last executing test programs: 1.663417847s ago: executing program 2 (id=3): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015001f0f"], 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.460359175s ago: executing program 2 (id=6): syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_connect$uac1(0x2, 0xa0, &(0x7f0000000040)={{0x12, 0x1, 0x140, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x6, 0x10, 0x81, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x7, 0x9, 0x8}, @as_header={0x7, 0x24, 0x1, 0x7, 0x1, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x4, 0x0, 0x1}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x9, 0x9, 0x5, "91b40ac3f52d"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x4, 0x1, 0x81, 0x2, "1a"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xed, 0x9, 0x1, {0x7, 0x25, 0x1, 0x3, 0xe, 0x81}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xef, 0x9, 0x0, {0x7, 0x25, 0x1, 0x2, 0xee, 0xbf17}}}}}}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 1.071764641s ago: executing program 0 (id=1): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x6e) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x80000) io_setup(0x42, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000000)='e', 0x3f}]) sendmmsg$alg(r1, &(0x7f0000002280)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000140)="1bb1", 0x2}], 0x1, 0x0, 0x0, 0x4001}], 0x1, 0x80) 734.811763ms ago: executing program 0 (id=7): openat$kvm(0x0, &(0x7f00000000c0), 0x800, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet(0x2, 0x3, 0x141) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000080)) read$FUSE(0xffffffffffffffff, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) openat$rdma_cm(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sched_getparam(r0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) io_setup(0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}]) timer_create(0x0, 0x0, &(0x7f0000000b80)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 464.660537ms ago: executing program 0 (id=8): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/23, 0x17}, 0x8000000}], 0x1, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) pipe2$watch_queue(0x0, 0x80) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, &(0x7f0000000e80)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9ab8eed9ace110469c51f4f211dd9fad815eb5b273ac04e1edc679bcdf0a0d24482de5454be9003cb80714a95e136bb704ee58e707d1e69b3c3a1c2c37f9c0402e14abdeb32086a49aff25e5c0f0131d59b4783316b9fa2c71c51ce76942d5f519145c9e3bf0d4182b4a62970b2ce81d35a7afc8384b387b8e21f2051d90d92323a710cabe5275d335b64453e759251a140de480541d8dd7662a14296a59eba99b95bfdf5b22992c323865b471d13ad79867e2692fd4eece299a81e2b33336b6801f51c2ae8d73e4df90c9bd70cd535b72cbdf67754acdc44b3780450308d9c5527c3314eb7b2cc38b61e96403a30a8ba0c8a357aa04d3c62bc51bcf55cf214f44a909b29c30c18c3a43c86472612086664a80f2aa8490e58352732acb96eb46deab42895d1957a6029ad86e7a5ced6bde89c158aaee721954beeebe5973059007f7dd5459029af6d3f1d73d35f07d19b7cedfc80d1d7ef37f8b113f564afd0f093202929fef43e788619ca522c7f679dd2f27949d879b4dab46581a0e054b4ed1db37e43f528748b56ec5a54b7af198d4ae551046f7814fe3a5cbc1cc7cb6655fc198939b049f3c02443148c588e34d6ebef81096b4e48f468016d2bde0828664c0874d71e2d88b3bc04079d4a504255a83c3f07a4f1c3e5a4c66f55f36e51e344392487c8299d8d1bfb568780c0d57df48990cb5d6b35c3f7445f80312186d8598faf61072d4eefc961fb5a7e72b971c8f94a8346effd27362cee8d72a98b55e317de280d2d63ee83ca7140b7913122d402c536d914c8510c81d08f0ad1c952f5b7ad5e7ef72d7c58cb4d5bafbea535b381df6ebe94c62cf782cf7ab81c017c296a88ca91d641b45748d230cf5e87e5dbee4764ea4d131ae022e6bbf3ffc3ea7b264737d9db44354bfffa63d79bc403d3ac23fb615edc382d18b0daf1bbb2fbd708d1830ddac1c3f098b8cb1ef9a0019d804bf5d953110f12f3b9a8b9b7e0c61cb5d34116add1fc9a92721ffa5fdc83e1488cf88aa6e56ad2dd55e0aadd827cc7b4e7242f01241f49e905e5e7451092c28c3f6560a6a0002e5d91fc253a5a8fd8f27e42f4f02f5849528b7d93df9b0c568022acaff410e797e88d2f8eeadbba66e423335b843df734d203fa62a861b712da8f33d5ea721767871aa2cd53e659e505507de9a54d7e6fa3c20bbfb28cd6dd2b314dabbb59e9ce15c0a94ec3b3efc54eaaa27bd7576a687dcaf58dc182662539943014a02e76dc89f48c9f83cc7199038418f965ad3dc866098b89cabcac8691b0f51ffb71902337e49293309c4480a8f1b32411cc1b55a0ec0fe2c2572fe9d488a25bfc12ba74048e1d7beee93321c7aa49ea17cb9728dc46e5272154b3b995feacbacb8885621b335274af4df9365f8c8121ff323b572d320c8fc46acd6218b9579d43005e7b0506ccb14d9a0dac4cc6efaf5366c44342eaea8b5a11457f5afbea913ce4975ab67e6a85bc46e714ca5741da38a7cceb9e85d77fd03f83f7a5ecc7241e69e2bda327f769b48ba5f13662585c72778d12bd0e9a62a3d0dbe376d1aee81e6845c2cf23f42c458ae5668c8d387bf9ab224bc9703f1c08347be810d2f19278fe8d97560b3c9f1816667d0461a25e778eb1404dcaac1ed0a6a0745f3a5d2dc1b6babf98f5135d531cb26334ef2fec4c78c95b7193935139664fc65f17b047eb3dc39e251ba52ce33f8099719f1a789db1690347355e7b02d4c522692b9597fd31abb90f973ae4eb0bd0d900cdd887ff01d4845d7f0aee39b220a65a5aeee0fd386054070723c841c042d5339cc6325f07f0f733d124c6524f388ef7419f42c06278b8fceaa3a16b202dfb539b129762397e29cdd679ca6240272fa0c3e2e8c0a27aaa407f30b4024d0638dfca1bc9483db3ccc2880f", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 252.914237ms ago: executing program 3 (id=4): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 108.58999ms ago: executing program 0 (id=9): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) socket(0x40000000015, 0x5, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="2015b4000000af3bffec47b17e80e387cfcc84d0151741d901b98a2b2a2d216a15adcd08b0abb0de6076c5a15ccaf4a20799d1f64fa1474ecb36c113625bcc54e1f803f9612b03a82bca"], 0x0, 0x0, 0x0, 0x0, 0x0}) 108.34521ms ago: executing program 4 (id=5): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0xe0) sendfile(r1, r0, &(0x7f0000002700)=0x1, 0x8) landlock_restrict_self(r1, 0x6) 0s ago: executing program 4 (id=10): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220f000000944ac1a1b35aa8257f"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0) ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f0000000040)={0x2, 0x0, 0x6, 0x1000, 0xf, 0x85}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.65' (ED25519) to the list of known hosts. [ 58.384585][ T4171] cgroup: Unknown subsys name 'net' [ 58.489247][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.912776][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.994309][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 62.026749][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 62.123565][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 62.170902][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 