth0_macvtap entered promiscuous mode [ 68.383060][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.391349][ T4189] device veth0_vlan entered promiscuous mode [ 68.417514][ T4183] device veth0_macvtap entered promiscuous mode [ 68.427679][ T4184] device veth1_macvtap entered promiscuous mode [ 68.439892][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.449200][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.457816][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.469254][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.478187][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.489635][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.498454][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.511131][ T4183] device veth1_macvtap entered promiscuous mode [ 68.532014][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.544609][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.559187][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.567037][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.575100][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.583172][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.590798][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.600117][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.612337][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.624527][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.638306][ T4189] device veth1_vlan entered promiscuous mode [ 68.649110][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.659874][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.671175][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.678989][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.688536][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.697947][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.708261][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.718678][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.731371][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.740658][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.749774][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.758990][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.788408][ T4184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.797590][ T4184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.807647][ T4184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.816917][ T4184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.828265][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.867333][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.880857][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.891084][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.902089][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.914087][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.931453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.941452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.950203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.959052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.973346][ T4189] device veth0_macvtap entered promiscuous mode [ 68.984420][ T4189] device veth1_macvtap entered promiscuous mode [ 68.998215][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.008867][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.020086][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.030901][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.042108][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.052307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.073688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.082563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.091060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.100662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.109633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.118414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.127477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.135589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.143667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.154943][ T4195] device veth0_vlan entered promiscuous mode [ 69.178148][ T4228] Bluetooth: hci2: command 0x040f tx timeout [ 69.195878][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.213812][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.224074][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.234844][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.244995][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.255768][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.266666][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 69.269844][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.281453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.290816][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 69.290918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.302092][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 69.308292][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.321765][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.330750][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.336334][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 69.341330][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.371939][ T4195] device veth1_vlan entered promiscuous mode [ 69.393848][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.410672][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.421449][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.432176][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.442119][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.452799][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.463997][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.490419][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.500170][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.510107][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.522305][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.531193][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.540314][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.550692][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.640198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.650734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.663016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.693398][ T4195] device veth0_macvtap entered promiscuous mode [ 69.697135][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.713051][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.743458][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.746163][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.760010][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.769164][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.783034][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.831186][ T4195] device veth1_macvtap entered promiscuous