last executing test programs: 5.490581414s ago: executing program 2 (id=6): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 5.368870734s ago: executing program 2 (id=7): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) close(0x3) 5.345114324s ago: executing program 2 (id=8): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x5e, 0x0, 0xee01}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4050) 5.312655253s ago: executing program 2 (id=9): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x2}, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000540)="1d54b8e953e9af43aa84936b86dd", 0x36, 0x4000004, &(0x7f00000004c0)={0x11, 0x7, r2, 0x1, 0xb0, 0x6, @broadcast}, 0x14) 5.256452843s ago: executing program 2 (id=10): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[], 0x398}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 4.509975831s ago: executing program 2 (id=11): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0xfe) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x8) 2.050299605s ago: executing program 1 (id=27): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="5c00000014006b03000000d86e6c1d000a8440fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4) 1.863026754s ago: executing program 1 (id=30): r0 = socket(0x15, 0x5, 0x0) lsetxattr(0x0, 0x0, 0x0, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockopt(r0, 0x200000000114, 0x2711, &(0x7f0000032580)=""/102396, &(0x7f0000000000)=0x18ffc) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 1.781903174s ago: executing program 1 (id=31): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x1966cd75, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x641, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff122]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000380)={&(0x7f0000001000)}, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@migrate={0x50, 0x21, 0xd39, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x20}, @in=@dev={0xac, 0x14, 0x14, 0x30}, 0x0, 0x0, 0x3, 0xfffd, 0x2, 0x0, 0x0, 0x2c}}}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_io_uring_setup(0x36c1, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)) write$input_event(r0, &(0x7f0000000000)={{0x77359400}}, 0xfe4f) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(cbc-blowfish-asm)\x00'}, 0x58) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000044}, 0x4) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) 1.654655744s ago: executing program 4 (id=35): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10041, 0x0) 1.566520754s ago: executing program 4 (id=36): r0 = io_uring_setup(0x2d2a, &(0x7f0000000140)={0x0, 0x4, 0x40, 0x4, 0x376}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0x0, 0x2, 0x0, @rand_addr, @multicast1=0xe0000300}, @address_request}}}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.531581353s ago: executing program 4 (id=37): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1.479805373s ago: executing program 1 (id=39): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 1.235676423s ago: executing program 0 (id=44): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r1) 1.235013043s ago: executing program 0 (id=45): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000180)=r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[], 0xffdd) 1.165986292s ago: executing program 3 (id=47): syz_emit_vhci(&(0x7f00000004c0)=@HCI_SCODATA_PKT={0x3, {0x0, 0x5}, "54ccc3b92e"}, 0x9) 1.121679782s ago: executing program 3 (id=48): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x2c) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000180)="b971") ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000180)) 1.017934942s ago: executing program 0 (id=49): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_RECEIVE(r0, 0xc0386106, &(0x7f00000000c0)={0x38d800000000000, 0xfffffffffffffffb, 0x101, 0x4, 0x8009, 0x0, "3dfe00", 0x4, 0x6, 0x7, 0xf5, 0x7, 0x7, 0x3}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000180)={0x0, 0x54485746, 0x1, @stepwise={0x4, 0xbd, 0x9, 0x5, 0xb, 0x7}}) prlimit64(0x0, 0xb, &(0x7f0000000240)={0x0, 0x6}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x38011, r1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendfile(r2, r1, 0x0, 0x7ffff000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0x14, 0x31, 0x10b, 0x70bd2c, 0x25dedbfc}, 0x14}}, 0x20000000) timer_create(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x2bc}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, 0x0, 0x0) recvmsg(r4, 0x0, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x6}}]}]}]}, 0x48}}, 0x88) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = add_key$user(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000480), &(0x7f0000000600)={'syz', 0x0}, &(0x7f0000000900)="618548dfe09b43a8110c2038caeadb06a55cfc5effafac735a2763a3d8a5cb114f97b2f1d3fc2449c2761533ad51d969e6607d8d7e024484279e14e0c3be3c3f300a17ba5aff802f425c537e0238c8af6b5d7b67804a3e44393d35ec38ae4baa776b8bc4e340419fa75312911102", 0x6e, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) r8 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(0x0, 0x0, 0x0, 0x0, r8) keyctl$KEYCTL_MOVE(0x1e, r7, 0xffffffffffffffff, r8, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000a00)={r5, r6, r7}, &(0x7f0000000a40)=""/98, 0x62, &(0x7f0000000b00)={&(0x7f0000000ac0)={'sha1-ni\x00'}}) 1.017752822s ago: executing program 3 (id=50): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x1966cd75, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x641, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff122]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000380)={&(0x7f0000001000)}, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@migrate={0x50, 0x21, 0xd39, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x20}, @in=@dev={0xac, 0x14, 0x14, 0x30}, 0x0, 0x0, 0x3, 0xfffd, 0x2, 0x0, 0x0, 0x2c}}}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_io_uring_setup(0x36c1, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)) write$input_event(r0, &(0x7f0000000000)={{0x77359400}}, 0xfe4f) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(cbc-blowfish-asm)\x00'}, 0x58) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000044}, 0x4) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) 906.401032ms ago: executing program 3 (id=51): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000003c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000700)="09268a60fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88ff4f90b1a7511bf746bec66ba1fe92e8615fc3f7af9c3310b39cc2dc3616dcdfaebc65ca325fd99357ed9d11b266a7c88", 0x65, 0x40040, 0x0, 0x0) 896.794242ms ago: executing program 4 (id=52): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x34, r1, 0x1, 0x70bd27, 0x25ffdbff, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x4) 810.195572ms ago: executing program 3 (id=53): socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x70bd2d, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 730.134542ms ago: executing program 0 (id=54): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x7fe, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0xf}, 0x4) 679.056341ms ago: executing program 4 (id=55): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000']) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000638877fb7f0200017f020001be3e7d2a", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 678.644311ms ago: executing program 1 (id=56): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r1) 608.004221ms ago: executing program 3 (id=57): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a80)=@newlink={0x28, 0x10, 0x801, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x29914}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 607.881261ms ago: executing program 0 (id=58): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 574.625121ms ago: executing program 1 (id=59): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}]]}, 0x24}}, 0x0) 429.26293ms ago: executing program 4 (id=60): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYRES64], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r0, &(0x7f0000000680)="cdf1a7a5871f26ee5a6b40b3c301fb5b38fbd005a0087e1e3a89c04a12db1fa2cc8e7fc57c54f35ac289796a4a0cb3d26fd8ec0fdcd3448265ccc9bfc8bd9cea4e6be82ef06c8accb36cb75e1654a8a6e40503f107", 0x55) 0s ago: executing program 0 (id=61): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1d0d"], 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.137' (ED25519) to the list of known hosts. [ 43.146296][ T4013] cgroup: Unknown subsys name 'net' [ 43.420635][ T4013] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.778086][ T4013] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 45.246301][ T4028] chnl_net:caif_netlink_parms(): no params data found [ 45.274011][ T4023] chnl_net:caif_netlink_parms(): no params data found [ 45.393833][ T4034] chnl_net:caif_netlink_parms(): no params data found [ 45.414272][ T4028] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.416488][ T4028] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.419061][ T4028] device bridge_slave_0 entered promiscuous mode [ 45.429355][ T4028] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.431218][ T4028] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.434019][ T4028] device bridge_slave_1 entered promiscuous mode [ 45.443936][ T4024] chnl_net:caif_netlink_parms(): no params data found [ 45.448894][ T4023] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.451020][ T4023] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.453855][ T4023] device bridge_slave_0 entered promiscuous mode [ 45.457749][ T4023] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.459658][ T4023] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.462356][ T4023] device bridge_slave_1 entered promiscuous mode [ 45.508884][ T4033] chnl_net:caif_netlink_parms(): no params data found [ 45.532725][ T4028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.540174][ T4023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.560225][ T4028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.573478][ T4023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.582990][ T4034] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.585433][ T4034] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.587967][ T4034] device bridge_slave_0 entered promiscuous mode [ 45.618597][ T4034] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.620687][ T4034] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.623347][ T4034] device bridge_slave_1 entered promiscuous mode [ 45.639208][ T4024] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.641091][ T4024] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.643978][ T4024] device bridge_slave_0 entered promiscuous mode [ 45.655608][ T4023] team0: Port device team_slave_0 added [ 45.675824][ T4028] team0: Port device team_slave_0 added [ 45.678138][ T4024] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.680200][ T4024] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.682989][ T4024] device bridge_slave_1 entered promiscuous mode [ 45.693206][ T4023] team0: Port device team_slave_1 added [ 45.708657][ T4028] team0: Port device team_slave_1 added [ 45.736347][ T4034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.740752][ T4034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.761178][ T4023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.763305][ T4023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.771415][ T4023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.776279][ T4033] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.778374][ T4033] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.780920][ T4033] device bridge_slave_0 entered promiscuous mode [ 45.803913][ T4024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.807439][ T4023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.809406][ T4023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.822606][ T4023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.826758][ T4033] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.828724][ T4033] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.831565][ T4033] device bridge_slave_1 entered promiscuous mode [ 45.846890][ T4028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.848976][ T4028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.856405][ T4028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.862724][ T4024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.881592][ T4034] team0: Port device team_slave_0 added [ 45.884062][ T4028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.886149][ T4028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.892809][ T4028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.904129][ T4024] team0: Port device team_slave_0 added [ 45.908660][ T4024] team0: Port device team_slave_1 added [ 45.923882][ T4034] team0: Port device team_slave_1 added [ 45.943493][ T4033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.981303][ T4033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.984969][ T4034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.986994][ T4034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.993772][ T4034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.998991][ T4034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.000962][ T4034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.008648][ T4034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.012602][ T4024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.015138][ T4024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.022043][ T4024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.054767][ T4024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.056686][ T4024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.063906][ T4024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.127040][ T4023] device hsr_slave_0 entered promiscuous mode [ 46.195086][ T4023] device hsr_slave_1 entered promiscuous mode [ 46.276673][ T4028] device hsr_slave_0 entered promiscuous mode [ 46.315130][ T4028] device hsr_slave_1 entered promiscuous mode [ 46.354684][ T4028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.356911][ T4028] Cannot create hsr debugfs directory [ 46.382108][ T4033] team0: Port device team_slave_0 added [ 46.418879][ T4033] team0: Port device team_slave_1 added [ 46.506799][ T4034] device hsr_slave_0 entered promiscuous mode [ 46.544857][ T4034] device hsr_slave_1 entered promiscuous mode [ 46.604560][ T4034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.606881][ T4034] Cannot create hsr debugfs directory [ 46.656547][ T4024] device hsr_slave_0 entered promiscuous mode [ 46.694868][ T4024] device hsr_slave_1 entered promiscuous mode [ 46.754659][ T4024] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.756814][ T4024] Cannot create hsr debugfs directory [ 46.769359][ T4033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.771333][ T4033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.778296][ T4033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.799977][ T4033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.801901][ T4033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.809359][ T4033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.995166][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 46.996538][ T4033] device hsr_slave_0 entered promiscuous mode [ 46.997650][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 47.000461][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 47.004941][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 47.035436][ T4033] device hsr_slave_1 entered promiscuous mode [ 47.074598][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 47.076536][ T4033] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.078483][ T4033] Cannot create hsr debugfs directory [ 47.202192][ T4023] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.256635][ T4023] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.315925][ T4023] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.370956][ T4023] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.435838][ T4028] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.496618][ T4028] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.542883][ T4028] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.606641][ T4028] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.701720][ T4034] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.747738][ T4034] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.786816][ T4034] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.836929][ T4034] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.962573][ T4033] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 47.980267][ T4023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.998508][ T4033] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 48.046696][ T4033] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 48.103285][ T4024] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.172753][ T4023] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.179027][ T4033] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 48.220231][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.223673][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.226971][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.229684][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.233768][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.235872][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.239439][ T4024] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.267144][ T4024] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.309382][ T4028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.311462][ T4024] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.363708][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.373375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.376834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.379291][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.381171][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.394504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.411749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.428017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.431545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.435843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.455833][ T4028] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.457910][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.460828][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.463689][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.468545][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.472412][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.476847][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.492612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.496571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.499241][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.501024][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.509392][ T4023] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.513147][ T4023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.521138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.523933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.528633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.543434][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.547271][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.549855][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.551646][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.561464][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.596442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.602365][ T4034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.619479][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.622881][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.632548][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.651450][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.654295][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.666100][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.668791][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.671337][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.673837][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.682030][ T4034] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.696189][ T4028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.698983][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.701477][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.704009][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.707961][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.710825][ T1882] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.712975][ T1882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.716552][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.719184][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.721706][ T1882] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.723548][ T1882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.732708][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.757489][ T4033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.760135][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.763005][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.779967][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.781996][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.800266][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.803271][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.807796][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.811248][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.817687][ T4023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.821279][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.831061][ T4033] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.859870][ T4024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.861780][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.867171][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.869750][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.871534][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.878572][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.881433][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.884196][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.887608][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.889396][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.893228][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.898223][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.909178][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.925020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.927870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.930647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.938320][ T4024] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.946293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.948816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.952055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.954076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.958409][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.961080][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.963662][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.965738][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.972540][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.979095][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.982253][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.998867][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.001580][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.004217][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.009319][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.012205][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.025039][ T4028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.030810][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.035949][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.038599][ T1882] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.040599][ T1882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.043137][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.049698][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.052656][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.056829][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.059541][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.061837][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.068438][ T4023] device veth0_vlan entered promiscuous mode [ 49.074957][ T1961] Bluetooth: hci4: command 0x041b tx timeout [ 49.076620][ T1961] Bluetooth: hci0: command 0x041b tx timeout [ 49.078266][ T1961] Bluetooth: hci1: command 0x041b tx timeout [ 49.079963][ T1961] Bluetooth: hci2: command 0x041b tx timeout [ 49.088522][ T4034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.092230][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.095773][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.098677][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.101319][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.104021][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.108228][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.113383][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.119576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.122196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.140773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.143849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.155098][ T1961] Bluetooth: hci3: command 0x041b tx timeout [ 49.166883][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.169652][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.173746][ T4023] device veth1_vlan entered promiscuous mode [ 49.186623][ T4033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.192437][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.200908][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.203828][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.207912][ T4024] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.240667][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.243476][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.248132][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.302255][ T1634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.305136][ T1634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.309261][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.311960][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.320217][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.322766][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.332518][ T4023] device veth0_macvtap entered promiscuous mode [ 49.338679][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.341435][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.345536][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.360100][ T4034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.375227][ T4023] device veth1_macvtap entered promiscuous mode [ 49.378951][ T4028] device veth0_vlan entered promiscuous mode [ 49.419436][ T4028] device veth1_vlan entered promiscuous mode [ 49.422410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.426691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.429305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.432129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.442340][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.462601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.465539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.467790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.470540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.480874][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.487353][ T4023] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.489570][ T4023] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.491907][ T4023] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.494226][ T4023] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.507242][ T4024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.511790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.514690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.517439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.519807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.533147][ T4028] device veth0_macvtap entered promiscuous mode [ 49.541054][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.543556][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.552824][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.556526][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.560390][ T4034] device veth0_vlan entered promiscuous mode [ 49.562762][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.568470][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.571044][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.576259][ T4028] device veth1_macvtap entered promiscuous mode [ 49.583241][ T4033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.603450][ T4034] device veth1_vlan entered promiscuous mode [ 49.650569][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.653340][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.658636][ T4028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.671840][ T1634] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.674667][ T1634] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.677216][ T1634] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.680032][ T1634] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.682606][ T1634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.710378][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.713109][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.719425][ T4028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.723183][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.730563][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.733168][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.737073][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.739846][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.742524][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.752379][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.756355][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.758818][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.761028][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.781860][ T4024] device veth0_vlan entered promiscuous mode [ 49.787067][ T4028] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.789255][ T4028] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.791371][ T4028] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.793579][ T4028] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.805492][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.807506][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.820023][ T4034] device veth0_macvtap entered promiscuous mode [ 49.822937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.827122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.843819][ T4024] device veth1_vlan entered promiscuous mode [ 49.864957][ T4034] device veth1_macvtap entered promiscuous mode [ 49.883210][ T304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.886962][ T304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.903294][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.908911][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.911516][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.915778][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.932971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.937722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.983799][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.988293][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.990872][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.993632][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.000112][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.010757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.013568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.022091][ T4024] device veth0_macvtap entered promiscuous mode [ 50.032663][ T4024] device veth1_macvtap entered promiscuous mode [ 50.045517][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.048440][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.068499][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.071220][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.073932][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.079504][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.084131][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.108482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.111252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.113979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.125802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.128556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.131217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.141172][ T4033] device veth0_vlan entered promiscuous mode [ 50.156408][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.158568][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.165055][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.167794][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.170810][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.184027][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.187881][ T1882] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.193428][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.198632][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.201328][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.203999][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.210402][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.226701][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.229572][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.231943][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.265544][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.268109][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.270463][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.274207][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.290836][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.293552][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.297179][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.300404][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.327559][ T4034] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.329907][ T4034] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.332082][ T4034] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.353720][ T4034] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.361954][ T4024] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.364285][ T4024] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.368319][ T4024] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.370688][ T4024] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.391776][ T1634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.394098][ T1634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.401016][ T4033] device veth1_vlan entered promiscuous mode [ 50.423964][ T1634] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.428877][ T1634] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.492605][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.731761][ T4033] device veth0_macvtap entered promiscuous mode [ 50.795656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.798702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.818885][ T4033] device veth1_macvtap entered promiscuous mode [ 50.876615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.879651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.043352][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.046523][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.048374][ T1634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.051968][ T1634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.076128][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.079742][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.082544][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.114774][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.117693][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.120570][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.141436][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.162940][ T1634] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.167074][ T1634] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.169832][ T1634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.172659][ T4116] Bluetooth: hci2: command 0x040f tx timeout [ 51.175758][ T304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.177889][ T304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.181074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.188727][ T4116] Bluetooth: hci1: command 0x040f tx timeout [ 51.192176][ T4116] Bluetooth: hci0: command 0x040f tx timeout [ 51.194804][ T4116] Bluetooth: hci4: command 0x040f tx timeout [ 51.211986][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.224389][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.233513][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.237245][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 51.239855][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.242469][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.245910][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.248405][ T4033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.251175][ T4033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.268425][ T1634] Bluetooth: hci5: Frame reassembly failed (-84) [ 51.270142][ T1634] Bluetooth: hci5: Frame reassembly failed (-84) [ 51.277093][ T4033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.286244][ T4027] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 51.311243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.314068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.357601][ T1634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.359908][ T1634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.363101][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.376978][ T4033] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.381208][ T4033] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.383424][ T4033] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.394845][ T4033] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.402461][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.411154][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.414769][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.621204][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.640369][ T1882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.642634][ T1882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.648101][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.650908][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.653950][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.828716][ T4027] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 51.831601][ T4027] CPU: 0 PID: 4027 Comm: kworker/u5:2 Not tainted 5.15.177-syzkaller #0 [ 51.833657][ T4027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 51.836251][ T4027] Workqueue: hci3 hci_rx_work [ 51.837558][ T4027] Call trace: [ 51.838428][ T4027] dump_backtrace+0x0/0x530 [ 51.839663][ T4027] show_stack+0x2c/0x3c [ 51.840769][ T4027] dump_stack_lvl+0x108/0x170 [ 51.841867][ T4027] dump_stack+0x1c/0x58 [ 51.842741][ T4027] sysfs_create_dir_ns+0x278/0x318 [ 51.844058][ T4027] kobject_add_internal+0x384/0x8f0 [ 51.845429][ T4027] kobject_add+0x14c/0x21c [ 51.846614][ T4027] device_add+0x400/0xef4 [ 51.847776][ T4027] hci_conn_add_sysfs+0xc4/0x1cc [ 51.849165][ T4027] le_conn_complete_evt+0x954/0x1228 [ 51.850547][ T4027] hci_le_meta_evt+0x234/0x31c0 [ 51.851768][ T4027] hci_event_packet+0xd34/0x12b4 [ 51.853007][ T4027] hci_rx_work+0x1d0/0x830 [ 51.853986][ T4027] process_one_work+0x790/0x11b8 [ 51.855295][ T4027] worker_thread+0x910/0x1034 [ 51.856489][ T4027] kthread+0x37c/0x45c [ 51.857547][ T4027] ret_from_fork+0x10/0x20 [ 51.861951][ T4027] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 51.866936][ T4027] Bluetooth: hci3: failed to register connection device [ 52.112717][ T4173] syz.4.14 uses obsolete (PF_INET,SOCK_PACKET) [ 53.235757][ T4116] Bluetooth: hci4: command 0x0419 tx timeout [ 53.237523][ T4116] Bluetooth: hci0: command 0x0419 tx timeout [ 53.240146][ T4116] Bluetooth: hci1: command 0x0419 tx timeout [ 53.241693][ T4116] Bluetooth: hci2: command 0x0419 tx timeout [ 53.314938][ T4116] Bluetooth: hci5: command 0x1003 tx timeout [ 53.316607][ T4116] Bluetooth: hci3: command 0x0419 tx timeout [ 53.316700][ T4032] Bluetooth: hci5: sending frame failed (-49) [ 53.490008][ T4233] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 53.898020][ T4260] input: syz0 as /devices/virtual/input/input2 [ 53.997764][ T4268] input: syz0 as /devices/virtual/input/input3 [ 54.014477][ T4248] could not allocate digest TFM handle sha1-ni [ 54.136884][ T4275] udc-core: couldn't find an available UDC or it's busy [ 54.147687][ T4275] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 54.157011][ T4277] udc-core: couldn't find an available UDC or it's busy [ 54.162420][ T4277] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 54.386908][ T4277] udc-core: couldn't find an available UDC or it's busy [ 54.389022][ T4277] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 54.420952][ T4295] device syzkaller0 entered promiscuous mode [ 54.432059][ T13] syzkaller0: tun_net_xmit 48 [ 54.443599][ T4032] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 54.446163][ T4295] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 54.584863][ T4302] input: syz0 as /devices/virtual/input/input4 [ 54.800076][ T4304] could not allocate digest TFM handle sha1-ni [ 54.928473][ T4317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.55'. [ 55.080528][ T4321] device lo entered promiscuous mode [ 55.099207][ T4321] device tunl0 entered promiscuous mode [ 55.114996][ T4321] device gre0 entered promiscuous mode [ 55.181125][ T4327] udc-core: couldn't find an available UDC or it's busy [ 55.185396][ T4327] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 55.210575][ T4321] device gretap0 entered promiscuous mode [ 55.233738][ T4321] device erspan0 entered promiscuous mode [ 55.273095][ T4321] device ip_vti0 entered promiscuous mode [ 55.291084][ T4321] device ip6_vti0 entered promiscuous mode [ 55.332330][ T4321] device sit0 entered promiscuous mode [ 55.366080][ T4321] device ip6tnl0 entered promiscuous mode [ 55.386664][ T4321] device ip6gre0 entered promiscuous mode [ 55.468391][ T4069] Bluetooth: hci5: command 0x1001 tx timeout [ 55.470010][ T4032] Bluetooth: hci5: sending frame failed (-49) [ 55.472862][ T4321] device syz_tun entered promiscuous mode [ 55.492696][ T4321] device ip6gretap0 entered promiscuous mode [ 55.512374][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.515157][ T4321] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.518820][ T4321] device bridge0 entered promiscuous mode [ 55.550757][ T4321] device vcan0 entered promiscuous mode [ 55.569497][ T4321] device bond0 entered promiscuous mode [ 55.570930][ T4321] device bond_slave_0 entered promiscuous mode [ 55.572731][ T4321] device bond_slave_1 entered promiscuous mode [ 55.588103][ T4032] ================================================================== [ 55.590268][ T4032] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0xde8/0x31c0 [ 55.591964][ T4032] Read of size 1 at addr ffff0000d5131e04 by task kworker/u5:4/4032 [ 55.594065][ T4032] [ 55.594692][ T4032] CPU: 1 PID: 4032 Comm: kworker/u5:4 Not tainted 5.15.177-syzkaller #0 [ 55.597037][ T4032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 55.599675][ T4032] Workqueue: hci2 hci_rx_work [ 55.600923][ T4032] Call trace: [ 55.601749][ T4032] dump_backtrace+0x0/0x530 [ 55.602951][ T4032] show_stack+0x2c/0x3c [ 55.604069][ T4032] dump_stack_lvl+0x108/0x170 [ 55.605464][ T4032] print_address_description+0x7c/0x3f0 [ 55.606988][ T4032] kasan_report+0x174/0x1e4 [ 55.608263][ T4032] __asan_report_load1_noabort+0x44/0x50 [ 55.609754][ T4032] hci_le_meta_evt+0xde8/0x31c0 [ 55.611019][ T4032] hci_event_packet+0xd34/0x12b4 [ 55.612414][ T4032] hci_rx_work+0x1d0/0x830 [ 55.613597][ T4032] process_one_work+0x790/0x11b8 [ 55.614869][ T4032] worker_thread+0x910/0x1034 [ 55.616114][ T4032] kthread+0x37c/0x45c [ 55.617167][ T4032] ret_from_fork+0x10/0x20 [ 55.618425][ T4032] [ 55.619004][ T4032] Allocated by task 4330: [ 55.620119][ T4032] ____kasan_kmalloc+0xbc/0xfc [ 55.621379][ T4032] __kasan_kmalloc+0x10/0x1c [ 55.622530][ T4032] __kmalloc_node_track_caller+0x234/0x448 [ 55.624003][ T4032] kmalloc_reserve+0xe8/0x270 [ 55.625071][ T4032] __alloc_skb+0x1a4/0x584 [ 55.626185][ T4032] vhci_write+0xb8/0x3b8 [ 55.627255][ T4032] vfs_write+0x884/0xb44 [ 55.628325][ T4032] ksys_write+0x15c/0x26c [ 55.629514][ T4032] __arm64_sys_write+0x7c/0x90 [ 55.630829][ T4032] invoke_syscall+0x98/0x2b8 [ 55.631861][ T4032] el0_svc_common+0x138/0x258 [ 55.633057][ T4032] do_el0_svc+0x58/0x14c [ 55.634145][ T4032] el0_svc+0x7c/0x1f0 [ 55.635227][ T4032] el0t_64_sync_handler+0x84/0xe4 [ 55.636558][ T4032] el0t_64_sync+0x1a0/0x1a4 [ 55.637784][ T4032] [ 55.638466][ T4032] The buggy address belongs to the object at ffff0000d5131c00 [ 55.638466][ T4032] which belongs to the cache kmalloc-512 of size 512 [ 55.642433][ T4032] The buggy address is located 4 bytes to the right of [ 55.642433][ T4032] 512-byte region [ffff0000d5131c00, ffff0000d5131e00) [ 55.646368][ T4032] The buggy address belongs to the page: [ 55.648002][ T4032] page:00000000fa80f15f refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x115130 [ 55.650811][ T4032] head:00000000fa80f15f order:2 compound_mapcount:0 compound_pincount:0 [ 55.653018][ T4032] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 55.655268][ T4032] raw: 05ffc00000010200 fffffc00034f0900 0000000400000004 ffff0000c0002600 [ 55.657616][ T4032] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 55.660130][ T4032] page dumped because: kasan: bad access detected [ 55.662247][ T4032] [ 55.662868][ T4032] Memory state around the buggy address: [ 55.664425][ T4032] ffff0000d5131d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 55.666432][ T4032] ffff0000d5131d80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 55.668634][ T4032] >ffff0000d5131e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 55.670946][ T4032] ^ [ 55.672285][ T4032] ffff0000d5131e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 55.674555][ T4032] ffff0000d5131f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 55.676813][ T4032] ================================================================== [ 55.679001][ T4032] Disabling lock debugging due to kernel taint [ 55.682058][ T4321] device team0 entered promiscuous mode [ 55.683533][ T4321] device team_slave_0 entered promiscuous mode [ 55.687193][ T4321] device team_slave_1 entered promiscuous mode [ 55.700386][ T4321] device dummy0 entered promiscuous mode [ 55.706212][ T4321] device nlmon0 entered promiscuous mode [ 55.721325][ T4321] device caif0 entered promiscuous mode [ 55.727597][ T4321] device batadv0 entered promiscuous mode [ 55.737276][ T4321] device vxcan0 entered promiscuous mode [ 55.741259][ T4321] device vxcan1 entered promiscuous mode [ 55.755334][ T4321] device veth0 entered promiscuous mode [ 55.769687][ T4321] device veth1 entered promiscuous mode [ 55.844966][ T4321] device wg0 entered promiscuous mode [ 55.944658][ T4321] device wg1 entered promiscuous mode [ 56.034757][ T4321] device wg2 entered promiscuous mode [ 56.047249][ T4321] device veth0_to_bridge entered promiscuous mode [ 56.076081][ T4321] device veth1_to_bridge entered promiscuous mode [ 56.106088][ T4321] device veth0_to_bond entered promiscuous mode [ 56.129503][ T4321] device veth1_to_bond entered promiscuous mode [ 56.154086][ T4321] device veth0_to_team entered promiscuous mode [ 56.182547][ T4321] device veth1_to_team entered promiscuous mode [ 56.211826][ T4321] device veth0_to_batadv entered promiscuous mode [ 56.216197][ T4321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.231216][ T4321] device batadv_slave_0 entered promiscuous mode [ 56.248549][ T4321] device veth1_to_batadv entered promiscuous mode [ 56.252949][ T4321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.258863][ T4321] device batadv_slave_1 entered promiscuous mode [ 56.277437][ T4321] device xfrm0 entered promiscuous mode [ 56.285848][ T4321] device veth0_to_hsr entered promiscuous mode [ 56.295954][ T4321] device veth1_to_hsr entered promiscuous mode [ 56.316023][ T4321] device hsr0 entered promiscuous mode [ 56.331520][ T4321] device veth1_virt_wifi entered promiscuous mode [ 56.343505][ T4321] device veth0_virt_wifi entered promiscuous mode [ 56.351510][ T4321] device virt_wifi0 entered promiscuous mode [ 56.382118][ T4321] device vlan0 entered promiscuous mode [ 56.384138][ T4321] device vlan1 entered promiscuous mode [ 56.424607][ T4321] device macvlan0 entered promiscuous mode [ 56.484602][ T4321] device macvlan1 entered promiscuous mode [ 56.489100][ T4321] device ipvlan0 entered promiscuous mode [ 56.490864][ T4321] device ipvlan1 entered promiscuous mode [ 56.574530][ T4321] device macvtap0 entered promiscuous mode [ 56.592111][ T4321] device macsec0 entered promiscuous mode [ 56.634648][ T4321] device geneve0 entered promiscuous mode [ 56.645368][ T4321] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.647764][ T4321] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.650287][ T4321] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.652609][ T4321] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.694529][ T4321] device geneve1 entered promiscuous mode [ 56.711523][ T4321] device netdevsim0 entered promiscuous mode [ 56.724913][ T4321] device netdevsim1 entered promiscuous mode [ 56.737602][ T4321] device netdevsim2 entered promiscuous mode [ 56.749639][ T4321] device netdevsim3 entered promiscuous mode [ 56.815849][ T4321] device wlan0 entered promiscuous mode [ 56.865568][ T4321] device wlan1 entered promiscuous mode [ 57.477349][ T4070] Bluetooth: hci5: command 0x1009 tx timeout