62.245237][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.253002][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.261737][ T4181] device bridge_slave_0 entered promiscuous mode [ 62.270436][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.277513][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.285729][ T4193] device bridge_slave_0 entered promiscuous mode [ 62.305057][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.312292][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.320607][ T4181] device bridge_slave_1 entered promiscuous mode [ 62.328041][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.335343][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.343620][ T4193] device bridge_slave_1 entered promiscuous mode [ 62.385309][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 62.405978][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.413305][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.421738][ T4182] device bridge_slave_0 entered promiscuous mode [ 62.441573][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.452642][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.466161][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.473762][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.482097][ T4182] device bridge_slave_1 entered promiscuous mode [ 62.502785][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.513342][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.553517][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.588143][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.611191][ T4193] team0: Port device team_slave_0 added [ 62.619547][ T4181] team0: Port device team_slave_0 added [ 62.625579][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.632841][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.640734][ T4184] device bridge_slave_0 entered promiscuous mode [ 62.660026][ T4193] team0: Port device team_slave_1 added [ 62.667280][ T4181] team0: Port device team_slave_1 added [ 62.676758][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.683959][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.692420][ T4184] device bridge_slave_1 entered promiscuous mode [ 62.735895][ T4182] team0: Port device team_slave_0 added [ 62.764550][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.771662][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.797781][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.818812][ T4182] team0: Port device team_slave_1 added [ 62.824847][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.832320][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.840596][ T4183] device bridge_slave_0 entered promiscuous mode [ 62.848462][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.855686][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.881979][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.893896][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.901224][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.927678][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.940881][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.957980][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.965672][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.977309][ T4183] device bridge_slave_1 entered promiscuous mode [ 62.984716][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.991920][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.017867][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.035022][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.093349][ T4184] team0: Port device team_slave_0 added [ 63.099761][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.106729][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.133138][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.168569][ T4184] team0: Port device team_slave_1 added [ 63.174955][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.182049][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.208075][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.221432][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.245197][ T4181] device hsr_slave_0 entered promiscuous mode [ 63.252439][ T4181] device hsr_slave_1 entered promiscuous mode [ 63.269061][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.281687][ T4193] device hsr_slave_0 entered promiscuous mode [ 63.288534][ T4193] device hsr_slave_1 entered promiscuous mode [ 63.295242][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.303080][ T4193] Cannot create hsr debugfs directory [ 63.326767][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.333994][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.360663][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.410192][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.417172][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.443388][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.480866][ T4182] device hsr_slave_0 entered promiscuous mode [ 63.487934][ T4182] device hsr_slave_1 entered promiscuous mode [ 63.494923][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.502794][ T4182] Cannot create hsr debugfs directory [ 63.514522][ T4183] team0: Port device team_slave_0 added [ 63.548096][ T4183] team0: Port device team_slave_1 added [ 63.625374][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.632633][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.658741][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.673648][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.681818][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 63.688381][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 63.694043][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.720715][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.735041][ T4184] device hsr_slave_0 entered promiscuous mode [ 63.741964][ T4184] device hsr_slave_1 entered promiscuous mode [ 63.748517][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.756156][ T4184] Cannot create hsr debugfs directory [ 63.761718][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 63.769761][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 63.775807][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 63.862649][ T4183] device hsr_slave_0 entered promiscuous mode [ 63.869895][ T4183] device hsr_slave_1 entered promiscuous mode [ 63.876431][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.884218][ T4183] Cannot create hsr debugfs directory [ 63.977635][ T4193] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.011716][ T4193] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.023984][ T4193] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.038539][ T4193] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.146630][ T4182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.158817][ T4182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.176461][ T4182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.186942][ T4182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.271522][ T4181] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.282466][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.289968][ T4181] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.305276][ T4181] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.315359][ T4181] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.338786][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.351964][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.363028][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.393673][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.403615][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.413191][ T3097] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.420531][ T3097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.429045][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.438162][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.447720][ T3097] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.454815][ T3097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.464827][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.474797][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.500940][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.514140][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.542950][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.552634][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.562992][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.577238][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.589195][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.598748][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.607120][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.615786][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.624782][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.641133][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.659246][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.671570][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.699950][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.708687][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.721378][ T3097] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.728523][ T3097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.737874][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.746692][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.756744][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.765816][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.775138][ T3097] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.782246][ T3097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.791930][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.801688][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.810607][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.822170][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.834392][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.844892][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.857101][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.885186][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.916432][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.944891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.959093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.973648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.993437][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.003531][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.012709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.023585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.032678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.041565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.066662][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.074003][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.084543][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.097934][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.118602][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.128901][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.146375][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.154157][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.170330][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.178143][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.215378][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.230362][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.275643][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.285600][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.294940][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.302058][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.311969][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.321038][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.330087][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.337155][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.346593][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.360538][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.380735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.395356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.407569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.422208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.442754][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.482104][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.492344][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.504113][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.514822][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.524222][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.534202][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.543177][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.552084][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.562324][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.570835][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.579023][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.597648][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.611800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.622366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.631792][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.638860][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.646788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.656288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.665592][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.672724][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.682677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.691140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.699682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.707743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.715931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.727850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.735835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.763952][ T4258] Bluetooth: hci4: command 0x041b tx timeout [ 65.767456][ T4193] device veth0_vlan entered promiscuous mode [ 65.776765][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 65.786161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.804540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.819791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.831178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.839620][ T4239] Bluetooth: hci3: command 0x041b tx timeout [ 65.841735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.845746][ T4239] Bluetooth: hci2: command 0x041b tx timeout [ 65.860128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.875844][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.883816][ T4239] Bluetooth: hci1: command 0x041b tx timeout [ 65.896028][ T4193] device veth1_vlan entered promiscuous mode [ 65.912576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.926018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.935180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.946201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.954754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.964044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.974118][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.985978][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.011927][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.048321][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.071088][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.079115][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.098918][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.108436][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.117504][ T4259] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.124668][ T4259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.135306][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.181346][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.190750][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.200698][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.208149][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.216710][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.225907][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.235979][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.244848][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.258060][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.265198][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.277068][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.297943][ T4193] device veth0_macvtap entered promiscuous mode [ 66.315781][ T4182] device veth0_vlan entered promiscuous mode [ 66.330729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.345711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.371344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.381352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.406208][ T4193] device veth1_macvtap entered promiscuous mode [ 66.423832][ T4182] device veth1_vlan entered promiscuous mode [ 66.441330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.456781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.467032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.483156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.497643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.508517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.525302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.535269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.560148][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.568261][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.580551][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.619259][ T4182] device veth0_macvtap entered promiscuous mode [ 66.628392][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.646037][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.658883][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.670767][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.680804][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.689181][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.698296][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.706140][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.714419][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.724672][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.740597][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.748541][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.760831][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.773810][ T4182] device veth1_macvtap entered promiscuous mode [ 66.784606][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.798902][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.808387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.823153][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.837454][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.855948][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.874114][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.889922][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.919382][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.928905][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.947451][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.957636][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.973246][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.984639][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.993767][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.003638][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.018900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.028948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.042793][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.054334][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.065991][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.096457][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.105699][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.115077][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.126686][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.144372][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.153413][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.162496][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.171498][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.199128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.208886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.218854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.227981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.268249][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.283769][ T4181] device veth0_vlan entered promiscuous mode [ 67.309246][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.318409][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.326779][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.335418][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.349263][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.357312][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.373596][ T4184] device veth0_vlan entered promiscuous mode [ 67.391644][ T4184] device veth1_vlan entered promiscuous mode [ 67.410647][ T4181] device veth1_vlan entered promiscuous mode [ 67.467506][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.477317][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.486032][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.495048][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.503250][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.512231][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.524680][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.536842][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.582153][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.597674][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.605594][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.614938][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.623826][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.636852][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.645806][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.655283][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.664286][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.672495][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.684285][ T4183] device veth0_vlan entered promiscuous mode [ 67.696267][ T4181] device veth0_macvtap entered promiscuous mode [ 67.706753][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.715597][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.724660][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.743099][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.756459][ T4183] device veth1_vlan entered promiscuous mode [ 67.761397][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.775473][ T4184] device veth0_macvtap entered promiscuous mode [ 67.786820][ T4184] device veth1_macvtap entered promiscuous mode [ 67.809663][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.823380][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.837687][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.840249][ T4258] Bluetooth: hci4: command 0x040f tx timeout [ 67.846453][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 67.859154][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.874534][ T4181] device veth1_macvtap entered promiscuous mode [ 67.923487][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.935336][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 67.942098][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 67.948192][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 67.954287][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.967809][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.978667][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.994820][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.024307][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.044439][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.059865][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.072934][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.085696][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.096930][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.101208][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.114709][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.122117][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.131571][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.144591][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.162651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.173216][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.185089][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.200216][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.211270][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.223137][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.233919][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.244642][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.255689][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.277879][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.295146][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.308881][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.317997][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.328017][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.342320][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.356540][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.372294][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.383577][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.395834][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.410760][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.424312][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.436549][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.454789][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.473008][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.484847][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.498827][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.508415][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.520244][ T4183] device veth0_macvtap entered promiscuous mode [ 68.528604][ T4181] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.542808][ T4181] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.552389][ T4181] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.562372][ T4181] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.591629][ T4183] device veth1_macvtap entered promiscuous mode [ 68.641541][ T4239] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 68.688537][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.700466][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.710975][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.722274][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.732268][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.746498][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.757032][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.767953][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.780742][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.796045][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.805219][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.816609][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.826610][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.842203][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.855574][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.867524][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.881955][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.896048][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.910135][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.925521][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.938327][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.955598][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.987424][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.001245][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.034059][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.046500][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.060544][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.077821][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.091589][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.101846][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.131653][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.179751][ T4239] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 69.226696][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.239927][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.248634][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.257965][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.265581][ T4239] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.277457][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.286250][ T4239] usb 3-1: Product: syz [ 69.294846][ T4239] usb 3-1: Manufacturer: syz [ 69.306812][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.308431][ T4239] usb 3-1: SerialNumber: syz [ 69.340832][ T4259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.348808][ T4259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.404510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.427862][ T4307] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 69.446587][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.488748][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.538991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.565604][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.602989][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.623566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.626448][ T4293] udc-core: couldn't find an available UDC or it's busy [ 69.663983][ T4293] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 69.692950][ T4199] Bluetooth: hci4: Unknown advertising packet type: 0xffff [ 69.693552][ T4199] ================================================================== [ 69.709037][ T4199] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12c0/0x3b80 [ 69.716922][ T4199] Read of size 1 at addr ffff88807d97740a by task kworker/u5:8/4199 [ 69.724921][ T4199] [ 69.727277][ T4199] CPU: 0 PID: 4199 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 69.734839][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 69.744938][ T4199] Workqueue: hci4 hci_rx_work [ 69.749697][ T4199] Call Trace: [ 69.752992][ T4199] [ 69.755944][ T4199] dump_stack_lvl+0x168/0x230 [ 69.760641][ T4199] ? show_regs_print_info+0x20/0x20 [ 69.765857][ T4199] ? load_image+0x3b0/0x3b0 [ 69.770387][ T4199] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 69.775790][ T4199] print_address_description+0x60/0x2d0 [ 69.781378][ T4199] ? hci_le_meta_evt+0x12c0/0x3b80 [ 69.786511][ T4199] kasan_report+0xdf/0x130 [ 69.790986][ T4199] ? hci_le_meta_evt+0x12c0/0x3b80 [ 69.796133][ T4199] hci_le_meta_evt+0x12c0/0x3b80 [ 69.801129][ T4199] ? hci_event_packet+0x2b0/0x12f0 [ 69.806278][ T4199] ? hci_remote_host_features_evt+0x280/0x280 [ 69.812371][ T4199] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 69.818042][ T4199] ? mark_lock+0x94/0x320 [ 69.822396][ T4199] ? mutex_unlock+0x10/0x10 [ 69.826924][ T4199] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 69.832934][ T4199] ? lock_chain_count+0x20/0x20 [ 69.837839][ T4199] ? __rwlock_init+0x140/0x140 [ 69.842637][ T4199] hci_event_packet+0xe05/0x12f0 [ 69.847601][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 69.852832][ T4199] ? rcu_lock_release+0x20/0x20 [ 69.857737][ T4199] ? hci_send_to_monitor+0x9c/0x4a0 [ 69.862970][ T4199] hci_rx_work+0x255/0xa10 [ 69.867428][ T4199] process_one_work+0x863/0x1000 [ 69.872414][ T4199] ? worker_detach_from_pool+0x240/0x240 [ 69.878069][ T4199] ? lockdep_hardirqs_off+0x70/0x100 [ 69.883391][ T4199] ? _raw_spin_lock_irq+0xab/0xe0 [ 69.888460][ T4199] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 69.893871][ T4199] ? wq_worker_running+0x97/0x170 [ 69.898926][ T4199] worker_thread+0xaa8/0x12a0 [ 69.903636][ T4199] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 69.909635][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 69.914864][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 69.920099][ T4199] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 69.926031][ T4199] kthread+0x436/0x520 [ 69.930144][ T4199] ? rcu_lock_release+0x20/0x20 [ 69.935025][ T4199] ? kthread_blkcg+0xd0/0xd0 [ 69.939646][ T4199] ret_from_fork+0x1f/0x30 [ 69.944106][ T4199] [ 69.947144][ T4199] [ 69.949484][ T4199] Allocated by task 4293: [ 69.953823][ T4199] __kasan_kmalloc+0xb5/0xf0 [ 69.958472][ T4199] __alloc_skb+0x22c/0x750 [ 69.962922][ T4199] vhci_write+0xbc/0x450 [ 69.967190][ T4199] vfs_write+0x712/0xd00 [ 69.971462][ T4199] ksys_write+0x14d/0x250 [ 69.975833][ T4199] do_syscall_64+0x4c/0xa0 [ 69.980280][ T4199] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 69.986216][ T4199] [ 69.988565][ T4199] The buggy address belongs to the object at ffff88807d977000 [ 69.988565][ T4199] which belongs to the cache kmalloc-1k of size 1024 [ 70.002640][ T4199] The buggy address is located 10 bytes to the right of [ 70.002640][ T4199] 1024-byte region [ffff88807d977000, ffff88807d977400) [ 70.016477][ T4199] The buggy address belongs to the page: [ 70.022142][ T4199] page:ffffea0001f65c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d970 [ 70.032326][ T4199] head:ffffea0001f65c00 order:3 compound_mapcount:0 compound_pincount:0 [ 70.040688][ T4199] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 70.048722][ T4199] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888016841dc0 [ 70.057343][ T4199] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 70.065948][ T4199] page dumped because: kasan: bad access detected [ 70.072399][ T4199] page_owner tracks the page as allocated [ 70.078127][ T4199] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 4259, ts 69681889207, free_ts 69618938304 [ 70.096564][ T4199] get_page_from_freelist+0x1b77/0x1c60 [ 70.102142][ T4199] __alloc_pages+0x1e1/0x470 [ 70.106761][ T4199] new_slab+0xc0/0x4b0 [ 70.110854][ T4199] ___slab_alloc+0x81e/0xdf0 [ 70.115477][ T4199] __kmalloc+0x1cd/0x330 [ 70.119736][ T4199] ieee802_11_parse_elems_crc+0xab/0x10c0 [ 70.125478][ T4199] ieee80211_ibss_rx_queued_mgmt+0x369/0x29c0 [ 70.131577][ T4199] ieee80211_iface_work+0x70e/0xc60 [ 70.136809][ T4199] process_one_work+0x863/0x1000 [ 70.141772][ T4199] worker_thread+0xaa8/0x12a0 [ 70.146469][ T4199] kthread+0x436/0x520 [ 70.150551][ T4199] ret_from_fork+0x1f/0x30 [ 70.154988][ T4199] page last free stack trace: [ 70.159666][ T4199] free_unref_page_prepare+0x637/0x6c0 [ 70.165152][ T4199] free_unref_page+0x94/0x280 [ 70.169856][ T4199] __unfreeze_partials+0x1a5/0x200 [ 70.174993][ T4199] put_cpu_partial+0x12d/0x190 [ 70.179784][ T4199] qlist_free_all+0x35/0x90 [ 70.184306][ T4199] kasan_quarantine_reduce+0x150/0x160 [ 70.189789][ T4199] __kasan_slab_alloc+0x2f/0xd0 [ 70.194708][ T4199] slab_post_alloc_hook+0x4c/0x380 [ 70.199852][ T4199] kmem_cache_alloc_trace+0x103/0x2a0 [ 70.205254][ T4199] kernfs_fop_open+0x3da/0xbf0 [ 70.210047][ T4199] do_dentry_open+0x7ff/0xf80 [ 70.214751][ T4199] path_openat+0x2682/0x2f30 [ 70.219371][ T4199] do_filp_open+0x1b3/0x3e0 [ 70.223895][ T4199] do_sys_openat2+0x142/0x4a0 [ 70.228604][ T4199] __x64_sys_openat+0x135/0x160 [ 70.233477][ T4199] do_syscall_64+0x4c/0xa0 [ 70.237916][ T4199] [ 70.240259][ T4199] Memory state around the buggy address: [ 70.245914][ T4199] ffff88807d977300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 70.253995][ T4199] ffff88807d977380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 70.262075][ T4199] >ffff88807d977400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 70.270147][ T4199] ^ [ 70.274495][ T4199] ffff88807d977480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 70.282572][ T4199] ffff88807d977500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 70.290647][ T4199] ================================================================== [ 70.298723][ T4199] Disabling lock debugging due to kernel taint [ 70.317316][ T4232] Bluetooth: hci0: command 0x0419 tx timeout [ 70.326044][ T4199] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 70.333283][ T4199] CPU: 0 PID: 4199 Comm: kworker/u5:8 Tainted: G B syzkaller #0 [ 70.342250][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 70.352333][ T4199] Workqueue: hci4 hci_rx_work [ 70.357048][ T4199] Call Trace: [ 70.360346][ T4199] [ 70.363337][ T4199] dump_stack_lvl+0x168/0x230 [ 70.368062][ T4199] ? show_regs_print_info+0x20/0x20 [ 70.373286][ T4199] ? load_image+0x3b0/0x3b0 [ 70.377839][ T4199] panic+0x2c9/0x7f0 [ 70.381755][ T4199] ? bpf_jit_dump+0xd0/0xd0 [ 70.386279][ T4199] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 70.392215][ T4199] ? _raw_spin_unlock+0x40/0x40 [ 70.397090][ T4199] ? hci_le_meta_evt+0x12c0/0x3b80 [ 70.402229][ T4199] check_panic_on_warn+0x80/0xa0 [ 70.407194][ T4199] ? hci_le_meta_evt+0x12c0/0x3b80 [ 70.412335][ T4199] end_report+0x6d/0xf0 [ 70.416512][ T4199] kasan_report+0x102/0x130 [ 70.421037][ T4199] ? hci_le_meta_evt+0x12c0/0x3b80 [ 70.426168][ T4199] hci_le_meta_evt+0x12c0/0x3b80 [ 70.431126][ T4199] ? hci_event_packet+0x2b0/0x12f0 [ 70.436258][ T4199] ? hci_remote_host_features_evt+0x280/0x280 [ 70.442371][ T4199] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 70.448033][ T4199] ? mark_lock+0x94/0x320 [ 70.452394][ T4199] ? mutex_unlock+0x10/0x10 [ 70.456928][ T4199] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 70.462929][ T4199] ? lock_chain_count+0x20/0x20 [ 70.467814][ T4199] ? __rwlock_init+0x140/0x140 [ 70.472615][ T4199] hci_event_packet+0xe05/0x12f0 [ 70.477574][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 70.482801][ T4199] ? rcu_lock_release+0x20/0x20 [ 70.487684][ T4199] ? hci_send_to_monitor+0x9c/0x4a0 [ 70.493014][ T4199] hci_rx_work+0x255/0xa10 [ 70.497470][ T4199] process_one_work+0x863/0x1000 [ 70.502446][ T4199] ? worker_detach_from_pool+0x240/0x240 [ 70.508108][ T4199] ? lockdep_hardirqs_off+0x70/0x100 [ 70.513424][ T4199] ? _raw_spin_lock_irq+0xab/0xe0 [ 70.518478][ T4199] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 70.523876][ T4199] ? wq_worker_running+0x97/0x170 [ 70.528933][ T4199] worker_thread+0xaa8/0x12a0 [ 70.533635][ T4199] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 70.539582][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 70.544828][ T4199] ? lockdep_hardirqs_on+0x94/0x140 [ 70.550067][ T4199] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 70.556076][ T4199] kthread+0x436/0x520 [ 70.560296][ T4199] ? rcu_lock_release+0x20/0x20 [ 70.565179][ T4199] ? kthread_blkcg+0xd0/0xd0 [ 70.569788][ T4199] ret_from_fork+0x1f/0x30 [ 70.574234][ T4199] [ 70.577575][ T4199] Kernel Offset: disabled [ 70.581920][ T4199] Rebooting in 86400 seconds..