mode [ 69.844099][ T3086] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.867607][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.875598][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.894102][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.895329][ T3086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.921279][ T3086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.927176][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.940127][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.950694][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.960542][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.971297][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.984907][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.995502][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.008939][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.028456][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.037366][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.045196][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.054319][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.084916][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.097616][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.107766][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.120382][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.130648][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.142207][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.152134][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.162657][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.174280][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.202362][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.232465][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.232620][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.251245][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.253755][ T3034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.274189][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.292227][ T3034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.300681][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.310002][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.319032][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.359271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.371117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.489604][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.510629][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.571389][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.600773][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.613281][ T3034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.613332][ T3034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.643957][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.697877][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.705822][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.832427][ T367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.863041][ T367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.899648][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.001289][ T26] audit: type=1326 audit(1757684369.662:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4312 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680086aba9 code=0x7ffc0000 [ 71.053910][ T4314] [ 71.056289][ T4314] ====================================================== [ 71.063333][ T4314] WARNING: possible circular locking dependency detected [ 71.070381][ T4314] syzkaller #0 Not tainted [ 71.074810][ T4314] ------------------------------------------------------ [ 71.081848][ T4314] syz.3.8/4314 is trying to acquire lock: [ 71.087594][ T4314] ffff8880745f8b98 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 71.098107][ T4314] [ 71.098107][ T4314] but task is already holding lock: [ 71.105485][ T4314] ffff8880745f8ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 71.114832][ T4314] [ 71.114832][ T4314] which lock already depends on the new lock. [ 71.114832][ T4314] [ 71.125256][ T4314] [ 71.125256][ T4314] the existing dependency chain (in reverse order) is: [ 71.134294][ T4314] [ 71.134294][ T4314] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 71.138421][ T26] audit: type=1326 audit(1757684369.692:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4312 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680086aba9 code=0x7ffc0000 [ 71.142061][ T4314] __mutex_lock_common+0x1eb/0x2390 [ 71.142092][ T4314] mutex_lock_nested+0x17/0x20 [ 71.174965][ T4314] hci_dev_do_close+0x5f/0x1030 [ 71.180371][ T4314] hci_rfkill_set_block+0x10a/0x190 [ 71.186123][ T4314] rfkill_set_block+0x1c6/0x420 [ 71.191524][ T4314] rfkill_fop_write+0x2ed/0x560 [ 71.196924][ T4314] do_iter_write+0x3e4/0x7b0 [ 71.200888][ T26] audit: type=1326 audit(1757684369.692:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4312 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f680086aba9 code=0x7ffc0000 [ 71.202053][ T4314] do_writev+0x254/0x410 [ 71.202076][ T4314] do_syscall_64+0x4c/0xa0 [ 71.233496][ T4314] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 71.239942][ T4314] [ 71.239942][ T4314] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 71.247963][ T4314] __mutex_lock_common+0x1eb/0x2390 [ 71.253711][ T4314] mutex_lock_nested+0x17/0x20 [ 71.259026][ T4314] rfkill_register+0x33/0x8a0 [ 71.264251][ T4314] hci_register_dev+0x452/0x970 [ 71.269632][ T26] audit: type=1326 audit(1757684369.692:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4312 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680086aba9 code=0x7ffc0000 [ 71.269672][ T4314] vhci_create_device+0x32c/0x5c0 [ 71.297179][ T4314] vhci_write+0x391/0x450 [ 71.302064][ T4314] vfs_write+0x712/0xd00 [ 71.306845][ T4314] ksys_write+0x14d/0x250 [ 71.311732][ T4314] do_syscall_64+0x4c/0xa0 [ 71.316683][ T4314] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 71.323126][ T4314] [ 71.323126][ T4314] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 71.325109][ T26] audit: type=1326 audit(1757684369.692:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4312 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680086aba9 code=0x7ffc0000 [ 71.331099][ T4314] __mutex_lock_common+0x1eb/0x2390 [ 71.331125][ T4314] mutex_lock_nested+0x17/0x20 [ 71.331146][ T4314] vhci_send_frame+0x88/0x100 [ 71.369230][ T4314] hci_send_frame+0x1a9/0x2e0 [ 71.374460][ T4314] hci_tx_work+0x9f9/0x1710 [ 71.379511][ T4314] process_one_work+0x863/0x1000 [ 71.384993][ T4314] worker_thread+0xaa8/0x12a0 [ 71.390211][ T4314] kthread+0x436/0x520 [ 71.394822][ T4314] ret_from_fork+0x1f/0x30 [ 71.399785][ T4314] [ 71.399785][ T4314] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 71.409120][ T4314] __lock_acquire+0x2c33/0x7c60 [ 71.414521][ T4314] lock_acquire+0x197/0x3f0 [ 71.419653][ T4314] __flush_work+0xdd/0x1b0 [ 71.424607][ T4314] hci_dev_do_close+0x1e7/0x1030 [ 71.429894][ T26] audit: type=1326 audit(1757684369.692:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4312 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f680086aba9 code=0x7ffc0000 [ 71.430087][ T4314] hci_rfkill_set_block+0x10a/0x190 [ 71.457602][ T4314] rfkill_set_block+0x1c6/0x420 [ 71.462998][ T4314] rfkill_fop_write+0x2ed/0x560 [ 71.468400][ T4314] do_iter_write+0x3e4/0x7b0 [ 71.473535][ T4314] do_writev+0x254/0x410 [ 71.478319][ T4314] do_syscall_64+0x4c/0xa0 [ 71.483272][ T4314] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 71.489722][ T4314] [ 71.489722][ T4314] other info that might help us debug this: [ 71.489722][ T4314] [ 71.499973][ T4314] Chain exists of: [ 71.499973][ T4314] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 71.499973][ T4314] [ 71.502643][ T26] audit: type=1326 audit(1757684369.692:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4312 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680086aba9 code=0x7ffc0000 [ 71.514938][ T4314] Possible unsafe locking scenario: [ 71.514938][ T4314] [ 71.514945][ T4314] CPU0 CPU1 [ 71.514950][ T4314] ---- ---- [ 71.514954][ T4314] lock(&hdev->req_lock); [ 71.514969][ T4314] lock(rfkill_global_mutex); [ 71.514982][ T4314] lock(&hdev->req_lock); [ 71.514995][ T4314] lock((work_completion)(&hdev->tx_work)); [ 71.515009][ T4314] [ 71.515009][ T4314] *** DEADLOCK *** [ 71.515009][ T4314] [ 71.515013][ T4314] 2 locks held by syz.3.8/4314: [ 71.515024][ T4314] #0: ffffffff8d4c0468 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560 [ 71.515079][ T4314] #1: ffff8880745f8ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 71.515126][ T4314] [ 71.515126][ T4314] stack backtrace: [ 71.515147][ T4314] CPU: 0 PID: 4314 Comm: syz.3.8 Not tainted syzkaller #0 [ 71.515165][ T4314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 71.515184][ T4314] Call Trace: [ 71.515190][ T4314] [ 71.515198][ T4314] dump_stack_lvl+0x168/0x230 [ 71.515221][ T4314] ? load_image+0x3b0/0x3b0 [ 71.515242][ T4314] ? show_regs_print_info+0x20/0x20 [ 71.582334][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.588261][ T4314] ? print_circular_bug+0x12b/0x1a0 [ 71.588292][ T4314] check_noncircular+0x274/0x310 [ 71.593185][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.603196][ T4314] ? add_chain_block+0x940/0x940 [ 71.603216][ T4314] ? lockdep_lock+0xdc/0x1e0 [ 71.603240][ T4314] ? mark_lock+0x94/0x320 [ 71.645417][ T26] audit: type=1326 audit(1757684369.692:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4312 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680086aba9 code=0x7ffc0000 [ 71.646985][ T4314] __lock_acquire+0x2c33/0x7c60 [ 71.647021][ T4314] ? lockdep_unlock+0x134/0x2d0 [ 71.662934][ T26] audit: type=1326 audit(1757684369.702:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4312 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f680086aba9 code=0x7ffc0000 [ 71.663005][ T4314] ? lockdep_lock+0x1e0/0x1e0 [ 71.663035][ T4314] ? mark_lock+0x94/0x320 [ 71.682068][ T26] audit: type=1326 audit(1757684369.702:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4312 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680086aba9 code=0x7ffc0000 [ 71.684359][ T4314] ? verify_lock_unused+0x140/0x140 [ 71.763543][ T4304] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 71.777480][ T4314] ? __lock_acquire+0x12d9/0x7c60 [ 71.777528][ T4314] lock_acquire+0x197/0x3f0 [ 71.777550][ T4314] ? __flush_work+0xc1/0x1b0 [ 71.777571][ T4314] ? __mutex_trylock_common+0x14f/0x250 [ 71.777592][ T4314] ? read_lock_is_recursive+0x10/0x10 [ 71.777615][ T4314] ? lock_chain_count+0x20/0x20 [ 71.777634][ T4314] ? mark_lock+0x94/0x320 [ 71.777658][ T4314] __flush_work+0xdd/0x1b0 [ 71.777675][ T4314] ? __flush_work+0xc1/0x1b0 [ 71.777692][ T4314] ? flush_work+0x20/0x20 [ 71.777712][ T4314] ? hci_leds_update_powered+0x148/0x160 [ 71.777738][ T4314] ? rcu_lock_release+0x5/0x20 [ 71.777761][ T4314] ? __lock_acquire+0x7c60/0x7c60 [ 71.777790][ T4314] hci_dev_do_close+0x1e7/0x1030 [ 71.777813][ T4314] ? _raw_spin_unlock+0x40/0x40 [ 71.777838][ T4314] hci_rfkill_set_block+0x10a/0x190 [ 71.777860][ T4314] ? rcu_lock_release+0x20/0x20 [ 71.777881][ T4314] rfkill_set_block+0x1c6/0x420 [ 71.777905][ T4314] rfkill_fop_write+0x2ed/0x560 [ 71.777926][ T4314] ? _copy_from_user+0x111/0x170 [ 71.777947][ T4314] ? rfkill_fop_read+0x4b0/0x4b0 [ 71.777973][ T4314] do_iter_write+0x3e4/0x7b0 [ 71.777999][ T4314] do_writev+0x254/0x410 [ 71.778020][ T4314] ? do_readv+0x3e0/0x3e0 [ 71.778048][ T4314] ? lock_chain_count+0x20/0x20 [ 71.831376][ T4304] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 71.834877][ T4314] ? __secure_computing+0x10d/0x2f0 [ 71.834913][ T4314] do_syscall_64+0x4c/0xa0 [ 71.856017][ T4304] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 71.859583][ T4314] ? clear_bhb_loop+0x30/0x80 [ 71.859610][ T4314] ? clear_bhb_loop+0x30/0x80 [ 71.882261][ T4317] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5'. [ 71.884293][ T4314] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 71.961695][ T4314] RIP: 0033:0x7f680086aba9 [ 71.966138][ T4314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.985774][ T4314] RSP: 002b:00007f67fead2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 71.994219][ T4314] RAX: ffffffffffffffda RBX: 00007f6800ab1fa0 RCX: 00007f680086aba9 [ 72.002213][ T4314] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000004 [ 72.010213][ T4314] RBP: 00007f68008ede19 R08: 0000000000000000 R09: 0000000000000000 [ 72.018198][ T4314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.026184][ T4314] R13: 00007f6800ab2038 R14: 00007f6800ab1fa0 R15: 00007ffeb039f578 [ 72.034175][ T4314] [ 72.037905][ T4324] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1'. [ 72.059056][ T4257] Bluetooth: hci2: command 0x0419 tx timeout [ 72.066556][ T4257] Bluetooth: hci4: command 0x0419 tx timeout [ 72.078241][ T4257] Bluetooth: hci3: command 0x0419 tx timeout [ 72.084478][ T4257] Bluetooth: hci1: command 0x0419 tx timeout [ 72.092811][ T4257] Bluetooth: hci0: command 0x0419 tx timeout [ 72.100765][ T4324] block device autoloading is deprecated and will be removed. [ 72.135761][ T4324] PM: Image not found (code -5) [ 72.145701][ T4317] PM: Image not found (code -5) [ 72.187171][ T4327] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10'. [ 72.226995][ T4327] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 72.248026][ T4327] device veth0_to_team entered promiscuous mode [ 72.289268][ T4327] loop1: detected capacity change from 0 to 512 [ 72.429029][ T4327] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm +}[@: bg 0: block 248: padding at end of block bitmap is not set [ 72.459320][ T4327] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm +}[@: Failed to acquire dquot type 1 [ 72.482288][ T4327] EXT4-fs (loop1): 1 truncate cleaned up [ 72.488227][ T4327] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 72.499577][ T4327] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff)